Yes and it works very well. You need to get patch-o-matic from http://www.netfilter.org . Read the instructions, as they tell you how to apply the patches. After reading, do "./runme extra" in the p-o-m directory and skip through all the patches until you find the one called "pptp_contrack" or "ip_contrack_pptp" (I'm not totally sure of the name). Apply this patch, recompile your kernel, and also download and compile the iptables program itself ("userspace tools") and away you go. They are created as modules called ip_contrack_pptp and ip_contrack_proto_gre and ip_nat_pptp and ip_nat_pptp. Doesn't seem to work on kernel 2.6 yet though. > -----Original Message----- > From: Dino Dragovic [mailto:dragovic@xxxxxxx] > Sent: 20 February 2004 16:18 > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: vpn and pptp > > Hi, > > I have linux Debian (2.4.24 kernel) firewall with nat and iptables.On my > private network there is MS w2000 pptp server. I can connect to it using > pptp > from Internet (PPTP) but from only one client at the time.Is it > possible and how to connect through firewall several clients > simultaneously to vpn server? Iptables verison is 1.2.6a-5 > When I try to connect while there is already one connection I get > "Verifying username and password" until connection times out. > > tx > >