Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Outbound PPTP VPN Connection broken AGAIN

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    21 Posts 6 Posters 8.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      pwnell
      last edited by

      Ok I will upgrade and test, thank you.

      1 Reply Last reply Reply Quote 0
      • M
        msonic
        last edited by

        Yesterday upgraded to the latest 2.0RC1 snapshot , and outbound PPTP is broken again.
        Same as pf 1.2.3 no outbound PPTP is possible anymore when a client is behind a PFsense 2.0 RC1 unfortunally.
        Because Mobile IPSEC in this builds is also problematic .ย  It's getting worse with connectivity unfotunally.ย  :-[ :-[

        Hope someone has a solution , or hoping the developing team will solve this soon.

        wil add a bug for this.

        Msonic

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          The PPTP proxy that was allowing this to work had been causing panics/hangs/other state issues. It will probably have to wait for 2.1.

          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • P
            pwnell
            last edited by

            @jimp:

            The PPTP proxy that was allowing this to work had been causing panics/hangs/other state issues. It will probably have to wait for 2.1.

            What does this mean?ย  That it would be impossible to make outbound PPTP VPN connections from within the network fronted by a pfSense box to an external PPTP server?

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              It means the old limitations are in place:

              • You can't make outbound PPTP connections if you are running a PPTP server
              • You can't make two outbound PPTP connections to the same remote PPTP server

              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • P
                pwnell
                last edited by

                Ah I see.ย  Well then that would not be too much of an issue for me.ย  Thanks.

                1 Reply Last reply Reply Quote 0
                • B
                  Brad303
                  last edited by

                  @jimp:

                  It means the old limitations are in place:

                  • You can't make outbound PPTP connections if you are running a PPTP server
                  • You can't make two outbound PPTP connections to the same remote PPTP server

                  jimp, can you clarify? Is the pptp proxy required to maintain outbound pptp connections?

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    To maintain them? No, but to bypass the restrictions I mentioned, yes.

                    Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • B
                      Brad303
                      last edited by

                      Okay, I've been unable to maintain an outbound VPN connection from a PC on the LAN to an outside server for longer than a few minutes with the inbound PPTP VPN disabled (no redirect) and the pf scrub disabled.

                      Where else can I look to troubleshoot this?

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        Not sure what that might be. I had a PPTP connection up (and practically idle) from behind a 2.0 box to a 2.0 box for more than a half hour the other day.

                        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • P
                          pwnell
                          last edited by

                          I must say if I do not run a ping to the destination PPTP VPN server my connection also diesโ€ฆ

                          1 Reply Last reply Reply Quote 0
                          • B
                            Brad303
                            last edited by

                            This gets better!

                            Now I can't even establish a connection.

                            Other than the default outbound rule, any others that outbound PPTP needs? I believe I deleted the inbound rules when turning disabling the PPTP server.

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              Shouldn't be anything that it touches special, if you can't establish a PPTP connection the most likely cause is that you've already got a PPTP connection going on another machine to that same remote system.

                              Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • B
                                Brad303
                                last edited by

                                Well, I can guarantee that's not the case. I have, however made multiple attempts from my machine.

                                I don't see anything in states with the remote server's IP, so I'm not sure what it could be.

                                1 Reply Last reply Reply Quote 0
                                • B
                                  Brad303
                                  last edited by

                                  Reboot fixed it.

                                  Dunno why a reboot was required, but I'm not complaining.

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cmbaker82
                                    last edited by

                                    Since the issue won't be fixed until 2.1 is there a timeline for at least a beta of 2.1 that will contain the fix?ย  We've been dealing with the issue in hopes that a fix was coming sometime soon, but if it's going to be several more months then we'll probably want to switch to a different firewall that supports pptp until PFSense is stable in that regard, and then switch back.ย  Also if there is anything I can do to assist in helping the developers fix the issue I am willing.

                                    1 Reply Last reply Reply Quote 0
                                    • jimpJ
                                      jimp Rebel Alliance Developer Netgate
                                      last edited by

                                      No ETA. We have to release 2.0 before we can even think about ALPHAs of 2.1, let alone BETAs.

                                      Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                      Need help fast? Netgate Global Support!

                                      Do not Chat/PM for help!

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.