[pptp-server] Making this thing useful

[Gustin @ Echostar]

I had the same problem.  For us the problem probably was the firewall
rules.  The VPN bridging rules for ipchains *must* be before the ipmasq
rule.  I assume that you are running a 2.2.x kernel and are thus also
using ipchains.  This also presumes that the VPN box is also doing ipmasq
for the internal lan. 

I found the solution in a search of google.

Also info from the logs is very handy.  For instance on another machine on
your lan, do you see connection attempts or nothing at all?  One symptom
of the problem I described earlier is that connection attempts were made
but there was no route back to the tunneled machine, connections thus
failing.  

So if the solution suggested does not help you, far more information is
needed so that we may be able to assist.

Cheers,
__
Gustin


On Mon, 25 Jun 2001 ctooley at amoa.org wrote:

> Date: Mon, 25 Jun 2001 15:06:12 -0500
> From: ctooley at amoa.org
> To: "Lech, Dan" <DLech at csicorp-us.com>
> Cc: "'pptp-server at lists.schulte.org'" <pptp-server at lists.schulte.org>
> Subject: Re: [pptp-server] Making this thing useful
> 
> 
> 
> 
> 
> 
> 
> 
> 
> robert <berzerke at swbell.net> on 06/25/2001 02:43:57 PM
>                                                               
>                                                               
>                                                               
>   To:          "Lech, Dan" <DLech at csicorp-us.com>,            
>                "'pptp-server at lists.schulte.org'"              
>                <pptp-server at lists.schulte.org>                
>                                                               
>   cc:          (bcc: Chris Tooley/AMOA)                       
>                                                               
>                                                               
>                                                               
>   Subject      Re: [pptp-server] Making this thing useful     
>   :                                                           
>                                                               
> 
> 
> 
> 
> 
> 
> 
> 
> See the howto at http://home.swbell.net/berzerke .  Your options file looks
> like its missing quite a few options, and you didn't even talk about what
> firewall rules, if any, could be getting in the way.
> 
> On Monday 25 June 2001 10:30, Lech, Dan wrote:
> > Alright,
> > I am running RedHat 7.1 and PoPToP v1.0.1  I have one NIC installed with a
> > real world IP and another installed on our private network. I followed all
> > the instructions and I can get my win98 machine to authenticate on the VPN,
> > but I can't do anything with it. I can ping the internal nic on the PoPToP
> > server but I can't make a connection to any of the machines on the network.
> > I know I am missing some fundamental concept but I can't figure out what.
> > Also, this machine is not used for anything else (i.e. proxy, firewall,
> > etc)
> >
> > Below are my config files:
> >
> > # pptpd.conf
> > speed 115200
> > localip 192.168.1.12
> > remoteip 192.168.2.234-238,192.168.2.245
> >
> > # options
> > debug
> > name vpnsrv01
> > auth
> > require-chap
> > proxyarp
> >
> > Any advice would be helpfull,
> > Dan
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --
> 
> 
> You may also need to echo "1" to /proc/sys/net/ipv4/ip_forward to get ip
> forwarding to work.
> 
> Chris Tooley
> 
> 
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --
> 

-- 
<*==================-< gustin at echostar.ca >-==================*>