question about pptp connection tracking
A message that is not in the archive (sent off-list or not yet received): [email protected]
A message that is not in the archive (sent off-list or not yet received): [email protected]
Quoted 5 lines · Matthew Schumacher
Confirmed, compiling the pptp-conntrack-nat patch as modules and not loading them causes my pptpd server to work again, loading them causes it to break. Since iptables doesn't seem to be dropping packets I'm assuming that either (1) I have not configured iptables correctly, (2) I have found a bug, or (3) this module isn't supposed to work that way.
*sigh*. How often do I have to state this on the mailinglist:
a) which exact kernel version are you running? Plain source from kernel.org, vendor sources?
b) which patches [apart from pptp] from what version_ of patch-o-matic did you apply?
Do you have any idea how much changes there are in pom and the kernel over time? How can I guess whcih particular combination you are running, and which potential bugs have been solved since then?
Quoted 1 line
Quoted 1 line
I'm using pptp-conntrack-nat from pom 20030912.
that's most likely the problem. please try using a more recent version
(latest cvs snapshot or even CVS).
Signature · 5 lines
- Harald Welte <[email protected]> http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie
Sorry to make you repeat this... I was mostly just wondering if this should work or not.
To answer your questions, it's a plain 2.4.23 from kernel.org. The only patches are the bsd-mppe patches from pptpd and pptp-conntrack-nat from pom 20030912.
I'll give the CVS stuff a whirl.
Thanks,
schu
Quoted 24 lines · Harald Welte
Quoted 1 line · Matthew Schumacher
Confirmed, compiling the pptp-conntrack-nat patch as modules and not loading them causes my pptpd server to work again, loading them causes it to break. Since iptables doesn't seem to be dropping packets I'm assuming that either (1) I have not configured iptables correctly, (2) I have found a bug, or (3) this module isn't supposed to work that way.
*sigh*. How often do I have to state this on the mailinglist:
a) which exact kernel version are you running? Plain source from kernel.org, vendor sources?
b) which patches [apart from pptp] from whatversion_of patch-o-matic did you apply?Do you have any idea how much changes there are in pom and the kernel over time? How can I guess whcih particular combination you are running, and which potential bugs have been solved since then?
Quoted 1 line
Quoted 1 line
I'm using pptp-conntrack-nat from pom 20030912.
that's most likely the problem. please try using a more recent version
(latest cvs snapshot or even CVS).