On Sat, Aug 13, 2016 at 03:22:16AM -0700, kotot...@gmail.com wrote: > Hi, > > I'm trying to setup a VPN connection with PPTP from sys-net (first tried with > the ProxyVM but it also didn't work) without success. > > Any help is welcome, here below the logs. > I also tried > > $ sudo modprobe nf_conntrack_pptp > > without success. > > I'm using the fedora template. > > Plugin /usr/lib64/pppd/2.4.7/nm-pptp-pppd-plugin.so loaded. > using channel 9 > Using interface ppp0 > Connect: ppp0 <--> /dev/pts/1 > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xbdaa77d8> <pcomp> <accomp>] > LCP: timeout sending Config-Requests > Connection terminated. > Modem hangup > Script /sbin/pptp 91.233.116.223 --nolaunchpppd --loglevel 2 --logstring > nm-pptp-service-5272 finished (pid 5281), status = 0x0 > My guess is that you are blocking the connection from the VPN server. PPTP requires you to allow inbound GRE traffic. If your server is at X.X.X.X, and the VPN client is attached to sys-net then you want something like this on sys-net:
modprobe ip_conntrack_pptp modprobe ip_nat_pptp iptables -I FORWARD -p 47 -s X.X.X.X -J ACCEPT See if that helps. u -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20160814231404.GA4457%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
