VPN Issue - help

VPN Issue - help

[Voltaire Pascual]

[-- Attachment #1: Type: text/plain, Size: 1294 bytes --]

repost:

Clients can connect to the VPN server w/o any problem. Private network is 192.168.0.0/24. VPN server IP is 

Public (ppp0) = 203.x.x.x
Private (eth0) = 192.168.0.10

When client is connected to the VPN server, it can ping the VPN but not the other machines in the network. Client IP when connected is 192.168.0.80/255.255.255.255. clients can surf the net after they are connected but cannot see other machines inside the network.

###########################
other config:
net.ipv4.ip_forward = 1
net.ipv4.conf.eth0.proxy_arp = 1

###########################
client is connected to the VPN. here's the result of ifconfig: 

ppp1      Link encap:Point-to-Point Protocol
          inet addr:192.168.0.10  P-t-P:192.168.0.80  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
          RX packets:18 errors:0 dropped:0 overruns:0 frame:0
          TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:1062 (1.0 Kb)  TX bytes:147 (147.0 b)
###########################
route -n

192.168.0.180   0.0.0.0         255.255.255.255 UH    0      0        0 ppp1
###########################


What could be the problem? What iptables rule should i do.

TIA
/Voltaire

[-- Attachment #2: Type: text/html, Size: 3347 bytes --]

Re: VPN Issue - help

[xchris]

On Tuesday 06 May 2003 00:42, Voltaire Pascual wrote:
> repost:
>
> Clients can connect to the VPN server w/o any problem. Private network is
> 192.168.0.0/24. VPN server IP is
>
> Public (ppp0) = 203.x.x.x
> Private (eth0) = 192.168.0.10
>> When client is connected to the VPN server, it can ping the VPN but not the
> other machines in the network. Client IP when connected is
> 192.168.0.80/255.255.255.255. clients can surf the net after they are
> connected but cannot see other machines inside the network.
>
> ###########################
> other config:
> net.ipv4.ip_forward = 1
> net.ipv4.conf.eth0.proxy_arp = 1
>
> ###########################
> client is connected to the VPN. here's the result of ifconfig:
>
> ppp1      Link encap:Point-to-Point Protocol
>           inet addr:192.168.0.10  P-t-P:192.168.0.80  Mask:255.255.255.255
>           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
>           RX packets:18 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:3
>           RX bytes:1062 (1.0 Kb)  TX bytes:147 (147.0 b)
> ###########################
> route -n
>
> 192.168.0.180   0.0.0.0         255.255.255.255 UH    0      0        0
> ppp1 ###########################
>
>
> What could be the problem? What iptables rule should i do.



from route -n
you should have
192.168.0.0      0.0.0.0         255.255.255.0   U     0      0        0 
eth(?)

not 192.168.0.180/32
what is .180?


maybe you should post your ifconfig (complete) and route -n (complete) and 
maybe your pptpd.conf

bye

Re: VPN Issue - help

[Voltaire Pascual]

Hi Chris,

Here's my configuration:

##################################
"/etc/pptpd.conf"
option /etc/ppp/options.pptpd
localip 192.168.0.10
remoteip 192.168.0.180-200
##################################

"/etc/ppp/options.pptpd"
lock
proxyarp
auth
mppe-40
mppe-128
mppe-stateless
require-chapms-v2
ms-dns 192.168.0.10
ms-dns 206.172.11.21
netmask 255.255.255.0
##################################

"ifconfig - VPN Client connected"

ppp0 (206.163.247.9) = public IP
eth0 (192.168.0.10) = private IP (192.168.0.0/24)

eth0      Link encap:Ethernet  HWaddr 00:40:D0:09:83:6F
          inet addr:192.168.0.10  Bcast:192.168.0.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:456067 errors:0 dropped:0 overruns:0 frame:14190
          TX packets:445109 errors:0 dropped:0 overruns:1 carrier:13205
          collisions:16678 txqueuelen:100
          RX bytes:225854445 (215.3 Mb)  TX bytes:196873356 (187.7 Mb)
          Interrupt:9

ppp0      Link encap:Point-to-Point Protocol
          inet addr:206.163.247.9  P-t-P:206.163.246.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
          RX packets:327124 errors:0 dropped:0 overruns:0 frame:0
          TX packets:253529 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:207103245 (197.5 Mb)  TX bytes:31867835 (30.3 Mb)

ppp1      Link encap:Point-to-Point Protocol
          inet addr:192.168.0.10  P-t-P:192.168.0.180  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
          RX packets:29 errors:0 dropped:0 overruns:0 frame:0
          TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3
          RX bytes:2392 (2.3 Kb)  TX bytes:259 (259.0 b)
##################################
"route -n"
Destination          Gateway           Genmask         Flags Metric Ref
Use Iface
206.163.246.1    0.0.0.0             255.255.255.255 UH    0      0        0
ppp0
192.168.0.180    0.0.0.0             255.255.255.255 UH    0      0        0
ppp1
192.168.0.0        0.0.0.0             255.255.255.0   U     0      0
0 eth0
127.0.0.0            0.0.0.0             255.0.0.0       U     0      0
0 lo
0.0.0.0                206.163.246.1 0.0.0.0         UG    0      0        0
ppp0
##################################







----- Original Message -----
From: "xchris" <lyra@fastwebnet.it>
To: <netfilter@lists.netfilter.org>
Cc: "Voltaire Pascual" <voltaire@voltaire.servebeer.com>
Sent: Tuesday, May 06, 2003 5:35 PM
Subject: Re: VPN Issue - help


On Tuesday 06 May 2003 00:42, Voltaire Pascual wrote:
> repost:
>
> Clients can connect to the VPN server w/o any problem. Private network is
> 192.168.0.0/24. VPN server IP is
>
> Public (ppp0) = 203.x.x.x
> Private (eth0) = 192.168.0.10
>> When client is connected to the VPN server, it can ping the VPN but not
the
> other machines in the network. Client IP when connected is
> 192.168.0.80/255.255.255.255. clients can surf the net after they are
> connected but cannot see other machines inside the network.
>
> ###########################
> other config:
> net.ipv4.ip_forward = 1
> net.ipv4.conf.eth0.proxy_arp = 1
>
> ###########################
> client is connected to the VPN. here's the result of ifconfig:
>
> ppp1      Link encap:Point-to-Point Protocol
>           inet addr:192.168.0.10  P-t-P:192.168.0.80  Mask:255.255.255.255
>           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
>           RX packets:18 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:3
>           RX bytes:1062 (1.0 Kb)  TX bytes:147 (147.0 b)
> ###########################
> route -n
>
> 192.168.0.180   0.0.0.0         255.255.255.255 UH    0      0        0
> ppp1 ###########################
>
>
> What could be the problem? What iptables rule should i do.



from route -n
you should have
192.168.0.0      0.0.0.0         255.255.255.0   U     0      0        0
eth(?)

not 192.168.0.180/32
what is .180?


maybe you should post your ifconfig (complete) and route -n (complete) and
maybe your pptpd.conf

bye

Re: VPN Issue - help

[xchris]

On Tuesday 06 May 2003 14:45, Voltaire Pascual wrote:

> Hi Chris,
>
> Here's my configuration:
>
CUT


OK.
Now it's more clear.

Stupid question...
did yoy try disabling firewall and enabling ip_forward?

you should have all chains with policy ACCEPT and ip_forward to 1.

If it goes... your problem is related to your firewall scripts,otherwise it's 
a iptables problem.

More stupid question (just to be sure)

I guess this box is the default gateway for your lan. right?
(you reach the internet natted by this box)


To be honest i always prefer to give vpn remote client different IP...
(for example.. 192.168.1.x) to be more clear... but this is not the problem!

Let me know.
bye
xchris

Re: VPN Issue - help

[xchris]

On Wednesday 07 May 2003 09:37, xchris wrote:
> On Tuesday 06 May 2003 14:45, Voltaire Pascual wrote:
> > Hi Chris,
> >
> > Here's my configuration:
>
> CUT
>
>
> OK.
> Now it's more clear.
>
> Stupid question...
> did yoy try disabling firewall and enabling ip_forward?
>
> you should have all chains with policy ACCEPT and ip_forward to 1.
>
> If it goes... your problem is related to your firewall scripts,otherwise
> it's a iptables problem.

ahem.. i mean..
if it goes your problem is your firewall otherwise your pptpd config.
sorry
xchris

Re: vpn help from tanzania.

[Muffadal Essaji]

Hi ..
Please can you help me to configure the vpn in linux i m very new and i
don't  anything .
i using redhat linux 9.0 if u need any kernal patch up.
yours
muffadal.
----- Original Message -----
From: "xchris" <lyra@fastwebnet.it>
To: <netfilter@lists.netfilter.org>
Cc: "Voltaire Pascual" <voltaire@voltaire.servebeer.com>
Sent: Wednesday, May 07, 2003 10:37 AM
Subject: Re: VPN Issue - help


> On Tuesday 06 May 2003 14:45, Voltaire Pascual wrote:
>
> > Hi Chris,
> >
> > Here's my configuration:
> >
> CUT
>
>
> OK.
> Now it's more clear.
>
> Stupid question...
> did yoy try disabling firewall and enabling ip_forward?
>
> you should have all chains with policy ACCEPT and ip_forward to 1.
>
> If it goes... your problem is related to your firewall scripts,otherwise
it's
> a iptables problem.
>
> More stupid question (just to be sure)
>
> I guess this box is the default gateway for your lan. right?
> (you reach the internet natted by this box)
>
>
> To be honest i always prefer to give vpn remote client different IP...
> (for example.. 192.168.1.x) to be more clear... but this is not the
problem!
>
> Let me know.
> bye
> xchris

Re: vpn help from tanzania.

[xchris]

On Wednesday 07 May 2003 11:30, Muffadal Essaji wrote:
> Hi ..
> Please can you help me to configure the vpn in linux i m very new and i
> don't  anything .
> i using redhat linux 9.0 if u need any kernal patch up.
> yours
> muffadal.


we cannot tell you every step do do!
follow one of the several howto and post if you have problem.

This is not a netfilter related problem.
bye