Article View: comp.security.firewalls
Article #486Re: ipsec-fbsd-MS
From: S. Pidgorny [MVP]
Date: Thu, 06 Jun 2002 10:10
Date: Thu, 06 Jun 2002 10:10
52 lines
2860 bytes
2860 bytes
Take a look at http://www.poptop.org/ - that is compatible even with Windows 95 clients using PPTP. Commenting what x y said, I don't believe that OpenSSH is viable solution for Windows domain logon tunneling - good for remote console and one-port TCP connections though. -- Svyatoslav Pidgorny, MS MVP, MCSE -= F1 is the key =- "pat" <hobo@speakeasy.net> wrote in message news:ufsgmhlsune7b2@corp.supernews.com... > Hi, > I have a small home network, a dsl connection and 1 static ip. At times I go > out of town and would like to get to my windoz boxes from over the internet > using ipsec. I could use win2000 svr easyly as a gateway but would prefer > not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a > ms client to my fbsd gateway with ipsec. If so how would my remote ms box > login to my domain from the fbsd box. I understand the issues of nat and > ipsec. I do not understand how to design a physical structure that will > work. I am willing to move the nat service to another box and dedicate my gw > as a ipf/ipsec box however I do not understand how my ms client box will > find the DC to login in. How do you setup a > > remote Win2000 client > ipsec tunnel starting point > | > | > Internet > | > | > Freebsd gw > ipf/ipsec tunnel end point > | > | > Nat service > | > | > Win2000 Domain login server > > So when I am on the road that my client box can log onto my home win2000 > domain. I am not asking for detailed technical info but generalize info. > Such as if this is possible , physical lay outs, programs to use and any > thing you are willing to share. > > Thx > >
Technical Details
Message-ID:
<OcsljLUDCHA.1108@tkmsftngp04>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!freenix!deine.net!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04References:
<ufsgmhlsune7b2@corp.supernews.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,19c23fa3f8e2181e X-Google-Attributes: gidf922c,public X-Google-Thread: 102e85,19c23fa3f8e2181e X-Google-Attributes: gid102e85,public X-Google-Thread: 10eb3b,19c23fa3f8e2181e X-Google-Attributes: gid10eb3b,public X-Google-Thread: fda0e,19c23fa3f8e2181e X-Google-Attributes: gidfda0e,public X-Google-ArrivalTime: 2002-06-06 03:16:46 PST From: "S. Pidgorny [MVP]" <slavickp@yahoo.com> References: <ufsgmhlsune7b2@corp.supernews.com> Subject: Re: ipsec-fbsd-MS Date: Thu, 6 Jun 2002 20:10:13 +1000 Lines: 54 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 Message-ID: <OcsljLUDCHA.1108@tkmsftngp04> Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security NNTP-Posting-Host: 017.b.008.mel.iprimus.net.au 210.50.87.17 Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!nntp.cs.ubc.ca!freenix!deine.net!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04