[pptp-server] Re: [pptp-server] PPTP behind firewall

[Jamie Guinan]

On Thu, 3 Jun 1999, Seth Vidal wrote:

> > *This message was transferred with a trial version of CommuniGate(tm) Pro*
> > Can someone help me as far as setting up a pptp client, Linux BTW,
> > behind a firewall, also Linux.  I would like to access a NT Server at
> > work from home and have a @Home cable connection with a 2.0.36
> > masquerading firewall so I can use my laptop from home.  I have seem
> > some things on IP port 137 and udp port 17, from memory.  Anyone got a
> > FAQ or mini-HOWTO?
> you'll need to get the pptp client patch for masquerading (it uses ipportfw
> is I remember correctly)

Is there such a patch?  I didn't see one on Ananian's web site.

I'm basically having the same problem.

  host1      masqhost            remotehost
   |            |                    |
   +------------+ - - - - - - - - - -+-----...
                    I N T E R N E T


host1 is an x86 running Linux 2.2.9, I run the pptp client there.
masqhost is a NetWinder running 2.0.35 with ip masquerading.
remotehost is an x86 running 2.0.36, PoPToP runs there.

The pppd's on both ends come up fine, but after about 30 seconds
host1's log reports,

Jun 18 09:08:28 tiger pppd[604]: LCP: timeout sending Config-Requests

Immediately before that log message appears, tcpdump (on host1) showed,

09:08:00.680401 gre-proto-0x880B (gre encap)
09:08:01.700434 gre-proto-0x880B (gre encap)
09:08:04.710534 gre-proto-0x880B (gre encap)
09:08:07.720634 gre-proto-0x880B (gre encap)
09:08:10.730734 gre-proto-0x880B (gre encap)
09:08:13.740834 gre-proto-0x880B (gre encap)
09:08:16.750934 gre-proto-0x880B (gre encap)
09:08:19.761034 gre-proto-0x880B (gre encap)
09:08:22.771134 gre-proto-0x880B (gre encap)
09:08:25.781234 gre-proto-0x880B (gre encap)

Are these broadcast packets?  Are they normally outside the 
TCP 1723 port connection?

Do I need to forward them through masqhost?

Thanks,
-Jamie