PPTP Relay on Linux?

[Thczv F. Thczv]

I run a new pfSense router at home, which works great. The only surprise is that I can no longer use my multiple Windows PCs to access an essential PPTP VPN (required for work), because PPTP is insecure and obsolete, and pfSense doesn't support PPTP passthrough.

I am already intending to set up an OpenVPN server on an existing Ubuntu 14.04 server hosted by Linode (so I can avoid my ISP's prying eyes). Is it possible to set up a sort of PPTP relay, or gateway, on my Ubuntu box, to act as a PPTP client for my work VPN and either (a) make the work network available to my home PCs over a VPN protocol that pfSense likes, or (b) route the PPTP VPN traffic over my OpenVPN connection without the need to run any VPN clients on my home PCs?

I am no expert on this stuff, but I am usually able to get things running with the help of copious internet research.

I appreciate any suggestions.

 

[sfx2000]

pfSense, to the best of my knowledge, only blocks PPTP for inbound (either as a server or passthrough to a server on the LAN). For outbound PPTP from a LAN client to a remote PPTP server, you should be fine. They may have a rule in place that is specific to your IP, so check that.

For passthrough inbound (from WAN to LAN host), you can play with the firewall rules... basically you need to open the ports, and then create a GRE rule.

Google is your friend here - took me about 2 seconds to find a common approach...

 

[Thczv F. Thczv]

After a lot of google searches, I concluded that passthrough doesn’t work at all on pfsense. There is no implementation for it, and no inclination to create one. Outbound works for one client, but not for more than one (which is what I need). As I understand it, this is because of the nature of GRE.

I have seen several solutions that involve putting a dedicated VPN router behind pfsense (which should work because it is only one client that pfsense has to handle), and then routing PPTP traffic through my LAN with port forwarding. I have an old WRT54GL that I could install DD-WRT on and dedicate to that purpose in a pinch.