[pptp-server] No masq table again.
Grzegorz A. Wieczorek
gigo at ibb.waw.pl
Mon May 29 13:16:06 CDT 2000
Hello,
I'm a newbie in the subject of VPNs, so please be patient... Last few
days I was trying to install and use pptp based VPN. I used
VPN-Masquerade-HOWTO and HOWTO-PoPTop as guides. I tested kernels 2.2.13
and 2.2.14 with appropriatre patches, pptpd version 1.0.0, pppd version
2.3.8 and 2.3.10, mppe built in. I encountered strange
problem not described in mentioned faqs. I searched archives of this
mailing list for answer, but my searches failed (only found the same
question as mine, without answer...), so I ask:
My Windoze VPN clients can connect to server easily:
May 21 11:26:18 Lirout pptpd[322]: CTRL: Client 10.11.12.11 control
connection started
May 21 11:26:18 Lirout pptpd[322]: CTRL: Starting call (launching pppd,
opening GRE)
May 21 11:26:18 Lirout kernel: registered device ppp0
May 21 11:26:18 Lirout pppd[323]: pppd 2.3.10 started by root, uid 0
May 21 11:26:18 Lirout pppd[323]: Using interface ppp0
May 21 11:26:18 Lirout pppd[323]: Connect: ppp0 <--> /dev/pts/1
The problem is I cannot route traffic any further than to my vpn server.
Following messages flood my logs:
May 21 11:26:24 lirout kernel: ip_demasq_gre(): 10.11.12.11 ->
10.11.12.1 CID=0 VER=1 PROTO=880B
May 21 11:26:24 lirout kernel: ip_masq_in_get_gre(): lookup
10.11.12.11->10.11.12.1 CID=0 FAIL
May 21 11:26:24 lirout kernel: ip_demasq_gre(): 10.11.12.11 -> 10.11.12.1
CID=0 no masq table, discarding
Of course I do echo "1" > /proc/sys/net/ipv4/ip_forward, all masquerading
modules loaded, ipchains rule regarding masquerading forwarded traffic
set, etc etc...
When I connect from external side of the net I get appropriate errors:
May 21 13:58:33 Lirout kernel: ip_demasq_gre(): 212.244.128.50 ->
195.116.168.246 CID=0 no masq table, discarding
Please help me out!! If you need extra info about my configuration, let
me know (don't want to flood and don't know if you need more info).
Thanks in advance,
Grzegorz Wieczorek
More information about the pptp-server
mailing list