From 850a1487e3afdecfd1412b3b625e7546d390085f Mon Sep 17 00:00:00 2001 From: kev Date: Sun, 28 Jun 2015 14:48:50 +0800 Subject: [PATCH] udpate --- pptpd/README.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/pptpd/README.md b/pptpd/README.md index bfed94e..34d4caf 100644 --- a/pptpd/README.md +++ b/pptpd/README.md @@ -12,6 +12,7 @@ pptpd: - ./chap-secrets:/etc/ppp/chap-secrets privileged: true restart: always + #net: host ``` ## server @@ -27,3 +28,15 @@ You must open the following ports: - To allow PPTP tunnel maintenance traffic, open `1723/tcp`. - To allow PPTP tunneled data to pass through router, open `Protocol 47`. + +## firewall + +If you use `net: host` for networking: + +``` +$ vim /etc/defautl/ufw +# DEFAULT_FORWARD_POLICY="ACCEPT" +$ ufw reload +$ ufw allow 1723 +$ iptables -t nat -A POSTROUTING -s 192.168.127.0/24 -j MASQUERADE +```