headers
Krijn Tanis - WiMood | 1 Sep 2007 17:26
Picon

Client within internal routed netwok

Hello,

 

I use PoPToP for several years now and I have to say it is a great piece of software. I think I use it in a different way as most of the PPTPd users, because I use it to grant internal users access to the internet when an user logs in using PPTP.

 

Let me first describe the current and working situation. On my internal network, 10.114.0.0/16, is one PPTPd server at IP address 10.114.1.1. This PPTPd server is configured to give users an 10.115.x.x/32 address. When a user logs on, it will get a 10.115.x.x/32 address and then a user is allow to get access to the Internet.

 

Current schematically situation:

Client (10.114.4.56) ----> Server (10.114.1.1) ---> Internet

 

Because the internal network is a bridged network, all users can reach each other and the server on the data layer, the users where always able to talk to the server on the same network. Now I want to use routing in my internal network, so users have to reach most users and always the server on the network layer.  In the new situation the client will only reach the server using some hops. At my home I have a test environment that is using the configuration that is listed below. The client is talking with the server on the network layers where HOP1 is the router between the both networks (10.114.1.0/24 and 10.1.3.0/24). In my first tests I was very positive, because the IP routing was working: I was able to ping from the client to server and I could also reach the web server that is running on the server. But the problem with the setup is the most important point: the PPTP connection was not working properly between the client and the server. The exact problem is that I am able to setup a connection to the server without any problems, but I can get data through the tunnel that is created. For example, if I start a ping on the client to server, I get fast responses. But when I login to the PPTP server, I only get time outs and within the minute the client disconnects the PPTP connection and there are responses again.

 

New situation:

Client (10.1.3.100) ----> 10.1.3.1 - HOP1 - 10.114.1.2 ----->Server (10.114.1.1) ---> Internet

 

I already tried to add some routes on the server, but that is not creating a working situation. Could someone please help me with this problem?

 

Kind regards,

 

Krijn Tanis

 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Permalink | Reply | 0 comments |
headers
calin.ciuleanu | 1 Sep 2007 21:48
Picon

strange IP truncated-ip

I am using RHEL5 (CentOS5) with ppp and pptpd installed from yum repository
pptpd-1.3.4-1.rhel5.1. Clients are Windows XP SP2

My configuration on the pptp server
pptpd.conf
----------
ppp /usr/sbin/pppd
option /etc/ppp/options.pptpd
debug
stimeout 10
logwtmp
localip 10.20.4.5
remoteip 10.20.4.6-20
----------
options.pptpd
name pptpd
ms-dns 10.20.0.10
ms-dns 10.20.0.11
ms-wins 10.20.0.10
proxyarp
debug dump
#noccp
lock
nobsdcomp
novj
novjccomp
#nologfd
logfd 2
noipdefault
mtu 1430
nodefaultroute
lcp-echo-failure 10
lcp-echo-interval 10
refuse-pap
refuse-chap
refuse-mschap
refuse-eap
require-mschap-v2
require-mppe
require-mppe-128
noaccomp
nopcomp
auth
#plugin radius.so
#plugin radattr.so
logfile /var/log/pptpd.log
-----
Configuration on the clients :Windows XP SP2
Advanced Security Settings
- just MS-CHAP v2 activated
Networking
- PPTP VPN
Internet Protocol (TCP/IP) Settings -> Advanced
  - No Use default gateway on remote network

[root <at> zeuz ppp]# lsmod | grep ppp
ppp_mppe                6760  0
ppp_async              11159  0
crc_ccitt               2295  1 ppp_async
ppp_generic            22368  2 ppp_mppe,ppp_async
slhc                    6029  1 ppp_generic

[root <at> zeuz ppp]# uname -a
Linux zeuz 2.6.22.2-r1 #15 SMP Sat Sep 1 19:51:08 EEST 2007 i686 i686  
i386 GNU/Linux
kernel 2.6.22.2 with grsecurity patch from www.grsecurity.net

Without MPPE encryption everything is very good but when i activate  
MPPE in options.pptpd i have no icmp reply from peer from the linux box.

ppp0      Link encap:Point-to-Point Protocol
           inet addr:10.20.4.5  P-t-P:10.20.4.6  Mask:255.255.255.255
           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1396  Metric:1
           RX packets:11 errors:0 dropped:0 overruns:0 frame:0
           TX packets:6 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:3
           RX bytes:577 (577.0 b)  TX bytes:102 (102.0 b)

[root <at> zeuz ppp]# ping 10.20.4.6
PING 10.20.4.6 (10.20.4.6) 56(84) bytes of data.

--- 10.20.4.6 ping statistics ---
15 packets transmitted, 0 received, 100% packet loss, time 14000ms

and this is from the client too.
With tcpdump -n -vv -i ppp0 on server i got this strange messages, on  
the other peer is just one icmp to 10.20.4.5 (server's ip address)

[root <at> zeuz ppp]# tcpdump -vv -n -i ppp0
tcpdump: listening on ppp0, link-type LINUX_SLL (Linux cooked),  
capture size 96 bytes
22:43:10.846954 IP truncated-ip - 7 bytes missing! (tos 0x0, ttl  64,  
id 40086, offset 0, flags [none], proto: Options (0), length: 60, bad  
cksum 5958 (->7625)!) 130.133.1.1 > 188.64.40.64:  ip 40
22:43:16.155055 IP truncated-ip - 7 bytes missing! (tos 0x0, ttl  64,  
id 40089, offset 0, flags [none], proto: Options (0), length: 60, bad  
cksum 5957 (->f622)!) 2.133.1.1 > 188.64.40.64:  ip 40
22:43:21.655160 IP truncated-ip - 7 bytes missing! (tos 0x0, ttl  64,  
id 40090, offset 0, flags [rsvd], proto: Options (0), length: 60, bad  
cksum 5956 (->3621)!) 66.133.1.1 > 188.64.40.64:  ip 40
22:43:27.155264 IP truncated-ip - 7 bytes missing! (tos 0x0, ttl  64,  
id 40092, offset 0, flags [rsvd], proto: Options (0), length: 60, bad  
cksum 5955 (->361f)!) 66.133.1.1 > 188.64.40.64:  ip 40

I tried everything ... with no luck.
Best regards,
Calin

One usual conection log from the pptpd server:

Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
pptpd-logwtmp: $Version$
pppd options in effect:
debug debug             # (from /etc/ppp/options.pptpd)
logfile /var/log/pptpd.log              # (from /etc/ppp/options.pptpd)
dump            # (from /etc/ppp/options.pptpd)
plugin /usr/lib/pptpd/pptpd-logwtmp.so          # (from command line)
auth            # (from /etc/ppp/options.pptpd)
refuse-pap              # (from /etc/ppp/options.pptpd)
refuse-chap             # (from /etc/ppp/options.pptpd)
refuse-mschap           # (from /etc/ppp/options.pptpd)
refuse-eap              # (from /etc/ppp/options.pptpd)
name pptpd              # (from /etc/ppp/options.pptpd)
pptpd-original-ip 79.113.134.45         # (from command line)
115200          # (from command line)
lock            # (from /etc/ppp/options.pptpd)
local           # (from command line)
noaccomp                # (from /etc/ppp/options.pptpd)
mtu 1430                # (from /etc/ppp/options.pptpd)
nopcomp         # (from /etc/ppp/options.pptpd)
lcp-echo-failure 10             # (from /etc/ppp/options.pptpd)
lcp-echo-interval 10            # (from /etc/ppp/options.pptpd)
novj            # (from /etc/ppp/options.pptpd)
novjccomp               # (from /etc/ppp/options.pptpd)
ipparam 79.113.134.45           # (from command line)
noipdefault             # (from /etc/ppp/options.pptpd)
ms-dns xxx # [don't know how to print value]            # (from  
/etc/ppp/options.pptpd)
ms-wins xxx # [don't know how to print value]           # (from  
/etc/ppp/options.pptpd)
nodefaultroute          # (from /etc/ppp/options.pptpd)
proxyarp                # (from /etc/ppp/options.pptpd)
10.20.4.5:10.20.4.6             # (from command line)
nobsdcomp               # (from /etc/ppp/options.pptpd)
require-mppe            # (from /etc/ppp/options.pptpd)
require-mppe-128                # (from /etc/ppp/options.pptpd)
nomppe-stateful         # (from /etc/ppp/options.pptpd)
using channel 36
Using interface ppp0
Connect: ppp0 <--> /dev/pts/1
sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x52d64770>]
rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x35fe0a7c> <pcomp>  
<accomp> <callback CBCP>]
sent [LCP ConfRej id=0x0 <pcomp> <accomp> <callback CBCP>]
rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic 0x52d64770>]
rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x35fe0a7c>]
sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x35fe0a7c>]
sent [LCP EchoReq id=0x0 magic=0x52d64770]
sent [CHAP Challenge id=0xd <40dd767ed8d733ec532e55103ebabf03>, name =  
"pptpd"]
rcvd [LCP Ident id=0x2 magic=0x35fe0a7c "MSRASV5.10"]
rcvd [LCP Ident id=0x3 magic=0x35fe0a7c "MSRAS-0-USERUL-PC"]
rcvd [LCP EchoRep id=0x0 magic=0x35fe0a7c]
rcvd [CHAP Response id=0xd 

<08f6a7e27c9b6392463470e279be016900000000000000003f1422fdda0523bffa701e8d6a4740ba9fb4d90ae2a65b7c00>,
name =  
"slayer"]
sent [CHAP Success id=0xd "S=790BD9AF2A68B91C07BBC41EAF9EBC3193DCECEC  
M=Access granted"]
kernel does not support PPP filtering
sent [CCP ConfReq id=0x1 <mppe +H -M +S +L -D -C>]
rcvd [CCP ConfReq id=0x4 <mppe +H -M +S -L -D -C>]
sent [CCP ConfAck id=0x4 <mppe +H -M +S -L -D -C>]
rcvd [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins  
0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
sent [IPCP TermAck id=0x5]
rcvd [CCP ConfNak id=0x1 <mppe +H -M +S -L -D -C>]
sent [CCP ConfReq id=0x2 <mppe +H -M +S -L -D -C>]
rcvd [CCP ConfAck id=0x2 <mppe +H -M +S -L -D -C>]
MPPE 128-bit stateless compression enabled
sent [IPCP ConfReq id=0x1 <addr 10.20.4.5>]
rcvd [IPCP ConfAck id=0x1 <addr 10.20.4.5>]
rcvd [IPCP ConfReq id=0x6 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins  
0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
sent [IPCP ConfNak id=0x6 <addr 10.20.4.6> <ms-dns1 10.20.0.10>  
<ms-wins 10.20.0.10> <ms-dns3 10.20.0.11> <ms-wins 10.20.0.10>]
rcvd [IPCP ConfReq id=0x7 <addr 10.20.4.6> <ms-dns1 10.20.0.10>  
<ms-wins 10.20.0.10> <ms-dns3 10.20.0.11> <ms-wins 10.20.0.10>]
sent [IPCP ConfAck id=0x7 <addr 10.20.4.6> <ms-dns1 10.20.0.10>  
<ms-wins 10.20.0.10> <ms-dns3 10.20.0.11> <ms-wins 10.20.0.10>]
found interface eth1 for proxy arp
local  IP address 10.20.4.5
remote IP address 10.20.4.6
pptpd-logwtmp.so ip-up ppp0 userul 79.113.134.45
Script /etc/ppp/ip-up started (pid 4571)
Script /etc/ppp/ip-up finished (pid 4571), status = 0x0

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Permalink | Reply | 0 comments |
headers
Joebstl Thomas | 6 Sep 2007 11:47
Picon

Out-of-order packets

Hi guys,

I'm using a cheapo cable/dsl router from Allnet (ALL1294) to connect to 
a PoPToP server which is running 1.1.4-b4.
Since that is quite ancient I wanted to upgrade to 1.2.3 some time ago 
but ran into the problem that I couldnt re-establish the connection once 
it got disconnected by the Allnet router after the inactivity-timeout 
was reached.
Back then I havent had the time to investigate further and went back to 
1.1.4-b4.
Now that I had some time again I tried 1.3.0 and got the following in my 
logs:

kern.debug pptpd[1032]: GRE: buffering packet #5506 (expecting #0, lost 
or reordered)
kern.debug pptpd[1032]: GRE: timeout waiting for 5506 packets
kern.debug pptpd[1032]: GRE: accepting #5506 from queue
kern.debug pptpd[1032]: GRE: accepting packet #5507
kern.debug pptpd[1032]: GRE: accepting packet #5508

1.2.3 just discards them as out-of-order packets.

After having a look at the PPtP session with tcpdump it turns out the 
crappy router dont reset the packet counter to 0 after a disconnect.

Before taking the matter to the manufacturer I'd like to make sure 
that's a bug in their implementation of the pptp protocoll and not some 
matter of interpretation on the poptop-side.
So I'd be glad if someone with deeper knowledge of the protocoll-specs 
could shed some light into that issue.

Regards,
Thomas

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Permalink | Reply | 2 comments |
headers
Phil Oester | 7 Sep 2007 01:07

Re: Out-of-order packets

On Thu, Sep 06, 2007 at 11:47:01AM +0200, Joebstl Thomas wrote:
> Hi guys,
> 
> I'm using a cheapo cable/dsl router from Allnet (ALL1294) to connect to 
> a PoPToP server which is running 1.1.4-b4.
> Since that is quite ancient I wanted to upgrade to 1.2.3 some time ago 
> but ran into the problem that I couldnt re-establish the connection once 
> it got disconnected by the Allnet router after the inactivity-timeout 
> was reached.
> Back then I havent had the time to investigate further and went back to 
> 1.1.4-b4.
> Now that I had some time again I tried 1.3.0 and got the following in my 
> logs:
> 
> kern.debug pptpd[1032]: GRE: buffering packet #5506 (expecting #0, lost 
> or reordered)
> kern.debug pptpd[1032]: GRE: timeout waiting for 5506 packets
> kern.debug pptpd[1032]: GRE: accepting #5506 from queue
> kern.debug pptpd[1032]: GRE: accepting packet #5507
> kern.debug pptpd[1032]: GRE: accepting packet #5508
> 
> 1.2.3 just discards them as out-of-order packets.
> 
> After having a look at the PPtP session with tcpdump it turns out the 
> crappy router dont reset the packet counter to 0 after a disconnect.

Please try 1.3.4 and see if it handles the situation better, thanks.

Phil

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Permalink | Reply | 1 comment |
headers
hadi golestani | 9 Sep 2007 14:11
Picon

connection failed wit error 619

hi,
I've installed ppp-2.4.3-7.rhel4 and pptp-1.7.1-1.fc4 and pptpd-1.3.4-1.rhel4 to create vpn server to server windows clients.
but when I try to connect I always got a 619 error,

this is my /var/log/message content for a connection attempt:

Sep  9 06:29:53 vps111 pptpd[17570]: CTRL: Client 80.71.124.201 control connection started
Sep  9 06:29:53 vps111 pptpd[17570]: CTRL: Starting call (launching pppd, opening GRE)
Sep  9 06:29:53 vps111 pptpd[17570]: GRE: socket() failed
Sep  9 06:29:57 vps111 pppd[17572]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Sep  9 06:29:57 vps111 pppd[17572]: This system lacks kernel support for PPP.  This could be because the PPP kernel module could not be loaded, or because PPP was not included in the kernel configuration.  If PPP was included as a module, try `/sbin/modprobe -v ppp'.  If that fails, check that ppp.o exists in /lib/modules/`uname -r`/net. See README.linux file in the ppp distribution for more details.
Sep  9 06:29:57 vps111 pptpd[17570]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Sep  9 06:29:57 vps111 pptpd[17570]: CTRL: PTY read or GRE write failed (pty,gre)=(6,-1)
Sep  9 06:29:57 vps111 pptpd[17570]: CTRL: Client 80.71.124.201 control connection finished


I've tried to install dkms and kernel_ppp_mppe-1.0.2-3dkms but still when I run this command "modprobe ppp-compress-18 && echo ok" I got this error "FATAL: Module ppp_mppe not found."

what can I do to solve this problem?
tnx

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Permalink | Reply | 1 comment |
headers
James Cameron | 10 Sep 2007 02:15
Picon
Favicon

Re: connection failed wit error 619

On Sun, Sep 09, 2007 at 03:41:00PM +0330, hadi golestani wrote:
>    Sep  9 06:29:57 vps111 pppd[17572]: This system lacks kernel support
>    for PPP.  This could be because the PPP kernel module could not be
>    loaded, or because PPP was not included in the kernel configuration.
>    If PPP was included as a module, try `/sbin/modprobe -v ppp'.  If that
>    fails, check that ppp.o exists in /lib/modules/`uname -r`/net. See
>    README.linux file in the ppp distribution for more details.

This is the critical problem.  Your kernel does not have support for
PPP.  pptpd will not function without PPP.

"PPP support" means the kernel can speak the Point to Point Protocol.
It is a feature included in the kernel source.

>    I've tried to install dkms and kernel_ppp_mppe-1.0.2-3dkms but still
>    when I run this command "modprobe ppp-compress-18 && echo ok" I got
>    this error "FATAL: Module ppp_mppe not found."

This has little to do with the problem, but is caused by the same thing.

>    what can I do to solve this problem?

Install a kernel with PPP support.  All popular distributed Linux
kernels have PPP support.  If yours does not, yet you received it from
someone else, contact them for advice.  If you build the kernel entirely
yourself, then you need to rebuild it with CONFIG_PPP=m and several
other related options enabled.

--

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
Permalink | Reply | 0 comments |
headers
Joebstl Thomas | 10 Sep 2007 08:16
Picon

Re: Out-of-order packets

Hi Phil,

I've removed the line which prints every accepted packet in the source code and so far 1.3.0 seems to work fine.
I'll try 1.3.4 - if I can get it to compile in the openwrt buildroot.
1.3.0 had some debug functions which I had to remove as well - with them it wouldnt compile.

Regards,
Thomas


Phil Oester schrieb:
On Thu, Sep 06, 2007 at 11:47:01AM +0200, Joebstl Thomas wrote:
Hi guys, I'm using a cheapo cable/dsl router from Allnet (ALL1294) to connect to a PoPToP server which is running 1.1.4-b4. Since that is quite ancient I wanted to upgrade to 1.2.3 some time ago but ran into the problem that I couldnt re-establish the connection once it got disconnected by the Allnet router after the inactivity-timeout was reached. Back then I havent had the time to investigate further and went back to 1.1.4-b4. Now that I had some time again I tried 1.3.0 and got the following in my logs: kern.debug pptpd[1032]: GRE: buffering packet #5506 (expecting #0, lost or reordered) kern.debug pptpd[1032]: GRE: timeout waiting for 5506 packets kern.debug pptpd[1032]: GRE: accepting #5506 from queue kern.debug pptpd[1032]: GRE: accepting packet #5507 kern.debug pptpd[1032]: GRE: accepting packet #5508 1.2.3 just discards them as out-of-order packets. After having a look at the PPtP session with tcpdump it turns out the crappy router dont reset the packet counter to 0 after a disconnect.
Please try 1.3.4 and see if it handles the situation better, thanks. Phil 

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Permalink | Reply | 0 comments |
headers
hadi golestani | 10 Sep 2007 11:55
Picon

Fwd: connection failed wit error 619



---------- Forwarded message ----------
From: hadi mobini <hadi.mobini <at> gmail.com>
Date: Sep 10, 2007 1:23 PM
Subject: Re: [Poptop-server] connection failed wit error 619
To: James Cameron <james.cameron <at> hp.com>

thanks ,
I've installed this rpms in a vps account with virtouzoo and in virtouzoo I can't recompile kernel or even load a module.
Is there any other way to run a vpn server? Is there any other solution for vpn without need of ppp or other modules?

regards


On 9/10/07, James Cameron < james.cameron <at> hp.com> wrote:
On Sun, Sep 09, 2007 at 03:41:00PM +0330, hadi golestani wrote:
>    Sep  9 06:29:57 vps111 pppd[17572]: This system lacks kernel support
>    for PPP.  This could be because the PPP kernel module could not be
>    loaded, or because PPP was not included in the kernel configuration.
>    If PPP was included as a module, try `/sbin/modprobe -v ppp'.  If that
>    fails, check that ppp.o exists in /lib/modules/`uname -r`/net. See
>    README.linux file in the ppp distribution for more details.

This is the critical problem.  Your kernel does not have support for
PPP.  pptpd will not function without PPP.

"PPP support" means the kernel can speak the Point to Point Protocol.
It is a feature included in the kernel source.

>    I've tried to install dkms and kernel_ppp_mppe-1.0.2-3dkms but still
>    when I run this command "modprobe ppp-compress-18 && echo ok" I got
>    this error "FATAL: Module ppp_mppe not found."

This has little to do with the problem, but is caused by the same thing.

>    what can I do to solve this problem?

Install a kernel with PPP support.  All popular distributed Linux
kernels have PPP support.  If yours does not, yet you received it from
someone else, contact them for advice.  If you build the kernel entirely
yourself, then you need to rebuild it with CONFIG_PPP=m and several
other related options enabled.

--
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Permalink | Reply | 1 comment |
headers
Teodor | 10 Sep 2007 13:07
Picon

"GRE: Protocol not available" error at the server (version 1.3)

Hi,

I have a 'poptop' server running the version 1.3. The VPN service is
working properly for almost everyone, with one exception where the
connection cannot be established and windows client returns "error
619".

>From the same network/location the connection can be established and
it works properly if the 'poptop' server is running the previous
stable version (1.2 or 1.1).

I have attached the connection logs (*txt files) and a short traffic
capture (with wireshark) for the connection attempt with error. The
1.2.1-4 log is just for you to compare if you need to see the
negotiation of a successful connection.

Let me know if I can be of any help. Thanks

Sep  6 19:48:24 gali pptpd[4784]: MGR: Launching /usr/sbin/pptpctrl to handle client
Sep  6 19:48:24 gali pptpd[4784]: CTRL: local address = 217.156.14.201
Sep  6 19:48:24 gali pptpd[4784]: CTRL: remote address = 217.156.14.249
Sep  6 19:48:24 gali pptpd[4784]: CTRL: pppd options file = /etc/ppp/pptpd-options
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Client 65.89.233.67 control connection started
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 1)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Made a START CTRL CONN RPLY packet
Sep  6 19:48:24 gali pptpd[4784]: CTRL: I wrote 156 bytes to the client.
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Sent packet to client
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 7)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Made a OUT CALL RPLY packet
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Starting call (launching pppd, opening GRE)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: pty_fd = 4
Sep  6 19:48:24 gali pptpd[4784]: CTRL: tty_fd = 5
Sep  6 19:48:24 gali pptpd[4785]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Sep  6 19:48:24 gali pptpd[4785]: CTRL (PPPD Launcher): local address = 217.156.14.201
Sep  6 19:48:24 gali pptpd[4785]: CTRL (PPPD Launcher): remote address = 217.156.14.249
Sep  6 19:48:24 gali pppd[4785]: pppd options in effect:
Sep  6 19:48:24 gali pppd[4785]: debug^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: -detach^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: nologfd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: dump^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: auth^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: refuse-pap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: refuse-chap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: refuse-mschap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: I wrote 32 bytes to the client.
Sep  6 19:48:24 gali pppd[4785]: name pptpd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Sent packet to client
Sep  6 19:48:24 gali pppd[4785]: 115200^I^I# (from command line)
Sep  6 19:48:24 gali pppd[4785]: lock^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: crtscts^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: local^I^I# (from command line)
Sep  6 19:48:24 gali pppd[4785]: asyncmap 0^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: lcp-echo-failure 4^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: lcp-echo-interval 30^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: hide-password^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: novj^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: novjccomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: ipcp-accept-local^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: ipcp-accept-remote^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: ms-dns xxx # [don't know how to print value]^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: nodefaultroute^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: proxyarp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: 217.156.14.201:217.156.14.249^I^I# (from command line)
Sep  6 19:48:24 gali pppd[4785]: nobsdcomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: nodeflate^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: require-mppe-128^I^I# (from /etc/ppp/pptpd-options)
Sep  6 19:48:24 gali pppd[4785]: noipx^I^I# (from /etc/ppp/options)
Sep  6 19:48:24 gali pppd[4785]: pppd 2.4.4 started by root, uid 0
Sep  6 19:48:24 gali pppd[4785]: using channel 5
Sep  6 19:48:24 gali pppd[4785]: Using interface ppp0
Sep  6 19:48:24 gali pppd[4785]: Connect: ppp0 <--> /dev/pts/3
Sep  6 19:48:24 gali pppd[4785]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic
0xc3c6b4b8> <pcomp> <accomp>]
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 15)
Sep  6 19:48:24 gali pptpd[4784]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Sep  6 19:48:24 gali pppd[4785]: rcvd [LCP ConfReq id=0x0 <mru 1400> <magic 0x11753fbd> <pcomp> <accomp>
<callback CBCP>]
Sep  6 19:48:24 gali pppd[4785]: sent [LCP ConfRej id=0x0 <callback CBCP>]
Sep  6 19:48:24 gali pppd[4785]: rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic
0xc3c6b4b8> <pcomp> <accomp>]
Sep  6 19:48:24 gali pppd[4785]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x11753fbd> <pcomp> <accomp>]
Sep  6 19:48:24 gali pppd[4785]: sent [LCP ConfAck id=0x1 <mru 1400> <magic 0x11753fbd> <pcomp> <accomp>]
Sep  6 19:48:24 gali pppd[4785]: sent [LCP EchoReq id=0x0 magic=0xc3c6b4b8]
Sep  6 19:48:24 gali pppd[4785]: sent [CHAP Challenge id=0x54 <91386fe42b8a99cafa26f34d8c77d118>,
name = "pptpd"]
Sep  6 19:48:25 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 15)
Sep  6 19:48:25 gali pptpd[4784]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Sep  6 19:48:25 gali pppd[4785]: rcvd [LCP Ident id=0x2 magic=0x11753fbd "MSRASV5.10"]
Sep  6 19:48:25 gali pppd[4785]: rcvd [LCP Ident id=0x3 magic=0x11753fbd "MSRAS-0-BIGHORN"]
Sep  6 19:48:27 gali pppd[4785]: sent [CHAP Challenge id=0x54 <91386fe42b8a99cafa26f34d8c77d118>,
name = "pptpd"]
Sep  6 19:48:28 gali pppd[4785]: rcvd [CHAP Response id=0x54
<30fe4a02c6363f1cdc3f83215c87a40e00000000000000002e993588c809963ded53aba654e8d7e42d961c9c0c51cfca00>,
name = "vpn"]
Sep  6 19:48:28 gali pppd[4785]: sent [CHAP Success id=0x54
"S=DC042AAB79D1A47F011D15888BFE23082E121F02 M=Access granted"]
Sep  6 19:48:28 gali pppd[4785]: sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>]
Sep  6 19:48:28 gali pppd[4785]: rcvd [CCP ConfReq id=0x4 <mppe +H +M +S +L -D +C>]
Sep  6 19:48:28 gali pppd[4785]: sent [CCP ConfNak id=0x4 <mppe +H -M +S -L -D -C>]
Sep  6 19:48:28 gali pppd[4785]: rcvd [IPCP ConfReq id=0x5 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins
0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Sep  6 19:48:28 gali pppd[4785]: sent [IPCP TermAck id=0x5]
Sep  6 19:48:28 gali pppd[4785]: rcvd [CCP ConfAck id=0x1 <mppe +H -M +S -L -D -C>]
Sep  6 19:48:28 gali pppd[4785]: rcvd [CCP ConfReq id=0x6 <mppe +H -M +S -L -D -C>]
Sep  6 19:48:28 gali pppd[4785]: sent [CCP ConfAck id=0x6 <mppe +H -M +S -L -D -C>]
Sep  6 19:48:28 gali pppd[4785]: MPPE 128-bit stateless compression enabled
Sep  6 19:48:28 gali pppd[4785]: sent [IPCP ConfReq id=0x1 <addr 217.156.14.201>]
Sep  6 19:48:28 gali pppd[4785]: rcvd [IPCP ConfAck id=0x1 <addr 217.156.14.201>]
Sep  6 19:48:29 gali pppd[4785]: rcvd [IPCP ConfReq id=0x7 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins
0.0.0.0> <ms-dns3 0.0.0.0> <ms-wins 0.0.0.0>]
Sep  6 19:48:29 gali pppd[4785]: sent [IPCP ConfRej id=0x7 <ms-wins 0.0.0.0> <ms-wins 0.0.0.0>]
Sep  6 19:48:29 gali pppd[4785]: rcvd [IPCP ConfReq id=0x8 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Sep  6 19:48:29 gali pppd[4785]: sent [IPCP ConfNak id=0x8 <addr 217.156.14.249> <ms-dns1 217.156.14.1>
<ms-dns3 217.156.14.3>]
Sep  6 19:48:30 gali pppd[4785]: rcvd [IPCP ConfReq id=0x9 <addr 217.156.14.249> <ms-dns1 217.156.14.1>
<ms-dns3 217.156.14.3>]
Sep  6 19:48:30 gali pppd[4785]: sent [IPCP ConfAck id=0x9 <addr 217.156.14.249> <ms-dns1 217.156.14.1>
<ms-dns3 217.156.14.3>]
Sep  6 19:48:30 gali pppd[4785]: found interface eth0 for proxy arp
Sep  6 19:48:30 gali pppd[4785]: local  IP address 217.156.14.201
Sep  6 19:48:30 gali pppd[4785]: remote IP address 217.156.14.249
Sep  6 19:48:30 gali pppd[4785]: Script /etc/ppp/ip-up started (pid 4789)
Sep  6 19:48:30 gali pppd[4785]: Script /etc/ppp/ip-up finished (pid 4789), status = 0x0
Sep  6 19:48:43 gali pptpd[4784]: GRE: Discarding duplicate packet
Sep  6 19:48:44 gali pptpd[4784]: GRE: Discarding out of order packet
Sep  6 19:48:52 gali pptpd[4784]: GRE: Discarding duplicate packet
Sep  6 19:48:53 gali pptpd[4784]: GRE: Discarding out of order packet
Sep  6 19:49:06 gali last message repeated 3 times
Sep  6 19:49:24 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 5)
Sep  6 19:49:24 gali pptpd[4784]: CTRL: Made a ECHO RPLY packet
Sep  6 19:49:24 gali pptpd[4784]: CTRL: I wrote 20 bytes to the client.
Sep  6 19:49:24 gali pptpd[4784]: CTRL: Sent packet to client
Sep  6 19:49:50 gali pptpd[4784]: GRE: Discarding duplicate packet
Sep  6 19:50:24 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 5)
Sep  6 19:50:24 gali pptpd[4784]: CTRL: Made a ECHO RPLY packet
Sep  6 19:50:24 gali pptpd[4784]: CTRL: I wrote 20 bytes to the client.
Sep  6 19:50:24 gali pptpd[4784]: CTRL: Sent packet to client
Sep  6 19:50:32 gali pptpd[4784]: GRE: Discarding out of order packet
Sep  6 19:50:33 gali pptpd[4784]: GRE: Discarding duplicate packet
Sep  6 19:50:34 gali pptpd[4784]: GRE: Discarding out of order packet
Sep  6 19:50:36 gali pptpd[4784]: GRE: Discarding out of order packet
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 15)
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Sep  6 19:51:02 gali pppd[4785]: rcvd [LCP TermReq id=0xa 11 75 3f bd 00 3c cd 74 00 00 00 00]
Sep  6 19:51:02 gali pppd[4785]: LCP terminated by peer (^Qu?M-=^ <at> <M-Mt^ <at> ^ <at> ^ <at> ^ <at> )
Sep  6 19:51:02 gali pppd[4785]: Connect time 2.6 minutes.
Sep  6 19:51:02 gali pppd[4785]: Sent 594630 bytes, received 190969 bytes.
Sep  6 19:51:02 gali pppd[4785]: Script /etc/ppp/ip-down started (pid 4795)
Sep  6 19:51:02 gali pppd[4785]: sent [LCP TermAck id=0xa]
Sep  6 19:51:02 gali pppd[4785]: Script /etc/ppp/ip-down finished (pid 4795), status = 0x0
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Received PPTP Control Message (type: 12)
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Made a CALL DISCONNECT RPLY packet
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Received CALL CLR request (closing call)
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Reaping child PPP[4785]
Sep  6 19:51:02 gali pppd[4785]: Modem hangup
Sep  6 19:51:02 gali pppd[4785]: Connection terminated.
Sep  6 19:51:02 gali pppd[4785]: Exit.
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Client 65.89.233.67 control connection finished
Sep  6 19:51:02 gali pptpd[4784]: CTRL: Exiting now
Sep  6 19:51:02 gali pptpd[4554]: MGR: Reaped child 4784


Sep  6 20:05:07 gali pptpd[4934]: MGR: Launching /usr/sbin/pptpctrl to handle client
Sep  6 20:05:07 gali pptpd[4934]: CTRL: local address = 217.156.14.201
Sep  6 20:05:07 gali pptpd[4934]: CTRL: remote address = 217.156.14.249
Sep  6 20:05:07 gali pptpd[4934]: CTRL: pppd options file = /etc/ppp/pptpd-options
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Client 65.89.233.67 control connection started
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Received PPTP Control Message (type: 1)
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Made a START CTRL CONN RPLY packet
Sep  6 20:05:07 gali pptpd[4934]: CTRL: I wrote 156 bytes to the client.
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Sent packet to client
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Received PPTP Control Message (type: 7)
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Made a OUT CALL RPLY packet
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Starting call (launching pppd, opening GRE)
Sep  6 20:05:07 gali pptpd[4934]: CTRL: pty_fd = 6
Sep  6 20:05:07 gali pptpd[4934]: CTRL: tty_fd = 7
Sep  6 20:05:07 gali pptpd[4935]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Sep  6 20:05:07 gali pptpd[4935]: CTRL (PPPD Launcher): local address = 217.156.14.201
Sep  6 20:05:07 gali pptpd[4935]: CTRL (PPPD Launcher): remote address = 217.156.14.249
Sep  6 20:05:07 gali pppd[4935]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Sep  6 20:05:07 gali pppd[4935]: pptpd-logwtmp: $Version$
Sep  6 20:05:07 gali pppd[4935]: pppd options in effect:
Sep  6 20:05:07 gali pppd[4935]: debug^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: -detach^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: nologfd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: dump^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: plugin /usr/lib/pptpd/pptpd-logwtmp.so^I^I# (from command line)
Sep  6 20:05:07 gali pppd[4935]: auth^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: refuse-pap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: refuse-chap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: refuse-mschap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: name pptpd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: pptpd-original-ip 65.89.233.67^I^I# (from command line)
Sep  6 20:05:07 gali pppd[4935]: 115200^I^I# (from command line)
Sep  6 20:05:07 gali pppd[4935]: lock^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: crtscts^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: local^I^I# (from command line)
Sep  6 20:05:07 gali pppd[4935]: asyncmap 0^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: lcp-echo-failure 4^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: lcp-echo-interval 30^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: hide-password^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: novj^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: novjccomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: ipcp-accept-local^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: ipcp-accept-remote^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: ms-dns xxx # [don't know how to print value]^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: nodefaultroute^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: proxyarp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: 217.156.14.201:217.156.14.249^I^I# (from command line)
Sep  6 20:05:07 gali pppd[4935]: nobsdcomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: nodeflate^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: require-mppe-128^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:07 gali pppd[4935]: noipx^I^I# (from /etc/ppp/options)
Sep  6 20:05:07 gali pppd[4935]: pppd 2.4.4 started by root, uid 0
Sep  6 20:05:07 gali pppd[4935]: using channel 6
Sep  6 20:05:07 gali pppd[4935]: Using interface ppp0
Sep  6 20:05:07 gali pppd[4935]: Connect: ppp0 <--> /dev/pts/3
Sep  6 20:05:07 gali pppd[4935]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic
0x75e79932> <pcomp> <accomp>]
Sep  6 20:05:07 gali pptpd[4934]: CTRL: I wrote 32 bytes to the client.
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Sent packet to client
Sep  6 20:05:07 gali pptpd[4934]: GRE: read(fd=7,buffer=80505a0,len=8260) from network failed: status
= -1 error = Protocol not available
Sep  6 20:05:07 gali pptpd[4934]: CTRL: GRE read or PTY write failed (gre,pty)=(7,6)
Sep  6 20:05:07 gali pptpd[4934]: CTRL: Reaping child PPP[4935]
Sep  6 20:05:07 gali pppd[4935]: Modem hangup
Sep  6 20:05:07 gali pppd[4935]: Connection terminated.
Sep  6 20:05:08 gali pppd[4935]: Exit.
Sep  6 20:05:08 gali pptpd[4934]: CTRL: Client 65.89.233.67 control connection finished
Sep  6 20:05:08 gali pptpd[4934]: CTRL: Exiting now
Sep  6 20:05:08 gali pptpd[4929]: MGR: Reaped child 4934
Sep  6 20:05:19 gali pptpd[4942]: MGR: Launching /usr/sbin/pptpctrl to handle client
Sep  6 20:05:19 gali pptpd[4942]: CTRL: local address = 217.156.14.201
Sep  6 20:05:19 gali pptpd[4942]: CTRL: remote address = 217.156.14.249
Sep  6 20:05:19 gali pptpd[4942]: CTRL: pppd options file = /etc/ppp/pptpd-options
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Client 65.89.233.67 control connection started
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Received PPTP Control Message (type: 1)
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Made a START CTRL CONN RPLY packet
Sep  6 20:05:19 gali pptpd[4942]: CTRL: I wrote 156 bytes to the client.
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Sent packet to client
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Received PPTP Control Message (type: 7)
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Made a OUT CALL RPLY packet
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Starting call (launching pppd, opening GRE)
Sep  6 20:05:19 gali pptpd[4942]: CTRL: pty_fd = 6
Sep  6 20:05:19 gali pptpd[4942]: CTRL: tty_fd = 7
Sep  6 20:05:19 gali pptpd[4943]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Sep  6 20:05:19 gali pptpd[4943]: CTRL (PPPD Launcher): local address = 217.156.14.201
Sep  6 20:05:19 gali pptpd[4943]: CTRL (PPPD Launcher): remote address = 217.156.14.249
Sep  6 20:05:19 gali pppd[4943]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Sep  6 20:05:19 gali pppd[4943]: pptpd-logwtmp: $Version$
Sep  6 20:05:19 gali pppd[4943]: pppd options in effect:
Sep  6 20:05:19 gali pppd[4943]: debug^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: -detach^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: nologfd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: dump^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: plugin /usr/lib/pptpd/pptpd-logwtmp.so^I^I# (from command line)
Sep  6 20:05:19 gali pppd[4943]: auth^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: refuse-pap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: refuse-chap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: refuse-mschap^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: name pptpd^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: pptpd-original-ip 65.89.233.67^I^I# (from command line)
Sep  6 20:05:19 gali pppd[4943]: 115200^I^I# (from command line)
Sep  6 20:05:19 gali pppd[4943]: lock^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: crtscts^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: local^I^I# (from command line)
Sep  6 20:05:19 gali pppd[4943]: asyncmap 0^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: lcp-echo-failure 4^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: lcp-echo-interval 30^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: hide-password^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: novj^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: novjccomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: ipcp-accept-local^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: ipcp-accept-remote^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: ms-dns xxx # [don't know how to print value]^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: nodefaultroute^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: proxyarp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: 217.156.14.201:217.156.14.249^I^I# (from command line)
Sep  6 20:05:19 gali pppd[4943]: nobsdcomp^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: nodeflate^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: require-mppe-128^I^I# (from /etc/ppp/pptpd-options)
Sep  6 20:05:19 gali pppd[4943]: noipx^I^I# (from /etc/ppp/options)
Sep  6 20:05:19 gali pppd[4943]: pppd 2.4.4 started by root, uid 0
Sep  6 20:05:19 gali pppd[4943]: using channel 7
Sep  6 20:05:19 gali pppd[4943]: Using interface ppp0
Sep  6 20:05:19 gali pppd[4943]: Connect: ppp0 <--> /dev/pts/3
Sep  6 20:05:19 gali pppd[4943]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic
0xaaa7a154> <pcomp> <accomp>]
Sep  6 20:05:19 gali pptpd[4942]: CTRL: I wrote 32 bytes to the client.
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Sent packet to client
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Received PPTP Control Message (type: 15)
Sep  6 20:05:19 gali pptpd[4942]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Sep  6 20:05:22 gali pppd[4943]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MS-v2> <magic
0xaaa7a154> <pcomp> <accomp>]
Sep  6 20:05:46 gali last message repeated 8 times
Sep  6 20:05:49 gali pppd[4943]: LCP: timeout sending Config-Requests
Sep  6 20:05:49 gali pppd[4943]: Connection terminated.
Sep  6 20:05:49 gali pppd[4943]: Modem hangup
Sep  6 20:05:49 gali pppd[4943]: Exit.
Sep  6 20:05:49 gali pptpd[4942]: GRE: read(fd=6,buffer=8058640,len=8196) from PTY failed: status = -1
error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and
pppd logs
Sep  6 20:05:49 gali pptpd[4942]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Sep  6 20:05:49 gali pptpd[4942]: CTRL: Reaping child PPP[4943]
Sep  6 20:05:49 gali pptpd[4942]: CTRL: Client 65.89.233.67 control connection finished
Sep  6 20:05:49 gali pptpd[4942]: CTRL: Exiting now
Sep  6 20:05:49 gali pptpd[4929]: MGR: Reaped child 4942
Attachment (jed-pptpd_1.3.0-2etch2.pcap): application/cap, 4092 bytes
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Poptop-server mailing list
Poptop-server <at> lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/poptop-server
Permalink | Reply | 501 comments |
headers
James Cameron | 11 Sep 2007 06:40
Picon
Favicon

Re: "GRE: Protocol not available" error at the server (version 1.3)

There is no such version 1.3, my releases have been 1.3.0, 1.3.1,
1.3.2, 1.3.3 and 1.3.4.

EPROTO returned by read(2) in pptpd is usually caused by the receipt of
an ICMP message with flag Protocol Unreachable.  The raw(7) manual page
describes why.

Your packet capture includes the following ICMP message:

03:05:07.982557 IP 65.89.233.67 > 217.156.14.18: ICMP 65.89.233.67
protocol 47 unreachable, length 73

This tells me that 65.89.233.67 received a GRE packet from
217.156.14.18, didn't know how to forward it or hand it to an
application process, so it generated an ICMP protocol 47 unreachable
response from 65.89.233.67 to 217.156.14.18.

When this ICMP message arrives at the host running pptpd, the tunnel is
closed.

What you do next about it depends on why the ICMP message was sent.

Determine the host that has the IP address 65.89.233.67 and persue the
investigation at that point.

--

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
Permalink | Reply | 502 comments |

Gmane