I have a problem with ASL routing PPTP connected clients to the internal LAN. I have read the trail from exiof and comeanddance and tried setting the internal mask to 255.255.0.0 but that didn't work...even with a wide open PPTP/ANY/ANY/ALLOW filter. Here's a crude diagram of what I am trying to accomplish (Outside is simulating the static IP from my cable modem provider):
Internal LAN w/W2k PC @ 172.29.8.105/GW172.29.8.12
172.29.8.0/24
|
|
IP=172.29.8.12
ASL Firewall ---DMZ 172.29.7.0/24--.25=Web/FTP Svr
IP=24.24.1.24/23
GW=24.24.1.1
|
|
W2k Laptop - w/W2k PPTP Client
IP=24.24.1.1
GW=24.24.1.24
The laptop can hit the Web & FTP servers fine and also bring up the PPTP link and get assigned an IP from my PPTP virtual network 172.29.9.0/24.
I can't see the laptop from the internal LAN and can't see anything internal from the laptop PPTP client.
Can someone enlighten me as to things to try? So far, ASL looks fantastic.
Thanks!
This thread was automatically locked due to age.