[pptp-server] Connect Win2K Client to Linux 2.4 Netfilter Firewall via PPTP

[Justin Kreger]

Just allow it to pass GRE and port 1723

Example of my setup with one of my NT servers

/sbin/iptables -t nat -A PREROUTING -d xxx.xxx.xxx.xxx -p all -j DNAT --to-destination 192.168.254.8
/sbin/iptables -t nat -A POSTROUTING -o eth1 -s 192.168.254.8 -j SNAT --to-source xxx.xxx.xxx.xxx
#Simple Protections for Aristotle
#It is, To drop everything, and permit only mail stuff for the time being.
/sbin/iptables -X aristotle
/sbin/iptables -N aristotle
/sbin/iptables -A aristotle -p TCP -d 192.168.254.8 --dport 110 -j ACCEPT
/sbin/iptables -A aristotle -p TCP -d 192.168.254.8 --dport 25 -j ACCEPT
/sbin/iptables -A aristotle -p TCP -d 192.168.254.8 --dport 1723 -j ACCEPT
/sbin/iptables -A aristotle -p 47 -d 192.168.254.8 -j ACCEPT
/sbin/iptables -A aristotle -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A aristotle -j DROP

/sbin/iptables -A FORWARD -d 192.168.254.8 -j aristotle


Justin Kreger, MCP MCSE CCNA
jkreger at earthling.2y.net jwkreger at uncg.edu justin at wss.net


On Mon, 25 Jun 2001, Grischa Schuering wrote:

> 
> 
> Hi,
> 
> I configured a debian Linux Firewall using the 2.4.5 Kernel with
> iptables at my office.
> Now I would like to connect from the internet with my Win 2K laptop the
> Windows servers behind the firewall. How can I manage it.
> I read something about the pptp server on Linux and connect to it with
> the pptp feature of win2k ??
> Does it work this way ?
> Do I have to install any other software or patch on the linux box?
> Do you have any sample configs?
> 
> I would be very glad if someone could givve me a hint ..
> Thanks,
> 
> Grischa Schuering
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --
>