ip_nat_pptp stretch not work

--001a114038380d765d055663529d
Content-Type: text/plain; charset="UTF-8"

Hi. I have debian box with nat as gateway.
With debbian jessie pptp from local network worked, with loaded kernel
module ip_nat_pptp.
After upgrade to debian stretch - pptp not working any more, module
ip_nat_pptp loaded.
Anyone have similar working configuration?

# Generated by iptables-save v1.6.0 on Thu Aug 10 13:04:00 2017
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth0 -p udp -m state --state NEW -m udp --dport 67 -j ACCEPT
-A INPUT -j DROP
-A FORWARD -s 192.168.1.0/24 ! -d 192.168.1.0/24 -i eth0 -j ACCEPT
-A FORWARD -d 192.168.1.0/24 -i eth1 -j ACCEPT
-A FORWARD -j DROP
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Thu Aug 10 13:04:00 2017
# Generated by iptables-save v1.6.0 on Thu Aug 10 13:04:00 2017
*nat
:PREROUTING ACCEPT [8403:561775]
:INPUT ACCEPT [4:194]
:OUTPUT ACCEPT [295:18031]
:POSTROUTING ACCEPT [295:18031]
-A PREROUTING -i eth1 -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 22
-A POSTROUTING -s 192.168.1.0/24 -o eth1 -j MASQUERADE
COMMIT
# Completed on Thu Aug 10 13:04:00 2017

--001a114038380d765d055663529d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div>Hi. I have debian box with nat as gateway.<=
br></div>With debbian jessie pptp from local network worked, with loaded ke=
rnel module ip_nat_pptp.<br></div>After upgrade to debian stretch - pptp no=
t working any more, module ip_nat_pptp loaded.<br></div>Anyone have similar=
 working configuration?<br><br># Generated by iptables-save v1.6.0 on Thu A=
ug 10 13:04:00 2017<br>*filter<br>:INPUT ACCEPT [0:0]<br>:FORWARD ACCEPT [0=
:0]<br>:OUTPUT ACCEPT [0:0]<br>-A INPUT -m state --state RELATED,ESTABLISHE=
D -j ACCEPT<br>-A INPUT -p icmp -m icmp --icmp-type any -j ACCEPT<br>-A INP=
UT -i lo -j ACCEPT<br>-A INPUT -p tcp -m state --state NEW -m tcp --dport 2=
2 -j ACCEPT<br>-A INPUT -i eth0 -p udp -m state --state NEW -m udp --dport =
67 -j ACCEPT<br>-A INPUT -j DROP<br>-A FORWARD -s <a href=3D"http://192.168=
.1.0/24">192.168.1.0/24</a> ! -d <a href=3D"http://192.168.1.0/24">192.168.=
1.0/24</a> -i eth0 -j ACCEPT<br>-A FORWARD -d <a href=3D"http://192.168.1.0=
/24">192.168.1.0/24</a> -i eth1 -j ACCEPT<br>-A FORWARD -j DROP<br>-A OUTPU=
T -j ACCEPT<br>COMMIT<br># Completed on Thu Aug 10 13:04:00 2017<br># Gener=
ated by iptables-save v1.6.0 on Thu Aug 10 13:04:00 2017<br>*nat<br>:PREROU=
TING ACCEPT [8403:561775]<br>:INPUT ACCEPT [4:194]<br>:OUTPUT ACCEPT [295:1=
8031]<br>:POSTROUTING ACCEPT [295:18031]<br>-A PREROUTING -i eth1 -p tcp -m=
 tcp --dport 443 -j REDIRECT --to-ports 22<br>-A POSTROUTING -s <a href=3D"=
http://192.168.1.0/24">192.168.1.0/24</a> -o eth1 -j MASQUERADE<br>COMMIT<b=
r># Completed on Thu Aug 10 13:04:00 2017<br><br></div>

--001a114038380d765d055663529d--