From: Rowan Reid <rreid@studio3arc.com>
To: 'John York' <john@logihost.com>, netfilter@lists.netfilter.org
Subject: RE: Windows VPN server behind iptables
Date: Fri, 17 Jan 2003 08:45:45 -0800 [thread overview]
Message-ID: <000e01c2be47$e1eb60d0$6601a8c0@s3ac> (raw)
In-Reply-To: <000e01c2bdd0$2314d410$0200a8c0@loaner>
>
> I set up my first IPtables box, doing NAT and port
> forwarding. I've managed to Google most of the kinks out, but
> this one perplexes me. There is a Win2K VPN server behind the
> firewall, using PPTP. It will accept connections, but chokes
> before accepting the username/password. The most I've been
> able to figure out is that it has something to do with protocol 47.
>
> All other forwards (HTTP, HTTPS, POP, SMTP, Telnet) work
> fine. Any ideas?
I tried to do exactly what yoru doing, I'll explain where I am. In
order to support pptp traffic you have to support protocol 47, and allow
traffic forwarding on tcp port 1723. seems simple enough ..... Err no
trick is netfilter doesn't nativly support pptp traffic. The two options
you have are to get the latest POM and apply the pptp Nat patches. There
is also another patch available below. Let me know if yo uget it to
work. I gave up and went with an IPSEC implimentation which is just as
much a pain in the ass
http://www.impsec.org/linux/masquerade/ip_masq_vpn.html
prev parent reply other threads:[~2003-01-17 16:45 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-01-17 2:27 Windows VPN server behind iptables John York
2003-01-17 6:53 ` John York
2003-01-17 16:45 ` Rowan Reid [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='000e01c2be47$e1eb60d0$6601a8c0@s3ac' \
--to=rreid@studio3arc.com \
--cc=john@logihost.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox