Re: Forwarding PPTP traffic to Internet
- From: "Gus" <angus.monro@xxxxxxxxxx>
- Date: 11 Jan 2006 14:47:11 -0800
OK, thanks, let me try and explain better.
- I'm talking broadband connections from the laptop through to ISP to
router.
- the router is a DLink 824-vup. That said, I'm not trying to use its
built-in VPN connections support - from the outside world's
perspective, it's merely proxying the appropriate ports from the
server. Yes, at the end of the day, it's the server's LAN's gateway.
The problem is a bit of a "chestnut" problem: the PPTP-over-broadband
VPN connection to the server works just fine, and does everything I
want, EXCEPT that I want to be able to also see the rest Internet (e.g.
Websurf) while the VPN connection is active. I'm aware of the
so-called "split-tunnelling" solution, which allows the client machine
to directly see the 'Net by an appropriate configuration at the client
end. But I don't want to do that due to the security issues it raises.
So I figure I need to get the Linux server to route things
appropriately i.e. traffic from that laptop via the VPN that is
destined for the server's LAN stays with the server's LAN, while
traffic that isn't so destinated gets forwarded through to the "Big
Wide World" (which would therefore go via the router).
Hence, I've thrown in the iptable rule as per my prior posting, but
this doesn't seem to be working, and I don't really see why not, or how
to diagnose it.
What I do have so far is:
(a) a working VPN connection, with traffic happily emerges at the
server end through ppp0.
(b) the ability for the server itself to see the Internet - I can
happily websurf using the server's web browser.
So the problem just seems to be making that 'bridge' between the two.
BTW, (bit of a newbie comment coming!) I thought routing was done with
iptables - hence my solution in the preceding posting. So what's the
difference between the kernel's routing tables (as manipulated with the
route utility) and the iptables (as manipulated with the iptables
utility)?
Thanks in advance for your help.
Gus.
.
- References:
- Forwarding PPTP traffic to Internet
- From: Gus
- Re: Forwarding PPTP traffic to Internet
- From: metaltama
- Forwarding PPTP traffic to Internet
- Prev by Date: Re: Linux HA: Stonith configuration for HP Proliant Blade servers
- Next by Date: Re: Traffic Shaping (+firewall)
- Previous by thread: Re: Forwarding PPTP traffic to Internet
- Next by thread: Re: Forwarding PPTP traffic to Internet
- Index(es):
Relevant Pages
|
