OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: Poptop

From: Paolo Supino (paolotelmap.com)
Date: Wed Oct 01 2003 - 16:28:11 CDT


Hi Robert

  Solve it! :) It appears that gre isn't accepted by default
By OpenBSD systems (don't know why) and there are 2 sysctl
Parameteres that needs to be changed from 0 to 1 to make it
Work. They are: net.inet.gre.allow and net.inet.gre.wccp.
The 1st one is surely needed the 2nd one I'm not. Changing
Their values made it work.

  This was solve by simply reading the gre manpage in section
4 and for that I would like to extend a huge THANK YOU (no
Intention of shouting ;) to all the people that do the amazing
Work of having good, readable and reliable manpages in OpenBSD.

        Paolo

-----Original Message-----
From: robert schwartz [mailto:robertmrsquirrel.com]
Sent: ה 02 אוקטובר 2003 0:11
To: 'Paolo Supino'
Subject: RE: Poptop

Make a custom kernel w/o GRE support? That's in a file GENERIC includes,
not in GENERIC itself. That's a common gotcha for PPTP server on obsd.

> -----Original Message-----
> From: owner-miscopenbsd.org [mailto:owner-miscopenbsd.org]
> On Behalf Of Paolo Supino
> Sent: Wednesday, October 01, 2003 1:58 PM
> To: 'miscopenbsd.org'
> Subject: Poptop
>
>
> Hi
>
> I've finally upgraded my firewall to OpenBSD 3.3 and I
> installed Poptop to let my coworkers have vpn access. I have
> one problem That I can't overcome: I connect successfully. I
> can ping from the
> remote peer to the OpenBSD firewall, but I can't get beyond it.
> I noticed that no (proxy) arp is added to the arp table when I
> connect to the vpn. Anyone ever encountered such a problem and
> Solved it. Any ideas of what to look for are also welcome.
>
>
>
>
>
>
>
>
>
>
> Paolo