Re: [Security Firewall] how to enable pptp from behind the firewall

o.k.  i am able to established a conenction to the vpn server, on port
  1723.
  i added protocol 47 from wan to lan, from wan to fw and from fw to lan..
  also, access to port 1723 from lan to wan and from fw to wan is enabled.
I am able to get on the auth screen, but the connection gets dropped 
before the user is able to log in.
  are the modules listed below enabled and properly patched on mnfv2 
kernel ?
      ip_conntrack_proto_gre
      ip_conntrack_pptp
      ip_nat_pptp
      ip_nat_proto_gre
  if yes, then when and where should i load them ?
  thanks a lot for your soon answer!!!
  RP


> florin wrote:
> 
>> http://shorewall.net/PPTP.htm#ClientsBehind
>>
>> On 6/17/05, Mark Tiller <mtiller-XZoyATsUNX5Wk0Htik3J/[email protected]> wrote:
>>
>>> Well you've just described what you need to do.  Add 2 custom rules, 
>>> 1 to
>>> say accept GRE from WAN to LAN, the other to accept port 1723 from 
>>> WAN to
>>> LAN.  For the GRE rule, if you go to the box that says Protocol and 
>>> scrol
>>> down it, you will find GRE.
>>>
>>> Cheers
>>>
>>> MArk
>>>
>>>
>>>> -----Original Message-----
>>>> From: security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]
>>>> [mailto:security-firewall-owner-4qZELD6FgxheH41UXmfQsti2O/[email protected]] On Behalf
>>>> Of Rdpitti
>>>> Sent: 17 June 2005 01:05
>>>> To: security-firewall-4qZELD6FgxheH41UXmfQsti2O/[email protected]
>>>> Subject: [Security Firewall] how to enable pptp from behind
>>>> the firewall
>>>>
>>>> Hi everybody!
>>>> I have tried to enable pptp  access from the internal network
>>>> to a server outside the firewall, but i am unable to make it work.
>>>> I need access from wan o lan in the port 1723, and i need to
>>>> enable protocol 47, GRE.  Anyone can shed some light on it?
>>>> thanks in advanced!
>>>> RP
>>>>
>>>> ________________________________________________
>>>> Global Engineering and
>>>> Technology S.A.
>>>> "Soluciones que se ajustan a su empresa"
>>>>
>>>>
>>>>
>>>
>>>
>>>
>>>
>>>
>>> ____________________________________________________
>>> Want to buy your Pack or Services from MandrakeSoft?
>>> Go to http://www.mandrakestore.com
>>> Join the Club : http://www.mandrakeclub.com
>>> ____________________________________________________
>>>
>>>
>>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------
>>
>> ____________________________________________________
>> Want to buy your Pack or Services from MandrakeSoft? Go to 
>> http://www.mandrakestore.com
>> Join the Club : http://www.mandrakeclub.com
>> ____________________________________________________
> 
> 

-- 
--------------------
Raúl D. Pittí Palma
Associate
Global Engineering and Technologies
mobile	(507)-616-0194
office	(507)-264-2362
Republic of Panama
www.globaltecsa.com

____________________________________________________
Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________