Hello Tom, and thanks very much for your comments again. I answers you
some questions down:
El 17/02/2010 16:33, Tom Eastep escribió:
Miguel A. Velasco wrote:
Hello, thanks very much for your help.I answer each of your questions or
coments down:
Given that your external IP addresses are in the RFC 1918 range, you are
doing "double NAT" of all of your traffic. Do you know for certain that
this works in a single-ISP configuration?
At this point I may add that this /etc/shorewall/masq config is
so confused for me. When I setup MultiISP Config I followed the
instrucctions from here:
http://blog.nkadesign.com/2009/sysadmin-multiple-isp-firewall-
servers-and-redundancy/ and thos article helped me so much,
but in the case of masq file, I never understood why this
config ....
If that configuration is confusing, then simply do this:
#INTERFACE SOURCE ADDRESS
$ADSL_IF 0.0.0.0/0 10.10.90.3
$DSL_IF 0.0.0.0/0 10.10.100.3
I have tried running shorewall with this config but I
haven´t internet access. Even I can´t ping from the
firewall to 10.10.90.3 or 10.10.100.3 ....
¿Any idea?
About your question, I don´t understand why you say I´m using
double NAT ...
10.10.x.x are private addresses reserved by RFC 1918. Hosts on
the internet cannot send packets to those addresses. It
therefore follows that there is another router between your
Shorewall system and the Internet that is rewriting the SOURCE
IP address in outgoing packets to something that is routable
over the Internet; so both your Shorewall system AND the other
router are doing NAT.
Now I understand you perfectly! Thannks for your
explanation :)
I think you will need to use a packet sniffer to see what is happening
on the external interface. Other than the fact that you have many
unneeded rules, I don't see anything wrong with your Shorewall setup.
I attach three files, that are outputs of
#tcpdump -e -v -i eth1 -n dst host ip_pptpserver
where pptpserver is 106.Red-214-4-50 and 10.10.80.10 is my
pptpclient.
The IP´s server when it is connected to the vpn is
192.168.11.83.
Your tcpdump output:
a) Only shows outbound traffic because you specified 'dst host'
rather than 'host'.
b) It uses DNS names! Please always use the '-n' option so that
the dump contains IP addresses rather than DNS names.
Again you are true in all the comments. Now I have
tested with #tcpdump -n -i eth1 -n host pptpserver_ip
and I attach the dump files in case of you want to have
a look.
May I configure any especific rule for IP 192.168.11.83? ...
Even I´ve also tried openning al zones with ACCEPT in the policy file
but it hasn´t worked....
This isn't a Shorewall security-related issue; it is an PPTP issue.
Shorewall is not causing the problem here because the PPTP client and
server ARE COMMUNICATING; the SCP negotiation seems to be failing for
some reason. Seeing both sides of the conversation might tell you why.
At this point what do you suggest me? I mean: as you say the
problem is not in shorewall config and isn´t on the windows
machine (pptp client) because I am able to connect this Server
directly to pptp server, avoiding shorewall firewall
(connecting through the adsl router ...).
Then, when you say it´s a PPTP issue what do you exactly
refer?.
I´ve reading a lot of documentation about kernels modules to
run pptp but I´m running Kernel 2.6.x with all pptp and
masquerade modules loaded ... Dou you have any idea, where
could I continue investigating?
Thanks very much for your help.
Best Regards.
Miguel A. Velasco
-Tom
12:40:34.159548 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: S 2288996179:2288996179(0) win
65535 <mss 1460,nop,nop,sackOK>
12:40:34.246244 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: S 1699308169:1699308169(0) ack 2288996180 win 5840
<mss 1350>
12:40:34.246555 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: . ack 1 win 65535
12:40:34.246617 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 1:157(156) ack 1 win 65535: pptp
CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0)
FIRM_REV(3790) [|pptp]
12:40:34.337130 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: . ack 157 win 6432
12:40:34.346275 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: P 1:157(156) ack 157 win 6432: pptp CTRL_MSGTYPE=SCCRP
PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP() BEARER_CAP() MAX_CHAN(1)
FIRM_REV(1) [|pptp]
12:40:34.347674 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 157:325(168) ack 157 win 65379:
pptp CTRL_MSGTYPE=OCRQ CALL_ID(1373) CALL_SER_NUM(1464) MIN_BPS(300)
MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0)
PHONE_NO_LEN(0) [|pptp]
12:40:34.460339 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: P 157:189(32) ack 325 win 7504: pptp CTRL_MSGTYPE=OCRP
CALL_ID(17152) PEER_CALL_ID(1373) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0)
CONN_SPEED(100000000) RECV_WIN(64) PROC_DELAY(0) PHY_CHAN_ID(0)
12:40:34.464755 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 325:349(24) ack 189 win 65347:
pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(17152) SEND_ACCM(0xffffffff)
RECV_ACCM(0xffffffff)
12:40:34.468035 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 0, length 37: LCP, Conf-Request (0x01), id 0, length 23
12:40:34.469208 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 0, ack 4294967295, length 48: LCP, Conf-Request (0x01), id 1,
length 30
12:40:34.469590 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 1, ack 0, length 48: LCP, Conf-Ack (0x02), id 1, length 30
12:40:34.556177 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 1, ack 0, length 27: LCP, Conf-Reject (0x04), id 0, length 9
12:40:34.556562 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 2, ack 1, length 38: LCP, Conf-Request (0x01), id 1, length 20
12:40:34.592622 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: . ack 349 win 7504
12:40:34.598497 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 1, no-payload, length 12
12:40:34.638177 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 2, ack 2, length 38: LCP, Conf-Ack (0x02), id 1, length 20
12:40:34.638581 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 349:373(24) ack 189 win 65347:
pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(17152) SEND_ACCM(0x00000000)
RECV_ACCM(0xffffffff)
12:40:34.638646 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 3, ack 2, length 36: LCP, Ident (0x0c), id 2, length 20
12:40:34.638697 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 4, length 37: LCP, Ident (0x0c), id 3, length 25
12:40:34.640597 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 5, length 45: PAP, Auth-Req (0x01), id 75, Peer
CLIENTES\saferain, Name saferain
12:40:34.640717 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 3, length 22: LCP, Echo-Request (0x09), id 0, length 10
12:40:34.642129 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 6, ack 3, length 26: LCP, Echo-Reply (0x0a), id 0, length 10
12:40:34.723197 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: . ack 373 win 7504
12:40:34.725629 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 4, ack 3, length 42: LCP, Code-Reject (0x07), id 2, length 24
12:40:34.728092 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 5, ack 4, length 47: LCP, Code-Reject (0x07), id 3, length 29
12:40:34.732538 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 6, ack 5, length 31: PAP, Auth-ACK (0x02), id 75, Msg Login ok
12:40:34.733606 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 7, ack 6, length 28: unknown ctrl-proto (0x80fd), Conf-Request
(0x01), id 4, length 12
12:40:34.733660 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 8, length 48: IPCP, Conf-Request (0x01), id 5, length 36
12:40:34.735371 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 7, length 24: IPCP, Conf-Request (0x01), id 1, length 12
12:40:34.736831 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 9, ack 7, length 28: IPCP, Conf-Ack (0x02), id 1, length 12
12:40:34.779634 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 6, no-payload, length 12
12:40:34.817606 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 8, ack 7, length 34: LCP, Prot-Reject (0x08), id 4, length 18
12:40:34.820317 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 9, ack 8, length 34: IPCP, Conf-Reject (0x04), id 5, length 18
12:40:34.821814 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 10, ack 9, length 40: IPCP, Conf-Request (0x01), id 6, length 24
12:40:34.859697 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 9, no-payload, length 12
12:40:34.905349 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 10, ack 10, length 40: IPCP, Conf-Nack (0x03), id 6, length 24
12:40:34.906932 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 11, ack 10, length 40: IPCP, Conf-Request (0x01), id 7, length
24
12:40:34.998635 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, seq 11, ack 11, length 40: IPCP, Conf-Ack (0x02), id 7, length 24
12:40:35.011994 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 12, ack 11, length 57: IP 192.168.11.83 > IGMP.MCAST.NET: igmp
v3 report, 1 group record(s)
12:40:35.013175 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 13, length 177: IP 192.168.11.83.sd > 239.255.219.45.9877: UDP,
length 136
12:40:35.078785 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 14, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:35.149691 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 13, no-payload, length 12
12:40:35.215226 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 14, no-payload, length 12
12:40:35.829633 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 15, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:35.962744 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 15, no-payload, length 12
12:40:35.999519 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 16, length 53: IP 192.168.11.83 > IGMP.MCAST.NET: igmp v3
report, 1 group record(s)
12:40:36.129775 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 16, no-payload, length 12
12:40:36.578579 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 17, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:36.713187 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 17, no-payload, length 12
12:40:37.329657 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 18, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:37.461237 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 18, no-payload, length 12
12:40:38.008188 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 19, length 341: IP 192.168.11.83.bootpc >
255.255.255.255.bootps: BOOTP/DHCP, Request, length: 300
12:40:38.078852 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 20, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:38.078909 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 21, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:38.140237 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 19, no-payload, length 12
12:40:38.209191 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 21, no-payload, length 12
12:40:38.829689 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 22, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:38.829743 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 23, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:38.960638 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 23, no-payload, length 12
12:40:39.578645 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 24, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:39.578698 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 25, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:39.744653 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 25, no-payload, length 12
12:40:40.329714 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 26, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:40.329768 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 27, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:40.459128 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 27, no-payload, length 12
12:40:41.007583 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 28, length 341: IP 192.168.11.83.bootpc >
255.255.255.255.bootps: BOOTP/DHCP, Request, length: 300
12:40:41.079026 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 29, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:41.079078 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 30, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:41.141106 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 28, no-payload, length 12
12:40:41.221172 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 30, no-payload, length 12
12:40:41.828669 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 31, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:41.828724 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 32, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:41.967571 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 32, no-payload, length 12
12:40:42.578680 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 33, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:42.578734 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 34, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:42.712767 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 34, no-payload, length 12
12:40:43.328691 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 35, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:43.328745 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 36, length 109: IP 192.168.11.83.netbios-ns >
255.255.255.255.netbios-ns: NBT UDP PACKET(137): REGISTRATION; REQUEST;
BROADCAST
12:40:43.460263 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 36, no-payload, length 12
12:40:44.080499 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 37, length 219: IP 192.168.11.83.netbios-dgm >
255.255.255.255.netbios-dgm: NBT UDP PACKET(138)
12:40:44.211256 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 37, no-payload, length 12
12:40:45.579853 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 38, length 219: IP 192.168.11.83.netbios-dgm >
255.255.255.255.netbios-dgm: NBT UDP PACKET(138)
12:40:45.710244 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 38, no-payload, length 12
12:40:47.079882 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 39, length 219: IP 192.168.11.83.netbios-dgm >
255.255.255.255.netbios-dgm: NBT UDP PACKET(138)
12:40:47.212596 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 39, no-payload, length 12
12:40:48.578847 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17152, seq 40, length 219: IP 192.168.11.83.netbios-dgm >
255.255.255.255.netbios-dgm: NBT UDP PACKET(138)
12:40:48.711341 IP 106.Red-213-4-45.staticIP.rima-tde.net > 10.10.90.12: GREv1,
call 1373, ack 40, no-payload, length 12
12:41:04.726897 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: F 189:189(0) ack 373 win 7504
12:41:04.728245 IP 10.10.90.12.chromagrafx >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: F 373:373(0) ack 190 win 65347
12:41:04.810439 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.chromagrafx: . ack 374 win 7504
12:41:10.461165 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: S 3265449377:3265449377(0) win
65535 <mss 1460,nop,nop,sackOK>
12:41:10.542887 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: S 1730514095:1730514095(0) ack 3265449378 win 5840 <mss
1350>
12:41:10.543234 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: . ack 1 win 65535
12:41:10.543297 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 1:157(156) ack 1 win 65535: pptp
CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0)
FIRM_REV(3790) [|pptp]
12:41:10.631344 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: . ack 157 win 6432
12:41:10.642931 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: P 1:157(156) ack 157 win 6432: pptp CTRL_MSGTYPE=SCCRP
PROTO_VER(1.0) RESULT_CODE(1) ERR_CODE(0) FRAME_CAP() BEARER_CAP() MAX_CHAN(1)
FIRM_REV(1) [|pptp]
12:41:10.643269 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 157:325(168) ack 157 win 65379:
pptp CTRL_MSGTYPE=OCRQ CALL_ID(1404) CALL_SER_NUM(1465) MIN_BPS(300)
MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0)
PHONE_NO_LEN(0) [|pptp]
12:41:10.743923 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: P 157:189(32) ack 325 win 7504: pptp CTRL_MSGTYPE=OCRP
CALL_ID(17280) PEER_CALL_ID(1404) RESULT_CODE(1) ERR_CODE(0) CAUSE_CODE(0)
CONN_SPEED(100000000) RECV_WIN(64) PROC_DELAY(0) PHY_CHAN_ID(0)
12:41:10.748369 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: P 325:349(24) ack 189 win 65347:
pptp CTRL_MSGTYPE=SLI PEER_CALL_ID(17280) SEND_ACCM(0xffffffff)
RECV_ACCM(0xffffffff)
12:41:10.750553 IP 10.10.90.12 > 106.Red-213-4-45.staticIP.rima-tde.net: GREv1,
call 17280, seq 0, length 37: LCP, Conf-Request (0x01), id 0, length 23
12:41:10.830922 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: F 189:189(0) ack 325 win 7504
12:41:10.832243 IP 10.10.90.12.igi-lm >
106.Red-213-4-45.staticIP.rima-tde.net.pptp: F 349:349(0) ack 190 win 65347
12:41:10.834373 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: R 1730514284:1730514284(0) win 0
12:41:10.914417 IP 106.Red-213-4-45.staticIP.rima-tde.net.pptp >
10.10.90.12.igi-lm: R 1730514285:1730514285(0) win 0
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users
