Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Michael Gale <michael.gale@pason.com>
To: netfilter@lists.netfilter.org
Subject: Multiple PPTP connections from same public IP ?
Date: Tue, 31 Jul 2007 15:36:20 -0600	[thread overview]
Message-ID: <46AFAB54.5020602@pason.com> (raw)

Hey,

	I am running Centos 4.4 fully patched and am having a problem PPTP connections.

Right now the PPTP server is on the public network and is working correctly for connections from all clients. We have a private network from behind a firewall, let's call 
it firewall A. A single client from behind firewall A can connect with out a problem, however if a second client tries to connect from behind firewall A it looks like 
firewall A does not forward the PPP LCP packets.

Am I correct that mutliple GRE (proto 47) tunnels would be a problem when the clients have the same IP address ?

We are running the standard kernel 2.6.9-42.0.3.EL.

Firewall A inside interface:
--snip--
       7 1.905608    client         server         PPTP     Outgoing-Call-Request
       8 1.910061    server         client         PPTP     Outgoing-Call-Reply
       9 1.935465    client         server         TCP      commlinx-avl > pptp [ACK] Seq=325 Ack=189 Win=32120 Len=0
      10 2.844911    client         server         PPTP     Set-Link-Info
      11 2.909621    client         server         PPP LCP  Configuration Request
      12 2.992528    server         client         TCP      pptp > commlinx-avl [ACK] Seq=189 Ack=349 Win=16212 Len=0
      13 5.085418    client         server         PPP LCP  Configuration Request
      14 7.504568    client         server         PPP LCP  Configuration Request
--snip--

Firewall A outside interface:
--snip--
       7 1.905608    firewall A         server         PPTP     Outgoing-Call-Request
       8 1.910061    server         firewall A         PPTP     Outgoing-Call-Reply
       9 1.935465    firewall A         server         TCP      commlinx-avl > pptp [ACK] Seq=325 Ack=189 Win=32120 Len=0
      10 2.844911    firewall A         server         PPTP     Set-Link-Info
      11 2.992528    server         firewall A         TCP      pptp > commlinx-avl [ACK] Seq=189 Ack=349 Win=16212 Len=0
--snip--

-- 
Michael Gale

Red Hat Certified Engineer
Network Administrator
Pason Systems Corp.


             reply	other threads:[~2007-07-31 21:36 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-07-31 21:36 Michael Gale [this message]
2007-07-31 22:12 ` Multiple PPTP connections from same public IP ? Pascal Hambourg
2007-08-01 19:38   ` Michael Gale

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=46AFAB54.5020602@pason.com \
    --to=michael.gale@pason.com \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox