I'm sure those people in the KTM Komuter were looking at me weird as I was explaining the VPN connection sequence to one of our client's tech support personnel over the cellphone on the way home. "No! You're not seeing any IP 47 (GRE) traffic on your firewall 'cos your VPN server is not done authenticating the user! Yes! I know there's connection going on over TCP port 1723, but that's just the PPTP control traffic, which also includes stuff for the authentication also-lah! Aiyahhh!" There goes my street cred, man...