[pptp-server] one way tunnel on w2k not w98 (this time w/text and feeling)

[Justin Kreger]

are you using rras?

Justin Kreger, MCP MCSE CCNA
jkreger at earthling.2y.net jwkreger at uncg.edu jkreger at aristotle.wss.net


On Sun, 10 Jun 2001, Jay T. McCanta wrote:

> 
> 
> Sorry it didn't do the trick.  I did notice that when I ping the receive
> icon in the system tray lights, but the send doesn't.  Looks likes its
> getting the pings, but doesn't recognise them and rely.  Data flows if a
> connection is initiated from the W2k side, but no connection can be
> initiated from the linux side.  Likewise, broadcasts seem to be dropped.
> The packets get here (the rec'd counts increment proportional and in time
> with activity), however, win2k is dropping them like [insert silly
> hyperbole/simile].
> 
> Some details...
> 
> Windows 2000 Professional SP2 (Winver -> 5.0 Build 2195 SP2).
> Here's the syslog messages -
> Jun 10 22:04:47 mail pptpd[16171]: MGR: Manager process started
> Jun 10 22:07:15 mail pptpd[16185]: CTRL: Client 65.0.30.241 control
> connection started
> Jun 10 22:07:15 mail pptpd[16185]: CTRL: Starting call (launching pppd,
> opening GRE)
> Jun 10 22:07:15 mail pppd[16186]: pppd 2.3.11 started by root, uid 0
> Jun 10 22:07:15 mail pppd[16186]: Using interface ppp0
> Jun 10 22:07:15 mail pppd[16186]: Connect: ppp0 <--> /dev/ttyp2
> Jun 10 22:07:17 mail pppd[16186]: MSCHAP-v2 peer authentication succeeded
> for [edited]
> Jun 10 22:07:17 mail pppd[16186]: found interface eth1 for proxy arp
> Jun 10 22:07:17 mail pppd[16186]: local IP address 192.168.0.1
> Jun 10 22:07:17 mail pppd[16186]: remote IP address 192.168.0.102
> Jun 10 22:07:17 mail pppd[16186]: MPPE 128 bit, stateless compression
> enabled
> 
> TCPdump of PING remoteip
> 22:15:17.547852 192.168.0.1 > 192.168.0.102: icmp: echo request
> 22:15:18.544802 192.168.0.1 > 192.168.0.102: icmp: echo request
> 22:15:19.544809 192.168.0.1 > 192.168.0.102: icmp: echo request
> 22:15:20.544824 192.168.0.1 > 192.168.0.102: icmp: echo request
> and telnet...
> 22:16:10.340020 192.168.0.1.1735 > 192.168.0.102.telnet: S
> 3534849771:3534849771
> (0) win 32120 <mss 1460,nop,nop,sackOK,nop,wscale 0> (DF) [tos 0x10]
> 22:16:13.335363 192.168.0.1.1735 > 192.168.0.102.telnet: S
> 3534849771:3534849771
> (0) win 32120 <mss 1460,nop,nop,sackOK,nop,wscale 0> (DF) [tos 0x10]
> 22:16:19.335419 192.168.0.1.1735 > 192.168.0.102.telnet: S
> 3534849771:3534849771
> (0) win 32120 <mss 1460,nop,nop,sackOK,nop,wscale 0> (DF) [tos 0x10]
> 22:16:31.335549 192.168.0.1.1735 > 192.168.0.102.telnet: S
> 3534849771:3534849771
> (0) win 32120 <mss 1460,nop,nop,sackOK,nop,wscale 0> (DF) [tos 0x10]
> 
> ----- Original Message -----
> From: "Justin Kreger" <lists at earthling.2y.net>
> To: "Jay T. McCanta" <jay-mccanta at home.com>
> Cc: <pptp-server at lists.schulte.org>
> Sent: Sunday, June 10, 2001 9:09 PM
> Subject: Re: [pptp-server] one way tunnel on w2k not w98 (this time w/text
> and feeling)
> 
> 
> > try removing chapms, and just leaving v2....
> >
> > in all honesty... this is becomming alarming.... what ver of win2k is your
> > box?
> >
> > Justin Kreger, MCP MCSE CCNA
> > jkreger at earthling.2y.net jwkreger at uncg.edu jkreger at aristotle.wss.net
> >
> >
> > On Sun, 10 Jun 2001, Jay T. McCanta wrote:
> >
> > >
> > >
> > > I have a windows 2k SP2 box and a windows 98SE box making connections to
> a
> > > Linux box running 2.2.19 kernel with pptpd v1.0.1 and pppd v 2.3.11 with
> the
> > > mppe patches.  This same box is a firewall and Samba server.  From the
> > > windows 98 box, I can browse, map and generally windows my way around
> the
> > > network.  I am using an lmhosts file because my network is tiny and it
> was
> > > easier than setting up wins.  I see it using 128 bit encryption and
> > > everything works both directions.
> > >
> > > The win2k box is another matter. I can't browse, etc. but the thing that
> has
> > > me curious is that from my pptp/firewall/samba server, I cannot ping the
> > > win2k client.  I can't make any connections to the client from the
> server.
> > > The client can telnet and ftp and do general tcp stuff.  However, from
> the
> > > server, I cannot ping/telnet/ftp to the client, and yes, the client has
> > > telnet and ftp daemons running (at least while I was testing).  The most
> > > common error I get is "no route to host".  I have looked at How to on
> the
> > > PoPToP website and at
> > > http://home.swbell.net/berzerke/2.4_Kernel_PPTPD-HOWTO.txt  I believe I
> am
> > > doing everything right - the windows98 box would imply that.  What weird
> w2k
> > > thing is stalking me?
> > >
> > > I appreciate an extra set of eyes or two looking at this.
> > >
> > > /etc/ppp/options:
> > > lock
> > > debug
> > > name *
> > > auth
> > > +chap
> > > +chapms
> > > +chapms-v2
> > > mppe-128
> > > mppe-40
> > > mppe-stateless
> > > proxyarp
> > > ipcp-accept-local
> > > ipcp-accept-remote
> > > lcp-echo-failure 3
> > > lcp-echo-interval 5
> > > deflate 0
> > >
> > >
> > > Kernel IP routing table
> > > Destination        Gateway         Genmask              Flags  MSS
> Window
> > > irtt Iface
> > > 192.168.0.101  0.0.0.0           255.255.255.255  UH     0 0 0 ppp0
> > > 192.168.0.0      0.0.0.0           255.255.255.0      U      0 0 0 eth1
> > > 206.63.251.0    0.0.0.0           255.255.255.0      U      0 0 0 eth0
> > > 127.0.0.0          0.0.0.0           255.0.0.0              U      0 0 0
> lo
> > > 0.0.0.0              206.63.251.1 0.0.0.0                  UG     0 0 0
> eth0
> > >
> > > Thanks.
> > >
> > > _______________________________________________
> > > pptp-server maillist  -  pptp-server at lists.schulte.org
> > > http://lists.schulte.org/mailman/listinfo/pptp-server
> > > List services provided by www.schulteconsulting.com!
> > >
> >
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!
>