From owner-freebsd-bugs@FreeBSD.ORG Wed Nov 16 10:30:24 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9E2CB16A41F for ; Wed, 16 Nov 2005 10:30:24 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 54ABC43D6B for ; Wed, 16 Nov 2005 10:30:13 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id jAGAUDar042287 for ; Wed, 16 Nov 2005 10:30:13 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id jAGAUDOp042286; Wed, 16 Nov 2005 10:30:13 GMT (envelope-from gnats) Resent-Date: Wed, 16 Nov 2005 10:30:13 GMT Resent-Message-Id: <200511161030.jAGAUDOp042286@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Valery Marchuk Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CAF5816A41F for ; Wed, 16 Nov 2005 10:26:00 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [216.136.204.117]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BFC143D46 for ; Wed, 16 Nov 2005 10:26:00 +0000 (GMT) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.13.1/8.13.1) with ESMTP id jAGAPxTk096487 for ; Wed, 16 Nov 2005 10:25:59 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.13.1/8.13.1/Submit) id jAGAPxu4096486; Wed, 16 Nov 2005 10:25:59 GMT (envelope-from nobody) Message-Id: <200511161025.jAGAPxu4096486@www.freebsd.org> Date: Wed, 16 Nov 2005 10:25:59 GMT From: Valery Marchuk To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-2.3 Cc: Subject: misc/89108: Problem in PPP implementatin on FreeBSD 5.4 X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Nov 2005 10:30:24 -0000 >Number: 89108 >Category: misc >Synopsis: Problem in PPP implementatin on FreeBSD 5.4 >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Wed Nov 16 10:30:12 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Valery Marchuk >Release: FreeBSD 5.4 >Organization: ArgoCom Ltd >Environment: FreeBSD xxx.xx 5.4-RELEASE FreeBSD 5.4-RELEASE #3: Tue May 31 15:07:10 EEST 2005 root@xxx.xx:/usr/obj/usr/src/sys/vpn_kernel i386 FreeBSD xxx.xx 5.4-RELEASE FreeBSD 5.4-RELEASE #0: Wed Jun 8 13:35:51 UTC 2005 sergi@xxx:/usr/src/sys/i386/compile/IPFKERNEL i386 >Description: Hi! We have discovered a problem in PPP implementation on FreeBSD 5.4 with poptop installed. The problem is in the way PPP handles VPN clients with static IP addresses. More than one user can successfully establish VPN connections under the same login and password at the same time to the VPN server. For example: tun2: flags=8051 mtu 1400 inet xxx.xxx.xxx.xxx --> 172.20.6.3 netmask 0xffffffff Opened by PID 25411 tun7: flags=8051 mtu 1400 inet xxx.xxx.xxx.xxx --> 172.20.6.3 netmask 0xffffffff Opened by PID 25413 The real problem occurs when vpn tunnel fails on the client side, but still exists on the server one and user creates another VPN connection (lqr period is set to 12, so it could happen when user establishes a new connection within 1 minute). The first tunnel becomes “a zombie” and PPP doesn’t drop it. If there are more than one “zombie” tunnel on the system, it is impossible for user to use Internet. The user just can send information through the last tunnel, but the previous one receives all the replies. Tested on PPP PPP Version 3.1 - Jun 8 2005 PPP Version 3.4.2 - May 8 2005 If You`ll need, I could send you my configuration files. Hope for cooperation Valery Marchuk >How-To-Repeat: 1. Install poptop and configure ppp to use static ip addresses for each login (each user must receive his IP address from the server) 2. Create 2 or more VPN connections from different PCs under the same user account (e.g. login, password) 3. try to ping something from all PCs >Fix: >Release-Note: >Audit-Trail: >Unformatted: