Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more
Reload this Page VPN Server behind Astaro
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 05-17-2009, 11:52 AM
Member
  
Join Date: Dec 2008
Posts: 34
Default VPN Server behind Astaro
Dear All,

I have a windows 2003 vpn server with private ip address that use pptp
I DNAT public ip address to my vpn server private ip address and opened tcp port 1723 from any to my vpn server.
I can telnet to 1723 port but i can not connect to my vpn server from internet.

Can anybody help me?
Thanks a lot.
Ashkan
Reply With Quote
  #2 (permalink)  
Old 05-17-2009, 04:22 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 4,954
Default
Wouldn't you have better security if you set up the Astaro to provide the VPN?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #3 (permalink)  
Old 05-17-2009, 05:23 PM
Member
  
Join Date: Dec 2008
Posts: 34
Default
Dear BAlfson,

yes, really i know that it's better use astaro for VPN server.
But my boss want this from me, so i have to deliver this service to him.
In other hands, i want to what the problem is.
If one person request me to do this scenario in another place, really i can not do it.

Thank you for your reply.
Ashakn.
Reply With Quote
  #4 (permalink)  
Old 05-17-2009, 06:11 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 4,954
Default
Please show your DNAT and your packet filter.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #5 (permalink)  
Old 05-17-2009, 07:48 PM
Billybob's Avatar
Wizard
  
Join Date: Jul 2006
Location: United States
Posts: 562
Default
Don't forget to open GRE (47). http://portal.knowledgebase.net/disp...asp?aid=298769

PPTP helper should probably take care of this but since we are talking bosses and procedures...
Last edited by Billybob; 05-17-2009 at 07:50 PM.
Reply With Quote
  #6 (permalink)  
Old 05-18-2009, 08:01 AM
Member
  
Join Date: Dec 2008
Posts: 34
Default
Dear all,

I have a public ip address that want to DNAT to my private IP address.
I defined a DNAT rule that destination nat public ip address to my private ip address.in this rule i do not define any service match.i just DNAT my public ip address to my private ip address.
I defined a filter rule that allow from any to my private ip address with destination port 1723 and protocol GRE(number 47).

I have a question.
Do DNAT compatible with PPTP?

Best regards.
Ashkan
Reply With Quote
  #7 (permalink)  
Old 05-18-2009, 02:11 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 4,954
Default
Please show your DNAT and packet filter rules.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 02:49 PM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.