My network enviroment is:windows XP,unix,linux ubuntu .
My Goal is to connect remotely through VPN to and access resources on any PC.(also browse internet when connected)

So far I can establish vpn connection and access vpn server only.
Can not ping any other PC on the network nether browse internet.


To describe my network :
I have netgear router set up with Static WAN IP configured with NAT.
On local network the router is the gateway 192.168.1.1
Using Port forwarding to direct traffic to VPN server 192.168.1.12

VPN server is:
Ubuntu 6.10 ,Ip address 192.168.1.12 static eth0 and 192.168.1.13 static eth1

nntpd installed
Only config I changed was adding ip address in config file:
local 192.168.1.13
remote 192.168.1.15-20 ( is this needs to be same subnet as server?)

and uncommented:

bcrelay eth1

ms-dns 192.168.1.1 (in option file)


What needs to be done to open up the communication past VPN server?

Hints:
-change my ip local and remote configuration? how and why?
-enable IP forwarding on VPN server?how and why?
-routing tables changes? how and why?
-other? what?how?and why?

Hey there,

Your information is a bit chaotic. I am not an expert, but I have set-up a working pptp server and it works without any problem (the only problem I have is that a single user can login multiple times)

But ok, You should first specify your pptp-subnet range. Edit your pptpd.conf file ==> at the bottom give your localip and specific address, preferably different from your servers because of security reasons for example 10.80.10.1(you could then isolate pptp server better when making firewall rules)

Specify your range of ip addresses for your pprp server by giving the remoteip a range, like 10.80.10.10-50 (your clients will then get a ip between the range 10.80.10.10 - 10.80.10.50). Your pptp subnet is then in this case 10.80.10.0/24

Also, I had to push the DNS settings to my clients in order to make it work. That you can edit in pptpd-options file. ==> Edit the the line ms-dns with the prober ip-number. In your case, your router is your dns-server ==> So, you should uncomment the line and thus add,
ms-dns 192.168.1.1 # my Router will act as dns-server

Having done that, you should also specify your linux box to NAT the packages from your pptp-subnet.

In you case, I think you should add the following ip-tables rule (just go in terminal and try it out)
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE

Try visiting this site to find out where your problem is exactly during the routing
http://poptop.sourceforge.net/dox/di...rwarding.phtml

You dont have to edit any routing rules, because the PPTP-server does tha t for you. You should only specify the NAT/Firewall rules in order to make it work.

Best of luck,
Zurvy