pptpd only works with a single client

I have set up pptpd under Debian 3.0 and it works fine with a single client.
The problem is, as soon as a second client connects, the 2nd client cannot
ping anyone.

I have updated my firewall script to forward packets from both ppp
interfaces, but it still doesn't work.

Has anyone got more than one simultaneous client to work with pptpd?


cheers

"C3" <_> wrote news:412c5eb7$0$6809$(E-Mail Removed) :
> I have set up pptpd under Debian 3.0 and it works fine with a single
> client. The problem is, as soon as a second client connects, the 2nd
> client cannot ping anyone.
>
> I have updated my firewall script to forward packets from both ppp
> interfaces, but it still doesn't work.

Hum, you say "forward", does it meens that the pptpd server is in your LAN
and you access it throw a firewall with (reverse) NAT ?

If yes, you have to know that you can only set one pptp tunnel between to
host, and as your firewall is the visible client for your pptpd server you
can't set a second tunnel.

But ! there is pptp iptables conntrack module that solved this (not for
2.6.x so).

http://www.mail-archive.com/netfilte.../msg04414.html
http://cvs.netfilter.org/patch-o-mat...conntrack-nat/

Note: there is somewhere an "extension" to the pptp protocol that permit
multi-tunnel between the same two hosts, using a caller-id mecanisme. This
is not a standard mecanisme but Windows systme mays us it.


Regards

No, the pptp server is on a publically accessible IP address. I need to add
rules in my forward chains so that traffic from that server is forwarded to
machines inside my LAN.

> Hum, you say "forward", does it meens that the pptpd server is in your LAN
> and you access it throw a firewall with (reverse) NAT ?