search for: mppe

Hi all I have installed pptpd on my server to run a vpn connection for some clients, but I got this error in the log file MPPE required, but kernel has no support. Can anyone help me with getting this module for the 2.6.9-42.0.3.EL kernel??? Thanks Sherwyn Greene Planner / I.T. Technician Project Controls Dept. Kentz-OJ's E&I Services J.V. +1 (868) 648-0876 -------------- next part -------------- An HTML at...

Ok, on to new swamps. I would like to enable PPTP on CentOS4 to accept connections from clients running MicroSoft Win2K and XP pro from outside our firewall. I am testing pptpd-1.2.3-0 and tells me that I need kernel support for MPPE, which I suppose is MicroSoft's own form of PtoP encryption. Is there a way of doing this without rebuilding the kernel? If so, how? Regards, Jim -- *** e-mail is NOT a secure channel *** James B. Byrne mailto:ByrneJB.<token>@Harte-Lyne.ca Harte & Lyne L...

Hi, configuration of PPTP for windows clients , using MPPE causes kernel crash. It is a known bug which is in bugzilla on RedHat https://bugzilla.redhat.com/show_bug.cgi?id=248716 I was thinking that CentOS 5.1 has allready a kernel patched , but as it seems NOT. Or am i wrong? Thanks David Hlacik -------------- next part -------------- An HTML attachm...

Does anyone know if load balancing and DNAT work well together? I know that load balancing and NAT do not, but what about a simple port forward? I can''t apply Julian Anastasov''s patches, because they don''t work with PPTP patches. :/ Anyhow, a simple: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport xxx -j DNAT --to yyy:xxx iptables -I FORWARD -i eth0 -d yyy -p

I did have a howto for setting up PPTP on a Centos server (3.6) can anyone point me to a howto ? I have been searching the internet but as yet cannot find a howto that works for me. Thanks Denis -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20051120/f3a9c195/attachment-0005.html>

..."] Jun 2 16:56:05 debian pptpd[17470]: CTRL: Ignored a SET LINK INFO packet with real ACCMs! Jun 2 16:56:05 debian pppd[17472]: sent [CHAP Success id=0x75 "S=B68D646C4DC626290C5BCD1148AE833C004B1E70 M=Access granted"] Jun 2 16:56:05 debian pppd[17472]: sent [CCP ConfReq id=0x1 <mppe +H -M +S -L -D -C>] Jun 2 16:56:05 debian pppd[17472]: rcvd [LCP TermReq id=0x4 "d\37777777613q\37777777775\000<\37777777715t\000\000\003\n"] Jun 2 16:56:05 debian pppd[17472]: LCP terminated by peer (dM-^KqM-}^@<M-Mt^@^@^C^J) Jun 2 16:56:05 debian pppd[17472]: sent [LCP TermA...

I''m currently running kernel 2.4.20 + the MPPE patch (linux-2.4.16-openssl-0.9.6b-mppe.patch). [root@gateway root]# uname -a Linux gateway.shorewall.net 2.4.20 #2 Thu Dec 5 18:02:38 PST 2002 i686 i686 i386 GNU/Linux [root@gateway root]# Seems to be OK with Shorewall. -Tom -- Tom Eastep \ Shorewall - iptables made easy AIM: tmeastep \ h...

...on?t work include this file to the list: /etc/ppp/pptpd-options It should look something like this: ipparam PoPToP lock mtu 1490 mru 1490 ms-wins 172.x.y.1 ms-dns 172.x.y.1 multilink proxyarp auth +chapms-v2 ipcp-accept-local ipcp-accept-remote lcp-echo-failure 30 lcp-echo-interval 5 deflate 0 # mppe-40 mppe-128 mppe-stateless Remember: if you want a higher encryption than mppe-40 you should make sure that your w2k client has installed sp2 or higher. Note: Your firewall has to accept both port 1723 and protocol 47 ACCEPT net $FW 47 ACCEPT $FW net...

Hi, I have a few remote user who use a PPTP based VPN. The server is running PoPToP (http://www.poptop.org/), and a pppd patched to support MPPE/MPPC for (some) added security. Currently, users authentication information is stored in plaintext in /etc/ppp/chap-secrets. I'd like to be able to put users into LDAP, and have ppp authenticate either directly against LDAP, or against Samba (with an LDAP backend). Any ideas on how I might go a...

...idmap: False/0 quota: False/0 acls: False/0 locking: False/0 msdfs: False/0 dmapi: False/0 Exec-Program output: NT_KEY: 55766444E6C4E3016575DE3819ABDED0 Exec-Program-Wait: plaintext: NT_KEY: 55766444E6C4E3016575DE3819ABDED0 Exec-Program: returned: 0 rlm_mschap: adding MS-CHAPv2 MPPE keys modcall[authenticate]: module "mschap" returns ok for request 1 modcall: leaving group MS-CHAP (returns ok) for request 1 Login OK: [stevens3] (from client nortelnew port 63) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 1 radius_x...

Hi Does anybody get packaged pptpd and/or ppp-mppe krnel module? Petr Klima

I am running Poptop 1.1.4 VPN server, Samba 3.0.6, RH 9 (2.4.20-8 patched for mppe-mppc). When the end user connects via VPN, they can create a share to the samba shared folder that was created. When they clost the explorer window, then reopen the shared drive from the "My Computer" view, the share can not be re-opened with the error that the mapped drive is alreay in...

I have set up a VPN over PPTP on a CentOS server using the DKMS module rpm dkms-0-2.0.6-3.el4 from http://centos.karan.org/el4/extras/stable/i386/RPMS/repodata/repovie w/dkms-0-2.0.6-3.el4.kb.html and kernel_ppp_mppe-0.0.5-2dkms.noarch.rpm at http://pptpclient.sourceforge.net/howto-fedora- core-3.phtml. I have configured the pptpd server on Centos4 to use MS_CHAPv2, 128bit encryption and to assign server side and client IP addresses in the range a.b.c.42-48 and a.b.c.52-58 respectively. I have also opened...

...figReq #1 IPADDR 10.77.1.2 COMPPROTO VJCOMP, 16 comp. channels, no comp-cid [pptp1] CCP: Open event [pptp1] CCP: state change Initial --> Starting [pptp1] CCP: LayerStart [pptp1] CCP: Up event [pptp1] CCP: state change Starting --> Req-Sent [pptp1] CCP: SendConfigReq #1 MPPC 0x01000020: MPPE, 40 bit, stateless [pptp1] CCP: rec'd Configure Request #4 link 0 (Req-Sent) MPPC 0x01000001: MPPC [pptp1] CCP: SendConfigNak #4 MPPC 0x01000020: MPPE, 40 bit, stateless [pptp1] IPCP: rec'd Configure Request #5 link 0 (Req-Sent) IPADDR 0.0.0.0 NAKing with 10.77.1.50 PRIDNS 0.0....

> I guess we have to look at the conf files then, first these two: Thank you for the config file snippets. I can confirm mine were almost identical, so I've tweaked them so that they are now exactly the same as yours except for the "--require-membership-of=example\authorization_groupname" line in ntlm_auth. Unfortunately it's still erroring out: (7) mschap: Creating

...nf:logwtmp/etc/pptpd.conf:localip 192.168.11.1/etc/pptpd.conf:remoteip 192.168.11.100- 109/etc/ppp/options.pptpd:name pptpd/etc/ppp/options.pptpd:refuse- pap/etc/ppp/options.pptpd:refuse-chap/etc/ppp/options.pptpd:refuse- mschap/etc/ppp/options.pptpd:require-mschap- v2/etc/ppp/options.pptpd:require-mppe- 128/etc/ppp/options.pptpd:lock/etc/ppp/options.pptpd:nobsdcomp /etc/ppp /options.pptpd:novj/etc/ppp/options.pptpd:novjccomp/etc/ppp/options.ppt pd:nologfd/etc/ppp/chap-secrets:myuser pptpd mypass * The connection from V.S. router to my c7 server work:mar 26 12:50:28 s- virt.ansa...

...pptpd.conf file: option /etc/ppp/options.poptop stimeout 10 speed 115200 localip 196.22.35.1 remoteip 196.22.35.100-110 196.22.35.1 is my public ip address on my firewall, eth0 ip address, also my lan ip adress. options.poptop looks like this: #ipparam PoPToP #dump #debug require-mschap-v2 require-mppe-128 require-mppe-stateless #login lock #mtu 1490 #mru 1490 ms-wins ms-dns 196.22.35.251 multilink proxyarp ipcp-accept-local ipcp-accept-remote lcp-echo-failure 30 lcp-echo-interval 5 deflate 0 When I start pptpd I get the following in /var/log/messages file: Mar 10 06:44:28 fw pptpd[31392]: MGR:...

...an AD group named >> "PPTP". I have the following in my pptp-options file. The server is >> Debian Squeeze 64bit. >> >> name vpn01 >> domain kigm.local >> refuse-pap >> refuse-chap >> refuse-mschap >> require-mschap-v2 >> require-mppe-128 >> ms-dns 192.168.0.1 >> ms-dns 192.168.0.2 >> proxyarp >> nodefaultroute >> lock >> nobsdcomp >> plugin winbind.so >> ntlm_auth-helper "/usr/bin/ntlm_auth --helper-protocol=ntlm-server-1 >> --require-membership-of=KIGM+PPTP" >&...

...: >> I have a server currently connecting to a pptp remote server. >> This server(lns\lac) has the option for pptp connections and l2tp >> connections. >> The l2tp connections are not using ipsec encryption at all. > > PPTP doesn't use ipsec either, it uses its own MPPE encryption based on > RC4, which is considered insecure as of years ago. > > L2TP is normally used within another encrypted transport.

...et security and it''s issues I thought this might be a good place to start. I have setup a company firewall using Mandrake Linux 9.0, Shorewall 1.3x and PPTPD v2.4.1, and a few other networking services. Thanks to Shorewall the firewall as tested is secure and the VPN is working fine with MPPE-128 Encryption. My concern is what can I do, if anything to secure the client systems when connected via VPN. Is there a way to disable other networking features on the client so that the client is tougher to compromise? The CEO of my company has asked me ''OK... you have the company firewa...