Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I'm attempting to connect to a PPTP VPN. I have opened ports 47 and 1723 in the ingress rules. When APF is turned on, it fails. When APF is turned off, it works fine. I have turned on as many logging options as I can find, but there is no record of any packets being dropped, other than spam from other machines on the subnet. When APF is turned off, it works fine. I have turned on as many logging options as I can find, but there is no record of any packets being dropped, other than spam from other machines on the subnet. I found a site that said I should add a postrouting rule involving NAT, but that had no effect either.

SOLUTION: Add the following line to /etc/apf-firewall/postroute.rules -

$IPT -A INPUT -p 47 -j ACCEPT

Then, run this as root:

service apf-firewall restart

share|improve this question

1 Answer 1

up vote 4 down vote accepted

PPTP uses the GRE protocol. You must allow outbound connections for protocol 47 (that is GRE), not port 47.

share|improve this answer
    
Thanks! :) I had to decipher a bit of Portuguese to find the right way to add it to APF, but it worked immediately. –  Huns Mar 14 '13 at 19:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.