настроил сервер VPN но почему то при определенных обстоятельствах в логах вываливаются ошибки вида: pptpd[11557]: GRE: read(fd=8,buffer=60ece0,len=8260) from network failed: status = -1 error = Protocol not available
pptpd[11557]: CTRL: GRE read or PTY write failed (gre,pty)=(8,6)
pptpd[11557]: CTRL: Reaping child PPP[11558]
и происходит отключение пользователей. конфиги:
/etc# cat pptpd.conf ############################################################################### # $Id$ # # Sample Poptop configuration file /etc/pptpd.conf # # Changes are effective when pptpd is restarted. ###############################################################################
#ppp /usr/sbin/pppd
option /etc/ppp/pptpd-options
# TAG: debug # Turns on (more) debugging to syslog # #debug
noipparam
#logwtmp
localip 192.168.254.1
remoteip 192.168.254.205-246
cat pptpd-options
#chapms-strip-domain
refuse-pap
refuse-chap
require-mschap # Require the peer to authenticate itself using MS-CHAPv2 [Microsoft # Challenge Handshake Authentication Protocol, Version 2] authentication.
require-mschap-v2
# Require MPPE 128-bit encryption # (note that MPPE requires the use of MSCHAP-V2 during authentication)
require-mppe-128
mppe-stateful
# }}}
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 30
lcp-echo-interval 5
# Network and Routing
#ms-dns 10.0.0.1
#ms-dns 10.0.0.2
#ms-wins 10.0.0.3
#ms-wins 10.0.0.4
# Add an entry to this system's ARP [Address Resolution Protocol] # table with the IP address of the peer and the Ethernet address of this # system. This will have the effect of making the peer appear to other # systems to be on the local ethernet. # (you do not need this if your PPTP server is responsible for routing # packets to the clients — James Cameron)
#proxyarp
# Debian: do not replace the default route
nodefaultroute
# Logging
# Enable connection debugging facilities. # (see your syslog configuration for where pppd sends to)
#debug
lock
mtu 1000
mru 1200
# Disable BSD-Compress compression
nobsdcomp
в файрволе прописаны правила:
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p 47 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
все выходные лазил по форумам уменьшал mtu загружал все модули ядра, но проблему так и не победил. у кого еще какие мысли есть?
