Приветствую. Задача следующая:
Есть организация, в которой весь интернет идёт через проксю. Имеется возможность подключиться к домашнему компу (10.10) по ssh.
Долгое время этого хватало, но сейчас хочется полноценный vpn без геморроя. Сейчас, сидя дома в одной сети с компьютером, ноутбук на ХР удачно подключается к pptpd домашнего сервака и видит через него интернет. Лог успешного подключения и отключения:
Oct 13 03:13:10 felixoid-home pptpd[4406]: CTRL: Client 192.168.1.5 control connection started
Oct 13 03:13:10 felixoid-home pptpd[4406]: CTRL: Starting call (launching pppd, opening GRE)
Oct 13 03:13:10 felixoid-home pppd[4407]: pppd 2.4.5 started by root, uid 0
Oct 13 03:13:10 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Oct 13 03:13:10 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Oct 13 03:13:10 felixoid-home modem-manager: (net/ppp0): could not get port's parent device
Oct 13 03:13:10 felixoid-home pppd[4407]: Using interface ppp0
Oct 13 03:13:10 felixoid-home pppd[4407]: Connect: ppp0 <--> /dev/pts/3
Oct 13 03:13:13 felixoid-home pptpd[4406]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Oct 13 03:13:13 felixoid-home pppd[4407]: MPPE 128-bit stateless compression enabled
Oct 13 03:13:15 felixoid-home pppd[4407]: Cannot determine ethernet address for proxy ARP
Oct 13 03:13:15 felixoid-home pppd[4407]: local IP address 192.168.0.1
Oct 13 03:13:15 felixoid-home pppd[4407]: remote IP address 192.168.0.2
Oct 13 03:13:20 felixoid-home pppd[4407]: LCP terminated by peer (^W-vn^@<M-Mt^@^@^@^@)
Oct 13 03:13:20 felixoid-home pppd[4407]: Connect time 0.1 minutes.
Oct 13 03:13:20 felixoid-home pppd[4407]: Sent 0 bytes, received 1408 bytes.
Oct 13 03:13:23 felixoid-home pppd[4407]: Connection terminated.
Oct 13 03:13:23 felixoid-home avahi-daemon[982]: Withdrawing workstation service for ppp0.
Oct 13 03:13:23 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Oct 13 03:13:23 felixoid-home pppd[4407]: Modem hangup
Oct 13 03:13:23 felixoid-home pppd[4407]: Exit.
Oct 13 03:13:23 felixoid-home pptpd[4406]: GRE: read(fd=6,buffer=611640,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Oct 13 03:13:23 felixoid-home pptpd[4406]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Oct 13 03:13:23 felixoid-home pptpd[4406]: CTRL: Reaping child PPP[4407]
Oct 13 03:13:23 felixoid-home pptpd[4406]: CTRL: Client 192.168.1.5 control connection finished
Но с работы просто так подключиться не получится, закрыты практически все порты и сперва надо подключиться по ссш для проброски порта. В этом случае лог из сислога выглядит следующим образом:
Oct 13 03:11:53 felixoid-home pptpd[4392]: CTRL: Client 127.0.0.1 control connection started
Oct 13 03:11:53 felixoid-home pptpd[4392]: CTRL: Starting call (launching pppd, opening GRE)
Oct 13 03:11:53 felixoid-home pppd[4393]: pppd 2.4.5 started by root, uid 0
Oct 13 03:11:53 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Oct 13 03:11:53 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Oct 13 03:11:53 felixoid-home pppd[4393]: Using interface ppp0
Oct 13 03:11:53 felixoid-home pppd[4393]: Connect: ppp0 <--> /dev/pts/3
Oct 13 03:11:53 felixoid-home modem-manager: (net/ppp0): could not get port's parent device
Oct 13 03:12:23 felixoid-home pppd[4393]: LCP: timeout sending Config-Requests
Oct 13 03:12:23 felixoid-home pppd[4393]: Connection terminated.
Oct 13 03:12:23 felixoid-home avahi-daemon[982]: Withdrawing workstation service for ppp0.
Oct 13 03:12:23 felixoid-home NetworkManager[1080]: SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Oct 13 03:12:23 felixoid-home pppd[4393]: Modem hangup
Oct 13 03:12:23 felixoid-home pppd[4393]: Exit.
Oct 13 03:12:23 felixoid-home pptpd[4392]: GRE: read(fd=6,buffer=611640,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Oct 13 03:12:23 felixoid-home pptpd[4392]: CTRL: PTY read or GRE write failed (pty,gre)=(6,7)
Oct 13 03:12:23 felixoid-home pptpd[4392]: CTRL: Reaping child PPP[4393]
Oct 13 03:12:23 felixoid-home pptpd[4392]: CTRL: Client 127.0.0.1 control connection finished
iptables-save выглядит следующим образом (с ним у меня туго, вплотную за его настройку пока не брался):
# Generated by iptables-save v1.4.4 on Thu Oct 13 03:21:18 2011
*filter
:INPUT ACCEPT [431584:36837835]
:FORWARD ACCEPT [1128:588360]
:OUTPUT ACCEPT [471442:769842966]
-A INPUT -p gre -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
-A OUTPUT -p gre -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 1723 -j ACCEPT
COMMIT
# Completed on Thu Oct 13 03:21:18 2011
# Generated by iptables-save v1.4.4 on Thu Oct 13 03:21:18 2011
*nat
:PREROUTING ACCEPT [9326:572956]
:OUTPUT ACCEPT [107675:7937208]
:POSTROUTING ACCEPT [27291:2106057]
-A POSTROUTING -o ppp0 -j MASQUERADE
-A POSTROUTING -s 192.168.0.0/16 -o eth0 -j MASQUERADE
COMMIT
# Completed on Thu Oct 13 03:21:18 2011
Наверняка, есть что-то лишнее или неправильное. Подскажите, пожалуйста, чего не хватает для ощущения счастья?
Тема: подключение к vpn через ssh тунель (Прочитано 889 раз)
