LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 03-08-2005, 10:08 PM   #1
jason_gram89
LQ Newbie
 
Registered: Mar 2005
Posts: 4

Rep: Reputation: 0
Light at the end of the tunnel


Well, I installed Linux about two years ago, flattened by Windows 2000 box and just started over with RH 8. Fast-forward to the present and I am running Fedora. As a professional programmer I am comfortable working with the shell, plus I had quite a bit of Unix experience while at University. I have managed to find all the development tools that I need to work comfortably on my Linux box.

I only have one complaint: I need to connect to my windows machine (ideally through remote desktop) at work. Of course to do this I need a VPN connection to our watchguard firewall. Yes, yes I know that PPTP is potentially useful for this purpose. And yes I have already spent enough hours trying to get it to work to buy several windows boxes.. After several days spent playing with ifconfig, tcpdump, route, posting on forums and edititing configuration files I am still not able to do something that would have literally taken me ten minutes to do using a windows os. If I was back at the point when I was 15 and poking around on bulletin boards and playing with 6502 assembler this challenge might be fun. Now however, I simply want to use the OS as a tool to accomplish bigger and better things.

I am at the point where I am seriously thinking about writing a VPN client for Linux, but I have a creeping and realistic sense that I will do no better than the guys at PPTP did (and they probably did a great job)

I really just wanted to rant, but I would appreciate any help using a Linux client to communicate with a MS VPN or Watchguard VPN server? And please, pretty please don't send me something that says, "check out PPTP dude".

I have already tried:
-PPTP (can connect, but can not get traffic to route through tunnel, added routes..blah blah, tcpdump shows now traffic over ppp0 interface, ifconfig shows tunnel up but no packets coming in)
-VNC (too bad our firewall is seriously locked down, VNC server on my windows box at work needs port 5900 open on the firewall - forget it)
 
Old 03-08-2005, 10:23 PM   #2
comprookie2000
Gentoo Developer
 
Registered: Feb 2004
Location: Fort Lauderdale FL.
Distribution: Gentoo
Posts: 3,291
Blog Entries: 5

Rep: Reputation: 56
Will this work;
http://www.cit.buffalo.edu/linux/vpn
or this;
http://openvpn.net/

Last edited by comprookie2000; 03-08-2005 at 10:30 PM.
 
Old 03-09-2005, 08:17 AM   #3
jason_gram89
LQ Newbie
 
Registered: Mar 2005
Posts: 4

Original Poster
Rep: Reputation: 0
OpenVPN uses it's own protocol which will not be compaitable with the WatchGuard PPTP protocol. The other one looks like it uses IPSec which are VPN server is not using. Thanks for the suggestions .....

J
 
Old 03-09-2005, 08:57 PM   #4
sonnik
Member
 
Registered: May 2001
Posts: 149

Rep: Reputation: 17
Just a long shot, did you try this:

Code:
echo 1 > /proc/sys/net/ipv4/ip_forward
I knew of this (enabling IP forwarding in the Fedora build of 2.6.X), but failing to do it after a restart kicked me around for a few days caused similar symptoms.
 
Old 03-10-2005, 09:23 AM   #5
jason_gram89
LQ Newbie
 
Registered: Mar 2005
Posts: 4

Original Poster
Rep: Reputation: 0
Hmmm, is this something that you ran after the tunnel started? Are you using PPTP?

I will take a detailed look at that when I get home. Thanks for you suggestion.

J
 
Old 03-10-2005, 06:41 PM   #6
sonnik
Member
 
Registered: May 2001
Posts: 149

Rep: Reputation: 17
It shouldn't matter if you do it before or after the tunnel starts. I initially used Poptop (PPTP), but had trouble with it so I switched to OpenVPN.

Oddly, they both exhibited the exact same behaviors - identical to the symptoms you are describing - if I'm reading them right.

That single command I posted above is essentially turning on Linux's version of Windows's old-school "Internet Connection Sharing". If you didn't have Internet connection sharing enabled on the one end (the gateway) - the packets will be simply dropped - and cause the behavior you are describing - IIRC.

EDIT: I may be misunderstanding which you are considering as the client. The ip forwarding should only be an issue on the "gateway" computer. But it may be a firewall issue, see my next post.

Last edited by sonnik; 03-10-2005 at 06:50 PM.
 
Old 03-10-2005, 06:46 PM   #7
sonnik
Member
 
Registered: May 2001
Posts: 149

Rep: Reputation: 17
You know, I thought I read that you had ruled out the firewall on the Linux machine, but now I can't find it.

If you have iptables running, you might want to try these commands (adjusting the interface (eth0) as needed)

Code:
# Keep state of connections from local machine and private subnets
iptables -A OUTPUT -m state --state NEW -o eth0 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m state --state NEW -o eth0 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

# Masquerade local subnet
iptables -t nat -A POSTROUTING -s $PRIVATE -o eth0 -j MASQUERADE
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
A light wm! The slayer Linux - Laptop and Netbook 9 07-20-2005 07:50 AM
need light on GRUB? paschim General 1 08-31-2004 05:19 AM
Light problem dushkinup General 5 03-30-2004 06:06 PM
The Linux Light lectraplayer General 4 07-17-2003 06:37 PM
HD light stays on jMack Linux - Newbie 2 12-18-2002 09:44 AM


All times are GMT -5. The time now is 05:25 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration