* PPTP/IPSec multiple clients behind iptables NAT
2005-09-22 19:25 ` Alexey Toptygin
@ 2005-09-23 1:57 ` Salim
0 siblings, 0 replies; 5+ messages in thread
From: Salim @ 2005-09-23 1:57 UTC (permalink / raw)
To: netfilter
I am using iptables 1.3.3
I had some problems with multiple clients behind NAT(a simple MASQUERADE
rule is set) connecting to the same VPN server. ONly one client can connect
at a time.
I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE options
in kernel.
I have read a few posts about this issue in the list from as early as in
2003. But could not find a conclusion.
Could you guys please clarify? Is this scenario supported by iptables? If
not, is there a way to get around this issue?
thanks
Salim
^ permalink raw reply [flat|nested] 5+ messages in thread
* RE: PPTP/IPSec multiple clients behind iptables NAT
@ 2005-09-23 2:03 Gary W. Smith
2005-09-23 2:23 ` Salim
0 siblings, 1 reply; 5+ messages in thread
From: Gary W. Smith @ 2005-09-23 2:03 UTC (permalink / raw)
To: Salim, netfilter
PPTP requires a patching of the kernel and a recompile of the kernel and
iptables (against the new kernel headers) to make this work. It also
matters which kernel version you are using. There have been
miscellaneous problems with different kernels report. I believe many
have been fixed though.
Gary Smith
> -----Original Message-----
> From: netfilter-bounces@lists.netfilter.org [mailto:netfilter-
> bounces@lists.netfilter.org] On Behalf Of Salim
> Sent: Thursday, September 22, 2005 6:58 PM
> To: netfilter@lists.netfilter.org
> Subject: PPTP/IPSec multiple clients behind iptables NAT
>
> I am using iptables 1.3.3
>
> I had some problems with multiple clients behind NAT(a simple
MASQUERADE
> rule is set) connecting to the same VPN server. ONly one client can
> connect
> at a time.
> I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE
options
> in kernel.
>
> I have read a few posts about this issue in the list from as early as
in
> 2003. But could not find a conclusion.
>
> Could you guys please clarify? Is this scenario supported by iptables?
If
> not, is there a way to get around this issue?
>
> thanks
> Salim
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* RE: PPTP/IPSec multiple clients behind iptables NAT
@ 2005-09-23 2:23 Gary W. Smith
2005-09-23 9:46 ` Salim
0 siblings, 1 reply; 5+ messages in thread
From: Gary W. Smith @ 2005-09-23 2:23 UTC (permalink / raw)
To: Salim, netfilter
You need to down patch-o-matic but the problem is that RH 2.4 kernel is
a hybrid kernel (uses much of 2.6 in it). I am running the patch on
RHES 4.
Gary
> -----Original Message-----
> From: Salim [mailto:salim.si@askey.com.tw]
> Sent: Thursday, September 22, 2005 7:24 PM
> To: Gary W. Smith; netfilter@lists.netfilter.org
> Subject: Re: PPTP/IPSec multiple clients behind iptables NAT
>
> Thanks Gary.
>
> My kernel is Red Hat 2.4.25.
> Could you please give more details about the patch?
>
> ----- Original Message -----
> From: "Gary W. Smith" <gary@primeexalia.com>
> To: "Salim" <salim.si@askey.com.tw>; <netfilter@lists.netfilter.org>
> Sent: Friday, September 23, 2005 10:03 AM
> Subject: RE: PPTP/IPSec multiple clients behind iptables NAT
>
>
> PPTP requires a patching of the kernel and a recompile of the kernel
and
> iptables (against the new kernel headers) to make this work. It also
> matters which kernel version you are using. There have been
> miscellaneous problems with different kernels report. I believe many
> have been fixed though.
>
> Gary Smith
>
> > -----Original Message-----
> > From: netfilter-bounces@lists.netfilter.org [mailto:netfilter-
> > bounces@lists.netfilter.org] On Behalf Of Salim
> > Sent: Thursday, September 22, 2005 6:58 PM
> > To: netfilter@lists.netfilter.org
> > Subject: PPTP/IPSec multiple clients behind iptables NAT
> >
> > I am using iptables 1.3.3
> >
> > I had some problems with multiple clients behind NAT(a simple
> MASQUERADE
> > rule is set) connecting to the same VPN server. ONly one client can
> > connect
> > at a time.
> > I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE
> options
> > in kernel.
> >
> > I have read a few posts about this issue in the list from as early
as
> in
> > 2003. But could not find a conclusion.
> >
> > Could you guys please clarify? Is this scenario supported by
iptables?
> If
> > not, is there a way to get around this issue?
> >
> > thanks
> > Salim
> >
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: PPTP/IPSec multiple clients behind iptables NAT
2005-09-23 2:03 PPTP/IPSec multiple clients behind iptables NAT Gary W. Smith
@ 2005-09-23 2:23 ` Salim
0 siblings, 0 replies; 5+ messages in thread
From: Salim @ 2005-09-23 2:23 UTC (permalink / raw)
To: Gary W. Smith, netfilter
Thanks Gary.
My kernel is Red Hat 2.4.25.
Could you please give more details about the patch?
----- Original Message -----
From: "Gary W. Smith" <gary@primeexalia.com>
To: "Salim" <salim.si@askey.com.tw>; <netfilter@lists.netfilter.org>
Sent: Friday, September 23, 2005 10:03 AM
Subject: RE: PPTP/IPSec multiple clients behind iptables NAT
PPTP requires a patching of the kernel and a recompile of the kernel and
iptables (against the new kernel headers) to make this work. It also
matters which kernel version you are using. There have been
miscellaneous problems with different kernels report. I believe many
have been fixed though.
Gary Smith
> -----Original Message-----
> From: netfilter-bounces@lists.netfilter.org [mailto:netfilter-
> bounces@lists.netfilter.org] On Behalf Of Salim
> Sent: Thursday, September 22, 2005 6:58 PM
> To: netfilter@lists.netfilter.org
> Subject: PPTP/IPSec multiple clients behind iptables NAT
>
> I am using iptables 1.3.3
>
> I had some problems with multiple clients behind NAT(a simple
MASQUERADE
> rule is set) connecting to the same VPN server. ONly one client can
> connect
> at a time.
> I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE
options
> in kernel.
>
> I have read a few posts about this issue in the list from as early as
in
> 2003. But could not find a conclusion.
>
> Could you guys please clarify? Is this scenario supported by iptables?
If
> not, is there a way to get around this issue?
>
> thanks
> Salim
>
^ permalink raw reply [flat|nested] 5+ messages in thread
* Re: PPTP/IPSec multiple clients behind iptables NAT
2005-09-23 2:23 Gary W. Smith
@ 2005-09-23 9:46 ` Salim
0 siblings, 0 replies; 5+ messages in thread
From: Salim @ 2005-09-23 9:46 UTC (permalink / raw)
To: Gary W. Smith, netfilter
PPTP multiple client passthrough is working now, with the patch. Thatz
great.
IPSec do not have any patch for NAT, it seems. Any info on how to go about
that?
----- Original Message -----
From: "Gary W. Smith" <gary@primeexalia.com>
To: "Salim" <salim.si@askey.com.tw>; <netfilter@lists.netfilter.org>
Sent: Friday, September 23, 2005 10:23 AM
Subject: RE: PPTP/IPSec multiple clients behind iptables NAT
You need to down patch-o-matic but the problem is that RH 2.4 kernel is
a hybrid kernel (uses much of 2.6 in it). I am running the patch on
RHES 4.
Gary
> -----Original Message-----
> From: Salim [mailto:salim.si@askey.com.tw]
> Sent: Thursday, September 22, 2005 7:24 PM
> To: Gary W. Smith; netfilter@lists.netfilter.org
> Subject: Re: PPTP/IPSec multiple clients behind iptables NAT
>
> Thanks Gary.
>
> My kernel is Red Hat 2.4.25.
> Could you please give more details about the patch?
>
> ----- Original Message -----
> From: "Gary W. Smith" <gary@primeexalia.com>
> To: "Salim" <salim.si@askey.com.tw>; <netfilter@lists.netfilter.org>
> Sent: Friday, September 23, 2005 10:03 AM
> Subject: RE: PPTP/IPSec multiple clients behind iptables NAT
>
>
> PPTP requires a patching of the kernel and a recompile of the kernel
and
> iptables (against the new kernel headers) to make this work. It also
> matters which kernel version you are using. There have been
> miscellaneous problems with different kernels report. I believe many
> have been fixed though.
>
> Gary Smith
>
> > -----Original Message-----
> > From: netfilter-bounces@lists.netfilter.org [mailto:netfilter-
> > bounces@lists.netfilter.org] On Behalf Of Salim
> > Sent: Thursday, September 22, 2005 6:58 PM
> > To: netfilter@lists.netfilter.org
> > Subject: PPTP/IPSec multiple clients behind iptables NAT
> >
> > I am using iptables 1.3.3
> >
> > I had some problems with multiple clients behind NAT(a simple
> MASQUERADE
> > rule is set) connecting to the same VPN server. ONly one client can
> > connect
> > at a time.
> > I have enables the CONFIG_IP_NF_PPTP and CONFIG_IP_NF_CT_PROTO_GRE
> options
> > in kernel.
> >
> > I have read a few posts about this issue in the list from as early
as
> in
> > 2003. But could not find a conclusion.
> >
> > Could you guys please clarify? Is this scenario supported by
iptables?
> If
> > not, is there a way to get around this issue?
> >
> > thanks
> > Salim
> >
^ permalink raw reply [flat|nested] 5+ messages in thread
end of thread, other threads:[~2005-09-23 9:46 UTC | newest]
Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-09-23 2:03 PPTP/IPSec multiple clients behind iptables NAT Gary W. Smith
2005-09-23 2:23 ` Salim
-- strict thread matches above, loose matches on Subject: below --
2005-09-23 2:23 Gary W. Smith
2005-09-23 9:46 ` Salim
2005-09-22 3:29 raw packet capture based on offset colorchip
2005-09-22 19:25 ` Alexey Toptygin
2005-09-23 1:57 ` PPTP/IPSec multiple clients behind iptables NAT Salim
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox