Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PPTP VPN and SQUIDGUARD not working

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    18 Posts 3 Posters 7.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      josey
      last edited by

      Hi,
      2.0-BETA4 (i386)
      built on Wed Aug 18

      when i enable PPTP VPN squidguard stops with web filtering, when i disable PPTP filtering works again.

      can you check that guys?

      thanks

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Not nearly enough detail there. Any errors in the logs? Notices in the gui? Does the service stop running?

        What are the contents of /tmp/rules.debug when it works and when it doesn't?

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • J
          josey
          last edited by

          system services shows that services are running (squid and squidguard),
          no notices in gui
          and system logs show this
          Aug 24 07:21:21 mpd: process 49842 started, version 4.4.1 (root@FreeBSD_8.0_pfSense_2.0-snaps.pfsense.org 12:40 18-Aug-2010)
          Aug 24 07:21:21 mpd: Label 'startup' not found
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt0] using interface pptpd0
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt1] using interface pptpd1
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt2] using interface pptpd2
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt3] using interface pptpd3
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt4] using interface pptpd4
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt5] using interface pptpd5
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt6] using interface pptpd6
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt7] using interface pptpd7
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt8] using interface pptpd8
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt9] using interface pptpd9
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt10] using interface pptpd10
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt11] using interface pptpd11
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt12] using interface pptpd12
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt13] using interface pptpd13
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt14] using interface pptpd14
          Aug 24 07:21:21 mpd: PPTP: waiting for connection on 0.0.0.0
          Aug 24 07:21:21 mpd: [pt15] using interface pptpd15
          Aug 24 07:21:24 check_reload_status: syncing firewall
          Aug 24 07:21:30 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:6: macro 'pptp' not defined /tmp/rules.test.packages:6: syntax error'
          Aug 24 07:21:30 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.
          Aug 24 07:21:31 php: : The command '/sbin/pfctl -nf /tmp/rules.test.packages' returned exit code '1', the output was '/tmp/rules.test.packages:13: macro 'pptp' not defined /tmp/rules.test.packages:13: syntax error'
          Aug 24 07:21:31 php: : There was an error while parsing the package filter rules for /usr/local/pkg/squid.inc.

          restating squidguard service does not help.

          thanks

          1 Reply Last reply Reply Quote 0
          • J
            josey
            last edited by

            just asking, is anyone up to get this fix?
            thanks

            1 Reply Last reply Reply Quote 0
            • J
              josey
              last edited by

              any updates ?
              thanks

              1 Reply Last reply Reply Quote 0
              • J
                josey
                last edited by

                Month ago, i asked for this problem, no one answered, even try, since this is not working on 1.2.3. and it is not working on 2.0, it becomes very frustrating.
                Can someone please tell me is someone working on this?
                thanks

                1 Reply Last reply Reply Quote 0
                • W
                  wallabybob
                  last edited by

                  It looks to me this request is still outstanding:

                  @jimp:

                  What are the contents of /tmp/rules.debug when it works and when it doesn't?

                  1 Reply Last reply Reply Quote 0
                  • J
                    josey
                    last edited by

                    this is with PPTP VPN off

                    this is copy paste only of vpn part, i dont think you need firewall, nat, gateway… data?
                    also there is nothing related to squid in this file
                    ,,,
                    ,,,
                    ,,,

                    VPN Rules

                    package manager late specific hook

                    anchor "packagelate"

                    anchor "tftp-proxy/*"

                    anchor "limitingesr"

                    uPnPd

                    anchor "miniupnpd"

                    Setup squid pass rules for proxy

                    pass in quick on re0 proto tcp from any to !(re0) port 80 flags S/SA keep state
                    pass in quick on re0 proto tcp from any to !(re0) port 3128 flags S/SA keep state

                    Setup squid pass rules for proxy

                    pass in quick on re1 proto tcp from any to !(re1) port 80 flags S/SA keep state
                    pass in quick on re1 proto tcp from any to !(re1) port 3128 flags S/SA keep state

                    Setup squid pass rules for proxy

                    pass in quick on re2 proto tcp from any to !(re2) port 80 flags S/SA keep state
                    pass in quick on re2 proto tcp from any to !(re2) port 3128 flags S/SA keep state

                    this ia with PPTP VPN on

                    VPN Rules

                    package manager late specific hook

                    anchor "packagelate"

                    anchor "tftp-proxy/*"

                    anchor "limitingesr"

                    uPnPd

                    anchor "miniupnpd"

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      I asked for the whole file, and yes, I need the whole file. The VPN part, and the headers, etc, where the PPTP things are defined among others. We can't help unless we get all relevant information.

                      Save them as .txt files and attach them to the thread (or the open ticket about this)

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • J
                        josey
                        last edited by

                        OK, here is *.txt file…
                        wan, and wan gw IP edited with ---.---.---.---

                        [VPN ON.txt](/public/imported_attachments/1/VPN ON.txt)
                        [VPN OFF.txt](/public/imported_attachments/1/VPN OFF.txt)

                        1 Reply Last reply Reply Quote 0
                        • J
                          josey
                          last edited by

                          6 days passed, and no feedback.
                          im just asking is anyone up to this, any news? Or is it best way just to seat back and wait?

                          thanks

                          1 Reply Last reply Reply Quote 0
                          • jimpJ
                            jimp Rebel Alliance Developer Netgate
                            last edited by

                            Should be fixed in new snapshots made after this post (there may be one in progress right now that would not include the fixes), so by tomorrow AM there should be a snap that works.

                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                            Need help fast? Netgate Global Support!

                            Do not Chat/PM for help!

                            1 Reply Last reply Reply Quote 0
                            • J
                              josey
                              last edited by

                              thank you for your prompt reply, will try and leave feedback

                              1 Reply Last reply Reply Quote 0
                              • J
                                josey
                                last edited by

                                well i said i will leave feedback…

                                i try to upgrade my 1.2.3 installation since on test machine squidguard and pptp vpn works. (everything left by default)
                                After upgrade, PPTP VPN submenu freezes and it is imposible to change anything, and upgrade transfer all values (like radius port, ip address etc) as number 1.

                                Than i tried to restore configuration from old backup from 1.2.3 verson, and it didnt work well.
                                so i decide to go for fresh install...

                                I have configure everything and it works, except :) when you touch WAN firewall rules VPN does not work after that.

                                So you can set some random rule, and then delete it and VPN is not working any more.
                                also i tried to add firewall rule to wan interface to pass any source to ip adress of pptp vpn server by port 1723 no luck.
                                Also, on version 1.2.3 in wan interface firewall on single rule to block all pptp traffic was able to pass through, on pfs 2.0 it cant.
                                On client computer when trying to connect to VPN it hangs on, and it cant come to part verifying username and password.

                                is there some new configuration for pptp in pfs 2.0, or it still need small fix?

                                1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate
                                  last edited by

                                  Those issues are unrelated to this thread, you'd be better off starting a new thread with a relevant subject to draw more attention. I haven't used PPTP on 2.0 myself much, some others have said it wasn't working, some said it was. Others may have tips.

                                  Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • J
                                    josey
                                    last edited by

                                    also there is no PPTP VPN events in log ?
                                    and as i said, it works until single firewall rule is added to WAN interface :(
                                    after that, even if you delete all rules it is not working any more.

                                    I know that this issues are not related any more with first problem (VPN crashes squidguard), but can we end this story with PPTP to end? or i have to open new topic in VPN or firewall ?

                                    And, thank you for all your help

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      josey
                                      last edited by

                                      update to latest snapshot, reboot, add rule to firewall for wan interface to - pass port 1723 from any to wan-, and now works, silly, version 1.2.3 didnt need that.
                                      Now, just to fix logging, it does not work.
                                      Thanks for all help

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        I thought PPTP logs were under the PPP tab, you just need to press the PPTP button there. I may be wrong though, there's an open ticket for the logging.

                                        Again though, a new thread with a more relevant subject would catch more eyes.

                                        EDIT: I see you started a new thread, nevermind. :-)

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.