Hi,
I've setup a VPN server running pptpd (Debian Woody) following the
instructions from
http://www.gfxcafe.com/VPN%20Howto.html.
I can make the connection from any Windows client without any problems
but I can't ping any hosts on the VPN (not even the VPN server host
itself which is 192.168.0.10) and the VPN server host can't ping my
client (an ip in the 192.168.0.51-59 range) either.
The VPN server is connected to the Internet via an ADSL router/modem
(netcomm nb1300 which supports VPN pass through (PPTP/L2TP),IPSec),
I have set up port forwarding for port 1723 in the router.
I have some simple iptables rules setup on the VPN server. I suspect its
either a routing problem or an iptables problem. I have tried several
iptable rules with no luck. I'm not really an expert in networking.
another piece of info, I can connect from 192.168.0.2 (please see below)
which is a Windows box and is on the same subnet as the VPN server, but
the same things happens.
thanks in advance
Song
================================================== =======================
This is the network setup:
Internet
|
|
|
static registered IP address
( )
(ADSL router)
( )
192.168.1.1
|
| <- cat 5 cable
|
192.168.1.3
( )
(VPN box) <- also running some iptables rules
( )
192.168.0.1
|
|
|
192.168.0.2
Debian Linux runnnig kernel 2.4.27 patched with
patched with linux-2.4.27-mppe-mppc-1.1.patch.gz
anaconda:/usr/src# pppd --version
pppd version 2.4.2
patched with ppp-2.4.2-mppe-mppc-1.1.patch.gz
anaconda:/usr/src# cat /etc/pptpd.conf |grep -v '#'
speed 115200
option /etc/ppp/pptpd-options
localip 192.168.0.10
remoteip 192.168.0.51-59
anaconda:/usr/src# cat /etc/ppp/pptpd-options
name *
lock
mtu 1450
mru 1450
proxyarp
auth
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
deflate 0
# Handshake Auth Method
+chap
+mschap-v2
# Data Encryption Methods
mppe required
anaconda:~# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0F:EA:15:B8:CB
inet addr:192.168.1.3 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:8639023 errors:0 dropped:0 overruns:0 frame:0
TX packets:8651887 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:688225802 (656.3 MiB) TX bytes:605468342 (577.4 MiB)
Interrupt:11 Base address:0xe800
eth1 Link encap:Ethernet HWaddr 00:E0:4C:33:3B:15
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:36026 errors:0 dropped:0 overruns:0 frame:0
TX packets:40397 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:9070648 (8.6 MiB) TX bytes:13481285 (12.8 MiB)
Interrupt:10 Base address:0xe000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:1156760 errors:0 dropped:0 overruns:0 frame:0
TX packets:1156760 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:421300975 (401.7 MiB) TX bytes:421300975 (401.7 MiB)
ppp0 Link encap:Point-to-Point Protocol
inet addr:192.168.0.10 P-t-P:192.168.0.53 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1400 Metric:1
RX packets:70 errors:19 dropped:0 overruns:0 frame:0
TX packets:510 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:6294 (6.1 KiB) TX bytes:39754 (38.8 KiB)
anaconda:~# iptables -t filter -L
Chain INPUT (policy ACCEPT)
target prot opt source destination
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere tcp dpt:5631
ACCEPT tcp -- anywhere anywhere tcp dpt:5632
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
anaconda:~# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target prot opt source destination
DNAT tcp -- anywhere anywhere tcp dpt:5631
to:192.168.0.2:5631
DNAT tcp -- anywhere anywhere tcp dpt:5631
to:192.168.0.2:5632
Chain POSTROUTING (policy ACCEPT)
target prot opt source destination
MASQUERADE all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
anaconda:~# tail /var/log/syslog -n1000|grep pptpd|head -n34
Nov 4 09:27:36 anaconda pptpd[5650]: MGR: Launching /usr/sbin/pptpctrl
to handle client
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: local address = 192.168.0.10
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: remote address = 192.168.0.53
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: pppd speed = 115200
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: pppd options file =
/etc/ppp/pptpd-options
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: Client 202.161.95.18 control
connection started
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 1)
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: Made a START CTRL CONN RPLY
packet
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: I wrote 156 bytes to the client.
Nov 4 09:27:36 anaconda pptpd[5650]: CTRL: Sent packet to client
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 7)
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: 0 min_bps, 1525 max_bps, 32
window size
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Made a OUT CALL RPLY packet
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Starting call (launching
pppd, opening GRE)
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: pty_fd = 5
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: tty_fd = 6
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: I wrote 32 bytes to the client.
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Sent packet to client
Nov 4 09:27:37 anaconda pptpd[5651]: CTRL (PPPD Launcher): Connection
speed = 115200
Nov 4 09:27:37 anaconda pptpd[5651]: CTRL (PPPD Launcher): local
address = 192.168.0.10
Nov 4 09:27:37 anaconda pptpd[5651]: CTRL (PPPD Launcher): remote
address = 192.168.0.53
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 15)
Nov 4 09:27:37 anaconda pptpd[5650]: CTRL: Got a SET LINK INFO packet
with standard ACCMs
Nov 4 09:27:40 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 15)
Nov 4 09:27:40 anaconda pptpd[5650]: CTRL: Ignored a SET LINK INFO
packet with real ACCMs!
Nov 4 09:28:36 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 5)
Nov 4 09:28:36 anaconda pptpd[5650]: CTRL: Made a ECHO RPLY packet
Nov 4 09:28:36 anaconda pptpd[5650]: CTRL: I wrote 20 bytes to the client.
Nov 4 09:28:36 anaconda pptpd[5650]: CTRL: Sent packet to client
Nov 4 09:29:36 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 5)
Nov 4 09:29:36 anaconda pptpd[5650]: CTRL: Made a ECHO RPLY packet
Nov 4 09:29:36 anaconda pptpd[5650]: CTRL: I wrote 20 bytes to the client.
Nov 4 09:29:36 anaconda pptpd[5650]: CTRL: Sent packet to client
Nov 4 09:30:37 anaconda pptpd[5650]: CTRL: Received PPTP Control
Message (type: 5)
C:\>route print
================================================== =========================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...00 04 5f 00 4e 2d ...... Realtek RTL8139 Family PCI Fast Ethernet
NIC #2
0x160004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
================================================== =========================
================================================== =========================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.2.250 192.168.2.150
20
61.119.200.37 255.255.255.255 192.168.2.250 192.168.2.150
20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.0.0 255.255.255.0 192.168.0.53 192.168.0.53 1
192.168.0.53 255.255.255.255 127.0.0.1 127.0.0.1
50
192.168.0.255 255.255.255.255 192.168.0.53 192.168.0.53
50
192.168.2.0 255.255.255.0 192.168.2.150 192.168.2.150
20
192.168.2.150 255.255.255.255 127.0.0.1 127.0.0.1
20
192.168.2.255 255.255.255.255 192.168.2.150 192.168.2.150
20
224.0.0.0 240.0.0.0 192.168.0.53 192.168.0.53
50
224.0.0.0 240.0.0.0 192.168.2.150 192.168.2.150
20
255.255.255.255 255.255.255.255 192.168.2.150 192.168.2.150 1
Default Gateway: 192.168.2.250
================================================== =========================
Persistent Routes:
None