Broadcast over PPTP (LAN games working with PPTP tunnel) - $50

Spliff

Is it clear what I am asking for? Basically I want PPTP clients to be able to see LAN games that I am hosting on my network. Right now it doesn't work because the games use broadcast which PPTP doesn't pass.

Is this even possible?

aldo

@Spliff:

Is it clear what I am asking for? Basically I want PPTP clients to be able to see LAN games that I am hosting on my network. Right now it doesn't work because the games use broadcast which PPTP doesn't pass.

Is this even possible?

make sure you set up your pptp clients in your lan subnet. i dont know what game you are running but broadcast is only arp and pfsense should forward the traffic to correct location

example

lan network 192.168.1.0/24
pptp clients 192.168.1.248/29

this will give pptp clients addresses from 248 - 254
so dont use these on your lan

then allow all traffic in pptp firewall rules and all might work

GruensFroeschli

i dont know about PPTP but you "can" do it with OpenVPN altough there is a kernel-issue:
http://doc.pfsense.org/index.php/Setting_up_OpenVPN_with_pfSense
at the bottom.

Spliff

aldo,

I tried that and it does not work as you think it would. I can post my config if you want but there's not much to it.

cmb

PPTP won't pass broadcasts now, and I'm not sure if it's possible to make it do so. OpenVPN should be able to accomplish that right now.

lsf

I have done this on linux before, it requires a modification of the PPTPd(VPN) source code, You want your VPN to act as if everything is on the same lan switch, it can be done but you need to modify the VPN deamon to support it. I guess you will have to ask the MPD creators for a optional parameter or a modified version.
You will most likely also have to add some broadcast storm control if you want to use this in a "large" scale.

-lsf

Spliff

I found this, can it be integrated into PFsense? Look at the bottom section

http://www.non-standard.net/freebsd/game-vpn/game-vpn.html

sullrich

Thats a seriously ugly/nasty/horrible hack.

This is NOT going in, sorry.

Use OpenVPN. The kernel is stable on 1.2-BETA-1.

Spliff

Then I gotta get a client together and mess with certs. PPTP is just EASY :)

cmb

Wow, yeah that is one UGLY hack.

OpenVPN isn't as daunting as it may seem at a glance. The info on doc.pfsense.org on setting it up is pretty good, I got mine setup in about 10 minutes following that, previously knowing nothing about OpenVPN.