VPN

Say - if two XP clients connect to my m0n0wall using PPTP VPN service in m0n0wall, can they access each others resources - like shares on the two XP workkstations.

Or can they only access rescources on the LAN m0n0wall give access to?

I am aware of XP firewall - and you should consider that turned off in this senario 

Best Regards
Weasel

Does'nt anyone know anything about this 

Even a theory would be a place to start !?!

It wouldn't be a private network (as in VPN) if clients could see each other's resources.

I just tested this scenario and was able to establish a TCP connection between two PPTP clients that were connected via sererate ISPs.  I bet in the time it took you to make this post you could have tested this yourself.   

CS... 

I just tested this scenario and was able to establish a TCP connection between two PPTP clients that were connected via sererate ISPs.

Ok... thanks a lot for trying that!

  I bet in the time it took you to make this post you could have tested this yourself.   

The case is that i have a netvork, where clients NOT should be able to see each other!
I did test it, but could not get connection - and was happy, but then i got spooked by a friend that argued for that it had to be possible... so now im just trying to get third opinions and documentation.

No problem.  Glad to help.  I thought they would be able to talk to each other but wasn't 100% sure.  Also, when I get a chance, I'll see if a PPTP rule can block this traffic.

CS...

Hi,

It just depends on the rules you configure for the PPTP. I'd setup something like this:

Allow PPTP to WAN
Allow PPTP/specific IP to INTERNAL-Server
Disallow PPTP to Any  (all the rest)

Should do the trick ;-)

Just pay attention, that if you assign dedicated IPs to users, these might be outside the PPTP range. So consider setting the 2. rule like this:
Disallow LAN to ANY

Any of these rules are considered being on the PPTP page, of course :-D

Hope this helps
Marco

I will try the different ideas 

Thanks a lot !