vpn pptp connection through pfsense

sasa1

Hi,
I have multiple PCs (all with Windows OS) that are behind pfsense and must connect simultaneously to a remote server in vpn through pptp protocol.
The problem is that only one pc works at a time but they don't all work together.
I read the article:
https://docs.netgate.com/pfsense/en/latest/vpn/pptp-troubleshooting.html

however even disabling "Firewall Scrub" does not work.
however I did not understand how to set the rules 1: 1 for the exit of the PCs towards the vpn server.
Thanks.

kiokoman

? i can be wrong but ..
As the above warning states, PPTP should not be used any longer due to its completely broken encryption and lack of security, in addition to its long history of trouble as a VPN.
~ ~ ~
For PPTP, this means only one PC can connect to a given outside PPTP server at a time.

sasa1

I agree with you that pptp should no longer be used but unfortunately it does not depend on my will.

Regarding pfsense & pptp I have the problem that with the previous firewall it worked and now that I have replaced it with pfsense I don't know how.

So with pfsense it is impossible to connect all the PCs simultaneously?
Thanks.

kiokoman

i think it's a limitation of the freebsd kernel, not pfsense fault and considering that that protocol is deprecated I don't think there is hope for a solution to the problem

jimp

It's a limitation of GRE state tracking in pf.

It will never be solved.

PPTP is dead.

If someone "needs" PPTP, they "need" educating on why it's a bad idea, and how it should have been changed 10+ years ago.