🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.firewalls
Article #486

Re: ipsec-fbsd-MS

#486
From: S. Pidgorny [MVP]
Date: Thu, 06 Jun 2002 10:10
52 lines
2860 bytes
Take a look at http://www.poptop.org/ - that is compatible even with Windows
95 clients using PPTP.

Commenting what x y said, I don't believe that OpenSSH is viable solution
for Windows domain logon tunneling - good for remote console and one-port
TCP connections though.

--
Svyatoslav Pidgorny, MS MVP, MCSE
-= F1 is the key =-

"pat" <hobo@speakeasy.net> wrote in message
news:ufsgmhlsune7b2@corp.supernews.com...
> Hi,
> I have a small home network, a dsl connection and 1 static ip. At times I
go
> out of town and would like to get to my windoz boxes from over the
internet
> using ipsec. I could use win2000 svr easyly as a gateway but would prefer
> not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a
> ms client to my fbsd gateway with ipsec. If so how would my remote ms box
> login to my domain from the fbsd box. I understand the issues of nat and
> ipsec. I do not understand how to design a physical structure that will
> work. I am willing to move the nat service to another box and dedicate my
gw
> as a ipf/ipsec box however I do not understand how my ms client box will
> find the DC to login in. How do you setup a
>
> remote Win2000  client
>  ipsec tunnel starting point
>         |
>         |
>     Internet
>       |
>       |
> Freebsd gw
>   ipf/ipsec tunnel end point
>         |
>          |
>     Nat service
>         |
>         |
> Win2000 Domain login server
>
> So when I am on the road that my client box can log onto my home win2000
> domain. I am not asking for detailed technical info but generalize info.
> Such as if this is possible , physical lay outs, programs to use and any
> thing you are willing to share.
>
> Thx
>
>
Technical Details
Message-ID: <OcsljLUDCHA.1108@tkmsftngp04>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!freenix!deine.net!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04
References: <ufsgmhlsune7b2@corp.supernews.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,19c23fa3f8e2181e
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,19c23fa3f8e2181e
X-Google-Attributes: gid102e85,public
X-Google-Thread: 10eb3b,19c23fa3f8e2181e
X-Google-Attributes: gid10eb3b,public
X-Google-Thread: fda0e,19c23fa3f8e2181e
X-Google-Attributes: gidfda0e,public
X-Google-ArrivalTime: 2002-06-06 03:16:46 PST
From: "S. Pidgorny [MVP]" <slavickp@yahoo.com>
References: <ufsgmhlsune7b2@corp.supernews.com>
Subject: Re: ipsec-fbsd-MS
Date: Thu, 6 Jun 2002 20:10:13 +1000
Lines: 54
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Message-ID: <OcsljLUDCHA.1108@tkmsftngp04>
Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security
NNTP-Posting-Host: 017.b.008.mel.iprimus.net.au 210.50.87.17
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!freenix!deine.net!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04