VPN with pptp not working - at least not with netrunner

Hi there,

i am now trying (without success) for some days to access our new business server.
Therefore we use vpn with pptp (which is new for me).

So I got 2 computers (and a smartphone) that should have access.

First try - Desktop PC running Netrunner Frontier:
Should be as simple as:
1.adding new VPN Connection (pptp)
2.Entering User/Loginname and password
3.connect

Up to that point everything worked fine

But when trying to access some content on the server (like getting a certificate, wiki or cloud software) - all browsers i tried won’t work (Firefox: unable to connect, Web Browser: Connection to Server Refused, Chromium : This webpage is not available).

/var/log/syslog:

Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <info> Starting VPN service 'pptp'...
Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 5400
Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <info> VPN service 'pptp' appeared; activating connections
Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <info> VPN plugin state changed: starting (3)
Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <info> VPN connection 'blabla' (Connect) reply received.
Jan  6 11:28:07 rechnerxy pppd[5401]: Plugin /usr/lib/pppd/2.4.5/nm-pptp-pppd-plugin.so loaded.
Jan  6 11:28:07 rechnerxy pppd[5401]: pppd 2.4.5 started by root, uid 0
Jan  6 11:28:07 rechnerxy pptp[5406]: nm-pptp-service-5400 log314: The synchronous pptp option is NOT activated
Jan  6 11:28:07 rechnerxy pppd[5401]: Using interface ppp0
Jan  6 11:28:07 rechnerxy pppd[5401]: Connect: ppp0 <--> /dev/pts/2
Jan  6 11:28:07 rechnerxy NetworkManager[1057]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan  6 11:28:07 rechnerxy NetworkManager[1057]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Jan  6 11:28:07 rechnerxy NetworkManager[1057]: <warn> /sys/devices/virtual/net/ppp0: couldn't determine device driver; ignoring...
Jan  6 11:28:08 rechnerxy pptp[5421]: nm-pptp-service-5400 log251: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan  6 11:28:08 rechnerxy pptp[5421]: nm-pptp-service-5400 log739: Received Start Control Connection Reply
Jan  6 11:28:08 rechnerxy pptp[5421]: nm-pptp-service-5400 log773: Client connection established.
Jan  6 11:28:09 rechnerxy pptp[5421]: nm-pptp-service-5400 log251: Sent control packet type is 7 'Outgoing-Call-Request'
Jan  6 11:28:09 rechnerxy pptp[5421]: nm-pptp-service-5400 log858: Received Outgoing Call Reply.
Jan  6 11:28:09 rechnerxy pptp[5421]: nm-pptp-service-5400 log897: Outgoing call established (call ID 0, peer's call ID 63214).
Jan  6 11:28:12 rechnerxy pppd[5401]: CHAP authentication succeeded
Jan  6 11:28:12 rechnerxy kernel: [ 7290.165826] PPP MPPE Compression module registered
Jan  6 11:28:12 rechnerxy pppd[5401]: MPPE 128-bit stateless compression enabled
Jan  6 11:28:12 rechnerxy pppd[5401]: local  IP address 10.23.23.52
Jan  6 11:28:12 rechnerxy pppd[5401]: remote IP address 10.23.23.50
Jan  6 11:28:12 rechnerxy pppd[5401]: primary   DNS address 8.8.8.8
Jan  6 11:28:12 rechnerxy pppd[5401]: secondary DNS address 8.8.4.4
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info> VPN connection 'blabla' (IP4 Config Get) reply received from old-style plugin.
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info> VPN Gateway: 46.59.169.149
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info> Tunnel Device: ppp0
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info> IPv4 configuration:
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Internal Address: 10.23.23.52
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Internal Prefix: 32
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Internal Point-to-Point Address: 10.23.23.50
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Maximum Segment Size (MSS): 0
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Forbid Default Route: no
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Internal DNS: 8.8.8.8
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   Internal DNS: 8.8.4.4
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info>   DNS Domain: '(none)'
Jan  6 11:28:12 rechnerxy NetworkManager[1057]: <info> No IPv6 configuration
Jan  6 11:28:13 rechnerxy NetworkManager[1057]: <info> VPN connection 'blabla' (IP Config Get) complete.
Jan  6 11:28:13 rechnerxy NetworkManager[1057]: <info> Policy set 'blabla' (ppp0) as default for IPv4 routing and DNS.
Jan  6 11:28:13 rechnerxy NetworkManager[1057]: <info> Writing DNS information to /sbin/resolvconf
Jan  6 11:28:13 rechnerxy dnsmasq[1547]: setting upstream servers from DBus
Jan  6 11:28:13 rechnerxy dnsmasq[1547]: using nameserver 8.8.4.4#53
Jan  6 11:28:13 rechnerxy dnsmasq[1547]: using nameserver 8.8.8.8#53
Jan  6 11:28:13 rechnerxy NetworkManager[1057]: <info> VPN plugin state changed: started (4)
Jan  6 11:28:13 rechnerxy dbus[776]: [system] Activating service name='org.freedesktop.nm_dispatcher' (using servicehelper)
Jan  6 11:28:13 rechnerxy dbus[776]: [system] Successfully activated service 'org.freedesktop.nm_dispatcher'
Jan  6 11:28:19 rechnerxy ntpdate[5487]: adjust time server 91.189.94.4 offset -0.052041 sec

When I connect the Network Cable to the 2nd computer (Netbook) and start Windows - and then add the VPN with the similar Steps 1,2,3 - it connects - and also loading certificate, wiki etc. works.

I searched and tried a lot (also asked in a german ubuntu forum) - but so far nothing has worked.

Recently I tried a “clean” netrunner from a USB Stick/Live USB - and just added the vpn with the 3 steps - without success. But funny thing: there the connection didn’t work at all (was a different cable, but same house).

netrunner Live USB netbook
/var/log/syslog

Jan  7 15:31:00 netrunner NetworkManager[1490]: <info> Starting VPN service 'pptp'...
Jan  7 15:31:00 netrunner NetworkManager[1490]: <info> VPN service 'pptp' started (org.freedesktop.NetworkManager.pptp), PID 3537
Jan  7 15:31:00 netrunner NetworkManager[1490]: <info> VPN service 'pptp' appeared; activating connections
Jan  7 15:31:00 netrunner NetworkManager[1490]: <info> VPN plugin state changed: starting (3)
Jan  7 15:31:01 netrunner NetworkManager[1490]: <info> VPN connection 'acphis-office' (Connect) reply received.
Jan  7 15:31:01 netrunner pppd[3538]: Plugin /usr/lib/pppd/2.4.5/nm-pptp-pppd-plugin.so loaded.
Jan  7 15:31:01 netrunner pppd[3538]: pppd 2.4.5 started by root, uid 0
Jan  7 15:31:01 netrunner pppd[3538]: Using interface ppp0
Jan  7 15:31:01 netrunner pppd[3538]: Connect: ppp0 <--> /dev/pts/8
Jan  7 15:31:01 netrunner pptp[3541]: nm-pptp-service-3537 log[main:pptp.c:314]: The synchronous pptp option is NOT activated
Jan  7 15:31:01 netrunner NetworkManager[1490]: <warn> /sys/devices/virtual/net/ppp0: couldn't determine device driver; ignoring...
Jan  7 15:31:01 netrunner NetworkManager[1490]:    SCPlugin-Ifupdown: devices added (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan  7 15:31:01 netrunner NetworkManager[1490]:    SCPlugin-Ifupdown: device added (path: /sys/devices/virtual/net/ppp0, iface: ppp0): no ifupdown configuration found.
Jan  7 15:31:01 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'
Jan  7 15:31:01 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_disp:pptp_ctrl.c:739]: Received Start Control Connection Reply
Jan  7 15:31:01 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_disp:pptp_ctrl.c:773]: Client connection established.
Jan  7 15:31:02 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 7 'Outgoing-Call-Request'
Jan  7 15:31:02 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_disp:pptp_ctrl.c:858]: Received Outgoing Call Reply.
Jan  7 15:31:02 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_disp:pptp_ctrl.c:897]: Outgoing call established (call ID 0, peer's call ID 64993).
Jan  7 15:31:05 netrunner pppd[3538]: CHAP authentication succeeded
Jan  7 15:31:05 netrunner pppd[3538]: LCP terminated by peer (MPPE required but cannot negotiate MPPE key length)
Jan  7 15:31:05 netrunner pptp[3553]: nm-pptp-service-3537 log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed
Jan  7 15:31:05 netrunner pptp[3553]: nm-pptp-service-3537 log[callmgr_main:pptp_callmgr.c:258]: Closing connection (shutdown)
Jan  7 15:31:05 netrunner pptp[3553]: nm-pptp-service-3537 log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 12 'Call-Clear-Request'
Jan  7 15:31:05 netrunner pptp[3553]: nm-pptp-service-3537 log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed
Jan  7 15:31:05 netrunner pptp[3553]: nm-pptp-service-3537 log[call_callback:pptp_callmgr.c:79]: Closing connection (call state)
Jan  7 15:31:05 netrunner pppd[3538]: Modem hangup
Jan  7 15:31:05 netrunner pppd[3538]: Connection terminated.
Jan  7 15:31:05 netrunner NetworkManager[1490]: <warn> VPN plugin failed: 1
Jan  7 15:31:05 netrunner NetworkManager[1490]:    SCPlugin-Ifupdown: devices removed (path: /sys/devices/virtual/net/ppp0, iface: ppp0)
Jan  7 15:31:05 netrunner pppd[3538]: Exit.
Jan  7 15:31:05 netrunner NetworkManager[1490]: <warn> VPN plugin failed: 1
Jan  7 15:31:05 netrunner NetworkManager[1490]: <info> VPN plugin state changed: stopped (6)
Jan  7 15:31:05 netrunner NetworkManager[1490]: <info> VPN plugin state change reason: 0
Jan  7 15:31:05 netrunner NetworkManager[1490]: <info> Policy set 'Wired connection 1' (eth0) as default for IPv4 routing and DNS.
Jan  7 15:31:05 netrunner NetworkManager[1490]: <warn> error disconnecting VPN: Could not process the request because no VPN connection was active.
Jan  7 15:31:11 netrunner NetworkManager[1490]: <info> VPN service 'pptp' disappeared

So - three days of trying so far - guess asking here in the forum if anyone has a hint / clue / tip seems like a good idea.

Any help would be great.

First thing to cheack is that you have the correct network-manager plugin installed for the type of VPN your trying to access:
network-manager-vpnc
network-manager-openvpn
network-manager-pptp

http://ubuntuguide.org/wiki/Kubuntu_Precise_Network_Management#VPN_through_Network_Manager

I did already install network-manager-pptp before.
As I said: it is connecting - I even got the IP from the place the server is located - but I can´t access anything through a browser.

I now installed the other two also - just in case - but that didn´t change the error.

Can you access with a direct ip entered in the browser ?
I suspect that the dns was not set up correctly. Can you try to set it manually to either your VPNs dns or the google one 8.8.8.8 and test again.

No I can’t access - entering an direct IP thats what I am doing (without the response).
So -
1.on windows: starting vpn-connection → connection is shown as activated → opening browser + entering IP/owncloud → i can access owncloud (for example)
2.on netrunner: starting vpn-connection → connection is shown as activated → opening browser + entering IP/owncloud → unable to connect

DNS should be working - I already tried that through the ubuntu forum I mentioned:

But this was with the help in the forum - I am not that much of an expert in the command line.

So:
dig netrunner-os.com @8.8.8.8
not connected results in:

[code]; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> netrunner-os.com @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2606
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;netrunner-os.com. IN A

;; ANSWER SECTION:
netrunner-os.com. 3599 IN A 54.214.251.78

;; Query time: 166 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Jan 08 13:42:26 CET 2015
;; MSG SIZE rcvd: 61[/code]

dig netrunner-os.com @8.8.8.8
with connected VPN (pptp) results in:

; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> netrunner-os.com @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1263
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;netrunner-os.com.              IN      A

;; ANSWER SECTION:
netrunner-os.com.       3035    IN      A       54.214.251.78

;; Query time: 51 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Jan 08 13:44:10 CET 2015
;; MSG SIZE  rcvd: 61

Hope thats what you meant.

So both times you get the right ip. Then I am really not sure why you can’t access anything in the browser itself.

A weird error :wink: - thats true.
When I am connected and go to a domain/whois search-website with my IP - I seem to have the IP of the server (with location shown nearby) - so the connection really seems to be there.
But not working for whatever reason.
My first thought was some firefox extension - but as i also won´t work on web browser and a blank chromium install…

Another thing I noticed, that I can’t ping the server on Linux/netrunner - but on windows.

To make it even more weird: my partner uses Kubuntu 14.04 - and it works - only difference was the location we tested in.