I followed the directions to the "T", and I authenticate fine, but
cannot ping anything on the LAN or or get routed out through the WAN
connection.  I setup the Firewalla PPTP rules just like the
instructions, but still nodda.  Anyone know what i forgot?

Here is my xml file.  with a few things "X"'d out.




        <pptpd>
                <mode>server</mode>
                <redir/>
                <localip>192.168.1.254</localip>
                <remoteip>192.168.1.48</remoteip>
                <radius>
                        <server/>
                        <secret/>
                </radius>
                <req128/>
                <user>
                        <name>chris</name>
                        <ip/>
                        <password>p@ssw0rd</password>
                </user>
        </pptpd>
        <dnsmasq>
                <enable/>
        </dnsmasq>
        <snmpd>
                <syslocation/>
                <syscontact/>
                <rocommunity>public</rocommunity>
        </snmpd>
        <diag>
                <ipv6nat>
                        <ipaddr/>
                </ipv6nat>
        </diag>
        <bridge/>
        <syslog/>
        <nat>
                <rule>
                        <protocol>tcp</protocol>
                        <external-port>22</external-port>
                        <target>192.168.1.10</target>
                        <local-port>22</local-port>
                        <interface>wan</interface>
                        <descr>Midway Server</descr>
                </rule>
        </nat>
        <filter>
                <rule>
                        <type>pass</type>
                        <interface>wan</interface>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <descr/>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>192.168.1.10</address>
                                <port>22</port>
                        </destination>
                        <descr>NAT Midway</descr>
                </rule>
                <rule>
                        <interface>wan</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <address>192.168.1.11</address>
                                <port>21</port>
                        </destination>
                        <descr>NAT flugs laptop</descr>
                </rule>
                <rule>
                        <type>pass</type>
                        <interface>pptp</interface>
                        <protocol>tcp</protocol>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <descr/>
                </rule>
                <rule>
                        <type>pass</type>
                        <interface>opt2</interface>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                        <descr/>
                </rule>
                <rule>
                        <type>pass</type>
                        <interface>opt1</interface>
                        <source>
                                <any/>
                        </source>
                        <destination>
                                <network>lan</network>
                        </destination>
                        <descr/>
                </rule>
                <rule>
                        <type>pass</type>
                        <descr>Default LAN -&gt; any</descr>
                        <interface>lan</interface>
                        <source>
                                <network>lan</network>
                        </source>
                        <destination>
                                <any/>
                        </destination>
                </rule>
        </filter>
        <ipsec/>
        <aliases/>
        <proxyarp/>
        <wol/>