настроил сервер VPN но почему то при определенных обстоятельствах в логах вываливаются ошибки вида:
pptpd[11557]: GRE: read(fd=8,buffer=60ece0,len=8260) from network failed: status = -1 error = Protocol not available
pptpd[11557]: CTRL: GRE read or PTY write failed (gre,pty)=(8,6)
pptpd[11557]: CTRL: Reaping child PPP[11558]
и происходит отключение пользователей.
конфиги:
/etc# cat pptpd.conf
###############################################################################
# $Id$
#
# Sample Poptop configuration file /etc/pptpd.conf
#
# Changes are effective when pptpd is restarted.
###############################################################################
#ppp /usr/sbin/pppd
option /etc/ppp/pptpd-options
# TAG: debug
# Turns on (more) debugging to syslog
#
#debug
noipparam
#logwtmp
localip 192.168.254.1
remoteip 192.168.254.205-246
cat pptpd-options
#chapms-strip-domain
refuse-pap
refuse-chap
require-mschap
# Require the peer to authenticate itself using MS-CHAPv2 [Microsoft
# Challenge Handshake Authentication Protocol, Version 2] authentication.
require-mschap-v2
# Require MPPE 128-bit encryption
# (note that MPPE requires the use of MSCHAP-V2 during authentication)
require-mppe-128
mppe-stateful
# }}}
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 30
lcp-echo-interval 5
# Network and Routing
#ms-dns 10.0.0.1
#ms-dns 10.0.0.2
#ms-wins 10.0.0.3
#ms-wins 10.0.0.4
# Add an entry to this system's ARP [Address Resolution Protocol]
# table with the IP address of the peer and the Ethernet address of this
# system. This will have the effect of making the peer appear to other
# systems to be on the local ethernet.
# (you do not need this if your PPTP server is responsible for routing
# packets to the clients — James Cameron)
#proxyarp
# Debian: do not replace the default route
nodefaultroute
# Logging
# Enable connection debugging facilities.
# (see your syslog configuration for where pppd sends to)
#debug
lock
mtu 1000
mru 1200
# Disable BSD-Compress compression
nobsdcomp
в файрволе прописаны правила:
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p 47 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
все выходные лазил по форумам уменьшал mtu загружал все модули ядра, но проблему так и не победил. у кого еще какие мысли есть?