clarissa1996
Technical User
I have a client connected to the internet (which has a fixed IP address) that needs to access a system connected on my internal network.
I have tryed to use our VPN-Server (PPTPD on a Linux Server).
All works ok. But how can I avoid that this client sees all my internal network ? It seems me that with PPTPD this is not possible to do.
Therefore I have tryed another method.
I have configured my firewall (Iptables on a Linux Server) to redirect all the traffic from this client to my internal system.
Example:
iptables -t nat -A PREROUTING -s external_address -j DNAT --to internal_address
This works !
My questions are:
1) Is this last solution formally correct ?
2) Is there a better solution (perhaps with VPN) ?
Thanks for any help. Clarissa
I have tryed to use our VPN-Server (PPTPD on a Linux Server).
All works ok. But how can I avoid that this client sees all my internal network ? It seems me that with PPTPD this is not possible to do.
Therefore I have tryed another method.
I have configured my firewall (Iptables on a Linux Server) to redirect all the traffic from this client to my internal system.
Example:
iptables -t nat -A PREROUTING -s external_address -j DNAT --to internal_address
This works !
My questions are:
1) Is this last solution formally correct ?
2) Is there a better solution (perhaps with VPN) ?
Thanks for any help. Clarissa