Although my PPTP tunnels seem to be working properly from the users perspective, I’m seeing strange traffic on the RB. Hoping someone can explain what is going on / why…
My internal network is 172.31.254.0/24 and my PPTP server (the RB) draws from the pool 172.31.248.0/24 for clients. Clients can connect as expected, browse, etc. And they appear to be coming from 172.31.248.0/24 on my network. (perfect)
However, my RB is dropping forward traffic from pptp users, and the source address shows as the remote office’s internal IP range (172.31.244.0/24). Why am I seeing these on my RB? Shouldn’t all traffic from the pptp user appear as 172.31.248.0/24 ?
Log excerpt:
10:05:27 firewall,info DROP FORWARD: forward: in: out:ether1-external, proto TCP (ACK), 172.31.244.52:1584->76.13.115.185:80, len 40
This looks like a bug. (And if so, is there a way to report it to MikroTik?)
Thanks