VPN через сервер freebsd

[ikoko 0]

Здравствуйте, есть комп в сети он питается через pptp подключится к серверу в интернете но все ни как не получается, уже правил файл rc.firewall

 

ifOut='em1'

 

${f} -f flush

 

${f} add 50 allow tcp from any to me 22

${f} add 51 allow tcp from me 22 to any

 

${f} add 70 allow tcp from any 1723 to any 1024-65535 out via ${ifOut}

${f} add 71 allow tcp from any 1024-65535 to any 1723 in via ${ifOut}

${f} add 72 allow gre from any to any out via ${ifOut}

${f} add 73 allow gre from any to any in via ${ifOut}

 

${f} add 110 allow ip from any to any via lo0

${f} add 120 skipto 1000 ip from me to any

${f} add 130 deny icmp from any to any in icmptype 5,9,13,14,15,16,17

${f} add 140 deny ip from any to "table(120)"

${f} add 150 deny ip from "table(120)" to any

${f} add 160 skipto 2000 ip from any to me

 

${f} add 200 skipto 500 ip from any to any via ${ifOut}

 

${f} add 300 skipto 4500 ip from any to any in

 

${f} add 400 skipto 450 ip from any to any recv ${ifOut}

${f} add 420 divert 1 ip from any to any

${f} add 450 divert 2 ip from any to any

${f} add 490 allow ip from any to any

 

${f} add 500 skipto 32500 ip from any to any in

${f} add 510 divert 1 ip from any to any

${f} add 540 allow ip from any to any

 

 

${f} add 1000 allow udp from any 53,7723 to any

${f} add 1010 allow tcp from any to any setup keep-state

${f} add 1020 allow udp from any to any keep-state

${f} add 1100 allow ip from any to any

 

${f} add 2000 check-state

${f} add 2010 allow icmp from any to any

${f} add 2020 allow tcp from any to any 80,443

${f} add 2050 deny ip from any to any via ${ifOut}

${f} add 2060 allow udp from any to any 53,7723

 

#${f} add 2100 pass tcp pass tcp from any 1723 to any 1024-65535 out xmit ${ifOut}

#${f} add 2110 pass tcp from any 1024-65535 to any 1723 in recv ${ifOut}

#${f} add 2120 pass gre from any to any out xmit ${ifOut}

#${f} add 2130 pass gre from any to any in recv ${ifOut}

 

${f} add 2200 deny ip from any to any

 

${f} add 32490 deny ip from any to any

:(

Подскажите хоть что править ...

[Shura 2]

У меня хватило всего двух правил

 

 

${f} add 60 allow gre from any to any

${f} add 65 allow tcp from any to me 1723

 

при этом у меня подключаться можно как на сам сервер так и из сети на хосты в инете

P.S. Также как и у Вас стоит Nodeny.

[ikoko 0]

все равно не работает :)