New answers tagged

1

in my case in centOs 6.7 i use this iptables rules: iptables --table nat --append POSTROUTING --out-interface ppp0 -j MASQUERADE iptables -I INPUT -s 192.168.0.0/24 -i ppp0 -j ACCEPT iptables --append FORWARD --in-interface eth0 -j ACCEPT iptables -A INPUT -i eth0 -p icmp -j ACCEPT iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE && ...


1

I don't really understand, but : modprobe nf_conntrack_pptp and opening VPN via the GUI, instead of terminal, does the job :-/


2

In order for NAT to work, you need to have a protocol-specific helper module loaded. By default, you're only going to have ones for TCP and UDP loaded. That's why you're seeing your PPTP traffic (which is actually PPP over GRE) escaping without NAT. That module is nf_nat_proto_gre, at least as of Linux 4.4. A similar story applies to connection tracking ...



Top 50 recent answers are included