[pptp-server] Setting up PoPToP behind masq firewall

[John P]

> Its the firewall that has to deal with masquerading GRE packets- so the
VPN
> MASQ patches need to be applied to your firewall kernel, not the PoPToP
> server.

I have now upgraded the router's kernel so it can deal with masq'ing 47 etc,
and all is working OK..
However, I have now discovered that I'm behind a nat/masqueraded connection
on the client side!

So although I can dial up using an modem and establish the connection to
poptop, browse the internal Samba network etc, I'm not sure if I can
establish the connection using my leased line access (residential
connection).

When I try to use the leased line access, poptop seems to be getting some
replies from the client. What is missing on our side? I don't have any
control over the NAT/firewall on the client side (although you never know,
they may do something for me if I ask nicely!)

Oct 14 01:15:21 pluto pptpd[6063]: MGR: Launching /usr/local/sbin/pptpctrl
to handle client
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: local address = 10.0.0.234
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: remote address = 10.0.1.234
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: pppd speed = 115200
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Client 192.146.136.129 control
connection started
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Received PPTP Control Message
(type: 1)
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Made a START CTRL CONN RPLY packet
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: I wrote 156 bytes to the client.
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Sent packet to client
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Received PPTP Control Message
(type: 7)
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Set parameters to 0 maxbps, 16
window size
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Made a OUT CALL RPLY packet
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: Starting call (launching pppd,
opening GRE)
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: pty_fd = 4
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: tty_fd = 5
Oct 14 01:15:21 pluto pptpd[6063]: CTRL: I wrote 32 bytes to the client.
Oct 14 01:15:22 pluto pptpd[6063]: CTRL: Sent packet to client
Oct 14 01:15:21 pluto pptpd[6064]: CTRL (PPPD Launcher): Connection speed =
115200
Oct 14 01:15:22 pluto pptpd[6064]: CTRL (PPPD Launcher): local address =
10.0.0.234
Oct 14 01:15:22 pluto pptpd[6064]: CTRL (PPPD Launcher): remote address =
10.0.1.234
Oct 14 01:15:22 pluto pppd[6064]: pppd 2.4.0 started by root, uid 0
Oct 14 01:15:22 pluto pppd[6064]: Using interface ppp0
Oct 14 01:15:22 pluto pppd[6064]: Connect: ppp0 <--> /dev/pts/4
Oct 14 01:15:22 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:22 pluto pppd[6064]: rcvd [LCP ConfReq id=0x1 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:22 pluto pppd[6064]: sent [LCP ConfAck id=0x1 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:25 pluto pppd[6064]: rcvd [LCP ConfReq id=0x2 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:25 pluto pppd[6064]: sent [LCP ConfAck id=0x2 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:25 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:28 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:31 pluto pppd[6064]: rcvd [LCP ConfReq id=0x4 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:31 pluto pppd[6064]: sent [LCP ConfAck id=0x4 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:31 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:34 pluto pppd[6064]: rcvd [LCP ConfReq id=0x5 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:34 pluto pppd[6064]: sent [LCP ConfAck id=0x5 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:34 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:37 pluto pppd[6064]: rcvd [LCP ConfReq id=0x6 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:37 pluto pppd[6064]: sent [LCP ConfAck id=0x6 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:37 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:40 pluto pppd[6064]: rcvd [LCP ConfReq id=0x7 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:40 pluto pppd[6064]: sent [LCP ConfAck id=0x7 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:40 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:43 pluto pppd[6064]: rcvd [LCP ConfReq id=0x8 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:43 pluto pppd[6064]: sent [LCP ConfAck id=0x8 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:43 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:46 pluto pppd[6064]: rcvd [LCP ConfReq id=0x9 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:46 pluto pppd[6064]: sent [LCP ConfAck id=0x9 <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:46 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:49 pluto pppd[6064]: rcvd [LCP ConfReq id=0xa <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:49 pluto pppd[6064]: sent [LCP ConfAck id=0xa <magic 0x11dee90>
<pcomp> <accomp>]
Oct 14 01:15:49 pluto pppd[6064]: sent [LCP ConfReq id=0x1 <asyncmap 0x0>
<auth chap MD5> <magic 0x498df9e3> <pcomp> <accomp>]
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Received PPTP Control Message
(type: 12)
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Made a CALL DISCONNECT RPLY packet
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Received CALL CLR request (closing
call)
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: I wrote 148 bytes to the client.
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Sent packet to client
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Error with select(), quitting
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Client 192.146.136.129 control
connection finished
Oct 14 01:15:52 pluto pptpd[6063]: CTRL: Exiting now
Oct 14 01:15:52 pluto pptpd[6060]: MGR: Reaped child 6063
Oct 14 01:15:52 pluto pppd[6064]: Modem hangup
Oct 14 01:15:52 pluto pppd[6064]: Connection terminated.
Oct 14 01:15:52 pluto pppd[6064]: Exit.
[root at pluto /root]#

Any ideas much appreciated. Thanks to everyone for helping me get this far!

Cheers,
John