Man Linux: Main Page and Category List


       pptpd - PPTP VPN daemon


       pptpd [ options ]


       pptpd   is   the  Poptop  PPTP  daemon,  which  manages  tunnelled  PPP
       connections encapsulated in GRE using the PPTP VPN  protocol.   It  may
       contain  features  like  IP  address  management  and  TCP  wrappers if
       compiled in.


       Here we document the  command  line  options.   See  pptpd.conf(5)  for
       configuration  directives, IP address allocation, routing, and firewall

       -b|--bcrelay internal-interface
              specifies that broadcasts  received  on  the  server’s  internal
              network interface should be relayed to the clients.

       -c|--conf conf-file
              specifies    the   configuration   file   for   pptpd   (default

              turns on debugging mode, causing more debugging messages  to  be
              sent to syslog.

       -e|--ppp pppd-program
              use pppd-program in place of the default pppd(8).

              run in the foreground instead of detaching from terminal

              display program usage.

              do  not  send the client’s IP address to ip-up scripts (required
              if you are using the  pppd(8)  ipparam  option  for  some  other

       -l|--listen x.x.x.x
              specifies the local interface IP address to listen on.

       -o|--option ppp-conf-file
              specifies  that  pptpd should specify an alternate configuration
              file   for   the   ppp   daemon   (the   default   is   normally
              /etc/ppp/options but may vary depending on your ppp daemon).

       -p|--pidfile pid-file
              specifies  an  alternate  location  to store the process ID file
              (default /var/run/

       -s|--speed baud
              specifies that the speed baud should be passed to the ppp daemon
              as  the  tty  speed to use (in some cases this is ignored by the
              ppp daemon).

       -t|--stimeout seconds
              specifies the number of seconds to wait  for  the  first  packet
              before  dropping  the  connection.  This  is a denial of service
              protection feature.

              update wtmp(5) as users connect and disconnect.  See wtmp(1).

       -C|--connections n
              limits the number of client connections that  may  be  accepted.
              Corresponds  to  the connections option in pptpd.conf.  If pptpd
              is allocating IP addresses (e.g.  --delegate is not  used)  then
              the number of connections is also limited by the remoteip option
              in pptpd.conf.

              delegates the allocation of  client  IP  addresses  to  pppd(8).
              Without  this  option,  which  is the default, pptpd manages the
              list of IP addresses  for  clients  and  passes  the  next  free
              address  to  pppd.   With  this  option,  pptpd does not pass an
              address, and so pppd may use radius or chap-secrets to  allocate
              an address.

              displays the current version of the pptp daemon.




       To  turn  on  debugging,  add  ’debug’  to /etc/pptpd.conf and your PPP
       options file, and restart pptpd.

       Typically the PPP options file is options.pptpd in /etc/ppp, though  on
       some  distributions  it may be pptpd-options.  Use your package manager
       to find it, e.g. ’rpm -ql pptpd | grep options’  or  ’dpkg  --listfiles
       pptpd | grep options’.

       You  may  need to configure syslogd to catch debug messages.  e.g. edit
       /etc/syslog.conf and add something similar to the example  below,  then
       restart syslogd.

       # debug logging
       *.debug;mail.none                                       /var/log/debug

       This  will  log  all  debug  information,  except  mail,  to  the  file
       /var/log/debug.  Note that this is a lot of information and might flood
       your  disks.   If performance is an issue, you can try turning off sync
       during your debugging, by prefixing the destination with ’-’.

       # debug logging
       *.debug;mail.none                                       -/var/log/debug

       Disable this line and restart syslog after you are done debugging.  See
       the syslog man pages for more details.


       Poptop is written by Matthew  Ramsay  <>,  David
       Luyer  <>,  Kevin  Thayer <>, Peter
       Galbavy <> and others. Development has  been
       moved   to   SourceForge   and   worked   on   by   Richard  de  Vroede
       <> since June 26, 2002.


       Copyright © 1999 Matthew Ramsay and others.

       Poptop is free software; you can redistribute it and/or modify it under
       the  terms  of  the GNU General Public License as published by the Free
       Software Foundation; either version 2, or (at your  option)  any  later

       Poptop  is  distributed in the hope that it will be useful, but WITHOUT
       ANY WARRANTY; without even the implied warranty of  MERCHANTABILITY  or
       FITNESS  FOR  A PARTICULAR PURPOSE.  See the GNU General Public License
       for more details.

       You should have received a copy of the GNU General Public License along
       with  Poptop; see the file COPYING.  If not, write to the Free Software
       Foundation, 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.


       The most recent version  of  Poptop  is  available  for  download  from
       SourceForge at


       pppd(8), pptpd(8), pptpd.conf(5).

                               29 December 2005