From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ralf Braga Subject: Re: PPTP Date: Tue, 28 Oct 2003 15:08:39 -0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <3F9EA297.6010800@4linux.com.br> References: <7C9884991ADAE0479C14F10C858BCDF5122E89@alderaan.smgtec.com> Reply-To: ralf@4linux.com.br Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: Daniel Chemko Cc: netfilter@lists.netfilter.org Thanks. Ralf Braga Daniel Chemko wrote: >I don't remember FreeSwan having PPTP, but if it does then great. Are you = sure it isn't L2TP that the clients are connecting with? > >Anyways, you will have to modify your kernel with Patch-O-Matic from the N= etfilter CVS repository, and grab the userspace tools just in case you need= to use those ones with your newly created kernel. The support for PPTP is = still rather experimental. I haven't had problems with their latest code th= ough. > >Apply any patches in Patch-O-Matic that apply to pptp and GRE. >Recompile kernel >Build Userspace tools from CVS >Reboot ># depmod ># modprobe ip_conntrack_proto_gre ># modprobe ip_conntrack_pptp ># modprobe ip_nat_proto_gre ># modprobe ip_nat_pptp > > >Ideally, this should allow for multiple PPTP clients through your firewall= at the same time. > > >-----Original Message----- >From: Ralf Braga [mailto:ralf@4linux.com.br]=20 >Sent: Tuesday, October 28, 2003 8:37 AM >To: netfilter@lists.netfilter.org >Subject: PPTP > >Hi Friends, > >A have a Gateway Gnu/Linux, Debian 3.0 rc1 with kernel 2.4.22, iptables=20 >1.2.8-8 and freeswan 2.02 in S=E3o Paulo and i have another Linux in=20 >Rio-de-Janeiro with Red-Hat 6.2, ipchains and the path-pptp. Clients in=20 >S=E3o Paulo have to conect in Rio-de-Janeiro throught PPTP and the problem= =20 >its that the Server in Rio accepts only one connection. > >In my Firewall here in S=E3o Paulo i'm put only one rule just to do the te= sts: > >iptables -t nat -A POSTROUTING -j MASQUERADE > >The chains in my FIREWALL are ACCEPT > >Have I enable any rule or patch in kernel ? > >I would like to know whats going on, cause the server in RIO just ACCEPT=20 >one connection. There is something that should i do? ... rules... path=20 >in my kernel..... > > > >Thank you very much > > > > > > > =20 >