Re: question about pptp connection tracking

Re: question about pptp connection tracking

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1435 bytes --]

On Thu, Dec 18, 2003 at 04:04:56PM -0900, Matthew Schumacher wrote:
> Confirmed, compiling the pptp-conntrack-nat patch as modules and not 
> loading them causes my pptpd server to work again, loading them causes 
> it to break.  Since iptables doesn't seem to be dropping packets I'm 
> assuming that either (1) I have not configured iptables correctly, (2) I 
> have found a bug, or (3) this module isn't supposed to work that way.

*sigh*.  How often do I have to state this on the mailinglist:

a) which exact kernel version are you running? Plain source from
kernel.org, vendor sources?
b) which patches [apart from pptp] from what version_ of patch-o-matic
did you apply?

Do you have any idea how much changes there are in pom and the kernel
over time?  How can I guess whcih particular combination you are
running, and which potential bugs have been solved since then?

> >I'm using pptp-conntrack-nat from pom 20030912.

that's most likely the problem.   please try using a more recent version
(latest cvs snapshot or even CVS).


-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: question about pptp connection tracking

[Matthew Schumacher]

Sorry to make you repeat this... I was mostly just wondering if this 
should work or not.

To answer your questions, it's a plain 2.4.23 from kernel.org.  The only 
patches are the bsd-mppe patches from pptpd and pptp-conntrack-nat from 
pom 20030912.

I'll give the CVS stuff a whirl.

Thanks,
schu

Harald Welte wrote:
> On Thu, Dec 18, 2003 at 04:04:56PM -0900, Matthew Schumacher wrote:
> 
>>Confirmed, compiling the pptp-conntrack-nat patch as modules and not 
>>loading them causes my pptpd server to work again, loading them causes 
>>it to break.  Since iptables doesn't seem to be dropping packets I'm 
>>assuming that either (1) I have not configured iptables correctly, (2) I 
>>have found a bug, or (3) this module isn't supposed to work that way.
> 
> 
> *sigh*.  How often do I have to state this on the mailinglist:
> 
> a) which exact kernel version are you running? Plain source from
> kernel.org, vendor sources?
> b) which patches [apart from pptp] from what version_ of patch-o-matic
> did you apply?
> 
> Do you have any idea how much changes there are in pom and the kernel
> over time?  How can I guess whcih particular combination you are
> running, and which potential bugs have been solved since then?
> 
> 
>>>I'm using pptp-conntrack-nat from pom 20030912.
> 
> 
> that's most likely the problem.   please try using a more recent version
> (latest cvs snapshot or even CVS).
> 
>