next »

[Pinto]

Hello all!

This weekeng i've replaced my olf FW (FreeBSD4.7+ ipfilter) with PfSense.

I all went very well inded, except for the fact i could not pass packets to my W2k VPN server, my setup is as follows:


   ADSL -----DraytekADSL----WAN ----PFSense1.0RC1
                                                     |     |Bridge
                                                     |     |
                                                     |    |DMZ-----------|---MAIL server
                                                     |                      |--DNS Server+WEB
                                                     |
                                                  LAN   
                                                     |
                                                W2K Server PPTP




I've tried Portforwarding, firewall rules for port 1723, Protocol GRE nothing works until now,

Does anyone have some king of sugestion?

I think my boss will kill me!


TIA


Carlos Pinto
         

[sullrich]

VPN -> PPTP -> Redirect incoming PPTP connections to: $INSERT_INTERNAL_WIN2K_IP

[Pinto]

Allready tried that, no results until now.

I am doing some trobleshoting and it loks like my DMZ is reflecting the LAN, it+s normal?

When I ping 192.168.10.6(my pptp server) from PfSense using Wan Interface:

PING 192.168.10.6 (192.168.10.6) from 213.63.2.234: 56 data bytes
64 bytes from 213.xx.x.xxx: icmp_seq=0 ttl=127 time=0.536 ms
64 bytes from 213.xx.x.xxx: icmp_seq=1 ttl=127 time=0.327 ms

--- 192.168.10.6 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.327/0.431/0.536/0.105 ms



When I ping 192.168.10.6(my pptp server) from PfSense using LAN Interface:

PING 192.168.10.6 (192.168.10.6) from 192.168.10.3: 56 data bytes
64 bytes from 192.168.10.6: icmp_seq=0 ttl=128 time=0.444 ms
64 bytes from 192.168.10.6: icmp_seq=1 ttl=128 time=0.242 ms

--- 192.168.10.6 ping statistics ---
2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max/stddev = 0.242/0.343/0.444/0.101 ms


TIA

Carlos Pinto

[Pinto]

Its now solved, It hans+t to do With PFSense.

Que main question was the VPN had a misconfigured gateway address, so the pactecks could not travel from the internal IP to WAN.
...
It took me several hours to realize that...

Carlos Pinto