I am in the process of using that module to allow 'outgoing' from behind a Linux firewall - which is a little different than your situation. I have gotten the POM module to patch cleanly against 2.4.16 with iptables 1.2.5, now I just need to get that test box out on the wire to give it a go... I'l let you know if my scenario works out... -----Original Message----- From: Rowan Reid [mailto:rreid@studio3arc.com] Sent: Monday, July 08, 2002 4:54 PM To: 'Aldo S. Lagana'; 'Marc Riddle'; netfilter@lists.samba.org Subject: RE: PPTP through masquerading gateway I've been trying to get this to work. with no luck. I've used the POM module which fails everytime I try to patch my kernel 2.4.4 and up no luck even on a freshly downloaded kernel. other patches work but pptp does not. I tried another patch which patched my 2.4.18 kernel but all my connections fail to make it to my server. I woudl love to talk to at least one person who HAS gotten this to work. Are you using the POM ip_conntrack_pptp module (or compiled into kernel)? I am fairly sure that NAT of any type 'breaks' PPTP connections, and the above module is needed for you to NAT the PPTP connections... -----Original Message----- From: netfilter-admin@lists.samba.org [mailto:netfilter-admin@lists.samba.org] On Behalf Of Marc Riddle Sent: Monday, July 08, 2002 2:17 PM To: netfilter@lists.samba.org Subject: PPTP through masquerading gateway iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to 10.1.1.15 iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15