Run a ms compatible VPN server on ubuntu

[DingleBerry]

I've got an ubuntu hoary headless server running far away which I want to use as a vpn server (for various reasons). Unfortunalty pptpd doesn't seam to want to work for me.

The connection is stable with ip_forward set to 0 (but thats no use) set it to 1 and the connection works perfectly for around 30 seconds and then dies.

Apr 18 10:02:14 localhost pptpd[10003]: CTRL: Client 148.88.201.80 control connection started
Apr 18 10:02:14 localhost pptpd[10003]: CTRL: Starting call (launching pppd, opening GRE)
Apr 18 10:02:14 localhost pptpd[10003]: GRE: Bad checksum from pppd.
Apr 18 10:02:14 localhost pptpd[10003]: GRE: Discarding out of order packet
Apr 18 10:02:16 localhost pptpd[10003]: CTRL: Ignored a SET LINK INFO packet with real ACCMs!
Apr 18 10:05:19 localhost pptpd[10003]: GRE: read(fd=4,buffer=804e6c0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
Apr 18 10:05:19 localhost pptpd[10003]: CTRL: PTY read or GRE write failed (pty,gre)=(4,5)
Apr 18 10:05:19 localhost pptpd[10003]: CTRL: Reaping child PPP[10004]
Apr 18 10:05:19 localhost pptpd[10003]: CTRL: Client 148.88.201.80 control connection finished

I am using the ubuntu packaged pptp 1.2.1. This page suggests that a newer version would solve the problem (although i don't know what build i'm using). I've tried to install a new package but it needs a new version of libc6 which opens up a whole world of pain because its not in my repositories (below)

## Uncomment the following two lines to fetch updated software from the network
deb http://us.archive.ubuntu.com/ubuntu hoary main restricted
deb-src http://us.archive.ubuntu.com/ubuntu hoary main restricted

## Uncomment the following two lines to fetch major bug fix updates produced
## after the final release of the distribution.
deb http://us.archive.ubuntu.com/ubuntu hoary-updates main restricted
deb-src http://us.archive.ubuntu.com/ubuntu hoary-updates main restricted

## Uncomment the following two lines to add software from the 'universe'
## repository.
## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## universe WILL NOT receive any review or updates from the Ubuntu security
## team.
deb http://us.archive.ubuntu.com/ubuntu hoary universe
deb-src http://us.archive.ubuntu.com/ubuntu hoary universe

deb http://security.ubuntu.com/ubuntu hoary-security main restricted
deb-src http://security.ubuntu.com/ubuntu hoary-security main restricted

deb http://security.ubuntu.com/ubuntu hoary-security universe
deb-src http://security.ubuntu.com/ubuntu hoary-security universe

deb http://archive.ubuntu.com/ubuntu hoary multiverse
deb-src http://archive.ubuntu.com/ubuntu hoary multiverse

## Backports
deb http://archive.ubuntu.com/ubuntu hoary-backports main restricted universe multiverse
deb http://ubuntu-backports.mirrormax.net/ hoary-extras main universe multiverse restricted


deb http://mirror.switch.ch/ftp/mirror/ubuntu/ hoary main restricted universe

I absolutly CAN'T upgrade the distribution because the server is 300 miles away and theres no one there who knows what they are doing should anything go wrong.

What can I do to either stop this version of poptop dieing on its arse or upgrade it to a new version?

HELP!

Automating the install of libc6 2.3.4-1 would probably do though.

 

[matja]

Going from what you've said (I've never used pptpd), you could possibly extract the .so's from the newer libc package into a different directory, and set the LD_LIBRARY_PATH environment variable before pptpd starts, it should use the new libc.

 

[DingleBerry]

right gave up on pptp...then gave up on openvpn (although very very nearly had sucess). Stubled upon port forwarding and managed what i was trying to do. Splendid.

So problem avoided rather than solved.

 

[matja]

Good job - OpenVPN for the win . I've used it for years on both Linux and Windows clients without problems, even with IPv6 on some tunnels.