Hi, first of all - excuse me for mailing this to two mailing lists at once, but I am hoping to get more answers from your experience with poptop and netfilter. Here is my situation - I've configured a gateway with poptop ( which uses RADIUS for auth/acct - which again uses LDAP as auth-backend and mySQL for accounting ). This gateway has 2 internal and one external interface ( with public routeable IP address ). One internal interface is used to build a restricted network for unknown machines, and the second one is used as a gateway for the known machines. Now - I would like allow my VPN users internet access, but not to all machines on the internal network. So I have to use NAT on the tunnel endpoints ( ppp+ interfaces ), right? I wanted to make this easy as possible, but as always - I took the wrong turn... probably by choosing Firewall Builder to help me get my firewall set up. I achived everything, but I cannot configure ppp+ interfaces in FW-Builder? Does anyone has a hint for me? Is this possible anyway ( please don't tell me I have to configure 150 ppp interfaces in FW-Builder ) ??? I suppose it would be more secure to enter a firewall rule every time a ppp interface comes up ( by using scripts like ip-up from pppd )? Do I have to enter a NAT rule for each interface then? Any performance thought when having 150+ interfaces at the same time? Nevertheless I would also like to redirect http traffic going from a NATed ppp+ interface to my squid process - how does this combined rule looks like? Sorry for this huge eMail, and amateur questions.. I hope at least a few of the gurus out there will be able and willing to help me out... Thank You in advance ! Regards, Edvin Seferovic
