From owner-freebsd-questions  Fri Aug  4  7:53:22 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.rdc1.tn.home.com (ha1.rdc1.tn.home.com [24.2.7.66])
	by hub.freebsd.org (Postfix) with ESMTP id 8A6E637BB7B
	for <questions@freebsd.org>; Fri,  4 Aug 2000 07:53:14 -0700 (PDT)
	(envelope-from cpeters2@home.com)
Received: from ho ([24.4.115.202]) by mail.rdc1.tn.home.com
          (InterMail vM.4.01.02.00 201-229-116) with ESMTP
          id <20000804145309.PQVF3339.mail.rdc1.tn.home.com@ho>;
          Fri, 4 Aug 2000 07:53:09 -0700
From: "Charles Peters - Tech Support" <cpeters2@home.com>
To: questions@freebsd.org, pptp-server@lists.schulte.org
Date: Fri, 4 Aug 2000 11:11:23 -0400
MIME-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: 7BIT
Subject: Allowing GRE packets to pass through nat/ipfw firewall
Reply-To: support@tecpro.com
Message-ID: <398AA4DB.15686.3EA199C@localhost>
X-mailer: Pegasus Mail for Win32 (v3.12c)
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Greetings:

I have configured a VPN using poptop to allow remote users to 
connect to the corporate lan server, but have a problem.  Most of 
these users are behind a Freebsd 4.0 gateway/router running nat 
and ipfw.  As I understand, only one ip address is allowd to pass 
GRE packets through the gateway.  I have accomplished this by 
creating /etc/natd.conf as follows:

	interface ep0
	unregistered_only yes
	pptpalias 192.168.0.7

This work fine, but only for one machine.  Is there any way to allow 
GRE packets from all machines to pass through the gateway.

Thanks,

Charles


Charles Peters
mailto:support@tecpro.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message