/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting!
/* ALSO: Don't quote this header. It makes you look lame :-) */
[EMAIL PROTECTED] wrote:
> Hi All,
>
> I'm trying to get Microsoft VPN to work across my Masq gateway. The setup
> is that I have a VPN client, inside the gateway and firewall (192.168.100.X)
> that is trying to connect to an external VPN server. The VPN is Microsoft
> pptp. I have read the "masq_vpn_howto" and I feel utterly stupid. I can't
> quite figure out what it is trying to say. I have included an exerpt from
> http://www.impsec.org/linux/masquerade/ip_masq_vpn.html for clarity. I am
> running Redhat 7.0 (right out of the box) with kernel 2.2.16-22, at least
> that's what my /boot/ says.
i can't help much as i've never tried this, but...
> My questions are as follows:
> Do I need to download the newer Kernel 2.2.17-14 from redhat?
probably not but it couldn't hurt.
i'd recommend downloading the latest 2.2 kernel (2.2.19, i think)
and finding the latest vpn patch and installing that. disregard
the redhat kernels and patches.
> If I do not use this new kernel, what patch do I need?
> I tried applying ip_masq_vpn-RH2.16-2.patch.gz, but after applying I
> typed Make modules_install and got an error (no make file).
that looks like the wrong patch. RH2.16-2 probably means kernel 2.2.16-2
but you have 2.2.16-22 maybe that's the problem?
a patch wouldn't remove the makefile. are you sure you were in
the right directory? you should probably familiarise yourself
with compiling and reconfiguring the kernel and familiarise
yourself with the patch utility.
also, why did you type make modules_install immediately after patching?
follow the compilation instructions in the kernel README file. make
modules_install is the last thing you do just before installing the kernel,
not the first thing.
> I'm guessing
> that after I apply the patch, I have to run Make Menuconfig, then
> make dep, make clean, make zimage... Is this right? Do I need to rebuild
> the kernel after patching?
> Is there an easier way?
yes (except for the make clean), of course, and no.
hmm, if you're not familiar with compiling the kernel, maybe it
is best to download a prepatched kernel from redhat. you should
still reconfigure it for your system though if it comes as source
code.
also note that microsoft pptp is useless. search for
"kindergarten cryptography" on the net and you'll see why.
does the masq vpn page mention any vpn specific mailing lists where
you can ask?
raf
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ --
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
