From: "Wycliffe Bahati" <wbahati@afsat-ke.com>
To: Narti Kitiyakara <Nkitiyakara@nolacom.com>,
netfilter@lists.netfilter.org
Subject: Re: Microsoft VPN
Date: Thu, 1 Jul 2004 12:07:56 +0300 [thread overview]
Message-ID: <03f601c45f4a$e92dad80$1700000a@afsatke.local> (raw)
In-Reply-To: 76408279273F86419EA113F4CC5BB13D026C5E@EXCHANGE.InsideNCS.local
----- Original Message -----
From: "Narti Kitiyakara" <Nkitiyakara@nolacom.com>
To: <netfilter@lists.netfilter.org>
Sent: Wednesday, June 30, 2004 8:27 PM
Subject: Microsoft VPN
We're having trouble accessing our Microsoft VPN server through an iptables
firewall. The first person to connect gets in fine, but we can't make
concurrent VPN connections. We used guarddog and guidedog to set up most of
the firewall, but guidedog doesn't know how to DNAT based on IP protocol, so
we added an initialization script to run level 5 (below) to DNAT based on
protocol. As I said, we're just perplexed as to why this would work for one
user but not additional users. Any help will be greatly appreciated.
/sbin/iptables -t nat -A ftolocal -p gre -j DNAT --to-destination 1.2.3.4
/sbin/iptables -t mangle -A ftolocal -p gre -j MARK --set-mark 1
/sbin/iptables -t nat -I PREROUTING 1 -p gre -j gforward
- narti
Have u tried to uses snat to do a direct translation to the MS
next prev parent reply other threads:[~2004-07-01 9:07 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-06-30 17:27 Microsoft VPN Narti Kitiyakara
2004-06-30 17:42 ` Antony Stone
2004-07-01 9:07 ` Wycliffe Bahati [this message]
2004-07-01 9:14 ` Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='03f601c45f4a$e92dad80$1700000a@afsatke.local' \
--to=wbahati@afsat-ke.com \
--cc=Nkitiyakara@nolacom.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox