RE: Outbound PPTP
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 3 Nov 2004 08:55:24 -0600
Hi Phil,
What type of connection are you using on the external interface of the
ISA firewall?
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: n1303 [mailto:n1303@xxxxxxxxxxx]
Sent: Wednesday, November 03, 2004 8:01 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Outbound PPTP
http://www.ISAserver.org
Hi Tom,
It seems that have done every things right, but without any result for
outbound PPTP.
I tried without ISA and it works fine. My problem is that I need ISA
I have something that filter the VPN connection, but I don't find what.
Phil
At 14:36 03/11/2004, you wrote:
>http://www.ISAserver.org
>
>No user defined filter is required.
>
>
>Tom
>www.isaserver.org/shinder
>Tom and Deb Shinder's Configuring ISA Server 2004
>http://tinyurl.com/3xqb7
>MVP -- ISA Firewalls
>
>
>-----Original Message-----
>From: n1303 [mailto:n1303@xxxxxxxxxxx]
>Sent: Wednesday, November 03, 2004 7:23 AM
>To: [ISAserver.org Discussion List]
>Subject: [isalist] RE: Outbound PPTP
>
>http://www.ISAserver.org
>
>Hi Tom,
>
>When PPTP passthrough is enable, IP 47 is automaticlaly allowed. I have
>nothing about 1723 in the IP filter
>
>
>I try this filter :
>Outbound
>Local port : Dynamic
>Distant port : Fixed port - 1723
>
>I will tell you, if it works
>
>Thanks
>
>Phil
>
>
>
>
>t 14:03 03/11/2004, you wrote:
> >http://www.ISAserver.org
> >
> >Hi Phil,
> >
> >When you enable PPTP passthrough, outbound 1723 and IP 47 are
> >automaticlaly allowed.
> >
> >HTH,
> >
> >
> >Tom
> >www.isaserver.org/shinder
> >Tom and Deb Shinder's Configuring ISA Server 2004
> >http://tinyurl.com/3xqb7
> >MVP -- ISA Firewalls
> >
> >
> >-----Original Message-----
> >From: n1303 [mailto:n1303@xxxxxxxxxxx]
> >Sent: Wednesday, November 03, 2004 6:46 AM
> >To: [ISAserver.org Discussion List]
> >Subject: [isalist] RE: Outbound PPTP
> >
> >http://www.ISAserver.org
> >
> >Hi Tom,
> >
> >In the VPN kit I can read :
> >
> >Configure the ISA Server firewall to perform PPTP passtrough
> >A special combination application filter/packet filter enables
passing
> >GRE
> >(IP Protocol 47) and TCP port 1723 through the ISA server firewall to
> >the
> >PPTP VPN server on the Internet. IP Packet filters normally do not
>apply
> >to
> >internal network clients.
> >
> >IP 47 is all right
> >What can I do with TCP port 1723, if needed ?
> >
> >I do strictly the same thing as shown in the kit, but without result
>for
> >
> >outbound PPTP.
> >
> >Thanks
> >
> >Phil
> >
> >
> >At 13:33 03/11/2004, you wrote:
> > >http://www.ISAserver.org
> > >
> > >Hi Phil,
> > >
> > >Make sure the firewall client is disabled before establishing the
> > >connection.
> > >
> > >Other than that, you've done everything right.
> > >
> > >Check out ISP and other non ISA firewall related issues.
> > >
> > >
> > >Tom
> > >www.isaserver.org/shinder
> > >Tom and Deb Shinder's Configuring ISA Server 2004
> > >http://tinyurl.com/3xqb7
> > >MVP -- ISA Firewalls
> > >
> > >
> > >-----Original Message-----
> > >From: n1303 [mailto:n1303@xxxxxxxxxxx]
> > >Sent: Wednesday, November 03, 2004 6:21 AM
> > >To: [ISAserver.org Discussion List]
> > >Subject: [isalist] RE: Outbound PPTP
> > >
> > >http://www.ISAserver.org
> > >
> > >Hi Tom,
> > >
> > >I try VPN client configured as a SecureNAT client as well as a
>Firewall
> > >client
> > >PPTP passthrough enabled on 2000 ISA firewall - OK
> > >IP Routing enabled - OK
> > >
> > >I always get error 800 (impossible to etablish VPN connexion)
> > >
> > >My configuration ISA 2000, SP1, integrated mode, W2k server SP2
> > >
> > >I have no more idea
> > >
> > >Thanks in advance
> > >
> > >Phil
> > >
> > >
> > >
> > >
> > >At 12:35 03/11/2004, you wrote:
> > > >http://www.ISAserver.org
> > > >
> > > >Hi Phil,
> > > >
> > > >Only requirements for outbound PPTP:
> > > >
> > > >1. Machine is firewall client
> > > >2. PPTP passthrough enabled on 2000 ISA firewall
> > > >3. IP Routing enabled
> > > >
> > > >That's it. The rest is layer 1/2 and layer 8.
> > > >
> > > >HTH,
> > > >
> > > >
> > > >Tom
> > > >www.isaserver.org/shinder
> > > >Tom and Deb Shinder's Configuring ISA Server 2004
> > > >http://tinyurl.com/3xqb7
> > > >MVP -- ISA Firewalls
> > > >
> > > >
> > > >-----Original Message-----
> > > >From: n1303 [mailto:n1303@xxxxxxxxxxx]
> > > >Sent: Wednesday, November 03, 2004 4:30 AM
> > > >To: [ISAserver.org Discussion List]
> > > >Subject: [isalist] Outbound PPTP
> > > >
> > > >http://www.ISAserver.org
> > > >
> > > >Hi All,
> > > >
> > > >My inbound PPTP to ISA works fine but outbound PPTP from internet
> > > >network
> > > >does not.
> > > >
> > > >I read the VPN kit and I have the following :
> > > >- VPN internal client (XP) is configured as firewall
> > > >- IP routing is enabled
> > > >- PPTP passthrough is enabled (the filter SecureNAT PPTP is OK)
> > > >
> > > >But it doesn't work !
> > > >
> > > >What about TCP 1723 ? Must i do something ?
> > > >
> > > >Any idea would be appreciate
> > > >
> > > >Phil
> > > >
> > > >
> > > >
> > > >------------------------------------------------------
> > > >List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >ISA Server Newsletter:
>http://www.isaserver.org/pages/newsletter.asp
> > > >ISA Server FAQ:
>http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > >------------------------------------------------------
> > > >Other Internet Software Marketing Sites:
> > > >World of Windows Networking: http://www.windowsnetworking.com
> > > >Leading Network Software Directory: http://www.serverfiles.com
> > > >No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > >Windows Security Resource Site: http://www.windowsecurity.com/
> > > >Network Security Library: http://www.secinf.net/
> > > >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > >------------------------------------------------------
> > > >You are currently subscribed to this ISAserver.org Discussion
List
> >as:
> > > >tshinder@xxxxxxxxxxxxxxxxxx
> > > >To unsubscribe visit
> > >http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > >
> > > >------------------------------------------------------
> > > >List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >ISA Server Newsletter:
>http://www.isaserver.org/pages/newsletter.asp
> > > >ISA Server FAQ:
>http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > >------------------------------------------------------
> > > >Other Internet Software Marketing Sites:
> > > >World of Windows Networking: http://www.windowsnetworking.com
> > > >Leading Network Software Directory: http://www.serverfiles.com
> > > >No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > >Windows Security Resource Site: http://www.windowsecurity.com/
> > > >Network Security Library: http://www.secinf.net/
> > > >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > >------------------------------------------------------
> > > >You are currently subscribed to this ISAserver.org Discussion
List
> >as:
> > > >n1303@xxxxxxxxxxx
> > > >To unsubscribe visit
> > >http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >------------------------------------------------------
> > >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > >ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > >------------------------------------------------------
> > >Other Internet Software Marketing Sites:
> > >World of Windows Networking: http://www.windowsnetworking.com
> > >Leading Network Software Directory: http://www.serverfiles.com
> > >No.1 Exchange Server Resource Site: http://www.msexchange.org
> > >Windows Security Resource Site: http://www.windowsecurity.com/
> > >Network Security Library: http://www.secinf.net/
> > >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > >------------------------------------------------------
> > >You are currently subscribed to this ISAserver.org Discussion List
>as:
> > >tshinder@xxxxxxxxxxxxxxxxxx
> > >To unsubscribe visit
> >http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > >------------------------------------------------------
> > >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > >ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > >------------------------------------------------------
> > >Other Internet Software Marketing Sites:
> > >World of Windows Networking: http://www.windowsnetworking.com
> > >Leading Network Software Directory: http://www.serverfiles.com
> > >No.1 Exchange Server Resource Site: http://www.msexchange.org
> > >Windows Security Resource Site: http://www.windowsecurity.com/
> > >Network Security Library: http://www.secinf.net/
> > >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > >------------------------------------------------------
> > >You are currently subscribed to this ISAserver.org Discussion List
>as:
> > >n1303@xxxxxxxxxxx
> > >To unsubscribe visit
> >http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >World of Windows Networking: http://www.windowsnetworking.com
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org
> >Windows Security Resource Site: http://www.windowsecurity.com/
> >Network Security Library: http://www.secinf.net/
> >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >tshinder@xxxxxxxxxxxxxxxxxx
> >To unsubscribe visit
>http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >World of Windows Networking: http://www.windowsnetworking.com
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org
> >Windows Security Resource Site: http://www.windowsecurity.com/
> >Network Security Library: http://www.secinf.net/
> >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >n1303@xxxxxxxxxxx
> >To unsubscribe visit
>http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>World of Windows Networking: http://www.windowsnetworking.com
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>tshinder@xxxxxxxxxxxxxxxxxx
>To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>World of Windows Networking: http://www.windowsnetworking.com
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>n1303@xxxxxxxxxxx
>To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
