Here is some additional details regarding the problem: https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=275 https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=302 My problem is though RHEL3 is based on 2.4 its network is based on 2.6 which screws things up. RHEL4 is based on 2.6 but it doesn't work there either. The 2.4.29 works but it kills all of the RHEL3 applications because of an incompatibility with glibc. If you have an older kernel that you can go back to or if you can use the vanilla kernel under 2.4.29 then you can get it to work. Otherwise we will have to await the changes from the Netfilter team. Phil and Harold have been a big help in getting to the cause (and getting me some additional experience in compiling kernels). Gary > -----Original Message----- > From: Gary W. Smith > Sent: Thursday, March 03, 2005 9:39 PM > To: 'Marty Phee'; 'netfilter@xxxxxxxxxxxxxxxxxxx' > Cc: 'James Cameron'; 'opie@xxxxxxxxxxx' > Subject: RE: VPN through the firewall > > It's odd but for some reasons it only fails with Microsoft PPTP > implementation. It seems to be too picky about something. Unfortunately > my c skills are rusty and I'm usually strapped for time otherwise I would > delve into it and try to help them out. > > I'm inclined to include James Cameron in this (from the pptp and poptop > sites) as he seems to have a much better understanding of the protocol > than I do. Maybe he can help out so we can try to implement the > functionality in the 2.6 kernel. > > Gary > > > -----Original Message----- > > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter- > > bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Marty Phee > > Sent: Thursday, March 03, 2005 3:22 PM > > To: netfilter@xxxxxxxxxxxxxxxxxxx > > Subject: Re: VPN through the firewall > > > > > Gary W. Smith can speak to this much better than myself, but 2.6 + > > > pptp/gre conntrack/nat is not a winning combo, AFAIK... > > > > That sucks. Why exactly? What causes problems. > >