HELP PPTP CONNTRACK MULTIPLE CLIENTS

HELP PPTP CONNTRACK MULTIPLE CLIENTS

[Adharsh Praveen R]

Hai 

I am trying to get PPTP conntrack to work, but with no luck.

I tried with POM's pptp-conntrack-nat.patch (by Harald).

Every time I try to apply the patch it fails.

Finally some how I managed to apply the patch on my 2.4.18 kernel. I

use iptables-1.2.6a.

I have my PPTP server (192.168.1.219) internal to my LAN (eth0) and
clients in a different network.

I have a linux box where I applied the patch with IP address on one
interface

eth0  as 192.168.1.76 and another interface eth1  as 192.168.9.10.

I have two clients (Win 95) with their IP address as 192.168.9.1 and
other's

as 192.168.9.2.

The default gateway for these clients is set to 192.168.9.10.

I added a simple rule in my Linux box

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

From clients I am able to ping the other networks. ( I am able to ping
192.168.1.219).

When I tried to establish a pptp connection from 192.168.9.1 to
192.168.1.219.

The connection got established and client logged into the network.

The problem aroused here. when I tried from the second client
192.168.9.2 to

establish a pptp connection it failed. At any instant only one
connection is getting

established.

So thought the patch is no good so I downloaded a patch from

http://www.impsec.org/linux/masquerade/ip_masq_vpn.html

which is netfilter-pptp-2.4.17-rev2.patch.

when I tried to apply this patch it applied cleanly.

Now I tried the above mentioned setup again.

Again its the same case. I am not able to connect the second client.

At any instant only one client is getting connected.

I am caught in this loop.

I saw a patch in December's list from Philip.

I would like to know the steps involved in getting PPTP conntrack work.

Which patch I should apply first, is it the one from netfilter.org
pptp-conntrack-nat.patch?

When can I apply the patch given by philip?

What are the iptable rules I should add?

please guide me. I want to connect multiple PPTP clients.

Please explain the steps involved in this as I am a new to iptables /
conntrack.

Thanks in advance.

regards,
adharsh.

Re: HELP PPTP CONNTRACK MULTIPLE CLIENTS

[Ilguiz Latypov]

Adharsh,

Philip has posted a patch to the netfilter patch-o-matic PPTP patch.  The
latter seems to apply well against the stock Linux kernel 2.4.20 from
kernel.org.  All it takes is patching the netfilter patch first, then
running the POM runme script with the extra parameter.

The PoPToP server itself may need a modification with regard to call ID
allocation, see

http://sourceforge.net/tracker/index.php?func=detail&aid=648880&group_id=44827&atid=441003

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117

On Thu, 5 Dec 2002, Adharsh Praveen R wrote:


> I saw a patch in December's list from Philip.
>
> I would like to know the steps involved in getting PPTP conntrack work.
>
> Which patch I should apply first, is it the one from netfilter.org
> pptp-conntrack-nat.patch?