mirror of
https://gitlab.com/shorewall/code.git
synced 2025-06-27 13:11:57 +02:00
fixed quotes, add CVS Id
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@970 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
d5b6f09407
commit
a4e4335b40
@ -2,6 +2,8 @@
|
|||||||
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
|
<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.2//EN"
|
||||||
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
|
"http://www.oasis-open.org/docbook/xml/4.2/docbookx.dtd">
|
||||||
<article id="PPTP">
|
<article id="PPTP">
|
||||||
|
<!--$Id$-->
|
||||||
|
|
||||||
<articleinfo>
|
<articleinfo>
|
||||||
<title>PPTP</title>
|
<title>PPTP</title>
|
||||||
|
|
||||||
@ -30,8 +32,8 @@
|
|||||||
document under the terms of the GNU Free Documentation License, Version
|
document under the terms of the GNU Free Documentation License, Version
|
||||||
1.2 or any later version published by the Free Software Foundation; with
|
1.2 or any later version published by the Free Software Foundation; with
|
||||||
no Invariant Sections, with no Front-Cover, and with no Back-Cover
|
no Invariant Sections, with no Front-Cover, and with no Back-Cover
|
||||||
Texts. A copy of the license is included in the section entitled "<ulink
|
Texts. A copy of the license is included in the section entitled
|
||||||
url="GnuCopyright.htm">GNU Free Documentation License</ulink>".</para>
|
<quote><ulink url="GnuCopyright.htm">GNU Free Documentation License</ulink></quote>.</para>
|
||||||
</legalnotice>
|
</legalnotice>
|
||||||
|
|
||||||
<revhistory>
|
<revhistory>
|
||||||
@ -81,15 +83,15 @@
|
|||||||
<term><ulink url="http://www.poptop.org">http://www.poptop.org</ulink></term>
|
<term><ulink url="http://www.poptop.org">http://www.poptop.org</ulink></term>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>The 'kernelmod' package can be used to quickly install
|
<para>The <quote>kernelmod</quote> package can be used to quickly
|
||||||
MPPE into your kernel without rebooting.</para>
|
install MPPE into your kernel without rebooting.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</varlistentry>
|
</varlistentry>
|
||||||
</variablelist>
|
</variablelist>
|
||||||
|
|
||||||
<para>I am leaving the instructions for building MPPE-enabled kernels and
|
<para>I am leaving the instructions for building MPPE-enabled kernels and
|
||||||
pppd in the text below for those who may wish to obtain the relevant
|
pppd in the text below for those who may wish to obtain the relevant
|
||||||
current patches and "roll their own".</para>
|
current patches and <quote>roll their own</quote>.</para>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section id="ServerFW">
|
<section id="ServerFW">
|
||||||
@ -164,8 +166,8 @@ patch -p1 < ../ppp-2.4.1-MSCHAPv2-fix.patch
|
|||||||
make</programlisting>
|
make</programlisting>
|
||||||
|
|
||||||
<para>You will need to install the resulting binary on your firewall
|
<para>You will need to install the resulting binary on your firewall
|
||||||
system. To do that, I NFS mount my source filesystem and use "make
|
system. To do that, I NFS mount my source filesystem and use
|
||||||
install" from the ppp-2.4.1 directory.</para>
|
<quote>make install</quote> from the ppp-2.4.1 directory.</para>
|
||||||
</section>
|
</section>
|
||||||
|
|
||||||
<section id="PatchKernel">
|
<section id="PatchKernel">
|
||||||
@ -257,7 +259,7 @@ require-mppe-stateless</programlisting>
|
|||||||
<itemizedlist>
|
<itemizedlist>
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>System 192.168.1.3 acts as a WINS server so I have included
|
<para>System 192.168.1.3 acts as a WINS server so I have included
|
||||||
that IP as the 'ms-wins' value.</para>
|
that IP as the <quote>ms-wins</quote> value.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
@ -267,7 +269,8 @@ require-mppe-stateless</programlisting>
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>I am requiring 128-bit stateless compression (my kernel is
|
<para>I am requiring 128-bit stateless compression (my kernel is
|
||||||
built with the 'require-mppe.diff' patch mentioned above.</para>
|
built with the <quote>require-mppe.diff</quote> patch mentioned
|
||||||
|
above.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
</itemizedlist>
|
</itemizedlist>
|
||||||
</note>
|
</note>
|
||||||
@ -319,7 +322,7 @@ remoteip 192.168.1.33-38</programlisting>
|
|||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
<para>I have assigned a remote IP range that overlaps my local
|
<para>I have assigned a remote IP range that overlaps my local
|
||||||
network. This, together with 'proxyarp' in my
|
network. This, together with <quote>proxyarp</quote> in my
|
||||||
/etc/ppp/options.poptop file make the remote hosts look like they
|
/etc/ppp/options.poptop file make the remote hosts look like they
|
||||||
are part of the local subnetwork.</para>
|
are part of the local subnetwork.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
@ -1125,9 +1128,9 @@ loadmodule ip_nat_pptp</programlisting>
|
|||||||
</table>
|
</table>
|
||||||
|
|
||||||
<para>I use the combination of interface and hosts file to define the
|
<para>I use the combination of interface and hosts file to define the
|
||||||
'cpq' zone because I also run a PPTP server on my firewall (see
|
<quote>cpq</quote> zone because I also run a PPTP server on my firewall
|
||||||
above). Using this technique allows me to distinguish clients of my own
|
(see above). Using this technique allows me to distinguish clients of my
|
||||||
PPTP server from arbitrary hosts at Compaq; I assign addresses in
|
own PPTP server from arbitrary hosts at Compaq; I assign addresses in
|
||||||
192.168.1.0/24 to my PPTP clients and Compaq doesn't use that RFC1918
|
192.168.1.0/24 to my PPTP clients and Compaq doesn't use that RFC1918
|
||||||
Class C subnet.</para>
|
Class C subnet.</para>
|
||||||
|
|
||||||
@ -1285,11 +1288,11 @@ restart_pptp > /dev/null 2>&1 &</programlisting>
|
|||||||
Modem</title>
|
Modem</title>
|
||||||
|
|
||||||
<para>Some ADSL systems in Europe (most notably in Austria) feature a PPTP
|
<para>Some ADSL systems in Europe (most notably in Austria) feature a PPTP
|
||||||
server built into an ADSL "Modem". In this setup, an ethernet
|
server built into an ADSL <quote>Modem</quote>. In this setup, an ethernet
|
||||||
interface is dedicated to supporting the PPTP tunnel between the firewall
|
interface is dedicated to supporting the PPTP tunnel between the firewall
|
||||||
and the "Modem" while the actual internet access is through PPTP
|
and the <quote>Modem</quote> while the actual internet access is through
|
||||||
(interface ppp0). If you have this type of setup, you need to modify the
|
PPTP (interface ppp0). If you have this type of setup, you need to modify
|
||||||
sample configuration that you downloaded as described in this section.
|
the sample configuration that you downloaded as described in this section.
|
||||||
<emphasis role="bold">These changes are in addition to those described in
|
<emphasis role="bold">These changes are in addition to those described in
|
||||||
the <ulink url="shorewall_quickstart_guide.htm">QuickStart Guides</ulink>.</emphasis></para>
|
the <ulink url="shorewall_quickstart_guide.htm">QuickStart Guides</ulink>.</emphasis></para>
|
||||||
|
|
||||||
@ -1341,8 +1344,8 @@ restart_pptp > /dev/null 2>&1 &</programlisting>
|
|||||||
</tgroup>
|
</tgroup>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<para>That entry defines a new zone called 'modem' which will
|
<para>That entry defines a new zone called <quote>modem</quote> which
|
||||||
contain only your ADSL modem.</para>
|
will contain only your ADSL modem.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
@ -1378,9 +1381,10 @@ restart_pptp > /dev/null 2>&1 &</programlisting>
|
|||||||
</tgroup>
|
</tgroup>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<para>You will of course modify the 'net' entry in
|
<para>You will of course modify the <quote>net</quote> entry in
|
||||||
/etc/shorewall/interfaces to specify 'ppp0' as the interface
|
/etc/shorewall/interfaces to specify <quote>ppp0</quote> as the
|
||||||
as described in the QuickStart Guide corresponding to your setup.</para>
|
interface as described in the QuickStart Guide corresponding to your
|
||||||
|
setup.</para>
|
||||||
</listitem>
|
</listitem>
|
||||||
|
|
||||||
<listitem>
|
<listitem>
|
||||||
|
Loading…
x
Reference in New Issue
Block a user