RE: PPTP through masquerading gateway

["Aldo S. Lagana" <alagana@discmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1642 bytes --]

I am in the process of using that module to allow 'outgoing' from behind
a Linux firewall - which is a little different than your situation.  
 
I have gotten the POM module to patch cleanly against 2.4.16 with
iptables 1.2.5,  now I just need to get that test box out on the wire to
give it a go...
 
I'l let you know if my scenario works out...

-----Original Message-----
From: Rowan Reid [mailto:rreid@studio3arc.com] 
Sent: Monday, July 08, 2002 4:54 PM
To: 'Aldo S. Lagana'; 'Marc Riddle'; netfilter@lists.samba.org
Subject: RE: PPTP through masquerading gateway


 
 
I've been trying to get this to work. with no luck. I've used the POM
module which fails everytime I try to patch my kernel 2.4.4 and up
no luck even on a freshly downloaded kernel. other patches work but pptp
does not. I tried another patch which patched my 2.4.18 kernel
but all my connections fail to make it to my server.  I woudl love to
talk to at least one person who HAS gotten this to work.
 



Are you using the POM ip_conntrack_pptp module (or compiled into
kernel)?
 
I am fairly sure that NAT of any type 'breaks' PPTP connections, and the
above module is needed for you to NAT the PPTP connections...

-----Original Message-----
From: netfilter-admin@lists.samba.org
[mailto:netfilter-admin@lists.samba.org] On Behalf Of Marc Riddle
Sent: Monday, July 08, 2002 2:17 PM
To: netfilter@lists.samba.org
Subject: PPTP through masquerading gateway


iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE

iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to
10.1.1.15

iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15

  


[-- Attachment #2: Type: text/html, Size: 4285 bytes --]