Re: problem getting client to connect via pptpd

Something seems fishy here.  This looks like you're somehow mixing PPTP
and OpenVPN.  Why the references to UDP port 1194?  And device tun0 and
tun1?  Those are OpenVPN ports and pseudo-devices.  What did the tcpdump
trace James suggested you try look like?

You're setting up a PopTop PPTP Server, right?  Or maybe this is a PPTP
client?

This also doesn't look right:

> Nov 25 22:50:41 jason pppd[26073]: Warning: can't open options file  
> /root/.ppprc: Permission denied

What's up with the Permission denied error and the old date?

On your firewall rules - if it were me, I'd change:

> -A FORWARD -i ppp+ -o eth0 -j ACCEPT
> -A FORWARD -i eth0 -o ppp+ -j ACCEPT
> -A OUTPUT -o tun+ -j ACCEPT

to something like,

-A INPUT -i ppp+ -j ACCEPT
-A INPUT -i tun+ -j ACCEPT
-A FORWARD -i ppp+ -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
-A OUTPUT -o tun+ -j ACCEPT
-A OUTPUT -o ppp+ -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A OUTPUT -o {all your devices} -j ACCEPT

You really don't need any ppp+ FORWARD rules; all that traffic should
end at your PPTP server and then be unpacked and forwarded on over
"regular" ethnn interfaces.  The ppp+ stuff is between this PPTP server
and remote PPTP clients.  

I don't think you want to masquerade your 10.8.nnn traffic.  This is
traffic in your OpenVPN tunnels and presumably you'll want systems on
both sides to know where the streams are really coming from.

This DNAT rule looks strange:

> add port 1723
> -A PREROUTING -d 88.xxx.xxx.xx9 -p tcp -m tcp --dport 1723 -j DNAT  
> --to-destination 88.xxx.xxx.xx9:1723

Why are you DNATing to the same public IP Address and same port?  Well
wait a second - why DNAT at all?  This *is* your PPTP server, right?  If
so you don't need any DNAT rules for TCP 1723 or GRE.  And if this is a
PPTP client, you still don't need any DNAT rules for this.  Unless you
have another PPTP server behind this one for some reason.  

- Greg Scott


------------------------------------------------------------------------------
Master Visual Studio, SharePoint, SQL, ASP.NET, C# 2012, HTML5, CSS,
MVC, Windows 8 Apps, JavaScript and much more. Keep your skills current
with LearnDevNow - 3,200 step-by-step video tutorials by Microsoft
MVPs and experts. SALE $99.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122412