Hi, yes I have multi Isp and I me pptp server listen on the 3 public Ips
that I have, also in my LAN ip and thats the only that works....
Do you need another dump?
On Sat, Nov 15, 2008 at 1:01 AM, Jerry Vonau <[EMAIL PROTECTED]> wrote:
> Nico Pagliaro wrote:
> > On Fri, Nov 14, 2008 at 1:30 PM, Jerry Vonau <[EMAIL PROTECTED]> wrote:
> >
> >> Nico Pagliaro wrote:
> >>> I put that rule, and the same,. I cant connect...
> >>>
> >>> On Fri, Nov 14, 2008 at 1:06 PM, Jerry Vonau <[EMAIL PROTECTED]> wrote:
> >>>
> >> The response was based on the limited info you provided, need to see a
> >> full unedited shorewall dump.
> >>
> >> Jerry
>
> Are you sure that the vpn client has authenticated correctly? The pptp
> chat sequence in /var/log/messages should shed some light on that. I can
> see that the vpn traffic to port 1723 is present but there is no gre
> traffic.
>
> Chain net2fw (3 references)
> pkts bytes target prot opt in out source
> destination
> 8957 1504K ACCEPT all -- * * 0.0.0.0/0
> 0.0.0.0/0 state RELATED,ESTABLISHED
> 3 126 ACCEPT udp -- * * 0.0.0.0/0
> 0.0.0.0/0 udp dpt:1194
> 0 0 LOG 47 -- * * 0.0.0.0/0
> 0.0.0.0/0 LOG flags 0 level 6 prefix `Shorewall:net2fw:ACCEPT:'
> 0 0 ACCEPT 47 -- * * 0.0.0.0/0
> 0.0.0.0/0
> 5 264 LOG tcp -- * * 0.0.0.0/0
> 0.0.0.0/0 tcp dpt:1723 LOG flags 0 level 6 prefix
> `Shorewall:net2fw:ACCEPT:'
> 5 264 ACCEPT tcp -- * * 0.0.0.0/0
> 0.0.0.0/0 tcp dpt:1723
> 4 1104 LOG udp -- * * 0.0.0.0/0
> 0.0.0.0/0 udp dpt:500 LOG flags 0 level 6 prefix
> `Shorewall:net2fw:ACCEPT:'
> 4 1104 ACCEPT udp -- * * 0.0.0.0/0
> 0.0.0.0/0 udp dpt:500
> 0 0 ACCEPT udp -- * * 0.0.0.0/0
> 0.0.0.0/0 udp dpt:1194
> 0 0 ACCEPT 47 -- * * 0.0.0.0/0
> 0.0.0.0/0
> 0 0 ACCEPT tcp -- * * 0.0.0.0/0
> 0.0.0.0/0 tcp dpt:1723
> 1438 87140 all2all all -- * * 0.0.0.0/0
> 0.0.0.0/0
>
> Not sure why you have duplicate entries for your pptp vpn, are you using
> the tunnels file also? Which of the public ip address are you trying to
> connect with? I can see that your using the multi-ISP support without
> using "balance", that maybe an issue if your connecting to the addresses
> on eth1 or eth2.
>
> Jerry
> PS Edit the dump again, and I'm out of the picture, I'm not guessing at
> what the real information is.
>
>
>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's
> challenge
> Build the coolest Linux based applications with Moblin SDK & win great
> prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
