[Openvpn-users] Remote Desktop (Terminal Services)

[Mario Parisi <m-parisi@xxxxxxxxxxxxxx>]

Hi All,
Just recently setup OpenVPN version 1.5.0 on two windows XP Professional 
machines. And all things are working well so far, except Microsoft 
Remote Desktop.
The office machine (server)  is connected to ADSL  via firewall router 
(ADSL service provider has issued a static ip address).
The other Windows XP machine (client)  is the RoadWarrior using a 
dial-up modem, WI-FI or GPRS.

I have port forwarded UDP 5000 from the router in the office to the IP 
address of the office server
All outgoing traffic is allowed, but only UDP port 5000 is allowed in.


I have tested Remote Desktop without blocking incoming 
traffic(dangerous!!) and everything works well, however, with the 
firewall up Remote Desktop just rejects the connection. OpenVPN seems to 
work fine for everything else though.  I can browse the network no 
different than if I was actually there.
I can telnet to the windows server, share files, even use computer 
management services (to control services, etc).
It would seem that most (or many) of the TCP/UDP ports are making it 
across the VPN, except port 3389 (the one Remote Desktop uses).

I may have read somewhere on the mailing lists about keeping the number 
of ports being shared across the VPN to a minimum.
Is there a pre-defined range of ports configured "out-of-the-box" or are 
all ports for TCP and UDP exchanged over the VPN?

Perhaps someone could shed some light on this problem?
Also, just in case I am asked, the XP firewall on the roadwarrior is 
configured to allow UDP port 5000 through, naturally.

PS. I would like to take this opportunity to congratulate the 
development team for the great job they've done on creating this product.
Eventually, I will be looking at installing openvpn on a Smoothwall 
Linux system (if this is at all possible - due to the heavy security 
imposed by smoothwall).
Actually, it would be nice if smoothwall got around to integrating 
openvpn into their distribution.


Regards,
Mario
(from Australia)



____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users