Skip to contentSkip to conversation

VPN and iptables rules

DISCUSSION Ozgur AKAN 3 participants 3 messages Nov 4, 2003 – Nov 5, 2003

lore
Share & tools
lore

Ozgur AKAN

author
#0 lore raw

Hi,
I have a installed pptpd, mppe to my RedHat 9.0.

real ip`s

212.2.212.1 --------------- 195.111.111.1

vpn ip`s

192.168.77.11 ------------ 192.168.77.1

I open protocol gre, and tcp port 1721 at my firewall to establish a connection between client and linux firewall. Client is a windows xp.

After dialing my isp my winxp connects to internet and gets 212.2.212.1. I establish the vpn connection to linux firewall. Everything is ok until this point.

My problem is I can not ping the server from client or vice versa.

What shall i do?

thanks,
Ozgur AKAN

#1 lore raw
Quoted 4 lines · Ozgur AKAN

After dialing my isp my winxp connects to internet and gets 212.2.212.1. I establish the vpn connection to linux firewall. Everything is ok until this point.
My problem is I can not ping the server from client or vice versa.

You should have a look to the filtering ruleset for the PPTP link on the server side :

INPUT and OUTPUT for ping
FORWARD for usual trafic

Signature · 2 lines
http://www.netexit.com/~sid/
PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
Quoted 2 lines
Quoted 2 lines

Hi! I'm your friendly neighbourhood signature virus. Copy me to your signature file and help me spread!

#2 lore raw
In reply to Ozgur AKAN

Try pinging from a machine behind the server the tunnel is terminated on.

Ted

Quoted 24 lines · Ozgur AKAN

Hi,
I have a installed pptpd, mppe to my RedHat 9.0.

real ip`s

212.2.212.1 --------------- 195.111.111.1

vpn ip`s

192.168.77.11 ------------ 192.168.77.1

I open protocol gre, and tcp port 1721 at my firewall to establish a connection between client and linux firewall. Client is a windows xp.

After dialing my isp my winxp connects to internet and gets 212.2.212.1. I establish the vpn connection to linux firewall. Everything is ok until this point.

My problem is I can not ping the server from client or vice versa.

What shall i do?

thanks,
Ozgur AKAN