Re: [Astlinux-users] PPTP support

2009-01-22 Thread Lonnie Abelbeck

On Jan 22, 2009, at 1:25 PM, Michael Keuter wrote:

> Hi,
>
> I tested the experimental pptpd package (with the 0.6 branch 2390),
> because a customer of mine like to have that (I know about the
> security issues of PPTP :-)).
>
> With a few tweaks in the "/etc/pptpd.conf" (and manual starting of
> pptpd) I got it running, so that I am connected from external and I
> get an 192.168.0.xx ip address. But I don't know how to configure
> Arno's FW to access my internal 192.168.201.0 network.
>
> Any hints?
>
> Michael

Yes, give your customer an OpenVPN client... problem solved. :-)

Otherwise, take a look at the arno astlinux.shim and the integration  
for OpenVPN:

addINTERNALnet "$ovpnIF" "$ovpnIP" "$ovpnNM"

basically, you are adding...

INT_IF="$INT_IF${INT_IF:+ }$pptpIF"
INTERNAL_NET="$INTERNAL_NET${INTERNAL_NET:+ }$pptpIP/$pptpNM"
NAT_INTERNAL_NET="$NAT_INTERNAL_NET${NAT_INTERNAL_NET:+ }$pptpIP/ 
$pptpNM"

And, of course allow GRE into the box.

If that doesn't work, take a look at Arno's "Firewall" mailing list  
archives for possible guidance.

Lonnie



--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.


[Astlinux-users] PPTP support

2009-01-22 Thread Michael Keuter
Hi,

I tested the experimental pptpd package (with the 0.6 branch 2390), 
because a customer of mine like to have that (I know about the 
security issues of PPTP :-)).

With a few tweaks in the "/etc/pptpd.conf" (and manual starting of 
pptpd) I got it running, so that I am connected from external and I 
get an 192.168.0.xx ip address. But I don't know how to configure 
Arno's FW to access my internal 192.168.201.0 network.

Any hints?

Michael

-- 
Email: mailto:mkeu...@web.de

--
This SF.net email is sponsored by:
SourcForge Community
SourceForge wants to tell your story.
http://p.sf.net/sfu/sf-spreadtheword
___
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.