Hello On Fri, Apr 15, 2005 at 07:47:32PM +0200, Robert Kloibhofer wrote: > Hello > > > ?? You use pptp to access internet? > > > > > the pptp-server (10.0.0.138) resides in the modem (which is in fact an > > > adsl-router and connects over phone-line to the provider). > > > > Are you sure you do not want to use pppoe instead of pptp? > > pppoe is the protocol to use for adsl modems. At least that is > > what I'm using with my adsl router. > as i heared, tha practice to use pptp for internet-connection is only > used by providers in austria, maybe germany. > I just read it's also possible to use pppoe with my provider recently. > I'm going to try this. Ok I see.
> > > > There are however a couple of things that I do not understand. > > > > * Why do you have a gateway to eth0? > > > otherwise the tunnel breaks. there would be no route to 10.0.0.138. > > > > * Why don't you allow incoming packets from ppp0. I actually > > > > think that pptp can require that. > > > Sorry, I think i said it wrong. Of course, packages over open > > > ip-connections and requested packages are allowed to come in. Otherwise > > > i could not use the internet. > > > I don't allow packages, that request connections or echos etc. > > > > That still may be a problem as the tunneling protocol is not based > > on tcp or udp. > > > > tcp, udp, icmp and gre (the tunneling protocol used by pptp) are all > > protocols that are on top of ip. > > > > You normally give firewall rules for tcp, udp and icmp. But some > > rules can affect the gre protocol as well. > I don't think firewalling is the problem, since in general internet > works. Yes normal internet things will work properly. GRE is a SPECIAL PROTOCOL that DO NOT work in normal way, and more specifically is not handled the same way by iptables rules. I do not know how to express this in a more clear way than this. It is worth a try even if it may not be the problem. If you experience the problem again you can give me the output of strace -p #pid_of_call_handler This give me an indication on what state the process is in. Regards, // Ola > Regards, > Robert > > > > -- --------------------- Ola Lundqvist --------------------------- / [EMAIL PROTECTED] Annebergsslingan 37 \ | [EMAIL PROTECTED] 654 65 KARLSTAD | | +46 (0)54-10 14 30 +46 (0)70-332 1551 | | http://www.opal.dhs.org UIN/icq: 4912500 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --------------------------------------------------------------- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
