Настроен впн poptop 1.2.3, pppd -2.4.3. Есть несколько сегметнов, соединенных шлюзами. Сеть выглядит так:
vpn.server(А - 192.168.1.0/24) - gateway(Б - 192.168.2.0/24). Компы из сети А нормально коннектятся к vpn-servery, а вот из сети Б получаеют ошибку (Ошибка: 619: Не удается подключиться к удаленному компьютеру, поэтому порт подключения закрыт). В настройках клиента все галочки нужные сняты.
/etc/pptd.conf
option /etc/ppp/options.pptpd
debug
localip 192.168.200.1
remoteip 192.168.200.2-10/etc/ppp/options.pptpd
auth
lock
require-chap
require-mschap-v2
ms-dns 217.115.80.1
ms-dns 195.54.2.1
192.168.200.1:
/etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client server secret IP addresses
igor_p * 123 */var/log/messeges
Nov 10 11:39:03 router pptpd[4930]: CTRL: Client 192.168.5.31 control connection started
Nov 10 11:39:03 router pptpd[4930]: CTRL: Starting call (launching pppd, opening GRE)
Nov 10 11:39:03 router kernel: application bug: pppd(4931) has SIGCHLD set to SIG_IGN but calls wait().
Nov 10 11:39:03 router kernel: (see the NOTES section of 'man 2 wait'). Workaround activated.
Nov 10 11:39:03 router pppd[4931]: pppd 2.4.3 started by root, uid 0
Nov 10 11:39:03 router pppd[4931]: Using interface ppp1
Nov 10 11:39:03 router pppd[4931]: Connect: ppp1 <--> /dev/pts/5
Nov 10 11:39:33 router pppd[4931]: LCP: timeout sending Config-Requests
Nov 10 11:39:33 router pppd[4931]: Connection terminated.
Nov 10 11:39:33 router pppd[4931]: Using interface ppp1
Nov 10 11:39:33 router pppd[4931]: Connect: ppp1 <--> /dev/pts/5
Nov 10 11:39:33 router pppd[4931]: tcflush failed: Bad file descriptor
Nov 10 11:39:33 router pppd[4931]: tcsetattr: Invalid argument (line 1016)
Nov 10 11:39:33 router pppd[4931]: Exit.
Nov 10 11:39:33 router pptpd[4930]: GRE: read(fd=6,buffer=804eb00,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Nov 10 11:39:33 router pptpd[4930]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Nov 10 11:39:33 router pptpd[4930]: CTRL: Client 192.168.5.31 control connection finished
проблема исчезла после остановки iptables, хотя в настройках ничего не было запрещено. и это не понятно.
>проблема исчезла после остановки iptables, хотя в настройках ничего не было запрещено.
>и это не понятно.
значит было запрещено! на firewall нужно пропускать порт 1723 и протокол gre номер 47
>>проблема исчезла после остановки iptables, хотя в настройках ничего не было запрещено.
>>и это не понятно.
>значит было запрещено! на firewall нужно пропускать порт 1723
>и протокол gre номер 47Аналогичная проблема. Для решения достаточно выгрузить модуль ip_nat_pptp.
>>>проблема исчезла после остановки iptables, хотя в настройках ничего не было запрещено.
>>>и это не понятно.
>>значит было запрещено! на firewall нужно пропускать порт 1723
>>и протокол gre номер 47
>
> Аналогичная проблема. Для решения достаточно выгрузить модуль ip_nat_pptp.
У меня такая же проблема!
Ни остановка iptables ни выгрузка модулей ip_nat.... (ip_nat_pptp я ваще не грузил)не помагает. :(Если перегрузить сервер, некоторое время нормально работает всё.. потом снова не хочет.
Jan 23 08:57:26 pmbc pptpd[9906]: CTRL: Client 193.110.17.24 control connection started
Jan 23 08:57:26 pmbc pptpd[9906]: CTRL: Starting call (launching pppd, opening GRE)
Jan 23 08:57:26 pmbc pppd[9907]: pppd 2.4.3 started by root, uid 0
Jan 23 08:57:27 pmbc pppd[9907]: Using interface ppp0
Jan 23 08:57:27 pmbc pppd[9907]: Connect: ppp0 <--> /dev/pts/1
Jan 23 08:57:57 pmbc pppd[9907]: LCP: timeout sending Config-Requests
Jan 23 08:57:57 pmbc pppd[9907]: Connection terminated.
Jan 23 08:57:57 pmbc pppd[9907]: Using interface ppp0
Jan 23 08:57:57 pmbc pppd[9907]: Connect: ppp0 <--> /dev/pts/1
Jan 23 08:57:57 pmbc pppd[9907]: tcflush failed: Bad file descriptor
Jan 23 08:57:57 pmbc pppd[9907]: tcsetattr: Invalid argument (line 1016)
Jan 23 08:57:57 pmbc pppd[9907]: Exit.
Jan 23 08:57:57 pmbc pptpd[9906]: GRE: read(fd=6,buffer=804e5a0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Jan 23 08:57:57 pmbc pptpd[9906]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Jan 23 08:57:57 pmbc pptpd[9906]: CTRL: Client 193.110.17.24 control connection finished
Что вот это за фигня: Jan 23 08:57:57 pmbc pppd[9907]: tcflush failed: Bad file descriptor
Какой именно файл?
Есть ещё идеи?! :(((
Аналогичная ошибка. Выгрузил все, убрал все шифрования и все равно эта ошибка (6,7)
>Аналогичная ошибка. Выгрузил все, убрал все шифрования и все равно эта ошибка
>(6,7)Вот лог:
CTRL: local address = 192.168.1.10
Jul 21 17:08:09 ST pptpd[8844]: CTRL: remote address = 192.168.1.100
Jul 21 17:08:09 ST pptpd[8844]: CTRL: pppd options file = /etc/ppp/pptpd-options
Jul 21 17:08:09 ST pptpd[8844]: CTRL: Client 89.178.56.131 control connection started
Jul 21 17:08:09 ST pptpd[8844]: CTRL: Received PPTP Control Message (type: 1)
Jul 21 17:08:09 ST pptpd[8844]: CTRL: Made a START CTRL CONN RPLY packet
Jul 21 17:08:09 ST pptpd[8844]: CTRL: I wrote 156 bytes to the client.
Jul 21 17:08:09 ST pptpd[8844]: CTRL: Sent packet to client
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Received PPTP Control Message (type: 7)
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Set parameters to 100000000 maxbps, 64 window size
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Made a OUT CALL RPLY packet
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Starting call (launching pppd, opening GRE)
Jul 21 17:08:10 ST pptpd[8844]: CTRL: pty_fd = 6
Jul 21 17:08:10 ST pptpd[8844]: CTRL: tty_fd = 7
Jul 21 17:08:10 ST pptpd[8845]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
Jul 21 17:08:10 ST pptpd[8845]: CTRL (PPPD Launcher): local address = 192.168.1.10
Jul 21 17:08:10 ST pptpd[8845]: CTRL (PPPD Launcher): remote address = 192.168.1.100
Jul 21 17:08:10 ST pppd[8845]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
Jul 21 17:08:10 ST pppd[8845]: pptpd-logwtmp: $Version$
Jul 21 17:08:10 ST pppd[8845]: pppd 2.4.4 started by root, uid 0
Jul 21 17:08:10 ST pptpd[8844]: CTRL: I wrote 32 bytes to the client.
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Sent packet to client
Jul 21 17:08:10 ST pppd[8845]: using channel 23
Jul 21 17:08:10 ST pppd[8845]: Using interface ppp0
Jul 21 17:08:10 ST pppd[8845]: Connect: ppp0 <--> /dev/pts/4
Jul 21 17:08:10 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:10 ST pptpd[8844]: GRE: Bad checksum from pppd.
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Received PPTP Control Message (type: 15)
Jul 21 17:08:10 ST pptpd[8844]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Jul 21 17:08:11 ST pptpd[8844]: GRE: buffering packet #1 (expecting #0, lost or reordered)
Jul 21 17:08:13 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:14 ST pptpd[8844]: GRE: timeout waiting for 1 packets
Jul 21 17:08:14 ST pptpd[8844]: GRE: accepting #1 from queue
Jul 21 17:08:14 ST pptpd[8844]: GRE: accepting packet #2
Jul 21 17:08:14 ST pppd[8845]: rcvd [LCP ConfReq id=0x1 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:14 ST pppd[8845]: sent [LCP ConfRej id=0x1 <callback CBCP>]
Jul 21 17:08:14 ST pppd[8845]: rcvd [LCP ConfReq id=0x2 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:14 ST pppd[8845]: sent [LCP ConfRej id=0x2 <callback CBCP>]
Jul 21 17:08:16 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:18 ST pptpd[8844]: GRE: accepting packet #3
Jul 21 17:08:18 ST pppd[8845]: rcvd [LCP ConfReq id=0x3 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:18 ST pppd[8845]: sent [LCP ConfRej id=0x3 <callback CBCP>]
Jul 21 17:08:19 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:22 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:22 ST pptpd[8844]: GRE: accepting packet #4
Jul 21 17:08:22 ST pppd[8845]: rcvd [LCP ConfReq id=0x4 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:22 ST pppd[8845]: sent [LCP ConfRej id=0x4 <callback CBCP>]
Jul 21 17:08:25 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:26 ST pptpd[8844]: GRE: accepting packet #5
Jul 21 17:08:26 ST pppd[8845]: rcvd [LCP ConfReq id=0x5 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:26 ST pppd[8845]: sent [LCP ConfRej id=0x5 <callback CBCP>]
Jul 21 17:08:28 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:30 ST pptpd[8844]: GRE: accepting packet #6
Jul 21 17:08:30 ST pppd[8845]: rcvd [LCP ConfReq id=0x6 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:30 ST pppd[8845]: sent [LCP ConfRej id=0x6 <callback CBCP>]
Jul 21 17:08:31 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:34 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:34 ST pptpd[8844]: GRE: accepting packet #7
Jul 21 17:08:34 ST pppd[8845]: rcvd [LCP ConfReq id=0x7 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:34 ST pppd[8845]: sent [LCP ConfRej id=0x7 <callback CBCP>]
Jul 21 17:08:37 ST pppd[8845]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xf3820237> <pcomp> <accomp>]
Jul 21 17:08:38 ST pptpd[8844]: GRE: accepting packet #8
Jul 21 17:08:38 ST pppd[8845]: rcvd [LCP ConfReq id=0x8 <mru 1400> <magic 0x65110f84> <pcomp> <accomp> <callback CBCP>]
Jul 21 17:08:38 ST pppd[8845]: sent [LCP ConfRej id=0x8 <callback CBCP>]
Jul 21 17:08:40 ST pppd[8845]: LCP: timeout sending Config-Requests
Jul 21 17:08:40 ST pppd[8845]: Connection terminated.
Jul 21 17:08:40 ST pppd[8845]: Modem hangup
Jul 21 17:08:40 ST pppd[8845]: Exit.
Jul 21 17:08:40 ST pptpd[8844]: GRE: read(fd=6,buffer=8058660,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Jul 21 17:08:40 ST pptpd[8844]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Jul 21 17:08:40 ST pptpd[8844]: CTRL: Reaping child PPP[8845]
Jul 21 17:08:40 ST pptpd[8844]: CTRL: Client 89.178.56.131 control connection finished
Jul 21 17:08:40 ST pptpd[8844]: CTRL: Exiting now
лечится загрузкой модуля nf_nat_pptp