Koozali.org: home of the SME Server

VPN connection - error

Luc Verstraeten

VPN connection - error
« on: January 13, 2003, 02:52:11 PM »
Can anybody explain the following errors in the log-file:

Jan  8 23:12:57 esmith-mail pptpd[3883]: GRE: read error: Bad file descriptor
Jan  8 23:12:57 esmith-mail pptpd[3883]: CTRL: PTY read or GRE write failed (pty,gre)=(-1,-1)


Tnx.

Bill Talcott

Re: VPN connection - error
« Reply #1 on: January 13, 2003, 05:11:07 PM »
Do you have any devices between the SME and the internet connection? If so, is GRE (protocol 47) forwarded?

Luc Verstraeten

Re: VPN connection - error
« Reply #2 on: January 13, 2003, 06:42:27 PM »
Yes, there is a router/firewall between SME and client. I did forward port 1723 and 1725 to the SME-box.

Problem also is that the ISP blocks all traffic below port 1024.

How do I forward protocol 47 (is this UDP?)

Bill Talcott

Re: VPN connection - error
« Reply #3 on: January 13, 2003, 08:05:51 PM »
Luc Verstraeten wrote:
>
> Yes, there is a router/firewall between SME and client. I did
> forward port 1723 and 1725 to the SME-box.
>
> Problem also is that the ISP blocks all traffic below port
> 1024.
>
> How do I forward protocol 47 (is this UDP?)

How to do it depends on the router. You'll need to find out from the manufacturer or something. Your router simply may not support it.

GRE is protocol 47. It's a protocol, just like TCP or UDP, not a port of some other protocol.

Luc Verstraeten

Re: VPN connection - error
« Reply #4 on: January 14, 2003, 10:30:07 AM »
I 've found the sollution. I work with a Freesco-box as firewall/router. The kernel didn't support the GRE-protocol.  There is a howto and kernel update available though at following URL:

http://www.compubytes.be/freesco/New_Folder/HOWTOs/pptp.htm


Hope this helps anybody else with this setup.

Bill Talcott

Re: VPN connection - error
« Reply #5 on: January 14, 2003, 05:52:05 PM »
Is the Freesco box between the SME and the internet connection, or on the client's end? It sounds like it's at the server end. The SME should be able to do anything Freesco can, with one less thing to get in the way...

Luc Verstraeten

Re: VPN connection - error
« Reply #6 on: January 14, 2003, 06:14:06 PM »
The Freesco-box is between the SME and the Internet and a wireless WAN and routes trafic from the local network to the internet or the WAN.