Re: problem getting client to connect via pptpd
[email protected] Tue, 08 Jan 2013 21:23:10 +0000
| Newsgroups | gmane.network.poptop |
|---|---|
| Message-ID | <[email protected]> |
Right Thanks for help on the previous issue. The next one is that I have installed pptp on a different server. I set it all up and my client connects to the pptp server successfully. However, it cannot browse any internet pages, it's like the outgoing connection is not allowed or something or maybe the routing is messed up. Can you see anything obvious in the routing below or the iptables? I'll post another tcpdump if needed. Thanks [root ~]# route Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 10.8.1.10 * 255.255.255.255 UH 0 0 0 ppp0 10.8.0.2 * 255.255.255.255 UH 0 0 0 tun1 172.16.0.2 * 255.255.255.255 UH 0 0 0 tun0 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun1 172.16.0.0 172.16.0.2 255.255.255.0 UG 0 0 0 tun0 88.208.236.0 * 255.255.252.0 U 0 0 0 eth0 169.254.0.0 * 255.255.0.0 U 0 0 0 eth0 default server88-208-23 0.0.0.0 UG 0 0 0 eth0 [root ~]# # Generated by iptables-save v1.3.5 on Mon Jan 7 19:41:10 2013 *filter :INPUT DROP [17488970:2089589222] :FORWARD DROP [0:0] :OUTPUT ACCEPT [374796:40451517] :RH-Firewall-1-INPUT - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 1057 -m state --state NEW -m recent --set --name SSH --rsource -A INPUT -i eth0 -p tcp -m tcp --dport 1057 -m state --state NEW -m recent --update --seconds 60 --hitcount 2 --rttl --name SSH --rsource -j DROP -A INPUT -d 88.xxx.xxx.xx9 -p tcp -m tcp --dport 1057 -m state --state NEW -j ACCEPT -A INPUT -d 88.xxx.xxx.xx9 -p tcp -m tcp --dport 5555 -m state --state NEW -j ACCEPT -A INPUT -d 88.xxx.xxx.xx9 -p tcp -m tcp --dport 1194 -m state --state NEW -j ACCEPT -A INPUT -d 88.xxx.xxx.xx9 -p udp -m udp --dport 1194 -m state --state NEW -j ACCEPT -A INPUT -s 192.162.69.74 -p tcp -m state --state NEW -m tcp --dport 20 -j ACCEPT -A INPUT -s 192.162.69.74 -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT -A INPUT -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 50000:51000 -j ACCEPT -A INPUT -i tun+ -j ACCEPT -A INPUT -i tap+ -j ACCEPT -A INPUT -p udp -m udp --dport 53 -m state --state NEW -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -m state --state NEW -j ACCEPT -A INPUT -p udp -m udp --dport 123 -m state --state NEW -j ACCEPT -A INPUT -p tcp -m tcp --dport 8002 -m state --state NEW -j ACCEPT -A INPUT -p tcp -m tcp --dport 9001 -m state --state NEW -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -m state --state NEW -j ACCEPT -A INPUT -d 88.xxx.xxx.xx8 -p tcp -m state --state NEW -m tcp --dport 8080 -j ACCEPT -A INPUT -d 88.xxx.xxx.xx8 -p tcp -m state --state NEW -m tcp --dport 1935 -j ACCEPT -A INPUT -d 88.xxx.xxx.xx8 -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT -A INPUT -d 88.xxx.xxx.xx8 -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT -A INPUT -d 88.xxx.xxx.xx9 -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT -A INPUT -s 82.32.194.102 -d 88.xxx.xxx.xx9 -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT -A INPUT -p icmp -m limit --limit 1/sec --limit-burst 1 -j ACCEPT -A INPUT -d 88.xxx.xxx.xx8 -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT -A INPUT -i eth0 -p tcp -m tcp --dport 1723 -j ACCEPT -A INPUT -i eth0 -p gre -j ACCEPT -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i tun+ -j ACCEPT -A FORWARD -i tap+ -j ACCEPT -A FORWARD -i tun+ -p tcp -m tcp --dport 64519 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tap+ -p tcp -m tcp --dport 64519 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tun+ -p tcp -m tcp --dport 58678 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tap+ -p tcp -m tcp --dport 58678 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tun+ -p udp -m udp --dport 58678 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tun+ -p udp -m udp --dport 64519 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tap+ -p udp -m udp --dport 64519 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tun+ -p tcp -m tcp --dport 6881:6999 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tap+ -p tcp -m tcp --dport 6881:6999 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tun+ -p udp -m udp --dport 6881:6999 -m conntrack --ctstate NEW -j DROP -A FORWARD -i tap+ -p udp -m udp --dport 6881:6999 -m conntrack --ctstate NEW -j DROP -A FORWARD -i ppp+ -o eth0 -j ACCEPT -A FORWARD -i eth0 -o ppp+ -j ACCEPT -A OUTPUT -s 88.xxx.xxx.xx9 -p tcp -m tcp --dport 1194 -m state --state NEW -j ACCEPT -A OUTPUT -s 88.xxx.xxx.xx9 -p udp -m udp --dport 1194 -m state --state NEW -j ACCEPT -A OUTPUT -s 88.xxx.xxx.xx9 -p tcp -m tcp --dport 443 -m state --state NEW -j ACCEPT -A OUTPUT -s 88.xxx.xxx.xx8 -p icmp -m icmp --icmp-type 0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 20 -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT -A OUTPUT -o lo -j ACCEPT -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT -A RH-Firewall-1-INPUT -p tcp -m state --state NEW,RELATED,ESTABLISHED -m tcp --dport 50000:51000 -j ACCEPT COMMIT # Completed on Mon Jan 7 19:41:10 2013 # Generated by iptables-save v1.3.5 on Mon Jan 7 19:41:10 2013 ------------------------------------------------------------------------------ Master SQL Server Development, Administration, T-SQL, SSAS, SSIS, SSRS and more. Get SQL Server skills now (including 2012) with LearnDevNow - 200+ hours of step-by-step video tutorials by Microsoft MVPs and experts. SALE $99.99 this month only - learn more at: http://p.sf.net/sfu/learnmore_122512