Allow Port Forwarding to enable VPN connection

[davidizod]

I am trying to set up a VPN connection using standard Microsoft host and client.  I am using Windows XP on both machines and have Avast Internet Security.

The port I need to use is 1723 for a PPTP VPN server.

It works fine when Avast is disabled but doesn't work when Avast is enabled.

What do I need to do?

David

[scythe944]

What product are you using? You're posting in the Business Protection forum, but the business side of Avast is still running 4.8, which doesn't include a firewall.

[davidizod]

I am using Avast Internet Security 6. which does have a firewall.
Where should I have posted this? I couldn't find a slot for Avast Internet Security 6

[scythe944]

This board would be more appropriate: http://forum.avast.com/index.php?board=2.0

[DavidR]

It has now been moved to that board.

@ davidizod
Unfortunately I don't use the AIS version, so I can't comment on your problem.

[lukor]

Hi, do I understand you correctly, that you run VPN server on the computer protected with avast? Go to the packet rules dialog, and create a rule there allowing 1723 port for incoming traffic. Then forward the port on your router.

[davidizod]

Thanks for your reply Lukor.
In Firewall - Expert Settings - Packet Rules I have inserted the following
Name- MS VPN, Action - Allow, Protocol - TCP(6), Direction - in/out, Address - my static IP, Local - Port 1723

But it still blocks access from the remote computer.

[scythe944]

I don't think that you're supposed to put *your* static IP in the Packet Rule, I think it's supposed to be the addresses that you're allowing to use that port.

So, the IP of the other computer, or all IP addresses if that number is dynamic and can change at any time.

[davidizod]

So should I leave that column blank as I won't know the IP addresses of the remote computers?

[scythe944]

Sorry, I can't answer that because I don't have AIS either, I just have the free version.

Maybe keep it blank, or put a star in for the value (*).  Maybe it lets you put 0.0.0.0 - 255.255.255.255?  I'm not sure what you can put in for the values.

[Nesivos]

So should I leave that column blank as I won't know the IP addresses of the remote computers?

If you haven't already you might want to take a look at the stuff on this link.  Even though it may have been working before maybe there is something that you missed that is addressed on the link that will help in this case.

HowTo: Windows XP VPN Server Setup

http://www.aeonity.com/frost/howto-windows-xp-vpn-server-setup

[davidizod]

Thanks for all the suggestions.  I am afraid none of them seem to work.
So at the moment I have Avast firewall turned off (but Windows firewall is still on) and everything works fine.

[scythe944]

Sorry to hear that. If I get some time I'll load up a trial of AIS on a computer and see if I can poke through the settings for you.