Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Nov 2006 11:35:37 -0500
From:      "Scott Ullrich" <sullrich@gmail.com>
To:        "Daniel Hartmeier" <daniel@benzedrine.cx>
Cc:        FreeBSD <freebsd-pf@freebsd.org>
Subject:   Re: PF-NAT
Message-ID:  <d5992baf0611300835w1511a2c6jfdcc113b4f797393@mail.gmail.com>
In-Reply-To: <20061130162048.GB31746@insomnia.benzedrine.cx>
References:  <62972.217.12.197.82.1164883946.squirrel@sigma.interami.com> <6e6841490611300512t73dca3ddt106d58a3e63bc1f1@mail.gmail.com> <55273.217.12.197.82.1164898183.squirrel@sigma.interami.com> <6e6841490611300803y577338adqf52918ef13ca7605@mail.gmail.com> <20061130162048.GB31746@insomnia.benzedrine.cx>

next in thread | previous in thread | raw e-mail | index | archive | help
On 11/30/06, Daniel Hartmeier <daniel@benzedrine.cx> wrote:
> On Thu, Nov 30, 2006 at 02:03:57PM -0200, Gilberto Villani Brito wrote:
>
> > Try change this options.
>
> None of those will help if you really want two concurrent PPTP
> connections to the same external peer.
>
> pf doesn't look into the payload of PPTP packets and hence can't decide
> which internal peer to dispatch incoming replies from the one external
> peer to (there are no port numbers helping there, like in TCP).
>
> You can try a userland PPTP proxy, like
>
>   http://freshmeat.net/projects/frickin/
>
> There are no plans to integrate PPTP proxy support into pf. While
> libalias_pptp and ng_nat look potentially helpful, you'd have to write
> that patch yourself, or find a developer that is using PPTP (not me ;)

The author of Frickin just repoted on the pfSense forums that a
majority of the issues with the proxy have been resolved in the
SVN/CVS version of Frickin.  If you go this route you may want to use
the latest codebase.

Scott



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?d5992baf0611300835w1511a2c6jfdcc113b4f797393>