Routing PPTP through router running linux 2.4.x kernel

mcukstorm · 07-07-2003, 02:51 AM

I am trying to route vpn(pptp) traffic from a win2k client on the internal network to a remote win2k server on the internet, i am currently using ipchains. Has any one got any ideas, all the sites i have found mention using kernel patches and utilities but most of the links are broken and there are no kernel patches for anything passed 2.2.x. Has it been built into the later kernels?

(Running RedHat 7.3, custom Kernel Build version 2.4.18-3, i686 platform)

Any help would be much appreaciated.

Grant

german · 07-07-2003, 09:33 AM

I know this is a linux forum, but if you want to do that without a kernel patch or recompile, OpenBSD supports all of that (using pf as opposed to iptables, which is actually extremely user-friendly by comparison IMHO), including PPTP, in the default install. Also if you decide to, OBSD kernel compiles are easier to configure, and if you look at http://www.openbsd.org/errata.html you'll notice they haven't had to release a single patch for their latest version.

HTH

Ben.

unSpawn · 07-07-2003, 09:50 AM

I'm not a VPN expert, but from what I've read the general opinion is PPTP is a MICROS~1/b0rken/surrogate implementation of something vaguely resembling IPSEC. IOW, unsafe, regardless of O.S..

Here's some LinuxQuestions.org Search results for PPTP to get you going. Google around for POPTOP and/or PPTPPROXY.

german · 07-07-2003, 10:01 AM

I've heard the same thing. He didn't ask for security advice

. PPTP VPN's are an outdated technology, and not really suitable for the world wide guerilla war of today. I have seen this tutorial praised by various people that seem to know their stuff, but it seems to require a significant time investment to get working:

http://www.secureops.com/vpn/ipsecvpn.html

Personally I think public key SSH and proper firewalling are the safest way to go, but I may get my eyebrows burnt off when the flames jump out my screen for saying that :P.

B.

mcukstorm · 07-07-2003, 11:30 AM

Thanks to all for your help, pptpproxy worked perfectly

I will have to take a look at the BSD family when i have a spare few hours.

Grant