Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-15 Thread Michael Graves
On Fri, 15 Oct 2004 11:12:30 +0900, Benjamin on Asterisk Mailing Lists wrote: On Thu, 14 Oct 2004 16:50:39 -0400, steve szmidt [EMAIL PROTECTED] wrote: Please don't use PPTP as a security solution, because it really isn't. It's so flawed you can even connect to it without having ANY encryption.

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Tom Ivar Helbekkmo
Benjamin on Asterisk Mailing Lists [EMAIL PROTECTED] writes: Use OpenSwan http://www.openswan.org I use OpenVPN http://openvpn.sourceforge.net/, and am very happy with it. It's easy to set up, but extremely powerful and flexible. Unlike Swan, which is Linux only, OpenVPN runs on Linux, the

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Benjamin on Asterisk Mailing Lists
On Thu, 14 Oct 2004 09:30:51 +0200, Tom Ivar Helbekkmo [EMAIL PROTECTED] wrote: Benjamin on Asterisk Mailing Lists [EMAIL PROTECTED] writes: Use OpenSwan http://www.openswan.org I use OpenVPN http://openvpn.sourceforge.net/ As far as I know OpenVPN is not IPsec and thereby non-standard.

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Tom Ivar Helbekkmo
Benjamin on Asterisk Mailing Lists [EMAIL PROTECTED] writes: As far as I know OpenVPN is not IPsec and thereby non-standard. Oh, absolutely. I never claimed it adhered to any standard. It just does one heck of a great job implementing a VPN solution with lots of useful features, and

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Benjamin on Asterisk Mailing Lists
On Thu, 14 Oct 2004 14:10:23 +0200, Tom Ivar Helbekkmo [EMAIL PROTECTED] wrote: Benjamin on Asterisk Mailing Lists [EMAIL PROTECTED] writes: As far as I know OpenVPN is not IPsec and thereby non-standard. Oh, absolutely. I never claimed it adhered to any standard. But you made it sound

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Lubomir Christov
I'm using vtun - I think it's just the best choice for secure tunnels :) http://vtun.sourceforge.net/ It supports both TCP and UDP connection - you decide what to use Lubo - Appradius Project: RADIUS authentication and accounting support for Asterisk PBX http://appradius.minitelecom.org/

RE: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Geoff Nordli
As far as I know OpenVPN is not IPsec and thereby non-standard. Oh, absolutely. I never claimed it adhered to any standard. But you made it sound as if it had cross-platform advantages over OpenSwan which I believe to have been misleading -- not intentionally of course -- because

RE: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Whisker, Peter
List - Non-Commercial Discussion Subject: Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels I've been running ssh tunnels for a couple of years now. For years, they've worked well. However, now that I've got asterisk up I do notice problems. Biggest indication of this is if I'm on a call

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Benjamin on Asterisk Mailing Lists
On Thu, 14 Oct 2004 07:13:04 -0700, Geoff Nordli [EMAIL PROTECTED] wrote: OpenVPN runs on: Linux, Windows 2000/XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. And how many routers and firewalls out there do support OpenVPN? Do Cisco routers support it? On the other hand, IPsec

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Chris Travers
This is not an endorsement of any methodology, just a few points: 1) CIPE though non-standard, uses a UDP-based transport. Therefore it can be used to tunnel just about anything, and can be used for VPN servers, though probably not routers. 2) CIPE is lighter-weight than IPSec. However, the

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread steve szmidt
On Thursday 14 October 2004 03:04 pm, Geoff Nordli wrote: [EMAIL PROTECTED] wrote: On Thu, 14 Oct 2004 07:13:04 -0700, Geoff Nordli [EMAIL PROTECTED] wrote: OpenVPN runs on: Linux, Windows 2000/XP and higher, OpenBSD, FreeBSD, NetBSD, Mac OS X, and Solaris. And how many routers and

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Benjamin on Asterisk Mailing Lists
On Thu, 14 Oct 2004 16:50:39 -0400, steve szmidt [EMAIL PROTECTED] wrote: Please don't use PPTP as a security solution, because it really isn't. It's so flawed you can even connect to it without having ANY encryption. Microsoft with their never ending wisdom have incorporated design flaws that

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-14 Thread Tom Ivar Helbekkmo
Benjamin on Asterisk Mailing Lists [EMAIL PROTECTED] writes: And how many routers and firewalls out there do support OpenVPN? Do Cisco routers support it? Neither I, nor anyone else here, seems to be saying that OpenVPN is a replacement for IPsec. There's overlap, but there are applications

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-13 Thread Tom Neville
I've been running ssh tunnels for a couple of years now. For years, they've worked well. However, now that I've got asterisk up I do notice problems. Biggest indication of this is if I'm on a call and run a program in another window that scrolls and scrolls call quality drops off

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-13 Thread Steve Underwood
Tom Neville wrote: I've been running ssh tunnels for a couple of years now. For years, they've worked well. However, now that I've got asterisk up I do notice problems. Biggest indication of this is if I'm on a call and run a program in another window that scrolls and scrolls call quality

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-13 Thread Marcello Lupo
Try to take a look to http://www.freeswan.org IPSEC tunnels. Them are streamed on UDP port 500. May be it help? Bye, Marcello On Wednesday 13 October 2004 18:01, Steve Underwood wrote: Your tunnels worked well because yoou used TCP across them. Now you are trying to stream UDP, and that works

Re: {SPAM?} [Asterisk-Users] Asterisk VIA SSH Tunnels

2004-10-13 Thread Benjamin on Asterisk Mailing Lists
On Wed, 13 Oct 2004 19:53:14 +0200, Marcello Lupo [EMAIL PROTECTED] wrote: Try to take a look to http://www.freeswan.org IPSEC tunnels Don't use FreeSwan. It has been abandoned and dead for almost a year. Use OpenSwan http://www.openswan.org -- Sunrise Telephone Systems, 9F Shibuya Daikyo