On Tue, 14 Dec 2004 15:02:43 -0800, Gary W. Smith <gary@xxxxxxxxxxxxxxx> wrote: > >trying to connect to a server which is itself behind a router and NAT'd > > You mentioned that you applied the conntrack patch. Did you do this on both the firewalls? I have had success with the following. Note that I have disabled ip_nat_pptp. If I load ip_nat_pptp then only one person can connect and on the first time only. Subsequent attempts fail. I have asked but received no feedback on this as well. But hopefully this will help you as well. I have the conntrack patch applied on the server machine. The clients are behind a hardware router/firewall (not a PC). > Anyways, here's what I run and the order that I run them in. The firewall currently has two active incoming connections I did test multiple outgoing connections when I configured it. Ok, thanks for the info. Which iptables rules do you have running in conjunction with this? cheers, Craig