🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #484

Re: ipsec-fbsd-MS

#484
From: pat
Date: Wed, 05 Jun 2002 21:22
75 lines
3764 bytes
Thx, I'll give it a shot


"x y" <jamescagney90210@excite.com> wrote in message
news:uQc3nHMDCHA.1980@tkmsftngp04...
> I do think there is a way to do that by finding a windows vpn client that
is
> compatable with your bsd vpn server or a bsd vpn server that is compatable
> with your windows 2000 vpn client.  With VPN, you should be assigned an IP
> address on the internal network that should allow you to reach your home
> network, although you will probably want to log into windows either using
a
> cached domain ID and password or a local account, instead of trying to
> authenticate on your remote DC.  Domain-wide login is I think a frequent
> problem with many VPN implementations and I often have to authenticate
with
> each server separately and also run the login script myself.  I also
> understand that Windows 9x and maybe ME may have problems with trying to
use
> one login ID to log into your local machine and a different login ID to
log
> into remote servers.
>
> I am told that OpenSSH from www.networksimplicity.com also allows a
VPN-like
> encrypted tunnel using a free client and server.
>
> "pat" <hobo@speakeasy.net> wrote in message
> news:ufsgmhlsune7b2@corp.supernews.com...
> > Hi,
> > I have a small home network, a dsl connection and 1 static ip. At times
I
> go
> > out of town and would like to get to my windoz boxes from over the
> internet
> > using ipsec. I could use win2000 svr easyly as a gateway but would
prefer
> > not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from
a
> > ms client to my fbsd gateway with ipsec. If so how would my remote ms
box
> > login to my domain from the fbsd box. I understand the issues of nat and
> > ipsec. I do not understand how to design a physical structure that will
> > work. I am willing to move the nat service to another box and dedicate
my
> gw
> > as a ipf/ipsec box however I do not understand how my ms client box will
> > find the DC to login in. How do you setup a
> >
> > remote Win2000  client
> >  ipsec tunnel starting point
> >         |
> >         |
> >     Internet
> >       |
> >       |
> > Freebsd gw
> >   ipf/ipsec tunnel end point
> >         |
> >          |
> >     Nat service
> >         |
> >         |
> > Win2000 Domain login server
> >
> > So when I am on the road that my client box can log onto my home win2000
> > domain. I am not asking for detailed technical info but generalize info.
> > Such as if this is possible , physical lay outs, programs to use and any
> > thing you are willing to share.
> >
> > Thx
> >
> >
>
>
Technical Details
Message-ID: <uft08jg91rbg73@corp.supernews.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
References: <ufsgmhlsune7b2@corp.supernews.com> <uQc3nHMDCHA.1980@tkmsftngp04>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,19c23fa3f8e2181e
X-Google-Attributes: gidf922c,public
X-Google-Thread: fda0e,19c23fa3f8e2181e
X-Google-Attributes: gidfda0e,public
X-Google-Thread: 10eb3b,19c23fa3f8e2181e
X-Google-Attributes: gid10eb3b,public
X-Google-Thread: 102e85,19c23fa3f8e2181e
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2002-06-05 14:22:28 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail
From: "pat" <hobo@speakeasy.net>
Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security
Subject: Re: ipsec-fbsd-MS
Date: Wed, 5 Jun 2002 17:22:26 -0400
Organization: Posted via Supernews, http://www.supernews.com
Message-ID: <uft08jg91rbg73@corp.supernews.com>
References: <ufsgmhlsune7b2@corp.supernews.com> <uQc3nHMDCHA.1980@tkmsftngp04>
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
X-Complaints-To: newsabuse@supernews.com
Lines: 77