RE: passing/redirecting PPTP through OpenBSD 2.8

[Shriman Gurung <sg@dataconnection.com>]

Shouldn't you be letting through through port TCP/1723 and protocol 47?
It looks like you are letting in proto 47 and, umm port 47?

shriman

-----Original Message-----
From: Will Macdonald [mailto:wfm@macscan.co.uk]
Sent: 30 April 2001 22:14
To: misc@openbsd.org
Subject: passing/redirecting PPTP through OpenBSD 2.8


Hi everyone,

I have been trying for days now to get PPTP traffic to pass through an
OpenBSD (2.8 patch) to a Windows 2000 on address 10.1.1.1

I have been through the mailing list several times and followed all advice
given. I have recompiled the kernel with gre and OPTION gateway.

I have the following relevant lines in ipnat.rules:
rdr ep0 0/0 port 0 -> 10.1.1.1 port 0 gre
rdr ep0 123.123.123.123/32 port 47 -> 10.1.1.1 port 47

and in ipf.rules:
pass in quick on ep0 from any to 123.123.123.123 port = 47
pass in quick on ep0 proto gre from any to 123.123.123.123

running ifconfig -a the gre entry is as follows:
gre0: flags=8010<POINTOPOINT,MULTICAST> mtu 1450

in the sysctl.conf:
net.inet.gre.allow

Can anyone see anything obvious that needs to be checked that I might have
forgotten.

I am using Windows ME on the client side behind a NAT box on a 192.168.1.x
address.

Any pointers greatly appreciated.

Will