CentOS - Nov 2006 - pptp, ipsec and vpn

Hi All,

This is a general VPN question;
PPTP VPNs seem to be very easy to set up with CentOS as the VPN server
and the built-in windose client, but how do list members feel about the
security vunerabilities reported with the MS implementation?
Specifically the 6 problems reported here : 
http://www.schneier.com/pptp-faq.html
or maybe im being paranoid?

Would any of you roll this solution out using the MS client for business 
use?
I generally dont trust anything MS does, especially when security is 
concerned

I feel i should be leaning towards an IPSec VPN, would anyone agree? 
(exchanging keys is not a problem for us)

Thanks to all of you - this mailing list is fantastic :)

Regards,

MrKiwi

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, Nov 07, 2006 at 12:27:59PM +1300, MrKiwi wrote:
> This is a general VPN question;
> PPTP VPNs seem to be very easy to set up with CentOS as the VPN server
> and the built-in windose client, but how do list members feel about the
> security vunerabilities reported with the MS implementation?
> Specifically the 6 problems reported here : 
> http://www.schneier.com/pptp-faq.html
> or maybe im being paranoid?
> 
> Would any of you roll this solution out using the MS client for business 
> use?
> I generally dont trust anything MS does, especially when security is 
> concerned
> 
> I feel i should be leaning towards an IPSec VPN, would anyone agree? 
> (exchanging keys is not a problem for us)
If possible, my suggestion is always to use OpenVPN.

Having used PPTP and IPSec on many places in the past, OpenVPN
proved to be the most simple and easy to have working (no NAT
issues, among other things) of the bunch.

- -- 
Rodrigo Barbosa
"Quid quid Latine dictum sit, altum viditur"
"Be excellent to each other ..." - Bill & Ted (Wyld Stallyns)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFT+grpdyWzQ5b5ckRAqANAJ0S86a5itp63iebcd8HXBSsBGplGwCeOSxM
2KYtTHJxbaz1/fmQvLSwAgA=5gej
-----END PGP SIGNATURE-----