No subject

--------------------------------
2.4.x-series kernels
Masquerading a single VPN client using IPtables is fairly simple to set up,
and requires no special patches. 

Masquerading multiple clients talking to the same host will require
protocol-specific support in the form of kernel patches, which are not yet
available. Sorry. 
--------------------------------

> I can watch traffic with tcpdump on both the ip protocol 47 
> and the port 1723 at the external Interface eth1.
> 
> I´m very clueless at the moment. What else can it be?
> 
> Werner