This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trying to setup VPN L2TSP

Hey Everyone,

So I'm finally after several years attempting to get the VPN on my Astaro Box working.  I'm currently using the UTM 9.  I can connect just fine to my VPN with no issues.  But once I'm connected I can not go anywhere.  I have created firewall rules to allow the VPN address pool for the L2TSP to have access to both my internal network as well as the internet.  But what I find interesting in the logs is that when I connect, in the firewall log instead of showing my vpn address it shows the actual external address of where I'm connecting in from.

15:14:55 Packet filter rule #23 L2TP
8.x.x.x : 46141
→
199.167.177.37 : 1227

In this example I was just trying to go whatismyip.com

I've also added the appropriate masq rules as well.  Thank you all in advance for your help with this.

I am currently testing this with an Android Tablet running ICS.  Thanks

This thread was automatically locked due to age.

Parents

0 thefuzz4 over 13 years ago

Here is the exert from the logs


2012:08:06-15:06:42 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="199.167.177.37" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="46141" dstport="1227" tcpflags="ACK" 
2012:08:06-15:06:45 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="199.167.177.37" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="46141" dstport="1227" tcpflags="ACK" 

2012:08:06-15:07:13 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="4.68.90.79" proto="6" length="89" tos="0x00" prec="0x00" ttl="63" srcport="38783" dstport="443" tcpflags="ACK PSH FIN"

2012:08:06-15:07:15 phoenix-1 ulogd[8000]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="2" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="10.242.3.2" dstip="199.83.168.136" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="56812" dstport="443" tcpflags="SYN"

Thank you for your help with this, its just a little confusing as to why it would be dropping it. Let me know if you need more samples from my log files.
EDIT: FYI the 10.242.3.2 is the VPN client address and the 8.30.133.40 is the internet address of the client

Reply

0 thefuzz4 over 13 years ago

Here is the exert from the logs


2012:08:06-15:06:42 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="199.167.177.37" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="46141" dstport="1227" tcpflags="ACK" 
2012:08:06-15:06:45 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="199.167.177.37" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="46141" dstport="1227" tcpflags="ACK" 

2012:08:06-15:07:13 phoenix-1 ulogd[8000]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="23" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.133.40" dstip="4.68.90.79" proto="6" length="89" tos="0x00" prec="0x00" ttl="63" srcport="38783" dstport="443" tcpflags="ACK PSH FIN"

2012:08:06-15:07:15 phoenix-1 ulogd[8000]: id="2002" severity="info" sys="SecureNet" sub="packetfilter" name="Packet accepted" action="accept" fwrule="2" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="10.242.3.2" dstip="199.83.168.136" proto="6" length="60" tos="0x00" prec="0x00" ttl="63" srcport="56812" dstport="443" tcpflags="SYN"

Children

No Data