<div dir="ltr"><div>Hello Larry,</div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div>
Note the source IP of 192.168.71.3 above. I am assuming this is the
IP address of your LAN and I suspect is where your problem begins </div></blockquote><div><br></div><div>Yes, you are right.
192.168.71.3
it's LAN IP of my PC. <a href="http://172.17.19.0/24" target="_blank">172.17.19.0/24</a> - it's VPN-subnet. <br></div><div>I don't understand why traffic not going through VPN subnet when I use RemoteDesktop App, but does so in any other application including RDP-client.</div><div>Thank you very much for your help. I've understood the problem in RemoteDesktopApp.</div><div><br></div><div><br></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div>--<br>Best regards, Yury<br></div></div></div></div></div></div></div></div></div>
<br><div class="gmail_quote">2018-06-18 2:19 GMT+03:00 Larry Moore <span dir="ltr"><<a href="mailto:lmoore@starwon.com.au" target="_blank">lmoore@starwon.com.au</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF">
<div class="m_2897013758619368255moz-cite-prefix">Hi Yury,<span class=""><br>
<br>
On 17/06/2018 5:08 PM, Yury Kolos wrote:<br>
</span></div>
<blockquote type="cite">
<div dir="ltr"><span class="">
<div>Thank you for your response Larry.</div>
<div><br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div> It would seem your VPN tunnel is working just not the
application. <br>
</div>
</blockquote>
<div>App not working only through ShrewVPN.</div>
<div><br>
</div>
<div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> I expect you will see
some packets relating to connection establishment. If so,
could your PIX be performing deep packet inspection and
blocking the connection!?<span class="m_2897013758619368255gmail-HOEnZb"></span><br>
<span class="m_2897013758619368255gmail-HOEnZb"></span></blockquote>
</div>
<div><br>
</div>
<div>When I connectin RDP-client I see established connection in
netstat utility:</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>netstat -na | findstr 111.250<br>
TCP <a href="http://172.17.19.150:49942" target="_blank">172.17.19.150:49942</a> <a href="http://192.168.111.250:3389" target="_blank">192.168.111.250:3389</a>
ESTABLISHED<br>
</div>
</blockquote>
<div><br>
</div>
<br>
</span><span class=""><div>But when I try to use Remote Desktop App I see only
Syn_Sent in netstat:<br>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>netstat -na | findstr 111.250<br>
TCP <a href="http://192.168.71.3:49929" target="_blank">192.168.71.3:49929</a> <a href="http://192.168.111.250:3389" target="_blank">192.168.111.250:3389</a>
SYN_SENT</div>
</blockquote>
<div><br>
</div>
</span></div>
</blockquote>
<br>
Note the source IP of 192.168.71.3 above. I am assuming this is the
IP address of your LAN and I suspect is where your problem begins.<span class=""><br>
<br>
<blockquote type="cite">
<div dir="ltr"><br>
<div> Packet trace in attachment. Could you see?<br>
</div>
</div>
<div class="gmail_extra"><br>
</div>
</blockquote>
<br></span>
Looking at your packet capture I can see three RDP sessions going
through the Shrew VPN, I am also assuming these connections were
made after the above 'netstat' command was issued.<br>
<br>
I expect if you perform a packet capture at the gateway for the
subnet <a href="http://192.168.71.0/24" target="_blank">192.168.71.0/24</a> and you look for packets destined for host
192.168.111.250, you will see the SYN requests arrive. If so, you
will need to determine why your Remote Desktop App is using your
LAN's default Gateway instead of the routes set up by Shrew VPN.<br>
<br>
Regards,<br>
<br>
Larry.<br>
</div>
<br>______________________________<wbr>_________________<br>
vpn-help mailing list<br>
<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<a href="https://lists.shrew.net/mailman/listinfo/vpn-help" rel="noreferrer" target="_blank">https://lists.shrew.net/<wbr>mailman/listinfo/vpn-help</a><br>
<br></blockquote></div><br></div>