Re: Access old PPTP behind OpenBSD 6.1

On 2017-09-05, Lars Bonnesen <lars.bonnesen@gmail.com> wrote:
> Yes... I know... Don't run MS PPTP.... and that is why I am implementing
> OpenBSD.
>
> Untill OpenVPN is fully installed on every client, I need to provide access
> to PPTP during transition.
>
> I don't know what to use in pf.conf though. I have tried everything that I
> find logical.
>
> In sysctl.conf I have added:
>
>
> net.inet.gre.allow=1
> net.inet.gre.wccp=1
> net.inet.mobileip.allow=1
>
>
> Lets say that openBSD public IP is 1.2.3.4 local IP 10.77.1.2 and LAN is
> 10.77.1.0/24 - PPTP server is 10.77.1.106
>
> How would my PPTP lines look in pf.conf?
>
> Help is greatly appriciated.
>
> Regards, Lars.
>

PPTP through NAT is awkward. You might have more luck running PPTP on
the OpenBSD box using npppd(8) rather than passing it through to another
machine; config is not too tricky.