[suse-sles-e] Multiple outgoing vpn connection

From: Gudmundur Arnljotsson (gudmundur_at_insl.co.nz)
Date: Tue Feb 08 2005 - 05:50:51 CET


Message-ID: <4208452B.404@insl.co.nz>
Date: Tue, 08 Feb 2005 17:50:51 +1300
From: Gudmundur Arnljotsson <gudmundur@insl.co.nz>
Subject: [suse-sles-e] Multiple outgoing vpn connection

Hi
I have Standard server 8 (great product) working very nicely except for
one small detail.
It can only masquerade 1 pptp connection at time and only for the same
user. To allow another user to vpn out the SuSEfirewall2 must be reset.

Incoming vpn is working grate (multiple road warriors at same time all
using pptp)

Is there any way other than patching and recompile the kernel (according
to google search)

What I need is to allow 3 clients to connect to same external windows
vpn server simultaneously.
This was(and is) not a problem through our dsl router.

Any advice?

my firewall settings

iptables -A INPUT -i ppp+ -j ACCEPT
iptables -A FORWARD -i ppp+ -j ACCEPT
iptables -A FORWARD -o ppp+ -j ACCEPT

FW_DEV_EXT="eth1 ppp+"
FW_DEV_INT="eth0"
FW_DEV_DMZ=""

FW_ROUTE="yes"
FW_MASQUERADE="yes"
FW_MASQ_DEV="$FW_DEV_EXT"

FW_MASQ_NETS="192.168.50.0/24,xxx.xxx.xxx.xxx/24"
FW_PROTECT_FROM_INTERNAL="no"
FW_AUTOPROTECT_SERVICES="yes"

FW_SERVICES_EXT_TCP="1723 imaps smtp"
FW_SERVICES_EXT_UDP=""
FW_SERVICES_EXT_IP="gre"
FW_SERVICES_INT_TCP="1723"
FW_SERVICES_INT_UDP=""
FW_SERVICES_INT_IP="gre"

FW_TRUSTED_NETS=""
FW_ALLOW_INCOMING_HIGHPORTS_TCP="yes"
FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes"
FW_SERVICE_AUTODETECT="no"
FW_SERVICE_DNS="yes"
FW_SERVICE_DHCLIENT="auto"
FW_SERVICE_DHCPD="yes"
FW_SERVICE_SQUID="yes"
FW_SERVICE_SAMBA="yes"

FW_FORWARD=""
FW_FORWARD_MASQ=""
FW_REDIRECT="192.168.50.0/255.255.255.0,0/0,tcp,80,8080 \ 192.168.50.0/255.255.255.0,0/0,tcp,21,2121"

-- 
regards
Gudmundur Arnljotsson B.Sc
Independent Scales Ltd
100a Hayton Road
P.O. Box 8098
Christchurch
New Zealand
Tel Office: +64 03 341 1324
Mobile:     +64 021 475 581


This archive was generated by hypermail 2.1.7 : Tue Feb 08 2005 - 05:51:16 CET