|
||||||||
I got it working. Apparently the IPSEC tunnel rules are parsed somehow with the PPTP users. When I disable my tunnel to my business, which has an overlapping 192.168.x.x network, it works fine. (I don't remember seeing this anywhere in the archives.) I just need to exclude it from my ISPEC tunnel. ie. I can't use the broad 192.168.0.0/16 rule. I'm happy now. Robert -----Original Message----- From: Robert [mailto:valnar at yahoo dot com] Sent: Monday, December 05, 2005 3:19 PM To: m0n0wall at lists dot m0n0 dot ch Subject: RE: [m0n0wall] RE: PPTP Server not working I have looked at every post regarding my problem and 99% of them say to simply make sure there is a PPTP rule which allows access to the LAN. I did that a long time ago. As I said, it used to work fine with the betas. With 1.2, something is broken. I've done the following and had an interesting result: * Connected a computer via PPTP to my m0n0wall. * Had laptop continually ping a computer on my LAN, which *should* respond, but doesn't. Result is typical "request timed out" * Under Interfaces:WAN, made a change to the "Block Private networks" checkbox. This allowed a single ICMP packet to go through while it was saving, then it went back to request timed out. Somehow this is clearing something to work, although I can find nothing in the logs indicating it. -Robert -----Original Message----- From: Lee Sharp [mailto:leesharp at hal dash pc dot org] Sent: Monday, December 05, 2005 11:02 AM To: m0n0wall at lists dot m0n0 dot ch Subject: Re: [m0n0wall] RE: PPTP Server not working From: "Robert" <valnar at yahoo dot com> > No one else has a problem with PPTP? Well, this sure shows you do not search thoroughly. There are several threads of problems like this with PPtP. >> I have a WRAP board with the 1.2 release and cannot get PPTP Server >> working (any more). I used to work fine on 1.1 and some of the beta >> releases. I even wiped it clean and put in all my favorite >> preferences from scratch and it still doesn't work properly. >> I added the firewall rule which allows PPTP clients access to all >> other interfaces, and that successfully allowed my laptop to ping the >> internal m0n0wall LAN IP address, but no further. I still cannot get >> to any internal machines. Is there another firewall rule or trick I >> need to do? >> Do I need to change anything on the NAT page? I have several boxes out in production. (Over 10 now) One of them I can PPtP in, and get out on the internet with that IP address, and ping all m0n0 interfaces, but nothing on the LAN subnet. I have not had time to figure out why. Others with a similar problem found resetting to default, and building the config via the web gui fixed it. I have left mine "broken" to examine closely when I have time. I still have not had time. Lee --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch |