pptpd problem

[Paul Howarth]

Sergey Smirnov wrote:
> Hello,
> 
> I'm trying to set up VPN server on FC5..
> Using software:
> kernel-smp-2.6.17-1.2174_FC5
> ppp-2.4.3-6.2.1
> pptpd-1.3.3-1.fc5
> 
> config files:
> __
> /etc/pptpd.conf
> 
> option /etc/ppp/options.pptpd
> debug
> localip 10.25.100.10
> remoteip 172.16.10.1-100
> __
> /etc/ppp/options.pptpd
> 
> name pptpd
> lock
> auth
> require-chap
> nodefaultroute
> nodeflate
> nobsdcomp
> nomppe
> __
> /etc/ppp/chap-secrets
> test    *       test    *
> ---
> Loaded modules:
> ...
> ip_gre
> ip_conntrack_pptp
> ppp_async
> ppp_generic
> ...
> 
> On other FC box, I'm trying to up vpn link (only testing):
> #pptp 10.25.100.10 name test
> 
> In /var/log/message on VPN server:
> ...
> pptpd[4405]: CTRL: Client 10.25.100.100 control connection started
> pptpd[4405]: CTRL: Starting call (launching pppd, opening GRE)
> pptpd[4405]: GRE: Bad checksum from pppd.
> pptpd[4405]: GRE: read(fd=9,buffer=8059660,len=8196) from PTY failed: status 
> = -1 error = Input/output error, usually caused by unexpected termination of 
> pppd, check option syntax and pppd logs
> pptpd[4405]: CTRL: PTY read or GRE write failed (pty,gre)=(9,10)
> pptpd[4405]: CTRL: Client 10.25.100.100 control connection finished
> ...
> 
> Any ideas?

Any SELinux denials on either client or server?

Is there some good reason why you're setting up an VPN using PPTP rather 
than the more secure openvpn (as recommended by the PPTP developers)?

Paul.