🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #485

Re: ipsec-fbsd-MS

#485
From: Dave Magda
Date: Thu, 06 Jun 2002 00:19
42 lines
2752 bytes
On Wed, 5 Jun 2002 12:56:47 -0400, pat <hobo@speakeasy.net> wrote:
> Hi,
> I have a small home network, a dsl connection and 1 static ip. At times I go
> out of town and would like to get to my windoz boxes from over the internet
> using ipsec. I could use win2000 svr easyly as a gateway but would prefer
> not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a

The following were found using Google and searching for "pptp+FreeBSD"
and "ipsec+FreeBSD":

FreeBSD Diary has articles on both IPSec and PPTP:

    http://www.freebsddiary.org/pptp.php
    http://www.freebsddiary.org/ipsec-tunnel.php

Daemon News also has a IPsec How-To:

    http://www.daemonnews.org/200101/ipsec-howto.html

BSD Today also has an article about "a FreeBSD firewall with an IPSec
uplink":

    http://www.bsdtoday.com/2002/April/Features671.html


I remember reading this a while and thought it pertinent (sp?) to your
problem:

If you're really paranoid please note that Microsoft's implementation of
PPTP isn't the most secure:

    http://www.counterpane.com/pptpv2-paper.html
    http://www.counterpane.com/pptp-paper.html
    http://www.counterpane.com/pptp-faq.html

Generally you should look at IPSec more than PPTP.

-- 
David Magda <dmagda at ee.ryerson.ca>
Because the innovator has for enemies all those who have done well under
the old conditions, and lukewarm defenders in those who may do well 
under the new. -- Niccolo Machiavelli, _The Prince_, Chapter VI
Technical Details
Message-ID: <slrnaftajn.be9.dmagda@number6.magda.ca>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!webster!nf1.bellglobal.com!nf2.bellglobal.com!news20.bellglobal.com.POSTED!not-for-mail
References: <ufsgmhlsune7b2@corp.supernews.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,19c23fa3f8e2181e
X-Google-Attributes: gidf922c,public
X-Google-Thread: fda0e,19c23fa3f8e2181e
X-Google-Attributes: gidfda0e,public
X-Google-Thread: 10eb3b,19c23fa3f8e2181e
X-Google-Attributes: gid10eb3b,public
X-Google-Thread: 102e85,19c23fa3f8e2181e
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2002-06-05 17:21:38 PST
Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security
From: Dave Magda <dmagda@number6.magda.ca>
Subject: Re: ipsec-fbsd-MS
References: <ufsgmhlsune7b2@corp.supernews.com>
Reply-To: dmagda+usenet@ee.ryerson.ca
Message-ID: <slrnaftajn.be9.dmagda@number6.magda.ca>
User-Agent: slrn/0.9.7.3 (FreeBSD)
Lines: 42
Date: Thu, 06 Jun 2002 00:19:01 GMT
NNTP-Posting-Host: 64.229.221.109
X-Complaints-To: abuse@sympatico.ca
X-Trace: news20.bellglobal.com 1023322741 64.229.221.109 (Wed, 05 Jun 2002 20:19:01 EDT)
NNTP-Posting-Date: Wed, 05 Jun 2002 20:19:01 EDT
Organization: Bell Sympatico
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!webster!nf1.bellglobal.com!nf2.bellglobal.com!news20.bellglobal.com.POSTED!not-for-mail