Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 04 May 2005 20:27:47 +0300
From:      Toomas Aas <toomas.aas@raad.tartu.ee>
To:        Calvin Lane <calvin.lane@gmail.com>
Cc:        questions@freebsd.org
Subject:   Re: Allowing GRE in IPFILTER
Message-ID:  <42790613.2070809@raad.tartu.ee>
In-Reply-To: <995be75e05050409591da23458@mail.gmail.com>
References:  <995be75e05050409591da23458@mail.gmail.com>

index | next in thread | previous in thread | raw e-mail

Calvin Lane wrote:

> Please let me know what the correct syntax is for allowing gre traffic 
> through through an ipfilter firewall running BSD 4.10. Thanks.

FreeBSD 4.10 contains IPFilter 3.4.31. For what you need to do, you need 
PPTP proxy which is available only in IPFilter 4.1.

So you'd need to install the latest IPFilter (4.1.8 I think) and then 
just add this to ipnat.rules:

map <external_if> <internal_net> -> 0/32 proxy port 1723 pptp/tcp

-- 
Toomas Aas --------------------------------------------------------
|arvutivõrgu peaspetsialist | head specialist on computer networks|
|Tartu Linnakantselei       | Tartu City Office                   |
----------------------------------------------------- +372 736 1274



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?42790613.2070809>