[pptp-server] one way tunnel on w2k not w98 (this time w/text andfeeling)

[Justin Kreger]

I have experenced this with a Win2k server... packet filtering was off,
but it still did it.  I could ping it for the first few seconds after it
connected, then I could not, but the f-ed up thing is, A computer behind
the win2k server (it was helping rotue between two subnets using
pptp) could ping the private ip of the tunnel server, and everything else
on the other end that It was permitted to ping.  I could not ping the
workstations, or the servers from my the lan with the server.  funkey huh?

Justin Kreger, MCP MCSE CCNA
jkreger at earthling.2y.net jwkreger at uncg.edu jkreger at aristotle.wss.net


On Mon, 11 Jun 2001, Jerry Vonau wrote:

> 
> 
> Hey All:
> 
> Just a thought, doesn't win2k have packet filtering?
> Maybe it's turned on....
> See:
> http://www.microsoft.com/TechNet/isa/isadocs/CMT_H_PacketOptions.htm#
> 
> Ran in to a situation where I could not ping a win2k box on the internet,
> but it was connect to me when I ran a netstat.....
> 
> Jerry Vonau
> 
> robert wrote:
> 
> > First, use pptpd 1.1.2 instead of 1.0.1
> >
> > Second,  try adding a mtu and mru in the options file.  From the howto:
> > mtu 1490
> > mru 1490
> >
> > On Sunday 10 June 2001 22:24, Jay T. McCanta wrote:
> > > I have a windows 2k SP2 box and a windows 98SE box making connections to a
> > > Linux box running 2.2.19 kernel with pptpd v1.0.1 and pppd v 2.3.11 with
> > > the mppe patches.  This same box is a firewall and Samba server.  From the
> > > windows 98 box, I can browse, map and generally windows my way around the
> > > network.  I am using an lmhosts file because my network is tiny and it was
> > > easier than setting up wins.  I see it using 128 bit encryption and
> > > everything works both directions.
> > >
> > > The win2k box is another matter. I can't browse, etc. but the thing that
> > > has me curious is that from my pptp/firewall/samba server, I cannot ping
> > > the win2k client.  I can't make any connections to the client from the
> > > server. The client can telnet and ftp and do general tcp stuff.  However,
> > > from the server, I cannot ping/telnet/ftp to the client, and yes, the
> > > client has telnet and ftp daemons running (at least while I was testing).
> > > The most common error I get is "no route to host".  I have looked at How to
> > > on the PoPToP website and at
> > > http://home.swbell.net/berzerke/2.4_Kernel_PPTPD-HOWTO.txt  I believe I am
> > > doing everything right - the windows98 box would imply that.  What weird
> > > w2k thing is stalking me?
> > >
> > > I appreciate an extra set of eyes or two looking at this.
> > >
> > > /etc/ppp/options:
> > > lock
> > > debug
> > > name *
> > > auth
> > > +chap
> > > +chapms
> > > +chapms-v2
> > > mppe-128
> > > mppe-40
> > > mppe-stateless
> > > proxyarp
> > > ipcp-accept-local
> > > ipcp-accept-remote
> > > lcp-echo-failure 3
> > > lcp-echo-interval 5
> > > deflate 0
> > >
> > >
> > > Kernel IP routing table
> > > Destination        Gateway         Genmask              Flags  MSS Window
> > > irtt Iface
> > > 192.168.0.101  0.0.0.0           255.255.255.255  UH     0 0 0 ppp0
> > > 192.168.0.0      0.0.0.0           255.255.255.0      U      0 0 0 eth1
> > > 206.63.251.0    0.0.0.0           255.255.255.0      U      0 0 0 eth0
> > > 127.0.0.0          0.0.0.0           255.0.0.0              U      0 0 0 lo
> > > 0.0.0.0              206.63.251.1 0.0.0.0                  UG     0 0 0
> > > eth0
> > >
> > > Thanks.
> > >
> > > _______________________________________________
> > > pptp-server maillist  -  pptp-server at lists.schulte.org
> > > http://lists.schulte.org/mailman/listinfo/pptp-server
> > > List services provided by www.schulteconsulting.com!
> > _______________________________________________
> > pptp-server maillist  -  pptp-server at lists.schulte.org
> > http://lists.schulte.org/mailman/listinfo/pptp-server
> > List services provided by www.schulteconsulting.com!
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> List services provided by www.schulteconsulting.com!
>