Shorewall and PPTP

Roman
2005-10-22T14:18:06Z

hy!

I have set up Shorewall on my router box - on the same machine I have a
PPTP-server running. Thanks to the guide on the shorewall site I had it
up and running in less than a day. But there are still some minor
problems with that configuration. My network looks like this:

LAN  ----- Router/Shorewall/PPTPD ----- Internet ------- Some other Computer

When somebody connects to my router from outside things work properly ->
he/she can connect to the router over the PPP link. I can also reach the
newly connected computer from inside the LAN - but not vice versa. That
means the other computer cannot reach any computer in the LAN but the
router. What can I do that this is possible?

The other strange thing is with some windows client: A Windows client
can connect to the pptpd without problems when there are no other
tunnels from the lan to the internet. But as soon as someone establishes
a pptp tunnel to a server outside - I cannot connect from outside
anymore :( I''m  not sure wheter this has something to do with
shorewall,
but I hope there is someone who had the same problem, an hopefully some
solution for it.

Basically I use the two-interface example and the "Basic Setup" of the
PPTP guide on shorewall.net.


I''ve attached the status.txt for the second problem - the one for the
first will come soon. In this case 192.168.0.1 creates a tunnel to a
server 195.70.107.162  and then a client with 172.28.20.160 tries to
connect to my router ... and the attempt fails with:
Oct 22 16:01:17 Mithril pptpd[6530]: GRE: xmit failed from decaps_hdlc:
Operation not permitted
Oct 22 16:01:17 Mithril pptpd[6530]: CTRL: PTY read or GRE write failed
(pty,gre)=(6,7)

thanks in advance for any suggestions and help
Roman