This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PPTP Astaro 5?

so ive reinstalled astaro 5 today (im getting to be a pro at it)
Trying desperately to get PPTP access working because i hope to have my palm conect and hotsync thru it when i go to japan in two months ^^

anyway i followed the downloadable doc as closely as possible, and added teh masquerade ive seen numerous times on this messageboard however it seems im just not getting a payload accross
the pptp logs just show constant echos, so while monitoring a friend thats testing 4 me i saw that the packet filtering livelog had interesting info
DROP: IN=ppp0 OUT=eth2 SRC=10.52.249.2 DST=66.ip.hidden.37 LEN=56 TOS=0x00 PREC=0x00 TTL=127 ID=3013 PROTO=UDP SPT=1026 DPT=53 LEN=36

so my GUESS is its the GRE ive seen posted about, however i dont have a clue HOW to enable gre, the network definitions as well as the packet filtering rules only care about tcp/udp

also i need some advice knowing HOW to test it, should they be able to ping my 192.168.7.x addresses? obviously pinging just the outside address doesnt help anything

ive got very general firewall rules atm because i want to get this working then tighten down
1. internal->external any
2. external -> internal DCC (port 59)
3. PPTP pool->internal any
4. any->pptp pool any
i tried to forward port 47 for gre but i believe gre isnt that port its a protocol #

clients have always been able to authenticate however can do nothing afterwards, adn with this new instalation my friend can no longer conect to the net when he is conected to me

sorry to ramble- but im trying to be as complete as possible! thanks in advance for the help!

This thread was automatically locked due to age.

Parents

0 Gert Hansen over 21 years ago

Hi eDRoaCH,

your problem is not the GRE problem.

The Packet filter drop you listed is a DNS request coming from your pptp client with the IP 10.52.249.2 and it wants to connect to 66.ip.hidden.37 through eth2.
I am not quite sure which ip address that is.
So at least you need to add a rule to enable this traffic.

Please post your PPTP config, as i assume it has somethign todo with the DNS and so, plz also add a short description of your setup and the actual ruleset (filter/nat) you use.
With all that we can easily find your problem.

regards
Gert
Cancel
Vote Up 0 Vote Down

Cancel
0 eDRoaCH over 21 years ago in reply to Gert Hansen

i just set up an extremly basic setup, no entries for dns or wins in the PPTP setup
thats very interesting its a dns problem, im still unsure as to why my ruleset wouldnt allow dns
trying to get this to work i set up a dns and wins server on internal network (im mcse nt4 so i knew wins better, still not entirely sure if i have dns server right)
im using the dns proxy with my internet and internal addresses there. im only listening on internal interface with any for allowed network so im guessing this is the problem
since ive disabled zone transfers it should be safe to listen on external right?
and they i give them the external ip as dns server?

thx 4 the quick help!
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 eDRoaCH over 21 years ago in reply to Gert Hansen

i just set up an extremly basic setup, no entries for dns or wins in the PPTP setup
thats very interesting its a dns problem, im still unsure as to why my ruleset wouldnt allow dns
trying to get this to work i set up a dns and wins server on internal network (im mcse nt4 so i knew wins better, still not entirely sure if i have dns server right)
im using the dns proxy with my internet and internal addresses there. im only listening on internal interface with any for allowed network so im guessing this is the problem
since ive disabled zone transfers it should be safe to listen on external right?
and they i give them the external ip as dns server?

thx 4 the quick help!
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data