I found I had to do this to make my office VPN connection work as well, and after a little thought, it just might make sense. SPI = Stateful Packet Inspection. I don't know the details of the PPTP...