udpate

pptpd/README.md

@@ -12,6 +12,7 @@ pptpd:
     - ./chap-secrets:/etc/ppp/chap-secrets
   privileged: true
   restart: always
+  #net: host
 ```
 
 ## server
@@ -27,3 +28,15 @@ You must open the following ports:
 - To allow PPTP tunnel maintenance traffic, open `1723/tcp`.
 - To allow PPTP tunneled data to pass through router, open `Protocol 47`.
 
+
+## firewall
+
+If you use `net: host` for networking:
+
+```
+$ vim /etc/defautl/ufw
+# DEFAULT_FORWARD_POLICY="ACCEPT"
+$ ufw reload
+$ ufw allow 1723
+$ iptables -t nat -A POSTROUTING -s 192.168.127.0/24 -j MASQUERADE
+```