* GRE/PPTP and modules
@ 2004-04-29 14:47 Jochen Vogel
2004-04-29 15:11 ` Cedric Blancher
0 siblings, 1 reply; 2+ messages in thread
From: Jochen Vogel @ 2004-04-29 14:47 UTC (permalink / raw)
To: netfilter
Hi,
I did the following
$IPT -t nat -A PREROUTING -d <firewall> -p tcp --dport 1723 -i $EXT -j DNAT
--to-destination <vpn>:1723
$IPT -t nat -A PREROUTING -d <firewall> -p gre -i $EXT -j DNAT
--to-destination <vpn>
$IPT -A FORWARD -i $EXT -o $RAS -d <vpn> -p TCP --dport 1723 -m state
--state NEW -j ACCEPT
$IPT -A FORWARD -i $EXT -o $RAS -d <vpn> -p GRE -m state
--state NEW -j ACCEPT
Do i need any modules?
Thx for infos
jo
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: GRE/PPTP and modules
2004-04-29 14:47 GRE/PPTP and modules Jochen Vogel
@ 2004-04-29 15:11 ` Cedric Blancher
0 siblings, 0 replies; 2+ messages in thread
From: Cedric Blancher @ 2004-04-29 15:11 UTC (permalink / raw)
To: Jochen Vogel; +Cc: netfilter
Le jeu 29/04/2004 à 16:47, Jochen Vogel a écrit :
[PPTP/GRE rules]
> Do i need any modules?
Yes. you need GRE and PPTP conntrack modules (PPTP conntracking depends
on GRE conntracking) :
ip_conntrack_proto_gre
ip_conntrack_pptp
If you use NAT, you'll need additional modules as well :
ip_nat_proto_gre
ip_nat_pptp
--
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
>> Hi! I'm your friendly neighbourhood signature virus.
>> Copy me to your signature file and help me spread!
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-04-29 15:11 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-04-29 14:47 GRE/PPTP and modules Jochen Vogel
2004-04-29 15:11 ` Cedric Blancher
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox