Re: OpenBSD <> Commercial VPNs

2015-10-12 Thread Predrag Punosevac
"Jack J. Woehr" wrote: > Predrag Punosevac wrote: > > The only time I ever had problems connecting to third party commercial > > VPN from OpenBSD was connecting to > Have you connected to a Fortinet SSL VPN? How did you do it? Sorry no experience with Fortinet but check out this thread http://

Re: OpenBSD <> Commercial VPNs

2015-10-12 Thread Jack J. Woehr
Predrag Punosevac wrote: The only time I ever had problems connecting to third party commercial VPN from OpenBSD was connecting to Have you connected to a Fortinet SSL VPN? How did you do it? -- Jack J. Woehr # Science is more than a body of knowledge. It's a way of www.well.com/~jax # thin

Re: OpenBSD <> Commercial VPNs

2015-10-12 Thread Predrag Punosevac
Gregor Best wrote: > >On Sun, Oct 11, 2015 at 12:08:00PM -0700, Danny Nguyen wrote: >> Has anyone successfully created a VPN with OpenBSD v5.7 or 5.8? >> [...] > >Yes. As of right now, I have > > $ ps aux | grep openvpn | wc -l > 8 > $ ipsecctl -sa | wc -l >

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Danny Nguyen
Thank you for the constructive feedback. Working on getting through absolute Openbsd by michael lucas. Hopefully, I'll be able to ask meaningful questions in the near future. On Sun, Oct 11, 2015 at 6:36 PM, Theo de Raadt wrote: > > What are the different kinds of VPNs? > > https://www.google.ca

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Theo de Raadt
> What are the different kinds of VPNs? https://www.google.ca/search?q=diferent+types+of+vpn Sorry Danny, not going to read the rest of the blah blah blah from someone who can't take the first step. You barely know what a VPN is, you only started running openbsd, and you are talking about SEL4.

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Danny Nguyen
What are the different kinds of VPNs? I have no idea what computers do so I'm the dumbest guy in this city and definitely this mailing list. VPN stands for virtual private network but when I think about what that is I think of a VPN as essentially a local network that allows incoming connections b

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jack J. Woehr
Dimitris Papastamos wrote: Dimitris Papastamos wrote: On Sun, Oct 11, 2015 at 01:06:58PM -0600, Jack J. Woehr wrote: I am not sure what's wrong. I guess you see traffic leaving your external interface but not getting any replies? I've got it, thanks! I forgot to do the sysctls necessary to

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Gregor Best
On Sun, Oct 11, 2015 at 12:08:00PM -0700, Danny Nguyen wrote: > Has anyone succesfully created a VPN with OpenBSD v5.7 or 5.8? > [...] Yes. As of right now, I have $ ps aux | grep openvpn | wc -l 8 $ ipsecctl -sa | wc -l 8 and a tinc tunnel. Tinc i

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Theo de Raadt
> Has anyone succesfully created a VPN with OpenBSD v5.7 or 5.8? Yes, people do it all the time. Please -- what KIND of VPN are you asking about. Is conversational precision that difficult? There are more than two handfuls of technologies that create something which is considered "a VPN". As a

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jack J. Woehr
Dimitris Papastamos wrote: I use vpnc regularly on -current without any special configuration and it works fine with my network. My config is as follows: IPSec gateway vpn.example.net IPSec ID FOO IPSec obfuscated secret BAR Xauth username BAZ DPD idle timeout (our side) 0 Yeah, that's mine t

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Danny Nguyen
Has anyone succesfully created a VPN with OpenBSD v5.7 or 5.8? That is the next step in my architecture to create a "more" secure environment. There are very few options on the market for that unfortunately. On Sun, Oct 11, 2015 at 11:47 AM, Jack J. Woehr wrote: > Jiri B wrote: > >> c Cisco's An

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Dimitris Papastamos
On Sun, Oct 11, 2015 at 12:47:42PM -0600, Jack J. Woehr wrote: > Jiri B wrote: > >c Cisco's AnyConnect SSL VPN and Juniper SSL VPN which is now known as > >Pulse Connect Secure is supported by openconnect which is in ports. > > I found vpnc in ports/net and that almost works. > > It connects and

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jack J. Woehr
Jiri B wrote: c Cisco's AnyConnect SSL VPN and Juniper SSL VPN which is now known as Pulse Connect Secure is supported by openconnect which is in ports. I found vpnc in ports/net and that almost works. It connects and shows it is adding the correct routes that I would expect. And then no traf

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Pedro Tender
In the fortinet firmware (yes, firmware...) downloads iirc. On Oct 11, 2015 3:55 PM, "Jack J. Woehr" wrote: > Pedro Tender wrote: > >> >> They also have a Linux client. >> >> >> > I've looked for it, any tips where it might be found? > > > -- > Jack J. Woehr # Science is more than a body of

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jack J. Woehr
Pedro Tender wrote: They also have a Linux client. I've looked for it, any tips where it might be found? -- Jack J. Woehr # Science is more than a body of knowledge. It's a way of www.well.com/~jax # thinking, a way of skeptically interrogating the universe www.softwoehr.com # with a f

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Jiri B
On Sat, Oct 10, 2015 at 03:35:02PM -0700, Joel Wir�?mu Pauling wrote: > You could try using Linux Binary emulation layer to connect using the cisco > vpnc client. For the old proprietary Cisco IPSec implementation: > > http://www.openbsd.org/papers/slack2k11-on_compat_linux.pdf > > I've recently

Re: OpenBSD <> Commercial VPNs

2015-10-11 Thread Pedro Tender
They also have a Linux client. On Oct 11, 2015 12:59 AM, "Jack J. Woehr" wrote: > Joel Wirāmu Pauling wrote: > > I am unsure if Fortinet have a linux client, I imagine they must. > > I think just Windows and Mac, thanks. > > -- > Jack J. Woehr # Science is more than a body of knowledge. It's

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Jack J. Woehr wrote: I'm sort of stuck at the moment on these macros where "rt" is an instance of struct rtentry : #define route_dest(route) \ I meant "route" is an instance of struct rtentry. -- Jack J. Woehr # Science is more than a body of knowledge. It's a way of www.well.com/~jax

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Jack J. Woehr wrote: Steve Shockley wrote: A quick search found https://github.com/adrienverge/openfortivpn, but I haven't tested it. It's clearly the right product. However. I've been trying to build it for an hour now. It requires Much Work for OpenBSD, it's somewhat wed to the Linux stac

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Joel Wirāmu Pauling wrote: > I am unsure if Fortinet have a linux client, I imagine they must. I think just Windows and Mac, thanks. -- Jack J. Woehr # Science is more than a body of knowledge. It's a way of www.well.com/~jax # thinking, a way of skeptically interrogating the universe www.so

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Steve Shockley wrote: A quick search found https://github.com/adrienverge/openfortivpn, but I haven't tested it. Thank you for the pointer. I didn't find that. What was your search string? It's clearly the right product. However. I've been trying to build it for an hour now. It requires Much

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Steve Shockley
On 10/10/2015 1:21 PM, Jack J. Woehr wrote: I looked at OpenVPN which conceptually resembles Fortinet but doesn't seem to have any way to connect to Fortinet SSL VPN. A quick search found https://github.com/adrienverge/openfortivpn, but I haven't tested it. That looks like it replaces the For

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Joel Wirāmu Pauling
You could try using Linux Binary emulation layer to connect using the cisco vpnc client. For the old proprietary Cisco IPSec implementation: http://www.openbsd.org/papers/slack2k11-on_compat_linux.pdf I've recently been using softether for my personal VPN's it's on Github I haven't tried to compi

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Janne Johansson wrote: Try ipsec, I hear some of the commercial offerings almost manage that too. I just can't figure out how to connect to VPN's I don't have any control of. I've found articles where the user had admin control of the Cisco or Fortinet device. I just need to log into nets I d

Re: OpenBSD <> Commercial VPNs

2015-10-10 Thread Janne Johansson
Try ipsec, I hear some of the commercial offerings almost manage that too. 2015-10-10 19:21 GMT+02:00 Jack J. Woehr : > Googled and not found much on connecting OpenBSD to proprietary VPN > offerings. > > I looked at OpenVPN which conceptually resembles Fortinet but doesn't seem > to have any wa

OpenBSD <> Commercial VPNs

2015-10-10 Thread Jack J. Woehr
Googled and not found much on connecting OpenBSD to proprietary VPN offerings. I looked at OpenVPN which conceptually resembles Fortinet but doesn't seem to have any way to connect to Fortinet SSL VPN. Any pointers or tips? -- Jack J. Woehr # Science is more than a body of knowledge. It's