G'Day Again all

Got a situation where users behind my IPTABLES firewall need to make a VPN connection from their win2k professional workstations to a server in Switzerland (POPTOP). From outside the firewall, any user can connect no problems and work away, however when they are inside my LAN, they are unable to conenct. The password verification just times out.

I have set my firewall to pass GRE type packets and all any packet initiated from my network to pass back to internal hosts.

Can any one tell me what I am missing. Thanks for you time

John Brandis

OK, changed the PTABLES to accept and forward tcp port 1723 to the client on my LAN. This in conjunction worked fine. I thought all was going to work, when I then tried the exact same setup to another host onmyLAN, which failed. It works fine to one host, but not to another...

Can any one help ??????

ok I was going to suggest you make sure port 1723 is redirected back to the source and that IPTABLES will forward IP protocol 47 type. "which you must have done if it works to the outside system"

Anyway this is most likely your problem:

Currently, only one machine can have an open virtual circuit to another machine over pptp. If another inside machine connects to machine X, the first inside machine will lose its connection because packets will be intermixed.
This problem exists because this protocol is not port based.

/Raz