INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!

Talk With Other Members
Be Notified Of Responses
To Your Posts
Keyword Search
One-Click Access To Your
Favorite Forums
Automated Signatures
On Your Posts
Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Tek-Tips LinkedIn^® Group

Join our
LinkedIn^® Group!

Hook up with past and present colleagues and classmates quickly.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site

(Download This Button Today!)

Feedback

"...This was the ONLY place that I could find information that I could use to resolve the problem. So thanks once again to member TomSark and the SQL forum!..."

More...

Geography

Where in the world do Tek-Tips members come from?

Click Here To Find Out!

Tek-Tips Shirts!

Get your
Tek-Tips Forums
SWAG here!

Home > Forums > MIS/IT > Security Solutions > Checkpoint Software: Firewall-1 Forum

GRE

Read More Threads Like This One

peterve (IS/IT--Management)

7 Apr 01 20:15

Hi,

What rule do I have to create to allow GRE traffic through my firewall (for PPTP)
Thanks

Peter Van Eeckhoutte
peter.ve@pandora.be

netshield (IS/IT--Management)

23 Apr 01 10:13

http://www.phoneboy.com/faq/0321.html

muhammadn (IS/IT--Management)

30 Apr 01 10:12

Details on http://www.phoneboy.com/faq/0321.html is fine,
but it need some modification, explain below

Assuming the (statically translated) PPTP server is on the Internal network and the PPTP client is on the External network, you need to create and add one more object to the outbound rule. Create an object for the valid address of the PPTP server and put it in the source of the outbound rule and it will work.

The problem is that FW-1 does the translation before it applies the rules, so if you don't put in the object for the valid address, it will get dropped.

(Generally speaking) the rules should look something like this...

(rule 1) Client PPTP-invalid (PPTP svcs) Accept

(rule 2) PPTP-invalid Client (PPTP svcs) Accept
PPTP-valid

Good Luck !
MN

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Back To Forum

Back To Checkpoint Software: Firewall-1