Way to find out who was previously assigned an IP via RRAS VPN

Regular intervals smells of DHCP problems. You're getting your IP from an external device, right? I'm no familiar with AT&T policies (different continent..) but sounds like your public IP address somewhat goes 'down'. I think the problem might not even be on your side..

[updated] 2 dhcp servers DO fight if they are on the same subnet. It works this way: at regular intervals your server sends out a message saying "hi, can I keep my IP?" and both servers answer. Apparently, after some struggle, your server gains its ip back.

Solution:

• try limiting the scope of the gateway DHCP server to just one IP (using MAC addresses - but beware when you change network card)

or

• (simple solution, might not be your case) use different network interfaces: one for the server-going-out, one for the lan

or

• get a nat box/router between the gateway and the lan. Have the nat box grab the ip from the gateway. Do port mapping to tunnel connection through nat box to server.

Your mileage may vary but please do not put two dhcp on the same subnet! :)

The firewall isn't active on the rras interface. RRAS is a (poor) firewall in of itself and applies itself to the interface which is facing the internet. All ports are automatically closed off. In the properties for the server there is a filter button where you can modify which ports are open to the world. You need to add a filter to allow the responses to outbound traffic to come back if you are going to permit this server to browse the net.

For the loopback interface you will need to assign it to a network - public, domain, etc. The network assignment affects which parts of the firewall policy apply to traffic coming in on it.

Your vpn traffic will be passing through the server and going to itself but the firewall rules will see that as traffic coming from your loopback network. The firewall needs to know which rules to apply and they are classified by type of network.

Ian