[FoLUG] Aiuto su vpn
Piero Conte
p.conte@tin.it
Lun 24 Lug 2006 14:32:16 CEST
Ivan ho fatto ulteriori prove, ma non sono riuscito a risolvere nulla.
Premetto che sul vpn server il servizio iptables è stoppato, che il
client riesce a collegarsi alla pagina di prova del web server (ho attivato
anche il servizio httpd) e riesce a fare il telnet. Non ho provato ssh in
quanto il client (xp) non aveve putty.
Allego i file di log che ho anche commentato per rendere la situazione
più chiara.Posso anche aggiungere che con mia grande meraviglia dal
vpn server non riesco a fare il ping a 82.50.153.113 che dovrebbe essere
l'indirizzo pubblico del client.
Ho anche ipotizzato che il mancato funzionamento di smb sia dovuto a
telecom che interdice il passaggio di certi pacchetti. Dovrei fare forse
una prova con altri client (devo solo trovare la persona disposta)
Comunque ecco i log con la speranza che qualcuno mi dia una mano.
ringrazio
piero
> e' tempo di guardare il log, allora. in /var/log/samba/ ci sono log.smbd
> e log.nomedellamacchinachesistacollegando. metti in tail -n entrambi e
> poi guarda che dicono mentre provi a collegarti.
> inoltre, se non dovesse bastare, .........
>
> ------------------------------------------------------------------------
>
> _
-------------- parte successiva --------------
[2006/07/21 17:34:41, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
got NTLMSSP command 3, expected 1
[2006/07/21 17:34:41, 1] smbd/service.c:make_connection(770)
make_connection: refusing to connect with no session setup
[2006/07/21 17:35:05, 1] smbd/service.c:make_connection(770)
make_connection: refusing to connect with no session setup
[2006/07/21 17:35:29, 1] smbd/service.c:make_connection(770)
make_connection: refusing to connect with no session setup
[2006/07/21 17:35:34, 0] lib/util_sock.c:read_data(529)
read_data: read failure for 4 bytes to client 82.48.58.174. Error = Connection reset by peer
[2006/07/22 16:27:33, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
Failed to parse negTokenTarg at offset 21
[2006/07/22 16:30:43, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
got NTLMSSP command 3, expected 1
[2006/07/22 16:27:33, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
Failed to parse negTokenTarg at offset 21
[2006/07/21 17:36:08, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
Failed to parse negTokenTarg at offset 21
[2006/07/20 14:29:10, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
got NTLMSSP command 3, expected 1
[2006/07/22 16:26:54, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
got NTLMSSP command 3, expected 1
[2006/07/22 16:31:15, 1] libsmb/ntlmssp.c:ntlmssp_update(259)
got NTLMSSP command 3, expected 1
Questa è la routing table del client
===========================================================================
Elenco interfacce
0x1 ........................... MS TCP Loopback interface
0x10003 ...00 0f 3d d0 87 17 ...... Alice ADSL 302T USB Remote NDIS driver - Miniport dell'Utilità di pianificazione pacchetti
0x20004 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
0x30005 ...00 53 45 00 00 00 ...... WAN (PPP/SLIP) Interface
===========================================================================
===========================================================================
Route attive:
Indirizzo rete Mask Gateway Interfac. Metric
0.0.0.0 0.0.0.0 82.50.153.113 82.50.153.113 2
0.0.0.0 0.0.0.0 192.168.1.1 192.168.1.2 32
0.0.0.0 0.0.0.0 192.168.100.21 192.168.100.21 1
82.48.48.215 255.255.255.255 82.50.153.113 82.50.153.113 1
82.50.153.113 255.255.255.255 127.0.0.1 127.0.0.1 50
82.255.255.255 255.255.255.255 82.50.153.113 82.50.153.113 50
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.1.0 255.255.255.0 192.168.1.2 192.168.1.2 30
192.168.1.2 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.1.255 255.255.255.255 192.168.1.2 192.168.1.2 30
192.168.100.1 255.255.255.255 82.50.153.113 82.50.153.113 1
192.168.100.21 255.255.255.255 127.0.0.1 127.0.0.1 50
192.168.100.255 255.255.255.255 192.168.100.21 192.168.100.21 50
224.0.0.0 240.0.0.0 192.168.1.2 192.168.1.2 30
224.0.0.0 240.0.0.0 82.50.153.113 82.50.153.113 2
224.0.0.0 240.0.0.0 192.168.100.21 192.168.100.21 1
255.255.255.255 255.255.255.255 192.168.1.2 192.168.1.2 1
Gateway predefinito: 192.168.100.21
===========================================================================
Route permanenti:
-------------- parte successiva --------------
[2006/07/24 10:20:09, 1] libsmb/clispnego.c:parse_negTokenTarg(251)
Failed to parse negTokenTarg at offset 21
-------------- parte successiva --------------
[2006/07/24 11:35:18, 0] nmbd/nmbd.c:main(728)
Netbios nameserver version 3.0.21b-2 started.
Copyright Andrew Tridgell and the Samba Team 1992-2006
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(327)
become_domain_master_browser_wins:
Attempting to become domain master browser on workgroup MYGROUP, subnet UNICAST_SUBNET.
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(341)
become_domain_master_browser_wins: querying WINS server from IP 192.168.70.1 for domain master browser name MYGROUP<1b> on workgroup MYGROUP
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
*****
Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet UNICAST_SUBNET
*****
[2006/07/24 11:35:18, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
become_domain_master_browser_bcast:
Attempting to become domain master browser on workgroup MYGROUP on subnet 192.168.50.1
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
become_domain_master_browser_bcast: querying subnet 192.168.50.1 for domain master browser on workgroup MYGROUP
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(282)
become_domain_master_browser_bcast:
Attempting to become domain master browser on workgroup MYGROUP on subnet 192.168.70.1
[2006/07/24 11:35:19, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(295)
become_domain_master_browser_bcast: querying subnet 192.168.70.1 for domain master browser on workgroup MYGROUP
[2006/07/24 11:35:19, 0] libsmb/nmblib.c:send_udp(791)
Packet send failed to 192.168.200.100(137) ERRNO=Network is unreachable
[2006/07/24 11:35:19, 0] nmbd/nmbd_packets.c:send_netbios_packet(163)
send_netbios_packet: send_packet() to IP 192.168.200.100 port 137 failed
[2006/07/24 11:35:19, 0] nmbd/nmbd_nodestatus.c:node_status(88)
node_status: Failed to send packet trying to get node status for name *<00>, IP address 192.168.200.100
[2006/07/24 11:35:28, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
*****
Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet 192.168.50.1
*****
[2006/07/24 11:35:28, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(113)
*****
Samba server S2000 is now a domain master browser for workgroup MYGROUP on subnet 192.168.70.1
*****
[2006/07/24 11:35:41, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
*****
Samba name server S2000 is now a local master browser for workgroup MYGROUP on subnet 192.168.50.1
*****
[2006/07/24 11:35:41, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
*****
Samba name server S2000 is now a local master browser for workgroup MYGROUP on subnet 192.168.70.1
*****
-------------- parte successiva --------------
[2006/07/24 10:57:22, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:23, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:24, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 10:57:25, 0] lib/util_sock.c:get_peer_addr(1225)
getpeername failed. Error was Transport endpoint is not connected
[2006/07/24 11:35:18, 0] smbd/server.c:main(805)
smbd version 3.0.21b-2 started.
Copyright Andrew Tridgell and the Samba Team 1992-2006
-------------- parte successiva --------------
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.10.3/395 - Release Date: 21/07/2006
Maggiori informazioni sulla lista
FoLUG