PPTP connections

lawkie

Hi All,

I know there is a problem with PPTP not working correctly, meaning that if you enable the server you cannot PPTP out etc. In a topic I also saw a message that you guys know where the problem is, something to do with kernel or jail() things… that message was from a year ago so I was wondering if by now this problem has been fixed? Since PPTP is still one of the most used tunneling protocols out here it's a major problem if it doesn't work (at least it is for us :))

If I decide to drop the PPTP server on pfSence and just do pass trough for both incoming and outgoing PPTP connections do these limitations still exist? I mean, if it just travels trough pfSense does it still have the limitation of one connection per server?

A small questions off-topic; why do you have a limitation of 16 concurrent PPTP connections (I know it can be changed manually).

Thanks for the answer!

DWAyotte

Last I heard, the PPTP out to 1 server only issue is scheduled to be fixed in the 2.0 release. Many of use are waiting on it :P

cybrsrfr

A way to see what has been going on with PPTP is to go to:
http://cvstrac.pfsense.com/

Then do a search for PPTP or whatever topic you are interested in. Here you will see code check ins and bug reports and replies.

With my system I turned off the PPTP server and use OpenVPN its not to hard if you follow:

OpenVPN road warrier and site to site
http://www.pfsense.com/index.php?id=36

Making OpenVPN key creation easier until we get a GUI
http://forum.pfsense.org/index.php/topic,4807.0.html

With PPTP off on my system I can remote into any other pre-existing PPTP systems from my network.

I believe the 16 concurrent PPTP connections limit is a default inherited from m0n0wall.

One more thing to note PPTP in PFSense is provided by MPD. Looks like there is a new major version that is currently Release Candidate 2 status perhaps that version will help for future versions of PFSense.
http://mpd.sourceforge.net/

lawkie

Hi,

Thanks for the reply.
Unfortunately we have a lot of "dumb" users, they can follow a simple 2 page tutorial on how to make a pptp connection but are to stupid to make an IPsec or SSLVPN connection. So thats the main reason we need to enable the server.

I am willing to have someone on RentAcoder try and fix it and spend some resources on it, if so, will someone put it in the next release?

Regards,

Rense

cybrsrfr

In addition to RentAcoder You can also try a Bounty here on this forum at:
http://forum.pfsense.org/index.php/board,34.0.html

If the solution is clean, fixes the problems with PPTP, and doesn't cause any other problems then it is very likely the changes will be added to PFSense.