VPN

1 - I set up m0n0 PPTP VPN according to the manual. (PPTP page and Firewall Rules page)

2 - I can not connect from the internet (error 618) using WinXP client

3 - I tested "telnet monowanip 1723" and the port is closed. (actually I used http://www.dnstools.com port checker)

4 - I created a rule to pass 1723 from WAN (only to see log) and was able to see the 1723 connection attempt in the log.

5 - My system log is full of "/kernel: arp: 192.168.0.156 is on vr0 but got reply from 00:e0:7d:86:c4:bb on xl0"

6 - PPTP Vpn log is empty


Any ideas of what else can I test?

What is your WAN IP? Every time I've heard of this, the person was trying to connect to a private IP from over the Internet, which obviously isn't going to work.

It sounds like your WAN and LAN are plugged into the same network?  That's the ARP message you're seeing.

Actually we have 2 public IPs: 190.x.x.x and 201.x.x.x.

The WAN interface of our M0n0 is connected to a small switch with two broadband modems. We use the "static route configuration" menu to set which connections go through each modem, based on destination IP. Each modem has an internal 10.0.0.x address, of course M0n0 WAN interface has a 10.0.0.X address. This arranglement is working perfectly so far, we are only having problems with the VPN server functionality.

Our LAN interface has a typical 192.168.0.0/24 network.

We also have an additional ethernet card and interface but it is not being used.

Regards, and thanks in advance.

You were right. I walked to the cabinet and found our lan connected to the wan switch...

But the VPN is still not working, here is the system log. There is a PPTP error message that I don't understand.


Dec 3 11:56:51 /kernel: Limiting icmp unreach response from 203 to 200 packets per second
Dec 3 11:55:58 dnsmasq[126]: reading /var/db/dhcpd.leases
Dec 3 11:55:57 mpd: [pt15] using interface ng16
Dec 3 11:55:57 mpd: [pt15] ppp node is "mpd141-pt15"
Dec 3 11:55:57 mpd: [pt14] using interface ng15
Dec 3 11:55:57 mpd: [pt14] ppp node is "mpd141-pt14"
Dec 3 11:55:57 mpd: [pt13] using interface ng14
Dec 3 11:55:57 mpd: [pt13] ppp node is "mpd141-pt13"
Dec 3 11:55:57 mpd: [pt12] using interface ng13
Dec 3 11:55:57 mpd: [pt12] ppp node is "mpd141-pt12"
Dec 3 11:55:57 mpd: [pt11] using interface ng12
Dec 3 11:55:57 mpd: [pt11] ppp node is "mpd141-pt11"
Dec 3 11:55:57 mpd: [pt10] using interface ng11
Dec 3 11:55:57 mpd: [pt10] ppp node is "mpd141-pt10"
Dec 3 11:55:56 mpd: [pt9] using interface ng10
Dec 3 11:55:56 /kernel: ed0: device timeout
Dec 3 11:55:56 mpd: [pt9] ppp node is "mpd141-pt9"
Dec 3 11:55:56 mpd: [pt8] using interface ng9
Dec 3 11:55:56 mpd: [pt8] ppp node is "mpd141-pt8"
Dec 3 11:55:56 mpd: [pt7] using interface ng8
Dec 3 11:55:56 mpd: [pt7] ppp node is "mpd141-pt7"
Dec 3 11:55:56 mpd: [pt6] using interface ng7
Dec 3 11:55:56 mpd: [pt6] ppp node is "mpd141-pt6"
Dec 3 11:55:56 mpd: [pt5] using interface ng6
Dec 3 11:55:56 mpd: [pt5] ppp node is "mpd141-pt5"
Dec 3 11:55:56 mpd: [pt4] using interface ng5
Dec 3 11:55:56 mpd: [pt4] ppp node is "mpd141-pt4"
Dec 3 11:55:56 mpd: [pt3] using interface ng4
Dec 3 11:55:56 mpd: [pt3] ppp node is "mpd141-pt3"
Dec 3 11:55:56 mpd: [pt2] using interface ng3
Dec 3 11:55:56 mpd: [pt2] ppp node is "mpd141-pt2"
Dec 3 11:55:56 mpd: [pt1] using interface ng2
Dec 3 11:55:56 /kernel: DUMMYNET initialized (011031)
Dec 3 11:55:56 mpd: [pt1] ppp node is "mpd141-pt1"
Dec 3 11:55:56 mpd: [pt0] using interface ng1
Dec 3 11:55:56 /kernel: ipfw2 initialized, divert disabled, rule-based forwarding enabled, default to accept, logging disabled
Dec 3 11:55:56 mpd: mpd: local IP address for PPTP is 0.0.0.0
Dec 3 11:55:56 mpd: [pt0] ppp node is "mpd141-pt0"
Dec 3 11:55:56 mpd: mpd: pid 141, version 3.18 (root@fb411.neon1.net 12:26 26-Nov-2005)
Dec 3 11:55:56 dnsmasq[126]: using nameserver 10.1.1.100#53 for domain albarellos
Dec 3 11:55:56 dnsmasq[126]: using nameserver 10.0.0.100#53
Dec 3 11:55:56 dnsmasq[126]: using nameserver 10.0.0.2#53
Dec 3 11:55:56 dnsmasq[126]: reading /etc/resolv.conf
Dec 3 11:55:56 dnsmasq[126]: reading /var/db/dhcpd.leases
Dec 3 11:55:56 dhcpd: For info, please visit http://www.isc.org/sw/dhcp/
Dec 3 11:55:56 dnsmasq[126]: read /etc/hosts - 12 addresses
Dec 3 11:55:56 dhcpd: All rights reserved.
Dec 3 11:55:56 dnsmasq[126]: using nameserver 10.1.1.100#53 for domain albarellos
Dec 3 11:55:56 dhcpd: Copyright 2004-2005 Internet Systems Consortium.
Dec 3 11:55:56 dnsmasq[126]: setting --bind-interfaces option because of OS limitations
Dec 3 11:55:56 dnsmasq[126]: setting --bind-interfaces option because of OS limitations
Dec 3 11:55:56 dhcpd: Internet Systems Consortium DHCP Server V3.0.3
Dec 3 11:55:56 dnsmasq[126]: compile time options: IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N
Dec 3 11:55:56 dnsmasq[126]: started, version 2.27 cachesize 150
Dec 3 11:55:56 /kernel: Mounting root from ufs:/dev/md0c
Dec 3 11:55:56 /kernel: ad0: 4112MB <SAMSUNG SV0432A> [8912/15/63] at ata0-master PIO4
Dec 3 11:55:56 /kernel: IP Filter: v3.4.35 initialized. Default = block all, Logging = enabled
Dec 3 11:55:56 /kernel: IPsec: Initialized Security Association Processing.
Dec 3 11:55:56 /kernel: BRIDGE 020214 loaded
Dec 3 11:55:56 /kernel: sio1: type 16550A
Dec 3 11:55:56 /kernel: sio1 at port 0x2f8-0x2ff irq 3 on isa0
Dec 3 11:55:56 /kernel: sio0: type 16550A
Dec 3 11:55:56 /kernel: sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
Dec 3 11:55:56 /kernel: sc0: VGA <16 virtual consoles, flags=0x300>
Dec 3 11:55:56 /kernel: sc0: <System console> at flags 0x100 on isa0
Dec 3 11:55:56 /kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Dec 3 11:55:56 /kernel: kbd0 at atkbd0
Dec 3 11:55:56 /kernel: atkbd0: <AT Keyboard> flags 0x1 irq 1 on atkbdc0
Dec 3 11:55:56 /kernel: atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
Dec 3 11:55:56 /kernel: fdc0: <NEC 72065B or clone> at port 0x3f0-0x3f5,0x3f7 irq 6 drq 2 on isa0
Dec 3 11:55:56 /kernel: pmtimer0 on isa0
Dec 3 11:55:56 /kernel: orm0: <Option ROM> at iomem 0xc0000-0xc7fff on isa0
Dec 3 11:55:56 /kernel: pci2: <PCI bus> on pcib1
Dec 3 11:55:56 /kernel: pcib1: <Host to PCI bridge> on motherboard
Dec 3 11:55:56 /kernel: ukphy1: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Dec 3 11:55:56 /kernel: ukphy1: <Generic IEEE 802.3u media interface> on miibus1
Dec 3 11:55:56 /kernel: miibus1: <MII bus> on xl0
Dec 3 11:55:56 /kernel: xl0: Ethernet address: 00:01:02:34:fe:8d
Dec 3 11:55:56 /kernel: xl0: <3Com 3c905B-TX Fast Etherlink XL> port 0xe000-0xe07f mem 0xdd000000-0xdd00007f irq 10 at device 10.0 on pci0
Dec 3 11:55:56 /kernel: ukphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
Dec 3 11:55:56 /kernel: ukphy0: <Generic IEEE 802.3u media interface> on miibus0
Dec 3 11:55:56 /kernel: miibus0: <MII bus> on vr0
Dec 3 11:55:56 /kernel: vr0: Ethernet address: 00:e0:7d:ec:81:ad
Dec 3 11:55:56 /kernel: vr0: <VIA VT6105 Rhine III 10/100BaseTX> port 0xdc00-0xdcff mem 0xdd001000-0xdd0010ff irq 11 at device 9.0 on pci0
Dec 3 11:55:56 /kernel: ed0: address 00:e0:7d:7c:d2:a4, type NE2000 (16 bit)
Dec 3 11:55:56 /kernel: ed0: <NE2000 PCI Ethernet (RealTek 8029)> port 0xd800-0xd81f irq 12 at device 8.0 on pci0
Dec 3 11:55:56 /kernel: pci0: <unknown card> (vendor=0x1106, dev=0x3040) at 7.3
Dec 3 11:55:56 /kernel: ata1: at 0x170 irq 15 on atapci0
Dec 3 11:55:56 /kernel: ata0: at 0x1f0 irq 14 on atapci0
Dec 3 11:55:56 /kernel: atapci0: <VIA 82C586 ATA33 controller> port 0xd000-0xd00f at device 7.1 on pci0
Dec 3 11:55:56 /kernel: isa0: <ISA bus> on isab0
Dec 3 11:55:56 /kernel: isab0: <VIA 82C586 PCI-ISA bridge> at device 7.0 on pci0
Dec 3 11:55:56 /kernel: pci1: <S3 Trio3D/2X graphics accelerator> at 0.0
Dec 3 11:55:56 /kernel: pci1: <PCI bus> on pcib2
Dec 3 11:55:56 /kernel: pcib2: <VIA 82C598MVP (Apollo MVP3) PCI-PCI (AGP) bridge> at device 1.0 on pci0
Dec 3 11:55:56 /kernel: pci0: <PCI bus> on pcib0
Dec 3 11:55:56 /kernel: pcib0: <Host to PCI bridge> on motherboard
Dec 3 11:55:56 /kernel: npx0: INT 16 interface
Dec 3 11:55:56 /kernel: npx0: <math processor> on motherboard
Dec 3 11:55:56 /kernel: Using $PIR table, 5 entries at 0xc00fdcd0
Dec 3 11:55:56 /kernel: md1: Malloc disk