PPTP with PoPToP via ADSL (T-Online) without ext. Router
From: Heiko Hannig (info_at_hannig.de)
Date: 04/17/05
- Next message: Paul Bramscher: "Re: Academic discount?"
- Previous message: Ben Clay: "Re: Do You Want To Know For Sure That You Are Going To Heaven? The reason some people don't know for sure if they are going to Heaven when they die is because they just don't know. The good news is that you can know for sure that you are going to Heaven wh"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Sun, 17 Apr 2005 15:39:27 +0200
Hello Linux-friends!
for now 2 weeks I am trying to get the following constellation running:
First what I habe:
Linux-Computer with eth0 as internal net, and ppp0, which is a PPPoE
Interface connected directly to a Telekom DSL Modem, without external
Router. I tried to configure the SuSEFirewall2 as described in many HowTOs,
tried also with Firewall deactivated, PoPToP configured as described;
(In the firewall config I tried many combinations, port 1723 is open from
outside, "gre" is as EXT_IP set)
My Linux distribution is a SuSE Enterprise 9 on a ia64 (Itanium) - but I
tried the same on my PIII with SuSE Pro 9.2 with the same effect...
Now the problem:
>From a Win2000-PC in eth0 I can build up a VPN connection with PPTP to the
linux box (which is not useful, because I AM in eth0 and in my network, but
the daemon works and build up my connection, gives me an IP-adress)
In the moment I try to build up the connection from outside (from the
internet, so trough ppp0), the windows PC says the german words of "checking
username and password" and then after a minute it aborts. For me it seems to
be the moment when the PPTPd tries to activate ppp1 - but this doesn't
happen - if I check ifconfig while trying to connect, there is no ppp1
visible - if I connect from eth0 it is build up correctly.
Is there a trick to tunnel ppp1 through ppp0? In all helpfiles and HowTOs I
read is always a environment with external router used or not explicitly
talked about the type of internet connection. I do not know what more to try
? If anybody has an idea or a new tip I would be very happy and thankful!
Sorry for my english :)
Thank you for your help, Heiko /Germany
Here some Details about my configuration:
options.pptp:
lock
auth
require-chap
(only the essentials, everything else will be configured later,
encryption etc.)
pptpd.conf:
option /etc/ppp/options.pptp
debug
localip 192.168.66.1
remoteip 192.168.66.2
pidfile /var/run/pptpd.pid
What I said - via eth0 the connection is established in one second...
Here the syslog when I come from eth0:
Zitat:
Apr 15 14:24:35 leila pptpd[20974]: MGR: Launching
/usr/sbin/pptpctrlto handle client
Apr 15 14:24:35 leila pptpd[20974]: CTRL: local address = 192.168.66.1
Apr 15 14:24:35 leila pptpd[20974]: CTRL: remote address =192.168.66.2
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd speed = 115200
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pppd options file
=/etc/ppp/options.pptp
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Client 192.168.1.24
controlconnection started
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 1)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a START CTRL CONN
RPLYpacket
Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 156 bytes to
theclient.
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
Apr 15 14:24:35 leila pptpd[18921]: MGR: No free connection slots
orIPs - no more clients can connect!
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 7)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: 0 min_bps, 1525 max_bps,
32window size
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Made a OUT CALL RPLY packet
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Starting call
(launchingpppd, opening GRE)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: pty_fd = 5
Apr 15 14:24:35 leila pptpd[20974]: CTRL: tty_fd = 6
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher):
Connectionspeed = 115200
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher): localaddress
= 192.168.66.1
Apr 15 14:24:35 leila pptpd[20975]: CTRL (PPPD Launcher):
remoteaddress = 192.168.66.2
Apr 15 14:24:35 leila pppd[20975]: pppd 2.4.2 started by root, uid 0
Apr 15 14:24:35 leila pptpd[20974]: CTRL: I wrote 32 bytes to
theclient.
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Sent packet to client
Apr 15 14:24:35 leila pppd[20975]: Using interface ppp1
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 15)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Got a SET LINK INFO packet
with standard ACCMs
Apr 15 14:24:35 leila pppd[20975]: Connect: ppp1 <--> /dev/pts/2
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Received PPTP ControlMessage
(type: 15)
Apr 15 14:24:35 leila pptpd[20974]: CTRL: Ignored a SET LINK INFO
packet with real ACCMs!
Apr 15 14:24:35 leila pppd[20975]: Cannot determine ethernet address
for proxy ARP
Apr 15 14:24:35 leila pppd[20975]: local IP address 192.168.66.1
Apr 15 14:24:35 leila pppd[20975]: remote IP address 192.168.66.2
// The Firewall-errors result from samba etc. - not important now
Apr 15 14:24:35 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51899 PROTO=UDP PT=137 DPT=137 LEN=76
Apr 15 14:24:35 leila ip-up: Warning: detected activated samba,
enabling FW_SERVICE_SMB!
Apr 15 14:24:35 leila ip-up: You still have to allow tcp port 139 on
internal, dmz and/or external.
Apr 15 14:24:35 leila kernel: SFW2-IN-ACC_DENIED_INT IN=eth0 OUT=
MAC=00:30:6e:39:f7:4c:00:0c:f1:6c:b3:97:08:00 SRC=192.168.1.24
DST=84.148.200.181 LEN=129 TOS=0x00 PREC=0x00 TTL=128 ID=51908 PROTO=47
Apr 15 14:24:36 leila kernel: SFW2-IN-ILL-TARGET IN=ppp0 OUT= MAC=
SRC=84.148.170.205 DST=84.148.200.181 LEN=52 TOS=0x00 PREC=0x00 TTL=127
ID=37367 DF PROTO=TCP SPT=2424 DPT=135 WINDOW=32767 RES=0x00 SYN URGP=0 OPT
(020405AC0103030001010402)
Apr 15 14:24:36 leila pptpd[20974]: Buffering out-of-order packet; got
18 after 16
Apr 15 14:24:37 leila pptpd[20974]: Buffering out-of-order packet; got
19 after 16
Apr 15 14:24:38 leila pptpd[20974]: Packet reorder timeout waiting for
17
Apr 15 14:24:38 leila pptpd[20974]: Buffering out-of-order packet; got
20 after 17
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51910 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51914 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51917 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila SuSEfirewall2: Firewall rules successfully set
from /etc/sysconfig/SuSEfirewall2
Apr 15 14:24:38 leila pppd[20975]: Script /etc/ppp/ip-up finished (pid
20990), status = 0x0
Apr 15 14:24:38 leila /etc/ppp/ip-up.d/freeswan: this script needs to
be run from ip-up or ip-down
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51919 PROTO=UDP SPT=137 DPT=137 LEN=76
Apr 15 14:24:38 leila kernel: SFW2-IN-ILL-TARGET IN=ppp1 OUT= MAC=
SRC=192.168.66.2 DST=255.255.255.255 LEN=96 TOS=0x00 PREC=0x00 TTL=128
ID=51922 PROTO=UDP SPT=137 DPT=137 LEN=76[/quote]
When I try to connect from outside this happens:
Zitat:
Apr 15 14:28:43 leila pptpd[22001]: MGR: Launching
/usr/sbin/pptpctrl to handle client
Apr 15 14:28:43 leila pptpd[22001]: CTRL: local address =
192.168.66.1
Apr 15 14:28:43 leila pptpd[22001]: CTRL: remote address =
192.168.66.2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd speed = 115200
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pppd options file =
/etc/ppp/options.pptp
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Client 84.149.247.35
control connection started
Apr 15 14:28:43 leila pptpd[18921]: MGR: No free connection
slots or IPs - no more clients can connect!
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 1)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a START CTRL CONN
RPLY packet
Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 156 bytes to
the client.
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 7)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: 0 min_bps, 1525
max_bps, 32 window size
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Made a OUT CALL RPLY
packet
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Starting call
(launching pppd, opening GRE)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: pty_fd = 5
Apr 15 14:28:43 leila pptpd[22001]: CTRL: tty_fd = 6
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher):
Connection speed = 115200
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): local
address = 192.168.66.1
Apr 15 14:28:43 leila pptpd[22002]: CTRL (PPPD Launcher): remote
address = 192.168.66.2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: I wrote 32 bytes to
the client.
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Sent packet to client
Apr 15 14:28:43 leila pppd[22002]: pppd 2.4.2 started by root,
uid 0
Apr 15 14:28:43 leila pppd[22002]: Using interface ppp1
Apr 15 14:28:43 leila pppd[22002]: Connect: ppp1 <--> /dev/pts/2
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Received PPTP Control
Message (type: 15)
Apr 15 14:28:43 leila pptpd[22001]: CTRL: Got a SET LINK INFO
packet with standard ACCMs[/quote]
And then it last about a minute and then disconnect happens...
Interface ppp1 is not set up, it is not visible in ifconfig.
Thank you very much for your help,
Heiko Hannig
- Next message: Paul Bramscher: "Re: Academic discount?"
- Previous message: Ben Clay: "Re: Do You Want To Know For Sure That You Are Going To Heaven? The reason some people don't know for sure if they are going to Heaven when they die is because they just don't know. The good news is that you can know for sure that you are going to Heaven wh"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|