I have a bering v 1.1 floppy, and use it to implement a firewall gateway on an old Pentium 400 PC. The shorewall verson is 1.3.11a. There are 2 NIC on the PC. One for net One for loc. The gateway implement NAT for LAN to WAN traffic and do DNAT of PPTP for WAN to a PC on my LAN network. I used to connect from my MS XP PC in office to a MS XP PC in my home network via PPTP. Everything is OK.
Recently, I try to build the bering floppy by my own. I build the kernel accoring to the steps described in the file : cvs: leaf/src/bering-uclibc/configs/kernel/2.4.20/kernel.txt and used the following kernel config file : cvs: leaf/src/bering-uclibc/configs/kernel/2.4.20/Bering-2.4.20.config Finally, the floppy is done. Everyting seems OK until I find the PPTP incoming (from WAN to LAN) traffic is fail. I capture the packet traces and find 1. pptp traffic is DNAT (port forward) correctly. 2. but the "PPP LC Configuration Request" (a GRE packet) can't be forwarded. I have added the following rules in /etc/shorewall/rules DNAT net loc:<MS server address> tcp 1723 DNAT net loc:<MS server address> 47 I guess I have lost some important kernel patches or have a incorrect kernel config. But all I have done is accoding to the "kernel.txt" file. if there is a bug in the patch file "helpers-2.4.20.patch.gz" ? Would anyone may kindly help me ? Thanks a lot ! ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl _______________________________________________ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel