LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 06-25-2005, 03:00 PM   #1
kris2002
LQ Newbie
 
Registered: Jun 2005
Posts: 3

Rep: Reputation: 0
vpn behind iptables


hello all
I've got a problem to connect vpn client to vpn server through gateway ( mandriva + iptables)
I've opened 47 and 1723 ports but in tcpdump
vpn client sending request to the vpn server and vpn server answering not to client but to gateway, what should i do to make it all work
Thanks for the help
 
Old 06-26-2005, 12:42 AM   #2
kris2002
LQ Newbie
 
Registered: Jun 2005
Posts: 3

Original Poster
Rep: Reputation: 0
if anyone knows, plz help
 
Old 06-26-2005, 07:39 AM   #3
scowles
Member
 
Registered: Sep 2004
Location: Texas, USA
Distribution: Fedora
Posts: 620

Rep: Reputation: 31
If you are trying to establish a PPTP based VPN, then I believe its protocol 47 (GRE), not port 47.
 
Old 06-26-2005, 11:18 AM   #4
kris2002
LQ Newbie
 
Registered: Jun 2005
Posts: 3

Original Poster
Rep: Reputation: 0
192.168.0.2 - vpn client
vpn.server.com - vpn server
gateway.server - gateway (mandrake + iptables)

tcpdump:

19:54:02.782530 192.168.0.2.1190 > vpn.server.com.pptp: S 2557184182:2557184182(0) win 8192 <mss 1460>
19:54:02.782706 gateway.server.1190 > vpn.server.com.pptp: S 2557184182:2557184182(0) win 8192 <mss 1460>
19:54:02.827835 vpn.server.com.pptp > 192.168.0.2.1190: S 3591717483:3591717483(0) ack 2557184183 win 5840 <mss 1460> (DF)
19:54:02.827963 vpn.server.com.pptp > 192.168.0.2.1190: S 3591717483:3591717483(0) ack 2557184183 win 5840 <mss 1460> (DF)
19:54:02.982548 192.168.0.2.1190 > vpn.server.com.pptp: P 1:157(156) ack 1 win 8760
19:54:02.982665 gateway.server.1190 > vpn.server.com.pptp: P 2557184183:2557184339(156) ack 3591717484 win 8760
19:54:03.041487 vpn.server.com.pptp > 192.168.0.2.1190: . ack 157 win 5840 (DF)
19:54:03.041630 vpn.server.com.pptp > 192.168.0.2.1190: . ack 157 win 5840 (DF)
19:54:03.048695 vpn.server.com.pptp > 192.168.0.2.1190: P 1:157(156) ack 157 win 5840 (DF)
19:54:03.048822 vpn.server.com.pptp > 192.168.0.2.1190: P 1:157(156) ack 157 win 5840 (DF)
19:54:03.222554 192.168.0.2.1190 > vpn.server.com.pptp: P 157:325(168) ack 157 win 8604
19:54:03.222685 gateway.server.1190 > vpn.server.com.pptp: P 156:324(168) ack 157 win 8604
19:54:03.273640 vpn.server.com.pptp > 192.168.0.2.1190: P 157:189(32) ack 325 win 6432 (DF)
19:54:03.273768 vpn.server.com.pptp > 192.168.0.2.1190: P 157:189(32) ack 325 win 6432 (DF)
19:54:03.273921 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:03.402558 192.168.0.2.1190 > vpn.server.com.pptp: P 325:349(24) ack 189 win 8572
19:54:03.402686 gateway.server.1190 > vpn.server.com.pptp: P 324:348(24) ack 189 win 8572
19:54:03.412538 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:03.481696 vpn.server.com.pptp > 192.168.0.2.1190: . ack 349 win 6432 (DF)
19:54:03.481835 vpn.server.com.pptp > 192.168.0.2.1190: . ack 349 win 6432 (DF)
19:54:04.762537 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:06.274824 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:07.762541 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:09.289070 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:11.762547 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:12.298172 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:14.842546 192.168.0.2.1190 > vpn.server.com.pptp: P 349:373(24) ack 189 win 8572
19:54:14.842677 gateway.server.1190 > vpn.server.com.pptp: P 348:372(24) ack 189 win 8572
19:54:14.842565 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:14.892184 vpn.server.com.pptp > 192.168.0.2.1190: . ack 373 win 6432 (DF)
19:54:14.892309 vpn.server.com.pptp > 192.168.0.2.1190: . ack 373 win 6432 (DF)
19:54:15.306228 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:18.318269 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:18.752550 192.168.0.2 > vpn.server.com: gre-proto-0x880B (gre encap)
19:54:21.328895 vpn.server.com > gateway.server: gre-proto-0x880B (gre encap)
19:54:22.752550 192.168.0.2.1190 > vpn.server.com.pptp: P 373:389(16) ack 189 win 8572
19:54:22.752676 gateway.server.1190 > vpn.server.com.pptp: P 372:388(16) ack 189 win 8572
19:54:22.781347 vpn.server.com.pptp > 192.168.0.2.1190: . ack 389 win 6432 (DF)
19:54:22.781483 vpn.server.com.pptp > 192.168.0.2.1190: . ack 389 win 6432 (DF)
19:54:22.785224 vpn.server.com.pptp > 192.168.0.2.1190: P 189:337(148) ack 389 win 6432 (DF)
19:54:22.785326 vpn.server.com.pptp > 192.168.0.2.1190: P 189:337(148) ack 389 win 6432 (DF)
19:54:23.012552 192.168.0.2.1190 > vpn.server.com.pptp: P 389:405(16) ack 337 win 8424
19:54:23.012672 gateway.server.1190 > vpn.server.com.pptp: P 388:404(16) ack 337 win 8424
19:54:23.077494 vpn.server.com.pptp > 192.168.0.2.1190: R 337:337(0) ack 405 win 6432 (DF)
19:54:23.077617 vpn.server.com.pptp > 192.168.0.2.1190: R 337:337(0) ack 405 win 6432 (DF)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Routes, iptables and vpn midof Linux - Security 1 06-23-2005 07:42 AM
iptables VPN bentman78 Linux - Software 0 05-03-2004 08:27 AM
Iptables FORWARDing VPN fonzie Linux - Networking 2 02-06-2004 01:46 PM
VPN / Iptables a_borg1 Linux - Networking 0 08-13-2003 08:20 PM
iptables and vpn buttnutt Linux - Security 1 05-29-2002 03:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 06:28 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration