[pptp-server] No masq table again.

Grzegorz A. Wieczorek gigo at ibb.waw.pl
Mon May 29 13:16:06 CDT 2000


 Hello,
I'm a newbie in the subject of VPNs, so please be patient... Last few 
days I was trying to install and use pptp based VPN. I used 
VPN-Masquerade-HOWTO and HOWTO-PoPTop as guides. I tested kernels 2.2.13 
and 2.2.14 with appropriatre patches, pptpd version 1.0.0, pppd version 
2.3.8 and 2.3.10, mppe built in. I encountered strange 
problem not described in mentioned faqs. I searched archives of this 
mailing list for answer, but my searches failed (only found the same 
question as mine, without answer...), so I ask: 
 My Windoze VPN clients can connect to server easily:

May 21 11:26:18 Lirout pptpd[322]: CTRL: Client 10.11.12.11 control 
connection started
May 21 11:26:18 Lirout pptpd[322]: CTRL: Starting call (launching pppd, 
opening GRE)
May 21 11:26:18 Lirout kernel: registered device ppp0
May 21 11:26:18 Lirout pppd[323]: pppd 2.3.10 started by root, uid 0
May 21 11:26:18 Lirout pppd[323]: Using interface ppp0
May 21 11:26:18 Lirout pppd[323]: Connect: ppp0 <--> /dev/pts/1

The problem is I cannot route traffic any further than to my vpn server. 
Following messages flood my logs:

May 21 11:26:24 lirout kernel: ip_demasq_gre(): 10.11.12.11 -> 
10.11.12.1 CID=0 VER=1 PROTO=880B
May 21 11:26:24 lirout kernel: ip_masq_in_get_gre(): lookup 
10.11.12.11->10.11.12.1 CID=0 FAIL
May 21 11:26:24 lirout kernel: ip_demasq_gre(): 10.11.12.11 -> 10.11.12.1 
CID=0 no masq table, discarding

Of course I do echo "1" > /proc/sys/net/ipv4/ip_forward, all masquerading 
modules loaded, ipchains rule regarding masquerading forwarded traffic 
set, etc etc...

When I connect from external side of the net I get appropriate errors:

May 21 13:58:33 Lirout kernel: ip_demasq_gre(): 212.244.128.50 -> 
195.116.168.246 CID=0 no masq table, discarding

Please help me out!! If you need extra info about my configuration, let 
me know (don't want to flood and don't know if you need more info).
Thanks in advance,
Grzegorz Wieczorek



More information about the pptp-server mailing list