Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Manually restricting outside VPN access in 2.0

    Scheduled Pinned Locked Moved Firewalling
    7 Posts 2 Posters 2.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      scoob8000
      last edited by

      This somewhat of a crosspost (sorry) of my thread in the PPTP section.

      Some of what I've read on the forum leads me to believe we can modify the automatically created VPN rules in the GUI.

      For example:  I only want to allow incoming PPTP connections from specific IP's/networks.

      Crosspost here:  http://forum.pfsense.org/index.php/topic,35561.0.html

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Disable the automatic VPN rules under System > Advanced, then make your own rules to pass GRE and tcp/1723 to the WAN IP.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • S
          scoob8000
          last edited by

          I must be totally blind, I've been over every tab and option under system > advanced and can't find that option.  :)  :D  :(

          Which tab should it be under, in advanced?    (/system_advanced_admin.php) ?

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            You have to be on a recent snapshot or it doesn't show up. It's under System > Advanced on the Firewall/NAT tab

            autorules.png
            autorules.png_thumb

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • S
              scoob8000
              last edited by

              That would explain it!  It's not there yet!  :)

              I assume I can just go to firmware, auto upgrade.  Are the latest snapshots considered "stable" enough for home use?  :)

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                The latest snaps should be fine, yes.

                Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • S
                  scoob8000
                  last edited by

                  Bingo, updating to the latest snapshot made it show up!  Thanks!

                  1 Reply Last reply Reply Quote 0
                  • First post
                    Last post
                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.