Hi Everyone,

I configured my astaro for pptp vpn so everytime Im away in our office I could get in into my real internal network.We have dhcp server inside our network and I configured astaro that everytime I get connected to my pptp connection I could get ip address coming from dhcp server not ip address from pptp default ip pool.

My question is how to create a policy that when I connected to my pptp vpn from outside to internal only 1 ip address I could ping or browse.

Thanks

"My question is how to create a policy that when I connected to my pptp vpn from outside to internal only 1 ip address I could ping or browse."

Do uou want to restrict your remote access to a single, internal IP?

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!

I think you are looking for access help, in this case, you make a rule either from your PPTP pool (for any pptp user) or from the pptp user himself (ie. JDOE), who can to the INTERNAL IP in question (say 192.168.1.5) on a certain, or all services.

This is common so that someone dialing in doesnt have the full rights to view everything on the lan, but can actually only see a single machine for what they need.

Also ensure that if the users dialing in are tech savvy that they simply cannot remote desktop to the one machine they are allowed to view, and then get full lan access from there. If this is a concern to you, you can adjust the permissions of the packet filter to only allow access to the specific ports you need the user to visit -on the target machine (such as port 80 etc..)

hope this is of help to you../.

__________________
Angelo Comazzetto
Astaro AG
--------------------------------------------------------
Visit the KB for documentation and help (www.astaro.com/kb)
Astaro is FULLY free for home use, including all subscriptions. Download it from http://my.astaro.com

To Balfson,
Yes your right!I want to limit my remote users to access in to our internal network either 1 or 2 ip addresses only.

Hi.
This what Ive done from Remote Access PPTP I added users and I set my Internal DHCP server will assigned IP addresses for PPTP connection.I did not create a NAT rule since same network will provided to the pptp users.Then,from the Network Security==>Packet Filter==>I created a policy w/c goes likes this Source(pptp users(ex:test))==>Service(HTTP)==>Destination(ip address of my web server).
Is this correct settings?I want to limit test from accessing servers except to web server.
Any inputs are welcome.

thanks