Re: [CentOS] VPN connections subject to hijack attack

2019-12-06 Thread Chris Adams
Once upon a time, Stephen John Smoogen said: > So for ipv4 CentOS 7 and 8 may not be vulnerable out of the door (they > set to 1 versus 0 which the announcement says is kernel default and > sfe). However, they found ipv6 works without rp_filter so this is a > problem. Yeah, I didn't realize until

Re: [CentOS] VPN connections subject to hijack attack

2019-12-06 Thread Stephen John Smoogen
On Fri, 6 Dec 2019 at 04:40, Kenneth Porter wrote: > > > Thanks for the heads up > This affects all VPNs and is a consequence of using "loose" reverse path > filtering for anti-spoofin

[CentOS] VPN connections subject to hijack attack

2019-12-06 Thread Kenneth Porter
This affects all VPNs and is a consequence of using "loose" reverse path filtering for anti-spoofing. The default CentOS setting is strict filtering but you may have changed this to l

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread david
At 08:57 AM 4/19/2016, you wrote: On Tue, 19 Apr 2016, david wrote: At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: > FOLLOWUP & REPORT > > I had lots of suggestions, and the most persuasive was to try OpenVPN. I > already had a CA working, so issuing certificates was

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread Paul Heinlein
On Tue, 19 Apr 2016, david wrote: At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: > FOLLOWUP & REPORT > > I had lots of suggestions, and the most persuasive was to try OpenVPN. I > already had a CA working, so issuing certificates was easy. The HOW-TO > guides were

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread david
At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: FOLLOWUP & REPORT I had lots of suggestions, and the most persuasive was to try OpenVPN. I already had a CA working, so issuing certificates was easy. The HOW-TO guides were less helpful than I could hope, but comparin

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-18 Thread Paul Heinlein
On Mon, 18 Apr 2016, david wrote: FOLLOWUP & REPORT I had lots of suggestions, and the most persuasive was to try OpenVPN. I already had a CA working, so issuing certificates was easy. The HOW-TO guides were less helpful than I could hope, but comparing several of them, applying common sen

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-18 Thread david
Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "inside" my home network. It should not only let me appear to be at home for any external query, but also let me access my computers inside my home. I already ha

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Nux!
dead.org/ocserv/ hth -- Sent from the Delta quadrant using Borg technology! Nux! www.nux.ro - Original Message - > From: "david" > To: "CentOS mailing list" > Sent: Monday, 4 April, 2016 18:57:12 > Subject: [CentOS] VPN suggestions centos 6, 7 > F

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Lamar Owen
On 04/05/2016 12:30 PM, Gordon Messmer wrote: IPSec is typically encapsulated on UDP port 4500, due to the ubiquity of NAT. OpenVPN doesn't really have an advantage, there. IPSec and OpenVPN (and the others) each have their use cases. I have had experience with IPSec (via SmoothWall's SmoothTu

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
Yes, openvpn works on any single udp or tcp port. On many hotels only http, https and dns allowed. So you just can't use ipsec, but openvpn works as it's usually configured to listen https port. -- Eero 2016-04-05 19:30 GMT+03:00 Gordon Messmer : > On 04/05/2016 12:07 AM, Eero Volotinen wrote:

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Gordon Messmer
On 04/05/2016 08:52 AM, Dennis Jacobfeuerborn wrote: For host-to-site setups I prefer OpenVPN since explaining to endusers how to set up an ipsec connection is neigh impossible So, send them a powershell script: Add-VpnConnection -Name "My VPN" -ServerAddress "vpn.example.com" -Authentication

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Gordon Messmer
On 04/05/2016 12:07 AM, Eero Volotinen wrote: IPSec is not recommended solution nowdays. OpenVPN runs top of single udp or tcp port, so it usually works on strictly firewalled places like in hotels and so on. IPSec is typically encapsulated on UDP port 4500, due to the ubiquity of NAT. OpenVP

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Dennis Jacobfeuerborn
How is IPSec "not recommended solution nowdays"? I tend to use IPSec for site-to-site connections i.e. the ones that run 24/7 and only require two experienced people to set up (the admins at both endpoints). For host-to-site setups I prefer OpenVPN since explaining to endusers how to set up an ips

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
Well. IPSec might work with site-to-site connections, but usually roadwarrior mode users experience (a lot of) problems. They might be related to hotels that only allow https, http and dns protocols or broken nat implementations and so on. -- Eero 2016-04-05 18:52 GMT+03:00 Dennis Jacobfeuerbo

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Leon Fauster
Am 05.04.2016 um 12:46 schrieb Francis Mendoza : > OpenVPN is the best opensource VPN for me it can connect to any connection > such as airport, hotel, restaurant, resorts, malls it never let me down. > And configuration is easy on those who have idea on what they want to > achieve. "easy" is qual

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Francis Mendoza
OpenVPN is the best opensource VPN for me it can connect to any connection such as airport, hotel, restaurant, resorts, malls it never let me down. And configuration is easy on those who have idea on what they want to achieve. On Tuesday, 5 April 2016, Eero Volotinen wrote: > IPSec is not recomm

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
IPSec is not recommended solution nowdays. OpenVPN runs top of single udp or tcp port, so it usually works on strictly firewalled places like in hotels and so on. -- Eero 2016-04-04 23:18 GMT+03:00 Gordon Messmer : > On 04/04/2016 10:57 AM, david wrote: > >> I have seen discussions of OpenVPN, O

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Waleed Harbi
SoftEther VPN all-in-one solution and cross platform. On Monday, April 4, 2016, Gordon Messmer wrote: > On 04/04/2016 12:11 PM, Jussi Hirvi wrote: > >> This made me google around a little, and I found some good info here. >> They, too, kind of recommend openvpn. >> >> http://www.howtogeek.com/21

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Gordon Messmer
On 04/04/2016 12:11 PM, Jussi Hirvi wrote: This made me google around a little, and I found some good info here. They, too, kind of recommend openvpn. http://www.howtogeek.com/211329/which-is-the-best-vpn-protocol-pptp-vs.-openvpn-vs.-l2tpipsec-vs.-sstp/ This is not good information. In brie

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Alexander Dalloz
Am 04.04.2016 um 19:57 schrieb david: Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "inside" my home network. It should not only let me appear to be at home for any external query, but also let me access my computer

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Gordon Messmer
On 04/04/2016 10:57 AM, david wrote: I have seen discussions of OpenVPN, OpenSwan, LibreVPN, StrongSwan (and probably others I haven't noted). I'd be interested in hearing from anyone who wishes to comment about which to use, with the following requirements: I recommend l2tp/ipsec. It's sup

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Paul Heinlein
On Mon, 4 Apr 2016, david wrote: I have seen discussions of OpenVPN, OpenSwan, LibreVPN, StrongSwan (and probably others I haven't noted). I'd be interested in hearing from anyone who wishes to comment about which to use, with the following requirements: 1) As noted, it should be secure (a

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Jussi Hirvi
On 4.4.2016 22.01, Eero Volotinen wrote: And openvpn. Avoid ipsec as it's too complex and pptp is unsecure. This made me google around a little, and I found some good info here. They, too, kind of recommend openvpn. http://www.howtogeek.com/211329/which-is-the-best-vpn-protocol-pptp-vs.-open

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Jussi Hirvi
My partner has been using Openvpn extensively. It looks very reasonable and has been quite trustworthy. It is configured via commandline. The server seems to work on Windows, too ("Vista and later"). There are good tutorials for CentOs, for example https://www.digitalocean.com/community/tutor

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Eero Volotinen
work Administrator > River Bend Hose Specialty, Inc. > S Main Street > South Bend, IN 46601-3337 > (574) 233-1133 > (574) 280-7284 Fax > > -Original Message- > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On > Behalf Of david > Sent:

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Richard Zimmerman
[mailto:centos-boun...@centos.org] On Behalf Of david Sent: Monday, April 04, 2016 1:57 PM To: CentOS mailing list Subject: [CentOS] VPN suggestions centos 6, 7 Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "insid

[CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread david
Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "inside" my home network. It should not only let me appear to be at home for any external query, but also let me access my computers inside my home. I already have t

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-03-31 Thread Gordon Messmer
On 03/31/2016 07:35 AM, lejeczek wrote: there will be a struggle on how to push routing to vpn clients when they don't use vpn connection as default gateway. How to get around it, how to tell clients (ideally in a automated/unattended way) about VPN server other subnets? L2TP VPNs are ppp lin

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-03-31 Thread lejeczek
On 26/01/16 16:26, John R Pierce wrote: On 1/26/2016 5:37 AM, lejeczek wrote: I'm having a, I'd like to think a "regular" VPN with IPsec/xl2tpd and it all works OK, except.. One thing that I never needed but now I do and I wonder is it my iptables, or/and routing or maybe VPN server conf

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread Gordon Messmer
On 01/26/2016 09:19 AM, John R Pierce wrote: not in this case You're right, of course. Someday I'll learn to just stay quiet when I'm tired. :) ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread John R Pierce
On 1/26/2016 9:14 AM, Gordon Messmer wrote: On 01/26/2016 05:37 AM, lejeczek wrote: vpn clients with established tunnels can get to VPN server's NICs/IPs but cannot get through to the net behind the server. Well... they can, but only if on a host (eg. 192.168.2.33) on VPN server's net I do: r

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread Gordon Messmer
On 01/26/2016 05:37 AM, lejeczek wrote: vpn clients with established tunnels can get to VPN server's NICs/IPs but cannot get through to the net behind the server. Well... they can, but only if on a host (eg. 192.168.2.33) on VPN server's net I do: route add -host 192.168.2.10 gw 192.168.2.100

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread lejeczek
On 26/01/16 16:26, John R Pierce wrote: On 1/26/2016 5:37 AM, lejeczek wrote: I'm having a, I'd like to think a "regular" VPN with IPsec/xl2tpd and it all works OK, except.. One thing that I never needed but now I do and I wonder is it my iptables, or/and routing or maybe VPN server conf

Re: [CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread John R Pierce
On 1/26/2016 5:37 AM, lejeczek wrote: I'm having a, I'd like to think a "regular" VPN with IPsec/xl2tpd and it all works OK, except.. One thing that I never needed but now I do and I wonder is it my iptables, or/and routing or maybe VPN server config..? vpn clients with established tunne

[CentOS] vpn - xl2tpd and routing to a net?

2016-01-26 Thread lejeczek
hi everybody I'm having a, I'd like to think a "regular" VPN with IPsec/xl2tpd and it all works OK, except.. One thing that I never needed but now I do and I wonder is it my iptables, or/and routing or maybe VPN server config..? vpn clients with established tunnels can get to VPN server's

Re: [CentOS] VPN connection before login

2015-05-04 Thread Leon Fauster
Am 01.05.2015 um 17:58 schrieb Tim : > I imagine something like Cisco AnyConnect on Windows, where you can connect > before > login to the machine. So afterwards user specific network shares are > available and > can be connect via scripts. > > I have an openvpn server running. First I would c

Re: [CentOS] VPN connection before login

2015-05-04 Thread Johnny Hughes
On 05/01/2015 02:25 PM, Gordon Messmer wrote: > On 05/01/2015 08:58 AM, Tim wrote: >> I have an openvpn server running. > > Probably the easiest thing to do with OpenVPN would be to use RSA > authentication and configure openvpn to run on boot at the client. I do this on several machines via scri

Re: [CentOS] VPN connection before login

2015-05-01 Thread Gordon Messmer
On 05/01/2015 08:58 AM, Tim wrote: I have an openvpn server running. Probably the easiest thing to do with OpenVPN would be to use RSA authentication and configure openvpn to run on boot at the client. ___ CentOS mailing list CentOS@centos.org http:

Re: [CentOS] VPN connection before login

2015-05-01 Thread Tim
So most easiest way in my eyes would be a network-manager applet at gdm login. But as of CentOS 7 there is no nm-applet.desktop anymore. There is also an unsolved bug report at fedora. Anyone an idea to get nm-applet to gdm login screen? Regards Tim Am 1. Mai 2015 19:45:55 MESZ, schrieb Jegade

Re: [CentOS] VPN connection before login

2015-05-01 Thread Jegadeesh Kumar
,vpnc, command is used to connect VPN server. We can configure VPN server IP, username, password there. On 1 May 2015 21:28, "Tim" wrote: > I imagine something like Cisco AnyConnect on Windows, where you can > connect before login to the machine. So afterwards user specific network > shares are a

Re: [CentOS] VPN connection before login

2015-05-01 Thread Tim
I imagine something like Cisco AnyConnect on Windows, where you can connect before login to the machine. So afterwards user specific network shares are available and can be connect via scripts. I have an openvpn server running. Regards Tim Am 1. Mai 2015 13:34:48 MESZ, schrieb Jim Perrin : > >

Re: [CentOS] VPN connection before login

2015-05-01 Thread Jim Perrin
On 04/30/2015 03:42 PM, Tim wrote: > Hi all, > > is there a possibility to connect to a VPN manually before login on CentOS > desktop (Gnome). I know of a similar functionality in Windows. This is reasonably vpn specific as to the type, and configuration allowed. Can you be more specific? --

Re: [CentOS] VPN connection before login

2015-04-30 Thread Jegadeesh Kumar
Vpnc will help u to login VPN from Linux machine. On 1 May 2015 02:12, "Tim" wrote: > Hi all, > > is there a possibility to connect to a VPN manually before login on CentOS > desktop (Gnome). I know of a similar functionality in Windows. > > Is there a tutorial or something? > > Thank you > Tim >

[CentOS] VPN connection before login

2015-04-30 Thread Tim
Hi all, is there a possibility to connect to a VPN manually before login on CentOS desktop (Gnome). I know of a similar functionality in Windows. Is there a tutorial or something? Thank you Tim ___ CentOS mailing list CentOS@centos.org http://lists.ce

Re: [CentOS] vpn client setup/plugin

2013-11-20 Thread Wes James
On Wed, Nov 20, 2013 at 11:22 AM, Tucker wrote: > Setting up an IPSec client via trial and error is an absolute pain. The > best results I've had have been with the Shrew Soft ( > https://www.shrew.net/) > client. You may still have to monkey around with the settings for a while > but I felt th

Re: [CentOS] vpn client setup/plugin

2013-11-20 Thread Tucker
Setting up an IPSec client via trial and error is an absolute pain. The best results I've had have been with the Shrew Soft (https://www.shrew.net/) client. You may still have to monkey around with the settings for a while but I felt that my chances for success were dramatically increased by usin

Re: [CentOS] vpn client setup/plugin

2013-11-20 Thread Wes James
On Wed, Nov 20, 2013 at 8:44 AM, John Doe wrote: > From: Wes James > > > I'm using CentOS 6.4 x64. > > I wonder if the instructions for setting it up have different options > based > > on its age. The one the installs on CentOS may not have the options he > is > > talking about. > > Maybe try t

Re: [CentOS] vpn client setup/plugin

2013-11-20 Thread John Doe
From: Wes James > I'm using CentOS 6.4 x64. > I wonder if the instructions for setting it up have different options based > on its age.  The one the installs on CentOS may not have the options he is > talking about. Maybe try this (untested) one: http://agix.com.au/blog/?p=3063 JD _

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Wes James
On Tue, Nov 19, 2013 at 10:33 AM, Fabio Valente wrote: > In which distro are you trying to configure? > I'm using CentOS 6.4 x64. I wonder if the instructions for setting it up have different options based on its age. The one the installs on CentOS may not have the options he is talking about.

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Fabio Valente
In which distro are you trying to configure? Anything on ipsec logs ? In case you're working on CentOS or any RHEL based, try setting SELinux to permissive ( setenforce 0 ) 2013/11/19 Wes James > On Tue, Nov 19, 2013 at 8:31 AM, John Doe wrote: > > > From: Wes James > > > > > On Mon, Nov 18

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Wes James
On Tue, Nov 19, 2013 at 8:31 AM, John Doe wrote: > From: Wes James > > > On Mon, Nov 18, 2013 at 11:47 PM, Mihamina RKTMB > >> I'm trying to find the correct vpn plugin so I can vpn in to a > >> server. > >> The server requirements are vpn server, username/password and shared > >> secret. > > I

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Wes James
On Tue, Nov 19, 2013 at 10:06 AM, Fabio Valente wrote: > @Wes James, > > >From now on, you should refer to plugins as packages :) > Sorry for OT > > > 2013/11/19 Wes James > > > On Tue, Nov 19, 2013 at 8:31 AM, John Doe wrote: > > > > > From: Wes James > > > > > > > On Mon, Nov 18, 2013 at 11

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Fabio Valente
@Wes James, >From now on, you should refer to plugins as packages :) Sorry for OT 2013/11/19 Wes James > On Tue, Nov 19, 2013 at 8:31 AM, John Doe wrote: > > > From: Wes James > > > > > On Mon, Nov 18, 2013 at 11:47 PM, Mihamina RKTMB > > >> I'm trying to find the correct vpn plugin so I c

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Wes James
On Tue, Nov 19, 2013 at 8:31 AM, John Doe wrote: > From: Wes James > > > On Mon, Nov 18, 2013 at 11:47 PM, Mihamina RKTMB > >> I'm trying to find the correct vpn plugin so I can vpn in to a > >> server. > >> The server requirements are vpn server, username/password and shared > >> secret. > > I

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread John Doe
From: Wes James > On Mon, Nov 18, 2013 at 11:47 PM, Mihamina RKTMB >> I'm trying to find the correct vpn plugin so I can vpn in to a >> server. >> The server requirements are vpn server, username/password and shared >> secret. > It is a L2TP/IPSec server. Google seems to say to install opens

Re: [CentOS] vpn client setup/plugin

2013-11-19 Thread Wes James
On Mon, Nov 18, 2013 at 11:47 PM, Mihamina RKTMB wrote: > > On 11/19/2013 07:31 AM, Wes James wrote: > > I'm trying to find the correct vpn plugin so I can vpn in to a server. The > > server requirements are vpn server, username/password and shared secret. > > You need to know what kind of VPN yo

Re: [CentOS] vpn client setup/plugin

2013-11-18 Thread Mihamina RKTMB
On 11/19/2013 07:31 AM, Wes James wrote: > I'm trying to find the correct vpn plugin so I can vpn in to a server. The > server requirements are vpn server, username/password and shared secret. You need to know what kind of VPN you're dealing with: OpenVPN? IPSec? whatever? -- +261 34 81 738 69

[CentOS] vpn client setup/plugin

2013-11-18 Thread Wes James
I'm trying to find the correct vpn plugin so I can vpn in to a server. The server requirements are vpn server, username/password and shared secret. I've installed a few vpn plugins, but I haven't found the correct one that has the shared secret option. Anyone know which one it is? I've tried a f

Re: [CentOS] VPN Traffic

2012-05-15 Thread Adam Tauno Williams
On Tue, 2012-05-15 at 15:10 +, Shiv. NK wrote: > Thanks for the information sent. VPN is between two Cisco routers. using > SNMP, it is possible to monitor the interface traffic for a snmp enabled > device through Zabbix/Cacti. But cannot differentiate between the the kind > of traffic. > Sayin

Re: [CentOS] VPN Traffic

2012-05-15 Thread Giles Coochey
On 15/05/2012 16:10, Shiv. NK wrote: Can you provide a somewhat less generic term for "the VPN traffic"? If the VPN has an interface, then you can monitor this like you monitor any other interface, yes with Nagios / Cacti and the like... Dear Glies, Thanks for the information sent. VPN is b

Re: [CentOS] VPN Traffic

2012-05-15 Thread Shiv. NK
> Can you provide a somewhat less generic term for "the VPN traffic"? > > If the VPN has an interface, then you can monitor this like you monitor > any other interface, yes with Nagios / Cacti and the like... > Dear Glies, Thanks for the information sent. VPN is between two Cisco routers. using

Re: [CentOS] VPN Traffic

2012-05-15 Thread Giles Coochey
On 15/05/2012 15:56, Shiv. NK wrote: Hi List Members, i understand that perhaps i should not ask this question here. But you all are technical. Therefor, has anyone ever monitor the VPN traffic using any open source tools such as Zabbix/Nagios/Cacti? or any other Thanks Can you provide a

[CentOS] VPN Traffic

2012-05-15 Thread Shiv. NK
Hi List Members, i understand that perhaps i should not ask this question here. But you all are technical. Therefor, has anyone ever monitor the VPN traffic using any open source tools such as Zabbix/Nagios/Cacti? or any other Thanks ___ CentOS mai

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Fajar Priyanto
On Thu, Feb 10, 2011 at 5:20 AM, Les Mikesell wrote: > On 2/9/2011 2:40 PM, Gordon Messmer wrote: >> >>> Another problem is that pptp is udp only and cannot be tunneled through >>> a firewall easily like openvpn or ipsec, so if there is any kind of nat >>> going on when you connect through the fir

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Les Mikesell
On 2/9/2011 2:40 PM, Gordon Messmer wrote: > >> Another problem is that pptp is udp only and cannot be tunneled through >> a firewall easily like openvpn or ipsec, so if there is any kind of nat >> going on when you connect through the first vpn, it won't work because >> you won't get your packets

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Gordon Messmer
On 02/09/2011 12:01 PM, Nataraj wrote: > I would also look at routing. When the second vpn comes up, it may be > configured to alter the routing table which would then try to route the > first vpn through the second and the second through the first. That sounds mostly right. Many VPNs will take

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Nataraj
On 02/09/2011 09:35 AM, Cameron Kerr wrote: > On 10/02/11 02:52, Giles Coochey wrote: >> On 09/02/2011 15:46, n...@nux.ro wrote: >>> Fajar Priyanto writes: >>> Hi all, Just wondering if VPN inside VPN is possible? I've created PPTP VPN in the office. Then from home, first I need

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Cameron Kerr
On 10/02/11 02:52, Giles Coochey wrote: > On 09/02/2011 15:46, n...@nux.ro wrote: >> Fajar Priyanto writes: >> >>> Hi all, >>> Just wondering if VPN inside VPN is possible? >>> I've created PPTP VPN in the office. >>> Then from home, first I need to use company's official AT&T VPN. >>> Then after c

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread Giles Coochey
On 09/02/2011 15:46, n...@nux.ro wrote: Fajar Priyanto writes: Hi all, Just wondering if VPN inside VPN is possible? I've created PPTP VPN in the office. Then from home, first I need to use company's official AT&T VPN. Then after connected, I fire up the PPTP VPN client. Got connected, but cann

Re: [CentOS] VPN inside VPN?

2011-02-09 Thread nux
Fajar Priyanto writes: > Hi all, > Just wondering if VPN inside VPN is possible? > I've created PPTP VPN in the office. > Then from home, first I need to use company's official AT&T VPN. > Then after connected, I fire up the PPTP VPN client. > Got connected, but cannot ping the PPTP gateway, and h

[CentOS] VPN inside VPN?

2011-02-09 Thread Fajar Priyanto
Hi all, Just wondering if VPN inside VPN is possible? I've created PPTP VPN in the office. Then from home, first I need to use company's official AT&T VPN. Then after connected, I fire up the PPTP VPN client. Got connected, but cannot ping the PPTP gateway, and half minute later the PPTP got discon

Re: [CentOS] VPN for iPad

2010-12-19 Thread Bill Campbell
On Sun, Dec 19, 2010, Eero Volotinen wrote: >2010/12/19 Ed Warner : >> What is the best VPN solution for both PC and iPad?  I was told that OpenVPN >> won't work for iPad. >> > >I think that it works on jailbroken ipad. > >anyway, ipad supports pptp directly? That's what we use with iPad and iPod

Re: [CentOS] VPN for iPad

2010-12-19 Thread Eero Volotinen
2010/12/19 Ed Warner : > What is the best VPN solution for both PC and iPad?  I was told that OpenVPN > won't work for iPad. > I think that it works on jailbroken ipad. anyway, ipad supports pptp directly? -- Eero ___ CentOS mailing list CentOS@centos.

Re: [CentOS] VPN for iPad

2010-12-19 Thread Oscar Osta Pueyo
Hi, 2010/12/19 Ed Warner : > What is the best VPN solution for both PC and iPad?  I was told that OpenVPN > won't work for iPad. > >  Ed Warner > ___ > CentOS mailing list > CentOS@centos.org > http://lists.centos.org/mailman/listinfo/centos > You can t

[CentOS] VPN for iPad

2010-12-18 Thread Ed Warner
What is the best VPN solution for both PC and iPad? I was told that OpenVPN won't work for iPad. Ed Warner ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
Thank you so much 2010/4/10 John R Pierce > cahit Eyigünlü wrote: > > yes exactly that is what i need to do murrayei > > could you describe a little more > > you either need to learn wide area networking principles as well as the > ins and outs of VPN software, so you can solve these problems yo

Re: [CentOS] VPN

2010-04-10 Thread John R Pierce
cahit Eyigünlü wrote: > yes exactly that is what i need to do murrayei > could you describe a little more you either need to learn wide area networking principles as well as the ins and outs of VPN software, so you can solve these problems yourself, or hire someone so qualified if you want speci

Re: [CentOS] VPN

2010-04-10 Thread Les Mikesell
cahit Eyigünlü wrote: > Unfotunately i have to solve this based on software > i need to isolate each company to protect their info from others > i have 3 companies > and last one thing i need to see each company's traffic statics for long > time periods. and i need to be able to limit their traf

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
i mis understood sorry A B and C are companies not alone computers and they have client computers 2010/4/10 Ian Murray > > > >yes exactly that is what i need to do murrayei > >could you describe a little more > > If 'B' in my previous description is a single machine, need not route and > the A t

Re: [CentOS] VPN

2010-04-10 Thread Ian Murray
>yes exactly that is what i need to do murrayei >could you describe a little more If 'B' in my previous description is a single machine, need not route and the A to C issue goes away. My OpenVPN/Iptables skills are not strong enough to describe it in general terms and has been previously stat

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
yes exactly that is what i need to do murrayei could you describe a little more 2010/4/10 Ian Murray > > >i am looking to open vpn remote page now do you know where could i set > client's sites that allow to connect or not ? > > I can't remember if there are other controls, but AFAIK the primary

Re: [CentOS] VPN

2010-04-10 Thread Ian Murray
>i am looking to open vpn remote page now do you know where could i set >client's sites that allow to connect or not ? I can't remember if there are other controls, but AFAIK the primary method of saying who is allowed is via certificates that you create when setting it up. It is still unclear

Re: [CentOS] VPN

2010-04-10 Thread Eero Volotinen
2010/4/10 cahit Eyigünlü : > i am looking to open vpn remote page now do you know where could i set > client's sites that allow to connect or not ? err. See documentation at http://www.openvpn.net or hire network consult? -- Eero, RHCE ___ CentOS maili

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
i am looking to open vpn remote page now do you know where could i set client's sites that allow to connect or not ? 10 Nisan 2010 13:36 tarihinde cahit Eyigünlü yazdı: > I will check this out thank you so much > > 2010/4/10 Eero Volotinen > > 2010/4/10 cahit Eyigünlü : >> > Unfotunately i have

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
I will check this out thank you so much 2010/4/10 Eero Volotinen > 2010/4/10 cahit Eyigünlü : > > Unfotunately i have to solve this based on software > > i need to isolate each company to protect their info from others > > i have 3 companies > > and last one thing i need to see each company's tr

Re: [CentOS] VPN

2010-04-10 Thread Eero Volotinen
2010/4/10 cahit Eyigünlü : > Unfotunately i have to solve this based on software > i need to isolate each company to protect their info from others > i have 3 companies > and last one thing i need to see each company's traffic statics for long > time periods. and i need to be able to limit their tr

Re: [CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
Unfotunately i have to solve this based on software i need to isolate each company to protect their info from others i have 3 companies and last one thing i need to see each company's traffic statics for long time periods. and i need to be able to limit their traffics that is all , but as i see on

Re: [CentOS] VPN

2010-04-10 Thread John R Pierce
cahit Eyigünlü wrote: > is there any possibility to do this on cent os > > for example company one will be in the block of 10.0.0.0.1-10.0.0.255 > and routed to the one of my external ip > company two will be in the block of 11.0.0.0.1-11.0.0.255 and routed > to the one of my external ip > I am no

[CentOS] VPN

2010-04-10 Thread cahit Eyigünlü
is there any possibility to do this on cent os for example company one will be in the block of 10.0.0.0.1-10.0.0.255 and routed to the one of my external ip company two will be in the block of 11.0.0.0.1-11.0.0.255 and routed to the one of my external ip i just need an advice is this better on wi

Re: [CentOS] vpn

2009-08-12 Thread Filipe Brandenburger
Hi, On Tue, Aug 11, 2009 at 21:31, chloe K wrote: > Where remote and local address and subnet I can put for vpn configuration in > linux box? Please read this right now: http://www.catb.org/~esr/faqs/smart-questions.html It is not the first time that you come to this list with questions that are

Re: [CentOS] vpn

2009-08-11 Thread Max Hetrick
chloe K wrote: > Where remote and local address and subnet I can put for vpn > configuration in linux box? A little more information would probably be best before anyone can help you. Do you already have a VPN server/device running that you're trying to connect to? For instance, are you connec

[CentOS] vpn

2009-08-11 Thread chloe K
Hi   Where remote and local address and subnet I can put for vpn configuration in linux box?   Thank you __ Yahoo! Canada Toolbar: Search from anywhere on the web, and bookmark your favourite sites. Download it now http://ca.

Re: [CentOS] CentOS VPN server for iPhone

2009-03-28 Thread Marcus Moeller
Dear Florian, > So far, OpenVPN has been working very well for me. Unfortunately, the > iPhone doesn't have (yet?) an OpenVPN client, so I'm forced to work with > what's available. > > The options are: L2TP, PPTP and IPSec. If you were to install a VPN > endpoint on CentOS, which protocol would yo

Re: [CentOS] CentOS VPN server for iPhone

2009-03-27 Thread Bowie Bailey
Joseph L. Casale wrote: > > The non-standard port is a good trick, > > Here's just an opinion: Security by obscurity only > makes >you< feel good, it does nothing in reality. > Anyone sufficiently talented to hack a service in > order to gain root or do something useful would not > be fooled by th

Re: [CentOS] security by obscurity [was: CentOS VPN server for iPhone]

2009-03-26 Thread Robert Moskowitz
Let me introduce myself: Robert Moskowitz, ICSAlabs, an Independent Division of Verizon Business Systems. Security IS my business and I am a bit of a 'maverick' even in the labs on my positions. ICSAlabs is the company that certifies products: Firewalls, malware, IDS, IPsec, SSLvpn, etc. Flor

Re: [CentOS] security by obscurity [was: CentOS VPN server for iPhone]

2009-03-26 Thread Joseph L. Casale
>I think that's a nice example of pervasive fallacious binary thinking, >combined with an old tired slogan that by all rights should be dead by now. Ok... >By the same token, we should not use firewalls, because they can be >circumvented by people who are skilled enough, nor use passwords, >be

[CentOS] security by obscurity [was: CentOS VPN server for iPhone]

2009-03-26 Thread Florin Andrei
Joseph L. Casale wrote: >> The non-standard port is a good trick, > > Here's just an opinion: Security by obscurity only > makes >you< feel good, it does nothing in reality. > Anyone sufficiently talented to hack a service in > order to gain root or do something useful would not > be fooled by tha

Re: [CentOS] CentOS VPN server for iPhone

2009-03-26 Thread Florin Andrei
Les Mikesell wrote: > Florin Andrei wrote: >> >> Maybe I don't trust the IMAP server enough to expose it. Maybe I should. > > Anything that can survive in a university environment should be safe > enough for the rest of us. That's a good point. Okay, I have a few things to try now. -- Florin

Re: [CentOS] CentOS VPN server for iPhone

2009-03-26 Thread Joseph L. Casale
>The non-standard port is a good trick, Here's just an opinion: Security by obscurity only makes >you< feel good, it does nothing in reality. Anyone sufficiently talented to hack a service in order to gain root or do something useful would not be fooled by that. Set whatever your doing up right so

  1   2   >