PPTP with PoPToP via ADSL (T-Online) without ext. Router

From: Heiko Hannig (info_at_hannig.de)
Date: 04/17/05


Date: Sun, 17 Apr 2005 15:39:27 +0200

Hello Linux-friends!

for now 2 weeks I am trying to get the following constellation running:

First what I habe:

Linux-Computer with eth0 as internal net, and ppp0, which is a PPPoE
Interface connected directly to a Telekom DSL Modem, without external
Router. I tried to configure the SuSEFirewall2 as described in many HowTOs,
tried also with Firewall deactivated, PoPToP configured as described;
(In the firewall config I tried many combinations, port 1723 is open from
outside, "gre" is as EXT_IP set)

My Linux distribution is a SuSE Enterprise 9 on a ia64 (Itanium) - but I
tried the same on my PIII with SuSE Pro 9.2 with the same effect...

Now the problem:
>From a Win2000-PC in eth0 I can build up a VPN connection with PPTP to the
linux box (which is not useful, because I AM in eth0 and in my network, but
the daemon works and build up my connection, gives me an IP-adress)

In the moment I try to build up the connection from outside (from the
internet, so trough ppp0), the windows PC says the german words of "checking
username and password" and then after a minute it aborts. For me it seems to
be the moment when the PPTPd tries to activate ppp1 - but this doesn't
happen - if I check ifconfig while trying to connect, there is no ppp1
visible - if I connect from eth0 it is build up correctly.

Is there a trick to tunnel ppp1 through ppp0? In all helpfiles and HowTOs I
read is always a environment with external router used or not explicitly
talked about the type of internet connection. I do not know what more to try
? If anybody has an idea or a new tip I would be very happy and thankful!

Sorry for my english :)

Thank you for your help, Heiko /Germany

Here some Details about my configuration:

options.pptp:
lock
auth
require-chap

(only the essentials, everything else will be configured later,
encryption etc.)

pptpd.conf:
option /etc/ppp/options.pptp
debug
localip 192.168.66.1
remoteip 192.168.66.2
pidfile /var/run/pptpd.pid

What I said - via eth0 the connection is established in one second...
Here the syslog when I come from eth0:

      Zitat:
      Apr 15 14:24:35 leila pptpd[20974]: MGR: Launching
/usr/sbin/pptpctrlto handle client
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: local address = 192.168.66.1
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: remote address =192.168.66.2
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd speed = 115200
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd options file
=/etc/ppp/options.pptp
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Client 192.168.1.24
controlconnection started
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 1)
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a START CTRL CONN
RPLYpacket
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 156 bytes to
theclient.
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
      Apr 15 14:24:35 leila pptpd[18921]: MGR: No free connection slots
orIPs - no more clients can connect!
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 7)
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: 0 min_bps, 1525 max_bps,
32window size
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a OUT CALL RPLY packet
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Starting call
(launchingpppd, opening GRE)
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: pty_fd = 5
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: tty_fd = 6
      Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher):
Connectionspeed = 115200
      Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher): localaddress
= 192.168.66.1
      Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher):
remoteaddress = 192.168.66.2
      Apr 15 14:24:35 leila pppd[20975]: pppd 2.4.2 started by root, uid 0
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 32 bytes to
theclient.
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
      Apr 15 14:24:35 leila pppd[20975]: Using interface ppp1
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 15)
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Got a SET LINK INFO packet
with standard ACCMs
      Apr 15 14:24:35 leila pppd[20975]: Connect: ppp1 <--> /dev/pts/2
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 15)
      Apr 15 14:24:35 leila pptpd[20974]: CTRL: Ignored a SET LINK INFO
packet with real ACCMs!
      Apr 15 14:24:35 leila pppd[20975]: Cannot determine ethernet address
for proxy ARP
      Apr 15 14:24:35 leila pppd[20975]: local IP address 192.168.66.1
      Apr 15 14:24:35 leila pppd[20975]: remote IP address 192.168.66.2

      // The Firewall-errors result from samba etc. - not important now

      Apr 15 14:24:35 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51899 PROTO=UDP PT=137 DPT=137 LEN=76
      Apr 15 14:24:35 leila ip-up: Warning: detected activated samba,
enabling FW_SERVICE_SMB!
      Apr 15 14:24:35 leila ip-up: You still have to allow tcp port 139 on
internal, dmz and/or external.
      Apr 15 14:24:35 leila kernel: SFW2-IN-ACC_DENIED_INT IN=eth0 OUT=
MAC=00:30:6e:39:f7:4c:00:0c:f1:6c:b3:97:08:00 SRC=192.168.1.24
DST=84.148.200.181 LEN=129 TOS=0x00 PREC=0x00 TTL=128 ID=51908 PROTO=47
      Apr 15 14:24:36 leila kernel: SFW2-IN-ILL-TARGET IN=ppp0 OUT= MAC=
SRC=84.148.170.205 DST=84.148.200.181 LEN=52 TOS=0x00 PREC=0x00 TTL=127
ID=37367 DF PROTO=TCP SPT=2424 DPT=135 WINDOW=32767 RES=0x00 SYN URGP=0 OPT
(020405AC0103030001010402)
      Apr 15 14:24:36 leila pptpd[20974]: Buffering out-of-order packet; got
18 after 16
      Apr 15 14:24:37 leila pptpd[20974]: Buffering out-of-order packet; got
19 after 16
      Apr 15 14:24:38 leila pptpd[20974]: Packet reorder timeout waiting for
17
      Apr 15 14:24:38 leila pptpd[20974]: Buffering out-of-order packet; got
20 after 17
      Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51910 PROTO=UDP SPT=137 DPT=137 LEN=76
      Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51914 PROTO=UDP SPT=137 DPT=137 LEN=76
      Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51917 PROTO=UDP SPT=137 DPT=137 LEN=76
      Apr 15 14:24:38 leila SuSEfirewall2: Firewall rules successfully set
from /etc/sysconfig/SuSEfirewall2
      Apr 15 14:24:38 leila pppd[20975]: Script /etc/ppp/ip-up finished (pid
20990), status = 0x0
      Apr 15 14:24:38 leila /etc/ppp/ip-up.d/freeswan: this script needs to
be run from ip-up or ip-down
      Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51919 PROTO=UDP SPT=137 DPT=137 LEN=76
      Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51922 PROTO=UDP SPT=137 DPT=137 LEN=76[/quote]

When I try to connect from outside this happens:

            Zitat:
            Apr 15 14:28:43 leila pptpd[22001]: MGR: Launching
/usr/sbin/pptpctrl to handle client
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: local address =
192.168.66.1
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: remote address =
192.168.66.2
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd speed = 115200
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd options file =
/etc/ppp/options.pptp
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Client 84.149.247.35
control connection started
            Apr 15 14:28:43 leila pptpd[18921]: MGR: No free connection
slots or IPs - no more clients can connect!
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 1)
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a START CTRL CONN
RPLY packet
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 156 bytes to
the client.
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 7)
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: 0 min_bps, 1525
max_bps, 32 window size
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a OUT CALL RPLY
packet
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Starting call
(launching pppd, opening GRE)
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: pty_fd = 5
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: tty_fd = 6
            Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher):
Connection speed = 115200
            Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): local
address = 192.168.66.1
            Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): remote
address = 192.168.66.2
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 32 bytes to
the client.
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
            Apr 15 14:28:43 leila pppd[22002]: pppd 2.4.2 started by root,
uid 0
            Apr 15 14:28:43 leila pppd[22002]: Using interface ppp1
            Apr 15 14:28:43 leila pppd[22002]: Connect: ppp1 <--> /dev/pts/2
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 15)
            Apr 15 14:28:43 leila pptpd[22001]: CTRL: Got a SET LINK INFO
packet with standard ACCMs[/quote]

And then it last about a minute and then disconnect happens...

Interface ppp1 is not set up, it is not visible in ifconfig.

Thank you very much for your help,

Heiko Hannig



Relevant Pages

  • RE: RWW not accessible over web
    ... My laptop is docked to the LAN but I take it to client sites. ... option will configure ISA to provide network security and packet filtering. ... the clients unable to access Internet after you enable firewall. ... Before you run the Configure E-mail and Internet Connection Wizard, ...
    (microsoft.public.windows.server.sbs)
  • Re: ICS and FS trouble
    ... The master domain browser is assigned with the ISC client machine. ... >>sharing for ms networks, QoS packet sheduler, internet protcol. ... > Internet connection has a 192.168.0.x address that can't be changed to ...
    (microsoft.public.windowsxp.network_web)
  • Re: Internet Sharing
    ... This computer connects directly to the Internet. ... On the ICS clients, you select: ... If running the wizard on the clients is a problem, just set each client to use ... connection from the client but when I open up the internet browser it is like ...
    (microsoft.public.windowsxp.network_web)
  • Re: openvpn server bridge.
    ... Client has an adsl internet connection. ... I see that, when I try to ping server to client or client to server, there are many arp requests without answer. ...
    (comp.os.linux.networking)
  • Re: openvpn server bridge.
    ... Client has an adsl internet connection. ... I see that, when I try to ping server to client or client to server, there are many arp requests without answer. ...
    (comp.os.linux.networking)