Date: Thu, 17 Jul 2008 23:48:04 -0400 From: "Ansar Mohammed" <ansarm@gmail.com> To: "'Chris Buechler'" <cbuechler@gmail.com> Cc: freebsd-pf@freebsd.org Subject: RE: GRE Limitation Message-ID: <048f01c8e889$160fffd0$422fff70$@com> In-Reply-To: <d64aa1760807172036u7f41fc7ctcc8563dd75372211@mail.gmail.com> References: <047001c8e87d$8078b710$816a2530$@com> <d64aa1760807172036u7f41fc7ctcc8563dd75372211@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Is this like "a known bug" that's being fixed or is this "by design" and we have to deal with it? > -----Original Message----- > From: Chris Buechler [mailto:cbuechler@gmail.com] > Sent: July 17, 2008 11:37 PM > To: Ansar Mohammed > Cc: freebsd-pf@freebsd.org > Subject: Re: GRE Limitation > > On Thu, Jul 17, 2008 at 10:25 PM, Ansar Mohammed <ansarm@gmail.com> > wrote: > > Hello All, > > I just read the following on the pfsense website: > > > > "PPTP and GRE Limitation - The state tracking code in pf for the GRE > > protocol can only track a single session per public IP per external > server. > > This means if you use PPTP VPN connections, only one internal machine > can > > connect simultaneously to a PPTP server on the Internet. A thousand > machines > > can connect simultaneously to a thousand different PPTP servers, but > only > > one simultaneously to a single server. The only available work around > is to > > use multiple public IPs on your firewall, one per client, or to use > multiple > > public IPs on the external PPTP server. This is not a problem with > other > > types of VPN connections." > > > > Is this also true for stock FreeBSD with PF or just a pfsense issue? > > > > That's true with every OS that runs pf, and anything based on any of > those (including pfSense). > > Chris
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?048f01c8e889$160fffd0$422fff70$>