[pptp-server] pptpd + nat + ipf

[Etienne Roulland]

Hi,

I'm trying to set up a pptp server to access to my office network.

All rox when i connect from the internal network, but from the outside i
have some problems.

My pptp server is 'natted' by a IPFilter box (openbsd).
The ipnat rule :

bimap tx0 private-address/32 -> public-address/32

ipf rules

pass in quick on tx0 proto tcp from any to private-address/32 port = 1723 flags S keep state
pass in quick on tx0 proto 47 from any to any

bimap tx0 private-address/32 -> public-address/32

The error log :

Aug 30 17:40:45 hebus pptpd[922]: MGR: Launching /usr/local/sbin/pptpctrl to handle client
Aug 30 17:40:45 hebus pptpd[922]: CTRL: pppd speed = 115200
Aug 30 17:40:45 hebus pptpd[922]: CTRL: pppd options file = /etc/ppp/options.pptp
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Client 213.228.14.28 control connection started
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Received PPTP Control Message (type: 1)
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Made a START CTRL CONN RPLY packet
Aug 30 17:40:45 hebus pptpd[922]: CTRL: I wrote 156 bytes to the client.  
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Sent packet to client
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Received PPTP Control Message (type: 7)
Aug 30 17:40:45 hebus pptpd[922]: CTRL: 0 min_bps, 1525 max_bps, 32 window size
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Made a OUT CALL RPLY packet
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Starting call (launching pppd, opening GRE)
Aug 30 17:40:45 hebus pptpd[922]: CTRL: pty_fd = 5
Aug 30 17:40:45 hebus pptpd[922]: CTRL: tty_fd = 6
Aug 30 17:40:45 hebus pptpd[923]: CTRL (PPPD Launcher): Connection speed = 115200
Aug 30 17:40:45 hebus pppd[923]: pppd 2.4.1 started by root, uid 0
Aug 30 17:40:45 hebus pppd[923]: Using interface ppp0
Aug 30 17:40:45 hebus pppd[923]: Connect: ppp0 <--> /dev/pts/3
Aug 30 17:40:45 hebus pptpd[922]: CTRL: I wrote 32 bytes to the client.
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Sent packet to client
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Received PPTP Control Message (type: 15)
Aug 30 17:40:45 hebus pptpd[922]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Aug 30 17:41:15 hebus pppd[923]: LCP: timeout sending Config-Requests 
Aug 30 17:41:15 hebus pppd[923]: Connection terminated.
Aug 30 17:41:15 hebus pppd[923]: Exit.
Aug 30 17:41:15 hebus pptpd[922]: Error reading from pppd: Input/output error
Aug 30 17:41:15 hebus pptpd[922]: CTRL: GRE read or PTY write failed (gre,pty)=(6,5)
Aug 30 17:41:15 hebus pptpd[922]: CTRL: Client 213.228.14.28 control connection finished
Aug 30 17:41:15 hebus pptpd[922]: CTRL: Exiting now
Aug 30 17:41:15 hebus pptpd[847]: MGR: Reaped child 922


Any idea ? Thanks ....

-- 
Etienne Roulland -- CVF Bordeaux