Enable Vpn traffic

[vmenasci]

Sorry for my poor english.
I have a problen to configure VPN on a server Windows 2000 through a pix firewall.
The network diagram is dmz->pix->internet<-remote branch.
When I try to connect from the remote I retrieve an &quot;error 721 computer remote not responding&quot;, viceversa inside dmz I haven't any problem.
In a previous thread I read:

-omissis-
TCP 1723 is the transmission control protocol that GRE information travels through. In other words, in an IP header, when you are using the Microsoft VPN stuff, you send out a packet with a destination IP addres of whatever, traveling over TCP port 1723 going out, utilizing the GRE protocol (IP protocol 47). For this to happen, GRE has to be enabled bidirectionally on BOTH sides. If it is not enabled on both sides, then your connection WILL fail...consistently.

So I understand the problem is on the pix.

this is the actually configuration:

PIX Version 6.2(1)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password TmwS0FQToLRL5K.F encrypted
passwd TmwS0FQToLRL5K.F encrypted
hostname XXXX
fixup protocol ftp 21
fixup protocol http 80
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol ils 389
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol sip 5060
fixup protocol skinny 2000
names
name 10.0.1.2 ins-XXX.XXX
pager lines 24
interface ethernet0 auto
interface ethernet1 auto
mtu outside 1500
mtu inside 1500
ip address outside 80.68.XXX.XXX 255.255.XXX.XXX
ip address inside 10.0.1.1 255.255.255.0
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
failover ip address outside 0.0.0.0
failover ip address inside 0.0.0.0
pdm history enable
arp timeout 14400
static (inside,outside) 80.68.XXX.XXX 10.0.1.100 netmask 255.255.255.255 0 0
conduit permit tcp host 80.68.XXX.XXX eq 1723 any
conduit permit gre host 80.68.XXX.XXX any
conduit permit tcp host 80.68.XXX.XXX eq

http://www any

conduit permit tcp host 80.68.XXX.XXX eq 3389 any
route outside 0.0.0.0 0.0.0.0 80.68.XXX.XXX 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h323 0:05:00 si
p 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
no sysopt route dnat
telnet 10.0.1.0 255.255.255.0 inside
telnet timeout 5
ssh timeout 5
terminal width 80

Is it right?
Any suggestion?

Thanks in advance
Vittorio Menascì