pptp packet filters

[volkan ozturk]

Hi,
I've got a question about adding pptp filters. In microsoft white paper it
says while adding apptp packet filter :
"In the details pane, right-click the interface connected to the Internet,
and then click Properties. and add bla bla..."
I have a modem which is the demand dial interface named ISP, and another one
for vpn named VPN.
Now my intiutions tells me to add the filters to VPN interface while the
whitepaper tells it to add to ISP interface. I am considering to make the
same server a NAT server, so i would need some other ports. So i'll have to
add other filters(many of them) and this spoils the filtering logic for the
pptp filters.I can't try and see which is true right now so any help is
quite appreciated.

Volkan Ozturk

[S. Pidgorny [MVP]]

Filters on the VPN interface will be applied to VPN client traffic. On the
Internet interface, you can use packet filters to say allow VPN only.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"volkan ozturk" <volkan...@hotmail.com> wrote in message
news:eM$utiotAHA.2332@tkmsftngp05...

[volkan ozturk]

Thank you Svyatoslav for your reply.
So you say i should use packet filters to allow only VPN on the internet
interface, but then how will i be able to use nat? PPTP packet filters are
used because all the internet traffic on the internet interface will be
routed inside and we want to avoid this, right? So the filtered interface
must be internet interface. But since clients must be able to browse the
internet this will pose a problem. I know that pptp type vpn can be used
behind nat but after setting the internet interface to allow only vpn
traffic how internet browsing will be possible. If i will allow some other
ports too for NAT on the internet interface, wouldn't the pptp packet
filtering loose its purpose?
TIA
Volkan Ozturk
"S. Pidgorny [MVP]" <slav...@yahoo.com> wrote in message
news:OAok0yptAHA.2268@tkmsftngp05...

[S. Pidgorny [MVP]]

You have to enable Web brouwsing and PPTP VPN. Therefore you must add packet
filters accordingly. PPTP packet filters will note lose their purpose - to
allow PPTP.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"volkan ozturk" <volkan...@hotmail.com> wrote in message

news:#jPaq$ptAHA.1344@tkmsftngp04...