VPN - SMTP Server unreachable through VPN

This is Interesting: Free IT Magazines  
Home > Archive > VPN > October 2007 > SMTP Server unreachable through VPN





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SMTP Server unreachable through VPN
Jeroen Kuivenhoven

2007-10-11, 7:14 pm

Hi all,

I have a question about a VPN tunnel.

I can build a tunnel from my notebook (which has a Greenbow VPN Client
installed) to my Zywall 5 at home.
When I enter the local IP-address of the Zywall, I can web-administrate it.
So far so good.

But when I send e-mails, my SMTP server is unreachable.
If I use the SMTP-server of the network I'm connected to at that moment (the
neighbours' wireless), the e-mail sends immediately.

It is as if all traffic goes over the VPN, exept for my outgoing e-mail.

Can anyone help me ?


Thanks in advance, kind regards,


Jeroen Kuivenhoven

Poeldijk, The Netherlands.


Mike Drechsler - SPAM PROTECTED EMAIL

2007-10-12, 7:14 am

Jeroen Kuivenhoven wrote:
> Hi all,
>
> I have a question about a VPN tunnel.
>
> I can build a tunnel from my notebook (which has a Greenbow VPN Client
> installed) to my Zywall 5 at home.
> When I enter the local IP-address of the Zywall, I can web-administrate it.
> So far so good.
>
> But when I send e-mails, my SMTP server is unreachable.
> If I use the SMTP-server of the network I'm connected to at that moment (the
> neighbours' wireless), the e-mail sends immediately.
>
> It is as if all traffic goes over the VPN, exept for my outgoing e-mail.
>
> Can anyone help me ?
>
>
> Thanks in advance, kind regards,
>
>
> Jeroen Kuivenhoven
>
> Poeldijk, The Netherlands.


Sounds like your VPN is not sending all traffic through the remote
router. You are doing what is called a split tunnel. Only traffic
destined for the remote routers local subnet is going over the VPN and
everything else is going directly over the local internet connection
unencrypted. So if you were doing this as a form of security on a
hostile network like an open wi-fi then you are likely transmitting
everything you wanted to be secure in to the clear.

If the remote network subnet in your IPSEC configuration is not 0.0.0.0
(aka Send all traffic to remote VPN server) then you have a split tunnel.




--
WARNING! Email address has been altered for spam resistance.
Please remove the -deletethispart-. section before replying directly.
Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)
FD

2007-10-13, 7:14 am

"Jeroen Kuivenhoven" <jeroen@kuivenhoven.nl> schreef in bericht
news:db0ad$470e789e$d594e1bb$15675@news.concepts.nl...
> Hi all,
>
> I have a question about a VPN tunnel.
>
> I can build a tunnel from my notebook (which has a Greenbow VPN Client
> installed) to my Zywall 5 at home.
> When I enter the local IP-address of the Zywall, I can web-administrate
> it. So far so good.
>
> But when I send e-mails, my SMTP server is unreachable.
> If I use the SMTP-server of the network I'm connected to at that moment
> (the neighbours' wireless), the e-mail sends immediately.
>
> It is as if all traffic goes over the VPN, exept for my outgoing e-mail.
>
> Can anyone help me ?
>
>
> Thanks in advance, kind regards,
>
>
> Jeroen Kuivenhoven
>
> Poeldijk, The Netherlands.
>


All traffic IS going into the VPN, so effectively you "lost" your direct
connection to the internet.
So the SMTP server is not accessable via the VPN connection.

The are 2 possible solutions:
- stop using the VPN as your default gateway, use direct internet
This only works when you only need access via VPN to services that are
located within the same subnet of the VPN connection. All internet
traffic will use your direct connection.
- add a static route on your computer to the internet SMTP server
The SMTP traffic will not be using the VPN anymore. Everything else
still uses the VPN, because it remains the default gateway.

Frank


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com