[pptp-server] pptp masquerade document needed for 2.4.x basedfirewal

[Justin Kreger]

You should be using iptables with netfilter, so you can do port
forwarding, if necessary.  A ip_nat_pptp, and some other related module
are in the works, but last word I had from the guy writing them, said
that development on the mods was halted at the time being due to the
connection tracking code was being rewritten.

Justin Kreger, MCP MCSE CCNA
jkreger at earthling.2y.net jwkreger at uncg.edu justin at wss.net


On Tue, 17 Jul 2001, Craig Morris wrote:

> Thanks for your response,
> 
> Here is the output from modprobe:
> 
> modprobe -v iptable_nat
> /sbin/insmod
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o
> Using /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o
> Symbol version prefix ''
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o:
> init_module: Device or resource busy
> Hint: insmod errors can be caused by incorrect module parameters,
> including invalid IO or IRQ parameters
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o: insmod
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o failed
> /lib/modules/2.4.3-12/kernel/net/ipv4/netfilter/ip_conntrack.o: insmod
> iptable_nat failed
> 
> And here are the currently loaded modules:
> 
> [root at shockwave init.d]# lsmod 
> Module                  Size  Used by
> ne2k-pci                4096   2  (autoclean)
> 8390                    5632   0  (autoclean) [ne2k-pci]
> ipchains               27648   0  (unused)
> 
> I'm still using ipchains instead of iptables, although I'm not sure if
> it makes any difference.
> 
> Thanks,
> 
> Craig Morris
> 
> 
> 
>  
> 
> 
> 
> 
> 
> Jamin Collins wrote:
> > 
> > Craig Morris [mailto:craig at amalgam.ca] wrote:
> > > Could anyone direct me to a comprehensive document outlining the
> > > requirements/setup instructions for masquerading pptp using a linux
> > > 2.4.x based firewall.  So far I've found mostly out-of-date how-to's
> > > that covered 2.2.x based kernels.
> > >
> > > The only document I've found that really mentions 2.4.x is the
> > > following:
> > >
> > > ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn.html
> > >
> > > Unfortunately, the modules listed failed to load on my system (RH7.1
> > > running 2.4.3-12).
> > 
> > Actually, little more than the correct rules are necessary.  I've got three
> > firewalls all running 2.4.5 kernels and I haven't needed to apply any
> > special patches or explicitly load any special modules (although, I'm sure
> > modules are loading for this).  Perhaps if you can be more specific about
> > how it doesn't work, or what error messages you are getting we may be able
> > to help.
> > 
> > Jamin W. Collins
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > --- To unsubscribe, go to the url just above this line. --
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --
>