Re: PPTP Proxy (What the heck is it supposed to do?)

Have you got an answer?

----- Original Message -----
From: "Adam Lofstedt" <adaml@visimation.com>
To: <ipfilter@coombs.anu.edu.au>
Sent: Friday, May 14, 2004 1:08 AM
Subject: RE: PPTP Proxy (What the heck is it supposed to do?)


> Could anyone spend a moment and clarify IPF and PPTP for me?
>
> What does the PPTP proxy do exactly?
>
> My network has a windows PPTP server behind a FreeBSD NAT firewall. I am
> passing in 1723 TCP and port 0 GRE to the internal VPN server. My clients
> outside the firewall are able to VPN to the server. In this situation, do I
> need the PPTP proxy?
>
> I am asking because I have a problem where only one PPTP session can be
> established to the VPN server when the external client is behind a NAT
> router/firewall. Meaning, if client A is behind a NAT router, and tries to
> VPN to my server, only one machine on client A's network can access the VPN
> server at a time. This is similar to this situation covered in:
>
> http://www.phildev.net/ipf/IPFvpn.html
>
> >From reading this list, there was supposed to be a patch that enabled
> IPFilter to use a GRE header number to enable multiple sessions from the
> same NAT'd IP address. Is this what the PPTP proxy is for? Was this patch
> ever implemented in IPF 4?
>
> Thanks a lot,
>
> Adam
>
> > -----Original Message-----
> > From: Adam Lofstedt [mailto:adaml@visimation.com]
> > Sent: Tuesday, May 11, 2004 11:02 AM
> > To: 'Darren Reed'; 'Matthew K. Lee'
> > Cc: 'ipfilter@coombs.anu.edu.au'
> > Subject: RE: PPTP Proxy
> >
> > Nope. 1723.
> >
> > Adam
> >
> > > -----Original Message-----
> > > From: owner-ipfilter@coombs.anu.edu.au
> > > [mailto:owner-ipfilter@coombs.anu.edu.au] On Behalf Of Darren Reed
> > > Sent: Sunday, May 09, 2004 8:35 AM
> > > To: Matthew K. Lee
> > > Cc: ipfilter@coombs.anu.edu.au
> > > Subject: Re: PPTP Proxy
> > >
> > > In some email I received from Matthew K. Lee, sie wrote:
> > > > Hello all,
> > > >
> > > > What is the correct syntax to proxy pptp?
> > >
> > > I think you'll find this is correct:
> > >
> > > map foo0 0/0 -> 0/32 proxy port 1732 pptp/tcp
> > >
> > > Darren
> > >
> >
>
>
>