>>Mar 7 10:33:47 localhost pptpd[13138]: MGR: Launching /usr/sbin/pptpctrl to handle client
>>
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: local address = 192.168.0.229
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: remote address = 192.168.0.230
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: pppd options file = /etc/ppp/options.pptpd
>>
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Client 82.204.242.242 control connection started
>>
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Received PPTP Control Message (type:
>>1)
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Made a START CTRL CONN
>>RPLY packet
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: I wrote 156 bytes to
>>the client.
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Sent packet to client
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Received PPTP Control Message (type:
>>7)
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Set parameters to 100000000 maxbps,
>>64 window size
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Made a OUT CALL RPLY
>>packet
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Starting call (launching pppd, opening
>>GRE)
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: pty_fd = 6
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: tty_fd = 7
>>Mar 7 10:33:47 localhost pptpd[13139]: CTRL (PPPD Launcher): program binary =
>>/usr/sbin/pppd
>>Mar 7 10:33:47 localhost pptpd[13139]: CTRL (PPPD Launcher): local address =
>>192.168.0.229
>>Mar 7 10:33:47 localhost pptpd[13139]: CTRL (PPPD Launcher): remote address =
>>192.168.0.230
>>Mar 7 10:33:47 localhost pppd[13139]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: I wrote 32 bytes to
>>the client.
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Sent packet to client
>>Mar 7 10:33:47 localhost pppd[13139]: pppd 2.4.3 started by root, uid
>>0
>>Mar 7 10:33:47 localhost pppd[13139]: Using interface ppp0
>>Mar 7 10:33:47 localhost pppd[13139]: Connect: ppp0 <--> /dev/pts/1
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Received PPTP Control Message (type:
>>15)
>>Mar 7 10:33:47 localhost pptpd[13138]: CTRL: Got a SET LINK INFO
>>packet with standard ACCMs
>>Mar 7 10:34:17 localhost pppd[13139]: LCP: timeout sending Config-Requests
>>Mar 7 10:34:17 localhost pppd[13139]: Connection terminated.
>>Mar 7 10:34:17 localhost pppd[13139]: Modem hangup
>>Mar 7 10:34:17 localhost pppd[13139]: Exit.
>>Mar 7 10:34:17 localhost pptpd[13138]: GRE: read(fd=6,buffer=804e620,len=8196) from PTY failed: status
>>= -1 error = Input/output error, usually caused by unexpected termination
>>of pppd, check option syntax and pppd logs
>>Mar 7 10:34:17 localhost pptpd[13138]: CTRL: PTY read or GRE write
>>failed (pty,gre)=(6,7)
>>Mar 7 10:34:17 localhost pptpd[13138]: CTRL: Reaping child PPP[13139]
>>Mar 7 10:34:17 localhost pptpd[13138]: CTRL: Client ххх.ххх.ххх.ххх control connection finished
>>
>>Mar 7 10:34:17 localhost pptpd[13138]: CTRL: Exiting now
>>Mar 7 10:34:17 localhost pptpd[11303]: MGR: Reaped child 13138
>>
>>это лог сервера.
>>
>>правила файерволла на сервере:
>>$ipt -A INPUT -i $EXT_IF -p 47 -j ACCEPT
>>$ipt -A OUTPUT -o $EXT_IF -p 47 -j ACCEPT
>>$ipt -A FORWARD -p 47 -j ACCEPT
>>
>>$ipt -A INPUT -i $EXT_IF -p tcp --dport 1723 -j ACCEPT
>>$ipt -A OUTPUT -o $EXT_IF -p tcp --sport 1723 -j ACCEPT
>>$ipt -A INPUT -i $EXT_IF -p udp --dport 1723 -j ACCEPT
>>$ipt -A OUTPUT -o $EXT_IF -p udp --sport 1723 -j ACCEPT
>>
>>$ipt -A INPUT -i ppp+ -j ACCEPT
>>$ipt -A OUTPUT -o ppp+ -j ACCEPT
>>$ipt -A FORWARD -i ppp+ -j ACCEPT
>>$ipt -A FORWARD -o ppp+ -j ACCEPT
>>
>>правила файерволла у меня на шлюзе:
>>#pptpd
>>$ipt -A INPUT -i $OUT_IF -p 47 -j ACCEPT
>>$ipt -A OUTPUT -o $OUT_IF -p 47 -j ACCEPT
>>$ipt -A INPUT -i $OUT_IF -p tcp --dport 1723 -j ACCEPT
>>
>>$ipt -A OUTPUT -o $OUT_IF -p tcp --sport 1723 -j ACCEPT
>>$ipt -A INPUT -i $OUT_IF -p udp --dport 1723 -j ACCEPT
>>
>>$ipt -A OUTPUT -o $OUT_IF -p udp --sport 1723 -j ACCEPT
>>
>>$ipt -A INPUT -i ppp+ -j ACCEPT
>>$ipt -A OUTPUT -o ppp+ -j ACCEPT
>>$ipt -A FORWARD -i ppp+ -d 192.168.200.1 -j ACCEPT
>>$ipt -A FORWARD -o ppp+ -j ACCEPT
>>
>>где грабли?
>>вроде все разрешено... но...
>>ГРЕ не поднимается. Кто сталкивался - помогите плиз.
>
>в правилах файервола не видно где разрешено ходить протоколу gre
>попробуй разрешить его хождение. отпиши поднялся впн или нет.
сорри прозевал есть у тебя gre 47
|
