Mailinglist Archive: opensuse-security (359 mails)

< Previous Next >
Re: [suse-security] SuSEfirewall2 & MS/VPN
  • From: "Marc Samendinger" <marc.samendinger@xxxxxxxxxxxx>
  • Date: Mon, 28 Jul 2003 14:09:32 +0200
  • Message-id: <02631EB8007CF7488B0A7D4B6BF921CE0346CD@xxxxxxxxxxxxxxxxxxxxx>
> -----Original Message-----
> From: Andy Bennett [mailto:andy@xxxxxxxxxxxxxxxxxxxxx]
> Sent: Monday, July 28, 2003 2:14 PM
>
>
> Hello,

Hello Andy,

> When you say:-
>
> > 'You can put the M$ box behind
> > a suse firewall if you have an official IP for the box,
> too. Then just
> > close all exept the PPTP Port and the maschine is as safe as in your
> > currently setup it would be (if it would work ;)'
>
> Do you mean fixed IP address for the SuSEfirewall2 box or the
> MS VPN box? In
> fact, I have fixed IP addresses for both and they are both publicly
> available. So, if my fixed IP address for my MS VPN machine
> is 123.456.78.9
> then I should be able to forward packets like so,
>
> FW_FORWARD="0/0,123.456.78.9,tcp,1723

In addition to tcp 1723 the VPN uses the protocol GRE
Take a look at following MS Knowledge Base article
http://support.microsoft.com/default.aspx?scid=kb;EN-US;241251

hey that one is really good IMHO ;)

*snip*

> Rgds
> Andy

marc

< Previous Next >
Follow Ups