First, you only need to post one time. To answer this question, you need a little additional background on your environment. Will it be the firewall making the connection? What OS version? ETC. If you are just doing straight NAT'ing of firewall IP to the back end PPTP server then you shouldn't need to do anything more than setup the NAT rules and ensure that the firewall is allowing the traffic (including GRE). I think that NAT'ing GRE is the difficult part but I usually use a dedicated IP for the PPTP servers and NAT the entire IP. Alternatively, you can install POPTOP on your firewall. Gary > -----Original Message----- > From: netfilter-bounces@xxxxxxxxxxxxxxxxxxx [mailto:netfilter- > bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Sadus . > Sent: Tuesday, August 02, 2005 12:58 AM > To: netfilter@xxxxxxxxxxxxxxxxxxx > Subject: DNAT pptp to windows machine > > Hello, > I would like to DNAT to a pptp server, what rules/protocols/ports should > i use? do i need to recompile the kernel? > > Thanks > > EL-KHOUJA Haytham > ---------------------------------------------------------- > sadus@xxxxxxxxxxxx > ---------------------------------------------------------- > Please avoid sending me Word or PowerPoint attachments. > See: http://www.gnu.org/philosophy/no-word-attachments.html