VPN revisited.
wlanmac
wlan at mac.com
Thu Aug 21 13:23:47 UTC 2008
Typically, you'll find the following in iptables when running chilli. In
this case, chilli is running on ath0:
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT 0 -- * tun0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT 0 -- tun0 * 0.0.0.0/0 0.0.0.0/0
0 0 DROP 0 -- * ath0 0.0.0.0/0 0.0.0.0/0
0 0 DROP 0 -- ath0 * 0.0.0.0/0 0.0.0.0/0
This should prevent the kernel from picking up the packets which chilli
is forwarding. You have something similar?
David
On Thu, 2008-08-21 at 15:07 +0200, Peter Warasin wrote:
> wlanmac wrote:
> > What do your iptables rules look like when running chilli?
>
> the same as without, i simply added the rules for the tun device.
>
> i now managed it to have pptp running through chilli.
>
> for debug purposes i return tun_encaps(tun, pack, len, tun->routeidx);
> in the first line within cb_dhcp_data_ind(), in order to bypass all the
> authentication checks. Then PPTP passes through without problems. I now
> try to narrow down to the lines which cause pptp to stop working.
>
> peter
>
More information about the Chilli
mailing list