Well,

I already kicked my own pptp-server and switched to ipsec (in progress),
which will (hopefully not) lead to some more questions...

However, pptp is still needed to connect my client to an outside network, so
I can't get rid of it right now :(

Ok then, thanks a lot, if I find a solution beside what you've mentioned,
I'll let you know.

Tarqi

PS: What will I need to do to get the mails send in fashion, that they are
threaded in the mailing list (Outlook 2007)? If someone knows, please let me
know. Thanks.


-----Original Message-----
From: Tom Eastep [mailto:[email protected]] 
Sent: Tuesday, September 18, 2012 11:17 PM
To: [email protected]
Subject: Re: [Shorewall-users] GRE blocked on Masq PPTP

On 09/18/2012 01:36 PM, Tarqi Kazan wrote:
> Thanks for your fast reply, but...
> I already read this in your docs and tried it.
> Unfortunately the modules depends each other:
> Example:
>
> modinfo nf_nat_pptp
> -------------------
> filename:
> /lib/modules/3.5.3-1-ARCH/kernel/net/ipv4/netfilter/nf_nat_pptp.ko.gz
> alias:          ip_nat_pptp
> description:    Netfilter NAT helper module for PPTP
> author:         Harald Welte <[email protected]>
> license:        GPL
> depends:        nf_conntrack_pptp,nf_nat_proto_gre,nf_nat,nf_conntrack
> intree:         Y
> vermagic:       3.5.3-1-ARCH SMP preempt mod_unload modversions 686
>
> Blacklisting (all of them?) in "helpers" or "modules.conf will not 
> help I suppose?

No.

It's been years since I've used PPTP, given its weak authentication scheme.
I guess you'll have to allow incoming GRE.

>
> OT: Sorry for the email-formatting, need to figure out which 
> mail-client to use for the list :(

No Problem.

-Tom


-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

----------------------------------------------------------------------------
--
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and threat
landscape has changed and how IT managers can respond. Discussions will
include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users


------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to