GRE Limitation

Ansar Mohammed ansarm at gmail.com
Fri Jul 18 02:25:12 UTC 2008


Hello All,
I just read the following on the pfsense website:

"PPTP and GRE Limitation - The state tracking code in pf for the GRE
protocol can only track a single session per public IP per external server.
This means if you use PPTP VPN connections, only one internal machine can
connect simultaneously to a PPTP server on the Internet. A thousand machines
can connect simultaneously to a thousand different PPTP servers, but only
one simultaneously to a single server. The only available work around is to
use multiple public IPs on your firewall, one per client, or to use multiple
public IPs on the external PPTP server. This is not a problem with other
types of VPN connections."

Is this also true for stock FreeBSD with PF or just a pfsense issue?



More information about the freebsd-pf mailing list