[pptp-server] PPTP client connection trough masqueraded firewall

[Scott Venier]

FW-1 probably only supports 1 concurrent connection behind it.  it's not
smart enough to figure out based on call id which machine should get the
GRE packets.  See if there's an update.  if not, get a box to route.

Scott

On Wed, 30 May 2001, Kurt Glazemakers wrote:

> 
> I'm sorry, the image totally screwed up by sending it, maybe this will
> be more clear
> 
>   	Linux	PPTP server
> 		  |
> 		  |
> 		 ...
> 	     Internet
> 		 ...
> 		  |
> 		  |
> 	   213.2.45.6
>             FW-1
> 	   192.168.1.254/24
> 		  |
> 	  -------------
>         |            |
>       PC-A		 PC-B
>   192.168.1.1/24	192.168.1.2/24
> 
> Yep, the internet address of the firewall is fixed, and yep PC-A or PC-B
> is able to connect. Only both PPTP connections togheter don't work.
> 
> I could make one connection and route it, but then I need an extra
> machine, because PC-A and PC-B are laptop pc's. If possible I would like
> to avoid it.
> 
> 
> -----Original Message-----
> From: Justin Kreger [mailto:lists at earthling.2y.net]
> Sent: woensdag 30 mei 2001 19:25
> To: Kurt Glazemakers
> Cc: pptp-server at lists.schulte.org
> Subject: Re: [pptp-server] PPTP client connection trough masqueraded
> firewall
> 
> 
> Your diagram is.... umm... not clear..   Dose the internet side of your
> firewall have a static ip?  Is it acceptable to have one connect to the
> pptp server, and route between the two networks? 
> 
> Justin Kreger, MCP MCSE CCNA
> jkreger at earthling.2y.net jwkreger at uncg.edu jkreger at aristotle.wss.net
> 
> 
> On Wed, 30 May 2001, Kurt Glazemakers wrote:
> 
> > 
> > This is the setup I wanted to use:
> > 	Machine A		  Checkpoint  FW-1
> >    192.168.1.1/24=======|  |-----------|
> > |-------------------|	
> > 				|==|		   |========....
> > INTERNET  ....======| Linux PPTP server |
> > 	Machine B		|  |		   |
> > |			    |
> >    192.168.1.2/24=======|  |-----------|
> > |-------------------|
> >    			192.168.1.254/24     213.2.45.6
> > 
> > Machine A and machine B needs to connect to the PPTP server and are
> > using 2 different accounts.
> > 
> > My question is: Is it possible to do this, can the PPTP protocol be
> > masqueraded ? The TCP port 1723 will be offcourse no problem, but what
> > about the GRE. Because 1 connection works, but a second fails ...
> > 
> > Thanks,
> > 
> > Kurt 
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > List services provided by www.schulteconsulting.com!
> > 
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!
>