Problem s PPTP (GRE) a networkmanager

[batoo]

Zdar odbornici mam problem.
Po dlouhe dobe jsem z Archu presel zpatky na Ubuntu, unaven vytvarenim xx skriptu jsem si v NetworkManageru nastavil VPNku PPTP.
Po nastaveni to vyborne jelo az do vcerejska.
Po nainstalovani GUFW pro UFW firewall a pridani par profilu pro Apparmor (network manageru se netykaly), tak jsem zjistil, ze mi uz nejde vytocit PPTP VPNka.
V logu je totok:

Kód: [Vybrat]

Jul 31 12:57:25 cpio NetworkManager[1185]: <info> Starting VPN service 'pptp'...
Jul 31 12:57:25 cpio NetworkManager[1185]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 2907
Jul 31 12:57:25 cpio NetworkManager[1185]: <info> VPN service 'pptp' appeared; activating connections
Jul 31 12:57:25 cpio NetworkManager[1185]: <info> VPN plugin state changed: 1
Jul 31 12:57:25 cpio NetworkManager[1185]: <info> VPN plugin state changed: 3
Jul 31 12:57:25 cpio pppd[2909]: Plugin /usr/lib/pppd/2.4.5//nm-pptp-pppd-plugin.so loaded.
Jul 31 12:57:25 cpio NetworkManager[1185]: <info> VPN connection 'iPredator' (Connect) reply received.
Jul 31 12:57:25 cpio pppd[2909]: pppd 2.4.5 started by root, uid 0
Jul 31 12:57:25 cpio pppd[2909]: Using interface ppp0
Jul 31 12:57:25 cpio pppd[2909]: Connect: ppp0 <--> /dev/pts/0
Jul 31 12:57:25 cpio init: Failed to spawn ufw pre-start process: unable to execute: No such file or directory
Jul 31 12:57:25 cpio init: Failed to spawn ufw post-stop process: unable to execute: No such file or directory
Jul 31 12:57:25 cpio NetworkManager[1185]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jul 31 12:57:25 cpio NetworkManager[1185]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration f$
Jul 31 12:57:25 cpio pptp[2913]: nm-pptp-service-2907 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Jul 31 12:57:25 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jul 31 12:57:25 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Jul 31 12:57:25 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Jul 31 12:57:26 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jul 31 12:57:26 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Jul 31 12:57:26 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 36224).
Jul 31 12:57:26 cpio pppd[2909]: CHAP authentication succeeded
Jul 31 12:57:26 cpio pppd[2909]: MPPE 128-bit stateless compression enabled
Jul 31 12:57:27 cpio pppd[2909]: local  IP address 93.182.153.17
Jul 31 12:57:27 cpio pppd[2909]: remote IP address 93.182.153.2
Jul 31 12:57:27 cpio pppd[2909]: primary   DNS address 93.182.182.85
Jul 31 12:57:27 cpio pppd[2909]: secondary DNS address 93.182.182.85
Jul 31 12:58:05 cpio NetworkManager[1185]: <warn> VPN connection 'iPredator' (IP Config Get) timeout exceeded.
Jul 31 12:58:07 cpio pppd[2909]: Terminating on signal 15
Jul 31 12:58:07 cpio pppd[2909]: Connect time 0.7 minutes.
Jul 31 12:58:07 cpio pppd[2909]: Sent 0 bytes, received 11388 bytes.
Jul 31 12:58:07 cpio NetworkManager[1185]: <info> Policy set 'Auto home' (eth1) as default for IPv4 routing and DNS.
Jul 31 12:58:07 cpio pppd[2909]: MPPE disabled
Jul 31 12:58:07 cpio pppd[2909]: Child process /usr/sbin/pptp vpn.ipredator.se --nolaunchpppd --loglevel 0 --logstring nm-pptp-service-2907 (pid 2911) termin$
Jul 31 12:58:07 cpio pppd[2909]: Connection terminated.
Jul 31 12:58:07 cpio avahi-daemon[1163]: Withdrawing workstation service for ppp0.
Jul 31 12:58:07 cpio NetworkManager[1185]:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jul 31 12:58:07 cpio pptp[2913]: nm-pptp-service-2907 warn[decaps_hdlc:pptp_gre.c:204]: short read (-1): Input/output error
Jul 31 12:58:07 cpio pptp[2913]: nm-pptp-service-2907 warn[decaps_hdlc:pptp_gre.c:216]: pppd may have shutdown, see pppd log
Jul 31 12:58:07 cpio pppd[2909]: Exit.
Jul 31 12:58:07 cpio pptp[2929]: nm-pptp-service-2907 log[callmgr_main:pptp_callmgr.c:234]: Closing connection (unhandled)
Jul 31 12:58:07 cpio pptp[2929]: nm-pptp-service-2907 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jul 31 12:58:07 cpio pptp[2929]: nm-pptp-service-2907 log[call_callback:pptp_callmgr.c:79]: Closing connection (call state)
Jul 31 12:58:12 cpio NetworkManager[1185]: <info> VPN service 'pptp' disappeared




Podle logu usuzuji, ze GRE proste neprojde smerem ven (na routeru, ktery je pripojen do internetu jsem nic nemenil).

Tohle chovani jsem jednou zazil na windowsim serveru, kde nebyla nastavena prave prostupnost GRE.


EDIT: A jeste jsem zapomnel dodat, ze s UFW jsem zkousel i pridat do /etc/ufw/before.rules

# allow GRE
-A ufw-before-input -p 47 -j ACCEPT
-A ufw-before-output -p 47 -j ACCEPT
-A ufw-before-input -p tcp -s 0.0.0.0/0 --sport 1723 -j ACCEPT
-A ufw-before-output -p tcp -d 0.0.0.0/0 --dport 1723 -j ACCEPT

Bohuzel nic.





Z naproste zoufalosti, kdyz nepomohl flush IPtables ani zastaveni Apparmoru jsem GUFW, UFW i Apparmor odinstaloval.


Bohuzel bez vysledku.

Poradi nekdo prosim?

[batoo]

Nikdo nic? zajimave je z v praci mi to jede a doma ne (doma pripojeni pres router ADSL O2) - ale pred instalaci UFW to slo i doma router umi handlovat GRE.