Koozali.org: home of the SME Server

PPTP problem

leiw

PPTP problem
« on: June 05, 2007, 02:11:49 PM »
I cannot connect from home to company SME server using pptp,
I already opened firewall port GRE and 1723 port, the following
is the var/log/message:

Jun  5 19:54:54 sme pppd[5367]: Plugin radius.so loaded.
Jun  5 19:54:54 sme pppd[5367]: RADIUS plugin initialized.
Jun  5 19:54:54 sme pppd[5367]: pppd 2.4.4 started by root, uid 0
Jun  5 19:54:54 sme kernel: divert: not allocating divert_blk for non-ethernet device ppp0
Jun  5 19:54:54 sme pppd[5367]: Using interface ppp0
Jun  5 19:54:54 sme pppd[5367]: Connect: ppp0 <--> /dev/pts/0
Jun  5 19:55:24 sme pppd[5367]: LCP: timeout sending Config-Requests
Jun  5 19:55:31 sme pptpd[5366]: CTRL: Reaping child PPP[5367]
Jun  5 19:55:31 sme pppd[5367]: Modem hangup
Jun  5 19:55:31 sme pppd[5367]: Connection terminated.
Jun  5 19:55:31 sme kernel: divert: no divert_blk to free, ppp0 not ethernet
Jun  5 19:55:31 sme pppd[5367]: Exit.


Thanks

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: PPTP problem
« Reply #1 on: June 05, 2007, 03:01:33 PM »
Quote from: "leiw"
I cannot connect from home to company SME server using pptp,
I already opened firewall port GRE and 1723 port, the following
is the var/log/message:


Hi

do you really mean GRE port or are you referring to GRE protocol (protocol 47)?

Ciao

Stefano

Offline mmccarn

  • *
  • 2,656
  • +10/-0
PPTP problem
« Reply #2 on: June 05, 2007, 05:22:35 PM »
Is the SME at work in server-only mode or server-gateway mode? (If it's in server-gateway mode, the firewall rules will be handled automatically when you enable PPTP connections).

Does your home router allow PPTP pass-thru?  If so, is it enabled?  (PPTP is an odd beast...)

PPTP uses IPv4 Protocol number 47 for data traffic once authentication has been done using TCP port 1723.  Protocol 47 is also referred to as the GRE protocol".  GRE, as pointed out by leiw, is a protocol and not a port.  That is, it is at the same level in networking technology as 'TCP', 'UDP' and 'ICMP' (Here's a list of IPv4 Protocols: http://en.wikipedia.org/wiki/List_of_IPv4_protocol_numbers).

So, while SMTP uses the TCP protocol (protocol number 6) combined with port 25, PPTP uses the GRE protocol (protocol number 47).  Very, very few routers provide a specific way to control the GRE protocol - what they do instead is tie it to TCP port 1723 - so a router with "PPTP pass-thru" support will know to allow GRE traffic on any connection that has already been established on TCP port 1723.

If your routers (at both ends!) don't specifically mention 'pptp pass-thru' then they probably don't support it.

leiw

PPTP problem
« Reply #3 on: June 06, 2007, 01:52:25 AM »
1. server-only mode
2. I opened TCP port 1723 and Protocol 47 (GRE) on firewall