Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

I have in my job a server running iptables and some clients needs to connect simultaneously in PPTP VPN connection.

My network:

  1. 2x internet connection, one ADSL+ 50 Mbps and Fiber Optic 100 Mbps.
  2. 192.168.0.3 TP-LINK load balance router
  3. 192.168.0.7 Squid 3.3.2 Proxy Transparent Server and Gateway with 2 network adapter.
  4. 192.168.0.8 Squid 3.3.11 Proxy Transparent Server and Gateway Backup

The first Fiber Optic internet, are connected directly at 192.168.0.7 with PPPoE authentication with Squid (at Squid start, automatically try to dial PPPoE connection and turn on firewall) and anyone use this internet connection to work at company.

The second is connected at 192.168.0.3 (and in the future both internet connections will be here).

First test: Client computer with any ip, for example: 192.168.0.130 with default gw 192.168.0.3: Ok! Works and no worry - but no internet lock.

Second test: The same computer with default gateway to 192.168.0.7 or 192.168.0.8, do not work - waiting for authentication to long and do not connect.

Third test: The same computer with default gateway at 192.168.0.8 (proxy backup) and IPTABLES disabled, WORK, but not always!

iptables is configured to allow port TCP 1723 and 47 GRE protocol and forward packets.

IPTABLES proxy backup:

*nat 
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
*filter
-A INPUT -o eth0 -j ALLOW
-A FORWARD -o eth0 -p 47 -j ALLOW
-A FORWARD -o eth0 -p tcp --dport 1723 -j ALLOW
-A OUTPUT -o eth0 -j ALLOW
COMMIT

Anyone can help?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.