Find the answer to your Linux question:
Results 1 to 2 of 2
Hi i started pptpd who come with apt-get install on debian etch. When i try to connect to my vpn server i sucessfully authentificated , and recive remote ip address. ...
  1. #1
    Just Joined!
    Join Date
    May 2008
    Posts
    7

    PPTPD Problem



    Hi i started pptpd who come with apt-get install on debian etch. When i try to connect to my vpn server i sucessfully authentificated , and recive remote ip address. But i only have ping to local-lan, i don't have inet. I will paste on bottom my config files. And my firewall & routing table.

    Code:
    egrep -v '^[[:space:]]*(#|$)' /etc/pptpd.conf
    option /etc/ppp/pptpd-options
    logwtmp
    localip 10.0.0.1
    remoteip 10.0.0.2-20
    Code:
     egrep -v '^[[:space:]]*(#|$)' /etc/ppp/pptpd-options
    name pptpd
    ipparam PoPToP
    lock
    mtu 1490
    mru 1490
    ms-dns 192.168.0.1
    ms-dns 77.70.5.1
    multilink
    proxyarp
    auth
    require-mschap
    require-mschap-v2
    ipcp-accept-local
    ipcp-accept-remote
    lcp-echo-failure 30
    lcp-echo-interval 5
    deflate 0
    require-mppe-128
    nopcomp
    noaccomp
    Code:
     cat /etc/sysctl.conf | grep ipv4
    #net/ipv4/icmp_echo_ignore_broadcasts=1
    #net.ipv4.conf.default.rp_filter=1
    #net.ipv4.tcp_syncookies=1
    net.ipv4.conf.default.forwarding=1
    Code:
    route
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    10.0.0.2        *               255.255.255.255 UH    0      0        0 ppp0
    192.168.0.0     *               255.255.255.0   U     0      0        0 eth1
    localnet        *               255.255.255.0   U     0      0        0 eth0
    default         home-77-70-5-1. 0.0.0.0         UG    0      0        0 eth0
    Code:
    ifconfig
    ppp0      Link encap:Point-to-Point Protocol
              inet addr:10.0.0.1  P-t-P:10.0.0.2  Mask:255.255.255.255
              UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1396  Metric:1
              RX packets:447 errors:0 dropped:0 overruns:0 frame:0
              TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:3
              RX bytes:41620 (40.6 KiB)  TX bytes:110 (110.0 b)
    Code:
    egrep -v '^[[:space:]]*(#|$)' /etc/init.d/firewall
       echo 1 > /proc/sys/net/ipv4/ip_forward
    iptables -P INPUT DROP
    iptables -P FORWARD DROP
    iptables -P OUTPUT ACCEPT
    iptables -F INPUT
    iptables -F FORWARD
    iptables -F OUTPUT
    iptables -F -t nat
    iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT
    iptables -A FORWARD -i eth0 -o eth1 -m state --state ESTABLISHED,RELATED -j ACCEPT
    iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
    iptables -A INPUT -i eth1 -s 0/0 -d 0/0 -j ACCEPT
    iptables -A INPUT -i lo -s 0/0 -d 0/0 -j ACCEPT
    iptables -A POSTROUTING -t nat -s 192.168.0.0/24 -o eth0 -j SNAT --to-source 77.70.5.130
    iptables -A POSTROUTING -t nat -s 10.0.0.0/24 -o ppp+ -j SNAT --to-source 77.70.5.130
    iptables -A INPUT -i eth0 -s 192.168.0.0/24 -j DROP
    iptables -A INPUT -i eth0 -s 127.0.0.0/8 -j DROP
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 21 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 10001 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 22 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 23 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 25 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 465 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 80 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 113 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 443 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 143 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 993 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 110 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 995 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 1234 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 1723 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 10000 --syn -j ACCEPT
    iptables -A INPUT -p tcp -s 0/0 -d 0/0 --destination-port 10510 --syn -j ACCEPT
    iptables -A INPUT -s 0/0 -d 0/0 -p udp -j DROP
    iptables -A INPUT -s 0/0 -d 0/0 -p tcp --syn -j DROP
    Code:
    PPP adapter jonyhome:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : jonyhome
       Physical Address. . . . . . . . . :
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.0.0.2(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.255
       Default Gateway . . . . . . . . . : 0.0.0.0
       DNS Servers . . . . . . . . . . . : 192.168.0.1
                                           77.70.5.1
       NetBIOS over Tcpip. . . . . . . . : Enabled
    Code:
    Tunnel adapter Local Area Connection* 11:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::5efe:10.0.0.2%20(Preferred)
       Default Gateway . . . . . . . . . :
       DNS Servers . . . . . . . . . . . : 192.168.0.1
                                           77.70.5.1
       NetBIOS over Tcpip. . . . . . . . : Disabled
    Code:
    C:\Users\pc>ping 10.0.0.1
    
    Pinging 10.0.0.1 with 32 bytes of data:
    
    Request timed out.
    Request timed out.
    
    Ping statistics for 10.0.0.1:
        Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),
    Control-C
    ^C
    Code:
    C:\Users\pc>ping 192.168.0.1
    
    Pinging 192.168.0.1 with 32 bytes of data:
    
    Request timed out.
    Request timed out.
    Request timed out.
    Request timed out.
    
    Ping statistics for 192.168.0.1:
        Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

  2. #2
    Just Joined!
    Join Date
    May 2008
    Posts
    7

    more info

    Code:
    ifconfig
    eth0      Link encap:Ethernet  HWaddr 4C:00:10:74:F0:11
              inet addr:77.70.5.130  Bcast:77.70.5.255  Mask:255.255.255.0
              inet6 addr: fe80::4e00:10ff:fe74:f011/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:158763666 errors:19 dropped:12 overruns:4 frame:0
              TX packets:207997081 errors:0 dropped:0 overruns:10 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:2098226998 (1.9 GiB)  TX bytes:4741822 (4.5 MiB)
              Interrupt:12 Base address:0xe400
    
    eth1      Link encap:Ethernet  HWaddr 00:00:B5:C4:64:09
              inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
              inet6 addr: fe80::200:b5ff:fec4:6409/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:219874164 errors:83 dropped:117 overruns:34 frame:0
              TX packets:161743456 errors:0 dropped:0 overruns:10 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:3806509117 (3.5 GiB)  TX bytes:1373480409 (1.2 GiB)
              Interrupt:5 Base address:0xe800
    
    lo        Link encap:Local Loopback
              inet addr:127.0.0.1  Mask:255.0.0.0
              inet6 addr: ::1/128 Scope:Host
              UP LOOPBACK RUNNING  MTU:16436  Metric:1
              RX packets:159894 errors:0 dropped:0 overruns:0 frame:0
              TX packets:159894 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:0
              RX bytes:23252881 (22.1 MiB)  TX bytes:23252881 (22.1 MiB)
    
    ppp0      Link encap:Point-to-Point Protocol
              inet addr:10.0.0.1  P-t-P:10.0.0.2  Mask:255.255.255.255
              UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1396  Metric:1
              RX packets:81 errors:0 dropped:0 overruns:0 frame:0
              TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:3
              RX bytes:10079 (9.8 KiB)  TX bytes:110 (110.0 b)
    
    route -n
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    10.0.0.2        0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
    192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1plog
    77.70.5.0       0.0.0.0         255.255.255.0   U     0      0        0 eth0
    0.0.0.0         77.70.5.1       0.0.0.0         UG    0      0        0 eth0
    
    May  8 13:44:30 router pppd[32307]: Using interface ppp0
    May  8 13:44:30 router pppd[32307]: MPPE 128-bit stateless compression enabled
    May  8 13:44:32 router pppd[32307]: Cannot determine ethernet address for proxy ARP
    May  8 13:44:32 router pppd[32307]: local  IP address 10.0.0.1
    May  8 13:44:32 router pppd[32307]: remote IP address 10.0.0.2
    
    May  8 13:44:27 router pppd[32307]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
    May  8 13:44:27 router pppd[32307]: pppd 2.4.4 started by root, uid 0
    May  8 13:44:27 router pppd[32307]: Starting negotiation on /dev/pts/2
    May  8 13:44:30 router pppd[32307]: Using interface ppp0
    May  8 13:44:30 router pppd[32307]: MPPE 128-bit stateless compression enabled
    May  8 13:44:32 router pppd[32307]: local  IP address 10.0.0.1
    May  8 13:44:32 router pppd[32307]: remote IP address 10.0.0.2
    
    PPP adapter jonyhome:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : jonyhome
       Physical Address. . . . . . . . . :
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv4 Address. . . . . . . . . . . : 10.0.0.2(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.255
       Default Gateway . . . . . . . . . : 0.0.0.0
       DNS Servers . . . . . . . . . . . : 192.168.0.1
                                           77.70.5.1
       NetBIOS over Tcpip. . . . . . . . : Enabled
    
    Tunnel adapter Local Area Connection* 11:
    
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter #4
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       Link-local IPv6 Address . . . . . : fe80::5efe:10.0.0.2%20(Preferred)
       Default Gateway . . . . . . . . . :
       DNS Servers . . . . . . . . . . . : 192.168.0.1
                                           77.70.5.1C:\Users\pc>route print
    ===========================================================================
    Interface List
     19 ........................... jonyhome
      9 ...00 c0 a8 d7 6f 85 ...... Atheros AR5005G Wireless Network Adapter
      8 ...00 03 0d 62 ce f4 ...... Realtek RTL8139/810x Family Fast Ethernet NIC
      1 ........................... Software Loopback Interface 1
     11 ...00 00 00 00 00 00 00 e0  isatap.jonyhome-lan.com
     13 ...00 00 00 00 00 00 00 e0  Microsoft ISATAP Adapter #2
     10 ...02 00 54 55 4e 01 ...... Teredo Tunneling Pseudo-Interface
     12 ...00 00 00 00 00 00 00 e0  isatap.{2CE74D8F-4523-45EE-AF1B-BD6C99FEE524}
     20 ...00 00 00 00 00 00 00 e0  Microsoft ISATAP Adapter #4
    ===========================================================================
    
    IPv4 Route Table
    ===========================================================================
    Active Routes:
    Network Destination        Netmask          Gateway       Interface  Metric
              0.0.0.0          0.0.0.0   192.168.10.254   192.168.10.113   4250
              0.0.0.0          0.0.0.0         On-link          10.0.0.2     26
             10.0.0.2  255.255.255.255         On-link          10.0.0.2    281
          77.70.5.130  255.255.255.255   192.168.10.254   192.168.10.113   4251
            127.0.0.0        255.0.0.0         On-link         127.0.0.1   4531
            127.0.0.1  255.255.255.255         On-link         127.0.0.1   4531
      127.255.255.255  255.255.255.255         On-link         127.0.0.1   4531
         192.168.10.0    255.255.255.0         On-link    192.168.10.113   4506
       192.168.10.113  255.255.255.255         On-link    192.168.10.113   4506
       192.168.10.255  255.255.255.255         On-link    192.168.10.113   4506
            224.0.0.0        240.0.0.0         On-link         127.0.0.1   4531
            224.0.0.0        240.0.0.0         On-link    192.168.10.113   4508
            224.0.0.0        240.0.0.0         On-link          10.0.0.2     26
      255.255.255.255  255.255.255.255         On-link         127.0.0.1   4531
      255.255.255.255  255.255.255.255         On-link    192.168.10.113   4506
      255.255.255.255  255.255.255.255         On-link          10.0.0.2    281
    ===========================================================================
    Persistent Routes:
      None
    
    IPv6 Route Table
    ===========================================================================
    Active Routes:
     If Metric Network Destination      Gateway
      1    306 ::1/128                  On-link
      9    281 fe80::/64                On-link
     20    286 fe80::5efe:10.0.0.2/128  On-link
      9    281 fe80::b839:ae6:d174:ded2/128
                                        On-link
      1    306 ff00::/8                 On-link
      9    281 ff00::/8                 On-link
    ===========================================================================
    Persistent Routes:
      None
    
       NetBIOS over Tcpip. . . . . . . . : Disabled

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •