Hot answers tagged

7

I found the answer, I had to enable Point-to-Point encryption(MPPE) in the Advanced Settings dialog. Now it works.


3

Change the used loglevel in your NetworkManager.conf file [logging] This section controls NetworkManager's logging. Any settings here are overridden by the --log-level and --log-domains command-line options. level=<level> One of [ERR, WARN, INFO, DEBUG]. The ERR level logs only critical errors. WARN ...


3

In the OSX 1.9 pppd source code, I found this in Helpers/pppd/pppd.h: #ifdef __APPLE__ #define EXIT_TERMINAL_FAILED 20 #define EXIT_DEVICE_ERROR 21 #endif #ifdef MAXOCTETS #ifdef __APPLE__ #define EXIT_TRAFFIC_LIMIT 22 #else #define EXIT_TRAFFIC_LIMIT 20 #define EXIT_CNID_AUTH_FAILED 21 #endif #endif #ifdef __APPLE__ #define ...


2

eth0:1, eth0:2 are interface aliases. They do not function as individual interface. The actual interface is still eth0. Traffic going in and out of those aliases are still count as eth0's. You will get a better idea if you use iftop to monitor those interfaces one by one. iftop -BPn -i eth0 iftop -BPn -i eth0:1 iftop -BPn -i eth0:2 All 3 commands will ...


2

If I understand correctly, you want an OpenVPN tunnel and a PPTP tunnel, each that will route tunneled traffic out eth0, but each with it's own IP. If I'm wrong in that, try to clarify and I'll do what I can to help. But, I believe this script will do what you're asking for. #!/bin/bash # This enables forwarding in the kernel. echo 1 > /proc/sys/net/...


2

Try this: modprobe ip_nat_pptp I also was not able to connect from my LAN even though all rules were very relaxed.


2

In order for NAT to work, you need to have a protocol-specific helper module loaded. By default, you're only going to have ones for TCP and UDP loaded. That's why you're seeing your PPTP traffic (which is actually PPP over GRE) escaping without NAT. That module is nf_nat_proto_gre, at least as of Linux 4.4. A similar story applies to connection tracking (...


1

I don't really understand, but : modprobe nf_conntrack_pptp and opening VPN via the GUI, instead of terminal, does the job :-/


1

PPtP creates a GRE tunnel after the authentication. GRE is a Point to Point (PtP) protocol. If you have a private IP and the router is doing NAT (most probably the case), in order to establish the connection your router should support GRE (TCP Proto 47) passthrough. If that is not enabled, you won't be able to connect to PPtP VPN.


1

I had the same problem, and I found the mirrors site of Fedora has the RPM I need. china mirrors: http://mirrors.aliyun.com/fedora/releases/20/Everything/x86_64/os/Packages/n/NetworkManager-pptp-gnome-0.9.8.2-3.fc20.x86_64.rpm http://mirrors.aliyun.com/fedora/releases/20/Everything/x86_64/os/Packages/n/NetworkManager-vpnc-gnome-0.9.8.2-2.fc20.x86_64.rpm


1

You can use -w key with ssh. An example: # ssh root@ssh-server -w 0:0 "/sbin/ifconfig tun0 192.168.100.1/24 pointopoint 192.168.100.2" # ifconfig tun0 192.168.100.2/24 pointopoint 192.168.100.1 # route add -host ssh-server dev eth0 # route del default # route add default gw 192.168.100.1 But you need connect with root privileges to your ssh-server and ...


1

in my case in centOs 6.7 i use this iptables rules: iptables --table nat --append POSTROUTING --out-interface ppp0 -j MASQUERADE iptables -I INPUT -s 192.168.0.0/24 -i ppp0 -j ACCEPT iptables --append FORWARD --in-interface eth0 -j ACCEPT iptables -A INPUT -i eth0 -p icmp -j ACCEPT iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE && iptables-...


1

As long as the VPN servers do not use the same IPs internally, it should possible - but probably not by using only one wrapper like NetworkManager. You need to start at least one VPN client by hand or by using others tools like kvpnc. Depending on what you want, you need to be careful with the routes. You need to get sure, that the routes which are set by ...


1

glibc-static.x86_64 0:2.12-1.107.el6_4.4 That's not the normal glibc, it probably doesn't have a .so in it at all. Of course, your system wouldn't be running without a libc.so. Try whereis libc.so.6. And install the plain glibc.x86_64.


1

You will need to ask the administrator in charge of the network to passthrough GRE for your VPN. An alternative might be to use OpenVPN instead. OpenVPN doesn't use GRE and seems to passthrough without problems with all routers that I have used. I haven't researched it much myself, but the word on the street is that OpenVPN is more secure and stronger.


1

Not totally sure about your setup, but... is your pptp vpn on a different interface (eg. tun0, tap0, etc) from your host network? You could probably configure pptpd's dhcp server to respond only on the vpn interface. Normally this is something like an INTERFACES setting in /etc/default/dhcp3-server or similar, but pptpd might manage its own dhcp server ...


1

I wrote something awhile back that keeps an eye on your IPs using a couple of different methods and gives some options for notification and such. It was written for CentOS but it wouldn't take much to adapt it to Debian flavours. Feedback is welcome. http://code.google.com/p/ipcheck/source/browse/ipcheck.sh


1

TorrentFreak had an article about things like that. You could check out VPNCheck.



Only top voted, non community-wiki answers of a minimum length are eligible