/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Still having a similar problem, with setup including:

ipchains -P forward DENY
ipchains -A forward -s 192.168.1.0/24 -j MASQ

/sbin/modprobe ip_masq_pptp

/usr/sbin/ipmasqadm portfw -f

/usr/sbin/ipmasqadm portfw -a -P tcp -L xx.xx.xx.xx 1723 -R 192.168.1.22 1723
/usr/sbin/ipmasqadm portfw -a -P tcp -L xx.xx.xx.xx 25 -R 192.168.1.22 25
/usr/sbin/ipmasqadm portfw -a -P tcp -L xx.xx.xx.xx 110 -R 192.168.1.22 110
/usr/sbin/ipmasqadm portfw -a -P tcp -L xx.xx.xx.xx 80 -R 192.168.1.22 80

/usr/local/sbin/ipfwd --masq 192.168.1.22 47 &

This is on a 2.2.16 kernel with the patch applied. The other services are
going through to that machine just fine, only PPTP is failing for me.

On Mon, Sep 25, 2000 at 07:06:44PM +1100, raf wrote:
> 
> Tim wrote:
> 
> > I've been trying to use ipmasq portfw for a VPN connection I'm attempting
> > to set up and am having some problems with getting it to forward.
> > 
> > I used the following command-line option(s):
> > ipmasqadm portfw -P tcp -a -L 216.60.221.155 1723 -R 198.246.197.235 1723
> > 
> > I never could get the VPN connection established so I tried to telnet to
> > the port and received the following:
> > [root@tim /root]# telnet 216.60.221.155 1723
> > Trying 216.60.221.155...
> > telnet: Unable to connect to remote host: Connection refused
> > 
> > Am I doing something wrong here??
> > 
> > I know I can't use the redir tool, but when I use it instead, an attempt
> > is made to connect to the Private IP VPN Server, but naturally can't
> > complete the connection.
> 
> it is necessary to set up masquerading before port forwarding will work.
> i.e. you need something like:
> 
>   ipchains -P forward DENY
>   ipchains -A forward -s 198.246.197.235 -j MASQ
> 
> before the ipmasqadm command will do anything.
> 
> could this be your problem?
> 
> raf

 \/\/ I-I I T 
 Blauvelt
 [EMAIL PROTECTED]

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to