On Tue, May 23, 2006 01:30, Harold Pritchett wrote: > Sorry if this is a FAQ. Searching the archives is very > difficult. > > I have a small LAN, connected to the Internet via a Red > Hat Fedora Core 3 firewall running netfilter. I would like > to run the Microsoft VPN software on a windows machine on this network and > connect to a VPN server located on the Internet side of the firewall. The > windows server uses NAT to connect to the Internet. > > I configured the VPN client while it was directly on the > Internet, and it works fine. When I try to connect from > behind the firewall it fails to connect. > > Searching for help on the Internet has not been very > productive. Everything I can find on the net is very old. Linux kernels 2.2 > and 2.4. I'm currently running 2.6.12 with iptables 1.2.11. >From this I take it that the PPTP server is not behind a NAT situation. You need to allow both port 1723/tcp and the GRE protocol (proto 47). You also may need to compile additional Netfilter PPTP modules if they are not included with your FC3 kernel. Gr, Rob