HELP PPTP CONNTRACK MULTIPLE CLIENTS

Hai

I am trying to get PPTP conntrack to work, but with no luck.

I tried with POM's pptp-conntrack-nat.patch (by Harald).

Every time I try to apply the patch it fails.

Finally some how I managed to apply the patch on my 2.4.18 kernel. I

use iptables-1.2.6a.

I have my PPTP server (192.168.1.219) internal to my LAN (eth0) and clients in a different network.

I have a linux box where I applied the patch with IP address on one interface

eth0 as 192.168.1.76 and another interface eth1 as 192.168.9.10.

I have two clients (Win 95) with their IP address as 192.168.9.1 and other's

as 192.168.9.2.

The default gateway for these clients is set to 192.168.9.10.

I added a simple rule in my Linux box

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

From clients I am able to ping the other networks. ( I am able to ping 192.168.1.219).

When I tried to establish a pptp connection from 192.168.9.1 to 192.168.1.219.

The connection got established and client logged into the network.

The problem aroused here. when I tried from the second client 192.168.9.2 to

establish a pptp connection it failed. At any instant only one connection is getting

established.

So thought the patch is no good so I downloaded a patch from

http://www.impsec.org/linux/masquerade/ip_masq_vpn.html

which is netfilter-pptp-2.4.17-rev2.patch.

when I tried to apply this patch it applied cleanly.

Now I tried the above mentioned setup again.

Again its the same case. I am not able to connect the second client.

At any instant only one client is getting connected.

I am caught in this loop.

I saw a patch in December's list from Philip.

I would like to know the steps involved in getting PPTP conntrack work.

Which patch I should apply first, is it the one from netfilter.org pptp-conntrack-nat.patch?

When can I apply the patch given by philip?

What are the iptable rules I should add?

please guide me. I want to connect multiple PPTP clients.

Please explain the steps involved in this as I am a new to iptables / conntrack.

Thanks in advance.

regards,
adharsh.

Adharsh,

Philip has posted a patch to the netfilter patch-o-matic PPTP patch. The latter seems to apply well against the stock Linux kernel 2.4.20 from kernel.org. All it takes is patching the netfilter patch first, then running the POM runme script with the extra parameter.

The PoPToP server itself may need a modification with regard to call ID allocation, see

http://sourceforge.net/tracker/index.php?func=detail&aid=648880&group_id=44827&atid=441003

--
Ilguiz Latypov
Net Integration Technologies, Inc

tel. +1 (514) 281 9191 x 117