[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PPTP NAT support with Debian Woody



On 14 Sep 2004, Federico Lazcano wrote:
> I'm proudly using Debian Woody on my router/firewall, but now I need
> support for natting PPTP connections from inside my network to
> exterior PPTP VPN Servers.

Ack. I hope that you, and the owner of that server, are aware that PPtP
provides very weak security for the connection.

> That's OK, I patched the kernel source with the patch-o-matic included
> in iptables-1.2.6a (source package), and I want to compile a build the
> iptables package in reference to this patched kernel.
>
> Which one is the most elegant way to do it?
>
> I'll try to recompile iptables from the Debian sources and build the
> package in reference to the patched kernel source.
>
> Any better idea?

No, what you are talking about is the best option.

Don't forget to increase the version number of the iptables package when
you build it locally, since apt will overwrite it with the upstream
version otherwise.

Also, you may look at the `apt-build' and `apt-src' packages, which are
aimed at managing this sort of thing.  I never had great luck with them,
though, and chose to do things manually.

Regards,
        Daniel
-- 
If a joke is worth telling, it's worth telling once.
        -- Ollie MacNoonan



Reply to: