Thanks for your fast reply, but... I already read this in your docs and tried it. Unfortunately the modules depends each other: Example:
modinfo nf_nat_pptp ------------------- filename: /lib/modules/3.5.3-1-ARCH/kernel/net/ipv4/netfilter/nf_nat_pptp.ko.gz alias: ip_nat_pptp description: Netfilter NAT helper module for PPTP author: Harald Welte <[email protected]> license: GPL depends: nf_conntrack_pptp,nf_nat_proto_gre,nf_nat,nf_conntrack intree: Y vermagic: 3.5.3-1-ARCH SMP preempt mod_unload modversions 686 Blacklisting (all of them?) in "helpers" or "modules.conf will not help I suppose? OT: Sorry for the email-formatting, need to figure out which mail-client to use for the list :( Tarqi -----Original Message----- From: Tom Eastep [mailto:[email protected]] Sent: Tuesday, September 18, 2012 10:20 PM To: Shorewall Users Subject: Re: [Shorewall-users] GRE blocked on Masq PPTP On 09/18/2012 12:44 PM, Tarqi Kazan wrote: > Hi List, > > I recently switched to Shorewall, and I it works like a charm (well... > nearly :) > However, there is (minor) problem when using a pptp-client behind the > firewall. > > Based on the two interface example, I like to use a (masq) client to > connect to an pptp-server outside: > > Client (private net) -> { (private net) <-FW-> (public net) } -> > Internet > -> PPtP-server > > Modules loaded: > nf_nat_pptp > nf_nat_proto_gre > nf_conntrack_pptp > nf_conntrack_proto_gre > Try unloading the GRE modules. You should only require the pptp modules for this to work. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ---------------------------------------------------------------------------- -- Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
