Req: VPN daemon

[fvdw]

mmm...Looking to the config file I think we might need to set some more options for pptpd support
I will sent you a second one this evening

[firwareslut]

Ok, sounds good.

[fvdw]

a new one has been sent.. :punk hopefully this one will do the trick, I missed two config's settings in the previous one related to netfilter and ppptp support :whistle

[firwareslut]

I gave it a spin but still doesn't connect. The attempted connection doesn't even think about it for a while it instantly says "Your connection failed".

No trouble booting the new kernel, i presume i am doing it right?

dd if=UIMAGE-26394-NWSP2CL-12 of=/dev/sda6

then just reboot.

I will give it another go tomorrow but now it's time for bed :)

[fvdw]

yep thats the right way to install it

maybe you will need iptables after all
knowing it boots ok I will load it on my nwsp2 as well to see

[fvdw]

I can get pptpd server running however before I was able to do that I needed to install a pppd binary
This binary is not present in the firmware I used a temporary version from a nsa220 nas
Without this binary pptpd won't run

Did you install a pppd binary as well ? and did you check that while trying to connect that pptpd was running


output of syslog when starting the server

Code: Select all

May 10 22:21:18 (none) daemon.info pptpd[3813]: MGR: Manager process started
May 10 22:21:18 (none) daemon.info pptpd[3813]: MGR: Maximum of 100 connections available

the server is listening on port 1723

Code: Select all

1723/tcp open  pptp        linux (Firmware: 1)

I tried with vpn client of windows 7 and it tries to connect

Code: Select all

May 10 22:54:37 (none) daemon.info pptpd[4931]: MGR: Manager process started
May 10 22:54:37 (none) daemon.info pptpd[4931]: MGR: Maximum of 100 connections available
May 10 22:55:41 (none) daemon.warn pptpd[4931]: MGR: initial packet length 5635 outside (0 - 220)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: MGR: Launching /usr/sbin/pptpctrl to handle client
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: local address = 192.168.1.34
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: remote address = 192.168.1.1
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: pppd options file = /etc/ppp/options.pptpd
May 10 22:56:28 (none) daemon.info pptpd[4998]: CTRL: Client 192.168.1.44 control connection started
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Received PPTP Control Message (type: 1)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Made a START CTRL CONN RPLY packet
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: I wrote 156 bytes to the client.
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Sent packet to client
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Received PPTP Control Message (type: 7)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Set parameters to 100000000 maxbps, 64 window size
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Made a OUT CALL RPLY packet
May 10 22:56:28 (none) daemon.info pptpd[4998]: CTRL: Starting call (launching pppd, opening GRE)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: pty_fd = 6
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: tty_fd = 7
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: I wrote 32 bytes to the client.
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Sent packet to client
May 10 22:56:28 (none) daemon.debug pptpd[5001]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
May 10 22:56:28 (none) daemon.debug pptpd[5001]: CTRL (PPPD Launcher): local address = 192.168.1.34
May 10 22:56:28 (none) daemon.debug pptpd[5001]: CTRL (PPPD Launcher): remote address = 192.168.1.1
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Received PPTP Control Message (type: 15)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Got a SET LINK INFO packet with standard ACCMs
May 10 22:56:28 (none) daemon.err pppd[5001]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so is for pppd version 2.4.3, this is 2.4.4
May 10 22:56:28 (none) daemon.err pptpd[4998]: GRE: read(fd=6,buffer=15904,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
May 10 22:56:28 (none) daemon.err pptpd[4998]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Reaping child PPP[5001]
May 10 22:56:28 (none) daemon.info pptpd[4998]: CTRL: Client 192.168.1.44 control connection finished
May 10 22:56:28 (none) daemon.debug pptpd[4998]: CTRL: Exiting now
May 10 22:56:28 (none) daemon.debug pptpd[4931]: MGR: Reaped child 4998


I use pppd version 2.4.4. while it seems to to need 2.4.3, will look at that in the weekend

[firwareslut]

I thought PPTPD binary is the same thing as the PPPD binary? I just installed the pptp package you uploded me a while ago.

The server is certainly running and if i port scan the IP then port 1723 is open.

[fvdw]

nope its not the same and without pppd it cannot work.(see internet on site were setting up pptpd is explained, I think it is even mentioned in the readme foirle of the pptpd package). When I fired up pptpd first time with apparently a wrong pptpd.conf file the server seems to be running but actually it is waiting for something. This is also indicated when starting it form the command line, I did not get the command prompt back which indicates that the statup command for the daemon is not completed and still waits for something.
After installing a proper conf file (the sample one) the command prompt came back when firing up pptpd but the server was not running anymore and I found when using the debug option that it could not find the pppd binary. After adding the trial one the server remained actief and reported that it was ready for connections.
So now only need to get a proper version of pppd and then I guess it might work :mrgreen:

[firwareslut]

Awesome.

I think having IPTABLES installed would be very handy because the people who use VPN on their phones will be able to browse the web while connected and use all other services.

If you need me to test another compiled kernel for Iptables I will gladly see if it boots :D

[fvdw]

got it working :bananadance

compiled pppd-2.4.3 and needed to solve a bug in pptpd and recompiled that as well after that I could establish a VPN connection from my windows 7 Pc to the nwsp2 :mrgreen:

Code: Select all

May 11 20:11:58 (none) daemon.debug pptpd[7458]: MGR: Launching /usr/sbin/pptpctrl to handle client
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: local address = 192.168.0.1
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: remote address = 192.168.1.1
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: pppd options file = /etc/ppp/options.pptpd
May 11 20:11:58 (none) daemon.info pptpd[7458]: CTRL: Client 192.168.1.44 control connection started
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Received PPTP Control Message (type: 1)
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Made a START CTRL CONN RPLY packet
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: I wrote 156 bytes to the client.
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Sent packet to client
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Received PPTP Control Message (type: 7)
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Set parameters to 100000000 maxbps, 64 window size
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Made a OUT CALL RPLY packet
May 11 20:11:58 (none) daemon.info pptpd[7458]: CTRL: Starting call (launching pppd, opening GRE)
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: pty_fd = 6
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: tty_fd = 7
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: I wrote 32 bytes to the client.
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Sent packet to client
May 11 20:11:58 (none) daemon.debug pptpd[7459]: CTRL (PPPD Launcher): program binary = /usr/sbin/pppd
May 11 20:11:58 (none) daemon.debug pptpd[7459]: CTRL (PPPD Launcher): local address = 192.168.0.1
May 11 20:11:58 (none) daemon.debug pptpd[7459]: CTRL (PPPD Launcher): remote address = 192.168.1.1
May 11 20:11:58 (none) daemon.info pppd[7459]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded.
May 11 20:11:58 (none) daemon.notice pppd[7459]: pppd 2.4.3 started by root, uid 0
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Received PPTP Control Message (type: 15)
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Got a SET LINK INFO packet with standard ACCMs
May 11 20:11:58 (none) daemon.info pppd[7459]: Using interface ppp0
May 11 20:11:58 (none) daemon.notice pppd[7459]: Connect: ppp0 <--> /dev/ttyp1
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #0
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #1
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #2
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #3
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #4
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #5
May 11 20:11:58 (none) daemon.debug pptpd[7458]: CTRL: Received PPTP Control Message (type: 15)
May 11 20:11:58 (none) daemon.err pptpd[7458]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #6
May 11 20:11:58 (none) daemon.warn pppd[7459]: Warning - secret file /etc/ppp/chap-secrets has world and/or group access
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #7
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #8
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #9
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #10
May 11 20:11:58 (none) daemon.notice pppd[7459]: MPPE 128-bit stateless compression enabled
May 11 20:11:58 (none) daemon.debug pptpd[7458]: GRE: accepting packet #11
May 11 20:12:00 (none) daemon.debug pptpd[7458]: GRE: accepting packet #12
May 11 20:12:00 (none) daemon.debug pptpd[7458]: GRE: accepting packet #13
May 11 20:12:01 (none) daemon.debug pptpd[7458]: GRE: accepting packet #14
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #15
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #16
May 11 20:12:03 (none) daemon.info pppd[7459]: found interface eth0 for proxy arp
May 11 20:12:03 (none) daemon.notice pppd[7459]: local  IP address 192.168.0.1
May 11 20:12:03 (none) daemon.notice pppd[7459]: remote IP address 192.168.1.1
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #17
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #18
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #19
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #20
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #21
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #22
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #23
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #24
May 11 20:12:03 (none) daemon.debug pptpd[7458]: GRE: accepting packet #25