I have tried to use the pptp_conntrack patch from the last patch-o-matic
on Linux kernel 2.4.22 , but with that patch applied, apps using
getsockopt SO_ORIGINAL_DST stop working :
the perror i get is : getsockopt(SO_ORIGINAL_DST): No such file or directory
The following patch in the netfilter patch-o-matic CVS is meant to fix this:
http://cvs.netfilter.org/~checkout~/netfilter/patch-o-matic/pending/63_getorigdst-tuple-zero.patch?sortby=rev
But unfortunately that patch is broken too, and you'll need to apply the patch from this message to fix the patch:
http://lists.netfilter.org/pipermail/netfilter-devel/2003-September/012382.html
(Btw, check the netfilter-devel archives for this month for some discussion about what patches you need for pptp conntrack.)
-- Philip Craig - philipc@xxxxxxxxxxxx - http://www.SnapGear.com SnapGear - Custom Embedded Solutions and Security Appliances