Tom Eastep wrote:

> It is working exactly as you *should* expect. The problem is that the
> server is sending GRE packets before the client. Normally, that is not a
> problem because all outbound traffic is SNATed through the same IP
> address. In your case, you want it to get a different source IP from
> other traffic -- so you must include the entry in /etc/shorewall/masq to
> make that work.

I have updated the Shorewall PPTP documentation to include that entry.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to