GRE packets not reaching PPTP server with Pace 5168N

[pawalls]

I've poked a pinhole for PPTP on my Pace 5168N router.

Port tcp/1723 is correctly being forwarded to the VPN server, however inbound GRE packets never seem to reach it. Are there edge ACLs or some other router configuration that would be preventing this?

I've confirmed (with tcpdump) that GRE packets are successfully received when connections are initiated from the LAN, however with the same laptop on an external network, the packets never reach the VPN server.

From the firewall status page on my Pace router:

PPTP Server PPTP virtual private network server tcp 1723

[joemuller]

Try adding a pinhole for inbound TCP traffic on port 47 - GRE needs that port as well.

[pawalls]

I'm not sure this is right. Maybe you're referring to *protocol* 47?

https://en.wikipedia.org/wiki/List_of_I ... ol_numbers