This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trying to setup VPN L2TSP

Hey Everyone,

So I'm finally after several years attempting to get the VPN on my Astaro Box working.  I'm currently using the UTM 9.  I can connect just fine to my VPN with no issues.  But once I'm connected I can not go anywhere.  I have created firewall rules to allow the VPN address pool for the L2TSP to have access to both my internal network as well as the internet.  But what I find interesting in the logs is that when I connect, in the firewall log instead of showing my vpn address it shows the actual external address of where I'm connecting in from.

15:14:55 Packet filter rule #23 L2TP
8.x.x.x : 46141
→
199.167.177.37 : 1227

In this example I was just trying to go whatismyip.com

I've also added the appropriate masq rules as well.  Thank you all in advance for your help with this.

I am currently testing this with an Android Tablet running ICS.  Thanks

This thread was automatically locked due to age.

Parents

0 thefuzz4 over 13 years ago

Hey Guys,

So my apologies on my tardiness with updating this. Here is a live capture of the firewall log from right now as I'm trying to to just go anywhere on the web


2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="52" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK" 

2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK" 

2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK"

It just keeps denying me no matter what I try and do. Thank you so much for your help with this.

Reply

0 thefuzz4 over 13 years ago

Hey Guys,

So my apologies on my tardiness with updating this. Here is a live capture of the firewall log from right now as I'm trying to to just go anywhere on the web


2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="52" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK" 

2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK" 

2012:08:21-17:51:38 phoenix-1 ulogd[8696]: id="2001" severity="info" sys="SecureNet" sub="packetfilter" name="Packet dropped" action="drop" fwrule="60002" initf="ppp0" outitf="eth1" mark="0x106" app="262" srcmac="0:1a:8c:f0:cb:41" srcip="8.30.134.67" dstip="4.68.90.79" proto="6" length="64" tos="0x00" prec="0x00" ttl="63" srcport="58549" dstport="443" tcpflags="ACK"

It just keeps denying me no matter what I try and do. Thank you so much for your help with this.

Children

No Data