Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Google is showing me some returns on PPTP/GRE NAT through iptables/netfilter that will allow multiple connections.

However, I am not finding an example of using this pptp helper module that allows for this. Anyone done this before?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

This changed radically in kernel 2.6.14, and that accounts for the various random documentation examples you're finding (many with the pre-2.6.14 syntax). I don't have a machine handy to test on, but you should be fine with loading ip_conntrack_pptp and ip_nat_pptp to get PPTP connection tracking.

share|improve this answer
    
Thanks this is a point in the right direction... will hold my accept to see if someone feels like spoonfeeding it to me :-) –  Kyle Brandt Aug 5 '10 at 18:43
    
modprobe 'em and give it a go... >smile< –  Evan Anderson Aug 5 '10 at 18:44
    
Venturing into WDS with AIK right now ... This all seems really cool ... as long as it works :-) Will give this a go later today hopefully. –  Kyle Brandt Aug 5 '10 at 18:52
    
Ahh... automated Windows deployment... joy that it is. Good luck. –  Evan Anderson Aug 5 '10 at 19:26
add comment

I am assuming you are talking about being behind a NAT, and trying to have multiple users connect to a remote VPN server, then I just managed to fix this on DD-WRT v24-sp2 (04/16/10):

Apparently the kernel modules were missing which do the NAT translation for the GRE protocol - inserting them proved enough. I have added the following lines to the firewall script:

# Insert modules for PPTP over NAT:
insmod nf_nat_proto_gre
insmod nf_conntrack_proto_gre
insmod nf_conntrack_pptp
insmod nf_nat_pptp

The rest of iptables/netfilter is already set up correctly in DD-WRT apparently :)

If wanted I can dig up the rest of the NAT table entries relating to this.

share|improve this answer
    
Is that a 2.4 or 2.6 kernel underneath day DD-WRT build? (I'm looking at their web site and having a really hard time telling.) A 2.4 kernel will do this completely differently than a >= 2.6.14 kernel. –  Evan Anderson Aug 9 '10 at 17:23
    
Uname -a tells me it is running 2.6.24 - indeed 2.4 would be quite different - apparently a lot has changed, amongst others the modules have been renamed to the nf_ netfilter prefix. –  Tuinstoelen Aug 12 '10 at 7:23
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.