From owner-freebsd-questions  Fri Nov 23 15:53:42 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from server.dambiec.com (CPE-61-9-148-152.vic.bigpond.net.au [61.9.148.152])
	by hub.freebsd.org (Postfix) with SMTP id 9766537B405
	for <freebsd-questions@freebsd.org>; Fri, 23 Nov 2001 15:53:38 -0800 (PST)
Received: (qmail 32584 invoked from network); 23 Nov 2001 23:56:23 -0000
Received: from karun.lan (HELO karunwin2k) (10.0.1.3)
  by server.dambiec.com with SMTP; 23 Nov 2001 23:56:23 -0000
Message-ID: <000a01c17426$41c5dcf0$0301000a@karunwin2k>
From: "Karun" <karun@dambiec.com>
To: "Thor Legvold" <tlegvold@hotmail.com>,
	<freebsd-questions@freebsd.org>
References: <F118Tf1ImxoKYUVskHZ00001bc8@hotmail.com>
Subject: Re: VPN/PPTP & NAT
Date: Fri, 23 Nov 2001 23:53:39 +1000
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

You need to run nat on the ppptp interface.

----- Original Message -----
From: "Thor Legvold" <tlegvold@hotmail.com>
To: <freebsd-questions@freebsd.org>
Sent: Friday, November 23, 2001 11:36 PM
Subject: VPN/PPTP & NAT


> I've finally connected & authenticated successfully with my ISP, however
my
> routing table get's really weird, and I can only use the net from the FBSD
> server, none of the clients can get out.
>
> I suspect I might have to do something with nat (the firewall is wide
open,
> only diverting to nat and allowing all other from any to any.  I've seen a
> few places mention allowing "gre" traffic, is this something I need to do
in
> nat, or only for the firewall?
>
> Lastly, nat is run on the external iface (wi0 in my case), but since I'm
> doing pptp, I'm actually tunneling past nat, am I not? When connecting to
an
> ISP with pptp, would I need to change the nat iface (like to f.ex. ppp0 or
> ng0?) or not?
>
> Regards,
> Thor
>
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message