From: "kurt heston" <kurtheston@yahoo.com>
Subject: Re: VPN Step-by-step?
Newsgroups: floppyfw.general
Date: Wed, 9 May 2001 21:21:08 -0700
Organization: Hyssing.net

Figured it out! Here's what I did:

Downloaded Thomas' latest VPN stuff:
http://www.zelow.no/floppyfw/download/floppyfw-1.0.10.1.img Added
"ip_masq_pptp.o" to modules.lst. This loads the kernel module (not loaded by
default). Then I added the following to firewall.ini:

#---------------------------------------------------------------------------
-

# VPN Support (PPTP)

#---------------------------------------------------------------------------
-

PPTP_SVR="<IP address of VPN server>"

LAN_1="<address range for lan>"

IPADDR="<static IP address of firewall>"

# PPP users will need to do a bit more digging

# PPTP

# eth0 is external interface

ipchains -A forward -j MASQ -p tcp -s $LAN_1 -d $PPTP_SVR 1723 -i eth0

ipchains -A output -j ACCEPT -p tcp -s $IPADDR -d $PPTP_SVR 1723 -i eth0

ipchains -A input -j ACCEPT -p tcp -s $PPTP_SVR 1723 -d $IPADDR -i eth0

ipchains -A forward -j MASQ -p 47 -s $LAN_1 -d $PPTP_SVR -i eth0

ipchains -A output -j ACCEPT -p 47 -s $IPADDR -d $PPTP_SVR -i eth0

ipchains -A input -j ACCEPT -p 47 -s $PPTP_SVR -d $IPADDR -i eth0

#---------------------------------------------------------------------------
-



To figure this out I read the ipchains syntax at:

http://www.linuxdoc.org/HOWTO/VPN-Masquerade-HOWTO.html

My WIN2K PPTP client now works just like it did when I had a direct
connection to the internet (no firewall).

Enjoy!!!!!!