From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Linux" Subject: IPtables redirect rules Date: Mon, 12 May 2003 17:24:39 -0300 Sender: netfilter-admin@lists.netfilter.org Message-ID: <00ee01c318c4$8616be80$0a00a8c0@sic.local> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00E9_01C318AB.5E65A5E0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Netfilter/IPTables Mailing List This is a multi-part message in MIME format. ------=_NextPart_000_00E9_01C318AB.5E65A5E0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi, I have a Linux Firewall (MY GATEWAY) doing NAT for a LAN with the IP = 192.168.0.x and I have a Windows 2000 Server as a file server. I would = like to do a VPN, but with Win2K. So I want to redirect all VPN requests = from the linux machine to my Win2K server. How can I do that? Thanks, Charles ------=_NextPart_000_00E9_01C318AB.5E65A5E0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi,

I have a Linux Firewall (MY = GATEWAY) doing NAT=20 for a LAN with the IP 192.168.0.x and I have a Windows 2000 Server = as a=20 file server. I would like to do a VPN, but with Win2K. So I want to = redirect all=20 VPN requests from the linux machine to my Win2K server. How can I do=20 that?

Thanks,

Charles

------=_NextPart_000_00E9_01C318AB.5E65A5E0-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Rob Sterenborg" Subject: RE: IPtables redirect rules Date: Mon, 12 May 2003 23:05:14 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <000201c318ca$2f0e69c0$0401000a@sterenborg.info> References: <00ee01c318c4$8616be80$0a00a8c0@sic.local> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <00ee01c318c4$8616be80$0a00a8c0@sic.local> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: 'Netfilter/IPTables Mailing List' > VPN, but with Win2K. So I want to redirect all VPN=20 > requests from the linux machine to my Win2K server.=20 > How can I do that? Patch the kernel with the latest patch-o-matic. You need the pptp conntrack and nat modules. Configure the kernel so that you get the pptp conntrack and nat modules, then compile and install it. Make sure you load the modules when you rebooted and everything goes well. The iptables rules : iptables -P FORWARD DROP iptables -A FORWARD -i -d \ -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i -d \ -p gre -j ACCEPT iptables -A FORWARD -i -d \ -p tcp --dport 1723 -j ACCEPT iptables -t nat -A PREROUTING -i -p gre \ -j DNAT --to-destination iptables -t nat-A PREROUTING -i -p tcp \ --dport 1723 -j DNAT --to-destination But I have to tell you (and I read it from other people too) : I got this working in the past (with kernel 2.4.17), but somehow I can't get it working anymore. So I installed the poptop server which works fine. Gr, Rob