Bug #2968
closed
UDP issues with PPTP and Multi-WAN
0%
Description
2.1-BETA1 amd64, multi-WAN setup with three WAN links, one LAN link.
PPTP clients cannot access private resources on the VPN via UDP, or at least not pfSense resources like DNS.
Running three TCPdump sessions. Two on the pfsense PPTP server; one (DUMP-A) is watching for GRE packets on the appropriate WAN interface, one (DUMP-B) is watching for DNS packets on the pptp interface. The third (DUMP-C) tcpdump is running on the firewall (pfsense again) at the client end watching for GRE traffic on the WAN interface.
DUMP-A and DUMP-B show appropriate traffic, while DUMP-C only shows the outgoing GRE traffic but none incoming. It seems likely this is may be the same issue as the UDP workaround for OpenVPN using UDP on Multi-WAN, however, no such configuration is possible for PPTP.
Ugly Workaround:
Setup a NAT port forward to the pfsense LAN IP from a WAN IP, if you have one available, and serve that WAN IP as the DNS server to PPTP clients.
Updated by Chris Buechler over 11 years ago
- Status changed from New to Rejected
not a legit bug, guessing a wrong firewall rule.