Re: Shorewall and PPTP

Tom Eastep
2005-10-22T14:55:01Z

On Saturday 22 October 2005 07:18, Roman wrote:

>
> When somebody connects to my router from outside things work properly ->
> he/she can connect to the router over the PPP link. I can also reach the
> newly connected computer from inside the LAN - but not vice versa. That
> means the other computer cannot reach any computer in the LAN but the
> router. What can I do that this is possible?

I can''t tell without seeing your pptpd configuration but I notice that
you are
masquerading connections out of the ppp+ devices so I would guess that it is
a routing problem.

>
> The other strange thing is with some windows client: A Windows client
> can connect to the pptpd without problems when there are no other
> tunnels from the lan to the internet. But as soon as someone establishes
> a pptp tunnel to a server outside - I cannot connect from outside
> anymore :( I''m  not sure wheter this has something to do with
shorewall,
> but I hope there is someone who had the same problem, an hopefully some
> solution for it.
>

These symptoms are caused by the lack of PPTP Connection/NAT helpers in your
kernel. Some distributions include the patches that provide those helpers and
some don''t. Unfortunately, with recent kernels, people are reporting on
the
Netfilter list that they have not been able to apply those patches and get
them to work.