Лог mpd5 :
Код: Выделить всё
# /usr/local/sbin/mpd5
Multi-link PPP daemon for FreeBSD
process 1763 started, version 5.3 (root@ 00:44 28-Jan-2010)
CONSOLE: listening on 127.0.0.1 5005
web: listening on 0.0.0.0 5006
PPTP: waiting for connection on 0.0.0.0 1723
[L] [L-1] Accepting PPTP connection
[L-1] Link: OPEN event
[L-1] LCP: Open event
[L-1] LCP: state change Initial --> Starting
[L-1] LCP: LayerStart
[L-1] PPTP: attaching to peer's outgoing call
[L-1] Link: UP event
[L-1] LCP: Up event
[L-1] LCP: state change Starting --> Req-Sent
[L-1] LCP: SendConfigReq #1
[L-1] ACFCOMP
[L-1] PROTOCOMP
[L-1] MRU 1500
[L-1] MAGICNUM ca9dfcf7
[L-1] AUTHPROTO CHAP MSOFTv2
[L-1] MP MRRU 2048
[L-1] MP SHORTSEQ
[L-1] ENDPOINTDISC [802.1] 00 1b fc 35 6b 6d
[L-1] PPTP call terminated
[L-1] Link: DOWN event
[L-1] LCP: Close event
[L-1] LCP: state change Req-Sent --> Closing
[L-1] LCP: SendTerminateReq #2
[L-1] LCP: Down event
[L-1] LCP: LayerFinish
[L-1] LCP: state change Closing --> Initial
[L-1] Link: SHUTDOWN event
[L-1] Link: Shutdown
Код: Выделить всё
startup:
set user prox2 oe2jb8v5
set console self 127.0.0.1 5005
set console open
set web self 0.0.0.0 5006
set web open
default:
load pptp_server
pptp_server:
# Define dynamic IP address pool.
set ippool add pool1 192.168.2.200 192.168.2.250
# Create clonable bundle template named B
create bundle template B
set iface enable proxy-arp
set iface idle 1800
set iface enable tcpmssfix
set ipcp yes vjcomp
# Specify IP address pool for dynamic assigment.
set ipcp ranges 192.168.2.20/24 ippool pool1
set ipcp dns 192.168.2.1
set ipcp nbns 192.168.2.1
# The five lines below enable Microsoft Point-to-Point encryption
# (MPPE) using the ng_mppc(8) netgraph node type.
set bundle enable compression
set ccp yes mppc
set mppc yes e40
set mppc yes e128
set mppc yes stateless
# Create clonable link template named L
create link template L pptp
# Set bundle template to use
set link action bundle B
# Multilink adds some overhead, but gives full 1500 MTU.
set link enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
# We can use use RADIUS authentication/accounting by including
# another config section with label 'radius'.
# load radius
set link keep-alive 10 60
# We reducing link mtu to avoid GRE packet fragmentation.
set link mtu 1460
# Configure PPTP
set pptp self 0.0.0.0
# Allow to accept calls
set link enable incoming
IPFW полностью разрешает любой трафик на внешнем интерфейсе. Пробовал разрешать все везде (allow all from any to any) - не помогает.
