similar to: DNAT and PPTP

Hi all, I´m running a server that frecuently needs to open a pptp session with a remote server outside my Company. This server is running behind a Shorewall firewall and I don´t find information in Shorewall web page because there is no information in the link http://www.shorewall.net/PPTP.htm#ClientsBehind Nowadays I can connect this server with the remote one but te session is closed after

I have two/three PPTP servers on my network and each one of them are on their own subnet and I want to be able to send traffic to each and everyone. My rules file entry is as follows DNAT net loc:1.1.1.1 tcp 1723 DNAT net loc:1.1.1.1 47 and DNAT net loc:2.2.2.2 tcp 1723 DNAT net loc:2.2.2.2 47 however all the traffic only goes to 1.1.1.1 because its the first DNAT entry. I tried the

Hi all! I''ve set up a Linux box with shorewall doing proxy arp as per http://www.shorewall.net/shorewall_setup_guide.htm#ProxyARP the 5.2 (non routed) example. Everything is working great except for one thing, and that leads me to my question: is there a conflict between proxy arp and pptp? I''ve set the apropriate ACCEPT rules to allow tcp port 1723 and protocol 47 to the host

Hi, All I'm tring to get a client connected to a vpn server running pptp & centos, the client connects to the server but I can't browse the internet or the local network from the client, when I stop the firewall the client can ping the server but no browsing can be done, do I need a iptables rule to allow pptp clients to use the internet or browse the network??? Sherwyn

Hi friends, I need help. I''ve PPTP Server running behind Shorewall. The PPTP server is working OK in my LAN, but I want to connect outside and It isn''t working. I''ve configurate shorewall like http://www.shorewall.net/PPTP.htm. I add only this lines in my rules DNAT net loc:165.182.15.15 tcp 1723 - IPext DNAT net loc:165.182.15.15 47 - - IPext It isn''t

I''ve got what I think is a fairly simple home network configuration with one Linux box functioning as the firewall, VPN server, DHCP server and file/print server. I am having trouble configuring both a VPN server (PopTop) and the firewall rules for a W2K PPTP VPN client. The VPN server runs on the firewall machine and the VPN client runs on a W2K machine behind the firewall. The VPN

Good Morning Everyone, I have a server that runs Shorewall/Samba/PPTP (Poptop). When we try to connect to the PPTP server from outside of the company, the Windows XP pro client can establish the connection. We can then ping the server and the clients behind the server without any problem, but the issue becomes that we cannot map to any of the shares on the samba server or to any client for that

Hello, Please see the following picture: http://www.wilson-kwok.com/pptp.jpg I used one to one NAT from 210.0.0.1 to 192.168.0.2 for web server, and then use port forwarding from 210.0.0.1 to 192.168.0.3 for pptp server, but I cannot connect from my home to pptp server. Here is the nat file: 210.0.0.1 eth0:2 192.168.0.2 Here is the rules

I have set up a VPN over PPTP on a CentOS server using the DKMS module rpm dkms-0-2.0.6-3.el4 from http://centos.karan.org/el4/extras/stable/i386/RPMS/repodata/repovie w/dkms-0-2.0.6-3.el4.kb.html and kernel_ppp_mppe-0.0.5-2dkms.noarch.rpm at http://pptpclient.sourceforge.net/howto-fedora- core-3.phtml. I have configured the pptpd server on Centos4 to use MS_CHAPv2, 128bit encryption and

Hi! I need that my private users behind NAT server, connect to PPtP Server on Internet place: Public IP (with PPtP Server) | | Internet | | Linux Server with NAT (public IP eth0, private IP eth1) | | private LAN (users that need connect to PPtP Server) I use some script with PREROUTING and POSTROUTING but is not work. Where I can found info about this? Thank! David

Any recommendations for a Linux distro to put Shorewall on top of? My main concern is to be able to use a Windows NT PPTP VPN server behind the firewall. If I remember right, there were some issues with passing GRE traffic through some versions of the Linux kernel. Are they solved now or do I still have to do some cryptic kernel patches? Experiences with that? Thanks! Tim

I am running shorewall 1.4.8-1 on my firewall. I am also running poptop on this firewall for remote VPN clients to connect to our local network. I would like to set some options in pppd, so that after 2 failed user/pass attempts are tried, the IP address is blacklisted, and an email is sent to the admin of this IP address that has been blacklisted. I know this may be more of a ppp question than

shorewall version 2.0.7 1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo 2: eth0: <BROADCAST,MULTICAST,NOTRAILERS,UP> mtu 1500 qdisc pfifo_fast qlen 1000 link/ether 00:30:48:53:25:b2 brd ff:ff:ff:ff:ff:ff inet 81.169.188.152/32 brd 81.169.188.152 scope global eth0 3: eth1:

Hi, can you tell me how to set up routing of packets comming from pptp clients connected to my FW. For now I managed to initialize the vpn with ppp+ byt I can''t MASQ it in the /etc/shorewall/masq file. I entered there this: eth0 eth1 and pptp is working fine but now everybody can change thair IPs and get Internet. How exactly should I set it up. I am running shorewall o n

Hello,   I setup a PPTP service on a Windows 2003 in LAN. Shorewall used NAT and macro and rules, for example:   nat:   1.1.1.1   eth2:11         172.16.1.246 macro.VPN:   PARAM   -       -       tcp     1723 PARAM   -       -       47 rules:   VPN/ACCEPT       net             dmz:172.16.1.246   or don''t use macro   DNAT            net             loc:172.16.1.246 tcp 1723       -

I wonder if I am seeing the problem mentioned here http://old.nabble.com/samba-3.2-breaks-ppp-winbind-plugin-td18715806.html. I can connect a WIndows PPTP client just fine if using chap-secrets, but when I use the winbind plugin, the client says that it can not authenticate the server (both are on the same domain). They said it was resolved in 3.2, but we are using 3.4.3. Is it possible this bug

I'm using shorewall 3.0.4 with ubuntu dapper. I've compiled the kernel with the option CONFIG_IP_ROUTE_MULTIPATH_CACHED=n. I had a trouble with, pptp connection, I'm trying to connect a using microsoft vpn a vpn server out of my lan, and don't work. My files <providers> ADSL1 1 1 main eth1.600 10.190.1.1 track,balance eth0 ADSL1 2 2 main eth1.601 10.190.2.1

Hi, just configured a shorewall-box with identical setting as a machine which works for passing pptp via dnat to an internal pptp server (win). Unfortunately we cannot establish a connection and tcpdump tells (from firewall to client) icmp: my_host protocol 47 unreachable [tos 0xc0]. What could I do now, to troubleshoot? We followed exactly the dnat settings in your docu. Thx Andy

Srikrishnan, In the future, please post your questions to the mailing list. I''m copying the list with my response so that will appear in the archives. On 5 Apr 2002, Srikrishnan Chitoor wrote: > Hi: > > > I have a setup wherein the main server is running Shorewall and PPTP > Server. The local network is 192.168.1.* and it connects to Internet > using a Static IP

We have recently implemented PPTP for our remote access and are having problems seeing the samba systems when we connect. We can see all of the microsoft network but get a path not found when we try and connect to a samba server. We are running ver. 1.9.17p4 samba on sunos 5.5.1. Any idea's???? Thanks Bob Herman (Don't get too close to people in comas. Sometimes they wake up and try