Re: PPTP connection tracker

[Harald Welte <laforge@gnumonks.org>]

[-- Attachment #1: Type: text/plain, Size: 1546 bytes --]

On Mon, Jul 21, 2003 at 07:15:23PM -0400, Joshua Jackson wrote:
> Greetings,
> 
> Just curious if you have had any feedback on the PPTP connection
> tracking code in the 20030107 patch-o-matic.  I implemented it in a
> firewall product of mine for a while and had numerous complaints that
> all PPTP connectivity through the firewall was broken.

without a verbose description about the exact problem, I cannot debug
the problem.  I need to know

- client and server OS/version
- information about the network
- configuration of the PPTP-related ruleset
- log of erroneously dropped packets (if any)
- behaviour of expectations and GRE entries in /proc/net/ip_conntrack
  while session was established
- probably also packet dumps/traces (tcpdump, ethereal) needed.

> I have removed the code from the kernel for now, but still get a lot of 
> complaints about only being able to use a single PPTP session.

of course, since you cannot support more than one session without the
PPTP helper.

> If there have been any updates to this code, is there a place I can download 
> it?

yes, check out patch-o-matic from CVS, or go to
http://netfilter.org/documentation/pomlist/pom-extra.html#pptp-conntrack-nat


> Joshua Jackson
> Vortech Consulting
> http://www.vortech.net

-- 
- Harald Welte <laforge@gnumonks.org>               http://www.gnumonks.org/
============================================================================
Programming is like sex: One mistake and you have to support it your lifetime

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]