Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have set up a pptpd server on my computer and clients can connect to it successfully. I have enabled ip_forwarding in /etc/sysctl.conf and added the following rule to my iptables to masquerade the traffic.

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE

And there is no other restricting rule in my iptables.

my pptpd ip configuration is :

localip 192.168.0.1 remoteip 192.168.0.2-254

and my local ip range is 192.168.1.0/24

the problem is my clients can not access internet via my server, is there anything else i should have done ? (both my server and clients are on the same local network)

share|improve this question
    
If the server and clients are on the same network, then why the VPN? –  Zoredache Oct 17 '11 at 19:19
    
I want my clients to access the Internet via my server –  Scarlet Oct 17 '11 at 19:31
1  
Allow me to repeat, why do you need a VPN? If they are on the local network just setup a route or change the default gateway. –  Zoredache Oct 17 '11 at 19:39
    
For more control and security I need them to use VPN to access the internet and without it just have access to the local network. –  Scarlet Oct 17 '11 at 19:47
    
You're masquerading your own reply packets to hosts on the LAN. You need to add '-d ! 192.168.0.0.24` (or similar) to the MASQUERADE rule. –  David Schwartz Oct 17 '11 at 19:54

1 Answer 1

up vote 1 down vote accepted

You are doing it wrong.

Using a VPN here gives you no additional security or benefit.

Get rid of it. Simpler is always better.

If you're trying to enforce the rule that users have to be "logged in" to get out of your network, use a proxy. For example, Squid & Squidguard.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.