http://www.ISAserver.org ------------------------------------------------------- Actually it quite possible the fact that the network I was trying to connection is on the same subnet as my own network, 192.168.1.x. I know for sure it's nothing to do with my Windows XP as I connected it directly to the net using a cable/dsl router giving it an IP of 10.x.x.x and was able to successfully connect to the VPN server. Andrew -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G Sent: Wednesday, March 22, 2006 10:02 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN over the net http://www.ISAserver.org ------------------------------------------------------- It's a reset of the connection (termination). If I read that string properly, it looks the 206 address is resetting the connection, which is what I think Greg (right person?) was meaning when he said it looks like a client side issue. Cordially yours, Jerry G. Young II +From Blackberry+ MCSE (4.0/W2K) Atlanta EES Implementation Team Lead HHS Engineering Unisys 11493 Sunset Hills Rd. Reston, VA 20190 Office: 703-579-2727 Cell: 703-625-1468 THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx> To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx> Sent: Wed Mar 22 22:03:42 2006 Subject: [isalist] Re: VPN over the net ?? ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Wednesday, March 22, 2006 9:22 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: VPN over the net Bingo: "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP", "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0" Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew English Sent: Wednesday, March 22, 2006 8:14 PM To: isalist@xxxxxxxxxxxxx Subject: RE: [isalist] Re: VPN over the net Here is a dump off the ISA server just taken now using Ethereal. This time I just used the access rule I created for PPTP and L2PT which gave me the 619 error machine. I looked it up and several sites say that you need to have port 1723 option and protocol #47 GRE as well. I don't see any GRE in ISA's protocol list so I am not sure if it's open by default or not. "77", "20.354517", "206.248.138.108", "67.69.15.20", "TCP", "60637 > pptp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1412" "78", "20.356294", "67.69.15.20", "206.248.138.108", "TCP", "pptp > 60637 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0 MSS=1460" "79", "20.708283", "206.248.138.108", "67.69.15.20", "TCP", "60637 > pptp [ACK] Seq=1 Ack=1 Win=65535 Len=0" "80", "20.711863", "206.248.138.108", "67.69.15.20", "PPTP", "Start-Control-Connection-Request" "81", "20.719783", "67.69.15.20", "206.248.138.108", "PPTP", "Start-Control-Connection-Reply" "82", "21.109566", "206.248.138.108", "67.69.15.20", "PPTP", "Outgoing-Call-Request" "83", "21.133715", "67.69.15.20", "206.248.138.108", "PPTP", "Outgoing-Call-Reply" "84", "21.489766", "206.248.138.108", "67.69.15.20", "PPTP", "Set-Link-Info" "85", "21.492862", "206.248.138.108", "67.69.15.20", "PPP LCP", "Configuration Request" "86", "21.514942", "67.69.15.20", "206.248.138.108", "PPP LCP", "Configuration Request" "87", "21.515068", "67.69.15.20", "206.248.138.108", "PPP LCP", "Configuration Ack" "88", "21.687898", "67.69.15.20", "206.248.138.108", "TCP", "pptp > 60637 [ACK] Seq=189 Ack=349 Win=65187 Len=0" "89", "21.881650", "206.248.138.108", "67.69.15.20", "PPP LCP", "Configuration Reject" "90", "21.881897", "67.69.15.20", "206.248.138.108", "PPP LCP", "Configuration Request" "91", "21.982027", "206.248.138.108", "67.69.15.20", "GRE", "Encapsulated PPP" "92", "22.088583", "206.248.138.108", "67.69.15.20", "PPP LCP", "Configuration Ack" "93", "22.089048", "67.69.15.20", "206.248.138.108", "PPTP", "Set-Link-Info" "94", "22.090538", "206.248.138.108", "67.69.15.20", "PPP LCP", "Identification" "95", "22.090965", "206.248.138.108", "67.69.15.20", "PPP LCP", "Identification" "96", "22.092652", "206.248.138.108", "67.69.15.20", "PPTP", "Set-Link-Info" "97", "22.102192", "67.69.15.20", "206.248.138.108", "PPP CHAP", "Challenge" "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP", "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0" Regards, Andrew ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx