Решил проверить что будет если повесить mpd на внешний интерфейс безо всяких форвардов.
Вот конфиг:
============= mpd.conf ===========
startup:
set console port 777
set console ip 127.0.0.1
set console user admin pass1
set console open
set web port 666
set web ip 192.168.0.1
set web user admin pass2
set web opendefault:
load pptp0
load pptp1
load pptp2
pptp0:
new -i ng0 pptp0 pptp0
load pptp_standart
pptp1:
new -i ng1 pptp1 pptp1
load pptp_standart
pptp2:
new -i ng2 pptp2 pptp2
load pptp_standart
pptp_standart:
set iface disable on-demand
set bundle enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
set link keep-alive 60 180
set ipcp ranges 172.16.0.1/32 172.16.0.0/29
set ipcp yes vjcomp
set ipcp dns 195.64.220.2
set ccp yes mppc
set ccp yes mpp-e40
set ccp yes mpp-e56
set ccp yes mpp-e128
set bundle enable compression
set ccp yes mpp-stateless
set bundle yes crypt-reqd
set pptp self SERVER_EXT_IP
set pptp enable incoming
set pptp disable originate
set iface enable tcpmssfix
Вот конфиг с которым я пытаюсь подключиться к серваку:
============= peers/vpn ==========
lock
defaultroute
noauth
noaccomp
nopcomp
refuse-pap
deflate 0
mppe required,stateless
name user
remotename user
pty "pptp SERVER_EXT_IP --nolaunchpppd"
Вот что выдает в логах mpd при попытке подключения клиента
============= mpd.log ============
Dec 17 00:59:34 serv mpd: PPTP: Incoming control connection from CLIENT_IP
57877 to SERVER_EXT_IP 1723
Dec 17 00:59:34 serv mpd: pptp0: attached to connection with CLIENT_IP 5787
7
Dec 17 00:59:35 serv mpd: [pptp0] Accepting PPTP connection
Dec 17 00:59:35 serv mpd: [pptp0] opening link "pptp0"...
Dec 17 00:59:35 serv mpd: [pptp0] link: OPEN event
Dec 17 00:59:35 serv mpd: [pptp0] LCP: Open event
Dec 17 00:59:35 serv mpd: [pptp0] LCP: state change Initial --> Starting
Dec 17 00:59:35 serv mpd: [pptp0] LCP: LayerStart
Dec 17 00:59:35 serv mpd: [pptp0] PPTP: attaching to peer's outgoing call
Dec 17 00:59:35 serv mpd: [pptp0] link: UP event
Dec 17 00:59:35 serv mpd: [pptp0] link: origination is remote
Dec 17 00:59:35 serv mpd: [pptp0] LCP: Up event
Dec 17 00:59:35 serv mpd: [pptp0] LCP: state change Starting --> Req-Sent
Dec 17 00:59:35 serv mpd: [pptp0] LCP: SendConfigReq #23
Dec 17 00:59:35 serv mpd: ACFCOMP
Dec 17 00:59:35 serv mpd: PROTOCOMP
Dec 17 00:59:35 serv mpd: MRU 1500
Dec 17 00:59:35 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:35 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:35 serv mpd: MP MRRU 1600
Dec 17 00:59:35 serv mpd: MP SHORTSEQ
Dec 17 00:59:35 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:37 serv mpd: [pptp0] LCP: SendConfigReq #24
Dec 17 00:59:37 serv mpd: ACFCOMP
Dec 17 00:59:37 serv mpd: PROTOCOMP
Dec 17 00:59:37 serv mpd: MRU 1500
Dec 17 00:59:37 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:37 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:37 serv mpd: MP MRRU 1600
Dec 17 00:59:37 serv mpd: MP SHORTSEQ
Dec 17 00:59:37 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
serv# tail -n 50 /var/log/mpd.log | more
Dec 17 00:59:45 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:47 serv mpd: [pptp0] LCP: SendConfigReq #29
Dec 17 00:59:47 serv mpd: ACFCOMP
Dec 17 00:59:47 serv mpd: PROTOCOMP
Dec 17 00:59:47 serv mpd: MRU 1500
Dec 17 00:59:47 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:47 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:47 serv mpd: MP MRRU 1600
Dec 17 00:59:47 serv mpd: MP SHORTSEQ
Dec 17 00:59:47 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:49 serv mpd: [pptp0] LCP: SendConfigReq #30
Dec 17 00:59:49 serv mpd: ACFCOMP
Dec 17 00:59:49 serv mpd: PROTOCOMP
Dec 17 00:59:49 serv mpd: MRU 1500
Dec 17 00:59:49 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:49 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:49 serv mpd: MP MRRU 1600
Dec 17 00:59:49 serv mpd: MP SHORTSEQ
Dec 17 00:59:49 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:51 serv mpd: [pptp0] LCP: SendConfigReq #31
Dec 17 00:59:51 serv mpd: ACFCOMP
Dec 17 00:59:51 serv mpd: PROTOCOMP
Dec 17 00:59:51 serv mpd: MRU 1500
Dec 17 00:59:51 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:51 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:51 serv mpd: MP MRRU 1600
Dec 17 00:59:51 serv mpd: MP SHORTSEQ
Dec 17 00:59:51 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:53 serv mpd: [pptp0] LCP: SendConfigReq #32
Dec 17 00:59:53 serv mpd: ACFCOMP
Dec 17 00:59:53 serv mpd: PROTOCOMP
Dec 17 00:59:53 serv mpd: MRU 1500
Dec 17 00:59:53 serv mpd: MAGICNUM 97af257b
Dec 17 00:59:53 serv mpd: AUTHPROTO CHAP MSOFTv2
Dec 17 00:59:53 serv mpd: MP MRRU 1600
Dec 17 00:59:53 serv mpd: MP SHORTSEQ
Dec 17 00:59:53 serv mpd: ENDPOINTDISC [802.1] 00 1b 11 b7 db e5
Dec 17 00:59:55 serv mpd: [pptp0] LCP: parameter negotiation failed
Dec 17 00:59:55 serv mpd: [pptp0] LCP: state change Req-Sent --> Stopped
Dec 17 00:59:55 serv mpd: [pptp0] LCP: LayerFinish
Dec 17 00:59:55 serv mpd: pptp0-0: clearing call
Dec 17 00:59:55 serv mpd: pptp0-0: killing channel
Dec 17 00:59:55 serv mpd: [pptp0] PPTP call terminated
Dec 17 00:59:55 serv mpd: [pptp0] link: DOWN event
Dec 17 00:59:55 serv mpd: [pptp0] LCP: Close event
Dec 17 00:59:55 serv mpd: [pptp0] LCP: state change Stopped --> Closed
Dec 17 00:59:55 serv mpd: [pptp0] LCP: Down event
Dec 17 00:59:55 serv mpd: [pptp0] LCP: state change Closed --> Initial
Dec 17 00:59:55 serv mpd: pptp0: closing connection with CLIENT_IP 57877
Dec 17 00:59:55 serv mpd: pptp0: killing connection with CLIENT_IP 57877
Пытался найти в инете, там часто говорят про GRE. GRE у меня ходит, фаером разрешено и tcpdump'ом проверено что ходит.
Прошу о помощи!