OpenForum RSS: iptables + pptp

iptables + pptp (gorecs)

Thu, 13 Nov 2008 06:35:14 GMT

>[�� ]
>>�� ?
>
>iptables -N racoon
>iptables -t nat -A POSTROUTING -j racoon
>iptables racoon -s 10.x.x.x -j RETURN
>iptables racoon -j SNAT --to-source $EXTERNAL_IP
>
>10.x.x.x - ��
>
>��

��
�� , �� tcpdump ��
�� IP 217.118.x.x � �� -�� GRE �� 10.168.x.x �� pptpd �� iptables ��
�� -�� :-)
�� pptpd ��
GRE: read(fd=9 ...

iptables + pptp (gorecs)

Wed, 12 Nov 2008 06:54:05 GMT

>[�� ]
>>iptables -t nat -A PREROUTING -p 47 -j DNAT --to-soutce VPN-SERVER
>>iptables -t nat -A PREROUTING -p tcp --dport 1723 -j DNAT --to-soutce
>>VPN-SERVER:1723
>>iptables -t nat -A POSTROUTING -j SNAT --to-source EXTERNAL_IP
>>modprobe ip_nat_pptp
>>
>>�� ?
>>3-� �� ... HELP
>
>�� ?

iptables -N racoon
iptables -t nat -A POSTROUTING -j racoon
iptables racoon -s 10.x.x.x -j RETURN
iptables racoon -j SNAT --to-source $EXTERNAL_IP

10.x.x.x - ��

��

iptables + pptp (ALex_hha)

Tue, 11 Nov 2008 21:14:27 GMT

>[�� ]
>iptables -A FORWARD -p 47 -j ACCEPT
>iptables -A FORWARD -p tcp --dport 1723 -j ACCEPT
>iptables -t nat -A PREROUTING -p 47 -j DNAT --to-soutce VPN-SERVER
>iptables -t nat -A PREROUTING -p tcp --dport 1723 -j DNAT --to-soutce
>VPN-SERVER:1723
>iptables -t nat -A POSTROUTING -j SNAT --to-source EXTERNAL_IP
>modprobe ip_nat_pptp
>
>�� ?
>3-� �� ... HELP

�� ?

iptables + pptp (gorecs)

Tue, 11 Nov 2008 20:11:35 GMT

� ��

pptpd[6420]: GRE: read(fd=9,buffer=8058640,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs

iptables + pptp (gorecs)

Tue, 11 Nov 2008 12:44:41 GMT

>� �� ?

��

iptables + pptp (suslic)

Tue, 11 Nov 2008 12:28:04 GMT

� �� ?

iptables + pptp (gorecs)

Tue, 11 Nov 2008 12:12:01 GMT

>ech "1" > /proc/sys/net/ipv4/ip_forward
>
>iptables -t nat -A PREROUTING -p tcp -d $EXTERNALIP --dport 1723 -j
>DNAT --to-destination $VPNSERVER
>iptables -A FORWARD -s $VPNSERVER -j ACCEPT
>iptables -A FORWARD -d $VPNSERVER -j ACCEPT
>iptables -t nat -A POSTROUTING -s $VPNSERVER -j SNAT --to-source $EXTERNALIP
>
>��

�� 718 ��

iptables + pptp (suslic)

Tue, 11 Nov 2008 11:31:43 GMT

ech "1" > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p tcp -d $EXTERNALIP --dport 1723 -j DNAT --to-destination $VPNSERVER
iptables -A FORWARD -s $VPNSERVER -j ACCEPT
iptables -A FORWARD -d $VPNSERVER -j ACCEPT
iptables -t nat -A POSTROUTING -s $VPNSERVER -j SNAT --to-source $EXTERNALIP

��

iptables + pptp (gorecs)

Tue, 11 Nov 2008 11:24:11 GMT

>[�� ]
>>iptables -A FORWARD -p 47 -j ACCEPT
>>iptables -A FORWARD -p tcp --dport 1723 -j ACCEPT
>>iptables -t nat -A PREROUTING -p 47 -j DNAT --to-soutce VPN-SERVER
>>iptables -t nat -A PREROUTING -p tcp --dport 1723 -j DNAT --to-soutce
>>VPN-SERVER:1723
>>iptables -t nat -A POSTROUTING -j SNAT --to-source EXTERNAL_IP
>>modprobe ip_nat_pptp
>>
>>�� ?
>>3-� �� ... HELP

�� ?