linux:networking:ubuntu_pptp_gateway [Eureka Moment]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Ubuntu PPTP VPN internet gateway ======
This is tested on [[https://m.do.co/c/8281e8db08bd|Digital Ocean - use this link to get 10$]]
=== Setup PPTP Server ===
First we need to install pptp server using apt-get
<code># sudo apt-get install pptpd</code>
Then we need to configure the pptpd.
<code># sudo nano /etc/pptpd.conf</code>
Add server IP and client IP at the end of the file. You can add like below:
<code>
localip 192.168.0.1
remoteip 192.168.0.100-200
</code>
This sets up the PPTP server to use IP 192.168.0.1 while distributing the IP range 192.168.0.100 to 192.168.0.200 to PPTP clients. Change these as you wish as long as they are private IP addresses and do not conflict with IP addresses already used by your server.

Configure DNS servers to use when clients connect to this PPTP server
<code># sudo nano /etc/ppp/pptpd-options</code>
Uncomment the ms-dns and add google like below or OpenDNS
<code>
ms-dns 8.8.8.8
ms-dns 8.8.4.4
</code>
Now add a VPN user in /etc/ppp/chap-secrets file.
<code># sudo nano /etc/ppp/chap-secrets</code>
The first column is username. Second column is server name, you can put “pptpd” in there. Third column is password. The last column is the IP addresses, you can put * to allow all IP.
<code>
# client        server  secret                  IP addresses
username * myPassword *
</code>
Finally start your server
<code># /etc/init.d/pptpd restart</code>
=== Setup IP Forwarding ===
To enable IPv4 forward. Change /etc/sysctl.conf file, add forward rule below.
<code># sudo nano /etc/sysctl.conf</code>
Uncomment the line
<code>net.ipv4.ip_forward=1</code>
Then reload the configuration
<code>sudo sysctl -p</code>
Add forward rule in iptables
<code># sudo nano /etc/rc.local</code>
adding to the bottom just before the exit 0
<code>
iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE
iptables -A FORWARD -p tcp --syn -s 192.168.0.0/24 -j TCPMSS --set-mss 1356
</code>
This example is using 192.168.0 for its PPTP subnet. The second rule adjusts the MTU size :

You are done. Just reboot your server and you should be able to connect to using PPTPD and send all your traffic through this server. 

=== Setup Windows VPN connection ===
  * Create a new PPTP connection
  * Select Type of VPN: **Point to Point Tunneling Protocol (PPTP)** 
  * Select Data encryption: **Require encryption (disconnect if server declines)**
  * Select **Allow theese protocols** and uncheck everything but the **Microsoft CHAP Version 2 (MS-CHAP v2)**

=== Setup Linux VPN connection ===
  * $ sudo pptpsetup --create MYCONNECTION --server vpn.ourcompany.com --domain DOMAINNAME --username myname --password ******* --encrypt --start
  * pon MYCONNECTION