[ previous ] [ next ] [ threads ]
 
 From:  "Michael A. Alderete" <lists dash 2003 at alderete dot com>
 To:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Mac OS X <== PPTP ==> m0n0wall woes
 Date:  Wed, 20 Oct 2004 15:33:28 -0700
I realized this morning (after some sleep :-) that my prior request was pretty light on necessary
details.

I am trying to use PPTP to connect from my Mac OS X 10.3.5 system to my m0n0wall system, connected
to a DSL line. 

I have configured my m0n0wall precisely as described in the docs,
<http://www.m0n0.ch/wall/docbook/pptp.html>, e.g.:

  - (*) Enable PPTP Server
  - Server address: 192.168.1.254
  - Remote address range: 192.168.1.192 / 28
  - <no RADIUS items checked / filled in>
  - [x] Require 128-bit encryption

  - Username: <my username>
  - Password: <my password>
  - IP address: <blank>

The server address above is in my m0n0wall LAN range, which is specified as 192.168.1.1/24.

On the client side, I am using the built-in Mac OS X PPTP client, accessed through the Internet
Connect application. Relevant settings:

  - Server Address: <m0n0wall's public IP>
  - Account Name: <my account>
  - Authentication: Use Password
  - Encryption: Maximum (128-bit only)

I have tried using both a dial-up connection to my ISP (Speakeasy.net), as well as a direct
connection from a client's office, where I have a routable IP address, no DHCP or NAT.

In all of my attempts, it appears that the PPTP connection comes up briefly, and then immediately
disconnects. In the log on the client side, this appears as "Fatal signal 10."

Here is the log from Internet Connect (which is really /var/log/ppp.log), after I initiated a PPTP
connection attempt (chronological order):

Wed Oct 20 14:48:00 2004 : PPTP connecting to server '66.xx.yy.5' (66.xx.yy.5)...
Wed Oct 20 14:48:00 2004 : PPTP connection established.
Wed Oct 20 14:48:01 2004 : using link 0
Wed Oct 20 14:48:01 2004 : Using interface ppp0
Wed Oct 20 14:48:01 2004 : Connect: ppp0 <--> socket[34:17]
Wed Oct 20 14:48:01 2004 : sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0x29b1325c> <pcomp>
<accomp>]
Wed Oct 20 14:48:01 2004 : rcvd [LCP ConfAck id=0x1 <asyncmap 0x0> <magic 0x29b1325c> <pcomp>
<accomp>]
Wed Oct 20 14:48:02 2004 : rcvd [LCP ConfReq id=0x19 <accomp> <pcomp> <mru 1500> <magic 0x82a81ab4>
<auth chap MS-v2> <mrru 1600> <ssnhf> <endpoint 13 09 03 00 00 24 c0 b3 d8>]
Wed Oct 20 14:48:02 2004 : lcp_reqci: returning CONFREJ.
Wed Oct 20 14:48:02 2004 : sent [LCP ConfRej id=0x19 <mrru 1600> <ssnhf>]
Wed Oct 20 14:48:02 2004 : rcvd [LCP ConfReq id=0x1a <accomp> <pcomp> <mru 1500> <magic 0x82a81ab4>
<auth chap MS-v2>]
Wed Oct 20 14:48:02 2004 : lcp_reqci: returning CONFACK.
Wed Oct 20 14:48:02 2004 : sent [LCP ConfAck id=0x1a <accomp> <pcomp> <mru 1500> <magic 0x82a81ab4>
<auth chap MS-v2>]
Wed Oct 20 14:48:02 2004 : sent [LCP EchoReq id=0x0 magic=0x29b1325c]
Wed Oct 20 14:48:02 2004 : rcvd [CHAP Challenge id=0x1 <bb1e6892fc71bd472756562eb2e4548b>, name =
""]
Wed Oct 20 14:48:03 2004 : Fatal signal 10


And here is the system log from m0n0wall for the same attempt (reverse chronological order):

Oct 20 14:48:03  mpd: [pt0] device is now in state DOWN
Oct 20 14:48:03  mpd: [pt0] device: CLOSE event in state DOWN
Oct 20 14:48:03  mpd: [pt0] LCP: phase shift TERMINATE --> DEAD
Oct 20 14:48:03  mpd: [pt0] LCP: state change Closing --> Initial
Oct 20 14:48:03  mpd: [pt0] LCP: LayerFinish
Oct 20 14:48:03  mpd: [pt0] LCP: Down event
Oct 20 14:48:03  mpd: [pt0] link: DOWN event
Oct 20 14:48:03  mpd: [pt0] LCP: LayerDown
Oct 20 14:48:03  mpd: [pt0] error writing len 8 frame to bypass: Network is down
Oct 20 14:48:03  mpd: [pt0] LCP: SendTerminateReq #27
Oct 20 14:48:03  mpd: [pt0] LCP: phase shift AUTHENTICATE --> TERMINATE
Oct 20 14:48:03  mpd: [pt0] LCP: state change Opened --> Closing
Oct 20 14:48:03  mpd: [pt0] LCP: Close event
Oct 20 14:48:03  mpd: [pt0] link: CLOSE event
Oct 20 14:48:03  mpd: [pt0] device is now in state DOWN
Oct 20 14:48:03  mpd: [pt0] device: DOWN event in state UP
Oct 20 14:48:03  mpd: [pt0] closing link "pt0"...
Oct 20 14:48:03  mpd: [pt0] bundle: CLOSE event in state OPENED
Oct 20 14:48:03  mpd: [pt0] IFACE: Close event
Oct 20 14:48:03  mpd: [pt0] IPCP: LayerFinish
Oct 20 14:48:03  mpd: [pt0] IPCP: state change Starting --> Initial
Oct 20 14:48:03  mpd: [pt0] IPCP: Close event
Oct 20 14:48:03  mpd: [pt0] IFACE: Close event
Oct 20 14:48:03  mpd: [pt0] PPTP call terminated
Oct 20 14:48:03  mpd: pptp0-0: killing channel
Oct 20 14:48:03  mpd: pptp0: killing connection with 66.117.132.30:49453
Oct 20 14:48:03  mpd: pptp0: ctrl connection closed by peer
Oct 20 14:48:02  mpd: [pt0] LCP: LayerUp
Oct 20 14:48:02  mpd: [pt0] CHAP: sending CHALLENGE
Oct 20 14:48:02  mpd: [pt0] LCP: auth: peer wants nothing, I want CHAP
Oct 20 14:48:02  mpd: [pt0] LCP: phase shift ESTABLISH --> AUTHENTICATE
Oct 20 14:48:02  mpd: [pt0] LCP: state change Ack-Sent --> Opened
Oct 20 14:48:02  mpd: AUTHPROTO CHAP MSOFTv2
Oct 20 14:48:02  mpd: MAGICNUM 82a81ab4
Oct 20 14:48:02  mpd: MRU 1500
Oct 20 14:48:02  mpd: PROTOCOMP
Oct 20 14:48:02  mpd: ACFCOMP
Oct 20 14:48:02  mpd: [pt0] LCP: rec'd Configure Ack #26 link 0 (Ack-Sent)
Oct 20 14:48:02  mpd: AUTHPROTO CHAP MSOFTv2
Oct 20 14:48:02  mpd: MAGICNUM 82a81ab4
Oct 20 14:48:02  mpd: MRU 1500
Oct 20 14:48:02  mpd: PROTOCOMP
Oct 20 14:48:02  mpd: ACFCOMP
Oct 20 14:48:02  mpd: [pt0] LCP: SendConfigReq #26
Oct 20 14:48:02  mpd: MP SHORTSEQ
Oct 20 14:48:02  mpd: MP MRRU 1600
Oct 20 14:48:02  mpd: [pt0] LCP: rec'd Configure Reject #25 link 0 (Ack-Sent)
Oct 20 14:48:02  mpd: ENDPOINTDISC [802.1] 00 00 24 c0 b3 d8
Oct 20 14:48:02  mpd: MP SHORTSEQ
Oct 20 14:48:02  mpd: MP MRRU 1600
Oct 20 14:48:02  mpd: AUTHPROTO CHAP MSOFTv2
Oct 20 14:48:02  mpd: MAGICNUM 82a81ab4
Oct 20 14:48:02  mpd: MRU 1500
Oct 20 14:48:02  mpd: PROTOCOMP
Oct 20 14:48:02  mpd: ACFCOMP
Oct 20 14:48:02  mpd: [pt0] LCP: SendConfigReq #25
Oct 20 14:48:01  mpd: [pt0] LCP: state change Req-Sent --> Ack-Sent
Oct 20 14:48:01  mpd: ACFCOMP
Oct 20 14:48:01  mpd: PROTOCOMP
Oct 20 14:48:01  mpd: MAGICNUM 29b1325c
Oct 20 14:48:01  mpd: ACCMAP 0x00000000
Oct 20 14:48:01  mpd: [pt0] LCP: SendConfigAck #1
Oct 20 14:48:01  mpd: ACFCOMP
Oct 20 14:48:01  mpd: PROTOCOMP
Oct 20 14:48:01  mpd: MAGICNUM 29b1325c
Oct 20 14:48:01  mpd: ACCMAP 0x00000000
Oct 20 14:48:01  mpd: [pt0] LCP: rec'd Configure Request #1 link 0 (Req-Sent)
Oct 20 14:48:00  mpd: pptp0-0: ignoring SetLinkInfo
Oct 20 14:48:00  mpd: [pt0] error writing len 42 frame to bypass: Can't assign requested address
Oct 20 14:48:00  mpd: ENDPOINTDISC [802.1] 00 00 24 c0 b3 d8
Oct 20 14:48:00  mpd: MP SHORTSEQ
Oct 20 14:48:00  mpd: MP MRRU 1600
Oct 20 14:48:00  mpd: AUTHPROTO CHAP MSOFTv2
Oct 20 14:48:00  mpd: MAGICNUM 82a81ab4
Oct 20 14:48:00  mpd: MRU 1500
Oct 20 14:48:00  mpd: PROTOCOMP
Oct 20 14:48:00  mpd: ACFCOMP
Oct 20 14:48:00  mpd: [pt0] LCP: SendConfigReq #24
Oct 20 14:48:00  mpd: [pt0] LCP: phase shift DEAD --> ESTABLISH
Oct 20 14:48:00  mpd: [pt0] LCP: state change Starting --> Req-Sent
Oct 20 14:48:00  mpd: [pt0] LCP: Up event
Oct 20 14:48:00  mpd: [pt0] link: origination is remote
Oct 20 14:48:00  mpd: [pt0] link: UP event
Oct 20 14:48:00  mpd: [pt0] device is now in state UP
Oct 20 14:48:00  mpd: [pt0] device: UP event in state OPENING
Oct 20 14:48:00  mpd: [pt0] device is now in state OPENING
Oct 20 14:48:00  mpd: [pt0] attaching to peer's outgoing call
Oct 20 14:48:00  mpd: [pt0] device: OPEN event in state DOWN
Oct 20 14:48:00  mpd: [pt0] LCP: LayerStart
Oct 20 14:48:00  mpd: [pt0] LCP: state change Initial --> Starting
Oct 20 14:48:00  mpd: [pt0] LCP: Open event
Oct 20 14:48:00  mpd: [pt0] link: OPEN event
Oct 20 14:48:00  mpd: [pt0] opening link "pt0"...
Oct 20 14:48:00  mpd: [pt0] bundle: OPEN event in state CLOSED
Oct 20 14:48:00  mpd: [pt0] IPCP: Open event
Oct 20 14:48:00  mpd: [pt0] IPCP: LayerStart
Oct 20 14:48:00  mpd: [pt0] IPCP: state change Initial --> Starting
Oct 20 14:48:00  mpd: [pt0] IPCP: Open event
Oct 20 14:48:00  mpd: [pt0] IFACE: Open event
Oct 20 14:48:00  mpd: pptp0: attached to connection with 66.117.132.30:49453
Oct 20 14:48:00  mpd: mpd: PPTP connection from 66.117.132.30:49453

Please let me know if there is any thing else I should post that would be helpful in troubleshooting
this issue.

Thanks much!

Michael
-- 

_____________________________________________________________
Michael A. Alderete           <mailto:lists dash 2003 at alderete dot com>
                                     <http://www.alderete.com>