Skip to contentSkip to conversation

VPN through the firewall

DISCUSSION Marty Phee 2 participants 5 messages Mar 2, 2005 – Mar 3, 2005

lore
Share & tools
lore

Marty Phee

author
#0 lore raw

I've got a SUSE box running my home firewall and a WinXP work machine that I use to VPN into the office network. Before I put this SUSE 9.2 in I had a Mandrake 9.1 box that worked just fine.

Everything but my VPN connection to the office works.

I've added all kinds of rules to try to get this to work, but nothings working. I don't see any packets getting dropped/rejected. It looks like it makes the connection to the vpn server, but it's not verifying the password.

With Ethereal I see this:
Source: 129.230.241.140
Destination: 192.168.0.73
Protocol: EAP
Info: Request, EAP-TLS [RFC2716] [Aboba]

That line just keeps repeating until it timesout with a 619 on the windows machine.

Help would be greatly appreciated!

#1 lore raw
Quoted 5 lines · Marty Phee

I've got a SUSE box running my home firewall and a WinXP work machine that I use to VPN into the office network. Before I put this SUSE 9.2 in I had a Mandrake 9.1 box that worked just fine.

Everything but my VPN connection to the office works.

by VPN, do you mean PPTP?

-j

--
"Beer. Now there's a temporary solution."
--The Simpsons

author
#2 lore raw

Yes, PPTP I believe.

Quoted 17 lines · Jason Opperisano
Quoted 3 lines · Marty Phee

I've got a SUSE box running my home firewall and a WinXP work machine that I use to VPN into the office network. Before I put this SUSE 9.2 in I had a Mandrake 9.1 box that worked just fine.

Everything but my VPN connection to the office works.

by VPN, do you mean PPTP?

-j

--
"Beer. Now there's a temporary solution."
--The Simpsons

#3 lore raw
Quoted 1 line · Marty Phee

Yes, PPTP I believe.

mmm hmmm...

Quoted 5 lines
Quoted 4 lines · Jason Opperisano
Quoted 2 lines · Marty Phee

I've got a SUSE box running my home firewall and a WinXP work machine that I use to VPN into the office network. Before I put this SUSE 9.2

suse 9.2 == 2.6 kernel-based

Quoted 1 line
Quoted 1 line
Quoted 1 line

in I had a Mandrake 9.1 box that worked just fine.

mandrake 9.1 == 2.4 kernel-based

mandrake also had a tendency to ship the pptp/gre conntrack/nat kernel modules as part of their kernels...

Gary W. Smith can speak to this much better than myself, but 2.6 + pptp/gre conntrack/nat is not a winning combo, AFAIK...

-j

--
"Alright brain, you don't like me and I don't like you. But let's just
get through this and then I can get back to killing you with beer."
--The Simpsons

author
#4 lore raw
Quoted 2 lines

Gary W. Smith can speak to this much better than myself, but 2.6 + pptp/gre conntrack/nat is not a winning combo, AFAIK...

That sucks. Why exactly? What causes problems.

Quoted 38 lines · Jason Opperisano
Quoted 1 line · Marty Phee

Yes, PPTP I believe.

mmm hmmm...

Quoted 6 lines
Quoted 4 lines · Jason Opperisano
Quoted 1 line · Marty Phee

I've got a SUSE box running my home firewall and a WinXP work machine that I use to VPN into the office network. Before I put this SUSE 9.2

suse 9.2 == 2.6 kernel-based

Quoted 1 line
Quoted 1 line
Quoted 1 line

in I had a Mandrake 9.1 box that worked just fine.

mandrake 9.1 == 2.4 kernel-based

mandrake also had a tendency to ship the pptp/gre conntrack/nat kernel modules as part of their kernels...

Gary W. Smith can speak to this much better than myself, but 2.6 + pptp/gre conntrack/nat is not a winning combo, AFAIK...

-j

--
"Alright brain, you don't like me and I don't like you. But let's just
get through this and then I can get back to killing you with beer."
--The Simpsons