Hi,

2820 with SMTP, RDP NAT and PPTP passthru.

I have a problem locking down the firewall. I have NAT redirection for SMTP and RDP but only want the RDP access to be from one external network address. If I modify the firewall to allow only this address for RDP and any for 25 then block all other connections the PPTP VPN passthru stops working.

If I configure TCP 1723 before the "deny all", it still does not work? I cannot find any way to add protocol 47 to the rules as I believe this is what's causing the issue.

How can I support VPN passthru connections and secure the RDP session NAT?

Regards

Colin

Hi,

Has no-one come across this scenario before? Anyone from Draytek monitoring this list?

Cheers

Col

I will answer myself in-case someone searches for this in the future.

Add into Service type object: Protocol: Other,47