Re: npppd pptp hangs

2020-04-06 Thread Vitaliy Makkoveev
On Sat, Apr 04, 2020 at 08:22:27PM +0200, Marko Cupać wrote: > On 2020-03-31 10:07, Marko Cupać wrote: > > On Mon, 30 Mar 2020 14:33:46 +0300 > > Vitaliy Makkoveev wrote: > > > > > On Mon, Mar 30, 2020 at 02:28:08PM +0300, Vitaliy Makkoveev wrote: > > > > You have pipex(4) disabled. Is it still h

Re: npppd pptp hangs

2020-04-04 Thread Marko Cupać
On 2020-03-31 10:07, Marko Cupać wrote: On Mon, 30 Mar 2020 14:33:46 +0300 Vitaliy Makkoveev wrote: On Mon, Mar 30, 2020 at 02:28:08PM +0300, Vitaliy Makkoveev wrote: > You have pipex(4) disabled. Is it still hangs with disabled > pipex(4)? As I discovered > (https://marc.info/?t=1585299768000

Re: npppd pptp hangs

2020-03-31 Thread Marko Cupać
On Mon, 30 Mar 2020 14:33:46 +0300 Vitaliy Makkoveev wrote: > On Mon, Mar 30, 2020 at 02:28:08PM +0300, Vitaliy Makkoveev wrote: > > You have pipex(4) disabled. Is it still hangs with disabled > > pipex(4)? As I discovered > > (https://marc.info/?t=15852997681&r=1&w=2), npppd with pipex(4) >

Re: npppd pptp hangs

2020-03-30 Thread Vitaliy Makkoveev
On Mon, Mar 30, 2020 at 02:28:08PM +0300, Vitaliy Makkoveev wrote: > You have pipex(4) disabled. Is it still hangs with disabled pipex(4)? > As I discovered (https://marc.info/?t=15852997681&r=1&w=2), npppd > with pipex(4) enabled and non-NULL "idle-timeout" option will crash > kernel. You can

Re: npppd pptp hangs

2020-03-30 Thread Vitaliy Makkoveev
On Mon, Mar 30, 2020 at 12:47:13PM +0200, Marko Cupać wrote: > On Sat, 28 Mar 2020 01:46:41 +0300 > Vitaliy Makkoveev wrote: > > > Can you try latest snapshot? > > Unfortunately, the box that runs npppd is the most important machine on > my network (GRE/IPsec hub for multiple branch offices), I

Re: npppd pptp hangs

2020-03-30 Thread Marko Cupać
On Sat, 28 Mar 2020 01:46:41 +0300 Vitaliy Makkoveev wrote: > Can you try latest snapshot? Unfortunately, the box that runs npppd is the most important machine on my network (GRE/IPsec hub for multiple branch offices), I can't take the risk. > Can you share your npppd.conf? Below, I have redac

Re: npppd pptp hangs

2020-03-27 Thread Vitaliy Makkoveev
> On 24 Mar 2020, at 12:09, Marko Cupać wrote: > > On Tue, 24 Mar 2020 09:34:09 +0100 > Marko Cupać wrote: > >> On Tue, 24 Mar 2020 07:13:27 +1000 >> Stuart Longland wrote: >> >>> On 23/3/20 10:26 pm, Marko Cupać wrote: Anything I can do to avoid future hangs? > > I got another hang,

Re: npppd pptp hangs

2020-03-24 Thread Marko Cupać
On Tue, 24 Mar 2020 09:34:09 +0100 Marko Cupać wrote: > On Tue, 24 Mar 2020 07:13:27 +1000 > Stuart Longland wrote: > > > On 23/3/20 10:26 pm, Marko Cupać wrote: > > > Anything I can do to avoid future hangs? I got another hang, this time killing npppd process crashed complete OS (sorry for ph

Re: npppd pptp hangs

2020-03-24 Thread Marko Cupać
On Tue, 24 Mar 2020 07:13:27 +1000 Stuart Longland wrote: > On 23/3/20 10:26 pm, Marko Cupać wrote: > > Anything I can do to avoid future hangs? > > Whilst probably not the answer you're looking for: moving away from > PPTP would be a good start. > > The MSCHAPv2 authentication used in PPTP is

Re: npppd pptp hangs

2020-03-23 Thread Stuart Longland
On 23/3/20 10:26 pm, Marko Cupać wrote: > Anything I can do to avoid future hangs? Whilst probably not the answer you're looking for: moving away from PPTP would be a good start. The MSCHAPv2 authentication used in PPTP is vulnerable to dictionary attacks and the RC4 cipher used in MPPE (the secu

npppd pptp hangs

2020-03-23 Thread Marko Cupać
Hi, my npppd pptp server has recently got increase from ~20 to >200 concurrent users. So far it worked flawlessly for years, but before few minutes it become unresponsive. It stopped logging at one point (I have log redirected to its own file, /var/log/npppd). npppctl also hanged, returning nothi