* Re:Multiple client VPN - where to put conntrack?
@ 2004-11-10 1:01 周平
0 siblings, 0 replies; only message in thread
From: 周平 @ 2004-11-10 1:01 UTC (permalink / raw)
To: netfilter, netfilter
Hi there,
This may be a very stupid question, but I haven't found the information
anywhere, so here goes - I have a working VPN client-server set-up that
works through an iptables masquerading NAT configuration but only for
one client at a time - and I need to expand it. The VPN is:
- Server - running PPTP (poptop) on Redhat 9 connected directly to the
internet via iptables.
- Client(s) - A small network of workstations (Debian, win2k, mac OSX)
connected to the internet with ADSL via a Debian router running iptables
doing NAT. Currently, tunnels are created from the workstations to the
server through the router and internet successfully, but only one
machine can connect at a time and I would like to improve on this.
I understand that I need to install PPTP and GRE connection tracking on
the Debian router...(and here's the silly question...) will the RH9 PPTP
server need conntrack too?
One further question, the ADSL connection at the client end uses PPPoA
with LLC - would it be possible for this to stuff up the connection
tracking or unlikely? And what about PPPoE? Or is it all just completely
dependent on the ISP?
Thanks,
James
I should update your ppp server
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-11-10 1:01 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2004-11-10 1:01 Re:Multiple client VPN - where to put conntrack? 周平
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.