Re: vpn pass through

From: Andrew (dunggaze_at_yahoo.com)
Date: 01/14/04 

Date: Wed, 14 Jan 2004 00:17:10 GMT

That article seems to describe only lower versions of Linux, and RH9.0
supports iptables, where I couldn't find any examples. I am using PPTP
connection, can you show me any examples to do iptables? I don't know how to
do 47 GRE, (My VPN server in MS is 192.168.10.2, not the Linux box) like:

#!/bin/sh
MYIP=`ifconfig eth0 |grep inet |cut -d: -f2 |cut -d" " -f1`
iptables -A PREROUTING -t nat -p tcp -d $MYIP --dport 1723 -j DNAT --to
192.168.10.2:1723
iptables -A PREROUTING -t nat -p udp -d $MYIP --dport 500 -j DNAT --to
192.168.10.2:500
iptables -A PREROUTING -t nat -p udp -d $MYIP --dport 1701 -j DNAT --to
192.168.10.2:1701 

-- 
Thanks
Andrew
"Bryan Martin" <spam@ahwayside.com> wrote in message
news:eXXMb.246576$dl.12451840@twister.southeast.rr.com...
> No i mean you need to forward IP protocol GRE.  Read the article in whole.
> They walk you through, show you examples etc....   You will forward port
> 1723 and GRE protocol to your m$ box.
>
> Ports and protocols in play:
>
> Protocol 47 ie. GRE
> TCP 1723 -> PPTP
> UDP 500 -> ISAKMP
> UDP 1701 -> L2TP
>
> Bryan
>
> "Andrew" <dunggaze@yahoo.com> wrote in message
> news:XPVMb.133740$AAe1.38444@news01.bloor.is.net.cable.rogers.com...
> > Do you mean I also need to forward udp 500? Because I am using iptables
> > instead of ipportfw or ipfwadm, I don't know how to do that.
> > Thanks
> > -- 
> > Andrew
> >
> >
> > "Bryan Martin" <spam@ahwayside.com> wrote in message
> > news:OrVMb.246459$dl.12436038@twister.southeast.rr.com...
> > > The reason you are getting this is that the connection is going in
under
> > > PPTP.  This utilizes ports 1723 as well as the GRE protocol.  You will
> > need
> > > to forward this protocol as well.
> > >
> > > Check out:
> > > http://www.linux.org/docs/ldp/howto/VPN-Masquerade-HOWTO.html
> > >
> > > Bryan Martin
> > >
> > >
> > >
> > > "Andrew" <dunggaze@yahoo.com> wrote in message
> > > news:4jKMb.124600$AAe1.48460@news01.bloor.is.net.cable.rogers.com...
> > > > Hi, experts,
> > > >
> > > > My RH9.0 Linux box works as gateway, router, and DHCP for the LAN. I
> > have
> > > > RAS (Windows NT server) under this Linux box, and forward the port
> 1723
> > of
> > > > the Linux to NT server. When I try to dial in  through VPN from
> outside
> > of
> > > > the LAN, conncection keeps verifying the user and password, then
> > prompted
> > > > 'Disconnected. The remote computer did not respond...' after a
while.
> Of
> > > > course, the RAS works fine without the Linux box. Is there any clue
to
> > > > figure out the problem? Thanks for any idea.
> > > >
> > > > -- 
> > > > Andrew
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: vpn pass through
    ... supports iptables, where I couldn't find any examples. ... connection, can you show me any examples to do iptables? ... > No i mean you need to forward IP protocol GRE. ...
    (linux.redhat)
  • Re: serial interface to ethernet interface
    ... > You can also support almost any protocol, ... If I use GRE over IP for the PPP ... connection is it then possible to bridge the connection with a ethernet ...
    (comp.os.linux.networking)
  • RE: VPN to SBS through Comcast router
    ... The only thing I can find is to open TCP/UDP port 47 ... "What's GRE?". ... >> workaround for the hardware router which is not supporting PPTP connection. ... GRE is a client protocol of IP ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN connection not passing the password auth stage.
    ... The Generic Route Encapsulation protocol is used ... One thing I want to clarify is that GRE protocol is based on Internet ... We can also use PPTP Ping utility to determine whether any hardware router ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: [fw-wiz] GRE through NAT (linux iptables)
    ... > I'm trying to set up a GRE tunnel through a NAT gateway as follows: ... Traffic exiting machine A's external interface (eth1) should be NAT'd ... > I have tried various combinations of iptables configurations with no ...
    (Firewall-Wizards)