Definitive list of protocols with NAT/conntrack support

Kinzer, Don DKinzer@premia.com
Fri, 26 Oct 2001 11:37:03 -0700


As I understand it, a single PPTP session can be conducted through an
iptables firewall without a helper.  Supporting multiple simultaneous PPTP
connections requires connection tracking.  That is what Brian is
implementing.  His original message to this list regarding his work is found
at
http://lists.samba.org/pipermail/netfilter-devel/2001-October/002470.html.
I expect that he'll post again when it is completed.


-----Original Message-----
From: 	Scott McDermott [mailto:mcdermot@questra.com] 
Sent:	26 Oct 2001 11:33 AM
To:	netfilter@lists.samba.org
Subject:	Re: Definitive list of protocols with NAT/conntrack support

I am using PPTP without any helper...you just allow GRE and a couple of
TCP ports...you're saying there is a module in development which will
allow this to be statefully tracked so I can use -m state with GRE
tunnel?