Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a problem where I can vpn into a network. I am able to ping a certain server (devserver). I can also do a remote desktop into the server.

However, if I try to access the server in other ways, for example:

http://devserver

or

connect to the SVN server on the devserver

or

connect to the MSSQL server on the devserver

I am unable to connect to the server. All requests timeout.

What could be the problem?

Update:

Thank you for the responses. Yes, it seems to be a firewall blocking me. It seems to be the server's firewall since I can turn the server firewall off and get it even though my firewall is on. Unfortunately I have no idea how to configure it. It's the Windows Firewall.

share|improve this question
    
Is there a firewall filtering your VPN connection? –  derobert Aug 23 '09 at 10:05
    
You are right. It has something to do with the firewall. I discounted it from being a firewall issue because the one who set it up for me said he can connect without any problem. –  webdtc Aug 23 '09 at 10:56
    
That's probably because he made sure the firewall would let traffic for his machine go through. And that is the correct way to do this (reduce access to the minimum that will do the job). –  wolfgangsz Aug 23 '09 at 14:09
add comment

4 Answers

up vote 2 down vote accepted

As the others already wrote: Your VPN gateway is probably a Firewall and has some special rules. Another possibility could be a firewall on the server itself. Check this too! When I had this problem the last time it was the firewall on the server. (I searched several minutes on the firewall appliance because I believed the problem would be there.)

share|improve this answer
    
I think the server firewall is blocking me. If I completely turn it off I can get in even though my firewall is up. Unfortunately I have no idea how to configure it so it is on but still lets me in. –  webdtc Aug 24 '09 at 22:58
    
Probably the old IT guy configured on the VPN endpoint that he always gets the same IP address. And on the sever firewall he configured that this IP address is allowed to use all services. See "To configure Windows Firewall Port Exceptions" point 4 technet.microsoft.com/en-us/library/cc875811.aspx Maybe this helps. –  Raffael Luthiger Aug 25 '09 at 7:20
add comment

Some firewall consider the VPN as a stand-alone inteface, thus applying either NAT ploicies and/or Firewall rules on that interface. Look at your Firewall Rules on VPN > LAN and/or Nat Policies from VPN > LAN.

share|improve this answer
add comment

MTU issues + a firewall that won't fragment packets and drops the ICMP MTU Exceeded, is my guess.

share|improve this answer
add comment

Firewall in your way?

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.