Testing VPN connectivity thru firewall

Have patron that needs to connect to VPN outside of campus, want to check if this will go thru our firewall.

To check if PPTP VPN port is open on your PC,  use PortQueryUI, a tool used to check the availability of different ports.

1. Download PortQueryUI from Microsoft site: http://download.microsoft.com/download/3/f/4/3f4c6a54-65f0-4164-bdec-a3411ba24d3a/PortQryUI.exe
2. Run it, package will unzip to C:\PortQryUI folder.
3. Go to: C:\PortQryUI and run portqueryui.exe
4. Enter VPN server IP address or hostname, ex. us1.ibvpn.com
5. Select Manually inputquery ports and type 1723 port. Then press Query button.
6. If your result is TCP port 1723 (pptp service): LISTENING then your PPTP VPN port is open and you are able to conenct to our servers.

Full details

Using Putty program to tunnel to Millennium server

1.  For each Millennium port (2000, 4600, 1031-1035, 80, etc.), I created a forwarding port (in Putty under "Connection" > "SSH" > "Tunnel").  I did this by entering the port number in the "Source port" area and the server's IP address and port for the "Destination".  You can see this in the attached screenshot. 

2.  Then I opened a Putty SSH session to the server.

3.  Then I opened Millennium by using the following command in the Windows "Run" box:

"C:\Program Files\Millennium\iiirunner.exe" ip=localhost

Updating the IP address listed in the iiirunner.lax file would also have the same effect.  You could also just modify your Millennium shortcut by adding "ip=localhost" (no quotes) to the end of the shortcut's target.

Some other things to keep in mind ....

1.  You have to have Putty open while Millennium is open.
2.  You might also need to tunnel additional ports for your specific situation.
3.  Sometimes a specific Millennium application wouldn't open the first time I'd select it from the control bar; the black iii runner.exe box would list an error message.  However, usually, everything would work fine if I selected the module again from the control bar.  May be something flakey on my end ... but I thought I would mention it just in case.

Matt Polcyn email 2008