Re: VPN PPTP

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Wednesday 16 June 2004 8:57 pm, Luis GUSTAVO wrote:

> yes.. i use NAT.
>
> but i download patch-o-matic, and apply pptp-nat.
>
> which rules i use now ?

The ones I suggested earlier (with the addition, of course, of the appropriate 
NAT rules, which presumably need to go in your PREROUTING chain (if you're 
doing destination NAT?).

Regards,

Antony.

> --- Antony Stone <Antony@Soft-Solutions.co.uk>
> escreveu: > On Wednesday 16 June 2004 8:12 pm, Luis
> GUSTAVO
>
> > wrote:
> > > hi people,
> > >
> > > I make nat with my linux, and i have other machine
> > > windo 2000 server installed and configured vpn with
> > > pptp.
> > >
> > > and i want forward:
> > >
> > > port 1723 and the protocol GRE.
> > >
> > > how can i make this.
> >
> > iptables -A FORWARD -p gre -s a.b.c.d -d w.x.y.z -j ACCEPT
> > iptables -A FORWARD -p tcp --dport 1723 -s a.b.c.d
> > -d w.x.y.z -j ACCEPT
> >
> > If your /etc/protocols file does not contain a definition for GRE (some
> > do, some don't) then simply substitute the number 47 for gre in the rule
> > above.
> >
> > You probably only want on of the -s a.b.c.d or the -d w.x.y.z
> > specifications, depending on which end of the link you are controlling
> > (you say it's the server, so you probably want the -d w.x.y.z).
> >
> > Regards,
> >
> > Antony.

-- 
Most people have more than the average number of legs.

                                                     Please reply to the list;
                                                           please don't CC me.