pptpd + pppd + enkrypcja i kompresja

[look]

Cześć,

Usiłuję zestawić połączenie pptp z końcówki na W2K do
linuxa z odpalonym pptpd.

- W2K Professional + SP3 + High Encryption Pack patch
- PLD Linux, kernel 2.2.21, pppd-2.4.1, pptpd-1.1.3-1 (wszystko z PLD)

Działa znakomicie do czasu gdy w po stronie W2K wymuszę szyfrowanie 
połączenia.

Poniżej konfigi oraz logi.

/etc/modules.conf

alias tty-ldisc-3 ppp_async
alias tty-ldisc-14 ppp_synctty
alias ppp-compress-18 ppp_mppe
alias ppp-compress-21 bsd_comp
alias ppp-compress-24 ppp_deflate
alias ppp-compress-26 ppp_deflate


/etc/ppp/options.pptpd

name *
ms-wins 192.168.10.250
ms-dns 192.168.10.250
ms-dns 213.241.4.4
lock
mtu 1490
mru 1490
proxyarp
auth
#+chap
#+chapms #This one is optional and my be omitted.
+chapms-v2
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 10
deflate 9
mppe-40
mppe-128
mppe-stateless


/var/log/pptpd.log:

Dec 11 08:48:14 nostromo pptpd[29208]: MGR: Launching /usr/sbin/pptpctrl to handle client
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: local address = 192.168.10.161
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: remote address = 192.168.10.181
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: pppd speed = 115200
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: pppd options file = /etc/ppp/options.pptpd
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Client 62.179.49.122 control connection started
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 1)
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Made a START CTRL CONN RPLY packet
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: I wrote 156 bytes to the client.
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Sent packet to client
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 7)
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Set parameters to 1525 maxbps, 64 window size
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Made a OUT CALL RPLY packet
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Starting call (launching pppd, opening GRE)
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: pty_fd = 5
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: tty_fd = 6
Dec 11 08:48:14 nostromo pptpd[29209]: CTRL (PPPD Launcher): Connection speed = 115200
Dec 11 08:48:14 nostromo pptpd[29209]: CTRL (PPPD Launcher): local address = 192.168.10.161
Dec 11 08:48:14 nostromo pptpd[29209]: CTRL (PPPD Launcher): remote address = 192.168.10.181
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: I wrote 32 bytes to the client.
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Sent packet to client
Dec 11 08:48:14 nostromo pppd[29209]: pppd 2.4.1 started by root, uid 0
Dec 11 08:48:14 nostromo pppd[29209]: Using interface ppp0
Dec 11 08:48:14 nostromo pppd[29209]: Connect: ppp0 <--> /dev/pts/2
Dec 11 08:48:14 nostromo pptpd[29208]: GRE: Discarding duplicate packet
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 15)
Dec 11 08:48:14 nostromo pptpd[29208]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Dec 11 08:48:16 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 15)
Dec 11 08:48:16 nostromo pptpd[29208]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Dec 11 08:48:16 nostromo pppd[29209]: MSCHAP-v2 peer authentication succeeded for testowiec
Dec 11 08:48:17 nostromo pppd[29209]: found interface eth0 for proxy arp
Dec 11 08:48:17 nostromo pppd[29209]: local  IP address 192.168.10.161
Dec 11 08:48:17 nostromo pppd[29209]: remote IP address 192.168.10.181
Dec 11 08:48:26 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 15)
Dec 11 08:48:26 nostromo pptpd[29208]: CTRL: Got a SET LINK INFO packet with standard ACCMs
Dec 11 08:48:26 nostromo pppd[29209]: LCP terminated by peer (^S(^SM-7^@<M-Mt^@^@^BM-f)   <------ *
Dec 11 08:48:27 nostromo pptpd[29208]: CTRL: Received PPTP Control Message (type: 12)
Dec 11 08:48:27 nostromo pptpd[29208]: CTRL: Made a CALL DISCONNECT RPLY packet
Dec 11 08:48:27 nostromo pptpd[29208]: CTRL: Received CALL CLR request (closing call)
Dec 11 08:48:27 nostromo pptpd[29208]: CTRL: I wrote 148 bytes to the client.
Dec 11 08:48:27 nostromo pptpd[29208]: CTRL: Sent packet to client
Dec 11 08:48:27 nostromo pppd[29209]: Modem hangup
Dec 11 08:48:27 nostromo pppd[29209]: Connection terminated.
Dec 11 08:48:27 nostromo pppd[29209]: Connect time 0.2 minutes.
Dec 11 08:48:27 nostromo pppd[29209]: Sent 837 bytes, received 3671 bytes.
Dec 11 08:48:27 nostromo pppd[29209]: Exit.

* Tutaj powinna zaczynać się kompresja+enkrypcja.

Z tego co czytałem, po ostatnich poprawkach M$ do pptp, kompresja transmisji w obrębie
tego protokołu połączona jest z szyfrowaniem. Jak widać powyżej pomimo wymuszenia kompresji
to w ogóle nie działa. W pptpd.log powinien pojawić się komunikat o włączeniu szyfrowania
chociażby 40 bitowego. A tutaj nic, ciemność widać, ciemność.

W2K zwraca mi dwa rodzaje błędów, w zależności od tego który typ kompresji wymuszę
w options.pptpd

- przy wymuszonym deflate : Błąd: 619: Określony port nie został podłączony
- przy wymuszonym bsdcomp : Błąd: 742: Zdalny komputer nie obsługuje wymaganego typu szyfrowania
danych

Czy ktoś ma działające to rozwiązanie ?

Pozdrawiam,

-- 
Lukasz 'look' Buko
Network Administrator, registered Linux user #165758
Non-commercial radio: hell.art.pl:8000