PDA

Bekijk de volledige versie : PPTP and iptables/nat/masquerading



Rukapul
07-09-2005, 21:51
I configured my WL500gx as a VPN client using PPTP:
- configured PPTP/PPPD
- pppd call $TUNNEL
- added correct routes to route traffic for 192.168.0.0 subnet through the tunnel

Remaining problem are the NAT/firewall settings. For some reason all the iptables rules are executed as if ppp0 is the external connection, while this should stick at vlan1. (I don't want to use NAT/masquerading for the other subnet.)

It is ofcourse an option to make a custom nat_rules or possibly put all rules in the post_firewall script (though this is not specific to an interface), but that's a tedious task while all the info (many forward rules entered through webinterface) basically exist.

Is there a way to prevent that the iptables rules are adapted when ppp0 comes up?

And similar, is there a way to prevent that (incorrect) routes are added when establishing a ppp0 connection? (I now have to remove them and add the old ones.)

Rukapul
12-09-2005, 14:19
I 'fixed' it by using a workaround: backup /tmp/nat_rules , create ppp0 link, restore nat_rules to /tmp/nat_rules