From: mike-newsgroup@-DELETETHISPART-.upcraft.com   
      
   Mark Alexander Bertenshaw wrote:   
   > "Martin Bodenstedt"  wrote in message   
   > news:cpu7ai$8oi$1@news.BelWue.DE...   
   >   
   >>Mark Alexander Bertenshaw wrote:   
   >>   
   >>>Well, the VPN worked over the internet when there wasn't a router - just   
   >   
   > a   
   >   
   >>>cable modem, so you have a point!  However, to be fair, whilst I haven't   
   >   
   > got   
   >   
   >>>the D-Link, my personal home setup includes a NetGear ADSL wireless   
   >   
   > "router"   
   >   
   >>>in pretty much the same configuration (in terms of NATting), and it   
   >   
   > seems to   
   >   
   >>>work fine.   
   >>>   
   >>   
   >>Outgoing NATting should never be a problem.   
   >>   
   >>Maybe your home router has firewall rules forbidding your port/protocol   
   >>combination from getting through?   
   >>   
   >>Martin Bodenstedt   
   >   
   >   
   > Martin -   
   >   
   > Just to be clear, my router is the one that is fine - it's my user's router   
   > which is the one that doesn't work, even though the settings look pretty   
   > similar.  As for the protocol rules - there are no rules specifically   
   > forbidding the outgoing ports.  And if so, surely I wouldn't have had a VPN   
   > connection in the first place?  Looking at the logs, it seems that the   
   > initial handshaking seems to go fine.  It's only when I ping a host on the   
   > other side of the firewall when no reply is found.   
   >   
   > --   
   > Mark   
      
   You have 3 options.   
      
   1. Upgrade the firmware on the users D-Link router.  Myself I have never   
   known Dlink consumer routers to pass IPSec traffic unless the gateway   
   VPN router supports some kind of NAT traversal.  Perhaps they have   
   developed a newer firmware that passes standard IPSec session traffic   
   properly.   
      
   2. Change the settings on your VPN gateway at work to use NAT traversal.   
      
   3. Replace the D-Link router with something that does support IPsec   
   session traffic.   
      
   --   
   WARNING!  Email address has been altered for spam resistance.   
   Please remove the -deletethispart-. section before replying directly.   
   Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)