Bug 2156062 - PPTP nf_conntrack Fedora 36->37 & 38 no workie
Summary: PPTP nf_conntrack Fedora 36->37 & 38 no workie
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: libnetfilter_conntrack
Version: 39
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Paul P Komkoff Jr
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-12-23 16:04 UTC by Stuart Anderson
Modified: 2024-11-27 21:04 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-11-27 21:04:14 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Stuart Anderson 2022-12-23 16:04:45 UTC
Description of problem:
In Fedora 36, I had an issue with PPTP VPN and had to run:
sudo sysctl net.netfilter.nf_conntrack_helper=1

then

echo net.netfilter.nf_conntrack_helper=1 | sudo tee /etc/sysctl.d/98-nf_conntrack.conf

https://ask.fedoraproject.org/t/pptp-vpn-blocked-by-firewall/8097

I upgraded to Fedora 37 and PPTP VPN no longer works.  nf_contract_helper=1 is no longer valid.  The PPTP is being blocked and I can find no reason why.  All troubleshooting of nmcli and firewall yields nothing.

Version-Release number of selected component (if applicable):
6.0.12-300.fc37.x86_64

How reproducible:
can't vpn 

Steps to Reproduce:
1. Have working PPTP VPN in Fedora 36 via https://ask.fedoraproject.org/t/pptp-vpn-blocked-by-firewall/8097
2. Upgrade to Fedora 37
3. Check all VPN and IP settings on both ends
4. Realize the problem is Fedora being broken again because I had problems with my OS the first time and 37 changed how to unlock PPTP without giving us a memo.

Actual results:
VPN via PPTP

Expected results:
actually connect and not being told PPTP is unsecure

Additional info:

Comment 1 Stuart Anderson 2023-01-02 02:42:15 UTC
Was there a change to net.netfilter from 36 to 37?  Any dependencies or code changes to make this old config setting irrelevant?

Comment 2 Paul Wouters 2023-07-06 02:34:09 UTC
changed compontent to libnetfilter_conntrack. Not sure if it is that component or the kernel itself

Comment 3 Aoife Moloney 2023-11-23 00:50:01 UTC
This message is a reminder that Fedora Linux 37 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 37 on 2023-12-05.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '37'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 37 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 4 Stuart Anderson 2023-11-23 03:06:59 UTC
Problem persists in 38.  Older PPTP connections will not function since the work around for Fedora 36.  It's a shame nobody has fixed this.

Comment 5 Aoife Moloney 2023-12-06 11:48:26 UTC
Fedora Linux 37 entered end-of-life (EOL) status on None.

Fedora Linux 37 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 6 Stuart Anderson 2023-12-07 22:48:51 UTC
This problem still persists in Fedora 38 and 39.  PPTP tunnels are not working, but they work in Windows so we have a valid PPTP config.

Comment 7 Aoife Moloney 2024-11-08 10:45:51 UTC
This message is a reminder that Fedora Linux 39 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 39 on 2024-11-26.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
'version' of '39'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, change the 'version' 
to a later Fedora Linux version. Note that the version field may be hidden.
Click the "Show advanced fields" button if you do not see it.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora Linux 39 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora Linux, you are encouraged to change the 'version' to a later version
prior to this bug being closed.

Comment 8 Aoife Moloney 2024-11-27 21:04:14 UTC
Fedora Linux 39 entered end-of-life (EOL) status on 2024-11-26.

Fedora Linux 39 is no longer maintained, which means that it
will not receive any further security or bug fix updates. As a result we
are closing this bug.

If you can reproduce this bug against a currently maintained version of Fedora Linux
please feel free to reopen this bug against that version. Note that the version
field may be hidden. Click the "Show advanced fields" button if you do not see
the version field.

If you are unable to reopen this bug, please file a new report against an
active release.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.