Discussion:
[Shorewall-users] PPTP problems
Hill, John
2016-08-01 16:08:37 UTC
Permalink
I updated my Debian system from wheezy to Jessie. I reinstalled Shorewall version 5.0.10.1 from backup. Everything is working fine, except the PPTP dnat to my internal server.
All of the modules are showing in the kernel. Shorewall says they are capable. I can see the proto 47 hit the firewall with accept, it just does not seem to nat it to the server.
I'm stuck.

--john
Tom Eastep
2016-08-02 16:32:44 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Post by Hill, John
I updated my Debian system from wheezy to Jessie. I reinstalled
Shorewall version 5.0.10.1 from backup. Everything is working
fine, except the PPTP dnat to my internal server.
All of the modules are showing in the kernel. Shorewall says they
are capable. I can see the proto 47 hit the firewall with accept,
it just does not seem to nat it to the server.
I’m stuck.
Have you followed the DNAT troubleshooting procedure outlined in
Shorewall FAQs 1a and 1b?

- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=bK3A
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Continue reading on narkive:
Loading...