Quoting Michael Bretterklieber <[EMAIL PROTECTED]>:

> Hi,
> ...
>
> Perhaps GRE is blocked somewhere (Firewall)?
>
> bye,
> --
> ------------------------------- ----------------------------------
> Michael Bretterklieber          - http://www.bretterklieber.com
> ------------------------------ ----------------------------------
>
>
>

I thought the follwing ipfilter rules would have done the trick:

----------------------------------------------------------------------
# allow PPTP client
pass in  log quick on xl0 proto gre from [SGL server IP]/32 to any
pass out log quick on xl0 proto gre from any to any
pass in  log quick on xl0 proto tcp from [SGL server IP]/32 port = 1723 to any
pass out log quick on xl0 proto tcp from any to any port = 1723
----------------------------------------------------------------------

Perhaps I missed something, however, the firewall log does show "p" (pass) for
all entries during attempted negotiation.

I'm starting to think that FreeBSD's mpd PPTP may be incompatible with
SnapGearLITE's UCLinux PPTP interpretation (although SGL works like a champ
with XP and Linux clients).  Unfortunately, the appliance in question has been
discontinued and the company taken over (and forgotten?) by Cyberguard.

Thanks!

--
Walentyn
_______________________________________________
freebsd-stable@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to