Re: VPN and XP SP2 woes

From: Sue Morton (867-5309_at_domain.invalid)
Date: 08/31/04 

Date: Tue, 31 Aug 2004 06:03:47 -0700

Dave,

(Sorry, you can tell I'm not knowledgeable about this aspect of the system.)

I think I have it working now. Here's what I did:

I connected VPN, default gateway box Checked, and got a route print.

Disconnected, and connected VPN, default gateway box UNchecked. Got a route
print.

Besides the default gateway, and the IP assigned by my employer, the only
difference in the two route prints was this line:

Net Dest Mask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.1.29.182 10.1.29.182 1

I did a 'route add' as follows:

route add 0.0.0.0 mask 0.0.0.0 10.1.29.182

And this did the trick. I now seem to be able to connect to my employer's
shared resources AND send my personal email and internet over my direct
connection.

Thanks again Dave. 

-- 
Sue Morton
"Sue Morton" <867-5309@domain.invalid> wrote in message 
news:O%23nKn4wjEHA.1904@TK2MSFTNGP09.phx.gbl...
> Dang I spoke too soon.  Nothing is going over my VPN connection.
>
> I guess I don't have the route added in correctly?
> -- 
> Sue
>
>
> "Sue Morton" <867-5309@domain.invalid> wrote in message 
> news:Ow6SuwwjEHA.2812@tk2msftngp13.phx.gbl...
>> Hello Dave,
>>
>> Thank you very much for this information.  I had been 'googling' on the 
>> net, looking for ways around this, and had found the 'route add' info.  I 
>> was about to try it when you came along.  Your instruction works 
>> perfectly for me.
>>
>> Now if you come up with a way to automate this... seems like a windows 
>> script should do the trick.  I shall have to examine that.  Feel free to 
>> beat me to it. :)
>>
>> Thank you again for your help.
>> -- 
>> Sue Morton
>>
>> "Dave Wisel" <wisel@rdacorp.com> wrote in message 
>> news:d6b29eb4.0408300710.9f806c9@posting.google.com...
>>> I believe this was Microsoft's solution to a huge security hole in
>>> Windows XP and VPN.  If you are able to access the Internet while
>>> PPTP'd into your corporate network, if your machine is unpatched you
>>> are technically bypassing the corporate Firewall and allowing Internet
>>> traffic in to the corporate network.  My understanding is that many
>>> companies (including Microsoft) were bitten by this hole during the
>>> SQL Slammer outbreak.
>>>
>>> Of course, there is a way to get around it, just like pretty much
>>> anything but you do need some information about your corporate
>>> network, including the class C Subnet that you are using!  It's still
>>> a somewhat manual process but I am working on a way to automate it.
>>> Modify your PPTP connection properties so that "Use default gateway on
>>> remote network" is UNchecked.  VPN to the corporate network, then run
>>> IP config and note your IP addressed assigned by your PPTP server.
>>> This will be your gateway address for adding a new route.  At a
>>> command prompt type the following command (substituting your corporate
>>> network information.  The example assumes you are using the 10.10.10.0
>>> network).
>>>
>>>
>>> route add 10.10.10.0 mask 255.255.255.0 10.10.10.50
>>>
>>> Again, in this example the company uses the 10.10.10.0 network and the
>>> IP Address assigned to the client by the RAS server is 10.10.10.50.
>>>
>>> I hope this helps those of you that are having the problem.
>>>
>>> Thanks.
>>>
>>> Dave Wisel
>>> Systems Manager
>>> RDA Corporation
>>
>>
>
>

Relevant Pages

  • Re: OT By a mile in parts comments on Viet Nam
    ... check bank accouts etc etc whilst away but is safe to do so over wireless and using the hotel network.. ... you should regard your connection as insecure and use some ... form of encryption to protect your passwords and privacy. ... My recommendation would be to set up a VPN endpoint in the UK that you ...
    (uk.comp.sys.mac)
  • Re: OT By a mile in parts comments on Viet Nam
    ... compared with the risks already inherent in the average hotel network. ... you should regard your connection as insecure and use some ... form of encryption to protect your passwords and privacy. ... My recommendation would be to set up a VPN endpoint in the UK that you ...
    (uk.comp.sys.mac)
  • Re: Remote Client Configuration
    ... > remote computer to SBS 2003 domain via VPN connection after the remote ... > connection when user logon to the remote computer. ... I dont think that the Network Configuration website would work to connect to ... "The Small Business Server Network Configuration Wizard ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN issues on SBS2003 with ISA 2004 installed
    ... I had to create a VPN connection using the network connection wizard on ... Based on our work above, it seems the problem in client side, so I suggest ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Client Configuration
    ... > profile updates issue. ... > local network or via dial up VPN connection, you will use an local copy on ...
    (microsoft.public.windows.server.sbs)
Loading