[pptp-server] PPP2.4.0b4 Kernel 2.4.1

Joey Coco anesthes at cisdi.com
Thu Feb 8 14:20:29 CST 2001


Hi,

Your right. I've come to the conclusion that this is happening on Win2k
and NT clients.. I tried with a few win98 and its working. Not very well
tho.  I'm getting the following in dmesg:

NAT: 0 dropping untracked packet c77b44e0 1 10.200.1.2 -> 224.0.0.2
NAT: 0 dropping untracked packet c77b44e0 1 10.200.1.2 -> 224.0.0.2
NAT: 0 dropping untracked packet c77b44e0 1 10.200.1.2 -> 224.0.0.2
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NET: 13 messages suppressed.
NAT: 0 dropping untracked packet c77b49e0 1 10.200.1.2 -> 10.200.1.254
NET: 22 messages suppressed.

Also, my ping responses are. Horrible... This is over a 100meg ethernet.

demo:~# ping 10.200.1.2
PING 10.200.1.2 (10.200.1.2): 56 data bytes
64 bytes from 10.200.1.2: icmp_seq=0 ttl=128 time=17.6 ms
64 bytes from 10.200.1.2: icmp_seq=1 ttl=128 time=15.4 ms
64 bytes from 10.200.1.2: icmp_seq=2 ttl=128 time=15.3 ms
64 bytes from 10.200.1.2: icmp_seq=3 ttl=128 time=15.2 ms
64 bytes from 10.200.1.2: icmp_seq=4 ttl=128 time=15.1 ms
64 bytes from 10.200.1.2: icmp_seq=5 ttl=128 time=14.7 ms

--- 10.200.1.2 ping statistics ---
6 packets transmitted, 6 packets received, 0% packet loss
round-trip min/avg/max = 14.7/15.5/17.6 ms
demo:~#

Even better check out this loss on a flood:

demo:~# ping -f 10.200.1.2
PING 10.200.1.2 (10.200.1.2): 56 data bytes
...............................................................................................................................................
--- 10.200.1.2 ping statistics ---
246 packets transmitted, 100 packets received, 59% packet loss
round-trip min/avg/max = 15.5/280.0/359.9 ms
demo:~#


And one more thing. It appears poptop (1.0.1) doesnt realize when
interfaces come down. I.e, it gave out 10.200.1.1 to ppp0 an hour ago,
then that client quit. Now ppp0 gets 10.200.1.2. Is this normal ?
Here is a quote from the stock pptpd.conf

#       2. If you give more IP addresses than MAX_CONNECTIONS, it will
#          start at the beginning of the list and go until it gets
#          MAX_CONNECTIONS IPs. Others will be ignored.
#

I'm not sure if that means it won't recycle until it gets to the end.?

Anyone else seeing these problems?

-- Joe


On Thu, 8 Feb 2001, Kelly Black wrote:

> 
> Check the route table on the client end.  I am seeing the same thing 
> happening on one of my clients access.  The route to the VPN tunnel
> interface is not being added to the route table, and I am not sure why
> this is happening.
> 
> Kelly Black
> Sys Admin
> TestQuest, Inc.
> On Thu, Feb 08, 2001 at 07:47:05AM -0500, Joey Coco wrote:
> > 
> > Hello,
> > 
> > I've got this far. It conencts, authentictes, gives my win98/win2000
> > clients an IP address. But I cannot ping or telnet or anything accross.
> > Here is the log info, and ifconfig result:
> > 
> > info, and notice logs to /var/adm/messages:
> > 
> > Feb  8 22:43:22 demo login[277]: ROOT LOGIN on `tty1'
> > Feb  8 22:46:33 demo pptpd[334]: CTRL: Client 216.20.15.63 control
> > connection started
> > Feb  8 22:46:33 demo pptpd[334]: CTRL: Starting call (launching pppd,
> > opening GRE)
> > Feb  8 22:46:33 demo pppd[335]: pppd 2.4.0b4 started by anesthes, uid 0
> > Feb  8 22:46:33 demo pppd[335]: Using interface ppp0
> > Feb  8 22:46:33 demo pppd[335]: Connect: ppp0 <--> /dev/ttyp0
> > Feb  8 22:46:35 demo pppd[335]: MSCHAP-v2 peer authentication succeeded
> > for anesthes
> > Feb  8 22:46:35 demo pppd[335]: local  IP address 10.200.1.254
> > Feb  8 22:46:35 demo pppd[335]: remote IP address 10.200.1.1
> > Feb  8 22:46:35 demo pppd[335]: MPPE 128 bit, stateless compression
> > enabled
> > 
> > err logs to /var/adm/syslog:
> > 
> > Feb  8 22:46:33 demo pptpd[334]: GRE: Discarding duplicate packet
> > Feb  8 22:46:35 demo pptpd[334]: CTRL: Ignored a SET LINK INFO packet with
> > real ACCMs!
> > 
> > And debug to /var/adm/debug:
> > 
> > Feb  8 22:46:35 demo pppd[335]: sent [CCP ConfNak id=0x6 <mppe 1 0 0 60>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [IPCP ConfReq id=0x7 <addr 0.0.0.0>
> > <ms-dn$Feb  8 22:46:35 demo pppd[335]: sent [IPCP ConfRej id=0x7 <ms-dns1
> > 0.0.0.0> <ms$Feb  8 22:46:35 demo pppd[335]: rcvd [IPCP ConfRej id=0x1
> > <compress VJ 0f 01>]
> > Feb  8 22:46:35 demo pppd[335]: sent [IPCP ConfReq id=0x2 <addr
> > 10.200.1.254>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [CCP ConfRej id=0x1 <deflate 15>
> > <deflate($Feb  8 22:46:35 demo pppd[335]: sent [CCP ConfReq id=0x2 <mppe 1
> > 0 0 60>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [CCP ConfReq id=0x8 <mppe 1 0 0 40>]
> > Feb  8 22:46:35 demo pppd[335]: sent [CCP ConfAck id=0x8 <mppe 1 0 0 40>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [IPCP ConfReq id=0x9 <addr 0.0.0.0>]
> > Feb  8 22:46:35 demo pppd[335]: sent [IPCP ConfNak id=0x9 <addr
> > 10.200.1.1>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [IPCP ConfAck id=0x2 <addr
> > 10.200.1.254>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [CCP ConfNak id=0x2 <mppe 1 0 0 40>]
> > Feb  8 22:46:35 demo pppd[335]: sent [CCP ConfReq id=0x3 <mppe 1 0 0 40>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [IPCP ConfReq id=0xa <addr
> > 10.200.1.1>]
> > Feb  8 22:46:35 demo pppd[335]: sent [IPCP ConfAck id=0xa <addr
> > 10.200.1.1>]
> > Feb  8 22:46:35 demo pppd[335]: rcvd [CCP ConfAck id=0x3 <mppe 1 0 0 40>]
> > Feb  8 22:47:33 demo pptpd[334]: CTRL: Received PPTP Control Message
> > (type: 5)
> > Feb  8 22:47:33 demo pptpd[334]: CTRL: Made a ECHO RPLY packet
> > Feb  8 22:47:33 demo pptpd[334]: CTRL: I wrote 20 bytes to the client.
> > 
> > 
> > # ifconfig ppp0
> > ppp0      Link encap:Point-to-Point Protocol
> >           inet addr:10.200.1.254  P-t-P:10.200.1.1  Mask:255.255.255.255
> >           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
> >           RX packets:1889 errors:0 dropped:0 overruns:0 frame:0
> >           TX packets:20 errors:0 dropped:0 overruns:0 carrier:0
> >           collisions:0
> > 
> > demo:/var/log# ping 10.200.1.1
> > PING 10.200.1.1 (10.200.1.1): 56 data bytes
> > 
> > --- 10.200.1.1 ping statistics ---
> > 4 packets transmitted, 0 packets received, 100% packet loss
> > demo:/var/log# ifconfig ppp0
> > ppp0      Link encap:Point-to-Point Protocol
> >           inet addr:10.200.1.254  P-t-P:10.200.1.1  Mask:255.255.255.255
> >           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
> >           RX packets:1892 errors:0 dropped:0 overruns:0 frame:0
> >           TX packets:24 errors:0 dropped:0 overruns:0 carrier:0
> >           collisions:0
> > 
> > Anyone have any ideas??
> > 
> > 
> > demo:/var/log# uname -a
> > Linux demo 2.4.1 #1 Wed Feb 7 21:25:25 EST 2001 i586 unknown
> > demo:/var/log# pppd --version
> > pppd version 2.4.0b4
> > 
> > The two patches I used:
> > 
> > linux-2.4.0-openssl-0.9.6-mppe.patch.gz  
> > ppp-2.4.0-openssl-0.9.6-mppe.patch.gz
> > 
> > I tried with kernel 2.4.0, and pppd 2.4.0, still the same results.n
> > 
> > -- Joe
> > 
> > 
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > List services provided by www.schulteconsulting.com!
> > 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!
> 


 /\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\
/ "I'd like to think that everything is beautiful, and I'd like to think  /
\ that everything is fair. I'd like to think that everything is plentiful,\
/ and i'd like to think that every body cares. We'd like to thank you.."  /
\                                                                         \
/          http://members.cisdi.com/~anesthes/  -=- IM: imd3fc0n          /
\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/
C r e a t i v e   I l l u s i o n s   S o f t w a r e   D e s i g n,  I n c.




More information about the pptp-server mailing list