|
Hi List, This is an update for anyone that has been attempting
to get a PPTP VPN working using PopTop with more than one simultaneous connection
from an external source to a PPTP VPN behind a router that is NATing
connections through. I assume that whoever is setting this up has some
general knowledge of linux and how to compile a kernel. I also make the
assumption that you already have a PPTP server up and running but are requiring
more than one simultaneous connection. I also offer no warranties or take
on any responsibility on whether or not this breaks your system and causes damage
of any kind. With that said, I used the most recent kernel
(2.6.18.3) and used all the default settings and added in all (except the experimental)
iptables modules. I also added in PPP MPPE support (even though it is
experimental). To make things easier on myself I compiled the kernel as a
binary RPM package since the distro that I am using uses RPMs. After installing the new kernel I made modifications
to my boot loader (in my case grub) to use the new kernel and then rebooted the
system. I used the following IPTables rules: iptables –t nat –A POSTROUTING –j MASQUERADE
– (Very general masquerading – not recommended and should be tied
down to specific subnets) iptables –A INPUT –p tcp –dport 1723
–j ACCEPT (Accept inbound PPTP connections) iptables –A INPUT –p gre –j ACCEPT
(Accept inbound GRE connections) iptables –A OUTPUT –p gre –j ACCEPT
(Accept outbound GRE connections) I executed the command: service iptables save to save my newly added iptables rules. I then edited /etc/rc.local and added in the
following lines modprobe ip_nat_pptp modprobe ip_conntrack_pptp Which loads the additional modules needed for PPTP NAT
connections and finally rebooted the system once more to make sure everything
starts up as expected. If you have any problems please mail them to the list
and I will see if I can be of some assistance. |
_______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
