I have a bering v 1.1 floppy, and use it to implement a firewall
gateway on an old Pentium 400 PC.
The shorewall verson is 1.3.11a. There are 2 NIC on the PC. One for
net One for loc.
The gateway implement NAT for LAN to WAN traffic  and do DNAT of PPTP
for WAN to a PC on my LAN network.
I used to connect from my MS XP PC in office to a MS XP PC in my home
network via PPTP.
Everything is OK.

Recently, I try to build the bering floppy by my own. 

I build the kernel accoring to the steps described in the file : 
        cvs: leaf/src/bering-uclibc/configs/kernel/2.4.20/kernel.txt
and used the following kernel config file :
        cvs: leaf/src/bering-uclibc/configs/kernel/2.4.20/Bering-2.4.20.config

Finally, the floppy is done.
Everyting seems OK until I find the PPTP incoming (from WAN to LAN)
traffic is fail.

I capture the packet traces and find
1. pptp traffic is DNAT (port forward) correctly.
2. but the "PPP LC Configuration Request" (a GRE packet) can't be forwarded.

I have added the following rules in /etc/shorewall/rules 
        DNAT   net   loc:<MS server address>   tcp   1723
        DNAT   net   loc:<MS server address>   47

I guess I have lost some important kernel patches or have a incorrect
kernel config.
But all I have done is accoding to the "kernel.txt" file.
if there is a bug in the patch file "helpers-2.4.20.patch.gz" ?

Would anyone may kindly help me ? 
Thanks a lot !


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl

_______________________________________________
leaf-devel mailing list
leaf-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-devel

Reply via email to