> Try 'keep state' rules in ipf, e.g.
> 
> pass in proto gre keep state
> pass out proto gre keep state

tried, without success.

see this: http://marc.theaimsgroup.com/?l=ipfilter&m=107881852125357&w=2

it looks like the same problem...
---
| 2. windows pc behind the firewall could not connect reliably to PPTP
| server.  (go back to 3.4.33 and it connects first time every
| time)(incoming gre not getting "natted").
---

I'm posting this to the ipfilter list, probably Darren will have any idea...

Thank you again.

-- 
Egerváry Gergely
egervary@expertlan.hu