Date: Sat, 09 Oct 1999 02:33:28 +0100 From: Brian Somers <brian@Awfulhak.org> To: agifford@infowest.com Cc: questions@FreeBSD.ORG Subject: Re: ppp across ssh (vpn) Message-ID: <199910090133.CAA03055@hak.lan.Awfulhak.org> In-Reply-To: Your message of "Wed, 06 Oct 1999 23:23:49 MDT." <19991007052349.57D6D20FB8@infowest.com>
index | next in thread | previous in thread | raw e-mail
> Hello, > > > I was playing around trying to establish a VPN connection by > using userland ppp across SSH. I believe I have everything > set up the way the ppp.conf.sample and man page described. > It almost works. I can watch the log files on both sides > of the tunnel. The client works as expected. However, on > the server side, I keep getting "tun0: Phase: Exception detected > on descriptor 0" and looking at the PPP code, it would seem > that ssh is for some reason sending out-of-band data (since > the select() man page explains that the only reason for an > exception on a file descriptor is for OOB data). When ppp is using a program as a link, and exception generally means that the program has exited. > Looking at my ppp.startvpn.sh script: > > #!/bin/sh > exec ssh -a -c blowfish -e none -l sshvpnuser -q -x vpn.server.host /usr/sbin/ppp -direct vpnserver > > When I add a "-t" to force ssh to allocate a pty and run the > script by hand from the command line, sure enough, I see: > > # ./ppp.startvpn.sh > ~ÿ}#À!}!}!} $}(}"}'}"}"}&} } } } }!}$}%Ü}%}&&á›ß}$}(À%} } > <and other PPP-looking stuff> > > BUT when I do NOT allocate a pty OR I run the script via PPP > on my client machine, nothing happens and I see the exception > previously mentioned on the server side. > > I am assuming that there is some terminal-related traffic, > perhaps, that SSH is doing with OOB data that's causing the > exception, but is maybe handled when there's a pty allocated? > Please, I'm grasping at straws here, playing with stuff I know > nothing about. > > Any ideas? Suggestions? Upgrade to the latest ppp (http://www.Awfulhak.org/ppp.html). Old versions abend when they see descriptor exceptions. > Thanks! > > Aaron out. -- Brian <brian@Awfulhak.org> <brian@FreeBSD.org> <http://www.Awfulhak.org>; <brian@OpenBSD.org> Don't _EVER_ lose your sense of humour ! <brian@FreeBSD.org.uk> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the messagehelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199910090133.CAA03055>