Article View: linux.redhat.misc
Article #32Re: VPN Behind a redhat 7.3 gateway
From: Joerg Morbitzer
Date: Thu, 10 Apr 2003 11:24
Date: Thu, 10 Apr 2003 11:24
33 lines
2385 bytes
2385 bytes
Michael Hart wrote: > I am running an NT VPN server on a local subnet behind a RedHat 7.3 > gateway. > > I can log onto the NT VPN locally using its local net IP address (i.e. the > VPN seems to be set up correctly) but cannot log on through the gateway > (i.e. NAT appears to be not working correctly). > > I have set up VPN masqurading as per > http://www.impsec.org/linux/masquerade/ip_masq_vpn.html > > i.e. > > /sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 1723 -j DNAT > --to 192.168.0.40 > /sbin/iptables -t nat -A PREROUTING -i eth1 -p 47 -j DNAT --to > 192.168.0.40 > > I don't know if I have to patch the kernel or recompile it with various > options > > I am using kernel 2.4.19 > > Kernel modules include IP tunnelling. > > Any help appreciated !!! > > Michael It is always good to add more logging to your firewall rules, so before your DNAT setup use the same rule with -j LOG and check the logs. Also, does the NT VPN server has a correct route back to the originating ip address?
Technical Details
Message-ID:
<b73k9i$akska$1@ID-162417.news.dfncis.de>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!headwall.stanford.edu!fu-berlin.de!uni-berlin.de!pd958d127.dip.t-dialin.NET!not-for-mailReferences:
<d86la.5914$1h6.50238@news-server.bigpond.net.au>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fa2c1,ec6ca9a44d72332 X-Google-Attributes: gidfa2c1,public X-Google-Thread: 111240,ec6ca9a44d72332 X-Google-Attributes: gid111240,public X-Google-Thread: 102983,ec6ca9a44d72332 X-Google-Attributes: gid102983,public X-Google-Thread: 115bae,ec6ca9a44d72332 X-Google-Attributes: gid115bae,public X-Google-Thread: 10669a,ec6ca9a44d72332 X-Google-Attributes: gid10669a,public X-Google-ArrivalTime: 2003-04-10 04:24:35 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!headwall.stanford.edu!fu-berlin.de!uni-berlin.de!pd958d127.dip.t-dialin.NET!not-for-mail From: Joerg Morbitzer <jomo@sol-3.de> Newsgroups: linux.redhat.misc,aus.computers.linux,comp.os.ms-windows.networking.ras,comp.os.ms-windows.nt.admin.networking,comp.os.linux.networking Subject: Re: VPN Behind a redhat 7.3 gateway Followup-To: linux.redhat.misc Date: Thu, 10 Apr 2003 13:24:33 +0200 Lines: 34 Message-ID: <b73k9i$akska$1@ID-162417.news.dfncis.de> References: <d86la.5914$1h6.50238@news-server.bigpond.net.au> NNTP-Posting-Host: pd958d127.dip.t-dialin.net (217.88.209.39) Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7Bit X-Trace: fu-berlin.de 1049973874 11170442 217.88.209.39 (16 [162417]) User-Agent: KNode/0.7.2