<html>
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=windows-1250">
<meta name=Generator content="Microsoft Word 10 (filtered)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:Arial;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Hi</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>I’m trying to solve a problem with an incoming PPTP connection
that used to work but is now failing.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>I’ve allowed pptp as a service in my firehol.conf. The
initial connection makes OK and the remote user is assigned an IP. Then these
lines appear in the system log as the remote user attempts to connect to a
local machine (10.6.18.2):</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Feb 14 </span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'>14:32:37</span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'> mail kernel: PASS-unknown:IN=ppp0 OUT=eth0 SRC=10.6.18.150
DST=10.6.18.2 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=29841 DF PROTO=TCP SPT=54395
DPT=548 WINDOW=65535 RES=0x00 SYN URGP=0 </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Feb 14 </span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'>14:32:39</span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'> mail kernel: PASS-unknown:IN=ppp0 OUT=eth1 SRC=10.6.18.150
DST=72.14.215.83 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=29851 DF PROTO=TCP
SPT=54396 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0 </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Feb 14 </span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'>14:32:40</span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'> mail kernel: PASS-unknown:IN=ppp0 OUT=eth0 SRC=10.6.18.150
DST=10.6.18.2 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=29854 DF PROTO=TCP SPT=54395
DPT=548 WINDOW=65535 RES=0x00 SYN URGP=0 </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Feb 14 </span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'>14:32:42</span></font><font size=2><span lang=EN-GB style='font-size:
10.0pt'> mail kernel: PASS-unknown:IN=ppp0 OUT=eth1 SRC=10.6.18.150
DST=72.14.215.83 LEN=64 TOS=0x00 PREC=0x00 TTL=63 ID=29857 DF PROTO=TCP
SPT=54396 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Does this indicate a Firehol configuration issue or should I be looking
elsewhere?</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Regards</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'>Richard Williams</span></font><font size=2><span lang=EN-GB
style='font-size:10.0pt'>.</span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span lang=EN-GB style='font-size:
10.0pt'> </span></font></p>
<p class=MsoNormal><font size=3 color=navy face=Arial><span lang=EN-GB
style='font-size:12.0pt;color:navy'>****************************************************<br>
</span></font><font color=navy><span lang=EN-GB style='color:navy'>Richard
Williams</span></font><font color=navy><span lang=EN-GB style='color:navy'><br>
email:</span><span lang=EN-GB> <a href="mailto:richard@everything4it.co.uk">richard@everything4it.co.uk</a></span></font><font
color=navy><span lang=EN-GB style='color:navy'> </span><span lang=EN-GB><br>
</span></font><font color=navy><span lang=EN-GB style='color:navy'>mobile:
07981 734697</span></font></p>
<p class=MsoNormal><font size=3 color=navy face=Arial><span lang=EN-GB
style='font-size:12.0pt;color:navy'>web: <a
href="http://www.everything4it.co.uk">http://www.everything4it.co.uk</a> <br>
**************************************************** </span><span lang=EN-GB><br>
</span></font><font size=2 color=black><span lang=EN-GB style='font-size:10.0pt;
color:black'>The contents of this email message and any attachments are
confidential and are intended solely for addressee. The </span></font><font
size=2 color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>info</span></font><font
size=2 color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>rmation
may also be legally privileged. This transmission is sent in trust, for the
sole purpose of delivery to the intended recipient. If you have received this
transmission in error, any use, reproduction or dissemination of this
transmission is strictly prohibited. If you are not the intended recipient,
please immediately notify the sender by reply email or at +44(0)7981 734697 and
delete this message and its attachments, if any</span></font><font size=2
color=black><span lang=EN-GB style='font-size:10.0pt;color:black'>.</span></font></p>
<p class=MsoNormal><font size=3 face=Arial><span lang=EN-GB style='font-size:
12.0pt'> </span></font></p>
</div>
</body>
</html>
<BR>
<P><FONT SIZE=2>No virus found in this outgoing message.<BR>
Checked by AVG Free Edition.<BR>
Version: 7.5.516 / Virus Database: 269.20.4/1277 - Release Date: 13/02/2008 20:00<BR>
</FONT> </P>