Koozali.org: home of the SME Server

VPN Issue after update of 19.Apr.2008

Offline cubique

  • 4
  • +0/-0
VPN Issue after update of 19.Apr.2008
« on: May 06, 2008, 09:58:27 AM »
I encountered the following issue regarding the VPN after the last update of SME 7.3 (on 19.Apr.2008):
- I used to connect from my home (Windows XP) to the corporate VPN (which is on SME 7.3) via a standard Windows VPN connection (PPTP); it works fine for more than 1-2 yrs
- after I installed the latest SME updates the VPN connection is done OK, through this connection I can read my email account and the network on SME subnet

The issue:
- when trying to connect a Remote Desktop computer in SME subnet (as I've done before lot of times), when trying to open an MSSQL connection on a database server located on SME subnet (as I've done before lot of times), the SME subnet stop to respond, meaning that Remote Desktop does not connect, SQL cannot be accessed.

I have search a lot the Google/contribs before posting, also I've done some test, but no solution found.
I will explain what test I've done:
- after I connect the SME VPN I open a Windows XP prompt window and I've run the command: PING -T 192.168.2.7 /* this reply continuously the request I've sent to my SQL Server, which is exactly what I want; so far so good */
- I've tried to open Remote Desktop (from my XP) to 192.168.2.7; the Remote Desktop doesn't connected and more than that, ping stops to reply (instead throw timeout expired messages)
- VPN connection looks still connected but actually I cannot browse/access no resource in the SME subnet
- because I wasn't working at all I've closed the VPN connection, reopened again; again, ping -t 192.168.2.7
- now I've tried to open a MSSQL connection (via ADO/OLEDB library, as I've done thousands of times before); the same behavior, ping reply successfully until the SQL connection requested on 192.168.2.7 machine (located on SME network, as I've mentioned few times)

Now, my believe is that when trying to access any resource via VPN tunnel, firewall intercept and DENY the communication.
I've tried these tests on more than one location, trying to test the same VPN/SME server.

Note: SME 7.3 is setup as server/gateway. What I've explained above works just fine until last SME update.

Any ideea? what to check more?
This is not a bug, for sure, that's why I've not reported as a bug, looks like gateway/firewall altered/misconfiguration than an bug.

Offline byte

  • *
  • 2,183
  • +2/-0
Re: VPN Issue after update of 19.Apr.2008
« Reply #1 on: May 06, 2008, 11:15:31 AM »
Note: SME 7.3 is setup as server/gateway. What I've explained above works just fine until last SME update.

This is not a bug, for sure, that's why I've not reported as a bug, looks like gateway/firewall altered/misconfiguration than an bug.

Please report bugs and potential bugs in the bug tracker. Thanks.

PS. Always search the bug tracker for a possible opened bug report.
--[byte]--

Have you filled in a Bug Report over @ http://bugs.contribs.org ? Please don't wait to be told this way you help us to help you/others - Thanks!

Offline cubique

  • 4
  • +0/-0
Re: VPN Issue after update of 19.Apr.2008
« Reply #2 on: May 06, 2008, 11:39:41 AM »
You are right.

Anyway, I've searched previously the bug tracker but noting special found (it was 3am so maybe I couldn't focus properly). Now I've took a closer look and I've found this topic:
http://bugs.contribs.org/show_bug.cgi?id=549
(maybe is usefully for others that will read this topic later).

No more buzz, sorry.

Offline ntblade

  • *
  • 252
  • +0/-0
Re: VPN Issue after update of 19.Apr.2008
« Reply #3 on: May 13, 2008, 11:24:36 PM »
I'm having very similar problems since doing some updates on a server the other day.  The setup is like this...

Remote XP Clients<--->Internet<--->SME<--->LAN (With MS SBS)

The Windows 2003 Server is the domain controller and does DHCP while the SME server dishes out the VPN IPs (WINS is entered manually for the VPN connection)

I can start the VPN and ping the remote LAN but now (after the updates) as soon as I try to connect to say a Remote Desktop Session, Session times out and I'm no longer able to ping anything.

Is is possible to reverse the update at all?

Many thanks

Edit:
Anyone else having this problem follow the Bugzilla Link Above
NTB
« Last Edit: May 13, 2008, 11:44:02 PM by ntblade »

Offline kevinb

  • *
  • 237
  • +0/-0
Re: VPN Issue after update of 19.Apr.2008
« Reply #4 on: May 14, 2008, 02:10:50 AM »
The fix is in the Bug Report:

Code: [Select]
#Log into the Console as root

#check the settings before changed
cat /etc/ppp/options.pptpd

#note mtu & mru settings

mkdir -p /etc/e-smith/templates-custom/etc/ppp/options.pptpd/
touch /etc/e-smith/templates-custom/etc/ppp/options.pptpd/mtu
touch /etc/e-smith/templates-custom/etc/ppp/options.pptpd/mru
signal-event remoteaccess-update

#check the settings are changed
cat /etc/ppp/options.pptpd

#note the absense of mtu & mru settings