Sign inSign up

vassio/pptp-port-forwarding

By vassio

•Updated over 5 years ago

pptp server with routing and port forwarding

Image
1

2.1K

vassio/pptp-port-forwarding repository overview

⁠Docker image with PPTP server including routing and port forwarding

⁠Description

Access private network from the internet, support port forwarding from private network to outside via cloud.
More secured solution with L2TP with Radsec⁠
GitHub Project⁠

⁠Example

⁠Features

⁠config.json structure

{
  "users": {
    "USER_NAME": {
      "password": "PASSWORD",
      "ip": "192.168.122.XX",
      "forwarding": [{
        "sourceIp": "APPLICATION_IP",
        "sourcePort": "APPLICATION_PORT",
        "destinationPort": REMOTE_PORT
      }],
      "routing": [
        {
          "route": "ROUTING_TABLE"
        }
      ]
    }
  }
}

Where

  • USER_NAME username or email
  • PASSWORD user password
  • 192.168.122.XX uniq ip from range 192.168.122.10-192.168.122.254
  • APPLICATION_IP service IP behind NAT (port forwarding)
  • APPLICATION_PORT service PORT behind NAT (port forwarding)
  • REMOTE_PORT port accessible from the internet (port forwarding)
  • REMOTE_PORT port accessible from the internet (port forwarding)
  • ROUTING_TABLE ip with subnet for example 192.168.8.0/24

⁠Examples

⁠Connect to LAN from the internet


user1 - router with subnet 192.168.88.0/24 behind NAT
user2 - user who has access to subnet 192.168.88.0/24 from the Internet

{
  "users": {
    "user1": {
      "password": "password1",
      "ip": "192.168.122.10",
      "routing": [
        {
          "route": "192.168.88.0/24"
        }
      ]
    },
    "user2": {
      "password": "password2",
      "ip": "192.168.122.11"
    }
  }
}
⁠Port forwarding


user - router with subnet 192.168.88.0/24 behind NAT.
Subnet contains service http://192.168.8.254:80⁠ which is available at from http://195.138.164.211:9000⁠

{
  "users": {
    "user": {
      "password": "password",
      "ip": "192.168.122.10",
      "forwarding": [{
        "sourceIp": "192.168.88.1",
        "sourcePort": "80",
        "destinationPort": 9000
      }],
    }
  }
}
⁠connect multiple networks


user1 - router with subnet 192.168.88.0/24 behind NAT. Subnet contains service http://192.168.88.254:80⁠ which is available at from http://195.138.164.211:9000⁠
user2 - router with subnet 192.168.89.0/24 behind NAT.
user3 - user who has access to subnets 192.168.88.0/24 and 192.168.89.0/24 from the Internet

{
  "users": {
    "user1": {
      "password": "password1",
      "ip": "192.168.122.10",
      "forwarding": [
        {
          "sourceIp": "192.168.88.254",
          "sourcePort": "80",
          "destinationPort": 9000
        }
      ],
       "routing": [
        {
          "route": "192.168.88.0/24"
        }
      ]
    },
    "user2": {
      "password": "password2",
      "ip": "192.168.122.11",
      "routing": [
        {
          "route": "192.168.89.0/24"
        }
      ]
    },
    "user3": {
      "password": "password3",
      "ip": "192.168.122.12"
    }
  }
}

⁠Troubleshooting

  1. Viewing logs in docker container:
docker logs pptp-port-forwarding -f
  1. print routing table
docker exec pptp-port-forwarding bash -c "ip route"
  1. print iptable rules
docker exec pptp-port-forwarding bash -c "iptables -S"

⁠Cloud Installation

⁠Automatic cloud installation

create /opt/config.json⁠

sudo apt-get update && sudo apt-get install -y curl
curl -sSL https://raw.githubusercontent.com/vzakharchenko/docker-pptp-port-forwarding/main/ubuntu.install -o ubuntu.install
chmod +x ubuntu.install
./ubuntu.install
⁠Manual Cloud Installation(Ubuntu)
  1. install all dependencies
sudo apt-get update && sudo apt-get install -y iptables git iptables-persistent node
  1. install docker
sudo apt-get remove docker docker.io containerd runc
sudo curl -sSL https://get.docker.com | bash
sudo groupadd docker
sudo usermod -aG docker $USER
newgrp docker
  1. Configure host machine
echo "nf_nat_pptp" >> /etc/modules
echo "ip_gre" >> /etc/modules
iptables -I FORWARD -p gre -j ACCEPT
sudo iptables-save > /etc/iptables/rules.v4
sysctl -w net.ipv4.ip_forward=1
sysctl -w net.netfilter.nf_conntrack_helper=1
sudo echo "net.ipv4.ip_forward=1">/etc/sysctl.conf
sudo echo "net.netfilter.nf_conntrack_helper=1">/etc/sysctl.conf

  1. create /opt/config.json⁠

  2. start docker image

export CONFIG_PATH=/opt/config.json
curl -sSL https://raw.githubusercontent.com/vzakharchenko/docker-pptp-port-forwarding/main/pptp-js/generateDockerCommands.js -o generateDockerCommands.js
`node generateDockerCommands.js`
  1. reboot machine

Tag summary

Content type

Image

Digest

Size

116.6 MB

Last updated

over 5 years ago

docker pull vassio/pptp-port-forwarding