Skip to contentSkip to conversation

PPTP FWD and/or NAT?

DISCUSSION __ Radien__ 1 participant 1 message May 22, 2004

lore
Share & tools
lore
#0 lore raw

Dear All

I just see the pptp_conntrack_nat helper module. I think it should
track the connection that get NATed for PPTP client access to outside

#

               pptp_call
           ---------------->     do NAT   ---------------->

(a client)------------------->[linux-box]------------------->(a vpn server)

# Figure-1

So I can just use one client to use vpn access to a server at a time. A question here: How about, e.g., using two client to access two
seperated vpn servers on the outside?

The second scenario:
#

               pptp_call
           ---------------->         route         --------------->

(a client)------------------->[routing-linux-box]------------------->(a vpn server)

# Figure-2

Let's assume another scenario, If we have some clients with valid_ip
that don't want to get NATed(I just filter in FWD). So what should I accept in FWD if I want to grant their access to outside using PPTP protocol, that they will never face any problem? Are there specific ports to get open? or we should wait for another conntrack helper module to pass pptp traffic?

at last
PPTP FWD and/or NAT, which would be better?