[pptp-server] PPTP masquerade

robert berzerke at swbell.net
Fri Jun 22 08:46:05 CDT 2001


  The PPTP RFC specifies in section 3.1.3 that there may only be one
  control channel connection between two systems. This should mean that
  you can only masquerade one PPTP session at a time with a given remote
  server, but in practice the MS implementation of PPTP does not enforce
  this, at least not as of NT 4.0 Service Pack 4. If the PPTP server
  you're trying to connect to only permits one connection at a time,
  it's following the protocol rules properly.  Note that this does not
  affect a masqueraded server, only multiple masqueraded clients
  attempting to contact the same remote server.

On Friday 22 June 2001 07:11, Josh Howlett wrote:
> Is this a limitation/feature of poptop?  I've read of ppl doing it with
> Windows PPTP server.
>
> thx, josh.
>
> On Fri, 22 Jun 2001, Justin Kreger wrote:
> > You cannot do that, It won't work.
> >
> > Justin Kreger, MCP MCSE CCNA
> > jkreger at earthling.2y.net jwkreger at uncg.edu justin at wss.net
> >
> > On Fri, 22 Jun 2001, Josh Howlett wrote:
> > > Hi all,
> > >
> > > Has anyone managed to masquerade PPTP clients and got them to talk to
> > > pptpd?  I'm working on the following set-up:
> > >
> > >  PPTP client-\
> > >
> > >  PPTP client---Masq--(ip)--PPTP server
> > >
> > >  PPTP client-/
> > >
> > > It works fine for a single PPTP client, but if a second attempts to
> > > connect to the same server I get this:
> > >
> > > Jun 22 10:52:58 cypri pptpd[23386]: CTRL: Client 137.222.12.160 control
> > > connection started
> > > Jun 22 10:52:58 cypri pptpd[23386]: CTRL: Starting call (launching
> > > pppd, opening GRE)
> > > Jun 22 10:52:58 cypri pptpd[23327]: Discarding out-of-order packet 1,
> > > already have 216
> > > Jun 22 10:52:58 cypri pppd[23387]: pppd 2.4.0 started by root, uid 0
> > > Jun 22 10:52:58 cypri pppd[23387]: Using interface ppp1
> > > Jun 22 10:52:58 cypri pppd[23387]: Connect: ppp1 <--> /dev/pts/2
> > > Jun 22 10:52:58 cypri pptpd[23386]: Buffering out-of-order packet; got
> > > 1 after 4294967295
> > > Jun 22 10:52:58 cypri pptpd[23327]: Discarding out-of-order packet 2,
> > > already have 216
> > > Jun 22 10:52:58 cypri pptpd[23386]: Packet reorder timeout waiting for
> > > 0 Jun 22 10:52:58 cypri pptpd[23386]: Buffering out-of-order packet;
> > > got 2 after 0
> > > Jun 22 10:52:58 cypri pptpd[23386]: Missing 12 consecutive packets; got
> > > 217 after 2
> > > Jun 22 10:52:58 cypri pptpd[23327]: Discarding out-of-order packet 3,
> > > already have 217
> > > Jun 22 10:52:58 cypri pptpd[23386]: Discarding out-of-order packet 3,
> > > already have 217
> > > Jun 22 10:52:58 cypri pptpd[23327]: Discarding out-of-order packet 4,
> > > already have 217
> > > Jun 22 10:52:58 cypri pptpd[23386]: Discarding out-of-order packet 4,
> > > already have 217
> > > Jun 22 10:53:01 cypri pptpd[23327]: Discarding out-of-order packet 5,
> > > already have 217
> > >
> > > I've read (and followed) the VPN masquerade HOWTO, and it says that
> > > this set-up is possible assuming the server allow multiple control
> > > channels to the same IP address.
> > >
> > > Does poptop allow this?  Or could I being doing something else wrong?
> > >
> > > thanks, josh.
> > >
> > > ---------------------------------------
> > > Josh Howlett, Network Supervisor,
> > > Networking & Digital Communications,
> > > Information Systems & Computing,
> > > University of Bristol, U.K.
> > > 0117 928 7850 | josh.howlett at bris.ac.uk
> > > ---------------------------------------
> > >
> > > _______________________________________________
> > > pptp-server maillist  -  pptp-server at lists.schulte.org
> > > http://lists.schulte.org/mailman/listinfo/pptp-server
> > > --- To unsubscribe, go to the url just above this line. --
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --



More information about the pptp-server mailing list