Skip to contentSkip to conversation

VPN Clients behind firewall

DISCUSSION Dragomir Todorov 2 participants 2 messages Jan 5, 2006

lore
Share & tools
lore
#0 lore raw

Hi,
I have a problem with VPN Clients behind firewall..
| Linux
PPTP -+-> Masq and --> Internet --> PPTP
Client | Firewall Server

The problem is that my PPTP clients behind firewall couldn't connect
here is the system log
pptpd[8688]: GRE: read(fd=6,buffer=804e560,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs pptpd[8688]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)

And when Clients are directly connected to internet everithing is fine...

the Linux mashine is with kernel 2.4.29 and iptables 1.3.2
I've read a lot for documents about VPN-Masq and the pach on kernel 2.2.x but there is nothing about 2.4.29.. Is the problem with masq or enything else?? Please help....

Signature · 4 lines
Dragomir Todorov
Network Administrator
Maxcom Ltd. Burgas, Bulgaria
AS34909
#1 lore raw

If you have more than one vpn client behind your linux firewall you
need to use this patch
http://www.netfilter.org/projects/patch-o-matic/pom-extra.html#pom-extra-pptp-conntrack-nat

Regards,

Quoted 20 lines · Dragomir Todorov

Hi,
I have a problem with VPN Clients behind firewall..
| Linux
PPTP -+-> Masq and --> Internet --> PPTP
Client | Firewall Server

The problem is that my PPTP clients behind firewall couldn't connect here is the system log
pptpd[8688]: GRE: read(fd=6,buffer=804e560,len=8196) from PTY failed:
status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs pptpd[8688]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)

And when Clients are directly connected to internet everithing is fine...

the Linux mashine is with kernel 2.4.29 and iptables 1.3.2 I've read a lot for documents about VPN-Masq and the pach on kernel 2.2.x but there is nothing about 2.4.29..
Is the problem with masq or enything else?? Please help....

Quoted 9 lines

--
Dragomir Todorov
Network Administrator
Maxcom Ltd. Burgas, Bulgaria
AS34909

--
=====================
Rodrigo Ribeiro Montoro
Desenvolvedor BRMAlinux
[email protected]
RHCE/LPIC-I
=====================