No subject

4.1 What ports are required for ipchains?

	pptpd uses TCP port 1723 for the control connection, and protocol 47
	for the data connection.  Note that the latter is a PROTOCOL,
	not a port.

	To open these using ipchains:

	ipchains -A input -p TCP -d 0.0.0.0/0 1723 -j ACCEPT
	ipchains -A input -p 47 -j ACCEPT

	ipchains -A output -p TCP -s 0.0.0.0/0 1723 -j ACCEPT
	ipchains -A output -p 47 -j ACCEPT


> -----Original Message-----
> From: pptp-server-admin at lists.schulte.org
> [mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Frank
> Sent: Thursday, October 26, 2000 7:38 PM
> To: pptp-server at lists.schulte.org
> Subject: [pptp-server] PoPToP and Firewall config ?
>
>
> Hi,
>
> I've got all the software installed on my firewall (Linux 2.2.10) and I'm
> trying to connect from a Win 2000 client. I'm getting a 678 'No answer'
> error from Windows. There aren't any messages on the server side, so a
> couple of questions...
>
> I get the message:
>      MGR: Max connections reached, extra IP addresses ignored
> when pptpd is started. Is this part of the trouble? pptpd is running
> according to ps.
>
> I've noticed mention of GRE and ports 47 and 1723 in various list traffic
> here. I don't have an entry for either in /etc/services. And I don't have
> any specific reference to either in my Firewall rules (ipchains). Would
> someone please tell me what GRE is and if there is anything that
> needs to be
> done about these ports?
>
> Thanks in advance,
> Frank
>
> Frank Holt                                            Phone:
> (414) 327-0000
> Project Engineer                                       Fax: (414) 327-8821
> Midwest Engineering Systems, Inc            e-mail: frankh at mwes.com
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!
>