VPN forwarding

Hi, All

I have problem with forwarding VPN connection on linux box.
So, topology of connections are
1.1.1.1 2.2.2.2
Client---->Linux box---->Windows VPN server

I need in forwarding VPN connection to Windows server via linux box.

I'm newbie in iptables (

Such commands couldn't help me
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 1723 -j DNAT --to
2.2.2.2
iptables -t nat -A PREROUTING -i eth0 -p 47 -j DNAT --to 2.2.2.2

Can anybody help me?

Thanks in advance,
Roman Lobus

If you have, like I do, a default of drop on the forward chain you may have
to also accept these ports explicitly earlier in the chain.

Also if the clients are XP based they will have to have the latest patches
installed.

I was not able to get windows 98 clients to work at all throught the linux
router, however they were able to connect internally. This problem may have
had something to do with the user's patchlevel but I could not fix it. Its
difficult to know what patches you have to reinstall after installing the
VPN interface and the Microsoft site does not do it automagically.

Do not apply the VPN patch to the linux kernel. This patch assumes the
connection is initiated from your internal network (i.e. it assumes the
client is on your internal network and you are connecting to a VPN outside)
when you actually want the opposite. Without the patch you can have one
uncoming connection or one ougoing connection at a time. With the patch you
can have multiple outgoing connections at once but no incoming connections.

Thats about all I can suggest (although it took me four months to get it to
go)

HTH

"Roman Lobus" <(E-Mail Removed)> wrote in message
news:bqq6hj$cp$(E-Mail Removed)...
> Hi, All
>
> I have problem with forwarding VPN connection on linux box.
> So, topology of connections are
> 1.1.1.1 2.2.2.2
> Client---->Linux box---->Windows VPN server
>
> I need in forwarding VPN connection to Windows server via linux box.
>
> I'm newbie in iptables (
>
> Such commands couldn't help me
> iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 1723 -j
DNAT --to
> 2.2.2.2
> iptables -t nat -A PREROUTING -i eth0 -p 47 -j DNAT --to 2.2.2.2
>
> Can anybody help me?
>
> Thanks in advance,
> Roman Lobus
>