2 - Raspberry PI Community Projects

# vpn.falcot.com is the PPTP server
pty "pptp vpn.falcot.com --nolaunchpppd"
# the connection will identify as the "vpn" user
user vpn
remotename pptp
# encryption is needed
require-mppe-128
file /etc/ppp/options.pptp
ipparam falcot
Example 10.3
The /etc/ppp/peers/falcot file
# Create the route to the Falcot network
if [ "$6" = "falcot" ]; then
# 192.168.0.0/24 is the (remote) Falcot network
route add -net 192.168.0.0 netmask 255.255.255.0 dev $1
fi
Example 10.4
The /etc/ppp/ip-up.d/falcot file
# Delete the route to the Falcot network
if [ "$6" = "falcot" ]; then
# 192.168.0.0/24 is the (remote) Falcot network
route del -net 192.168.0.0 netmask 255.255.255.0 dev $1
fi
Example 10.5
The /etc/ppp/ip-down.d/falcot file
SECURITY
MPPE
Securing PPTP involves using the MPPE feature (Microso Point-to-Point Encryption),
which is available in official Debian kernels as a module.
10.2.4.2. Configuring the Server
CAUTION
PPTP and firewalls
Intermediate firewalls need to be configured to let through IP packets using
protocol 47 (GRE). Moreover, the PPTP server's port 1723 needs to be open so
that the communication channel can happen.
232 The Debian Administrator's Handbook