Re-2: connection to vpn Server (pptp) behind iptables FW
Quoted 6 lines
Micro$oft has a 'technote' on this in their technet section on the website. AFAIR you need to allow protocol 37 to be forwarded between the two.
I have added a rule that forwards the protocol 37, but it still not works?
Thanx Peter
Quoted 5 lines · On Friday 12 March 2004 10:34 am, [email protected] wrote:
Quoted 3 lines
Micro$oft has a 'technote' on this in their technet section on the website. AFAIR you need to allow protocol 37 to be forwarded between the two.
I have added a rule that forwards the protocol 37, but it still not works?
Have you tried adding my suggested LOGging rules to see if there's something important still being DROPped?
Antony.
Signature · 4 lines
I'm pink, therefore I'm Spam.
Please reply to the list;
please don't CC me.Quoted 7 lines · On Fri, 2004-03-12 at 12:34, [email protected] wrote:
Quoted 5 lines
Micro$oft has a 'technote' on this in their technet section on the website. AFAIR you need to allow protocol 37 to be forwarded between the two.
I have added a rule that forwards the protocol 37, but it still not works?
What about searching technet?
Quoted 4 lines
Thanx Peter
Signature · 7 lines
-- Raymond Leach <[email protected]> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --
Quoted 4 lines · Le ven 12/03/2004 à 11:34, [email protected] a écrit :
Quoted 3 lines
Micro$oft has a 'technote' on this in their technet section on the website. AFAIR you need to allow protocol 37 to be forwarded between the two.
I have added a rule that forwards the protocol 37, but it still not works?
PPTP relies on a slightly modified GRE tunnel, which protocol _47_, not 37.
cbr@anduril:~$ grep gre /etc/protocols gre 47 GRE # General Routing Encapsulation
Signature · 2 lines
http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE
Quoted 2 lines
Quoted 2 lines
Hi! I'm your friendly neighbourhood signature virus. Copy me to your signature file and help me spread!
Quoted 8 lines · Cedric Blancher
Quoted 4 lines · Le ven 12/03/2004 à 11:34, [email protected] a écrit :
Quoted 3 lines
Micro$oft has a 'technote' on this in their technet section on the website. AFAIR you need to allow protocol 37 to be forwarded between the two.
I have added a rule that forwards the protocol 37, but it still not works?
PPTP relies on a slightly modified GRE tunnel, which protocol _47_, not 37.
Yup, you are correct. My mistake. I found the info at Technet in their document entitled 'VPN servers and firewall configuration'
Quoted 2 lines
cbr@anduril:~$ grep gre /etc/protocols gre 47 GRE # General Routing Encapsulation
Signature · 7 lines
-- Raymond Leach <[email protected]> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --