Bonjour a tous
Je viens demander de l'aide a la communauté car je commence à craquer à force d'échouer dans la configuration de mon vpn.
J'explique mon reseau avant tout:
--> a mon domicile, je dispose d'un routeur adsl qui definit dans sa zone dmz mon serveur sme 6 qui fait office de serveur Web, FTP, et VPN et passerelle pour mes pc personnels
Je souhaiterais permettre a certaine personne du web a se connecter à mon serveur VPN. ces personnes tourne principale sur windows XP SP1 ou SP2.
Donc apres avoir configurer chaque utilisateurs sur le serveur vpn en leur accordant le droit au vpn, chaque utilisateur à un retour d'erreur de windows numéro 619. Apres avoir sniffer les différentes trames échangées, je me suis apercu que la reponse du serveur au requete GRE du client n'arrivait pas au client qui fermait donc la connection.
Je fournit si dessous le log du serveur :
Nov 13 15:47:57 dck-server pptpd[7813]: GRE: read(fd=5,buffer=804d940,len=8196) from PTY failed: status = -1 error = Input/output error
Nov 13 15:47:57 dck-server pptpd[7813]: CTRL: PTY read or GRE write failed (pty,gre)=(5,6)
Nov 13 15:47:57 dck-server pptpd[7813]: CTRL: Client 80.15.63.243 control connection finished
Nov 13 15:47:57 dck-server pptpd[7813]: CTRL: Exiting now
Nov 13 15:47:57 dck-server pptpd[3390]: MGR: Reaped child 7813
Nov 13 15:48:13 dck-server kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:0b:ad:27:00:85:a0:01:01:00:08:00 SRC=X.4.X.11 DST=172.168.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=54318 DF PROTO=TCP SPT=4963 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
Nov 13 15:48:14 dck-server pptpd[7815]: MGR: Launching /usr/sbin/pptpctrl to handle client
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: local address = 192.168.0.2
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: remote address = 192.168.0.247
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: pppd speed = 460800
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: pppd options file = /etc/ppp/options.pptpd
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Client 81.51.71.148 control connection started
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Received PPTP Control Message (type: 1)
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Made a START CTRL CONN RPLY packet
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: I wrote 156 bytes to the client.
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Sent packet to client
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Received PPTP Control Message (type: 7)
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Set parameters to 1525 maxbps, 64 window size
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Made a OUT CALL RPLY packet
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Starting call (launching pppd, opening GRE)
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: pty_fd = 5
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: tty_fd = 6
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: I wrote 32 bytes to the client.
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Sent packet to client
Nov 13 15:48:14 dck-server pptpd[7816]: CTRL (PPPD Launcher): Connection speed = 460800
Nov 13 15:48:14 dck-server pptpd[7816]: CTRL (PPPD Launcher): local address = 192.168.0.2
Nov 13 15:48:14 dck-server pptpd[7816]: CTRL (PPPD Launcher): remote address = 192.168.0.247
Nov 13 15:48:14 dck-server pppd[7816]: pppd 2.4.2b1 started by root, uid 0
Nov 13 15:48:14 dck-server pppd[7816]: Starting negotiation on /dev/pts/1
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Received PPTP Control Message (type: 15)
Nov 13 15:48:14 dck-server pptpd[7815]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Nov 13 15:48:14 dck-server pptpd[7815]: GRE: Discarding duplicate packet
Nov 13 15:48:16 dck-server kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:0b:ad:27:00:85:a0:01:01:00:08:00 SRC=84.4.11.11 DST=172.168.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=54635 DF PROTO=TCP SPT=4963 DPT=135 WINDOW=16384 RES=0x00 SYN URGP=0
Nov 13 15:48:17 dck-server kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:0b:ad:27:00:85:a0:01:01:00:08:00 SRC=84.4.5.254 DST=172.168.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=17889 DF PROTO=TCP SPT=3452 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0
Nov 13 15:48:19 dck-server kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:0b:ad:27:00:85:a0:01:01:00:08:00 SRC=84.4.5.254 DST=172.168.0.2 LEN=48 TOS=0x00 PREC=0x00 TTL=123 ID=18547 DF PROTO=TCP SPT=3452 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0
Nov 13 15:48:34 dck-server kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:0b:ad:27:00:85:a0:01:01:00:08:00 SRC=81.44.61.48 DST=172.168.0.2 LEN=40 TOS=0x00 PREC=0x00 TTL=110 ID=25421 PROTO=TCP SPT=42441 DPT=2156 WINDOW=0 RES=0x00 ACK RST URGP=0
Nov 13 15:48:44 dck-server pppd[7816]: LCP: timeout sending Config-Requests
Merci par avance pour toute aide
Amicalement
dck