[pptp-server] hmm have I missed a step?

[Terrelle Shaw]

Hello all..
I think I missed something with the  client-> firewall-> pptp-server setup.

First of all, I had initially setup the pptp-server with a real IP
 routable to the internet) to test if my setup was correct. I was able to
connect to the pptp-server from my Win NT machine via vpn.. GREAT!.

Now I moved the pptp-server behind my firewall and gave it an internal
address ( 10.0.x.x)
I compiled into the firewall kernel the vpn-masq patch (2.2.13) and
installed that. Everything a go.. pptpd is running on the vpn server, so is
ppp and other related modules.
Among the other ipchain rules I have on my firewall, I added these at the
beginning of my firewall startup script:

ipchains -I forward -p tcp -d 10.0.0.127 1723 -j ACCEPT
ipchains -A forward -p tcp -s 10.0.0.127 1723 -j ACCEPT
ipchains -A forward -p 47 -d 10.0.0.127 -j ACCEPT
ipchains -A forward -p 47 -s 10.0.0.127 -J ACCEPT

Now, looking on the firewall /var/log/messags I see the connection from the
NT machine, but its not forwarding it to the pptpd machine. Did I miss
something in the setup? Forget a rule or some software?

Thanks..


Terrelle Shaw
HealthCentralRx.com
System Administrator
hshaw at healthcentralrx.com