AW: any VPN program at linux?

From: Fuchs Bernhard (Bernhard.Fuchs@itellium.com)
Date: 11/25/02

  • Next message: Frank Cheong: "Part of the web page being MODIFIED !" 
    From: Fuchs Bernhard <Bernhard.Fuchs@itellium.com>
To: "'Johannes Ullrich'" <jullrich@euclidian.com>, SB CH <chulmin2@hotmail.com>
Date: Mon, 25 Nov 2002 09:32:15 +0100

    >>>(1) ssh tunnels, in particular tunneling PPP over ssh
    >>> (+) easy to setup
    >>> (-) only works linux-linux
    >>> (-) tunnels everything over tcp.

    this is not right FSecure is for Window$ Client/Server
    there is also a free version.... OpenSSH for Window$

    Mit freundlichen Grüßen/ sincerely yours

    Bernhard Fuchs
    Junior System-Engineer
    IT-Infrastruktur/IT-Sicherheit

    ITELLIUM
    Systems & Services GmbH
    Fürther Straße 205
    90429 Nürnberg

    Tel.: +49-911-14-27321
    Fax: +49-911-14-22016
    mailto:bernhard.fuchs@itellium.com
    http://www.itellium.com

    This email is confidential. If you are not the intended recipient, you must
    not disclose or use the information contained in it. If you have received
    this mail in error, please tell us immediately by return email and delete
    the document. E-mails to and from the company are monitored for operational
    reasons and in accordance with lawful business practices. The contents of
    this email are those of the individual and do not necessarily represent the
    views of the company. The company accepts no responsibility once an e-mail
    and any attachments is sent.

    -----Ursprüngliche Nachricht-----
    Von: Johannes Ullrich [mailto:jullrich@euclidian.com]
    Gesendet: Freitag, 22. November 2002 02:56
    An: SB CH
    Cc: security-basics@securityfocus.com
    Betreff: Re: any VPN program at linux?

    > I would like to use VPN at linux?
    > Do you know any recommendable program?

    short answer: plenty...

    (1) ssh tunnels, in particular tunneling PPP over ssh
      (+) easy to setup
      (-) only works linux-linux
      (-) tunnels everything over tcp.

    (2) CIPE
      (+) comes with redhat.
      (+) a bit better performances (UDP, not TCP like ssh)
      (o) harder to setup then ssh, but not as hard as IPSEC ;-)
      (-) no Windows support I know off.

    (3) FreeSwan (IPSEC)
      (+) full IPSec implementation. Very interoperaple.
      (+) very flexible
      (-) pain to setup
      (-) problems with NAT

    (4) PPTP (Microsoft VPN)
      (+) works great with all versions of Windows.
      (+) not hard to setup.
      (-) frequently considered less secure then alternatives.
      (-) not as flexible and not as good interoperable as IPSec.
          (but works great as long as you deal with Windows/Linux machines)

    There is a pretty good New Riders book: Building Linux VPNs. It walks
    you through all these systems (and probably a couple more I forgot)
       

    -- 
--------------------------------------------------------------------
jullrich@euclidian.com             Collaborative Intrusion Detection
                                         join http://www.dshield.org

    Relevant Pages

    • Re: any VPN program at linux?
      ... ssh tunnels, in particular tunneling PPP over ssh ... tunnels everything over tcp. ... but not as hard as IPSEC;-) ... PPTP (Microsoft VPN) ...
      (Security-Basics)
    • Re: some attack to fedora machine .
      ... will compromise the BIOS, these will be cross platform, they will affect ... F8 installation last December. ... Each and every time the invader came in through ssh. ... Window$ maybe Window$, and *nix *nix, but because window ...
      (Fedora)
    • Re: Remote login, graphically?
      ... I can already login via SSH and fix things with a text editor. ... Now, I'd like to start several X programs on her machine, but have the user interface on my machine. ... However, when I start "firefox", I get the following error after some time waiting: ... The program 'firefox-bin' received an X Window System error. ...
      (Ubuntu)
    • Re: [Full-Disclosure] SSH Exploit Request
      ... *your* ssh can still go away if something else does a runaway and runs ... What use is an open SSH window, Mr Anderson, if you have no character echo? ... in a failure cascade - when one sysadmin is installing software during a 2AM ... test window and he's tired and cranky because instead of getting some sleep, ...
      (Full-Disclosure)
    • Re: Setting Column and Row Size
      ... I've been coding an SSH client for fun and learning, and I've noticed that my server sends "\r" characters after every 80 characters of output. ... How can I have my client set the row and column size? ... I would like to do this dynamically when the window is resized as well. ...
      (comp.terminals)