Re: VPN question

2002-11-28 Thread Lionel Elie Mamane
On Thu, Nov 28, 2002 at 12:37:03AM +0100, David J. M. Karlsen wrote: I want to include crypto-patches from kerneli.org as well and these patches seem to clash with the freeswan ones. The latest freeswan patches include the CryptoAPI stuff. -- Lionel

Re: VPN question

2002-11-27 Thread David J. M. Karlsen
Andrea Frigido wrote: Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: kernel-patch-freeswan-ext UNSTABLE package or kernel-patch-freeswan STABLE package? This package exists only in unstable. Err...

Re: VPN question

2002-11-27 Thread David J. M. Karlsen
Andrea Frigido wrote: Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: kernel-patch-freeswan-ext UNSTABLE package or kernel-patch-freeswan STABLE package? This package exists only in unstable. Err...

Re: VPN question

2002-11-19 Thread Giacomo Mulas
On Mon, 18 Nov 2002, Lionel Elie Mamane wrote: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: While using a free OS is always better, you

Re: VPN question

2002-11-19 Thread Giacomo Mulas
On Mon, 18 Nov 2002, Lionel Elie Mamane wrote: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: While using a free OS is always better, you

Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
Hello Maik M8acter backward [EMAIL PROTECTED], I am looking for a VPDN solution for Linux and Windows. But openvpn does not seem to have Windows client. I've tried frees/wan on Linux, but it is not that easy to implement frees/wan client on Windows. Well, there is pptp client on Windows and

Re: Re[2]: VPN question

2002-11-18 Thread robjeh
Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this sollution you can use the default windows vpn client. But i think this isn't really safe. Grtnx, Robbert Citeren Patrick Hsieh

Re: VPN question

2002-11-18 Thread sean finney
On Mon, Nov 18, 2002 at 10:39:11PM +0800, Patrick Hsieh wrote: I am looking for a VPDN solution for Linux and Windows. But openvpn does not seem to have Windows client. I've tried frees/wan on Linux, but it is not that easy to implement frees/wan client on Windows. Well, there is pptp client

Re: Re[2]: VPN question

2002-11-18 Thread Phillip Hofmeister
On Mon, 18 Nov 2002 at 04:07:52PM +0100, [EMAIL PROTECTED] wrote: Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this mschapv2 == unsecure. TONS of paprs on the net if you wish to

Re: VPN question

2002-11-18 Thread Andrea Frigido
Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server * How to

Re: VPN question

2002-11-18 Thread Lionel Elie Mamane
On Mon, Nov 18, 2002 at 07:17:31PM +0100, Andrea Frigido wrote: Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: kernel-patch-freeswan-ext UNSTABLE package or kernel-patch-freeswan STABLE package? This package

Re: VPN question

2002-11-18 Thread Andrea Frigido
Alle 19:24, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:17:31PM +0100, Andrea Frigido wrote: Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: kernel-patch-freeswan-ext

Re: VPN question

2002-11-18 Thread Lionel Elie Mamane
On Mon, Nov 18, 2002 at 07:32:56PM +0100, Andrea Frigido wrote: OK, now I install kernel-patch-freeswan-ext package, thanks :) It is compatible with kernel 2.4.18 or I need to use the kernel 2.4.19? I don't know, but I guess it is. If you find out, let us know. -- Lionel

Re: VPN question

2002-11-18 Thread Noah L. Meyerhans
On Mon, Nov 18, 2002 at 07:17:31PM +0100, Andrea Frigido wrote: I have just installed kernel-patch-freeswan STABLE package, in the make menuconfig menu it's possible to enable Blowfish and other additional chifer kernel modules. Do you think the unstable package is the better choice however?

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
On Monday 18 November 2002 22:56, Phillip Hofmeister wrote: On Mon, 18 Nov 2002 at 04:07:52PM +0100, [EMAIL PROTECTED] wrote: Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
O Another question is, is there any IPSEC-based VPDN solution? I mean, is there any PKI-based opensource VPDN solution? -- Patrick Hsieh[EMAIL PROTECTED] GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF

Re: Re[2]: VPN question

2002-11-18 Thread Phillip Hofmeister
On Tue, 19 Nov 2002 at 10:59:02AM +0800, Patrick Hsieh wrote: Greetings from the cold North that is the state of Michigan, Thank you. I think the weakness is due to the password-based authentication. The attacker can use dictionary attack to pass the authentication,right? Incorrect, there are

Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
Hello Maik M8acter backward [EMAIL PROTECTED], I am looking for a VPDN solution for Linux and Windows. But openvpn does not seem to have Windows client. I've tried frees/wan on Linux, but it is not that easy to implement frees/wan client on Windows. Well, there is pptp client on Windows and

Re: Re[2]: VPN question

2002-11-18 Thread robjeh
Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this sollution you can use the default windows vpn client. But i think this isn't really safe. Grtnx, Robbert Citeren Patrick Hsieh

Re: VPN question

2002-11-18 Thread sean finney
On Mon, Nov 18, 2002 at 10:39:11PM +0800, Patrick Hsieh wrote: I am looking for a VPDN solution for Linux and Windows. But openvpn does not seem to have Windows client. I've tried frees/wan on Linux, but it is not that easy to implement frees/wan client on Windows. Well, there is pptp client

Re: Re[2]: VPN question

2002-11-18 Thread Phillip Hofmeister
On Mon, 18 Nov 2002 at 04:07:52PM +0100, [EMAIL PROTECTED] wrote: Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this mschapv2 == unsecure. TONS of paprs on the net if you wish

Re: VPN question

2002-11-18 Thread Andrea Frigido
Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server * How to

Re: VPN question

2002-11-18 Thread Lionel Elie Mamane
On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: While using a free OS is always better, you can use any other IPSEC implementation, they should

Re: VPN question

2002-11-18 Thread Andrea Frigido
Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: Alle 13:02, giovedì 14 novembre 2002, Lionel Elie Mamane ha scritto: On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: While using a free OS is

Re: VPN question

2002-11-18 Thread Lionel Elie Mamane
On Mon, Nov 18, 2002 at 07:17:31PM +0100, Andrea Frigido wrote: Alle 19:07, lunedì 18 novembre 2002, Lionel Elie Mamane ha scritto: On Mon, Nov 18, 2002 at 07:02:59PM +0100, Andrea Frigido wrote: kernel-patch-freeswan-ext UNSTABLE package or kernel-patch-freeswan STABLE package? This package

Re: VPN question

2002-11-18 Thread Lionel Elie Mamane
On Mon, Nov 18, 2002 at 07:32:56PM +0100, Andrea Frigido wrote: OK, now I install kernel-patch-freeswan-ext package, thanks :) It is compatible with kernel 2.4.18 or I need to use the kernel 2.4.19? I don't know, but I guess it is. If you find out, let us know. -- Lionel pgp9Z6KhYHk10.pgp

Re: VPN question

2002-11-18 Thread Noah L. Meyerhans
On Mon, Nov 18, 2002 at 07:17:31PM +0100, Andrea Frigido wrote: I have just installed kernel-patch-freeswan STABLE package, in the make menuconfig menu it's possible to enable Blowfish and other additional chifer kernel modules. Do you think the unstable package is the better choice however?

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
On Monday 18 November 2002 22:56, Phillip Hofmeister wrote: On Mon, 18 Nov 2002 at 04:07:52PM +0100, [EMAIL PROTECTED] wrote: Hi Patrick, You can use poptop, its possible to get higher encryption with mschapv2. There is a kernel patch for mschapv2. And you must run pppd 2.4.1. With this

Re: Re[2]: VPN question

2002-11-18 Thread Patrick Hsieh
O Another question is, is there any IPSEC-based VPDN solution? I mean, is there any PKI-based opensource VPDN solution? -- Patrick Hsieh[EMAIL PROTECTED] GnuPG Pubilc Key at http://www.ezplay.tv/~pahud/pahudatezplay.pubkey MD5 checksum: b948362c94655b74b33e859d58b8de91 1024D/F3662014 9ADF

Re: Re[2]: VPN question

2002-11-18 Thread Phillip Hofmeister
On Tue, 19 Nov 2002 at 10:59:02AM +0800, Patrick Hsieh wrote: Greetings from the cold North that is the state of Michigan, Thank you. I think the weakness is due to the password-based authentication. The attacker can use dictionary attack to pass the authentication,right? Incorrect, there are

VPN question

2002-11-14 Thread Iñaki Martínez
HI I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server Workers from this company ONLY MUST have access to the server in the VPN. Perhaps some of them must have access to internet only perhaps..

Re: VPN question

2002-11-14 Thread Lionel Elie Mamane
On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server * How to implement this VPN??? I would use IPSEC, but there are other solutions:

Re: VPN question

2002-11-14 Thread Jeff
Iñaki Martínez, 2002-Nov-14 12:43 +0100: HI I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server Workers from this company ONLY MUST have access to the server in the VPN. Perhaps some of

Re: VPN question

2002-11-14 Thread Maik M8acter backward
You can also try openvpn (http://openvpn.sourceforge.net/). On Thu, 14 Nov 2002 12:43:48 +0100 I [EMAIL PROTECTED] wrote: HI I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server Workers

Re: VPN question

2002-11-14 Thread Lionel Elie Mamane
On Thu, Nov 14, 2002 at 12:43:48PM +0100, Iñaki Martínez wrote: I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server * How to implement this VPN??? I would use IPSEC, but there are other solutions:

Re: VPN question

2002-11-14 Thread Jeff
Iñaki Martínez, 2002-Nov-14 12:43 +0100: HI I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server Workers from this company ONLY MUST have access to the server in the VPN. Perhaps some of

Re: VPN question

2002-11-14 Thread Maik M8acter backward
You can also try openvpn (http://openvpn.sourceforge.net/). On Thu, 14 Nov 2002 12:43:48 +0100 I [EMAIL PROTECTED] wrote: HI I must create a VPN between an external company and a server behind my firewall. Company---its_routerInternet---my_firewall-server Workers