Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 1 subscriber
  • Views 6042 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trying to setup VPN L2TSP

thefuzz4
Hey Everyone,

So I'm finally after several years attempting to get the VPN on my Astaro Box working.  I'm currently using the UTM 9.  I can connect just fine to my VPN with no issues.  But once I'm connected I can not go anywhere.  I have created firewall rules to allow the VPN address pool for the L2TSP to have access to both my internal network as well as the internet.  But what I find interesting in the logs is that when I connect, in the firewall log instead of showing my vpn address it shows the actual external address of where I'm connecting in from.


15:14:55 Packet filter rule #23 L2TP
8.x.x.x  : 46141
→
199.167.177.37 : 1227

In this example I was just trying to go whatismyip.com

I've also added the appropriate masq rules as well.  Thank you all in advance for your help with this.

I am currently testing this with an Android Tablet running ICS.  Thanks


This thread was automatically locked due to age.
Parents
  • 0
    Hey Bob,

    Ok so with rule 23 currently disabled (all it was, was my catch all deny for anything not meeting the FW rules)  Here is what I'm seeing in the live logs


    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	53619
    →	
    66.220.149.99	:	443
    [ACK]	len=64	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	40747
    →	
    4.68.90.79	:	443
    [ACK PSH FIN]	len=89	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	55683
    →	
    74.125.227.134	:	443
    [ACK]	len=64	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:11	Default DROP	L2TP	
    8.30.130.131	:	33122
    →	
    199.83.168.136	:	443
    [ACK PSH]	len=156	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:12	Default DROP	L2TP	
    8.30.130.131	:	40747
    →	
    4.68.90.79	:	443
    [AC K PSH FIN]	len=89	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41


    Thank you for your help with this
Reply
  • 0
    Hey Bob,

    Ok so with rule 23 currently disabled (all it was, was my catch all deny for anything not meeting the FW rules)  Here is what I'm seeing in the live logs


    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	53619
    →	
    66.220.149.99	:	443
    [ACK]	len=64	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	40747
    →	
    4.68.90.79	:	443
    [ACK PSH FIN]	len=89	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:09	Default DROP	L2TP	
    8.30.130.131	:	55683
    →	
    74.125.227.134	:	443
    [ACK]	len=64	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:11	Default DROP	L2TP	
    8.30.130.131	:	33122
    →	
    199.83.168.136	:	443
    [ACK PSH]	len=156	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41
    10:24:12	Default DROP	L2TP	
    8.30.130.131	:	40747
    →	
    4.68.90.79	:	443
    [AC K PSH FIN]	len=89	ttl=63	tos=0x00	srcmac=0:1a:8c:f0:cb:41


    Thank you for your help with this
Children
No Data