----- Original Message -----
Sent: Monday, March 05, 2001 3:24
PM
Subject: [FW1] FW-1 and Microsoft
VPN
Hopefully someone out there can give me some
ideas.
We have a Microsoft VPN server setup in our DMZ
off a Checkpoint FW-1 Solaris box.
I'm sorry for that! Hopefuly, you might be healthy...
:)
Access to the VPN has been allowed for clients
to access the VPN using PPTP services.
When
this is tested we can watch the log viewer and see the client getting through
the
firewall using PPTP and a service
labeled 34827. Then when the VPN server attempts to
send packets back to the client it uses the service labeled
34827 but the firewall is dropping
these
packets. When testing it we opened up the rule for any service to be
accepted but
they are still being
dropped. The service 34827 uses a protocol simply labeled as 47.
Is there anyone out there who may have a
similar setup and experienced similar problems
that might be able to help shed some light on this?
Thankx,
Kurt
Shaffer
Try http://www.phoneboy.com/fw1/faq/0321.html
Best wishes
ayltonsz
