Antwort: RE: [pptp-server] pptp connection with encryption an d kernel 2.4. 0

[Tom Eastep]

Thus spoke Cowles, Steve:

> > -----Original Message-----
> > From: werner.hofer at igs.at [mailto:werner.hofer at igs.at]
> > Sent: Tuesday, March 27, 2001 11:22 AM
> > To: Cowles, Steve; pptp-server at lists.schulte.org
> > Subject: Antwort: RE: [pptp-server] pptp connection with
> > encryption and
> > kernel 2.4. 0
> >
> >
> > After I made an alias on my eth0 interface (192.168.1.1)
> > proxyarp should work since i can find an entry in the arp
> > table for my pptp client. Thanks for your advise Steve.
>
> You should see a similar entry in your log files when your PPTP server can
> successfuly set (determine) the proxyarp device for your connection.
>
> Mar 26 12:11:59 firewall pppd[5226]: found interface eth0 for proxy arp
>
> >
> > But still I can´t get a ping through the pptp tunnel. I even
> > can´t ping the Server´s end of the tunnel.
>
> If you are unable to ping the PPTP server (with data encryption disabled)
> then I would think this is a routing/iptables problem. If you are unable
> able to ping the PPTP server (with "just" data encryption enabled) then I
> would think your problem is with MPPE.
>

I've reproduced the problem here. With encryption enabled, traffic
outbound through the tunnel to the Win2k host seems to go in the bit
bucket. tcpdump shows outbound traffic on ppp0 but it doesn't seem to
reach the w2k box. With encryption disabled, everything works ok...

Kernel -- 2.4.3-pre8 with mppe & FreeSwan
pptpd  -- 1.1.2
ppp    -- 2.4.0

-Tom
-- 
Tom Eastep             \ Alt Email: tom at seattlefirewall.dyndns.org
ICQ #60745924           \ Websites: http://seawall.sourceforge.net
teastep at evergo.net       \          http://seattlefirewall.dyndns.org
Shoreline, Washington USA \         http://shorewall.sourceforge.net
                           \_________________________________________