/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
You need to check out the VPN Masquerade HOWTO at
http://www.linuxdoc.org/HOWTO/VPN-Masquerade-HOWTO.html written by John
Hardin (BTW John, this was a great resource for getting my VPN up and
running). I got rid of my stock RH6.0 2.2.5-xx kernel and downloaded the
2.2.12 source (current at the time). I then patched the kernel source with
John's IP_Masq_VPN patch for the 2.2.12 kernel
(ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn-2.2.11.patch.gz)
and recompiled with all the firewalling and masq'ing options set.
After you've installed the new kernel you need to portfw your tcp/1723
requests to your internal NT pptp server using the ipmasqadm tool.
# /usr/sbin/ipmasqadm portfw -a -P tcp -L <EXT.VIRTUAL.INT> 1723 -R
<INT.PPTP.SERVER> 1723
After this is setup you need to start the ipfwd arbitrary protocol
forwarding tool to redirect protocol 47 to your NT pptp server
(http://www.pdos.lcs.mit.edu/~cananian/Projects/IPfwd/).
# /usr/local/sbin/ipfwd --masq <INT.PPTP.SERVER> 47 &
That's it. PPTP requests come in on tcp/1723 the initial handshake is
completed and the tunnel gets established using Protocol 47.
Sean Brown, System Administrator
Applied Geographics, Inc.
100 Franklin St.
Boston, MA 02110
[EMAIL PROTECTED]
> -----Original Message-----
> From: Digital Wokan [mailto:[EMAIL PROTECTED]]
> Sent: Friday, January 28, 2000 10:17 PM
> To: Gary Maltzen
> Cc: Masquerade List
> Subject: Re: [Masq] PPTP VPN
>
>
> /* HINT: Search archives @ http://www.indyramp.com/masq/
> before posting! */
>
>
> I've learned the hard way that MS's GRE isn't the same as the GRE
> handled by Linux. IP:47 is MS, IP:98 is Linux. Don't know who got
> there first, but after much trying between myself and a CNE/MCSP, we
> couldn't make it work.
>
> Gary Maltzen wrote:
> >
> > /* HINT: Search archives @ http://www.indyramp.com/masq/
> before posting! */
> >
> > Having read the above-mentioned archives as well as the
> HOW-TO for IPCHAINS
> > and VPN...
> >
> > I can get PPTP working between two WIntel systems on my
> intranet/LAN but
> > apparently can't get the GRE protocol past my Linux router.
> It shows up on
> > the input and forward chains but not the output chain.
> >
> > In order to get GRE masq'd and routed between eth0 and ppp0
> > - is there a patch needed for kernel 2.2.10?
> > - is there a patch needed for kernel 2.2.14?
> >
> > Do I need to compile GRE into the kernel, or is the "ip_gre" module
> > sufficient?
> >
> > What exactly does "iptunnel" do? Other than the self-help,
> I don't seem to
> > find any documentation on this.
> >
> > Thanks.
> >
> > _______________________________________________
> > Masq maillist - [EMAIL PROTECTED]
> > Admin requests can be handled at
http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
--
Digital Wokan
Tribal mage of the electronics age
Guerilla Linux Warrior
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
