Discuss

discuss@lists.centos.org

34753 discussions

VPN via PPTP and MPPE
by James B. Byrne 09 Nov '05

09 Nov '05

I have set up a VPN over PPTP on a CentOS server using the DKMS module rpm dkms-0-2.0.6-3.el4 from http://centos.karan.org/el4/extras/stable/i386/RPMS/repodata/repovie w/dkms-0-2.0.6-3.el4.kb.html and kernel_ppp_mppe-0.0.5-2dkms.noarch.rpm at http://pptpclient.sourceforge.net/howto-fedora- core-3.phtml. I have configured the pptpd server on Centos4 to use MS_CHAPv2, 128bit encryption and to assign server side and client IP addresses in the range a.b.c.42-48 and a.b.c.52-58 respectively. I have also opened the firewall for tcp port 1723 and the GRE protocol (47). I have configured a Microsoft Win2Kpro client and I can connect and establish a VPN. However I am missing something because: 1. If I try and connect to a machine on the local network segment then the VPN channel is not used (this is probably the correct behaviour but it is not what I want and I need to know how to force local network paths over an encrypted connection). 2. If I try and connect to a host outside our local network then the traffic is not routed out through the gateway but it does travel over the vpn to the local pptdp server. So, what am I missing in all of this? Are there options for the pptpd that I need to set for this to work? I have a similar problem when I connect from outside the local network segment. The the vpn connects but then I cannot reach any other host. Any suggestions are welcome. I am a digest subscriber so if you could copy my email address on your reply then I would be appreciative. Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

3 2

Re: [CentOS] Reducing the deleterious effects ofego related issues on the list
by Brian T. Brunner 09 Nov '05

09 Nov '05

Bryan... NOBODY CARES how many times Chris is wrong. NOBODY CARES what you prove on this point. Whether Chris is right, wrong or stoopid is NOT proper fodder for this (CENTOS) list. Chris being wrong is *strictly* a "Bryan Fixation". Part of YOU growing up is YOU realizing that whether Chris is or is not wrong is UNIMPORTANT to ANYTHING that you or anybody important to you think is important. Challenge: don't respond, unless it's about CentOS or related stuff (like the Meridian War... neat info I hadn't seen before!) Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> thebs413(a)earthlink.net 11/08/05 08:58AM >>> I want to prove Chris wrong yet again. -- Bryan J. Smith b.j.smith(a)ieee.org http://thebs413.blogspot.com ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

4 6

Re: [CentOS] Reducing the deleterious effects ofego related issues onthe list
by Brian T. Brunner 08 Nov '05

08 Nov '05

"Multi-Point Network Loading Test Equipment" Brian Brunner brian.t.brunner(a)gai-tronics.com (610)796-5838 >>> chrism(a)imntv.com 11/08/05 03:48PM >>> Cool! I'll have to buy a copy. It's been years since I was into FPS games, but I used to be pretty good at Ghost Recon. Now...how to sneak a gaming rig into the next quarterly budget.... 8-) ******************************************************************* This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept for the presence of computer viruses. www.hubbell.com - Hubbell Incorporated

1 0

App not finding /dev/nvidia0 for /dev/dri/card0 not found on inspiron 8200 with nvidia chipset
by Jerry Geis 08 Nov '05

08 Nov '05

I have source for a program that is attempting to open /dev/nvidia0 then on failure open /dev/dri/card0 to get some vsync settings. Neither of those two files is found on my laptop in /dev. Is this because of udev? I cant find anthing in /dev that might be used instead. Any ideas on what to open to read vsync information from X windows? Thanks, Jerry

3 3

New Standard/Daylight time-change dates in rhel4u2 but not centos4.2?
by s.davison＠computer.org 08 Nov '05

08 Nov '05

>From a login on a machine with rhel4u2 I can execute the following commands and get the indicated output: date --date="Mar 25 15:00:00 UTC 2006" Sat Mar 25 10:00:00 EST 2006 date --date="Mar 25 15:00:00 UTC 2007" Sun Mar 25 11:00:00 EDT 2007 As you can see, the output differs for 2006 and 2007. That indicates that rhel4u2 includes changes required by the "Energy Policy Act of 2005," which mandates new dates for transition between Standard Time and Daylight Saving Time starting in 2007. If I do the same thing on a machine with "CentOS release 4.2 (Final)", I get the following output: date --date="Mar 25 15:00:00 UTC 2006" Sat Mar 25 10:00:00 EST 2006 date --date="Mar 25 15:00:00 UTC 2007" Sun Mar 25 10:00:00 EST 2007 So it looks as if CentOS4.2 does not yet have that change. Is that correct? Or is there perhaps some installation parameter that I have missed in installing CentOS4.2? Thanks for any info. Stowe Davison

4 4

mondo Centos4
by Dave 08 Nov '05

08 Nov '05

I had asked a few months ago if anyone knew if mondo is compatible with CentOS4. One person said it was still working, but never mentioed if he had done a restore. I had the stable version installed and whenever I ran it there were a few messages about command not found. Well, I had a HD go out and tried booting from the CD and it failed. It was just my desktop PC and my home dir was backed up a few days earlier so no biggie. So anyone have Mondo installed and has done a recovery? If so what version? If not, anyone now of a full metal backup restore similar to mondo?

2 1

Re: [CentOS] VPN via PPTP and MPPE
by James B. Byrne 08 Nov '05

08 Nov '05

On 1 Nov 2005 at 11:25, Joe Pruett wrote: > as for your local traffic, the vpn only sets up a route for the > natural netmask of the remote end. so if the vpn server is > 192.168.1.4, then a route for 192.168.1.0/24 will be installed. > you can see what routes get setup via 'route print' at a dos > prompt. if you need other routes setup, then you have to do it > manually after the vpn is running. i seem to recall there might > be a way to invoke the vpn from a command script, so you might be > able to start it and add the routes from a .bat file. Thank you for the assistance. I have reached the point where I seem to have resolved all the firewall issues that were contributing to my problems and I can now reliably connect a vpn between my MS-W2K box on one C class to a CentOS4.2 box running PopTop pptpd with 128 bit MPPE. As you anticipated, now I am down to routing problems. I have set up the pptpd server to supply a non-routable address in the range 192.168.209.194-254 as the client side IP and a routable address from the remote C block as the server side. I have very little knowledge and even less experience with this so please bear with me. Here is what I want to do: Case 1. Typical: >From any arbitrary external IP address, establish a VPN to a pptpd server inside our firewall that will route all traffic consigned to our internal network over that VPN while all other traffic goes over the gateway established before the VPN is set up. I cannot seem to get this to work with the MS network connection client. I have turned off the "use default gateway on remote network" option in the tcp/ip advanced networking options in the MS client, but the only effect that seems to have is that no traffic goes over the VPN at all. I have confirmed via tracert that the destination IP of the VPN tunnel is recognized on the eth0 interface and responds to ping and traceroute, but the routing from my test workstation is invariantly over the public gateway and not via the vpn. Case 2. All traffic is routed over the VPN and then, if necessary, out onto the Internet via our own gateway. I need to get case 1. working before I do this, but this will be a another requirement that will have to be available in addition to case 1. for some users. What I need is a way of configuring vpn clients on Windows 2K and XPpro so that these two cases work automatically from some sort of simple to deploy client install script. I am open to using alternative vpn client software if that is required. As this is evidently a client side problem I understand that it is not strictly CentOS related. However, this issue naturally falls on the server end to provide an answer and I hope that someone here has gone through this already and can provide me with some advice or referrals to other venues for help. Presently, this is what I get on the MS-W2K client when I establish a VPN between netblock A and netblock B: ==================================================================== ======= Interface List 0x1 ........................... MS TCP Loopback interface 0x1000003 ...00 48 54 8c 2a fb ...... NDIS 5.0 driver 0x2000004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface ==================================================================== ======= ==================================================================== ======= Active Routes: Network Destination Netmask Gateway Interface Metric 0.0.0.0 0.0.0.0 A.1 A.77 1 127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 192.168.209.0 255.255.255.0 192.168.209.214 192.168.209.214 1 192.168.209.214 255.255.255.255 127.0.0.1 127.0.0.1 1 192.168.209.255 255.255.255.255 192.168.209.214 192.168.209.214 1 B.21 255.255.255.255 A.1 A.77 1 A.0 255.255.255.0 A.77 A.77 1 A.77 255.255.255.255 127.0.0.1 127.0.0.1 1 A.255 255.255.255.255 A.77 A.77 1 224.0.0.0 224.0.0.0 192.168.209.214 192.168.209.214 1 224.0.0.0 224.0.0.0 A.77 A.77 1 255.255.255.255 255.255.255.255 A.77 A.77 1 Default Gateway: A.1 ==================================================================== ======= Persistent Routes: None The only route to the B network seems to go through the usual gateway A.1 and not over the VPN. If I do NOT clear the use default GW option then all traffic goes from the client on A.77 over the VPN Default Gateway (192.168.209.214), reaches the IP at the server end (B.214), but then is not routed off the pptpd server (forwarding is enabled): # cat /proc/sys/net/ipv4/ip_forward 1 Regards, Jim -- *** e-mail is not a secure channel *** mailto:byrnejb.<token>@harte-lyne.ca James B. Byrne Harte & Lyne Limited vox: +1 905 561 1241 9 Brockley Drive fax: +1 905 561 0757 Hamilton, Ontario <token> = hal Canada L8E 3C3

2 1

Re: CentOS 3.6 is released.
by John Hinton 08 Nov '05

08 Nov '05

Lance Davis wrote: >The CentOS development team are please to announce the release of CentOS >3.6 for all supported architectures. > >It is available on all mirrors and via bitorrent. > >This release corresponds to the upstream vendor U6 release together with >updates through October 11th (depending on architecture). > >Please download and test, or set your yum.conf to point to 3.6 rather >than $releasever (eg http://mirror.centos.org/centos/3.6/..) to test >updating and add any problems to bugs.centos.org > >3.5 will be removed from the mirrors and 3.6 will become the default in >48 hours if no problems are reported. > >Lance > > Hmmm... has 48 hours passed? :) Just curious.... John Hinton

3 3

php version
by Mark Quitoriano 08 Nov '05

08 Nov '05

How can i install php 4 on Centos 4? is there RPMs for centos 4? or can i use srpms(php4) of centos 3 to be used for centos 4? -- Regards, Mark Quitoriano, CCNA http://www.atamanetworks.com Fan the flame... http://www.spreadfirefox.com/?q=user/register&r=19441

1 0

CentOS4.2 and wifi
by John Logsdon 08 Nov '05

08 Nov '05

Dear all Can anyone tell me, does CentOS4.2 include a wifi manager that will handle 128 bit WEP out of the box, so to speak? The version of kwifimanager with 4.1 would only do 64 bit due to an oversight at KDE Towers... TIA John John Logsdon "Try to make things as simple Quantex Research Ltd, Manchester UK as possible but not simpler" j.logsdon(a)quantex-research.com a.einstein(a)relativity.org +44(0)161 445 4951/G:+44(0)7717758675 www.quantex-research.com

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss