try ipchains and iptable on redhat, it support pptp and ipsec. i tested it. works. but you have to pached your kernal if your kernal is too old.