[pptp-server] Martian packets and NetBIOS problems

[Leo Torio]

I was told to lower the encryption to 40-bit and it seems to work. I can
browse the network and ping machines by IP address, but I can't ping
machines by machine name. I also can't access any machines (even though I
see them in Network Neighbourhood).

I'm still trying to fix my firewall and I'm re-compiling PPP with the
128-bit encryption patch. I'm doing that as I write this.

Thanks.

-----Original Message-----
From: pptp-server-admin at lists.schulte.org
[mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Joe Polcari
Sent: Wednesday, October 24, 2001 11:56 PM
To: pptp-server at lists.schulte.org
Subject: Re: [pptp-server] Martian packets and NetBIOS problems



Your problem seems to start with the initial connection from pptp to pppd
using
GRE.
Maybe an encryption mismatch. Is an SSL upgrade possibly required for what
you
did?

Leo Torio wrote:

> Matt:
>
> Hi. Thanks for replying.
>
> Here's what I'm using:
> Client: Win2K Pro (using default VPN settings)
> Server: Red Hat Linx 7.1 (with a stock 2.4.2-2 kernel) running a modified
> ppp (ppp-mppe-2.4.0-4 from http://pptpclient.sourceforge.net/) and pptp
> 1.0.1. All were installed via RPM.
>
> When you ask if I'm patched for 128-bit encryption, you mean the client or
> the server? If it's the client, then yes. Win2K is already patched for
> 128-bit encryption. If you mean the server, I'm guess it is.
>
> About pinging with encryption disabled, do I disable it on the server or
the
> client. If you mean the client, I can't. Win2K defaults to using the
highest
> encryption available on the server and there is no option to lower it
(maybe
> I just can't find it).
>
> Here is the most recent log I've made using suggestions from other users:
>
> Oct 24 09:44:55 neptune ipchains: Flushing all chains: succeeded
> Oct 24 09:44:55 neptune ipchains: Removing user defined chains: succeeded
> Oct 24 09:44:55 neptune ipchains: Resetting built-in chains to the default
> ACCEPT policy succeeded
> Oct 24 09:45:20 neptune pptpd[17964]: CTRL: Client 149.99.98.43 control
> connection started
> Oct 24 09:45:20 neptune pptpd[17964]: CTRL: Starting call (launching pppd,
> opening GRE)
> Oct 24 09:45:20 neptune pppd[17965]: pppd 2.4.0 started by root, uid 0
> Oct 24 09:45:20 neptune pppd[17965]: Using interface ppp1
> Oct 24 09:45:20 neptune pppd[17965]: Connect: ppp1 <--> /dev/pts/5
> Oct 24 09:45:20 neptune pptpd[17964]: GRE: Bad checksum from pppd.
> Oct 24 09:45:20 neptune pptpd[17964]: GRE: Discarding duplicate packet
> Oct 24 09:45:23 neptune pptpd[17964]: CTRL: Ignored a SET LINK INFO packet
> with real ACCMs!
> Oct 24 09:45:23 neptune pppd[17965]: MSCHAP-v2 peer authentication
succeeded
> for leo
> Oct 24 09:45:23 neptune pppd[17965]: found interface eth1 for proxy arp
> Oct 24 09:45:23 neptune pppd[17965]: local  IP address 192.168.1.51
> Oct 24 09:45:23 neptune pppd[17965]: remote IP address 192.168.1.86
> Oct 24 09:45:23 neptune pppd[17965]: MPPE 128 bit, stateless compression
> enabled
> Oct 24 09:50:43 neptune pppd[17965]: LCP terminated by peer
> (^CM--/M-E^@<M-Mt^@^@^@^@)
> Oct 24 09:50:43 neptune pppd[17965]: Modem hangup
> Oct 24 09:50:43 neptune pppd[17965]: Connection terminated.
> Oct 24 09:50:43 neptune pppd[17965]: Connect time 5.4 minutes.
> Oct 24 09:50:43 neptune pppd[17965]: Sent 9285 bytes, received 21089
bytes.
> Oct 24 09:50:43 neptune pptpd[17964]: CTRL: Error with select(), quitting
> Oct 24 09:50:43 neptune pptpd[17964]: CTRL: Client 149.99.98.43 control
> connection finished
> Oct 24 09:50:43 neptune pppd[17965]: Exit.
>
> I don't get the martian packets anymore (others told me to change the
remote
> and local IP addresses). I did that before and got the same result. I did
it
> again and now the packets are gone.
>
> My problem now is that I can't ping anything from the client.
>
> I try to browse the network and I get:
>
> WORKGROUP is not accessible.
>
> The list of servers for this workgroup is not currently available.
>
> Any thoughts? Thanks.
>
> Leo
>
> -----Original Message-----
> From: Matt Gavin [mailto:mattgav at tempo.com.au]
> Sent: Tuesday, October 23, 2001 5:54 PM
> To: Leo Torio
> Subject: RE: [pptp-server] Martian packets and NetBIOS problems
>
> What is the client?
> What is the servers OS/Kernel/PPPD/PPTPD?
> Have you patched for 128-Bit encryption?
> Can you ping when Encryption is disabled?
>
> Matt.
>
> _______________________________________________
> pptp-server maillist  -  pptp-server at lists.schulte.org
> http://lists.schulte.org/mailman/listinfo/pptp-server
> --- To unsubscribe, go to the url just above this line. --