I'm trying to set up a Raspberry Pi with Debian Squeeze as a VPN server using PPTPD and Shorewall.
The servers public ip is natted by a router to 192.168.10.12, the gateway is 192.168.10.1 the vpn remote ip is 192.168.100.96-103
PPTPD ran ok before Shorewall was installed.
the Shorewall settings are:
Code:
Interfaces
#ZONE INTERFACE OPTIONS
net eth0 dhcp,tcpflags,logmartians,nosmurfs,sourceroute=0
- ppp+
************************
Policy
#SOURCE DEST POLICY LOG LEVEL LIMIT:BURST
$FW net ACCEPT
$FW vpn ACCEPT
vpn $FW ACCEPT
net all DROP info
# THE FOLLOWING POLICY MUST BE LAST
all all REJECT info
******************************
Rules
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME HEADERS SWITCH
# PORT PORT(s) DEST LIMIT GROUP
#SECTION ALL
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
# Drop Ping from the "bad" net sone and prevent your log from being flooded.
PING(DROP) net $FW
# Permit all ICMP traffic FROM the firewall TO the net zone.
ACCEPT $FW net icmp
ACCEPT net $FW icmp 8
ACCEPT net $FW tcp 1723
SSH(ACCEPT) net $FW
*****************************
Tunnels
#TYPE ZONE GATEWAY GATEWAY
# ZONE
pptpserver vpn 192.168.10.12
******************************
Zones
#ZONE TYPE OPTIONS IN OUT
# OPTIONS OPTIONS
fw firewall
net ipv4
vpn ipv4
******************************
Hosts
#ZONE HOST(S) OPTIONS
#
vpn ppp+:192.168.10.0/24
shorewell check shows no errors
I hope this is enough to go on.
Can anybody see what's missing or wrong.
