RRAS VPN – Clients don’t receive DNS suffix

The firewall isn't active on the rras interface. RRAS is a (poor) firewall in of itself and applies itself to the interface which is facing the internet. All ports are automatically closed off. In the properties for the server there is a filter button where you can modify which ports are open to the world. You need to add a filter to allow the responses to outbound traffic to come back if you are going to permit this server to browse the net.

For the loopback interface you will need to assign it to a network - public, domain, etc. The network assignment affects which parts of the firewall policy apply to traffic coming in on it.

Your vpn traffic will be passing through the server and going to itself but the firewall rules will see that as traffic coming from your loopback network. The firewall needs to know which rules to apply and they are classified by type of network.

Ian

The general case solution is to configure your DHCP server to provide the proper routes to the client via option 121, "Classless Static Routes". The Windows 7 DHCP client will send a DHCPINFORM after connecting to the VPN and should receive the routes from the DHCP server.