Linux Netfilter discussions
 help / color / mirror / Atom feed
From: "Luis GUSTAVO" <lgpcf@yahoo.com.br>
To: netfilter@lists.netfilter.org
Subject: Re: VPN PPTP
Date: Wed, 16 Jun 2004 16:57:31 -0300 (ART)	[thread overview]
Message-ID: <20040616195731.93519.qmail@web50204.mail.yahoo.com> (raw)
In-Reply-To: <200406162041.34287.Antony@Soft-Solutions.co.uk>

yes.. i use NAT.

but i download patch-o-matic, and apply pptp-nat.

which rules i use now ?


--- Antony Stone <Antony@Soft-Solutions.co.uk>
escreveu: > On Wednesday 16 June 2004 8:12 pm, Luis
GUSTAVO
> wrote:
> 
> > hi people,
> >
> > I make nat with my linux, and i have other machine
> > windo 2000 server installed and configured vpn
> with
> > pptp.
> >
> > and i want forward:
> >
> > port 1723 and the protocol GRE.
> >
> > how can i make this.
> 
> iptables -A FORWARD -p gre -s a.b.c.d -d w.x.y.z -j
> ACCEPT
> iptables -A FORWARD -p tcp --dport 1723 -s a.b.c.d
> -d w.x.y.z -j ACCEPT
> 
> If your /etc/protocols file does not contain a
> definition for GRE (some do, 
> some don't) then simply substitute the number 47 for
> gre in the rule above.
> 
> You probably only want on of the -s a.b.c.d or the
> -d w.x.y.z specifications, 
> depending on which end of the link you are
> controlling (you say it's the 
> server, so you probably want the -d w.x.y.z).
> 
> Also, if you are doing NAT, be aware that you can
> only support one PPTP 
> connection at a time unless you use the PPTP-NAT
> conntrack helper module from 
> patch-o-matic.
> 
> Regards,
> 
> Antony.
> 
> -- 
> In Heaven, the police are British, the chefs are
> Italian, the beer is Belgian, 
> the mechanics are German, the lovers are French, the
> entertainment is 
> American, and everything is organised by the Swiss.
> 
> In Hell, the police are German, the chefs are
> British, the beer is American, 
> the mechanics are French, the lovers are Swiss, the
> entertainment is Belgian, 
> and everything is organised by the Italians.
> 
>                                                     
> Please reply to the list;
>                                                     
>       please don't CC me.
> 
> 
>  

=====

Luis GUSTAVO         lgpcf(arroba)yahoo(ponto)com(ponto)br
+55 (21) 9891-3560    
---------------------------------------------------------------------------------
 










______________________________________________________________________

Yahoo! Messenger - Fale com seus amigos online. Instale agora! 
http://br.download.yahoo.com/messenger/


  reply	other threads:[~2004-06-16 19:57 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-06-16 19:12 VPN PPTP Luis GUSTAVO
2004-06-16 19:41 ` Antony Stone
2004-06-16 19:57   ` Luis GUSTAVO [this message]
2004-06-16 20:19     ` Antony Stone
2004-06-16 20:39       ` Antony Stone
2004-06-16 20:43         ` Luis GUSTAVO

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20040616195731.93519.qmail@web50204.mail.yahoo.com \
    --to=lgpcf@yahoo.com.br \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox