From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Marc Riddle" Subject: PPTP through masquerading gateway Date: Mon, 8 Jul 2002 11:16:40 -0700 Sender: netfilter-admin@lists.samba.org Message-ID: <001a01c226ab$9b5e3220$d4524b42@winxp> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0017_01C22670.EECCFF80" Return-path: Errors-To: netfilter-admin@lists.samba.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.samba.org This is a multi-part message in MIME format. ------=_NextPart_000_0017_01C22670.EECCFF80 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable I have read everything I can find on the subject and can't seem to find = a working solution anywhere. I have an NT 4.0 server running a PPTP = server inside a private network that is connected to the internet via a = linux 2.4 box running ip masquerading using iptables. the masquerading = works fine for clients to get out, but I'm trying to enable external = connections in to the PPTP server. currently I have the following rules = set up, as far as I can tell they should work, but I am unable to = establish a connection. The PPTP server is running on 10.1.1.15, and I = am able to connect to it from inside the router so I know that it is = running fine. I've been banging my head against a desk for about a week = now and nothing I've tried seems to work. Any advice would be greatly = appreciated. Thanks in advance. Oh yeah, currently the rules below are = the only rules set up for testing, so no incoming packets are being = filtered that I know of. Thanks again, Marc Riddle iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to = 10.1.1.15 iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15 ------=_NextPart_000_0017_01C22670.EECCFF80 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
I have read everything I can find = on the=20 subject and can't seem to find a working solution anywhere. I have an NT = 4.0=20 server running a PPTP server inside a private network that is connected = to the=20 internet via a linux 2.4 box running ip masquerading using iptables. the = masquerading works fine for clients to get out, but I'm trying to enable = external connections in to the PPTP server. currently I have the = following rules=20 set up, as far as I can tell they should work, but I am unable to = establish a=20 connection. The PPTP server is running on 10.1.1.15, and I am able to = connect to=20 it from inside the router so I know that it is running fine. I've been = banging=20 my head against a desk for about a week now and nothing I've tried seems = to=20 work. Any advice would be greatly appreciated. Thanks in advance. Oh = yeah,=20 currently the rules below are the only rules set up for testing, so no = incoming=20 packets are being filtered that I know of.
 
Thanks again,
 
Marc Riddle
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat -A PREROUTING -i ppp0 -p tcp --dport 1723 -j DNAT --to =
10.1.1.15
iptables -t nat -A PREROUTING -i ppp0 -p 47 -j DNAT --to 10.1.1.15
------=_NextPart_000_0017_01C22670.EECCFF80--