RE: Outbound PPTP
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 3 Nov 2004 07:03:42 -0600
Hi Phil,
When you enable PPTP passthrough, outbound 1723 and IP 47 are
automaticlaly allowed.
HTH,
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: n1303 [mailto:n1303@xxxxxxxxxxx]
Sent: Wednesday, November 03, 2004 6:46 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Outbound PPTP
http://www.ISAserver.org
Hi Tom,
In the VPN kit I can read :
Configure the ISA Server firewall to perform PPTP passtrough
A special combination application filter/packet filter enables passing
GRE
(IP Protocol 47) and TCP port 1723 through the ISA server firewall to
the
PPTP VPN server on the Internet. IP Packet filters normally do not apply
to
internal network clients.
IP 47 is all right
What can I do with TCP port 1723, if needed ?
I do strictly the same thing as shown in the kit, but without result for
outbound PPTP.
Thanks
Phil
At 13:33 03/11/2004, you wrote:
>http://www.ISAserver.org
>
>Hi Phil,
>
>Make sure the firewall client is disabled before establishing the
>connection.
>
>Other than that, you've done everything right.
>
>Check out ISP and other non ISA firewall related issues.
>
>
>Tom
>www.isaserver.org/shinder
>Tom and Deb Shinder's Configuring ISA Server 2004
>http://tinyurl.com/3xqb7
>MVP -- ISA Firewalls
>
>
>-----Original Message-----
>From: n1303 [mailto:n1303@xxxxxxxxxxx]
>Sent: Wednesday, November 03, 2004 6:21 AM
>To: [ISAserver.org Discussion List]
>Subject: [isalist] RE: Outbound PPTP
>
>http://www.ISAserver.org
>
>Hi Tom,
>
>I try VPN client configured as a SecureNAT client as well as a Firewall
>client
>PPTP passthrough enabled on 2000 ISA firewall - OK
>IP Routing enabled - OK
>
>I always get error 800 (impossible to etablish VPN connexion)
>
>My configuration ISA 2000, SP1, integrated mode, W2k server SP2
>
>I have no more idea
>
>Thanks in advance
>
>Phil
>
>
>
>
>At 12:35 03/11/2004, you wrote:
> >http://www.ISAserver.org
> >
> >Hi Phil,
> >
> >Only requirements for outbound PPTP:
> >
> >1. Machine is firewall client
> >2. PPTP passthrough enabled on 2000 ISA firewall
> >3. IP Routing enabled
> >
> >That's it. The rest is layer 1/2 and layer 8.
> >
> >HTH,
> >
> >
> >Tom
> >www.isaserver.org/shinder
> >Tom and Deb Shinder's Configuring ISA Server 2004
> >http://tinyurl.com/3xqb7
> >MVP -- ISA Firewalls
> >
> >
> >-----Original Message-----
> >From: n1303 [mailto:n1303@xxxxxxxxxxx]
> >Sent: Wednesday, November 03, 2004 4:30 AM
> >To: [ISAserver.org Discussion List]
> >Subject: [isalist] Outbound PPTP
> >
> >http://www.ISAserver.org
> >
> >Hi All,
> >
> >My inbound PPTP to ISA works fine but outbound PPTP from internet
> >network
> >does not.
> >
> >I read the VPN kit and I have the following :
> >- VPN internal client (XP) is configured as firewall
> >- IP routing is enabled
> >- PPTP passthrough is enabled (the filter SecureNAT PPTP is OK)
> >
> >But it doesn't work !
> >
> >What about TCP 1723 ? Must i do something ?
> >
> >Any idea would be appreciate
> >
> >Phil
> >
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >World of Windows Networking: http://www.windowsnetworking.com
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org
> >Windows Security Resource Site: http://www.windowsecurity.com/
> >Network Security Library: http://www.secinf.net/
> >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >tshinder@xxxxxxxxxxxxxxxxxx
> >To unsubscribe visit
>http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> >------------------------------------------------------
> >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> >ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> >------------------------------------------------------
> >Other Internet Software Marketing Sites:
> >World of Windows Networking: http://www.windowsnetworking.com
> >Leading Network Software Directory: http://www.serverfiles.com
> >No.1 Exchange Server Resource Site: http://www.msexchange.org
> >Windows Security Resource Site: http://www.windowsecurity.com/
> >Network Security Library: http://www.secinf.net/
> >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> >------------------------------------------------------
> >You are currently subscribed to this ISAserver.org Discussion List
as:
> >n1303@xxxxxxxxxxx
> >To unsubscribe visit
>http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>World of Windows Networking: http://www.windowsnetworking.com
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>tshinder@xxxxxxxxxxxxxxxxxx
>To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
>------------------------------------------------------
>List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
>ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
>------------------------------------------------------
>Other Internet Software Marketing Sites:
>World of Windows Networking: http://www.windowsnetworking.com
>Leading Network Software Directory: http://www.serverfiles.com
>No.1 Exchange Server Resource Site: http://www.msexchange.org
>Windows Security Resource Site: http://www.windowsecurity.com/
>Network Security Library: http://www.secinf.net/
>Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>------------------------------------------------------
>You are currently subscribed to this ISAserver.org Discussion List as:
>n1303@xxxxxxxxxxx
>To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
>Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
