[pptp-server] PPTP client connects but can't ping?

[Eric H. Raskin]

Hello all:

It's me again, with a problem from a different client.  We had a working system
up until yesterday, when they added an NT Server to their environment, and
changed everything to a domain logon.

The first problem was easy -- adding the domain name to the front of the
chap-secrets usernames.  Been there, done that.  Now, they authenticate fine.
The PPTP connection comes up OK.  Just, nothing happens after that.  Can't
ping... Can't access servers... nothing.  (They are running from a Windows 98
box).

I do see this stuff in the log, which makes me think the PPTP connection is
fine:

Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Received PPTP Control Message (type: 5)
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Received PPTP Control Message (type: 5)
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Made a ECHO RPLY packet
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Made a ECHO RPLY packet
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: I wrote 20 bytes to the client.
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: I wrote 20 bytes to the client.
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Sent packet to client
Jun 15 14:22:13 pluto pptpd[7319]: CTRL: Sent packet to client
Jun 15 14:22:42 pluto pppd[7320]: sent [LCP EchoReq id=0xf magic=0xdf3304fe]
Jun 15 14:22:42 pluto pppd[7320]: Timeout 0x8053384:0x8079380 in 30 seconds.
Jun 15 14:22:43 pluto pppd[7320]: rcvd [LCP EchoRep id=0xf magic=0x10d686]
Jun 15 14:23:12 pluto pppd[7320]: sent [LCP EchoReq id=0x10 magic=0xdf3304fe]
Jun 15 14:23:12 pluto pppd[7320]: Timeout 0x8053384:0x8079380 in 30 seconds.
Jun 15 14:23:13 pluto pppd[7320]: rcvd [LCP EchoRep id=0x10 magic=0x10d686]

The routes on my end still exist.  The firewall is still the same.  Without the
PPTP connection, they can ping my PPTP server and I can ping their router/NAT
box.  Other clients connect to my systems using the same setup and get in fine.

What could their consultant have changed to stop their access?  Is there
anything I could have broken on this end?  What can I do to find the problem?

TIA

  Eric Raskin


---------------------------------------------------------------------
Eric H. Raskin                                 eraskin at paslists.com
Professional Advertising Systems Inc.          Voice: 914-741-1100
70 Memorial Plaza                              Fax:   914-741-2788
Pleasantville, NY 10570