[pptp-server] PTY, GRE prob

[Andrew McRory]

On Sat, 13 May 2000 linux at orgx.co.nz wrote:

> Yes.  There is no firewall in between these 2 machines - they're on the 
> same hub and the Linux machine has the default policies of ipchains - 
> accept everything.  I'm just trying to demonstrate that it works before 
> putting on a real firewall.  It really has me stumped, although I feel 
> slightly better to see that others seem to have similar ones.  I hope we 
> can all get it solved soon!


I had a problem recently where my connections were immediately broken.
After checking out all the routers between here and there, getting a cisco
engineer involved, tearing down firewalls, etc etc I discovered I compiled
pptpd with tcpwrappers but DID NOT update /etc/hosts.allow. damn, I felt
stoopid.

maybe this is your problem?

The worst part of this was that NOTHING logged the refused connections....






> 
> The Win98 box is my laptop and it's up-to-date in that the 
> "Windows-Update" thingy on the start menu says there are no updates I need 
> at present, and also the Thinkpad "IBM Update" says it's up-to-date.  Yes 
> this stuff is straight from syslog.
> 
> Cheers,
> 
> Richard Shepherd
> Aetna DBA
> 
> 
> 
> 
> Nate Carlson <natecars at real-time.com>
> 05/12/00 10:26 AM
> 
>  
>         To:     linux at orgx.co.nz
>         cc:     pptp-server at lists.schulte.org
>         Subject:        Re: [pptp-server] PTY, GRE prob
> 
> On Wed, 10 May 2000 linux at orgx.co.nz wrote:
> > I am fairly new to PPTP but still don't think I should have this 
> problem. 
> > I have pptp 1.0, ppp-2.3.10 with the ppp-2.3.10-openssl-0.9.4-mppe.patch 
> 
> > patch applied.  I run /usr/local/sbin/pptpd --debug.  The kernel is 
> > rebuilt and has the modules ppp, ppp-mppe, and others loaded.  Whenever 
> I 
> > attempt a connection from my Win98 box I get immediately disconnected 
> and 
> > in the Linux syslogs I see:
> 
> *snip*
> 
> Have you verified that the firewall (and any routers/switches/etc in
> between) is allowing the GRE traffic through? If that's not the problem,
> have you verified that the Win98 box is at the newest version of all the
> patches? Also, is that a direct syslog dump, or is that grep'd for pptp?
> (Could be some info that got missed by a grep.. *shrug*)
> 
> -- 
> Nate Carlson <natecars at real-time.com>   | Phone : (952)943-8700
> http://www.real-time.com                | Fax   : (952)943-8500
> 
> 
> 
> 
> 


Andrew McRory / President                            amacc at iron-bridge.net
Iron Bridge Communications                             www.iron-bridge.net
Caldera OpenLinux Contrib RPMS             ftp.iron-bridge.net/pub/Caldera