Jan Niggemann a écrit : > > nf_conntrack_proto_gre 12886 0 > nf_conntrack_ipv4 18003 1 > nf_defrag_ipv4 12443 1 nf_conntrack_ipv4 > xt_conntrack 12601 1 > nf_conntrack 57737 3 > nf_conntrack_proto_gre,xt_conntrack,nf_conntrack_ipv4 > x_tables 18078 5 > ip_tables,xt_tcpudp,xt_conntrack,iptable_filter,iptable_mangle I do not see nf_conntrack_pptp here. It is required so that the first GRE packet has the RELATED state. Note : IIRC IME, the first GRE packet in a PPTP connection may be sent by either side, client or server. GRE is used by PPTP to transport PPP, and PPP is a peer-to-peer protocol, not client-server. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html