2009/11/28 Christoph Leser <le...@sup-logistik.de>: > 1723 is PPTP. This uses GRE ( generic routing encapsulation ). > > You must allow this protocol. > > And, as far as I know, openBSD cannot NAT this protocol ( it is possible to > nat GRE for pptp if you peek into the next higher level protocol ( ppp in this > case ? ) but this is not implemented )
pf can NAT GRE, but I beleive only one session per endpoint. http://monkey.org/openbsd/archive/misc/0403/msg01041.html