On Wednesday 16 June 2004 8:57 pm, Luis GUSTAVO wrote: > yes.. i use NAT. > > but i download patch-o-matic, and apply pptp-nat. > > which rules i use now ? The ones I suggested earlier (with the addition, of course, of the appropriate NAT rules, which presumably need to go in your PREROUTING chain (if you're doing destination NAT?). Regards, Antony. > --- Antony Stone <Antony@xxxxxxxxxxxxxxxxxxxx> > escreveu: > On Wednesday 16 June 2004 8:12 pm, Luis > GUSTAVO > > > wrote: > > > hi people, > > > > > > I make nat with my linux, and i have other machine > > > windo 2000 server installed and configured vpn with > > > pptp. > > > > > > and i want forward: > > > > > > port 1723 and the protocol GRE. > > > > > > how can i make this. > > > > iptables -A FORWARD -p gre -s a.b.c.d -d w.x.y.z -j ACCEPT > > iptables -A FORWARD -p tcp --dport 1723 -s a.b.c.d > > -d w.x.y.z -j ACCEPT > > > > If your /etc/protocols file does not contain a definition for GRE (some > > do, some don't) then simply substitute the number 47 for gre in the rule > > above. > > > > You probably only want on of the -s a.b.c.d or the -d w.x.y.z > > specifications, depending on which end of the link you are controlling > > (you say it's the server, so you probably want the -d w.x.y.z). > > > > Regards, > > > > Antony. -- Most people have more than the average number of legs. Please reply to the list; please don't CC me.