News: This forum is now permanently frozen.
Pages: [1]
Topic: PPTP config problem  (Read 2589 times)
« on: July 14, 2007, 15:55:57 »
pingu *
Posts: 3

We have a server running monowall 1.2b9, used only for one pptp-connection.
This was working until someone managed to delete the config, now I'm trying to recreate it.
I have followed all infos I've found, searched this and other forums concerning this and really believe the setup is OK -  but it just won't work:
The server has one NIC.
LAN IP: 192.168.121.1/24
WAN IP: 195.112.2.6/25 (well, that's not mine but I do have a valid public address)
PPTP server adress: 192.168.121.254
Remote address range: 192.168.121.128
No Radius, tried with and wo 128-bit encryption.
One pptp-user setup, name and password are checked tremendously many times.
Firewall-rules: Latest try is with everything accepted anywhere on all three interfaces, also added a pass for GRE on all interfaces.
Trying to connect from internal subnet (10.10.10.0) kvpnc/Linux and WinXP, also from a WinXP on the outside. None can connect. Win gives the 619-error message, kvpnc only says:
"info: "pppd" started.
error: Remote modem has hung up. Connection was terminated"

Nothing in logs for firewall and pptp, service says:
Code:
Jul 14 15:50:00 mpd: MAGICNUM 16f754c6
Jul 14 15:50:00 mpd: AUTHPROTO CHAP MSOFTv2
Jul 14 15:50:00 mpd: MP MRRU 1600
Jul 14 15:50:00 mpd: MP SHORTSEQ
Jul 14 15:50:00 mpd: ENDPOINTDISC [802.1] 00 20 af d6 b5 c2
Jul 14 15:50:02 mpd: [pt0] LCP: SendConfigReq #57
Jul 14 15:50:02 mpd: ACFCOMP
Jul 14 15:50:02 mpd: PROTOCOMP
Jul 14 15:50:02 mpd: MRU 1500
Jul 14 15:50:02 mpd: MAGICNUM 16f754c6
Jul 14 15:50:02 mpd: AUTHPROTO CHAP MSOFTv2
Jul 14 15:50:02 mpd: MP MRRU 1600
Jul 14 15:50:02 mpd: MP SHORTSEQ
Jul 14 15:50:02 mpd: ENDPOINTDISC [802.1] 00 20 af d6 b5 c2
----- (This section - Send ConfigReq # - repeated several times) -----
Jul 14 15:50:10 mpd: [pt0] LCP: state change Req-Sent --> Stopped
Jul 14 15:50:10 mpd: [pt0] LCP: LayerFinish
Jul 14 15:50:10 mpd: [pt0] LCP: parameter negotiation failed
Jul 14 15:50:10 mpd: [pt0] LCP: LayerFinish
Jul 14 15:50:10 mpd: [pt0] device: CLOSE event in state UP
Jul 14 15:50:10 mpd: pptp0-0: clearing call
Jul 14 15:50:10 mpd: pptp0-0: killing channel
Jul 14 15:50:10 mpd: [pt0] PPTP call terminated
Jul 14 15:50:10 mpd: [pt0] IFACE: Close event
Jul 14 15:50:10 mpd: [pt0] IPCP: Close event
Jul 14 15:50:10 mpd: [pt0] IPCP: state change Starting --> Initial
Jul 14 15:50:10 mpd: [pt0] IPCP: LayerFinish
Jul 14 15:50:10 mpd: [pt0] IFACE: Close event
Jul 14 15:50:10 mpd: pptp0: closing connection with 195.168.112.29:36224
Jul 14 15:50:10 mpd: [pt0] IFACE: Close event
Jul 14 15:50:10 mpd: [pt0] device is now in state CLOSING
Jul 14 15:50:10 mpd: [pt0] bundle: CLOSE event in state OPENED
Jul 14 15:50:10 mpd: [pt0] closing link "pt0"...
Jul 14 15:50:10 mpd: [pt0] device: CLOSE event in state CLOSING
Jul 14 15:50:10 mpd: [pt0] device is now in state CLOSING
Jul 14 15:50:10 mpd: [pt0] link: CLOSE event
Jul 14 15:50:10 mpd: [pt0] LCP: Close event
Jul 14 15:50:10 mpd: [pt0] LCP: state change Stopped --> Closed
Jul 14 15:50:10 mpd: [pt0] device: DOWN event in state CLOSING
Jul 14 15:50:10 mpd: [pt0] device is now in state DOWN
Jul 14 15:50:10 mpd: [pt0] link: DOWN event
Jul 14 15:50:10 mpd: [pt0] LCP: Down event
Jul 14 15:50:10 mpd: [pt0] LCP: state change Closed --> Initial
Jul 14 15:50:10 mpd: [pt0] LCP: phase shift ESTABLISH --> DEAD
Jul 14 15:50:10 mpd: [pt0] device: DOWN event in state DOWN
Jul 14 15:50:10 mpd: [pt0] device is now in state DOWN
Jul 14 15:50:10 mpd: pptp0: killing connection with 195.112.2.9:36224 (this is my gateway as I'm on a private network)
Jul 14 15:50:10 mpd: [pt0] link: DOWN event
Jul 14 15:50:10 mpd: [pt0] LCP: Down event
Any ideas where I'm going wrong?
« Reply #1 on: July 18, 2007, 08:31:55 »
cmb *****
Posts: 851

619 from XP on the Internet makes it sound like a problem with the firewall the client machine is behind.
« Reply #2 on: July 18, 2007, 13:45:51 »
pingu *
Posts: 3

Thanks, but I don't think so. This worked fine with the previous monowall config, now nobody can connect.
« Reply #3 on: August 03, 2007, 04:35:59 »
XIII *
Posts: 15

go to firewall menu and then click pptp and add a rule to allow all everthing your rule after you make it should have * in every field. should work if i understand your problem correctly. it seems like there is no firewall rule set so all vpn pptp traffic is being blocked.
« Reply #4 on: August 14, 2007, 09:47:38 »
pingu *
Posts: 3

I already have that rule, Firewall settings:
Code:
WAN
       Proto Source Port Destination Port Description
pass TCP  80 (HTTP)     
pass TCP * * * 443 (HTTPS)
pass * * * * *  
pass GRE * * * *  

PPTP
       Proto  Source Port Destination Port Description
pass * PPTP * * *  
clients
pass * * * * *  
pass GRE * * * *  
 
Pages: [1]
 
 
Powered by SMF 1.1.20 | SMF © 2013, Simple Machines