web analytics

configure the PPTP server on Mikrotik.

Login to the Mikrotik RouterOS via Winbox and go to the IP —> Pool:

Click on the “Plus Symbol” to add new pool, Name it whatever you want (like I named it pptp-pool), add the address range (192.168.10.10-192.168.10.20, in my case), then hit OK:

Now go to the PPP Section. Click “PPTP Server” and check the Enabled:

While still on the PPP window, switch to the “Profiles” tab. Click on the plus sign to create new profile, Name it whatever you want (like I use pptp-profile), set the pool that we have created earlier for “Local Address” AND “Remote address“, then press OK.

Now switch to the “Secrets” tab of the PPP window. Click on the plus sign to create new user,  add the name(which act as username), password and profile that we have created in the previous step:

Click on the IP —> Firewall:

From the “Filter Rules” tab, add the new rule. Set the chain to input, protocol to tcp and Dst. port to 1723:

Switch to the Action tab and set it to accept, then Click OK:

Add another new rule. Set the chain to input and protocol to gre:

Switch to the Action tab and set it to accept, then Click OK:

Note: Drag these two rules ABOVE THE DEFAULT “drop” RULE

PPTP Client Setup on Windows 7:

From  “Control Panel“, select the  “Network and Sharing Center” and then choose “Set up a new connection or network“:

On the next window, choose “Connect to a workplace“:

Choose “Use my Internet Connection (VPN)” from the next window:

Type the Public IP address or hostname of your Mikrotik, on the next window:

Next type your VPN username/password and after that click Connect:

Connection usually takes a minute to connect, upon successfully connected, will show you the message “You are connected“:

Verify the pptp logs on Mikrotik by hitting Log:

Ping any internal host:

NOTE: Sometimes, there is a problem to access other hosts on the LAN from the VPN. The solution to this problem is to set up the proxy-arp on the local interface that connect to your LAN:

 

How To Disable Outlook Security Warning – “A program is trying to access e-mail addresses…”

 

When any software tries to access Outlook Address Book programmatically by using Outlook libraries, the system shows the security warning message –

A program is trying to access e-mail addresses you have stored in Outlook. Do you want to allow this?
If this is unexpected, it may be virus and you should choose “No”.

According to KB329765“This behavior occurs because there is no running session of Outlook to determine the correct security profile to load. Therefore, the default security profile is used, causing the security prompt. When you programmatically access an item in the Address Book, a session must be running to determine the correct security profile to load. When Microsoft Outlook is not running, the security dialog prompts the user because the default security profile is used.”

Although offered as a security feature, this prompt can be very annoying if the application frequently needs to access the address book or to send mails.

The workaround is to disable this security prompt by setting/creating a REG_DWORD registry entry CheckAdminSettings = 1 located at HKEY_CURRENT_USER\Software\Policies\Microsoft\Security

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Security] "CheckAdminSettings"=dword:00000001

The table below shows other applicable values for CheckAdminSettings.

ValueWhat Oulook Does
Key not presentUses its default settings
0Uses its default settings
1Looks for settings in the Outlook Security Settings folder, applying them according to the defaults and specific users you've specified.
2For Outlook 2002 and Outlook 2003 only: Looks for settings in the Oulook 10 Security Settings folder, ignoring any settings in the Outlook Security Settings folder. Use this value when you want Outlook 2002/2003 to use different settings
Anything elseUses its default settings

This setting applies in current user hive only. Therefore, to apply it by default to all users, make the same entry in Default User hive (HKEY_USERS\.DEFAULT). This NTUSER.DAT file can then be copied to other systems as well where the Outlook security warning needs to be disabled. Of course, it goes without saying that this setting can also be exploited by viruses. Also note that CheckAdminSettings registry change works only with Exchange Server.