I have a pfsense router with 10 virtual ip's running pptp. I have another pfsense router behind that router with a 1 to 1 nat from one of the virtual pi's. I have pptp enabled on that router and as long as I'm on the internal subnet, I can pptp into the router using the internal ip. I cannot pptp in from outside using the nated ip address. Could someone point me in the right direction on this?