If the user is running an MS PPTP client that's actually "normal"
behavior. I see blocked packets from the public ip of my remote users
on my watchguard fireboxes all the time as well. Why it occurs (other
than a poor PPTP client) I do not know.
Jeff Scott wrote:
> Hi all,
> I have a v1.21 install using PPTP VPN. I have a rule that allows all =
> traffic from the VPN. I have noticed (via my router logs) that one of =
> our users connections is exhibiting odd behavior. I am seeing traffic =
> from his public IP address coming through the VPN. I only caught this =
> because he was trying to connect to the Internet (through the VPN) and =
> our Egress filter on the router caught it.
> Can anyone explain why his traffic would have a source address of his =
> pubic IP instead of his VPN IP?