From chris at pds2k.com  Sat Apr  1 07:58:28 2000
From: chris at pds2k.com (chris at pds2k.com)
Date: Sat Apr  1 07:58:28 2000
Subject: [pptp-server] spam
Message-ID: <518957125.954597684947.JavaMail.submitor@www>

Hey!
I discovered this free service called eLOL, electronic Laugh Out Loud
that sends jokes to you every day. It uses some sort of "smart technology" that learns your sense of humor.
This "spam" joke is so funny I had to send it to you.

 Check this link to view the joke: http://www.elol.com/site/ViewJoke?title=spam&url=05/600028.gif&name=CTarricone 
 By registering for eLOL today you're automatically entered to WIN A BRAND NEW PALM V. 
 eLOL not only delivers the best jokes on the net, it actually learns your sense of humor and sends the jokes you'll like most.
	Download is availabe from http://www.elol.com/download/

From br at ldl.net  Mon Apr  3 00:28:03 2000
From: br at ldl.net (Ed Street)
Date: Mon Apr  3 00:28:03 2000
Subject: [pptp-server] GRE: and CTRL: errors
Message-ID: <Pine.LNX.4.20.0004030118190.2430-100000@SLaCKWaReZ.ldl.net>

Hello,

I have everything setup and ready to go but when I connect I get this
error msg

Apr  3 01:14:37 SLaCKWaReZ pptpd[3294]: CTRL (PPPD Launcher): Connection speed = 115200 
Apr  3 01:14:37 SLaCKWaReZ pptpd[3293]: GRE: read(fd=4,buffer=804d780,len=8196) from PTY failed: status = -1 error = Input/output error
Apr  3 01:14:37 SLaCKWaReZ pptpd[3293]: CTRL: PTY read or GRE write failed (pty,gre)=(4,5)
Apr  3 01:14:37 SLaCKWaReZ pptpd[3293]: CTRL: Client 192.168.1.10 control connection finished
Apr  3 01:14:37 SLaCKWaReZ pptpd[3293]: CTRL: Exiting now

This is out of syslog, it seems that this is the only thing stoping me
from making connections.

Any ideas?

Oh btw 

/etc/pptp.conf
speed 115200
localip 192.168.1.2
remoteip 192.168.1.200-250

/etc/ppp/options.pptp
name servername
proxyarp

noauth
lock
debug

(tried this with just debug when I had it working one time)

/etc/ppp/chapsecrets 
# PAP authentication file: /etc/ppp/chat-secrets
# This file should have a permission of 600.
# ~# chmod 600 /etc/ppp/pap-secrets
# Username      Server      Password      IP addresses
test          servername           test


Ed






From mfourticq at hotmail.com  Mon Apr  3 04:32:16 2000
From: mfourticq at hotmail.com (Mathieu Fourticq)
Date: Mon Apr  3 04:32:16 2000
Subject: [pptp-server] pptp client QOS
Message-ID: <20000403093209.13598.qmail@hotmail.com>

Hi all,

  I am running a pptp client on my linux box to connect to the internet via 
ADSL modem. I would like to redial my pptp connexion when it is down. I know 
that pppd has a special command to verify if the connection is still up but 
I have no Idea how to automate the redial process with pptp.

Thanks for helping.

Mathieu.

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com




From mfourticq at hotmail.com  Mon Apr  3 04:38:40 2000
From: mfourticq at hotmail.com (Mathieu Fourticq)
Date: Mon Apr  3 04:38:40 2000
Subject: [pptp-server] Re: pptp client problem
Message-ID: <20000403093833.65482.qmail@hotmail.com>

>
> >Date: Fri, 31 Mar 2000 09:21:51 -0800 (PST)
> >From: Laxman Shankar <eiachomb at yahoo.com>
> >Subject: pptp client problem
> >To: chris at schulte.org
> >
> >Hi Chris,
> >
> >I needed some help in using the pptp client
> >package pptp-linux-1.0.2.
> >
> >I have a DSL connection using PPPoE.  I know
> >the IP address of the PPTP server I am trying to
> >connect to and my user name and password.
> >
> >The usage is >pptp <ipaddr> <ppp options>
> >
> >pptp.c tries to connect to ipaddr which it cannot
> >reach if I have not already run the pppd over pppoe.
> >
> >Can you tell me what the correct method is ? or
> >give me a pointer to someone who does.
> >
> >Thanks
> >Laxman
>
>
>--
>Christopher Schulte | christopher at schulte.org
>cell:612.986.4859   | home:651.225.4557 | fax: 651.315.3339
>page:612.289.5511   | free:877.271.9245 | site:schulte.org
>
>
>_______________________________________________
>pptp-server maillist  -  pptp-server at lists.schulte.org
>http://lists.schulte.org/mailman/listinfo/pptp-server
>List services provided by www.schulte.org!

Hi laxman,

  I am using a pptp client to access the internet with the ADSL 1000 Alcatel 
modem. In my case, I am connected to the box via an ethernet link : It means 
that my Ethernet Card is 10.0.0.1 and my Modem as another IP adress like 
10.0.0.138

  To connect to my ISP, I launch pptp 10.0.0.138 which enable my acces to 
the internet. (I don't use any ISP adress)

Hopping this will help,

Mathieu
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com




From vigov at com2com.ru  Mon Apr  3 09:42:03 2000
From: vigov at com2com.ru (vigov)
Date: Mon Apr  3 09:42:03 2000
Subject: [pptp-server] mppe + FBSD
Message-ID: <7784.000403@com2com.ru>

Hello All.
Does anybody has data encryption with pppd under FBSD?

thanx
How is it real?

Eugene





From tony at watters.com  Mon Apr  3 11:08:07 2000
From: tony at watters.com (Tony Pardini)
Date: Mon Apr  3 11:08:07 2000
Subject: [pptp-server] win95 client problems
In-Reply-To: <030401bf9b6a$313c3050$280111ac@amadorinc.com>
References: <4.3.1.0.20000331145714.00c347b0@pop.schulte.org> <030401bf9b6a$313c3050$280111ac@amadorinc.com>
Message-ID: <00040311075701.26408@muerte.emphasys.net>

I have a win95 client that uses dial-up networking to connect to the net.  Then
they use DUN to connect to the VPN.  It authenticates, negotiates encryption
and assigns and IP for the VPN.  DUN reports a successful connect, but there is
no access to the network.  I can't ping the client.  The traffic indicator does
flash (on both ISP and VPN connections)  with each ping, but there is no
response.  

I was able to successfully connect to the  VPN via an ethernet connection when
I physically had the machine.

Any ideas ?






From christopher at schulte.org  Mon Apr  3 11:19:09 2000
From: christopher at schulte.org (Christopher Schulte)
Date: Mon Apr  3 11:19:09 2000
Subject: [pptp-server] Fwd: VPN/pptp
Message-ID: <4.3.1.0.20000403111904.00bec230@pop.schulte.org>

This message was sent directly to me.  I added the user to the list so s/he 
can get any replies.

>From: Haberkorn_Klaus <Haberkorn at sympat.de>
>To: "'christopher at schulte.org'" <christopher at schulte.org>
>Subject: VPN/pptp
>Date: Mon, 3 Apr 2000 16:00:53 +0200
>X-Mailer: Internet Mail Service (5.0.1458.49)
>
>Dear Christopher,
>
>we are trying to get a VPN-connection between a Linux (Halloween)
>VPN-Server and a Windows NT (4.0,sp6a)-Client.
>Both the systems are configured according to "HOWTO-PoPToP.txt.
>pptpd-version is 1.0.0-1
>ppp-version is 2.3.10-1
>The connection establishes, but we fail during login due to problems
>with Config-Requests not beeing answered by the client.
>
>The pptpd.log and messages are attached, perhaps you'll have an idea
>what's wrong.
>
>Best Regards
>Klaus Haberkorn
>
>
>
-------------- next part --------------
Apr  3 15:30:38 host101 pptpd[1518]: MGR: Launching /usr/sbin/pptpctrl to handle client
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: local address = 192.168.4.4
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: remote address = 192.168.5.6
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: pppd speed = 115200
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: pppd options file = /etc/ppp/options
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: Client 194.231.83.164 control connection started
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Received PPTP Control Message (type: 1)
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Made a START CTRL CONN RPLY packet
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: I wrote 156 bytes to the client.
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Sent packet to client
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Received PPTP Control Message (type: 7)
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Set parameters to 152 maxbps, 32 window size
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Made a OUT CALL RPLY packet
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Starting call (launching pppd, opening GRE)
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: pty_fd = 5
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: tty_fd = 6
Apr  3 15:30:39 host101 pptpd[1519]: CTRL (PPPD Launcher): Connection speed = 115200
Apr  3 15:30:39 host101 pptpd[1519]: CTRL (PPPD Launcher): local address = 192.168.4.4
Apr  3 15:30:39 host101 pptpd[1519]: CTRL (PPPD Launcher): remote address = 192.168.5.6
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: I wrote 32 bytes to the client.
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Sent packet to client
Apr  3 15:30:40 host101 pppd[1519]: pppd 2.3.10 started by root, uid 0
Apr  3 15:30:40 host101 pppd[1519]: Using interface ppp0
Apr  3 15:30:40 host101 pppd[1519]: Connect: ppp0 <--> /dev/pts/0
Apr  3 15:30:40 host101 pppd[1519]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xe11d397f> <pcomp> <accomp>]
Apr  3 15:30:40 host101 pptpd[1518]: CTRL: Received PPTP Control Message (type: 15)
Apr  3 15:30:40 host101 pptpd[1518]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Apr  3 15:30:43 host101 pppd[1519]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <auth chap MD5> <magic 0xe11d397f> <pcomp> <accomp>]
Apr  3 15:31:07 host101 last message repeated 8 times
Apr  3 15:31:10 host101 pppd[1519]: LCP: timeout sending Config-Requests 
Apr  3 15:31:10 host101 pppd[1519]: Connection terminated.
Apr  3 15:31:10 host101 pppd[1519]: Exit.
Apr  3 15:31:10 host101 pptpd[1518]: GRE: read(fd=5,buffer=804d7e0,len=8196) from PTY failed: status = -1 error = Input/output error
Apr  3 15:31:10 host101 pptpd[1518]: CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
Apr  3 15:31:10 host101 pptpd[1518]: CTRL: Client 194.231.83.164 control connection finished
Apr  3 15:31:10 host101 pptpd[1518]: CTRL: Exiting now
Apr  3 15:31:10 host101 pptpd[1232]: MGR: Reaped child 1518
-------------- next part --------------
Apr  3 15:30:38 host101 pptpd[1518]: CTRL: Client 194.231.83.164 control connection started
Apr  3 15:30:39 host101 pptpd[1518]: CTRL: Starting call (launching pppd, opening GRE)
Apr  3 15:30:40 host101 pppd[1519]: pppd 2.3.10 started by root, uid 0
Apr  3 15:30:40 host101 kernel: ppp_ioctl: set dbg flags to 1f0000 
Apr  3 15:30:40 host101 kernel: ppp_ioctl: set flags to 1f0000 
Apr  3 15:30:40 host101 pppd[1519]: Using interface ppp0
Apr  3 15:30:40 host101 pppd[1519]: Connect: ppp0 <--> /dev/pts/0
Apr  3 15:30:40 host101 kernel: ppp_tty_ioctl: set xasyncmap 
Apr  3 15:30:40 host101 kernel: ppp_tty_ioctl: set xmit asyncmap ffffffff 
Apr  3 15:30:40 host101 kernel: ppp_ioctl: set flags to 1f0000 
Apr  3 15:30:40 host101 kernel: ppp_ioctl: set mru to 5dc 
Apr  3 15:30:40 host101 kernel: ppp_tty_ioctl: set rcv asyncmap ffffffff 
Apr  3 15:31:10 host101 pppd[1519]: LCP: timeout sending Config-Requests 
Apr  3 15:31:10 host101 pppd[1519]: Connection terminated.
Apr  3 15:31:10 host101 kernel: ppp: channel ppp0 closing. 
Apr  3 15:31:10 host101 pppd[1519]: Exit.
Apr  3 15:31:10 host101 pptpd[1518]: GRE: read(fd=5,buffer=804d7e0,len=8196) from PTY failed: status = -1 error = Input/output error
Apr  3 15:31:10 host101 pptpd[1518]: CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
Apr  3 15:31:10 host101 pptpd[1518]: CTRL: Client 194.231.83.164 control connection finished
-------------- next part --------------

--
Christopher Schulte | christopher at schulte.org
cell:612.986.4859   | home:651.225.4557 | fax: 651.315.3339
page:612.264.1115   | free:877.271.9245 | site:schulte.org

From marchelh at xs4all.nl  Mon Apr  3 13:56:56 2000
From: marchelh at xs4all.nl (Marchel Hooyboer)
Date: Mon Apr  3 13:56:56 2000
Subject: [pptp-server] PPTP thru a router
Message-ID: <005c01bf9d9e$a9003560$0503a8c0@videoedit>

Hi there

Is it possible to have a PPTP connection thru a RAS router (the Win95 client is not the dialling computer)
I only see resolutions that the PPTP client is a DUN client
I have more stations on the remote network but need only a few of them secure.

Greeting,
Marchel Hooyboer
marchelh at xs4all.nl


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20000403/db2c7329/attachment.html>

From neale at lowendale.com.au  Mon Apr  3 19:09:13 2000
From: neale at lowendale.com.au (Neale Banks)
Date: Mon Apr  3 19:09:13 2000
Subject: [pptp-server] PPTP thru a router
In-Reply-To: <005c01bf9d9e$a9003560$0503a8c0@videoedit>
Message-ID: <Pine.LNX.4.05.10004041014240.6822-100000@marina.lowendale.com.au>

On Mon, 3 Apr 2000, Marchel Hooyboer wrote:

> Hi there
> 
> Is it possible to have a PPTP connection thru a RAS router (the Win95
> client is not the dialling computer)

Yes.  PPTP requires an IP connection end-end.  More specifically, it
requires that TCP port 1723(?) and GRE (IP protocol 47(?)) be clear from
end-to-end.

Be aware that there are complications if there is anything in the middle
doing NAT.

> I only see resolutions that the PPTP client is a DUN client
> I have more stations on the remote network but need only a few of them secure.

So you have something like a network with some PPTP clients, connected by
whatever IP connection to the PPTP server?

That sounds reasonable, but whatch out for IP filtering and NAT.

HTH,
Neale.




From ha_linh_don at hotmail.com  Tue Apr  4 01:55:16 2000
From: ha_linh_don at hotmail.com (DON HA LINH)
Date: Tue Apr  4 01:55:16 2000
Subject: [pptp-server] Making "Compulsory tunnel" with pptp server ?
Message-ID: <20000404065507.48129.qmail@hotmail.com>

Dear everybody,

Could I use pptp server to make "Compulsory tunnel" ?

Don
______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com




From frost at engen.com  Tue Apr  4 12:47:09 2000
From: frost at engen.com (Frost)
Date: Tue Apr  4 12:47:09 2000
Subject: [pptp-server] 128-Bit MPPE
Message-ID: <NCBBIPLNKKOOCENOEGEDIELDCOAA.frost@engen.com>

When I connect the Linux PPTP Client to a Windows NT 4.0 server, I always get
connected with "128-Bit MPPE enabled", but I never get this when connecting to
another Linux server.  Does anyone know how to force either 40-bit or 128-bit
encryption between two Linux servers?  Thanks in advance.

Regards,
Harv

Harv Frost                     En.gen (a Division of J. River, Inc.)
mailto:frost at engen.com         2727 W. Baseline Rd #13
http://www.engen.com           Tempe, AZ 85283
ftp://ftp.engen.com            Tel: 602-438-1110




From br at ldl.net  Tue Apr  4 16:17:51 2000
From: br at ldl.net (Ed Street)
Date: Tue Apr  4 16:17:51 2000
Subject: [pptp-server] dialup auth
Message-ID: <Pine.LNX.4.20.0004041710210.361-100000@SLaCKWaReZ.ldl.net>

Hello,

I finally got the local copy working (meaning I can connect via lan) when
I goto the field server and do dialup it gets to the point stating
"verifying username" and times out.  the server is showing this
Apr  4 15:11:06 firewall pppd[307]: sent [LCP ConfReq id=0x1 <asyncmap
0x0> <magic 0x213039e1> <pcomp> <accomp>]

I can connect local via chap btw. Any ideas?

Ed





From Ron.Harwood at CYBERplex.com  Tue Apr  4 17:42:24 2000
From: Ron.Harwood at CYBERplex.com (Harwood, Ron)
Date: Tue Apr  4 17:42:24 2000
Subject: [pptp-server] Speed degradation
Message-ID: <DF2F5312A913D311B3720008C7F35F370267EE09@toxmail1.cyberplex.com>

Has anyone else experienced a gradual speed degradation (over a few hours)
with the PPTP server?

Disconnecting, and reconnecting seems to fix things up just fine.

Any advice?

Thanks,

Ron Harwood
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20000404/ede1b620/attachment.html>

From vigov at com2com.ru  Wed Apr  5 02:12:08 2000
From: vigov at com2com.ru (vigov)
Date: Wed Apr  5 02:12:08 2000
Subject: [pptp-server] (no subject)
Message-ID: <11471.000405@com2com.ru>

Hi everebody! How many simultaneously working connections have
anybody? And what's happening with system with 1024 clients? Does it
overload or no ?

Eugene





From pf at sxb.bsf.alcatel.fr  Wed Apr  5 04:13:22 2000
From: pf at sxb.bsf.alcatel.fr (Pascal Fremaux)
Date: Wed Apr  5 04:13:22 2000
Subject: [pptp-server] 128-Bit MPPE
References: <NCBBIPLNKKOOCENOEGEDIELDCOAA.frost@engen.com>
Message-ID: <38EAE049.CC247BFE@sxb.bsf.alcatel.fr>

See the patch from Martin Mueller (www.smop.de).
With a little modification it can do that I think.

Frost wrote:

> When I connect the Linux PPTP Client to a Windows NT 4.0 server, I always get
> connected with "128-Bit MPPE enabled", but I never get this when connecting to
> another Linux server.  Does anyone know how to force either 40-bit or 128-bit
> encryption between two Linux servers?  Thanks in advance.
>
> Regards,
> Harv
>
> Harv Frost                     En.gen (a Division of J. River, Inc.)
> mailto:frost at engen.com         2727 W. Baseline Rd #13
> http://www.engen.com           Tempe, AZ 85283
> ftp://ftp.engen.com            Tel: 602-438-1110
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!

--
 Pascal Fremaux, SSII Alten
 Study Engineer at Alcatel Telecom
 R&D, Illkirch, France






From Stefan.Strehle at JAW.AT  Wed Apr  5 09:19:20 2000
From: Stefan.Strehle at JAW.AT (Strehle Stefan)
Date: Wed Apr  5 09:19:20 2000
Subject: [pptp-server] debugging...
Message-ID: <B115A191F1EFD1119A5F00A0C9454628338879@www.jaw.at>

Can anyone give me a comment on my debug file


Apr  5 14:56:13 pinguin pppd[1018]: CHAP peer authentication succeeded for
JAW.AT\\Stefan.Strehle
Apr  5 14:56:13 pinguin pppd[1018]: found interface eth1 for proxy arp
Apr  5 14:56:13 pinguin pppd[1018]: local  IP address 192.168.0.221
Apr  5 14:56:13 pinguin pppd[1018]: remote IP address 192.168.0.231
Apr  5 14:56:13 pinguin pppd[1018]: Script /etc/ppp/ip-up started (pid 1020)
Apr  5 14:56:13 pinguin pppd[1018]: rcvd [IPCP TermReq id=0x9 00 00 01 03]
Apr  5 14:56:13 pinguin pppd[1018]: IPCP terminated by peer (^@^@^A^C)
Apr  5 14:56:13 pinguin pppd[1018]: sent [IPCP TermAck id=0x9]
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: Received PPTP Control Message
(type: 12)
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: Made a CALL DISCONNECT RPLY
packet
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: Received CALL CLR request
(closing call)
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: I wrote 148 bytes to the client.
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: Sent packet to client
Apr  5 14:56:13 pinguin pptpd[1017]: CTRL: Error with select(), quitting

It works fine till ip-up. I got unnecessary stuff out of the file.
Maybe someone could post me a standard debug file with a working config.

thx

Stefan Strehle
Zentralstelle Jugend am Werk
Grunsteingasse 65 A-1160 Wien
Tel. 4050286DW67 Fax 4051836
http://www.jaw.at





From mbandjb at netzero.net  Wed Apr  5 15:06:35 2000
From: mbandjb at netzero.net (Matt Bohling)
Date: Wed Apr  5 15:06:35 2000
Subject: [pptp-server] VPN question
Message-ID: <01BF9F00.190D9480@MATT>

  I have a similar problem as others on the list.  I think this question will be rather easy to figure out since I see that others on the PoPToP email list have had similar problems.  I am using PoPToP on a Cobalt Qube Linux Server.  The Qube has WINS enabled through a setting in a web administrative interface.  Thus I did not add the line to the /etc/ppp/options files as was suggested by Steve Cowles to another subscriber to the list in the below quote.
"2) on your poptop server, /etc/ppp/options must contain a "ms-wins" directive which is set to the IP address of the WINS server. This IP address will be sent to the client when they establish their PPTP connection."
I didn't add the line suggested above because I didn't know what the format of the line should be.  However, if my workstations on my internal network are WINS enabled and point to the Qube as their WINS server, I seem to be able to ping them just fine through my tunnel.  I cannot however, see them in Network Neighborhood.  Perhaps adding this line to the ../options file would facilitate this.
  PoPToP is installed correctly (as best as I can tell) and I'm able to establish a tunnel.  I can ping the Linux server by name and a WINS enabled workstation on my internal network by name.  However, I am unable to map a drive to a share on the same workstation that I can ping by name.  I have a Win 95 computer with the DUN 1.3 upgrade installed.  Any ideas why I can't map the drive?  Could this be related to why I don't see any workstations in Network Neighborhood.

matt bohling  

matt bohling
mbandjb at netzero.net 



From br at ldl.net  Wed Apr  5 16:58:34 2000
From: br at ldl.net (Ed Street)
Date: Wed Apr  5 16:58:34 2000
Subject: [pptp-server] vpn client login
Message-ID: <Pine.LNX.4.20.0004051750180.877-200000@SLaCKWaReZ.ldl.net>

Hello,

this is my pptpd.log file.  I can connect over my lan with this
workstation, but when I connect via dialup to the isp and launch the vpn
client in '98 it sits there with "verifying username and password" then
times out.  

Any one know what is going on here?

thanks

Ed

-------------- next part --------------
Apr  5 14:50:46 firewall pptpd[4820]: MGR: Manager process started
Apr  5 14:50:51 firewall pptpd[4822]: MGR: Launching /usr/local/sbin/pptpctrl to handle client
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: local address = 192.168.0.110
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: remote address = 192.168.1.234
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: pppd speed = 115200
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: Client 207.69.36.194 control connection started
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: Received PPTP Control Message (type: 1)
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: Made a START CTRL CONN RPLY packet
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: I wrote 156 bytes to the client.
Apr  5 14:50:51 firewall pptpd[4822]: CTRL: Sent packet to client
Apr  5 14:50:52 firewall pptpd[4820]: MGR: Reaped child 4822
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Received PPTP Control Message (type: 7)
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Set parameters to 0 maxbps, 16 window size
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Made a OUT CALL RPLY packet
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Starting call (launching pppd, opening GRE)
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: pty_fd = 4
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: tty_fd = 5
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: I wrote 32 bytes to the client.
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Sent packet to client
Apr  5 14:50:52 firewall pptpd[4823]: CTRL (PPPD Launcher): Connection speed = 115200
Apr  5 14:50:52 firewall pptpd[4823]: CTRL (PPPD Launcher): local address = 192.168.0.110
Apr  5 14:50:52 firewall pptpd[4823]: CTRL (PPPD Launcher): remote address = 192.168.1.234
Apr  5 14:50:52 firewall pppd[4823]: In file /etc/ppp/options: unrecognized option 'nopap'
Apr  5 14:50:52 firewall pptpd[4822]: GRE: read(fd=4,buffer=804d780,len=8196) from PTY failed: status = -1 error = Input/output error
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: PTY read or GRE write failed (pty,gre)=(4,5)
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Client 207.69.36.194 control connection finished
Apr  5 14:50:52 firewall pptpd[4822]: CTRL: Exiting now

From mbandjb at netzero.net  Wed Apr  5 17:38:16 2000
From: mbandjb at netzero.net (Matt's Netzero Acct)
Date: Wed Apr  5 17:38:16 2000
Subject: [pptp-server] VPN Problem - Clarification
Message-ID: <001701bf9f50$0f8074a0$040aa8c0@vanguardcomposites.com>

Okay, here's an update.  I was able to find the correct syntax in the archives for
the ms-wins line in the /etc/ppp/options.  I added this line and took off the explicit
WINS server address on my VPN client.  I still can ping machines on my internal
network by IP address or by name but can't map a drive to their shares.  It doesn't
seem to be a name resolution issue as even if I map by using the format \\192.168.x.x\sharename I still am not able to connect.  I get the message "could
not find computer name or share name blah blah blah".  I know the name is
resolved because I can ping by name.  This seems to be related to the fact that
I can't browse with Network Neighborhood.  Help would be appreciated!

matt bohling
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20000405/765a5bba/attachment.html>

From natecars at real-time.com  Wed Apr  5 18:00:33 2000
From: natecars at real-time.com (Nate Carlson)
Date: Wed Apr  5 18:00:33 2000
Subject: [pptp-server] VPN Problem - Clarification
In-Reply-To: <001701bf9f50$0f8074a0$040aa8c0@vanguardcomposites.com>
Message-ID: <Pine.LNX.4.10.10004051758470.1403-100000@enchanter.real-time.com>

On Wed, 5 Apr 2000, Matt's Netzero Acct wrote:

> Okay, here's an update.  I was able to find the correct syntax in the archives for
> the ms-wins line in the /etc/ppp/options.  I added this line and took off the explicit
> WINS server address on my VPN client.  I still can ping machines on my internal
> network by IP address or by name but can't map a drive to their shares.  It doesn't
> seem to be a name resolution issue as even if I map by using the format \\192.168.x.x\sharename I still am not able to connect.  I get the message "could
> not find computer name or share name blah blah blah".  I know the name is
> resolved because I can ping by name.  This seems to be related to the fact that
> I can't browse with Network Neighborhood.  Help would be appreciated!
> 
> matt bohling
> 

Have you ensured your firewall rules are allowing SMB over the link?

FYI, DNS resolution (what you ping with) is far different than WINS
resolution.. just because you can ping a machine by name does not mean
WINS is working.

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500




From ntu at internetappliance.com  Wed Apr  5 20:00:07 2000
From: ntu at internetappliance.com (NTU)
Date: Wed Apr  5 20:00:07 2000
Subject: [pptp-server] remove from mailing list
References: <3899D11B.FA5E92FD@omnitracs.com.mx>
Message-ID: <000501bf9f63$8e891370$71015c0a@ntu1>

Pls remove me from the pptp mailing list

Thanks for all the advise and response given.

Regards.
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
>






From Thierry.Coutelier at prophecy.lu  Thu Apr  6 01:41:25 2000
From: Thierry.Coutelier at prophecy.lu (Thierry Coutelier)
Date: Thu Apr  6 01:41:25 2000
Subject: [pptp-server] (no subject)
References: <11471.000405@com2com.ru>
Message-ID: <38EC3182.C2CEF0C7@prophecy.lu>

Hello, 


I suppose you read the doc about imitations.

I trying to set up a system with 2000 sessions per server.
( I prefer linux to 3COM )
The problem I see now is that each pptp sesssion takes about 400k of RAM
   and you have to add 600k for each ppp session thus If you want to
   have over 1k open sessions you will need over 1Gbyte of RAM.
I trying to reduce the size of the pppd process and (If I'm able) to
   integrate pptp in pppd. Thus using only one process/session.


vigov wrote:
> 
> Hi everebody! How many simultaneously working connections have
> anybody? And what's happening with system with 1024 clients? Does it
> overload or no ?
> 
> Eugene
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!

-- 
Thierry Coutelier
http://www.prophecy.lu
http://www.linux.lu



From mfourticq at hotmail.com  Fri Apr 14 03:16:37 2000
From: mfourticq at hotmail.com (Mathieu Fourticq)
Date: Fri, 14 Apr 2000 08:16:37 GMT
Subject: [pptp-server] Re: pptp-server digest, Vol 1 #368 - 4 msgs
Message-ID: <20000414081637.17884.qmail@hotmail.com>


>From: pptp-server-request at lists.schulte.org
>Reply-To: pptp-server at lists.schulte.org
>To: pptp-server at lists.schulte.org
>Subject: pptp-server digest, Vol 1 #368 - 4 msgs
>Date: Thu, 13 Apr 2000 18:48:40 -0500
>MIME-Version: 1.0
>Received: from [209.98.55.108] by hotmail.com (3.2) with ESMTP id 
>MHotMailBABFA7E000C3D820F3D8D162376C32A90; Thu Apr 13 16:48:51 2000
>Received: from snaildust.schulte.org (localhost [127.0.0.1])by 
>snaildust.schulte.org (8.10.0/8.10.0) with ESMTP id e3DNme614802;Thu, 13 
>Apr 2000 18:48:40 -0500
>From pptp-server-admin at lists.schulte.org Thu Apr 13 16:53:12 2000
>Message-Id: <200004132348.e3DNme614802 at snaildust.schulte.org>
>X-Mailer: Mailman v2.0beta2
>Sender: pptp-server-admin at lists.schulte.org
>Errors-To: pptp-server-admin at lists.schulte.org
>X-BeenThere: pptp-server at lists.schulte.org
>X-Mailman-Version: 2.0beta2
>Precedence: bulk
>List-Id: The Linux PPTP Server <pptp-server.lists.schulte.org>
>--209.98.55.108.2.14796.955669720.371.4196
>
>_______________________________________________
>pptp-server maillist  -  pptp-server at lists.schulte.org
>http://lists.schulte.org/mailman/listinfo/pptp-server
>List services provided by www.schulte.org!
>
>--209.98.55.108.2.14796.955669720.371.4196--
>
>End of pptp-server Digest_______________________________________________
>pptp-server maillist  -  pptp-server at lists.schulte.org
>http://lists.schulte.org/mailman/listinfo/pptp-server
>List services provided by www.schulte.org!

______________________________________________________
Get Your Private, Free Email at http://www.hotmail.com



From kswail at leweb.qc.ca  Sun Apr 16 16:01:40 2000
From: kswail at leweb.qc.ca (Kevin Swail)
Date: Sun, 16 Apr 2000 17:01:40 -0400
Subject: [pptp-server] Cannot connect behing Shiva VPN Server
Message-ID: <NCBBIBLCFJDFCKKGBEBDGELOCFAA.kswail@leweb.qc.ca>

Hi there,

I was hoping someone could shed some light on a problem I am having trying
to connect to PopTop from my office.

I set up PopTop on my Linux box at home, and tested it on the internal
network with no problems.
I tried dialing up from a laptop to the internet, and successfully connected
as well.

My problem is connecting from my office, which uses private ips, behind a
SHIVA VPN server, which masqerades for the internal hosts.

I can successfully connect and get to the point where I see the "verifying
username and password" message, then after about 15 seconds, get the error
"Error 619: the specified port is not connected."

I imagine (not too sure), that the PPTP protocol is connecting just fine,
and that GRE is not getting back into the office network?!?!?!  Is this what
is happening?  What can I do to resolve this?

Thanks to all!

Kevin



From jvonau at ramwinn.com  Mon Apr 17 12:03:44 2000
From: jvonau at ramwinn.com (Jerry Vonau)
Date: Mon, 17 Apr 2000 12:03:44 -0500
Subject: [pptp-server] SPEED
Message-ID: <01BFA865.21D16EC0.jvonau@ramwinn.com>

Hi All:

It's my first time posting. I set up PPTP on my RH 6.1 Firewall, with samba 
doing WINS. The transfer speed seems a little slow, server is on 10Meg 
fiber, and the clients are on cable modems. I timed a windows drag & drop 
on a 18 meg file, it took about 18 minutes. Is there a way to speed this 
up?? The server is a P2 266- 64meg RAM.

 Thanks in Advance

Jerry Vonau
Winnipeg Motor Express



From tmk at netmagic.net  Mon Apr 17 17:24:32 2000
From: tmk at netmagic.net (tmk)
Date: Mon, 17 Apr 2000 15:24:32 -0700
Subject: [pptp-server] SPEED
References: <01BFA865.21D16EC0.jvonau@ramwinn.com>
Message-ID: <000701bfa8bb$b470b820$071c0fc0@lala.net>

18megs in 18 minutes is about a meg a minute, and that is about 20k/sec
which is a pretty typical cable modem speed.. Perhaps a little on the slow
side, but certainly still in the expected speed range.

if you can, try this (as a test): run samba straight from the firewall
machine and try transferring a large file (> 1 meg).. see if it is
signifigantly faster than with poptop in between. If it isnt, then check out
some speed optimisations for samba.. if it is faster, post to the list and
we can dig deeper

Kevin

----- Original Message -----
From: Jerry Vonau <jvonau at ramwinn.com>
To: <pptp-server at lists.schulte.org>
Sent: Monday, April 17, 2000 10:03 AM
Subject: [pptp-server] SPEED


> Hi All:
>
> It's my first time posting. I set up PPTP on my RH 6.1 Firewall, with
samba
> doing WINS. The transfer speed seems a little slow, server is on 10Meg
> fiber, and the clients are on cable modems. I timed a windows drag & drop
> on a 18 meg file, it took about 18 minutes. Is there a way to speed this
> up?? The server is a P2 266- 64meg RAM.
>
>  Thanks in Advance
>
> Jerry Vonau
> Winnipeg Motor Express
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
>



From dimambro at pacbell.net  Tue Apr 18 11:12:14 2000
From: dimambro at pacbell.net (Brian L. DiMambro)
Date: Tue, 18 Apr 2000 09:12:14 -0700
Subject: [pptp-server] VPN, Firewall ... Please Help
Message-ID: <38FC895E.E28EACA1@pacbell.net>

Hi all.

I'm still having a bit of a problem getting ppp to tunnel through a
fairly restrictive set of firewall rules. I am using Robert Zeigler's FW
config tool and have everything working except VPN. This is a deny all
script that then allows only certain ports/protos through. I have a
fairly open script that I am using at the present that works just fine.
I kick in the new script and the VPN goes in the toilet. When I connect,
I get no errors from ppptd in the syslog. I think I've got it mostly
working except now it looks like I've got a routing problem. Prior to my
latest attempt I was getting "request timed out" from my Windoze client
if I tried to ping a system on the private network, now I get
"destination host unreachable" ... looks like a routing/forwarding
problem. I'm not seeing it. Everything looks the same in the routing
tables prior to executing the rules script and after. I'm kind of
running into a wall here and would appreciate any help given.

On this network we are only using tcp stuff .. no netbios/netbt/samba
stuff. I only want to be able to ssh, http, ftp and ping. Along with
ping ... ssh, ftp and http also stop working.

BTW: The VPN and firewall are the same system .....


On Linux VPN Server


From dimambro at pacbell.net  Tue Apr 18 11:15:13 2000
From: dimambro at pacbell.net (Brian L. DiMambro)
Date: Tue, 18 Apr 2000 09:15:13 -0700
Subject: [pptp-server] Speed ....???
Message-ID: <38FC8A11.C92C39D@pacbell.net>

Hi all.

Any suggestions on how to improve the apparent speed of the client
connections while in the VPN.

Thanks

Brian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: dimambro.vcf
Type: text/x-vcard
Size: 178 bytes
Desc: Card for Brian L. DiMambro
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20000418/f17e251a/attachment.vcf>

From Stefan.Strehle at JAW.AT  Wed Apr 19 08:47:31 2000
From: Stefan.Strehle at JAW.AT (Strehle Stefan)
Date: Wed, 19 Apr 2000 15:47:31 +0200
Subject: [pptp-server] maxconnect for pptp clients
Message-ID: <B115A191F1EFD1119A5F00A0C9454628338884@www.jaw.at>

Does anyone know how to enforce max connect times for pptp clients besides
the maxconnect of the pppd? I would like to differentiate between other RAS
servers and NT clients. With the pppd one can only have different options
files for in- and outbound.....

Regards,

Stefan Strehle
Zentralstelle Jugend am Werk
Grunsteingasse 65 A-1160 Wien
Tel. 4050286DW67 Fax 4051836
http://www.jaw.at




From osterday at cyberset.com  Thu Apr 20 08:29:05 2000
From: osterday at cyberset.com (Pat Osterday)
Date: Thu, 20 Apr 2000 09:29:05 -0400
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
Message-ID: <000201bfaacc$66cffbe0$1808010a@cyberset.com>

I'm trying to compile the new mppe ppp module on RedHat 6.2 (kernel 2.2.14)
and get the following errors:

ppp.c:188: warning: static declaration for
`ppp_register_compressor_R9682e733' follows non-static
ppp.c:189: warning: static declaration for
`ppp_unregister_compressor_Ra1b928df' follows non-static
ppp.c: In function `rcv_proto_unknown': ppp.c:2563: too few arguments to
function `kill_fasync_R5e73d35d'
make[1]: *** [ppp.o] Error 1
make[1]: Leaving directory `/usr/src/linux-2.2.14/drivers/net'
make: *** [_mod_drivers/net] Error 2

I've patched/configure/make/make install/make kernel for ppp-2.3.11 with the
patch from ftp.binarix.com.

Any ideas?  I had everything running fine on a RedHat 6.0 box.

--
Pat Osterday, Research and Development Specialist
osterday at cyberset.com

Cyberset Technologies, Inc. - Your Partner In Managing Change(tm)
http://www.cyberset.com/



From teastep at evergo.net  Thu Apr 20 09:48:57 2000
From: teastep at evergo.net (Tom Eastep)
Date: Thu, 20 Apr 2000 07:48:57 -0700 (PDT)
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <000201bfaacc$66cffbe0$1808010a@cyberset.com>
Message-ID: <Pine.LNX.4.21.0004200747310.24852-100000@wookie.shoreline.tandem.com>

On Thu, 20 Apr 2000, Pat Osterday wrote:

> I'm trying to compile the new mppe ppp module on RedHat 6.2 (kernel 2.2.14)
> and get the following errors:
> 
> ppp.c:188: warning: static declaration for
> `ppp_register_compressor_R9682e733' follows non-static
> ppp.c:189: warning: static declaration for
> `ppp_unregister_compressor_Ra1b928df' follows non-static
> ppp.c: In function `rcv_proto_unknown': ppp.c:2563: too few arguments to
> function `kill_fasync_R5e73d35d'
> make[1]: *** [ppp.o] Error 1
> make[1]: Leaving directory `/usr/src/linux-2.2.14/drivers/net'
> make: *** [_mod_drivers/net] Error 2
> 
> I've patched/configure/make/make install/make kernel for ppp-2.3.11 with the
> patch from ftp.binarix.com.
> 
> Any ideas?  I had everything running fine on a RedHat 6.0 box.
> 

--- drivers/net/ppp.c~	Wed Apr 12 19:56:45 2000
+++ drivers/net/ppp.c	Wed Apr 12 20:28:39 2000
@@ -2560,7 +2560,7 @@
 
 	wake_up_interruptible (&ppp->read_wait);
 	if (ppp->tty->fasync != NULL)
-		kill_fasync (ppp->tty->fasync, SIGIO);
+		kill_fasync (ppp->tty->fasync, SIGIO, POLL_IN);
 
 	return 1;
 }

-Tom
-- 
Tom Eastep             \  Eastep's First Principle of Computing:
ICQ #60745924           \  "Any sane computer will tell you how it
teastep at evergo.net       \   works if you ask it the proper questions"
Shoreline, Washington USA \___________________________________________



From geoff at gnaa.net  Thu Apr 20 23:30:24 2000
From: geoff at gnaa.net (Geoff Nordli)
Date: Thu, 20 Apr 2000 21:30:24 -0700
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <000201bfaacc$66cffbe0$1808010a@cyberset.com>
Message-ID: <001701bfab4a$567aef10$0814c2cf@seagatesoftware.com>

That is the same problem that I came accross.  I ended up
using a stock 2.2.14 kernel, and that fixed the errors.

So it must have something to do with a patch that RH applies
to the kernel.

I wonder if it would work on a 2.2.15pre kernel???

Geoff

-----Original Message-----
From: pptp-server-admin at lists.schulte.org
[mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Pat Osterday
Sent: Thursday, April 20, 2000 6:29 AM
To: pptp-server at lists.schulte.org
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)


I'm trying to compile the new mppe ppp module on RedHat 6.2 (kernel 2.2.14)
and get the following errors:

ppp.c:188: warning: static declaration for
`ppp_register_compressor_R9682e733' follows non-static
ppp.c:189: warning: static declaration for
`ppp_unregister_compressor_Ra1b928df' follows non-static
ppp.c: In function `rcv_proto_unknown': ppp.c:2563: too few arguments to
function `kill_fasync_R5e73d35d'
make[1]: *** [ppp.o] Error 1
make[1]: Leaving directory `/usr/src/linux-2.2.14/drivers/net'
make: *** [_mod_drivers/net] Error 2

I've patched/configure/make/make install/make kernel for ppp-2.3.11 with the
patch from ftp.binarix.com.

Any ideas?  I had everything running fine on a RedHat 6.0 box.

--
Pat Osterday, Research and Development Specialist
osterday at cyberset.com

Cyberset Technologies, Inc. - Your Partner In Managing Change(tm)
http://www.cyberset.com/

_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
List services provided by www.schulte.org!



From amacc at iron-bridge.net  Thu Apr 20 13:28:57 2000
From: amacc at iron-bridge.net (Andrew McRory)
Date: Thu, 20 Apr 2000 14:28:57 -0400 (EDT)
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <001701bfab4a$567aef10$0814c2cf@seagatesoftware.com>
Message-ID: <Pine.LNX.4.02.10004201426370.15190-100000@ns1.mailer.org>

On Thu, 20 Apr 2000, Geoff Nordli wrote:

> That is the same problem that I came accross.  I ended up
> using a stock 2.2.14 kernel, and that fixed the errors.
> 
> So it must have something to do with a patch that RH applies
> to the kernel.

Can I just step in and say Red Hat patches their kernel a little too much
to expect any *other* patches to apply normally? You're better off using
a stock kernel, me thinks.


Andrew McRory                                        amacc at iron-bridge.net
Iron Bridge Communications                             www.iron-bridge.net
Caldera OpenLinux Contrib RPMS             ftp.iron-bridge.net/pub/Caldera



From chris at drjcomputing.com  Thu Apr 20 13:48:35 2000
From: chris at drjcomputing.com (chris)
Date: Thu, 20 Apr 2000 14:48:35 -0400
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <01F6FEC1E103D311B944004033A281B202AF1F@mama123>
Message-ID: <01F6FEC1E103D311B944004033A281B2015D2F@mama123>

Does Chap-secrets have two entries?
One for client authentification, and one for server authentification?

Can someone type up a demo chap-secrets and give the server and clients
names, so I can see what that file should look like.

Thanks

Chris Carella



From osterday at cyberset.com  Thu Apr 20 14:09:28 2000
From: osterday at cyberset.com (Pat Osterday)
Date: Thu, 20 Apr 2000 15:09:28 -0400
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <Pine.LNX.4.21.0004200747310.24852-100000@wookie.shoreline.tandem.com>
Message-ID: <001901bfaafb$f45249d0$1808010a@cyberset.com>

Thanks for all the responses.  Tom's little patch did the trick with the
RedHat source.  Sounds like RedHat does quite a bit of their own to the
source they distribute - I don't like that, but I'm a happy camper now,
though!

BTW, I read in the RedHat PoPToP HOWTO that the domainname can be in caps or
lower case - as in domainname\\username.  This is not the case, at least
using mschap.  It _has_ to be in caps or my NT 4.0 SP5 workstation would not
connect.  Thinking about applying the patch to get rid of domainname
altogether...

--
Pat Osterday, Research and Development Specialist
osterday at cyberset.com

Cyberset Technologies, Inc. - Your Partner In Managing Change(tm)
http://www.cyberset.com/

> -----Original Message-----
> From: pptp-server-admin at lists.schulte.org
> [mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Tom Eastep
> Sent: Thursday, April 20, 2000 10:49 AM
> To: Pat Osterday
> Cc: pptp-server at lists.schulte.org
> Subject: Re: [pptp-server] Compiling mppe on RedHat 6.2
> (kernel 2.2.14)
>
>
> On Thu, 20 Apr 2000, Pat Osterday wrote:
>
> > I'm trying to compile the new mppe ppp module on RedHat 6.2
> (kernel 2.2.14)
> > and get the following errors:
> >
> > ppp.c:188: warning: static declaration for
> > `ppp_register_compressor_R9682e733' follows non-static
> > ppp.c:189: warning: static declaration for
> > `ppp_unregister_compressor_Ra1b928df' follows non-static
> > ppp.c: In function `rcv_proto_unknown': ppp.c:2563: too few
> arguments to
> > function `kill_fasync_R5e73d35d'
> > make[1]: *** [ppp.o] Error 1
> > make[1]: Leaving directory `/usr/src/linux-2.2.14/drivers/net'
> > make: *** [_mod_drivers/net] Error 2
> >
> > I've patched/configure/make/make install/make kernel for
> ppp-2.3.11 with the
> > patch from ftp.binarix.com.
> >
> > Any ideas?  I had everything running fine on a RedHat 6.0 box.
> >
>
> --- drivers/net/ppp.c~	Wed Apr 12 19:56:45 2000
> +++ drivers/net/ppp.c	Wed Apr 12 20:28:39 2000
> @@ -2560,7 +2560,7 @@
>
>  	wake_up_interruptible (&ppp->read_wait);
>  	if (ppp->tty->fasync != NULL)
> -		kill_fasync (ppp->tty->fasync, SIGIO);
> +		kill_fasync (ppp->tty->fasync, SIGIO, POLL_IN);
>
>  	return 1;
>  }
>
> -Tom
> --
> Tom Eastep             \  Eastep's First Principle of Computing:
> ICQ #60745924           \  "Any sane computer will tell you how it
> teastep at evergo.net       \   works if you ask it the proper questions"
> Shoreline, Washington USA \___________________________________________
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
>



From hshaw at healthcentralrx.com  Thu Apr 20 14:43:43 2000
From: hshaw at healthcentralrx.com (Terrelle Shaw)
Date: Thu, 20 Apr 2000 12:43:43 -0700
Subject: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)
In-Reply-To: <01F6FEC1E103D311B944004033A281B2015D2F@mama123>
Message-ID: <DAEBJPFLHAJHMDPDKMKKIENDCAAA.hshaw@healthcentralrx.com>

I sent my server setup and client setup back in Feb.. look in the archives
Terrelle


-----Original Message-----
From: pptp-server-admin at lists.schulte.org
[mailto:pptp-server-admin at lists.schulte.org]On Behalf Of chris
Sent: Thursday, April 20, 2000 11:49 AM
To: pptp-server at lists.schulte.org
Subject: RE: [pptp-server] Compiling mppe on RedHat 6.2 (kernel 2.2.14)


Does Chap-secrets have two entries?
One for client authentification, and one for server authentification?

Can someone type up a demo chap-secrets and give the server and clients
names, so I can see what that file should look like.

Thanks

Chris Carella

_______________________________________________
pptp-server maillist  -  pptp-server at lists.schulte.org
http://lists.schulte.org/mailman/listinfo/pptp-server
List services provided by www.schulte.org!


From br at ldl.net  Thu Apr 20 15:28:14 2000
From: br at ldl.net (Ed Street)
Date: Thu, 20 Apr 2000 16:28:14 -0400 (EDT)
Subject: [pptp-server] nt server viewing with pptp
Message-ID: <Pine.LNX.4.20.0004201626270.479-100000@SLaCKWaReZ.ldl.net>

Hello,

Everything seems to be working fine in the domain cept when I try to
access a member server running NT server 4 from the pptp client it returns
errors stating unable to browse.  The server does show up in network
neighborhood and I can browse the domain server (PDC).  Any ideas what's
going on here? it works local but not when remote with poptop.

Ed




From chris at drjcomputing.com  Thu Apr 20 16:24:01 2000
From: chris at drjcomputing.com (chris)
Date: Thu, 20 Apr 2000 17:24:01 -0400
Subject: [pptp-server] Ping an internal IP
In-Reply-To: <01F6FEC1E103D311B944004033A281B202AF3C@mama123>
Message-ID: <01F6FEC1E103D311B944004033A281B2015D30@mama123>

I got my Linux server to give my Win95 box an ipaddress on the local
network. But I cannot ping any machine on the local network. What are some
of the possible reasons why?

-Chris Carella



From natecars at real-time.com  Thu Apr 20 17:45:46 2000
From: natecars at real-time.com (Nate Carlson)
Date: Thu, 20 Apr 2000 17:45:46 -0500 (CDT)
Subject: [pptp-server] Ping an internal IP
In-Reply-To: <01F6FEC1E103D311B944004033A281B2015D30@mama123>
Message-ID: <Pine.LNX.4.10.10004201745390.6141-100000@enchanter.real-time.com>

On Thu, 20 Apr 2000, chris wrote:
> I got my Linux server to give my Win95 box an ipaddress on the local
> network. But I cannot ping any machine on the local network. What are some
> of the possible reasons why?

is ip forwarding enabled?

-- 
Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
http://www.real-time.com                | Fax   : (952)943-8500



From neale at lowendale.com.au  Thu Apr 20 19:40:48 2000
From: neale at lowendale.com.au (Neale Banks)
Date: Fri, 21 Apr 2000 10:40:48 +1000 (EST)
Subject: [pptp-server] Ping an internal IP
In-Reply-To: <01F6FEC1E103D311B944004033A281B2015D30@mama123>
Message-ID: <Pine.LNX.4.05.10004211039320.13458-100000@marina.lowendale.com.au>

On Thu, 20 Apr 2000, chris wrote:

> I got my Linux server to give my Win95 box an ipaddress on the local
> network. But I cannot ping any machine on the local network. What are some
> of the possible reasons why?

1) lack of proxyarp setting in the ppp options

2) filtering on the Linux server (e.g. any ipchains rules?)

HTH,
Neale



From brian at ibsystems.com  Thu Apr 20 19:55:08 2000
From: brian at ibsystems.com (Brian Haney)
Date: Thu, 20 Apr 2000 17:55:08 -0700
Subject: [pptp-server] GRE through ipchains masquerade
Message-ID: <008001bfab2c$3d1350d0$8101a8c0@specter.fresno.cybernaut.com>

I'm sure this must be a frequently-asked-question, but I could not
find the answer in the HOWTOs.

I am running RedHat Linux 6.0 as a gateway between my home LAN and a
PoPToP server at work.  I made sure the router at work would permit
all IP traffic through to the PoPToP server (a RedHat 6.1 box).  My
Windows NT 4.0 RAS client is on a private (192.168.1.0) network behind
the RedHat 6.0 gateway.

                                       (          )
NT client  ----- RH6.0 Gateway  ----- (  INTERNET  ) ------
router ------ RH6.1 PoPToP
192.168.1.129                          (          )
server

209.35.159.52

The RH 6.0 gateway is using ipchains to masquerade my home network.
I have added the rules to accept and forward TCP port 1723 and IP
protocol 47.
A tcpdump on the PoPToP server and the public interface of the Gateway
shows that the Gateway is throwing ICMP no-route packets for proto47
back to the PoPToP server.

What am I missing?
TIA.
--
Brian Haney  VP Engineering/CTO
brian at ibsystems.com  Internet Business Systems, Inc.



From teastep at evergo.net  Thu Apr 20 21:23:11 2000
From: teastep at evergo.net (Tom Eastep)
Date: Thu, 20 Apr 2000 19:23:11 -0700 (PDT)
Subject: [pptp-server] GRE through ipchains masquerade
In-Reply-To: <008001bfab2c$3d1350d0$8101a8c0@specter.fresno.cybernaut.com>
Message-ID: <Pine.LNX.4.21.0004201922040.24852-100000@wookie.shoreline.tandem.com>

On Thu, 20 Apr 2000, Brian Haney wrote:

> I'm sure this must be a frequently-asked-question, but I could not
> find the answer in the HOWTOs.
> 
> I am running RedHat Linux 6.0 as a gateway between my home LAN and a
> PoPToP server at work.  I made sure the router at work would permit
> all IP traffic through to the PoPToP server (a RedHat 6.1 box).  My
> Windows NT 4.0 RAS client is on a private (192.168.1.0) network behind
> the RedHat 6.0 gateway.
> 
>                                        (          )
> NT client  ----- RH6.0 Gateway  ----- (  INTERNET  ) ------
> router ------ RH6.1 PoPToP
> 192.168.1.129                          (          )
> server
> 
> 209.35.159.52
> 
> The RH 6.0 gateway is using ipchains to masquerade my home network.
> I have added the rules to accept and forward TCP port 1723 and IP
> protocol 47.
> A tcpdump on the PoPToP server and the public interface of the Gateway
> shows that the Gateway is throwing ICMP no-route packets for proto47
> back to the PoPToP server.
> 
> What am I missing?

Take a look at http://seawall.sourceforge.net/PPTP.html.

-Tom
-- 
Tom Eastep             \  Eastep's First Principle of Computing:
ICQ #60745924           \  "Any sane computer will tell you how it
teastep at evergo.net       \   works if you ask it the proper questions"
Shoreline, Washington USA \___________________________________________



From ivanm at knowgate.com  Thu Apr 20 23:50:01 2000
From: ivanm at knowgate.com (=?iso-8859-1?Q?Iv=E1n_Montoro_Ten?=)
Date: Fri, 21 Apr 2000 06:50:01 +0200
Subject: [pptp-server] Truly newbie
Message-ID: <B116C530EDCAD311865000C02610602514FD@mercurio>

Hi all,

First of all let me say this VPN implementation is one of the easiest I've
seen. Since I'm realy newbie to Linux and VPN I'm realy glad of getting
something that works.

Second, and before my question, I'll introduce myself. My name is Ivan
Montoro and I'm junion system administrator in a little corporation in
Spain. Someone told me he wants to work from another office via Internet
with Microsoft VPN.

Then, my question: I've followed all steps in RedHat-Howto and my VPN works
fine (well, some minor errors). The only thing I'm not sure if it's my fault
or document's is I have to insmod mppe each time I start VPN daemon via
pptpd.init. Well, just a comment.

Then for testing I've set up a Windows 95 with VPN, and called a local ISP.
Then I run my VPN connection to linux box and connects! I can ping my
"virtual" address (192.168.1.30) and remote "vitual" address (192.168.1.20).
I can also telnet linux box to check out connection, and snooping I see
crypted data. But then I can't ping any other host on my network and can't
open \\SERVER\resource. I think I need to setup also ipchains to masquerade
this IP... Is that the problem?

Another little thing is if I can use my domain security to feed in some way
/etc/ppp/chap.secrets, so security is managed through my PDC. That's a minor
problem, but anti-linux people here will attack penguin's OS by that way.

Thanks a lot in advice,

Ivan Montoro


From hugh at mail.island.net.au  Fri Apr 21 08:03:10 2000
From: hugh at mail.island.net.au (Hugh Blandford)
Date: Fri, 21 Apr 2000 23:03:10 +1000 (EST)
Subject: [pptp-server] Tunnel Dropouts
Message-ID: <Pine.BSF.3.96.1000421230037.24487C-100000@mail.island.net.au>

I have read through the archives and seen people bring this topic up
before but there were no answers.

Connecting to POPTOP and after a period of time the VPN connection is
dropped.  Is this a client issue?  We are using a mixture of Win95/98
machines.

Any suggestions welcome.

Thanks,

Hugh



From hugh at mail.island.net.au  Fri Apr 21 08:17:06 2000
From: hugh at mail.island.net.au (Hugh Blandford)
Date: Fri, 21 Apr 2000 23:17:06 +1000 (EST)
Subject: [pptp-server] No Go Compiling 1.1.1
Message-ID: <Pine.BSF.3.96.1000421230320.24487D-100000@mail.island.net.au>

Hi,

I thought I would give the new version of the server a try having seen
some favourable reports in the archives.  However, I get the following:

gcc -DHAVE_CONFIG_H -I. -I. -I. -I.    -O2 -fno-builtin -Wall -ansi
-DSBINDIR='"/usr/local/sbin"' -c pptpgre.c
pptpgre.c: In function `pptp_gre_init':
pptpgre.c:121: `SOL_IP' undeclared (first use this function)
pptpgre.c:121: (Each undeclared identifier is reported only once
pptpgre.c:121: for each function it appears in.)
*** Error code 1

Stop.

This is on a FreeBSD box with the --with-bsdppp option configured in.

Any suggestions welcome.

Thanks,

Hugh



From bo at erichsen.com  Fri Apr 21 09:00:12 2000
From: bo at erichsen.com (Bo O. Erichsen)
Date: Fri, 21 Apr 2000 16:00:12 +0200
Subject: [pptp-server] ip-masquerade with ip-chains (security?)
Message-ID: <956325612.39005eecd94a0@www.jay.net>

Hi pptp-list.
I've just set up pptp with pppd and ip-chains and it seems to work great..
I couldn't make the ip-chains setup (i read in the howto) to work though.. So 
i'm not sure that my security is up to date..

My set up is:
pptp.conf:

localip 192.168.0.234-238
remoteip 192.168.1.234-238


pptp-clients              fw+pptp               local-net servers
192.168.1.234-238       192.168.0.1             192.168.0.2-233

my rc.firewall is:

/sbin/ipchains -P forward DENY
/sbin/ipchains -A forward -s 192.168.0.0/24 -j MASQ

/sbin/ipchains -A forward -s 192.168.1.0/24 -j MASQ

I'm not sure that this setup is secure enough.. i know it works.. because the 
clients can reach local servers and the internet ..
Anybody has any comments?


--------------
Bo O. Erichsen

Corp. email: bo at jay.net * Priv. email: bo at erichsen.com
Phone: +45 33 36 63 00 * Direct Call +45 33 36 63 04
Cell phone: +45 26 27 13 42

Jay.net
Frederiksgade 7
1265 KBH K
Denmark


From john at netdirect.ca  Fri Apr 21 10:26:52 2000
From: john at netdirect.ca (John Van Ostrand)
Date: Fri, 21 Apr 2000 11:26:52 -0400
Subject: [pptp-server] Truly newbie
Message-ID: <915FE25D5E61D3119CD80080C8E2E70904B064@enterprise.NetDirect.CA>

> 
> First of all let me say this VPN implementation is one of the 
> easiest I've
> seen. Since I'm realy newbie to Linux and VPN I'm realy glad 
> of getting
> something that works.
> 
> Second, and before my question, I'll introduce myself. My name is Ivan
> Montoro and I'm junion system administrator in a little corporation in
> Spain. Someone told me he wants to work from another office 
> via Internet
> with Microsoft VPN.
> 
> Then, my question: I've followed all steps in RedHat-Howto 
> and my VPN works
> fine (well, some minor errors). The only thing I'm not sure 
> if it's my fault
> or document's is I have to insmod mppe each time I start VPN 
> daemon via
> pptpd.init. Well, just a comment.

Sounds like you forgot to add the following line to the /etc/conf.modules
file:

	alias ppp-compress-18 ppp_mppe

 
> Then for testing I've set up a Windows 95 with VPN, and 
> called a local ISP.
> Then I run my VPN connection to linux box and connects! I can ping my
> "virtual" address (192.168.1.30) and remote "vitual" address 
> (192.168.1.20).
> I can also telnet linux box to check out connection, and 
> snooping I see
> crypted data. But then I can't ping any other host on my 
> network and can't
> open \\SERVER\resource. 

Sounds like you need to add the "proxyarp" argument to your /etc/ppp/options
file. You might also want to add "ms-wins w.x.y.z" arguments using your WINS
address instead of w.x.y.z. Check pppd man page for more info on these.

> I think I need to setup also ipchains 
> to masquerade
> this IP... Is that the problem?

This shouldn't be a problem. I haven't done this yet, but you might want to
try the following commands:

	# Default policy
	ipchains -P forward DENY
	# Allow same network forwarding so you can reach your servers
	ipchains -A forward -s 192.168.1.0/24 -d 192.168.1.0/24 -j ACCEPT
	# Masquerade everything else
	ipchains -A forward -s 192.168.1.0/24 -d 0.0.0.0/0 -j MASQ

> Another little thing is if I can use my domain security to 
> feed in some way
> /etc/ppp/chap.secrets, so security is managed through my PDC. 
> That's a minor
> problem, but anti-linux people here will attack penguin's OS 
> by that way.

I've been thinking about this problem for a while and haven't come up with a
solution yet. The real limitation here is that in order to use CHAP
authentication PPPD must have the clear text form of the password. WinNT
stores the password in a hash that can be reveresed, Linux/Unix does not.
This is why CHAP cannot be used with the "login" pppd option.

The only way around this, that I can think of, is to put a RADIUS server on
WinNT and compile pppd with the radius authentication extensions. I haven't
tried this, nor have I spent much time investigating this so at this point
it's just a theory.

Can anyone add to this RADIUS theory???

The work-around (until I can figure out how to do this) is to setup you
chap-secrets file with the domain and logon that is used on the PDC. The
password could be different. If this is setup then Win9x and WinNT users
will be able to access the resources on the NT domain. If the password is
not the same they may have to logon again when first accessing. Here is an
example chap-secrets file:


SALES_DOM\\JSMITH		*	"mypasswd"	*


> Thanks a lot in advice,
> 
> Ivan Montoro


From john at hermsen.cx  Sat Apr 22 15:38:08 2000
From: john at hermsen.cx (John Hermsen)
Date: Sat, 22 Apr 2000 22:38:08 +0200
Subject: [pptp-server] Authentication problem
Message-ID: <KLEGKBGIKCMPMDMMGLGJOEKBCAAA.john@hermsen.cx>

Hi,

I have been trying to get this product to work, but without any luck.
The problem is when I connect to the system and try to authenticate it
disconnects.
The following is reported in the log file:
Apr 22 18:13:38 hermsen pptpd[7393]: CTRL: Client 212.187.48.164 control
connect
ion started
Apr 22 18:13:38 hermsen pptpd[7393]: CTRL: Starting call (launching pppd,
openin
g GRE)
Apr 22 18:13:38 hermsen pppd[7394]: The remote system is required to
authenticat
e itself but I
Apr 22 18:13:38 hermsen pppd[7394]: couldn't find any suitable secret
(password)
 for it to use to do so.
Apr 22 18:13:38 hermsen pptpd[7393]: GRE: read(fd=7,buffer=804d7c0,len=8196)
fro
m PTY failed: status = -1 error = Input/output error
Apr 22 18:13:38 hermsen pptpd[7393]: CTRL: PTY read or GRE write failed
(pty,gre
)=(7,9)
Apr 22 18:13:38 hermsen pptpd[7393]: CTRL: Client 212.187.48.164 control
connect
ion finished.
What could I be forgetting to do?

I'm running RedHat 6.1 and SSLeay-0.9.0b and pptpd-1.0.0.

Regards,
John



From macleajb at EDnet.NS.CA  Sat Apr 22 17:35:48 2000
From: macleajb at EDnet.NS.CA (James MacLean)
Date: Sat, 22 Apr 2000 19:35:48 -0300 (ADT)
Subject: [pptp-server] Authentication problem
In-Reply-To: <KLEGKBGIKCMPMDMMGLGJOEKBCAAA.john@hermsen.cx>
Message-ID: <Pine.LNX.4.10.10004221931290.12436-100000@Trademart-1.ednet.ns.ca>

On Sat, 22 Apr 2000, John Hermsen wrote:

> Apr 22 18:13:38 hermsen pppd[7394]: The remote system is required to
> authenticat e itself but I Apr 22 18:13:38 hermsen pppd[7394]:
> couldn't find any suitable secret (password)
>  for it to use to do so.
> What could I be forgetting to do?

/etc/ppp/chap-secrets

Look to see that you have 2 lines describing your identity with the
name<->remotename reversed in one:

me	you	passwd	*
you	me	passwd	*

That goes for pptpd and pptp if you are using it.
 
> Regards,
> John

JES
--
James B. MacLean        macleajb at ednet.ns.ca
Department of Education http://www.ednet.ns.ca/~macleajb
Nova Scotia, Canada
B3M 4B2
     



From rwierzbicki at stryker.ca  Sat Apr 22 21:46:51 2000
From: rwierzbicki at stryker.ca (Wierzbicki, Ralf)
Date: Sat, 22 Apr 2000 22:46:51 -0400
Subject: [pptp-server] pptp/pppd errors
Message-ID: <8142BE56BFF7D311BC4E00B0D0219AF577EC@mail.stryker.ca.1.67.10.in-addr.arpa>

Hi,

there seem to be some performance issues with pptp/pppd, ssh connections
seem to be very slow and also ifconfig reports interface errors.
Here is the output from ifconfig:

ppp0      Link encap:Point-to-Point Protocol
          inet addr:10.67.1.244  P-t-P:10.67.1.245  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:12030 errors:5 dropped:0 overruns:0 frame:0
          TX packets:14896 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:10

How can I improve reliability/performance of pptpd?
Thanks in advance.

Ralf



From ivanm at knowgate.com  Sun Apr 23 12:26:24 2000
From: ivanm at knowgate.com (=?iso-8859-1?Q?Iv=E1n_Montoro_Ten?=)
Date: Sun, 23 Apr 2000 19:26:24 +0200
Subject: [pptp-server] pppd smb authentication (was: truly newbie)
Message-ID: <B116C530EDCAD311865000C02610602514FE@mercurio>

Hi John,

I've just solved the problem with ipchains, no proxyarp argument needed :)
Thinking about NT authentication I've just seen a tiny module for Apache
called mod_auth_smb that, without samba, can authenticate a NT Domain user.
I know anything about programming, but I'll investigate if I can add an
authentication schema to PPPD to invoke that methods mod_auth_smb has.

>> The only thing I'm not sure if it's my fault
>> or document's is I have to insmod mppe each 
>> time I start VPN daemon via pptpd.init.
> Sounds like you forgot to add the following line to the 
> /etc/conf.modules file: alias ppp-compress-18 ppp_mppe
A little typo. I wrote mpee, not mppe :)
 
>> I can also telnet linux box to check out connection, and 
>> snooping I see crypted data. But then I can't ping any 
>> other host on my network and can't open \\SERVER\resource. 
> Sounds like you need to add the "proxyarp" argument to your
/etc/ppp/options
> file. You might also want to add "ms-wins w.x.y.z" arguments using your
WINS
> address instead of w.x.y.z. Check pppd man page for more info on these.
Well, since I thing WINS stands for Windows Internet Name Service I think
this
will be some kind of DNS for Windows. How can I setup a WINS server? I've
just
installed SAMBA in the same machine for my own file upload (hate windows ftp
:)

>> I think I need to setup also ipchains to masquerade this IP...
> This shouldn't be a problem...
Well, it was for me :)

>> Another little thing is if I can use my domain security to 
>> feed in some way
>> /etc/ppp/chap.secrets, so security is managed through my PDC. 
>> That's a minor
>> problem, but anti-linux people here will attack penguin's OS 
>> by that way.

> I've been thinking about this problem for a while and haven't come up with
a
> solution yet. The real limitation here is that in order to use CHAP
> authentication PPPD must have the clear text form of the password. WinNT
> stores the password in a hash that can be reveresed, Linux/Unix does not.
> This is why CHAP cannot be used with the "login" pppd option.

> The only way around this, that I can think of, is to put a RADIUS server
on
> WinNT and compile pppd with the radius authentication extensions. I
haven't
> tried this, nor have I spent much time investigating this so at this point
> it's just a theory.

> Can anyone add to this RADIUS theory???

> The work-around (until I can figure out how to do this) is to setup you
> chap-secrets file with the domain and logon that is used on the PDC. The
> password could be different. If this is setup then Win9x and WinNT users
> will be able to access the resources on the NT domain. If the password is
> not the same they may have to logon again when first accessing. Here is an
> example chap-secrets file:

> SALES_DOM\\JSMITH		*	"mypasswd"	*

Greetings
Iv?n Montoro Ten


From john at netdirect.ca  Mon Apr 24 08:00:39 2000
From: john at netdirect.ca (John Van Ostrand)
Date: Mon, 24 Apr 2000 09:00:39 -0400
Subject: [pptp-server] pppd smb authentication (was: truly newbie)
Message-ID: <915FE25D5E61D3119CD80080C8E2E70904B067@enterprise.NetDirect.CA>

Setting up WINS is easy if you have Samba. Simply put the following line in
the [global] section of the /etc/smb.conf file:

	wins support = yes

This line is likely already there but commented out.

Alternatively if you have an NT server you can add in the WINS service.

Then to use WINS you'll have to setup each Windows workstations (and non
WINS Samba server) to use your new WINS server. This is required because
each system needs to register itself with the WINS server. This is how WINS
works. You can either manually configure the WINS server in the Network
Control Panel applet or, if you have a DHCP server setup the "option netbios
name servers" line. A DHCP server is available for Linux, watch out though,
one is a DHCP client daemon - dhcpcd, the other is the server. If you
install this read the dhcp-options man page.

John.

> -----Original Message-----
> From: Iv?n Montoro Ten [mailto:ivanm at knowgate.com]
> Sent: Sunday, April 23, 2000 1:26 PM
> To: 'John Van Ostrand'; Pptp-List (E-mail)
> Subject: RE: [pptp-server] pppd smb authentication (was: truly newbie)
> 
> 
> Hi John,
> 
> I've just solved the problem with ipchains, no proxyarp 
> argument needed :)
> Thinking about NT authentication I've just seen a tiny module 
> for Apache
> called mod_auth_smb that, without samba, can authenticate a 
> NT Domain user.
> I know anything about programming, but I'll investigate if I 
> can add an
> authentication schema to PPPD to invoke that methods mod_auth_smb has.
> 
> >> The only thing I'm not sure if it's my fault
> >> or document's is I have to insmod mppe each 
> >> time I start VPN daemon via pptpd.init.
> > Sounds like you forgot to add the following line to the 
> > /etc/conf.modules file: alias ppp-compress-18 ppp_mppe
> A little typo. I wrote mpee, not mppe :)
>  
> >> I can also telnet linux box to check out connection, and 
> >> snooping I see crypted data. But then I can't ping any 
> >> other host on my network and can't open \\SERVER\resource. 
> > Sounds like you need to add the "proxyarp" argument to your
> /etc/ppp/options
> > file. You might also want to add "ms-wins w.x.y.z" 
> arguments using your
> WINS
> > address instead of w.x.y.z. Check pppd man page for more 
> info on these.
> Well, since I thing WINS stands for Windows Internet Name 
> Service I think
> this
> will be some kind of DNS for Windows. How can I setup a WINS 
> server? I've
> just
> installed SAMBA in the same machine for my own file upload 
> (hate windows ftp
> :)
> 
> >> I think I need to setup also ipchains to masquerade this IP...
> > This shouldn't be a problem...
> Well, it was for me :)
> 
> >> Another little thing is if I can use my domain security to 
> >> feed in some way
> >> /etc/ppp/chap.secrets, so security is managed through my PDC. 
> >> That's a minor
> >> problem, but anti-linux people here will attack penguin's OS 
> >> by that way.
> 
> > I've been thinking about this problem for a while and 
> haven't come up with
> a
> > solution yet. The real limitation here is that in order to use CHAP
> > authentication PPPD must have the clear text form of the 
> password. WinNT
> > stores the password in a hash that can be reveresed, 
> Linux/Unix does not.
> > This is why CHAP cannot be used with the "login" pppd option.
> 
> > The only way around this, that I can think of, is to put a 
> RADIUS server
> on
> > WinNT and compile pppd with the radius authentication extensions. I
> haven't
> > tried this, nor have I spent much time investigating this 
> so at this point
> > it's just a theory.
> 
> > Can anyone add to this RADIUS theory???
> 
> > The work-around (until I can figure out how to do this) is 
> to setup you
> > chap-secrets file with the domain and logon that is used on 
> the PDC. The
> > password could be different. If this is setup then Win9x 
> and WinNT users
> > will be able to access the resources on the NT domain. If 
> the password is
> > not the same they may have to logon again when first 
> accessing. Here is an
> > example chap-secrets file:
> 
> > SALES_DOM\\JSMITH		*	"mypasswd"	*
> 
> Greetings
> Iv?n Montoro Ten
> 


From barjunk at attglobal.net  Mon Apr 24 15:26:11 2000
From: barjunk at attglobal.net (Michael Barsalou)
Date: Mon, 24 Apr 2000 12:26:11 -0800
Subject: [pptp-server] RedHat 6.2 and compile problems
Message-ID: <200004242035.e3OKZ0b10430@snaildust.schulte.org>

Have the compile problems been straightened out?  I saw someone 
posted a patch.  Maybe we can make it available as a file?


I'm referring to the problems people were having with the redhat 
kernel 2.2.14.


Mike


Michael Barsalou
barjunk at attglobal.net


From br at ldl.net  Mon Apr 24 15:10:48 2000
From: br at ldl.net (Ed Street)
Date: Mon, 24 Apr 2000 16:10:48 -0400 (EDT)
Subject: [pptp-server] trust relations
Message-ID: <Pine.LNX.4.20.0004241609550.281-100000@SLaCKWaReZ.ldl.net>

Hello,

I have an interesting issue.  When I connect in with pptpd/pppd I can't
access any of the nt trusts machines but I can locally.  Any ideas why?

Ed




From teastep at evergo.net  Mon Apr 24 17:22:10 2000
From: teastep at evergo.net (Tom Eastep)
Date: Mon, 24 Apr 2000 15:22:10 -0700 (PDT)
Subject: [pptp-server] RedHat 6.2 and compile problems
In-Reply-To: <200004242035.e3OKZ0b10430@snaildust.schulte.org>
Message-ID: <Pine.LNX.4.21.0004241519250.888-100000@wookie.eastep.dsl.evergo.net>

On Mon, 24 Apr 2000, Michael Barsalou wrote:

> Have the compile problems been straightened out?  I saw someone 
> posted a patch.  Maybe we can make it available as a file?
> 
> 
> I'm referring to the problems people were having with the redhat 
> kernel 2.2.14.
> 

I've made the patch available at: 

	ftp://seawall.sourceforge.net/pub/Seawall/patches/ppp.patch

My patch to pptp-linux-1.02 is in that same directory.

-Tom
-- 
Tom Eastep             \  Eastep's First Principle of Computing:
ICQ #60745924           \  "Any sane computer will tell you how it
teastep at evergo.net       \   works if you ask it the proper questions"
Shoreline, Washington USA \___________________________________________



From geoff at gnaa.net  Mon Apr 24 17:32:59 2000
From: geoff at gnaa.net (Geoff Nordli)
Date: Mon, 24 Apr 2000 15:32:59 -0700
Subject: [pptp-server] RedHat 6.2 and compile problems
In-Reply-To: <200004242035.e3OKZ0b10430@snaildust.schulte.org>
Message-ID: <005f01bfae3d$0c3cc310$0101a8c0@highwayi.com>

Here is the patch that was posted:

--- drivers/net/ppp.c~	Wed Apr 12 19:56:45 2000
+++ drivers/net/ppp.c	Wed Apr 12 20:28:39 2000
@@ -2560,7 +2560,7 @@
 
 	wake_up_interruptible (&ppp->read_wait);
 	if (ppp->tty->fasync != NULL)
-		kill_fasync (ppp->tty->fasync, SIGIO);
+		kill_fasync (ppp->tty->fasync, SIGIO, POLL_IN);
 
 	return 1;
 }


It would be a good idea if it was put on the web page somewhere.

geoff nordli


> -----Original Message-----
> From: pptp-server-admin at lists.schulte.org
> [mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Michael
> Barsalou
> Sent: Monday, April 24, 2000 1:26 PM
> To: pptp-server at lists.schulte.org
> Subject: [pptp-server] RedHat 6.2 and compile problems
> 
> 
> Have the compile problems been straightened out?  I saw someone 
> posted a patch.  Maybe we can make it available as a file?
> 
> 
> I'm referring to the problems people were having with the redhat 
> kernel 2.2.14.
> 
> 
> Mike
> 
> 
> Michael Barsalou
> barjunk at attglobal.net
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
> 


From MillsD at datametrics.co.uk  Wed Apr 26 03:17:35 2000
From: MillsD at datametrics.co.uk (Dave Mills)
Date: Wed, 26 Apr 2000 09:17:35 +0100
Subject: [pptp-server] PPTP FreeBSD Routing/Netmask
Message-ID: <A1040B4B81C3D311A23D00C0DFEE43AE0DF309@lion.datametrics.co.uk>

Hi, 

I'm using pptpd on FreeBSD in my DMZ., allocating ip's from the DMZ to
users.  The router in between the DMZ and protected net allows (for the
moment) all access to the protected net. My problems are two-fold :

1.	The tunnel is showing a netmask of 255.255.255.255 to my W2K box and
a netmask of 255.0.0.0 to an NT box, the actual netmask of the network is
255.255.255.0. Is there any way of forcing this?? I have tried adding
netmask to the ppp.conf.

2.	It seems that ALL data from the client is being passed to the VPN
server and creating a hell of a lot of traffic, if I remove the "Use default
gateway...." option on the client, the clients cannot get to the protected
network! Can I force an addition to the routing table on the client, or is
there some other way of doing this. I guess I really need to have packets
from the DMZ and protected networks (totally different IP range) passed down
the tunnel and all other traffic out onto the net from the client.

Dave

PS, Does anyone know if MPPE patches are available for FreeBSD's pppd ? The
Linux ones won't compile, and I can see anyone in the archives who actually
made this work


From john at hermsen.cx  Wed Apr 26 15:44:39 2000
From: john at hermsen.cx (John Hermsen)
Date: Wed, 26 Apr 2000 22:44:39 +0200
Subject: [pptp-server] IPX Problem
Message-ID: <KLEGKBGIKCMPMDMMGLGJKEKICAAA.john@hermsen.cx>

Hello,

I have IPX working at least according to the log files of pptp, but
when I try to use it with Tiberian Sun I don't see any lan game.
Now I also read something about specifying the subnet in the network
settings, but where do I find the subnet that I need to use for
Tiberian Sun?

Best Regards,
John


From br at ldl.net  Wed Apr 26 16:31:08 2000
From: br at ldl.net (Ed Street)
Date: Wed, 26 Apr 2000 17:31:08 -0400 (EDT)
Subject: [pptp-server] IPX Problem
In-Reply-To: <KLEGKBGIKCMPMDMMGLGJKEKICAAA.john@hermsen.cx>
Message-ID: <Pine.LNX.4.20.0004261730470.439-100000@SLaCKWaReZ.ldl.net>

Hello,

You have pptp working with dialin ipx connections?  can you send me your
config files please?

Ed


On Wed, 26 Apr 2000, John Hermsen wrote:

>Hello,
>
>I have IPX working at least according to the log files of pptp, but
>when I try to use it with Tiberian Sun I don't see any lan game.
>Now I also read something about specifying the subnet in the network
>settings, but where do I find the subnet that I need to use for
>Tiberian Sun?
>
>Best Regards,
>John
>_______________________________________________
>pptp-server maillist  -  pptp-server at lists.schulte.org
>http://lists.schulte.org/mailman/listinfo/pptp-server
>List services provided by www.schulte.org!
>



From tmk at netmagic.net  Wed Apr 26 16:37:00 2000
From: tmk at netmagic.net (tmk)
Date: Wed, 26 Apr 2000 14:37:00 -0700
Subject: [pptp-server] IPX Problem
References: <KLEGKBGIKCMPMDMMGLGJKEKICAAA.john@hermsen.cx>
Message-ID: <002001bfafc7$8e297ea0$071c0fc0@lala.net>

the subnet setting is in the network options of tiberean sun.. you can
specify the remote network you want to use

kevin
----- Original Message -----
From: John Hermsen <john at hermsen.cx>
To: <pptp-server at lists.schulte.org>
Sent: Wednesday, April 26, 2000 1:44 PM
Subject: [pptp-server] IPX Problem


> Hello,
>
> I have IPX working at least according to the log files of pptp, but
> when I try to use it with Tiberian Sun I don't see any lan game.
> Now I also read something about specifying the subnet in the network
> settings, but where do I find the subnet that I need to use for
> Tiberian Sun?
>
> Best Regards,
> John
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
>



From ballaire at lightband.com  Wed Apr 26 18:42:49 2000
From: ballaire at lightband.com (Bill A.)
Date: Wed, 26 Apr 2000 19:42:49 -0400
Subject: [pptp-server] Win2k - 128 fine -- Win98 only 40
Message-ID: <001901bfafd9$21669c00$2ac74fc7@kersur.net>

Hi all,
   Had no problems getting PopTop up and running.  Put in the
High-Encryption pack for Win2k and I get 128-bit stateless encryption.  I
wish I could say the same for Windows 98.  As per the instructions I
downloaded the VPN update.  I have no problem connected and accessing shared
drives on the subnet behind the server, I just cannot get 128-bit.  Here are
some things I've done:

- Downloaded VPN Update
- Downloaded High-Encryption (128-bit) for Win98
- Did the three-step install/uninstall/install instructions for MS VPN
- Put "ForceStrongEncryption" into the registry after the above didn't work

I did see a link in the archives for 128-bit upgrade for NT that also had
one for 98 in the pull-down list box and that refuses to install,
complaining of a wrong version of DUN.  I finally located the DUN40.exe and
that won't install either and mentions 40-bit which I already have.

I usually keep up on the updates on the MS site so I'm sure my system is
quite a state of disarray.  I don't want to reinstall 98 to try and get
things working from a "clean" system.  Any ideas? Is there a certain way to
install each package required? The fact that Win2k gets 128 tells me
everything appears OK on the Linux box.

Bill



From macleajb at EDnet.NS.CA  Wed Apr 26 19:46:53 2000
From: macleajb at EDnet.NS.CA (James MacLean)
Date: Wed, 26 Apr 2000 21:46:53 -0300 (ADT)
Subject: [pptp-server] Code to use smbpasswd for pppd chap_ms authentication
In-Reply-To: <Pine.LNX.4.20.0004261730470.439-100000@SLaCKWaReZ.ldl.net>
Message-ID: <Pine.LNX.4.10.10004262129220.15016-100000@Trademart-1.ednet.ns.ca>

Hi folks,

This is ceratinly not for the pizza, but it is a little patch that allows
smbpasswd file to be used for authentication. I'm just trying to get a
handle on what we are up against to attempt PAM/LDAP/Radius
authentication. This does _not_ use my old radius hack (that never was
posted but was available at http://www.ednet.ns.ca/~macleajb/chapauth1.tgz
as a mess). 

This small patch available at:

http://www.ednet.ns.ca/~macleajb/pppsmb.pat

can be tested as follows:

. Install libsmbpw available at :
  http://www.mssl.ucl.ac.uk/~atp/comp/libsmb/libsmbpw-1.1.tar.gz and 
  move the libs to /usr/local/lib or wherever you may want.
  (this patch includes the 1 header file for linking)
. Compile pppd to make sure it is ready as is.
. Apply this patch. I am using ppp-2.3.11, but with some work it
  should work for everyone.
. Make and install as usuall.
. Add a line (usually to the end) to /etc/ppp/chap-secrets as:
  * * &/etc/smbpasswd *
  which means get passwd from /etc/smbpasswd
. try a pptp <ip> debug name <smbpasswdname> and go from there.

BUGS:
 . When no match is found it tries to use a blank passwd to match with.
   Easy enough to fix I hope.

No Warranty, No expectations.

JES
--
James B. MacLean        macleajb at ednet.ns.ca
Department of Education http://www.ednet.ns.ca/~macleajb
Nova Scotia, Canada
B3M 4B2
     



From Patrick at reidworld.dynip.com  Thu Apr 27 01:13:05 2000
From: Patrick at reidworld.dynip.com (Patrick Reid)
Date: Thu, 27 Apr 2000 03:13:05 -0300
Subject: [pptp-server] Win2k - 128 fine -- Win98 only 40
In-Reply-To: <001901bfafd9$21669c00$2ac74fc7@kersur.net>
Message-ID: <NBBBIEENKKBNLBCJKFNHEEDKEEAA.Patrick@reidworld.dynip.com>

I had a similar problem installing the 128-bit update right around the new
year: I posted to the list how I got it installed. I include the message:

---------------------------------------

From br at ldl.net  Thu Apr 27 07:35:17 2000
From: br at ldl.net (Ed Street)
Date: Thu, 27 Apr 2000 08:35:17 -0400 (EDT)
Subject: [pptp-server] data encryption
Message-ID: <Pine.LNX.4.20.0004270834380.439-100000@SLaCKWaReZ.ldl.net>

Hello,

Does anyone have the data encryption working or is it still broke?  

Ed




From dxf at dewittross.com  Thu Apr 27 08:37:42 2000
From: dxf at dewittross.com (Daniell Freed)
Date: Thu, 27 Apr 2000 08:37:42 -0500
Subject: [pptp-server] IPX Problem
References: <Pine.LNX.4.20.0004261730470.439-100000@SLaCKWaReZ.ldl.net>
Message-ID: <390842A6.8302FE28@dewittross.com>

Actually could you post the process that you used to get it working as
well?  I would be very interested.  I played around with this for a week or
so and had absolutely no success (I even managed to a kernel panic on my
pptp server when I enabled an IPX option in the kernel).

Thanks

Dan

Ed Street wrote:

> Hello,
>
> You have pptp working with dialin ipx connections?  can you send me your
> config files please?
>
> Ed
>
> On Wed, 26 Apr 2000, John Hermsen wrote:
>
> >Hello,
> >
> >I have IPX working at least according to the log files of pptp, but
> >when I try to use it with Tiberian Sun I don't see any lan game.
> >Now I also read something about specifying the subnet in the network
> >settings, but where do I find the subnet that I need to use for
> >Tiberian Sun?
> >
> >Best Regards,
> >John
> >_______________________________________________
> >pptp-server maillist  -  pptp-server at lists.schulte.org
> >http://lists.schulte.org/mailman/listinfo/pptp-server
> >List services provided by www.schulte.org!
> >
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!

--
Daniell Freed
Computer Services
Dewitt, Ross, & Stevens

He who fights with monsters might take care
lest he thereby become a monster.
And if you gaze for long into an abyss,
the abyss gazes also into you.

Beyond Good and Evil
Friedrich Wilhelm Nietzche





From john at netdirect.ca  Thu Apr 27 12:01:42 2000
From: john at netdirect.ca (John Van Ostrand)
Date: Thu, 27 Apr 2000 13:01:42 -0400
Subject: [pptp-server] data encryption
Message-ID: <915FE25D5E61D3119CD80080C8E2E70904B07A@enterprise.NetDirect.CA>

Mine seems to be working fine. I have the "Require Encrypted data" flag set
on my NT 4.0 client and it connects.

The server is RedHat 6.1 and I built it using the RedHat howto.

John.

> -----Original Message-----
> From: Ed Street [mailto:br at ldl.net]
> Sent: Thursday, April 27, 2000 8:35 AM
> To: pptp-server at lists.schulte.org
> Subject: [pptp-server] data encryption
> 
> 
> Hello,
> 
> Does anyone have the data encryption working or is it still broke?  
> 
> Ed
> 
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
> 


From christopher at schulte.org  Thu Apr 27 12:30:50 2000
From: christopher at schulte.org (Christopher Schulte)
Date: Thu, 27 Apr 2000 12:30:50 -0500
Subject: [pptp-server] Fwd: Data compression with Windows client
Message-ID: <4.3.1.0.20000427122852.00b9ec30@pop.schulte.org>

Please reply directly to the poster.

>From: "Stuckenberger, Patrick" <P.Stuckenberger at SYSTEMICA.COM>
>To: "'pptp-server-admin at lists.schulte.org'"
>         <pptp-server-admin at lists.schulte.org>
>Subject: Data compression with Windows client
>Date: Thu, 27 Apr 2000 15:17:22 +0200
>X-Mailer: Internet Mail Service (5.5.2650.21)
>Sender: pptp-server-admin at lists.schulte.org
>X-BeenThere: pptp-server at lists.schulte.org
>X-Mailman-Version: 2.0beta2
>List-Id: The Linux PPTP Server <pptp-server.lists.schulte.org>
>
>is it possible?
>
>Thank you


--
Christopher Schulte | christopher at schulte.org
cell:612.986.4859   | home:651.225.4557 | fax: 651.315.3339
page:612.264.1115   | free:877.271.9245 | site:schulte.org



From Sukesh.Garg at netpredict.com  Fri Apr 28 04:57:41 2000
From: Sukesh.Garg at netpredict.com (Sukesh Garg)
Date: Fri, 28 Apr 2000 02:57:41 -0700
Subject: [pptp-server] Bug
Message-ID: <038b01bfb0f8$32bd7bc0$2e729dd1@saraswati>

Hi.
   I have the PopTop Server(1.0.0) on my linux machine.  I connect to it
using my NT box. Everything works fine.

 Then after a couple of hours later all the tcp connections hang. I can see
udp, icmp packets moving around but tcp packets stop. The log records
messages like:
 shi: identd[1490]:Returned:62058,110, NO USER
 shi: identd[1500]:Returned:62058,23, NO USER

Can  anyone explain whats going on ?

Thanks,
Sukesh



From Thierry.Coutelier at linux.lu  Fri Apr 28 11:10:18 2000
From: Thierry.Coutelier at linux.lu (Thierry Coutelier)
Date: Fri, 28 Apr 2000 18:10:18 +0200
Subject: [pptp-server] PAP Radius authentication for pppd
Message-ID: <3909B7EA.C026F440@linux.lu>

I wrote a small script that makes pap authentication 
   and sets the IP address.
It uses radiusclient and works at least with XT-Radius
(schould work with any radius server)

You should be able to download it from:
  ftp://ftp.linux.lu/pub/people/thierry/papradius-1.0.0.tgz

It's not much and not documented yet.

You need radiusclient libraries.

You decompress the file in the source directory of pppd and
compile/install it:

cd ppp-2.3.11/pppd
tar xzvf papradius-1.0.0.tgz
cd plugins
make
make install

In your /etc/ppp/options you add:

plugin /usr/local/lib/papradius.so


I'm working on the chapradius module but this one is more tricky as I 
   had to add a hook myself. 
   

-- 
Thierry Coutelier
http://www.prophecy.lu
http://www.linux.lu


From sergio at omnitracs.com.mx  Fri Apr 28 11:33:46 2000
From: sergio at omnitracs.com.mx (Sergio Dominguez)
Date: Fri, 28 Apr 2000 10:33:46 -0600
Subject: [pptp-server] Problems with NT SP6???
Message-ID: <3909BD69.ABCCFBA4@omnitracs.com.mx>

Hello listers:


 I have a linux pptp server working just OK
with W95,W98,WNT4 SP4,WNT4 SP5
but it just doesnt work with NT4 SP6.
The client just wont connect!!!!!!!!!!!!

Anybody else having this problem?

Distribution: Redhat 6.0
Kernel  2.2.5-15
PoPToP: 1.0.0
PPP: 2.3.8

This is a pptpd.log example:

Apr 26 17:16:43 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
connection started
Apr 26 17:16:51 vpn pptpd[14234]: CTRL: Starting call (launching pppd,
opening GRE)
Apr 26 17:16:51 vpn pppd[14235]: pppd 2.3.8 started by root, uid 0
Apr 26 17:16:51 vpn pppd[14235]: Using interface ppp0
Apr 26 17:16:51 vpn pppd[14235]: Connect: ppp0 <--> /dev/pts/1
Apr 26 17:16:51 vpn pppd[14235]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap 81> <magic 0x68550a0> <pcom
p> <accomp>]
Apr 26 17:17:18 vpn last message repeated 9 times
Apr 26 17:17:21 vpn pppd[14235]: LCP: timeout sending Config-Requests
Apr 26 17:17:21 vpn pptpd[14234]: GRE:
read(fd=4,buffer=804d7e0,len=8196) from PTY failed: status = -1 error =
Input/output error
Apr 26 17:17:21 vpn pptpd[14234]: CTRL: PTY read or GRE write failed
(pty,gre)=(4,5)
Apr 26 17:17:21 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
connection finished
Apr 26 17:17:21 vpn pppd[14235]: Connection terminated.
Apr 26 17:17:21 vpn pppd[14235]: Exit.




From john at netdirect.ca  Fri Apr 28 12:12:01 2000
From: john at netdirect.ca (John Van Ostrand)
Date: Fri, 28 Apr 2000 13:12:01 -0400
Subject: [pptp-server] Problems with NT SP6???
Message-ID: <915FE25D5E61D3119CD80080C8E2E70904B087@enterprise.NetDirect.CA>

Sergio,

I have PPTP working with Win2000 with RedHat 6.1 as the pptp server.

John.

> -----Original Message-----
> From: Sergio Dominguez [mailto:sergio at omnitracs.com.mx]
> Sent: Friday, April 28, 2000 12:34 PM
> To: Lista PPTP
> Subject: [pptp-server] Problems with NT SP6???
> 
> 
> Hello listers:
> 
> 
>  I have a linux pptp server working just OK
> with W95,W98,WNT4 SP4,WNT4 SP5
> but it just doesnt work with NT4 SP6.
> The client just wont connect!!!!!!!!!!!!
> 
> Anybody else having this problem?
> 
> Distribution: Redhat 6.0
> Kernel  2.2.5-15
> PoPToP: 1.0.0
> PPP: 2.3.8
> 
> This is a pptpd.log example:
> 
> Apr 26 17:16:43 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
> connection started
> Apr 26 17:16:51 vpn pptpd[14234]: CTRL: Starting call (launching pppd,
> opening GRE)
> Apr 26 17:16:51 vpn pppd[14235]: pppd 2.3.8 started by root, uid 0
> Apr 26 17:16:51 vpn pppd[14235]: Using interface ppp0
> Apr 26 17:16:51 vpn pppd[14235]: Connect: ppp0 <--> /dev/pts/1
> Apr 26 17:16:51 vpn pppd[14235]: sent [LCP ConfReq id=0x1 
> <asyncmap 0x0>
> <auth chap 81> <magic 0x68550a0> <pcom
> p> <accomp>]
> Apr 26 17:17:18 vpn last message repeated 9 times
> Apr 26 17:17:21 vpn pppd[14235]: LCP: timeout sending Config-Requests
> Apr 26 17:17:21 vpn pptpd[14234]: GRE:
> read(fd=4,buffer=804d7e0,len=8196) from PTY failed: status = 
> -1 error =
> Input/output error
> Apr 26 17:17:21 vpn pptpd[14234]: CTRL: PTY read or GRE write failed
> (pty,gre)=(4,5)
> Apr 26 17:17:21 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
> connection finished
> Apr 26 17:17:21 vpn pppd[14235]: Connection terminated.
> Apr 26 17:17:21 vpn pppd[14235]: Exit.
> 
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
> 


From sergio at omnitracs.com.mx  Fri Apr 28 14:33:14 2000
From: sergio at omnitracs.com.mx (Sergio Dominguez)
Date: Fri, 28 Apr 2000 13:33:14 -0600
Subject: [pptp-server] Problems with NT SP6???
References: <915FE25D5E61D3119CD80080C8E2E70904B087@enterprise.NetDirect.CA>
Message-ID: <3909E779.4A6DB738@omnitracs.com.mx>

Well I was actually wondering if there is an issue with
support pack 6 in NT especifically. Because its the only kind of
client that is not working with my setup.

John Van Ostrand wrote:

> Sergio,
>
> I have PPTP working with Win2000 with RedHat 6.1 as the pptp server.
>
> John.
>
> > -----Original Message-----
> > From: Sergio Dominguez [mailto:sergio at omnitracs.com.mx]
> > Sent: Friday, April 28, 2000 12:34 PM
> > To: Lista PPTP
> > Subject: [pptp-server] Problems with NT SP6???
> >
> >
> > Hello listers:
> >
> >
> >  I have a linux pptp server working just OK
> > with W95,W98,WNT4 SP4,WNT4 SP5
> > but it just doesnt work with NT4 SP6.
> > The client just wont connect!!!!!!!!!!!!
> >
> > Anybody else having this problem?
> >
> > Distribution: Redhat 6.0
> > Kernel  2.2.5-15
> > PoPToP: 1.0.0
> > PPP: 2.3.8
> >
> > This is a pptpd.log example:
> >
> > Apr 26 17:16:43 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
> > connection started
> > Apr 26 17:16:51 vpn pptpd[14234]: CTRL: Starting call (launching pppd,
> > opening GRE)
> > Apr 26 17:16:51 vpn pppd[14235]: pppd 2.3.8 started by root, uid 0
> > Apr 26 17:16:51 vpn pppd[14235]: Using interface ppp0
> > Apr 26 17:16:51 vpn pppd[14235]: Connect: ppp0 <--> /dev/pts/1
> > Apr 26 17:16:51 vpn pppd[14235]: sent [LCP ConfReq id=0x1
> > <asyncmap 0x0>
> > <auth chap 81> <magic 0x68550a0> <pcom
> > p> <accomp>]
> > Apr 26 17:17:18 vpn last message repeated 9 times
> > Apr 26 17:17:21 vpn pppd[14235]: LCP: timeout sending Config-Requests
> > Apr 26 17:17:21 vpn pptpd[14234]: GRE:
> > read(fd=4,buffer=804d7e0,len=8196) from PTY failed: status =
> > -1 error =
> > Input/output error
> > Apr 26 17:17:21 vpn pptpd[14234]: CTRL: PTY read or GRE write failed
> > (pty,gre)=(4,5)
> > Apr 26 17:17:21 vpn pptpd[14234]: CTRL: Client 148.233.147.46 control
> > connection finished
> > Apr 26 17:17:21 vpn pppd[14235]: Connection terminated.
> > Apr 26 17:17:21 vpn pppd[14235]: Exit.
> >
> >
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > List services provided by www.schulte.org!
> >
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!



From geoff at gnaa.net  Fri Apr 28 16:46:20 2000
From: geoff at gnaa.net (Geoff Nordli)
Date: Fri, 28 Apr 2000 14:46:20 -0700
Subject: [pptp-server] Problems with NT SP6???
In-Reply-To: <3909E779.4A6DB738@omnitracs.com.mx>
Message-ID: <005601bfb15b$314db620$0101a8c0@highwayi.com>

No issues with NT4 SP6.  I have a couple of machines running on it.

> -----Original Message-----
> From: pptp-server-admin at lists.schulte.org 
> [mailto:pptp-server-admin at lists.schulte.org]On Behalf Of 
> Sergio Dominguez
> Sent: Friday, April 28, 2000 12:33 PM
> Cc: Lista PPTP
> Subject: Re: [pptp-server] Problems with NT SP6???
> 
> 
> 
> Well I was actually wondering if there is an issue with
> support pack 6 in NT especifically. Because its the only kind of
> client that is not working with my setup.
> 
> John Van Ostrand wrote:
> 
> > Sergio,
> >
> > I have PPTP working with Win2000 with RedHat 6.1 as the pptp server.
> >
> > John.
> >
> > > -----Original Message-----
> > > From: Sergio Dominguez [mailto:sergio at omnitracs.com.mx]
> > > Sent: Friday, April 28, 2000 12:34 PM
> > > To: Lista PPTP
> > > Subject: [pptp-server] Problems with NT SP6???
> > >
> > >
> > > Hello listers:
> > >
> > >
> > >  I have a linux pptp server working just OK
> > > with W95,W98,WNT4 SP4,WNT4 SP5
> > > but it just doesnt work with NT4 SP6.
> > > The client just wont connect!!!!!!!!!!!!
> > >
> > > Anybody else having this problem?
> > >
> > > Distribution: Redhat 6.0
> > > Kernel  2.2.5-15
> > > PoPToP: 1.0.0
> > > PPP: 2.3.8
> > >
> > > This is a pptpd.log example:
> > >
> > > Apr 26 17:16:43 vpn pptpd[14234]: CTRL: Client 
> 148.233.147.46 control
> > > connection started
> > > Apr 26 17:16:51 vpn pptpd[14234]: CTRL: Starting call 
> (launching pppd,
> > > opening GRE)
> > > Apr 26 17:16:51 vpn pppd[14235]: pppd 2.3.8 started by root, uid 0
> > > Apr 26 17:16:51 vpn pppd[14235]: Using interface ppp0
> > > Apr 26 17:16:51 vpn pppd[14235]: Connect: ppp0 <--> /dev/pts/1
> > > Apr 26 17:16:51 vpn pppd[14235]: sent [LCP ConfReq id=0x1
> > > <asyncmap 0x0>
> > > <auth chap 81> <magic 0x68550a0> <pcom
> > > p> <accomp>]
> > > Apr 26 17:17:18 vpn last message repeated 9 times
> > > Apr 26 17:17:21 vpn pppd[14235]: LCP: timeout sending 
> Config-Requests
> > > Apr 26 17:17:21 vpn pptpd[14234]: GRE:
> > > read(fd=4,buffer=804d7e0,len=8196) from PTY failed: status =
> > > -1 error =
> > > Input/output error
> > > Apr 26 17:17:21 vpn pptpd[14234]: CTRL: PTY read or GRE 
> write failed
> > > (pty,gre)=(4,5)
> > > Apr 26 17:17:21 vpn pptpd[14234]: CTRL: Client 
> 148.233.147.46 control
> > > connection finished
> > > Apr 26 17:17:21 vpn pppd[14235]: Connection terminated.
> > > Apr 26 17:17:21 vpn pppd[14235]: Exit.
> > >
> > >
> > > _______________________________________________
> > > pptp-server maillist  -  pptp-server at lists.schulte.org
> > > http://lists.schulte.org/mailman/listinfo/pptp-server
> > > List services provided by www.schulte.org!
> > >
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > List services provided by www.schulte.org!
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulte.org!
>