Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Nov 2006 17:20:48 +0100
From:      Daniel Hartmeier <daniel@benzedrine.cx>
To:        Gilberto Villani Brito <linux@giboia.org>
Cc:        FreeBSD <freebsd-pf@freebsd.org>
Subject:   Re: PF-NAT
Message-ID:  <20061130162048.GB31746@insomnia.benzedrine.cx>
In-Reply-To: <6e6841490611300803y577338adqf52918ef13ca7605@mail.gmail.com>
References:  <62972.217.12.197.82.1164883946.squirrel@sigma.interami.com> <6e6841490611300512t73dca3ddt106d58a3e63bc1f1@mail.gmail.com> <55273.217.12.197.82.1164898183.squirrel@sigma.interami.com> <6e6841490611300803y577338adqf52918ef13ca7605@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 30, 2006 at 02:03:57PM -0200, Gilberto Villani Brito wrote:

> Try change this options.

None of those will help if you really want two concurrent PPTP
connections to the same external peer.

pf doesn't look into the payload of PPTP packets and hence can't decide
which internal peer to dispatch incoming replies from the one external
peer to (there are no port numbers helping there, like in TCP).

You can try a userland PPTP proxy, like

  http://freshmeat.net/projects/frickin/

There are no plans to integrate PPTP proxy support into pf. While
libalias_pptp and ng_nat look potentially helpful, you'd have to write
that patch yourself, or find a developer that is using PPTP (not me ;)

Daniel



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20061130162048.GB31746>