VPN Clients behind firewall

VPN Clients behind firewall

[Dragomir Todorov]

Hi,
I have a problem with VPN Clients behind firewall..
           |         Linux                    
PPTP  -+-> Masq and --> Internet --> PPTP
Client  |         Firewall                             Server

The problem is that my PPTP clients behind firewall couldn't connect
here is the system log
pptpd[8688]: GRE: read(fd=6,buffer=804e560,len=8196) from PTY failed: 
status = -1 error = Input/output error, usually caused by unexpected 
termination of pppd, check option syntax and pppd logs
pptpd[8688]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)

And when Clients are directly connected to internet everithing is fine...

the Linux mashine is with kernel 2.4.29 and iptables 1.3.2
I've read a lot for documents about VPN-Masq and the pach on kernel 
2.2.x but there is nothing about 2.4.29..
Is the problem with masq or enything else?? Please help....

-- 
Dragomir Todorov
Network Administrator
Maxcom Ltd. Burgas, Bulgaria
AS34909

Re: VPN Clients behind firewall

[Sp0oKeR]

 If you have more than one vpn client behind your linux firewall you
need to use this patch
 http://www.netfilter.org/projects/patch-o-matic/pom-extra.html#pom-extra-pptp-conntrack-nat

Regards,

On 1/5/06, Dragomir Todorov <drago@maxcom-bg.com> wrote:
> Hi,
> I have a problem with VPN Clients behind firewall..
>            |         Linux
> PPTP  -+-> Masq and --> Internet --> PPTP
> Client  |         Firewall                             Server
>
> The problem is that my PPTP clients behind firewall couldn't connect
> here is the system log
> pptpd[8688]: GRE: read(fd=6,buffer=804e560,len=8196) from PTY failed:
> status = -1 error = Input/output error, usually caused by unexpected
> termination of pppd, check option syntax and pppd logs
> pptpd[8688]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
>
> And when Clients are directly connected to internet everithing is fine...
>
> the Linux mashine is with kernel 2.4.29 and iptables 1.3.2
> I've read a lot for documents about VPN-Masq and the pach on kernel
> 2.2.x but there is nothing about 2.4.29..
> Is the problem with masq or enything else?? Please help....
>
> --
> Dragomir Todorov
> Network Administrator
> Maxcom Ltd. Burgas, Bulgaria
> AS34909
>
>
>
>


--
=====================
 Rodrigo Ribeiro Montoro
Desenvolvedor BRMAlinux
  spooker@brc.com.br
       RHCE/LPIC-I
=====================