[Security Firewall] PPTP error 651
Sergio Parsek <[email protected]> Fri, 07 Oct 2005 17:17:07 -0300
| Newsgroups | gmane.linux.mandrake.security.firewall |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Hello,<br>
<br>
I'm trying to setup a VPN PPTP server at MNF2, but the windows client
return 651 error every time I trie to login...<br>
I look at /var/log/messages and found nothing.....<br>
<br>
I'm testing the server inside de lan (client and server)...<br>
<br>
the configuration:<br>
<br>
VPN>PPTP -> SERVER<br>
<p class="description"> PPTP Current Configuration </p>
<!--call generate_php_get_container()--><!--for Input|Output|Button generate()--><!--position: 1--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 2--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 3--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 4--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 5--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--
><!--value: Field--><!--end generate_php_field()--><!--position: 6--><!--value: Output-->
<!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 7--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 8--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 9--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 10--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--position: 11--><!--value: Output--><!--start generate_php_field
()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end gener
ate_php_field()--><!--position: 12--><!--value: Output--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--colonne: 2--><!--value: Field--><!--end generate_php_field()--><!--end generate()--><!--end generate_php_get_container()--><!--line: 1--><!--Column : 1--><!--Column : 2--><!--line: 2--><!--Column : 1--><!--Column : 2--><!--line: 3--><!--Column : 1--><!--Column : 2--><!--line: 4--><!--Column : 1--><!--Column : 2--><!--line: 5--><!--Column : 1--><!--Column : 2--><!--line: 6--><!--Column : 1--><!--Column : 2--><!--line: 7--><!--Column : 1--><!--Column : 2--><!--line: 8--><!--Column : 1--><!--Column : 2--><!--line: 9--><!--Column : 1--><!--Column : 2--><!--line: 10--><!--Column : 1--><!--Column : 2--><!--line: 11--><!--Column : 1--><!--Column : 2--><!--line: 12--><!--Column : 1--><!--Column : 2--><!--Column : 1--><!--Column : 2-->
<!--start Output Table--><!--position: 1-->
<table class="data" border="0">
<tbody>
<tr>
<td class="tabtitle"><b class="output">Local IP or IP range</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">192.168.88.1
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">Remote IP or IP range</b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0">192.168.88.100-120
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 1--> <tr>
<td class="tabtitle"><b class="output">Enable the local Wins
Server</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">yes
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">WINS Server IP</b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0">192.168.1.1
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 1--> <tr>
<td class="tabtitle"><b class="output">DNS Server IP</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">192.168.1.1
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">Samba Workgroup Name (if
local WINS) </b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0">OPTO
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 1--> <tr>
<td class="tabtitle"><b class="output">Samba Netbios Name (if
local WINS) </b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">OPTO
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">Samba Server String (if
local WINS) </b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0"><br>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 1--> <tr>
<td class="tabtitle"><b class="output">Connexion Speed</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">115200
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">Compression Bit Number</b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0">128
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 1--> <tr>
<td class="tabtitle"><b class="output">Timeout (in s) on starting
the ctrl connection</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont1">10
</td>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table--><!--Column : 1--><!--Column : 2--><!--start Output Table--><!--position: 0--> <tr>
<td class="tabtitle"><b class="output">Broadcast relay to clients
from interface</b></td>
<td class="tabcont0" valign="top">
<table border="0">
<tbody>
<tr>
<td class="tabcont0"><br>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
<br>
VPN>PPTP -> USERS<br>
<br>
<br>
<!--call generate_php_get_dyntable()-->
<table class="data" border="0">
<tbody>
<tr valign="top">
<td class="tabtitle" valign="top"> <br>
</td>
<td class="tabtitle" valign="top">UserName</td>
<td class="tabtitle" valign="top">Server</td>
<td class="tabtitle" valign="top">Password</td>
<td class="tabtitle" valign="top">IP</td>
</tr>
<tr valign="top">
<td class="tabcont1" valign="top">1
</td>
<td class="tabcont1" align="left" valign="top">sparsek</td>
<td class="tabcont1" align="left" valign="top">pptpd</td>
<td class="tabcont1" align="left" valign="top">password<br>
</td>
<td class="tabcont1" align="left" valign="top"><br>
</td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/vpn-pptp-users/vpn-pptp-users.wvm&action2=true&frontend_param2=VPNPptpPasswdUsersList&frontend_param1=1&frontend_param2=VPNPptpPasswdUsersList"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/vpn-pptp-users/vpn-pptp-users.wvm&action3=true&frontend_param2=VPNPptpPasswdUsersList&frontend_param1=1&frontend_param2=VPNPptpPasswdUsersList"><img
src="cid:[email protected]" border="0"></a></td>
</tr>
</tbody>
</table>
<br>
<!--end generate_php_get_dyntable()--><!--call generate_php_get_container()--><!--for Input|Output|Button generate()--><!--position: 1--><!--value: Button--><!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--end generate_php_field()--><!--end generate()--><!--end generate_php_get_container()--><!--line: 1--><!--Column : 1--><!--start Button Table--><!--Column : 1-->
<!--position: 1-->
<table class="data" border="0">
<tbody>
<tr>
<td class="tabtitle"><b class="input">Restart PPTPD</b></td>
<td class="tabcont1" valign="top"><input
src="https://192.168.1.159:8443/en/secure/images/icn-update.png"
alt="[Restart]" title="Restart" name="action4" value="Restart"
border="0" type="image"></td>
</tr>
</tbody>
</table>
<br>
<br>
Firewall>Tunnels<br>
<br>
<h2 class="title"><img src="cid:[email protected]"
alt=".">Tunnels Configuration </h2>
<p class="description">Look at the help page before starting the
configuration !! </p>
<p class="description">This part allows you to open the right ports for
IPSEC, OpenVPN or PPTP tunnels.</p>
<p class="separator"><img src="cid:[email protected]"
alt="------" title="------" height="2" width="555"></p>
<table class="data" border="0">
<!--call generate_php_get_container()--><!--for Input|Output|Button generate()--><!--position: 1--><!--value: Output-->
<!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--end generate_php_field()--><!--position: 2--><!--value: Button-->
<!--start generate_php_field()--><!--colonne: 1--><!--value: Label--><!--end generate_php_field()--><!--end generate()--><!--end generate_php_get_container()-->
<!--line: 1--><!--Column : 1--><!--line: 2--><!--Column : 1--><!--Column : 1--><!--start Output Table--><!--position: 1--> <tbody>
<tr>
<td class="tabtitle"><b class="output">Tunnel configured :</b></td>
<td class="tabcont1" valign="top">
<table border="0">
<tbody>
<tr>
</tr>
</tbody>
</table>
</td>
</tr>
<!--end Output Table-->
<!--start Button Table--><!--Column : 1--><!--position: 0--> <tr>
<td class="tabtitle"><b class="input">Add Tunnel</b></td>
<td class="tabcont0" valign="top"><input
src="https://192.168.1.159:8443/en/secure/images/icn-add-file.png"
alt="[Add_tunnel]" title="Add_tunnel" name="action1" value="Add_tunnel"
border="0" type="image"></td>
</tr>
<!--end Button Table-->
</tbody>
</table>
<br>
<!--call generate_php_get_dyntable()-->
<table class="data" border="0">
<tbody>
<tr valign="top">
<td class="tabtitle" valign="top"> <br>
</td>
<td class="tabtitle" valign="top">Type</td>
<td class="tabtitle" valign="top">Zone</td>
<td class="tabtitle" valign="top">Gateway IP</td>
<td class="tabtitle" valign="top">Gateway Zone(optional)</td>
</tr>
<tr valign="top">
<td class="tabcont1" valign="top">1
</td>
<td class="tabcont1" align="left" valign="top">pptpserver</td>
<td class="tabcont1" align="left" valign="top">lan</td>
<td class="tabcont1" align="left" valign="top"><br>
</td>
<td class="tabcont1" align="left" valign="top">lan</td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/tunnels/tunnels.wvm&action2=true&frontend_param1=1&frontend_param2=TunnelsList"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/tunnels/tunnels.wvm&action3=true&frontend_param1=1&frontend_param2=TunnelsList"><img
src="cid:[email protected]" border="0"></a></td>
</tr>
</tbody>
</table>
<br>
Firewall> Rules<br>
<br>
<table class="data" border="0">
<tbody>
<tr valign="top">
<td class="tabcont0" valign="top">34
</td>
<td class="tabcont0" align="left" valign="top"><b>ACCEPT:</b>info</td>
<td class="tabcont0" align="left" valign="top">lan</td>
<td class="tabcont0" align="left" valign="top">fw</td>
<td class="tabcont0" align="left" valign="top">gre</td>
<td class="tabcont0" align="left" valign="top"><br>
</td>
<td class="tabcont0" align="left" valign="top">PPTP</td>
<td class="tabcont0" align="left" valign="top">enabled</td>
<td class="tabcont0" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action2=true&frontend_param2=RulesList&frontend_param1=34"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont0" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action5=true&frontend_param2=RulesList&frontend_param1=34"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont0" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action3=true&frontend_param2=RulesList&frontend_param1=34"><img
src="cid:[email protected]" border="0"></a></td>
</tr>
<tr valign="top">
<td class="tabcont1" valign="top">35
</td>
<td class="tabcont1" align="left" valign="top"><b>ACCEPT:</b>info</td>
<td class="tabcont1" align="left" valign="top">lan</td>
<td class="tabcont1" align="left" valign="top">fw</td>
<td class="tabcont1" align="left" valign="top">tcp</td>
<td class="tabcont1" align="left" valign="top">1723</td>
<td class="tabcont1" align="left" valign="top">PPTP</td>
<td class="tabcont1" align="left" valign="top">enabled</td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action2=true&frontend_param2=RulesList&frontend_param1=35"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action5=true&frontend_param2=RulesList&frontend_param1=35"><img
src="cid:[email protected]" border="0"></a></td>
<td class="tabcont1" valign="top"><a class="tabcont"
href="https://192.168.1.159:8443/en/secure/engine.php?file=modules/rules/rules.wvm&action3=true&frontend_param2=RulesList&frontend_param1=35"><img
src="cid:[email protected]" border="0"></a></td>
</tr>
</tbody>
</table>
<br>
<br>
any sugestion? <br>
Some one can see whats wrong?<br>
<br>
Tanx,<br>
<br>
SPP<br>
<br>
</body>
</html>
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1;
name="icn-edit-file.png"
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="icn-edit-file.png"
Content-Base: "https://192.168.1.159:8443/en/secure/i
mages/icn-edit-file.png"
Content-Location: "https://192.168.1.159:8443/en/secure/i
mages/icn-edit-file.png"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<TITLE>ERRO: O site requisitado nao pode ser exibido</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>O site nao pode ser exibido</H2>
<HR>
<P>
O seguinte site:
<A HREF=3D"192.168.1.159:8443">192.168.1.159:8443</A>
<P>
nao pode ser exibido por:
<UL>
<LI>
<STRONG>
Acesso Negado.
</STRONG>
<P>
A configura=E7ao de controle de acesso impede que voce acesse este site.
Para solicitar acesso entre em contato com o responsavel pelo seu departa=
mento.
</UL>
<br clear=3D"all">
<hr noshade size=3D1>
Generated Fri, 07 Oct 2005 19:52:51 GMT by mnf.opto.com.br (Squid/2.4.STA=
BLE7)
</BODY></HTML>
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1;
name="icn-dustbin.png"
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="icn-dustbin.png"
Content-Base: "https://192.168.1.159:8443/en/secure/i
mages/icn-dustbin.png"
Content-Location: "https://192.168.1.159:8443/en/secure/i
mages/icn-dustbin.png"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<TITLE>ERRO: O site requisitado nao pode ser exibido</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>O site nao pode ser exibido</H2>
<HR>
<P>
O seguinte site:
<A HREF=3D"192.168.1.159:8443">192.168.1.159:8443</A>
<P>
nao pode ser exibido por:
<UL>
<LI>
<STRONG>
Acesso Negado.
</STRONG>
<P>
A configura=E7ao de controle de acesso impede que voce acesse este site.
Para solicitar acesso entre em contato com o responsavel pelo seu departa=
mento.
</UL>
<br clear=3D"all">
<hr noshade size=3D1>
Generated Fri, 07 Oct 2005 19:52:51 GMT by mnf.opto.com.br (Squid/2.4.STA=
BLE7)
</BODY></HTML>
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1;
name="dot-green.png"
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="dot-green.png"
Content-Base: "https://192.168.1.159:8443/en/secure/i
mages/dot-green.png"
Content-Location: "https://192.168.1.159:8443/en/secure/i
mages/dot-green.png"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<TITLE>ERRO: O site requisitado nao pode ser exibido</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>O site nao pode ser exibido</H2>
<HR>
<P>
O seguinte site:
<A HREF=3D"192.168.1.159:8443">192.168.1.159:8443</A>
<P>
nao pode ser exibido por:
<UL>
<LI>
<STRONG>
Acesso Negado.
</STRONG>
<P>
A configura=E7ao de controle de acesso impede que voce acesse este site.
Para solicitar acesso entre em contato com o responsavel pelo seu departa=
mento.
</UL>
<br clear=3D"all">
<hr noshade size=3D1>
Generated Fri, 07 Oct 2005 19:52:51 GMT by mnf.opto.com.br (Squid/2.4.STA=
BLE7)
</BODY></HTML>
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1;
name="separator.png"
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="separator.png"
Content-Base: "https://192.168.1.159:8443/en/secure/i
mages/separator.png"
Content-Location: "https://192.168.1.159:8443/en/secure/i
mages/separator.png"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<TITLE>ERRO: O site requisitado nao pode ser exibido</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>O site nao pode ser exibido</H2>
<HR>
<P>
O seguinte site:
<A HREF=3D"192.168.1.159:8443">192.168.1.159:8443</A>
<P>
nao pode ser exibido por:
<UL>
<LI>
<STRONG>
Acesso Negado.
</STRONG>
<P>
A configura=E7ao de controle de acesso impede que voce acesse este site.
Para solicitar acesso entre em contato com o responsavel pelo seu departa=
mento.
</UL>
<br clear=3D"all">
<hr noshade size=3D1>
Generated Fri, 07 Oct 2005 19:52:51 GMT by mnf.opto.com.br (Squid/2.4.STA=
BLE7)
</BODY></HTML>
--------------070400020002050903020506
Content-Type: text/html; charset=ISO-8859-1;
name="icn-copy-file.png"
Content-ID: <[email protected]>
Content-Disposition: inline;
filename="icn-copy-file.png"
Content-Base: "https://192.168.1.159:8443/en/secure/i
mages/icn-copy-file.png"
Content-Location: "https://192.168.1.159:8443/en/secure/i
mages/icn-copy-file.png"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<TITLE>ERRO: O site requisitado nao pode ser exibido</TITLE>
</HEAD><BODY>
<H1>ERROR</H1>
<H2>O site nao pode ser exibido</H2>
<HR>
<P>
O seguinte site:
<A HREF=3D"192.168.1.159:8443">192.168.1.159:8443</A>
<P>
nao pode ser exibido por:
<UL>
<LI>
<STRONG>
Acesso Negado.
</STRONG>
<P>
A configura=E7ao de controle de acesso impede que voce acesse este site.
Para solicitar acesso entre em contato com o responsavel pelo seu departa=
mento.
</UL>
<br clear=3D"all">
<hr noshade size=3D1>
Generated Fri, 07 Oct 2005 19:52:51 GMT by mnf.opto.com.br (Squid/2.4.STA=
BLE7)
</BODY></HTML>
--------------070400020002050903020506
Content-Type: text/plain; name="message.footer"
Content-Disposition: inline; filename="message.footer"
Content-Transfer-Encoding: quoted-printable
____________________________________________________
Want to buy your Pack or Services from Mandriva?=20
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________
--------------070400020002050903020506--