>>Даже не знаю что сказать ) С MPD давно знаком, про открытые
>>порты и GRE можете мне не говорить по 10 раз
>
>И все-таки, если у тебя все открыто, то почему в tcpdump не
>видно ни одного исходящего от тебя пакета? Вот лог tcpdump'а, поднимаю VPN-туннель с этой же машины, но через другого провайдера (не через DSL-модем), и, о чудо, VPN поднимается:
IP (tos 0x0, ttl 122, id 21696, offset 0, flags [DF], proto: TCP (6), length: 48) X.X.X.X.1984 > Y.Y.Y.Y.pptp: S, cksum 0x5454 (correct), 2432570951:2432570951(0) win 16384 <mss 1460,nop,nop,sackOK>
IP (tos 0x0, ttl 122, id 21697, offset 0, flags [DF], proto: TCP (6), length: 196) X.X.X.X.1984 > Y.Y.Y.Y.pptp: P 2432570952:2432571108(156) ack 2697709953 win 17520: pptp Length=156 CTRL-MSG Magic-Cookie=1a2b3c4d CTRL_MSGTYPE=SCCRQ PROTO_VER(1.0) FRAME_CAP(A) BEARER_CAP(A) MAX_CHAN(0) FIRM_REV(2600) [|pptp]
IP (tos 0x0, ttl 122, id 21698, offset 0, flags [DF], proto: TCP (6), length: 208) X.X.X.X.1984 > Y.Y.Y.Y.pptp: P 156:324(168) ack 157 win 17364: pptp Length=168 CTRL-MSG Magic-Cookie=1a2b3c4d CTRL_MSGTYPE=OCRQ CALL_ID(49152) CALL_SER_NUM(56731) MIN_BPS(300) MAX_BPS(100000000) BEARER_TYPE(Any) FRAME_TYPE(E) RECV_WIN(64) PROC_DELAY(0) PHONE_NO_LEN(0) [|pptp]
IP (tos 0x0, ttl 122, id 21699, offset 0, flags [DF], proto: TCP (6), length: 64) X.X.X.X.1984 > Y.Y.Y.Y.pptp: P, cksum 0xc3de (correct), 324:348(24) ack 189 win 17332: pptp Length=24 CTRL-MSG Magic-Cookie=1a2b3c4d CTRL_MSGTYPE=SLI PEER_CALL_ID(63079) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff)
IP (tos 0x0, ttl 123, id 21700, offset 0, flags [none], proto: GRE (47), length: 57) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 0, length 37
LCP, Conf-Request (0x01), id 0, length 23
encoded length 21 (=Option(s) length 17)
0x0000: c021 0100 0015
MRU Option (0x01), length 4: 1400
0x0000: 0578
Magic-Num Option (0x05), length 6: 0x470f14a5
0x0000: 470f 14a5
PFC Option (0x07), length 2:
ACFC Option (0x08), length 2:
Call-Back Option (0x0d), length 3: Callback Operation CBCP (6)
0x0000: 06
IP (tos 0x0, ttl 123, id 21701, offset 0, flags [none], proto: GRE (47), length: 58) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 1, ack 1, length 38
LCP, Conf-Request (0x01), id 1, length 20
encoded length 18 (=Option(s) length 14)
0x0000: c021 0101 0012
MRU Option (0x01), length 4: 1400
0x0000: 0578
Magic-Num Option (0x05), length 6: 0x470f14a5
0x0000: 470f 14a5
PFC Option (0x07), length 2:
ACFC Option (0x08), length 2:
IP (tos 0x0, ttl 123, id 21702, offset 0, flags [none], proto: GRE (47), length: 32) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, ack present], call 63079, ack 2, no-payload, length 12
IP (tos 0x0, ttl 123, id 21704, offset 0, flags [none], proto: GRE (47), length: 59) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 2, ack 3, length 39
LCP, Conf-Reject (0x04), id 2, length 21
encoded length 19 (=Option(s) length 15)
0x0000: c021 0402 0013
MRRU Option (0x11), length 4: 2048
0x0000: 0800
12-Bit seq # Option (0x12), length 2:
End-Disc Option (0x13), length 9: MAC 00:1b:11:bd:af:92
0x0000: 0300 1b11 bdaf 92
IP (tos 0x0, ttl 123, id 21705, offset 0, flags [none], proto: GRE (47), length: 63) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 3, ack 4, length 43
LCP, Conf-Ack (0x02), id 3, length 25
encoded length 23 (=Option(s) length 19)
0x0000: c021 0203 0017
ACFC Option (0x08), length 2:
PFC Option (0x07), length 2:
MRU Option (0x01), length 4: 1500
0x0000: 05dc
Magic-Num Option (0x05), length 6: 0x2e118878
0x0000: 2e11 8878
Auth-Prot Option (0x03), length 5: CHAP, MS-CHAPv2
0x0000: c223 81
IP (tos 0x0, ttl 122, id 21706, offset 0, flags [DF], proto: TCP (6), length: 64) X.X.X.X.1984 > Y.Y.Y.Y.pptp: P, cksum 0xc3c6 (correct), 348:372(24) ack 189 win 17332: pptp Length=24 CTRL-MSG Magic-Cookie=1a2b3c4d CTRL_MSGTYPE=SLI PEER_CALL_ID(63079) SEND_ACCM(0xffffffff) RECV_ACCM(0xffffffff)
IP (tos 0x0, ttl 123, id 21707, offset 0, flags [none], proto: GRE (47), length: 52) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 4, length 32
LCP, Ident (0x0c), id 2, length 20
encoded length 18 (=Option(s) length 14)
0x0000: c021 0c02 0012
Magic-Num 0x470f14a5
Message
MSRASV5.10
IP (tos 0x0, ttl 123, id 21708, offset 0, flags [none], proto: GRE (47), length: 54) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 5, length 34
LCP, Ident (0x0c), id 3, length 22
encoded length 20 (=Option(s) length 16)
0x0000: c021 0c03 0014
Magic-Num 0x470f14a5
Message
MSRAS-0-BUH2
IP (tos 0x0, ttl 123, id 21709, offset 0, flags [none], proto: GRE (47), length: 99) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 6, ack 5, length 79
CHAP, Response (0x02), id 1, Value 9c367302e11a87f16efb00512aa99403000000000000000062672220238da4c47901bdf8fbfadb[|chap]
IP (tos 0x0, ttl 123, id 21710, offset 0, flags [none], proto: GRE (47), length: 48) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 7, ack 7, length 28
unknown ctrl-proto (0x80fd), Conf-Request (0x01), id 4, length 12
encoded length 10 (=Option(s) length 6)
0x0000: 80fd 0104 000a
MPPC Option (0x12), length 6:
0x0000: 0100 0001
IP (tos 0x0, ttl 123, id 21711, offset 0, flags [none], proto: GRE (47), length: 68) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 8, length 48
IPCP, Conf-Request (0x01), id 5, length 36
encoded length 34 (=Option(s) length 30)
0x0000: 8021 0105 0022
IP-Addr Option (0x03), length 6: 0.0.0.0
0x0000: 0000 0000
Pri-DNS Option (0x81), length 6: 0.0.0.0
0x0000: 0000 0000
Pri-NBNS Option (0x82), length 6: 0.0.0.0
0x0000: 0000 0000
Sec-DNS Option (0x83), length 6: 0.0.0.0
0x0000: 0000 0000
Sec-NBNS Option (0x84), length 6: 0.0.0.0
0x0000: 0000 0000
IP (tos 0x0, ttl 123, id 21712, offset 0, flags [none], proto: GRE (47), length: 44) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 9, length 24
IPCP, Conf-Reject (0x04), id 1, length 12
encoded length 10 (=Option(s) length 6)
0x0000: 8021 0401 000a
IP-Comp Option (0x02), length 6: VJ-Comp
0x0000: 002d 0f00
IP (tos 0x0, ttl 123, id 21713, offset 0, flags [none], proto: GRE (47), length: 54) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 10, ack 10, length 34
IPCP, Conf-Request (0x01), id 6, length 18
encoded length 16 (=Option(s) length 12)
0x0000: 8021 0106 0010
IP-Addr Option (0x03), length 6: 0.0.0.0
0x0000: 0000 0000
Pri-DNS Option (0x81), length 6: 0.0.0.0
0x0000: 0000 0000
IP (tos 0x0, ttl 123, id 21714, offset 0, flags [none], proto: GRE (47), length: 44) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 11, length 24
IPCP, Conf-Ack (0x02), id 2, length 12
encoded length 10 (=Option(s) length 6)
0x0000: 8021 0202 000a
IP-Addr Option (0x03), length 6: vpnserver
0x0000: c0a8 0101
IP (tos 0x0, ttl 123, id 21715, offset 0, flags [none], proto: GRE (47), length: 54) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 12, ack 11, length 34
IPCP, Conf-Request (0x01), id 7, length 18
encoded length 16 (=Option(s) length 12)
0x0000: 8021 0107 0010
IP-Addr Option (0x03), length 6: 192.168.2.200
0x0000: c0a8 02c8
Pri-DNS Option (0x81), length 6: vpnserver
0x0000: c0a8 0101
IP (tos 0x0, ttl 123, id 21721, offset 0, flags [none], proto: GRE (47), length: 77) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present, ack present], call 63079, seq 13, ack 12, length 57
IP (tos 0x0, ttl 1, id 21719, offset 0, flags [none], proto: IGMP (2), length: 40, options ( RA (148) len 4 )) 192.168.2.200 > IGMP.MCAST.NET: igmp v3 report, 1 group record(s) [gaddr 239.255.255.250 to_ex { }]
IP (tos 0x0, ttl 123, id 21725, offset 0, flags [none], proto: GRE (47), length: 194) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 14, length 174
IP (tos 0x0, ttl 1, id 21723, offset 0, flags [none], proto: UDP (17), length: 161) 192.168.2.200.tr-rsrb-p2 > 239.255.255.250.1900: UDP, length 133
IP (tos 0x0, ttl 123, id 21727, offset 0, flags [none], proto: GRE (47), length: 361) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 15, length 341
IP (tos 0x0, ttl 128, id 21726, offset 0, flags [none], proto: UDP (17), length: 328) 192.168.2.200.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request, length: 300, htype-#8, hlen:6, xid:0x9be128d2, secs:1536, flags: [none] (0x0000)
Client IP: 192.168.2.200 [|bootp]
IP (tos 0x0, ttl 123, id 21729, offset 0, flags [none], proto: GRE (47), length: 129) X.X.X.X > Y.Y.Y.Y: GREv1, Flags [key present, sequence# present], call 63079, seq 16, length 109
IP (tos 0x0, ttl 128, id 21728, offset 0, flags [none], proto: UDP (17), length: 96) 192.168.2.200.netbios-ns > 255.255.255.255.netbios-ns:
>>> NBT UDP PACKET(137): REGISTRATION; REQUEST; BROADCASTTrnID=0x80A5
OpCode=5
NmFlags=0x11
Rcode=0
QueryCount=1
AnswerCount=0
AuthorityCount=0
AddressRecCount=1
QuestionRecords:
Name=
WARNING: Short packet. Try increasing the snap length
Здесь 192.168.2.200 - адрес в VPN-сети. В этом логе и в логе mpd видно что после первого требования клиента выдать ему CALLBACK 6 (Microsoft Callback) и ответа mpd что он этого сделать ну никак не может клиент перестает его требовать и соединение проходит удачно.
Я вот еще заметил что через этого прова и этот DSL-модем не форвардятся порты на мой комп, даже если настроить на модеме DMZ. Я думаю может где то здесь собака зарыта?