ip_nat_pptp Problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello everybody,

I have the following setup:
Win98 Client -> Linux-2.4.20 Masq-GW -> poptop-1.1.2 (Linux 2.4.20 -
this is a Masq-GW for another network)

I recently upgraded from 2.2.20 to 2.4.20.
The same setup with v2.2 worked, while v2.4 Kernel doesn't.
Everything else, e.g. ip_nat_h323, is working perfect (thanks
Netfilter-Team!).

I have tried the patch-o-matic as of January 7 and applied the
subsequent patch by Philip Craig.
iptables is version 1.2.7a and has been recompiled to suit the
patch-o-matic version.


When I connect, I'm told that username and password are being checked,
but then after some time (30sec) I get the MS-Error:650.

cat /proc/net/ip_conntrack gives me the following connections

tcp      6 431979 ESTABLISHED src=192.168.17.6 dst=139.30.XXX.XXX
sport=2294 dport=1723 src=139.30.XXX.XXX dst=62.226.78.120 sport=1723
dport=2294 [ASSURED] use=3 mark=0
gre      47 597 timeout=600, stream_timeout=432000 src=192.168.17.6
dst=139.30.XXX.XXX version=1 protocol=0x880b srckey=0x0 dstkey=0x0
[UNREPLIED] src=139.30.XXX.XXX dst=62.226.78.120 version=1
protocol=0x880b srckey=0x0 dstkey=0x0 use=1 mark=0
gre      47 599 timeout=600, stream_timeout=432000 src=139.30.XXX.XXX
dst=62.226.78.120 version=1 protocol=0x880b srckey=0x0 dstkey=0x8f6
[UNREPLIED] src=192.168.17.6 dst=139.30.XXX.XXX version=1
protocol=0x880b srckey=0x8f6 dstkey=0x0 use=1 mark=0


if the ip_conntrack_proto_gre is NOT loaded, the output on the server
side is
cat /proc/net/ipconntrack

unknown  47 599 src=139.30.XXX.XXX dst=62.226.78.120 src=62.226.78.120
dst=139.30.XXX.XXX use=1
tcp      6 431990 ESTABLISHED src=62.226.78.120 dst=139.30.XXX.XXX
sport=2309 dport=1723 src=139.30.XXX.XXX dst=62.226.78.120 sport=1723
dport=2309 [ASSURED] use=1


if the ip_conntrack_proto_gre is loaded, the output on the server side
is
cat /proc/net/ipconntrack

gre      47 500 timeout=0, stream_timeout=0 src=139.30.XXX.XXX
dst=62.226.78.120 version=0 protocol=0x0000 srckey=0x0 dstkey=0x0
src=62.226.78.120 dst=139.30.XXX.XXX version=0 protocol=0x0000
srckey=0x0 dstkey=0x0 use=1
gre      47 431998 timeout=600, stream_timeout=432000
src=139.30.XXX.XXX dst=62.226.78.120 version=1 protocol=0x880b
srckey=0x0 dstkey=0x909 src=62.226.78.120 dst=139.30.XXX.XXX version=1
protocol=0x880b srckey=0x909 dstkey=0x0 [ASSURED] use=1
tcp      6 431982 ESTABLISHED src=62.226.78.120 dst=139.30.XXX.XXX
sport=2313 dport=1723 src=139.30.XXX.XXX dst=62.226.78.120 sport=1723
dport=2313 [ASSURED] use=2
EXPECTING: - use=1 proto=47 src=62.226.78.120 dst=139.30.XXX.XXX
version=1 protocol=0x880b srckey=0x909 dstkey=0x0


the output on the server side in any cas is

Jan 28 17:29:13 aiesec pptpd[1905]: MGR: Launching /usr/sbin/pptpctrl
to handle client
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: local address =
192.168.16.253
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: remote address =
192.168.16.251
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: pppd speed = 115200
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: pppd options file =
/etc/ppp/peers/pptpd
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Client 62.226.78.120 control
connection started
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Received PPTP Control Message
(type: 1)
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Made a START CTRL CONN RPLY
packet
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: I wrote 156 bytes to the
client.
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Sent packet to client
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Received PPTP Control Message
(type: 7)
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: 0 min_bps, 0 max_bps, 32
window size
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Made a OUT CALL RPLY packet
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Starting call (launching
pppd, opening GRE)
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: pty_fd = 5
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: tty_fd = 6
Jan 28 17:29:13 aiesec pptpd[1906]: CTRL (PPPD Launcher): Connection
speed = 115200
Jan 28 17:29:13 aiesec pptpd[1906]: CTRL (PPPD Launcher): local address
= 192.168.16.253
Jan 28 17:29:13 aiesec pptpd[1906]: CTRL (PPPD Launcher): remote
address = 192.168.16.251
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: I wrote 32 bytes to the
client.
Jan 28 17:29:13 aiesec pptpd[1905]: CTRL: Sent packet to client
Jan 28 17:29:14 aiesec pppd[1906]: pppd 2.4.1 started by root, uid 0
Jan 28 17:29:14 aiesec pppd[1906]: Using interface ppp0
Jan 28 17:29:14 aiesec pppd[1906]: Connect: ppp0 <--> /dev/pts/1
Jan 28 17:29:14 aiesec pptpd[1905]: Buffering out-of-order packet; got
1 after 4294967295
Jan 28 17:29:17 aiesec pptpd[1905]: Packet reorder timeout waiting for
0
Jan 28 17:29:17 aiesec pptpd[1905]: Buffering out-of-order packet; got
2 after 0
Jan 28 17:29:44 aiesec pptpd[1905]: CTRL: Received PPTP Control Message
(type: 12)
Jan 28 17:29:44 aiesec pptpd[1905]: CTRL: Made a CALL DISCONNECT RPLY
packet
Jan 28 17:29:44 aiesec pptpd[1905]: CTRL: Received CALL CLR request
(closing call)
Jan 28 17:29:44 aiesec pptpd[1905]: CTRL: I wrote 148 bytes to the
client.
Jan 28 17:29:44 aiesec pptpd[1905]: CTRL: Sent packet to client
Jan 28 17:29:44 aiesec pppd[1906]: Modem hangup
Jan 28 17:29:44 aiesec pppd[1906]: Connection terminated.
Jan 28 17:29:44 aiesec pppd[1906]: Exit.
Jan 28 17:29:49 aiesec pptpd[1905]: GRE: read error: Bad file
descriptor
Jan 28 17:29:49 aiesec pptpd[1905]: CTRL: PTY read or GRE write failed
(pty,gre)=(-1,-1)
Jan 28 17:29:49 aiesec pptpd[1905]: CTRL: Client 62.226.78.120 control
connection finished
Jan 28 17:29:49 aiesec pptpd[1905]: CTRL: Exiting now
Jan 28 17:29:49 aiesec pptpd[1768]: MGR: Reaped child 1905



- Alexander Noack
- Vitus-Bering-Str. 3
- 18106 Rostock
- Germany
-
-Tel: +49 (381) 12839893
-Fax: +49 (381) 12839901
-Web: www.gaussdivision.de



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux