New Zealand ADSL Mailing List


RE: M10 and tunnels

From: Steve <steve_at_focb.iconz.co.nz>
Date: Wed, 15 Mar 2000 11:53:57 +1300 (NZDT)
Message-ID: <Pine.LNX.4.10.10003151150000.1665-100000@gateway.focb.iconz.co.nz>

nope, the port 1723 is used by *MS PPTP) as a control connection and is
TCP based, if you wish to have a PPTP _server_ behind the M10 you will
need to pinhole PPTP (i just used all ports in the range of 1-65535) and
then also setup a TCP pinhole from incoming port 1723 through to the same
server you set the PPTP pinhole to with an internal port of 1723

the IP protocol 47 (or PPTP pinhole protocol) is not port based so the
port really shouldnt matter.

dont confuse the data pinhole with the control pinhole however, they are
two different things and you need both if you are running a PPTP server.

--
Steve.
On Wed, 15 Mar 2000 hubert.kraemer@prismac.co.nz wrote:
> Doesn't MS PPTP use GRE packets on Port 1723 ?  I thought the doco indicated
> that it does (hence my confusion)...   
> 
> -----Original Message-----
> From: Steve [mailto:steve@focb.iconz.co.nz]
> Sent: Wednesday, 15 March 2000 10:37
> To: adsl@freebsddiary.cx
> Subject: RE: M10 and tunnels
> 
> 
> 
> 
> On Wed, 15 Mar 2000 hubert.kraemer@prismac.co.nz wrote:
> 
> > Don't quite understand....what does the pinhole option of PPTP provide ?
> > 
> 
> the PPTP pinhole allows one to proxy IP Protocol 47, this is used as the
> transport for a few of the various tunneling programs/clients available,
> its listed as "PPTP" because thats what the M$ PPTP (Point to point
> tunneling protocol) "adaptor" that you can install on your win9x/NT system
> calls itself. what I am useing it for however is for the GRE tunneling
> that a cisco/other router device can use to establish a tunnel, tunnels
> are usefull for connecting a remote site and makeing it seem like it is a
> part of a local network (this is known as a VPN - or Virtual Private
> Network)
> 
> the newer nokia firmware which is under beta at the moment allows you to
> setup pinholes for aditional IP protocols (there are up to 255 reserved
> numbers for the different IP protocols, you may be familiar with the
> common names such as UDP, TCP and ICMP but there are others) this allows
> people to do other funky stuff over their ADSL boxes such as IPsec (like
> an encrypted way of creating a VPN type thingy) and other such beasties
> 
> most people will never need to know what this all means but some will
> probably be useing it when they have remote offices that get connected
> together across the internet.
> 
> this was a very cut down version of what all this means :) if you do a web
> search for stuff like "VPN" or "IP Tunnel" or "IPsec" you will probably
> find some whitepapers on the subject that give a much better description
> 
> in short, the PPTP option allws people to provide VPN type access to their
> internal network :)
> 
> --
> Steve.
> 
> 
> 
> To unsubscribe: send mail to majordomo@freebsddiary.cx
> with "unsubscribe adsl" in the body of the message
> 
> To unsubscribe: send mail to majordomo@freebsddiary.cx
> with "unsubscribe adsl" in the body of the message
> 
To unsubscribe: send mail to majordomo@freebsddiary.cx
with "unsubscribe adsl" in the body of the message
Received on Wed Mar 15 11:53:41 2000

This archive was generated by hypermail 2.2.0 : Thu Nov 30 11:48:03 2006 EST