[CentOS-pt-br] PPTP no Centos 6

[Robson Roberto Souza Peixoto]

Depois da tua dica e umas googadas, eu usei essa solução:

-A FORWARD -i ppp+ -o eth0 -j ACCEPT
-A FORWARD -i eth0 -o ppp+ -j ACCEPT

E tá funcionando lindamente

2012/1/12 fabiano stocco <fabianostocco em gmail.com>

> Opá... se ajudando vamos longe...
>
> Deu certo?
>
> Fabiano Stocco
>
> Em 12 de janeiro de 2012 08:18, Robson Roberto Souza Peixoto <
> robsonpeixoto em gmail.com> escreveu:
>
> Fabiano, muito obrigado pela ajuda =D
>>
>>
>> 2012/1/11 fabiano stocco <fabianostocco em gmail.com>
>>
>>> Opá
>>>
>>> Ainda não mexi com VPN sobre pptp mais acredito que o mesmo deve gerar
>>> uma interface assim como no openvpn. Nesse caso tente as seguintes regras
>>> abaixo.
>>>
>>> -A INPUT -m state --state NEW -p gre -j ACCEPT
>>>
>>> -A FORWARD -o ppp0 -j ACCEPT
>>> -A FORWARD -i ppp0 -j ACCEPT
>>>
>>>
>>> -A INPUT -j REJECT --reject-with icmp-host-prohibited
>>> -A FORWARD -j REJECT --reject-with icmp-host-prohibited
>>>
>>> Deve dar certo.
>>>
>>> Fabiano Stocco
>>>
>>>
>>>
>>> Em 11 de janeiro de 2012 19:52, Robson Roberto Souza Peixoto <
>>> robsonpeixoto em gmail.com> escreveu:
>>>
>>>> Só uma pequena correção nas regas do firewall:
>>>> # Firewall configuration written by system-config-firewall
>>>> # Manual customization of this file is not recommended.
>>>> *filter
>>>> :INPUT ACCEPT [0:0]
>>>> :FORWARD ACCEPT [0:0]
>>>> :OUTPUT ACCEPT [0:0]
>>>> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>>>> -A INPUT -p icmp -j ACCEPT
>>>> -A INPUT -i lo -j ACCEPT
>>>> -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
>>>> -A INPUT -m state --state NEW -m tcp -p tcp --dport 1723 -j ACCEPT
>>>> -A INPUT -m state --state NEW -p gre -j ACCEPT
>>>> -A INPUT -j REJECT --reject-with icmp-host-prohibited
>>>> -A FORWARD -j REJECT --reject-with icmp-host-prohibited
>>>> COMMIT
>>>>
>>>>
>>>> 2012/1/11 Robson Roberto Souza Peixoto <robsonpeixoto em gmail.com>
>>>>
>>>>> Galera,
>>>>>
>>>>> Onde eu trabalho tinha um Windows Server com um servidor VPN
>>>>> configurado. Mas a máquina deu problema e eu optei por instalar o VPN num
>>>>> CentOS.
>>>>>
>>>>> Um detalhe importante. A máquina que é VPN não é o gateway. O nosso
>>>>> gateway é um OpenBSD e já tá com as regras de firewall necessários para a
>>>>> VPN funcionar.
>>>>>
>>>>> Eu configurei o pptpd e o usuário consegue se conectar, mas não
>>>>> consegue navegar usando a VPN.
>>>>> Meu firewall está configurado desse jeito:
>>>>> # Firewall configuration written by system-config-firewall
>>>>> # Manual customization of this file is not recommended.
>>>>> *filter
>>>>> :INPUT ACCEPT [0:0]
>>>>> :FORWARD ACCEPT [0:0]
>>>>> :OUTPUT ACCEPT [0:0]
>>>>> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
>>>>> -A INPUT -p icmp -j ACCEPT
>>>>> -A INPUT -i lo -j ACCEPT
>>>>> -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
>>>>> -A INPUT -m state --state NEW -m tcp -p tcp --dport 1723 -j ACCEPT
>>>>> -A INPUT -m state --state NEW -m gre -j ACCEPT
>>>>> -A INPUT -j REJECT --reject-with icmp-host-prohibited
>>>>> -A FORWARD -j REJECT --reject-with icmp-host-prohibited
>>>>> COMMIT
>>>>>
>>>>>
>>>>> Mas se eu comento as linhas
>>>>> -A INPUT -j REJECT --reject-with icmp-host-prohibited
>>>>> -A FORWARD -j REJECT --reject-with icmp-host-prohibited
>>>>> o usuário consegue navegar.
>>>>>
>>>>> Alguém saberia me dizer a forma correta de configurar a VPN?
>>>>>
>>>>> Att,
>>>>> --
>>>>> Robson Roberto Souza Peixoto
>>>>> Robinho
>>>>> Master in Computer Science, University of Campinas
>>>>> Linux Counter #395633
>>>>> IRC: robsonpeixoto
>>>>> Twitter: http://twitter.com/rrspba
>>>>> github: https://github.com/robsonpeixoto
>>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Robson Roberto Souza Peixoto
>>>> Robinho
>>>> Master in Computer Science, University of Campinas
>>>> Linux Counter #395633
>>>> IRC: robsonpeixoto
>>>> Twitter: http://twitter.com/rrspba
>>>> github: https://github.com/robsonpeixoto
>>>>
>>>> _______________________________________________
>>>> CentOS-pt-br mailing list
>>>> CentOS-pt-br em centos.org
>>>> http://lists.centos.org/mailman/listinfo/centos-pt-br
>>>>
>>>>
>>>
>>> _______________________________________________
>>> CentOS-pt-br mailing list
>>> CentOS-pt-br em centos.org
>>> http://lists.centos.org/mailman/listinfo/centos-pt-br
>>>
>>>
>>
>>
>> --
>> Robson Roberto Souza Peixoto
>> Robinho
>> Master in Computer Science, University of Campinas
>> Linux Counter #395633
>> IRC: robsonpeixoto
>> Twitter: http://twitter.com/rrspba
>> github: https://github.com/robsonpeixoto
>>
>> _______________________________________________
>> CentOS-pt-br mailing list
>> CentOS-pt-br em centos.org
>> http://lists.centos.org/mailman/listinfo/centos-pt-br
>>
>>
>
> _______________________________________________
> CentOS-pt-br mailing list
> CentOS-pt-br em centos.org
> http://lists.centos.org/mailman/listinfo/centos-pt-br
>
>


-- 
Robson Roberto Souza Peixoto
Robinho
Master in Computer Science, University of Campinas
Linux Counter #395633
IRC: robsonpeixoto
Twitter: http://twitter.com/rrspba
github: https://github.com/robsonpeixoto
-------------- Próxima Parte ----------
Um anexo em HTML foi limpo...
URL: http://lists.centos.org/pipermail/centos-pt-br/attachments/20120113/419e446b/attachment.html