Blocked? (VPN to Home - NTL)

uziel · 06-03-2006, 12:47

Hey,

had a quick search before i posted this and couldnt see anything quite like. So here goes.

Im trying to setup a VPN from my work to home. Easy enough to do, but when i "whatsmyip" at home. it reports it as <deleted>.
When i try and treceroute or ping it, it says it cannot be reached and stops about 2 hops before.

Any ideas?

172.16.5.113
172.16.5.250
217.45.221.54 host217-45-221-54.in-addr.btopenworld.com
217.47.116.74 btdhg421-hg3.ealing.broadband.bt.net
217.47.116.2
217.47.116.110
217.47.201.242
217.41.219.5
217.41.175.142
217.41.175.62
217.47.130.241
194.72.31.137 core2-pos8-0.bletchley.ukcore.bt.net
62.6.204.69 core2-pch2.ilford.ukcore.bt.net
194.74.65.125 core2-pos13-0.telehouse.ukcore.bt.net
194.74.65.2 ntl-gig.peerings.ukcore.bt.net
62.253.184.5
62.253.185.237
62.253.188.34
80.1.79.102
80.4.46.26
80.1.79.202 nott-t2cam1-b-ge-wan34.inet.ntl.com
80.4.46.154 nott-stap-ubr-1-ge20.inet.ntl.com

Could not trace to <deleted>.

Anyone shed any light on this for me?

thanks

Graham M · 06-03-2006, 12:50

Someone more knowledgable will be along in a minute im sure, but I'd remove your own IP from the post if I were you, just a sensible precaution

MovedGoalPosts · 06-03-2006, 13:01

to Cable Forum

Part of the issue may be that your home addy IP is not static but can change (not often but it can change).

If you have a router or similar at home, together with any firewall you'll need to open the necessary ports to allow the VPN.

It's not a good idea to post your own IPs. Unscrupulous people, may decide to have a play with it - I'm deleting them.

this isn't really a ntl broadband issue so I'm moving it to Networking.

uziel · 06-03-2006, 13:09

Hi rob,

ta for that, got to admit was being a bit free and loose with my ip there. I can get to bloody thing anyway, so i doubt if anyone else can.

Ive got all the appropriate settings on my linksys set to allow VPN and NTL changed my ip a few weeks ago, so im not expecting to change for a while yet.
I just cant get to it. Bloody frustrating! Is it a service that ntl have to allow?

MovedGoalPosts · 06-03-2006, 13:15

No they don't have to allow the service, but I'm not aware that they block it. There is (or was) something in the User policy about they don't support it and you may be asked to not use it if it casues problems.

I use VPN successfully from home to office via ntl, but have never tried the other way. My work setup though uses fixed IPs for both the server and modem, all of which are visible on the net. I suspect somehow you need to get your linksys router to see the VPn connection attempt from outside and push that at your internal network. No idea how to do that sorry.

May help others if you post the make of your linksys, and what software you are running on the PC that you want to conect to.

mcintg · 06-03-2006, 13:16

I have VPN working from home with no change of settings from NTL. I had to enable IPSEC/VPN passthru on my router but that was all.
Is you VPN going to be a Client server VPN of a NETBIOS VPN?

uziel · 06-03-2006, 13:26

It's a linksys WRT54GS and Windows Xp Prof.

I can foward the attempt to connect from router to pc, linksys routers are pretty good like that, quite to easy to setup.

If i try and ping the address that "supposedly" is my home addy i get destionation unreachable???

---------- Post added at 13:26 ---------- Previous post was at 13:20 ----------

it'll be a client server VPN mcintg.

MovedGoalPosts · 06-03-2006, 13:28

So what VPN software are you running on the windows Xp computer. Unless youhave something there the linksys has nothing to forward incomming connection attempts to.

uziel · 06-03-2006, 13:30

just the xp software enabled to accept incomming VPN connections.

**Paul** · 06-03-2006, 13:47

Quote:

Originally Posted by uziel

If i try and ping the address that "supposedly" is my home addy i get destionation unreachable???

Unfortunately, now you ip address has been removed I can't see what it was to test. Where did you get it from ?

uziel · 06-03-2006, 13:53

ive just pm'd you with it paul.

ta

**Paul** · 06-03-2006, 13:55

The ip seems reasonable as it's Stapleford UBR1. Whatever you have connected to it (a router ?) is blocking ICMP traffic, so you will not be able to ping it, or tracert to it.

Aragorn · 06-03-2006, 13:58

By default the Linksys routers reject incoming pings - stealth mode to deter hackers. I suspect the NTL UBR's may also reject pings.

If you want to try an incoming service, why not load up a free anonymous FTP server (read only) and forward the FTP ports (20,21) to the PC. Then you can FTP to your external address. (possible snag here, some Corp firewalls block outbound FTP!) A free HTTP server would be another option to test (port 80).

HTH

uziel · 06-03-2006, 14:20

crap, i swear i enabled that!!

ill go and have a look.

Thanks paul.

(just out of interest, how did you mange to find out that kind of detailed information?) I always thought i was quite savvy at solving bb problems??

---------- Post added at 14:10 ---------- Previous post was at 14:09 ----------

thanks aaragon im just trying that now

---------- Post added at 14:20 ---------- Previous post was at 14:10 ----------

thats was it thanks paul, i daftly thought becuase i hadnt enabled the firewall, on my linksys it would allow it.
Ive now enabled the firewall and shut off that part of it.

THanks for your help guys