you need ip_pptp_conntrack module enable. Look http://www.wlug.org.nz/PPTPConnectionTracking Regards, Sp0oKeR On 8/11/07, Ammad Shah <ammads@xxxxxxxxxxxxxxxxxx> wrote: > Dear all, > > i am using linux as firewall and proxy server, having some problem > regarding Microsoft VPN, > my network users connect Microsoft vpn server. the problem is only one > user is able to connect vpn, while othere can't do this at same time. > > if i restart firewall, then any one can connect on First come first > server. but only one. > so i clear all rules, and default policy to ACCEPT, and used this rule > > iptables -t nat -A POSTROUTING -i eth1 -s 10.0.0.0/24 -j MASQUERADE > iptables -A FORWARD -s 10.0.0.0/24 -j ACCEPT > > i try this on 2.6(rhel 5) and 2.4 (rhel3) > > -- ========================= Rodrigo Ribeiro Montoro BRConnection Development Team spooker@xxxxxxxxxx SnortCP / RHCE / LPIC-I =========================