Re: [FW1] Enabling GRE Protocol 47 for PPTP on FW1

[Ali Almutawa <aamutawa@batelco.com.bh>]

Hi,

I am facing another problem, I have the GRE and tcp 1723 already created
long time ago, and I have created the two rules to allow the PPTP both ways
[referring to http://www.phoneboy.com/fw1/docs/tppptp/index.html ]. But
still my customer is unable to do a successful session.

Regarding my Log viewer, I can see the netbeui137, tcp 1723 in the service
field but I can't see the GRE in my log. What i am sure off is that rules
are right on the top of my rules set, the tcp and gre are created, but
things are not going well.

My customer said that he was able to access with the old rule set few months
ago, but now, not any more. The new thing that been change since these few
months, is that we have replaced our old proxies with new ones [Netscape
3.52] on digital unix.

Could that new proxy server has any thing to do with this problem.

rgr
Ali


----- Original Message -----
From: Mar S. Caro <msanchez@teling.com>
To: Paquette, Trevor <TrevorPaquette@metronet.ca>
Cc: 'Wally Young' <wyoung@nexellinc.com>;
<fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Friday, April 16, 1999 2:49 PM
Subject: Re: [FW1] Enabling GRE Protocol 47 for PPTP on FW1



"Paquette, Trevor" wrote:

> > I'm trying to setup PPTP through FW1, and after reading info on
> > Microsoft's  site they state that 'GRE Protocol 47' needs to be opened
on the
> firewall
> > to  enable PPTP to pass.  Any clues on how this is added?  We're using
NT FW1
> > 3.0b.
>

You must define the GRE Protocol 47 by create a service "other" and
establish the
Match
attribute to ip_p=47.

            Mar S. Caro
            Telefónica Ingeniería de Comunicaciones
            Spain



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================