/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
It almost convinces me to try again. But the boss wants this working
yesterday, so the Cisco will be in soon. Between myself and an
MCSP/almost MCSE, we couldn't get it working. I would try Linux VPN to
this guy's Cisco router instead of one of his NT's behind it, but if it
doesn't work, the boss may look to hiring someone to manage the network
in my place. (This Jack of All Trades thing is great until they realize
that means I'm master of none.)
It'd be nice if this list automatically set the reply-to on messages to
the list. I don't know how many solutions I've missed because someone
else asks a question that I foresee needing help with only to have the
answer go straight back to the questioner. Then I have to sit there and
ask the same question just to even see who can answer it.
Charles Shoemaker wrote:
>
> It's working for me, at my own network and one client. There are a
> bunch of settings to juggle, both at the NT RAS side and the client
> side -- it's a hilarious "who's on first" scenario (actually not a bit
> funny, but pitiful in how badly Microsoft designed PPTP!). Via dial-
> up, it's v-e-r-y slow, but it does work.
>
> Date sent: Mon, 31 Jan 2000 21:40:47 -0700
> From: Digital Wokan <[EMAIL PROTECTED]>
> To: Sean Brown <[EMAIL PROTECTED]>, Masquerade List
><[EMAIL PROTECTED]>
> Subject: Re: [Masq] PPTP VPN
>
> > /* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! */
> >
> >
> > So is this one of those answers based on theory, howto's, and man pages,
> > or have you successfully implemented this in a live environment across
> > the Internet?
> >
> > Sean Brown wrote:
> > >
> > > You need to check out the VPN Masquerade HOWTO at
> > > http://www.linuxdoc.org/HOWTO/VPN-Masquerade-HOWTO.html written by John
> > > Hardin (BTW John, this was a great resource for getting my VPN up and
> > > running). I got rid of my stock RH6.0 2.2.5-xx kernel and downloaded the
> > > 2.2.12 source (current at the time). I then patched the kernel source with
> > > John's IP_Masq_VPN patch for the 2.2.12 kernel
> > > (ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn-2.2.11.patch.gz)
> > > and recompiled with all the firewalling and masq'ing options set.
> > >
> > > After you've installed the new kernel you need to portfw your tcp/1723
> > > requests to your internal NT pptp server using the ipmasqadm tool.
> > > # /usr/sbin/ipmasqadm portfw -a -P tcp -L <EXT.VIRTUAL.INT> 1723 -R
> > > <INT.PPTP.SERVER> 1723
> > >
> > > After this is setup you need to start the ipfwd arbitrary protocol
> > > forwarding tool to redirect protocol 47 to your NT pptp server
> > > (http://www.pdos.lcs.mit.edu/~cananian/Projects/IPfwd/).
> > > # /usr/local/sbin/ipfwd --masq <INT.PPTP.SERVER> 47 &
> > >
> > > That's it. PPTP requests come in on tcp/1723 the initial handshake is
> > > completed and the tunnel gets established using Protocol 47.
> > >
> > > Sean Brown, System Administrator
> > > Applied Geographics, Inc.
> > > 100 Franklin St.
> > > Boston, MA 02110
> > > [EMAIL PROTECTED]
> > >
> > > > -----Original Message-----
> > > > From: Digital Wokan [mailto:[EMAIL PROTECTED]]
> > > > Sent: Friday, January 28, 2000 10:17 PM
> > > > To: Gary Maltzen
> > > > Cc: Masquerade List
> > > > Subject: Re: [Masq] PPTP VPN
> > > >
> > > >
> > > > /* HINT: Search archives @ http://www.indyramp.com/masq/
> > > > before posting! */
> > > >
> > > >
> > > > I've learned the hard way that MS's GRE isn't the same as the GRE
> > > > handled by Linux. IP:47 is MS, IP:98 is Linux. Don't know who got
> > > > there first, but after much trying between myself and a CNE/MCSP, we
> > > > couldn't make it work.
> > > >
> > > > Gary Maltzen wrote:
> > > > >
> > > > > /* HINT: Search archives @ http://www.indyramp.com/masq/
> > > > before posting! */
> > > > >
> > > > > Having read the above-mentioned archives as well as the
> > > > HOW-TO for IPCHAINS
> > > > > and VPN...
> > > > >
> > > > > I can get PPTP working between two WIntel systems on my
> > > > intranet/LAN but
> > > > > apparently can't get the GRE protocol past my Linux router.
> > > > It shows up on
> > > > > the input and forward chains but not the output chain.
> > > > >
> > > > > In order to get GRE masq'd and routed between eth0 and ppp0
> > > > > - is there a patch needed for kernel 2.2.10?
> > > > > - is there a patch needed for kernel 2.2.14?
> > > > >
> > > > > Do I need to compile GRE into the kernel, or is the "ip_gre" module
> > > > > sufficient?
> > > > >
> > > > > What exactly does "iptunnel" do? Other than the self-help,
> > > > I don't seem to
> > > > > find any documentation on this.
> > > > >
> > > > > Thanks.
> > > > >
> > > > > _______________________________________________
> > > > > Masq maillist - [EMAIL PROTECTED]
> > > > > Admin requests can be handled at
> > > http://www.indyramp.com/masq-list/ -- THIS INCLUDES UNSUBSCRIBING!
> > > > or email to [EMAIL PROTECTED]
> > > >
> > > > PLEASE read the HOWTO and search the archives before posting.
> > > > You can start your search at http://www.indyramp.com/masq/
> > > > Please keep general linux/unix/pc/internet questions off the list.
> > >
> > > --
> > > Digital Wokan
> > > Tribal mage of the electronics age
> > > Guerilla Linux Warrior
> > >
> > > _______________________________________________
> > > Masq maillist - [EMAIL PROTECTED]
> > > Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
> > > INCLUDES UNSUBSCRIBING!
> > > or email to [EMAIL PROTECTED]
> > >
> > > PLEASE read the HOWTO and search the archives before posting.
> > > You can start your search at http://www.indyramp.com/masq/
> > > Please keep general linux/unix/pc/internet questions off the list.
> >
> > --
> > Digital Wokan
> > Tribal mage of the electronics age
> > Guerilla Linux Warrior
> >
> > _______________________________________________
> > Masq maillist - [EMAIL PROTECTED]
> > Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS
>INCLUDES UNSUBSCRIBIN
> G!
> > or email to [EMAIL PROTECTED]
> >
> > PLEASE read the HOWTO and search the archives before posting.
> > You can start your search at http://www.indyramp.com/masq/
> > Please keep general linux/unix/pc/internet questions off the list.
>
>
--
Digital Wokan
Tribal mage of the electronics age
Guerilla Linux Warrior
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- THIS INCLUDES
UNSUBSCRIBING!
or email to [EMAIL PROTECTED]
PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.
