/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
So is this one of those answers based on theory, howto's, and man pages,
or have you successfully implemented this in a live environment across
the Internet?
Sean Brown wrote:
>
> You need to check out the VPN Masquerade HOWTO at
> http://www.linuxdoc.org/HOWTO/VPN-Masquerade-HOWTO.html written by John
> Hardin (BTW John, this was a great resource for getting my VPN up and
> running). I got rid of my stock RH6.0 2.2.5-xx kernel and downloaded the
> 2.2.12 source (current at the time). I then patched the kernel source with
> John's IP_Masq_VPN patch for the 2.2.12 kernel
> (ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn-2.2.11.patch.gz)
> and recompiled with all the firewalling and masq'ing options set.
>
> After you've installed the new kernel you need to portfw your tcp/1723
> requests to your internal NT pptp server using the ipmasqadm tool.
> # /usr/sbin/ipmasqadm portfw -a -P tcp -L <EXT.VIRTUAL.INT> 1723 -R
> <INT.PPTP.SERVER> 1723
>
> After this is setup you need to start the ipfwd arbitrary protocol
> forwarding tool to redirect protocol 47 to your NT pptp server
> (http://www.pdos.lcs.mit.edu/~cananian/Projects/IPfwd/).
> # /usr/local/sbin/ipfwd --masq <INT.PPTP.SERVER> 47 &
>
> That's it. PPTP requests come in on tcp/1723 the initial handshake is
> completed and the tunnel gets established using Protocol 47.
>
> Sean Brown, System Administrator
> Applied Geographics, Inc.
> 100 Franklin St.
> Boston, MA 02110
> [EMAIL PROTECTED]
>
> > -----Original Message-----
> > From: Digital Wokan [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, January 28, 2000 10:17 PM
> > To: Gary Maltzen
> > Cc: Masquerade List
> > Subject: Re: [Masq] PPTP VPN
> >
> >
> > /* HINT: Search archives @ http://www.indyramp.com/masq/
> > before posting! */
> >
> >
> > I've learned the hard way that MS's GRE isn't the same as the GRE
> > handled by Linux. IP:47 is MS, IP:98 is Linux. Don't know who got
> > there first, but after much trying between myself and a CNE/MCSP, we
> > couldn't make it work.
> >
> > Gary Maltzen wrote:
> > >
> > > /* HINT: Search archives @ http://www.indyramp.com/masq/
> > before posting! */
> > >
> > > Having read the above-mentioned archives as well as the
> > HOW-TO for IPCHAINS
> > > and VPN...
> > >
> > > I can get PPTP working between two WIntel systems on my
> > intranet/LAN but
> > > apparently can't get the GRE protocol past my Linux router.
> > It shows up on
> > > the input and forward chains but not the output chain.
> > >
> > > In order to get GRE masq'd and routed between eth0 and ppp0
> > > - is there a patch needed for kernel 2.2.10?
> > > - is there a patch needed for kernel 2.2.14?
> > >
> > > Do I need to compile GRE into the kernel, or is the "ip_gre" module
> > > sufficient?
> > >
> > > What exactly does "iptunnel" do? Other than the self-help,
> > I don't seem to
> > > find any documentation on this.
> > >
> > > Thanks.
> > >
> > > _______________________________________________
> > > Masq maillist - [EMAIL PROTECTED]
> > > Admin requests can be handled at
> http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING!
> > or email to [EMAIL PROTECTED]
> >
> > PLEASE read the HOWTO and search the archives before posting.
> > You can start your search at http://www.indyramp.com/masq/
> > Please keep general linux/unix/pc/internet questions off the list.
>
> --
> Digital Wokan
> Tribal mage of the electronics age
> Guerilla Linux Warrior
>
> _______________________________________________
> Masq maillist - [EMAIL PROTECTED]
> Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
> INCLUDES UNSUBSCRIBING!
> or email to [EMAIL PROTECTED]
>
> PLEASE read the HOWTO and search the archives before posting.
> You can start your search at http://www.indyramp.com/masq/
> Please keep general linux/unix/pc/internet questions off the list.
--
Digital Wokan
Tribal mage of the electronics age
Guerilla Linux Warrior
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
