[pptp-server] PPTP behind a Firewall

robert berzerke at swbell.net
Mon Apr 16 13:53:29 CDT 2001


I'm guessing your using ipchains.  If so, there is a kernel patch needed to 
masquerade the pptp connections.  I'm (s-l-o-w-l-y) working on something for 
iptables.

On Monday 16 April 2001 13:36, Robert Dege wrote:
> Perhaps someone can help me here.  I am trying (exhaustively) to get my
> PPTP server behind a firewall.  I believe that I almost have it working,
> but one minor thing stands in my way.
>
> I receive this message on the firewall when attempting a PPTP connection:
>
> Apr 16 13:22:47 odo kernel: ip_masq_gre(): creating GRE masq for
> 172.28.254.46 -> 12.19.228.58 CID=0 MCID=643A
> Apr 16 13:22:47 odo kernel: ip_demasq_gre(): 12.19.228.58 ->
> 12.19.228.52 CID=0 no masq table, discarding
>
> For some reason, the MASQID is getting lost between the masqing &
> demasq'ing of the GRE packets.
>
> I am running IPFwd --masq $IP 47
> I have John Hardin's PPTP kernel patch running
> (both on the firewall).
>
> And I know that the PPTP server works becuase i can successfully connect
> when I remove it from behind the firewall.
>
> Can anybody help me here???
>
>
> Thanks
> -Rob
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!



More information about the pptp-server mailing list