PF-NAT

Sten Daniel Sørsdal lists at wm-access.no
Thu Nov 30 15:25:43 PST 2006


Aristeu Gil Alves Jr wrote:
> There's no way to share various PPTP client conections to the same
> PPTP server. pf nat only can handle one at the time, since there's no
> dst and src port to make more than one nat state.
> 
> Thats what I heard.

There is no src/dst port but there is Call ID in the modified GRE
header. Each session gets a unique value from which sessions can be
identified. Just about any cheap home firewall can do it these days, i
wonder why the open source community is reluctant to take advantage.

-- 
Sten Daniel Sørsdal



More information about the freebsd-pf mailing list