Gargoyle 1.3.8 + VPN PPTP Server

General discussion about Gargoyle, OpenWrt or anything else even remotely related to the project

Moderator: Moderators

Post Reply
stilllearning
Posts: 12
Joined: Wed Aug 18, 2010 12:19 am

Gargoyle 1.3.8 + VPN PPTP Server

Post by stilllearning »

Hi All,

Just installed and setup Gargoyle 1.3.8, everything works ok so far, but I cannot connect to my VPN PPTP Server, I have forwarded/opened port 1723 pointing to my VPN PPTP Server but still no luck, what do I need to do to get this working.

Appriciate you help in advance.

vplessky
Posts: 60
Joined: Sun Oct 31, 2010 10:31 am
Location: Moscow, Russia
Contact:

Re: Gargoyle 1.3.8 + VPN PPTP Server

Post by vplessky »

stilllearning wrote:Hi All,

Just installed and setup Gargoyle 1.3.8, everything works ok so far, but I cannot connect to my VPN PPTP Server, I have forwarded/opened port 1723 pointing to my VPN PPTP Server but still no luck, what do I need to do to get this working.
I tested following setup.
WAN IP: Static IP
WAN GW: GW for Static IP address

Than I start PPTP (VPN) client in Windows.
And connect to this PPTP server, using Windows Client.
This works.

To enable PPTP as WAN connection in Gargoyle - most likely you need to add PPTP Client to router manually, via opkg.

stanelie
Posts: 14
Joined: Sun Dec 04, 2011 6:59 pm

Re: Gargoyle 1.3.8 + VPN PPTP Server

Post by stanelie »

A bit late to the conversation, but since I was searching for this myself and I was able to figure it out, here is the solution that worked for me.

In order to have PPTP over NAT work for me, I needed to modify the /etc/firewall.user file by putting this in it :

Code: Select all

## PPTP: forward initiator 1723/tcp
iptables -t nat -A prerouting_wan -p tcp --dport 1723 -j DNAT --to 192.168.1.10
iptables -A forwarding_wan -p tcp --dport 1723 -d 192.168.1.10 -j ACCEPT

## PPTP: forward tunnel GRE traffic
iptables -t nat -A prerouting_wan -p gre -j DNAT --to 192.168.1.10
iptables -A forwarding_wan -p gre -d 192.168.1.10 -j ACCEPT
Obviously, you need to modify the IP address in the code to match the pptp server inside your network. I also forward the port 1723 to my pptp server using the web interface, I am unsure if this is needed or not.

I found this info here : http://www.blackmanticore.com/51f359dfe ... 633e2e7c2b . Somehow, I didn't need to install all the specified packages for this to work.

I am running Gargoyle 1.5.0 on a TP-Link WR1043ND.

stanelie
Posts: 14
Joined: Sun Dec 04, 2011 6:59 pm

Re: Gargoyle 1.3.8 + VPN PPTP Server

Post by stanelie »

The port redirection is not necessary, just the firewall rules in /etc/firewall.user.

I pulled 1.5.0 from my router, I had wifi troubles...

ng3700v2
Posts: 34
Joined: Thu Mar 17, 2011 9:02 am

Re: Gargoyle 1.3.8 + VPN PPTP Server

Post by ng3700v2 »

I've wasted many hours trying to get my Windows 7 VPN server to be visibile from the WAN side as well...
I also found the blackmanticore article and tried numerous variations of the instructions and came up fruitless.

I believe a large part of the problem is that several kernel modules are are required to forward on the GRE protocal traffic. I can't get kmod-gre to load under any version of gargoyle.

All of the packages seem to install fine, they just won't load:

Code: Select all

opkg install kmod-ipt-conntrack kmod-ipt-conntrack-extra kmod-ipt-nat kmod-ipt-nat-extra kmod-ipt-nathelper kmod-ipt-nathelper-extra
opkg install pptp pptpd

Code: Select all

insmod nf_conntrack_proto_gre
dmesg output:

Code: Select all

nf_conntrack_proto_gre: Unknown symbol nf_ct_port_nlattr_tuple_size
nf_conntrack_proto_gre: Unknown symbol nf_ct_port_nla_policy
nf_conntrack_proto_gre: Unknown symbol nf_ct_port_tuple_to_nlattr
nf_conntrack_proto_gre: Unknown symbol nf_ct_port_nlattr_to_tuple

Code: Select all

insmod ip_gre
dmesg output:

Code: Select all

ip_gre: Unknown symbol __secpath_destroy
Please correct me if I am wrong...

Ayelen
Posts: 1
Joined: Thu Dec 08, 2011 10:21 am

Re: Gargoyle 1.3.8 + VPN PPTP Server

Post by Ayelen »

:|

Post Reply