Date: Wed, 08 Jul 1998 15:57:25 +0200 From: Martin Blapp <blapp@attic.ch> To: Doug White <dwhite@resnet.uoregon.edu>, questions@FreeBSD.ORG Subject: (ppp) and dial on demand [2] (was: Pppd active-filter problem) Message-ID: <35A37AC5.62A240C6@attic.ch>
next in thread | raw e-mail | index | archive | help
-> Now my problems with userland ppp
Userland PPP works WITHOUT problems together with natd.
No more broken connections ...
But there I've seen another problem. After booting I start a script
in /usr/local/etc/rc.d/ppp.sh . After the script is invoked, ppp is
waiting for tcp-connections. This works. But the first time ppp
opens a connection, nothing works. I'm not able to ping, I can't
see another host. Traceroute fails. My modem sends 100 and
more requests but get's nothing. The route is set correctly, ifconfig
does not show anything special. I see packets going out, but none
of them returning. :-(
I can only see thousands and more of these NS Requests ...
14:43:43.945817 194.235.47.66.53 > 194.235.47.66.53: 56907+ A?
localhost. (27)
14:43:43.946706 194.235.47.66.53 > 194.235.47.66.53: 56908+ A?
localhost. (27)
....
btw: 194.235.47.66 is the nameserver I forward requests from my lan ...
If I remove the forwarding nameserver in named.boot, these
problems did not happen, or a least only for 10 seconds. Why that ???
The second or third time ppp is invoked, it works as it should. From
this
time on it works great and ppp follows also my filter-options.
Here's my ppp.log from the first time I connect ...
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: PROTOCOMP[2]
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: ACCMAP[6] 0x00000000
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: MRU[4] 1500
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: MAGICNUM[6] 0x27d342d3
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: Received Configure Ack (2)
state = Ack-Sent (8)
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: State change Ack-Sent -->
Opened
Jul 8 15:31:32 atreju ppp[222]: tun0: LCP: LcpLayerUp
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: NewPhase: Authenticate
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: his = PAP, mine = none
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: PAP: mblapp
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: PapInput: ACK
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: Received PAP_ACK ()
Jul 8 15:31:32 atreju ppp[222]: tun0: Phase: NewPhase: Network
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: State change Initial -->
Closed
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: IPCP Up event!!
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: IpcpSendConfigReq
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: IPADDR[6] 194.235.47.66
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: COMPPROTO[6] 16 VJ slots
with slot compres
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: State change Closed -->
Req-Sent
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: State change Initial -->
Closed
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: CCP Up event!!
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: CcpSendConfigReq
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: DEFLATE[4] win 15
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: PRED1[2]
Jul 8 15:31:32 atreju ppp[222]: tun0: CCP: State change Closed -->
Req-Sent
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: Received Configure Request
(169) state = Req-Sent (6)
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: COMPPROTO[6] 16 VJ slots
without slot compression
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: IPADDR[6] 194.235.47.6
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: SendConfigAck(Req-Sent)
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: COMPPROTO[6] 16 VJ slots
without slot compression
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: IPADDR[6] 194.235.47.6
Jul 8 15:31:32 atreju ppp[222]: tun0: IPCP: State change Req-Sent -->
Ack-Sent
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: Received Configure Nak (1)
state = Ack-Sent (8)
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: IPADDR[6] 194.235.47.96
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: IPADDR[6] changing
address: 194.235.47.66 --> 194.235.47.96
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: IpcpSendConfigReq
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: IPADDR[6] 194.235.47.96
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: COMPPROTO[6] 16 VJ slots
with slot compres
Jul 8 15:31:33 atreju ppp[222]: tun0: LCP: Received Protocol Reject
(201) state = Opened (9)
Jul 8 15:31:33 atreju ppp[222]: tun0: LCP: -- Protocol (80fd) was
rejected.
Jul 8 15:31:33 atreju ppp[222]: tun0: CCP: CcpLayerFinish.
Jul 8 15:31:33 atreju ppp[222]: tun0: CCP: State change Req-Sent -->
Stopped
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: Received Configure Ack (2)
state = Ack-Sent (8)
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: State change Ack-Sent -->
Opened
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: IpcpLayerUp(9).
Jul 8 15:31:33 atreju ppp[222]: tun0: IPCP: myaddr = 194.235.47.96
hisaddr = 194.235.47.6
Jul 8 15:31:33 atreju ppp[222]: tun0: LCP: OsLinkup: 194.235.47.6
Jul 8 15:31:33 atreju ppp[222]: tun0: Command: MYADDR: delete 0
Jul 8 15:31:33 atreju ppp[222]: tun0: Command: MYADDR: add 0 0 HISADDR
Jul 8 15:32:32 atreju ppp[222]: tun0: Phase: HDLC errors -> FCS: 5
ADDR: 0 COMD: 0 PROTO: 0
Jul 8 15:33:32 atreju ppp[222]: tun0: Phase: HDLC errors -> FCS: 2
ADDR: 0 COMD: 0 PROTO: 0
I've made I little script to dial ... :
--------------------------------------------------------------------
#!/bin/sh
#
ipfw -f flush
ipfw add divert natd all from any to any via tun0
ipfw add pass all from any to any
ppp -auto solnet
sleep 2
natd -dynamic -use_sockets -interface tun0
--------------------------------------------------------------------
My config-files for ppp:
[/etc/ppp/options]
--------------------------------------------------------------------
default:
set log Phase Chat Connect Carrier LCP IPCP CCP tun command
set device /dev/cuaa1
deny lqr
set speed 115200
set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\"
ATZ&K44B20 OK-AT-OK \\dATDT\\T TIMEOUT 30 CONNECT"
solnet:
set phone 3962225
set timeout 150
set ifaddr 194.235.47.66/24 194.235.47.6 255.255.255.0
set authname ********
set authkey *******
delete ALL
add 0 0 HISADDR
#
# If we don't want ICMP and DNS packets to keep the connection alive:
#
set afilter 0 deny icmp
set afilter 1 deny udp src eq 53
set afilter 2 deny udp dst eq 53
set afilter 3 deny tcp src eq 53
set afilter 4 deny tcp dst eq 53
set afilter 5 permit 0/0 0/0
set dfilter 0 deny 0/0 198.41.0.4 eq 53
set dfilter 1 deny 0/0 128.9.0.107 eq 53
set dfilter 2 deny 0/0 192.33.4.12 eq 53
set dfilter 3 deny 0/0 128.8.10.90 eq 53
set dfilter 4 deny 0/0 192.203.230.10 eq 53
set dfilter 5 deny 0/0 192.5.5.241 eq 53
set dfilter 6 deny 0/0 192.112.36.4 eq 53
set dfilter 7 deny 0/0 128.63.2.53 eq 53
set dfilter 8 deny 0/0 192.36.148.17 eq 53
set dfilter 9 deny 0/0 198.41.0.10 eq 53
set dfilter 10 deny 0/0 193.0.14.129 eq 53
set dfilter 11 deny 0/0 198.32.64.12 eq 53
set dfilter 12 deny 0/0 202.12.27.33 eq 53
set dfilter 13 deny 0/0 194.235.47.66 eq 53
set dfilter 14 permit 0/0 0/0
set ifilter 0 permit 0/0 0/0
set ofilter 0 permit 0/0 0/0
--------------------------------------------------------------------
Any Ideas?
Please CC me with any responses. Thanks.
--
------------------------------------------------------------------------
Martin Blapp, (blapp@attic.ch)
Attic Internet Services, Bechburgstrasse 8, 4702 Oensingen, Switzerland
Phone: +41 62 396 43 70, Fax: +41 62 396 43 72
PGP fingerprint: 4E96 1AE8 4AA6 AB40 1AD6 DB42 7623 995D 522A 1D38
------------------------------------------------------------------------
Public key available at: http://www.attic.ch/pgp-public.html
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?35A37AC5.62A240C6>