search for: vpns

...o Internet through vpn. I want to dynamically share bandwith between vpn connections, so if there few connections, then they get all bandwith, if more then they get their minimal guaranteed bandwith. my idea is: ip-up.local: tc class add dev $DEV parent 1:1 classid 1:2${1/ppp/} htb rate $[$RATEUP/$VPNS]kbit ceil ${RATEUP}kbps tc filter add dev $DEV protocol ip parent 1:0 prio 1 u32 match ip src $5 flowid 1:2${1/ppp/} ip-down.local: tc class del dev $DEV parent 1:1 classid 1:2${1/ppp/} htb rate $[$RATEUP/$VPNS]kbit ceil ${RATEUP}kbps tc filter del dev $DEV protocol ip parent 1:0 prio 1 u32 match...

Hi, I use shorewall on 2 computers and I''m really happy with it. But now I came over a special case where my wisdom ends. I have 2 VPNs running via FreeS/WAN on the firewall host, and now I want to replace my hand made setup with shorewall. I use the same FreeS/WAN setup as it is working already. I read through the documentation but there are only examples of 1 static net2net VPN and 3 net2host VPNs. I need 2 static net2net VPNs....

I use 3 Ubuntu server 14.04 as KVM guest. Now I run 5 tinc vpns in switch mode. I use the same key for every vpn. Every kvm has connect to the two other servers. I need 5 vpns to have 5 networks connected but seperated. 1 vpn was running fine, but now that I run 5 vpns, my kvm crashes sometimes. Especially when I stop tinc. I used tinc 1.0.26 from repo. Now I...

Hi, I configured 2 vpn's between 2 servers. When starting the tinc on each server. De 2 vpns's look like 1 vpn. Can tinc be configure for multiple vpn's between 2 hosts or more. Lets say there are 3 servers A, B and C. I want a tinc vpn between host A en host B. And a second vpn between host B en C without is becoming one vpn. And for example a third vpn between host A en hos...

...offsite location together for a 3 day sale. I have the box working now with the latest ver of shorewall with two nics on this fedora box eth0 will be on the net eth1 loc. eth0 will authenacating ppoe over high gain wireless from an temp ISP. The lan is on 192.168.50.1 on eth1. I have the vpns working now all on that lan, I can access all of the businesses servers from this one fedora box. Now what I would like to do is ask for advice about this. To provide security between the businesses since they are all on 192.168.50.0/24 (no security between each other) is to make aliases to...

On Sat, Mar 26, 2016 at 12:03:48AM +0100, albi at life.de wrote: > 1 vpn was running fine, but now that I run 5 vpns, my kvm crashes sometimes. Especially when I stop tinc. > I used tinc 1.0.26 from repo. > Now I tried tinc 1.1 pre, same problem but less often. > > Any help or idea why system crashes? So the KVM instance itself crashes? Or Linux inside the VM? Any error messages you can salvage? Ho...

I am trying shorewall as my previous post With alisias on eth1 loc and 4 pptp client vpns. The odd thing is when I enter one of the vpns in interfaces such as vpn1 it works. But if I enter the vpn in the hosts file shorewall blocks the vpns. shorewall/hosts #ZONE HOST(S) OPTIONS loc eth1:192.168.25.0/24 loctw eth1:192.168.50.0/24 locsa eth1:192.168.75.0/24 vpntw ppp+...

...ault/rp_filter. If it is not 1, the filter is not on or not effective. Writing 1 to these files as root will turn on the filter, but you might need to check if your distribution can set these values at boot time. On Debian-derived distributions, this can be configured in the file /etc/sysctl.conf. VPNs in general could protect against this attack by making traffic analysis more difficult, by making packets all have the same size, and by sending packets at a fixed rate. However, this will result in lower performance, and will use a lot more bandwidth, so it is unlikely many people will want this....

...ault/rp_filter. If it is not 1, the filter is not on or not effective. Writing 1 to these files as root will turn on the filter, but you might need to check if your distribution can set these values at boot time. On Debian-derived distributions, this can be configured in the file /etc/sysctl.conf. VPNs in general could protect against this attack by making traffic analysis more difficult, by making packets all have the same size, and by sending packets at a fixed rate. However, this will result in lower performance, and will use a lot more bandwidth, so it is unlikely many people will want this....

Hello, response time: how is it possible to increase the response time on Tinc VPNs. When I use tinc over a fast or giga-bit network connection the ping-response time is normally about 1800 to 2000 ms. Sometimes I get ping response times at about 2.500 to 3.000 ms over a normal Ethernet Connection or a television-cable connection within the same providers-network in the same city....

Hi, I am thinking of purchasing a cheap Dlink VPN for testing purposes for use with my Asterisk box and would like to ask the list for advice on how to pick a VPN that will work with my box. I am a newbie to both VPN's and Asterisk so any advice will be appreciated. Thanks, Mike -------------- next part -------------- An HTML attachment was scrubbed... URL:

Hi all Is the use of a VPN between IP-PBX and VoIP Provider a useful tool? Since the QoS and general traffic of the Internet can never be predicted, would the implementation of a VPN between Client and VoIP Provider increase voice quality and/or security or is the converse true ? Thanks Barry

I am looking at options for VPN connections from iPhones and iPod Touches to CentOS systems. We use OpenVPN for connections with Windows, Mac OS X, and other Linux systems, but there don't appear to be any OpenVPN clients for iPhones (presumably because there are no tun/tap interfaces available yet). My experiences getting IPsec running on CentOS systems with OpenVPN have not been pretty.

hi all, http://www.newriders.com/books/title.cfm?isbn=1578702666 I searched the tinc archives and I know one of the authors asked a few questions about tinc. http://mail.nl.linux.org/tinc/2001-06/msg00030.html So...go out and buy it :) armijn -- --------------------------------------------------------------------------- armijn@nl.linux.org | http://people.nl.linux.org/~armijn/ | Penguin

Hi, Problem: I want 2 vpn tunnels for 2 subnets over one interface ipsec0. Documentation only describes config for 1 vpn or road warriors. I defined 2 vpn zones ''fre'' and ''swe''. #ZONE DISPLAY COMMENTS net Net Internet zone loc Local Local fre VPN_Fre VPN Fre swe VPN_Swe VPN Swe Interface ipsec0 is tunnel over eth1. Local is eth0. ipsec0 serves 2 zones: fre

I will shortly be replacing a couple of proprietary VPN boxes with a FreeBSD solution. Section 10.10 of the Handbook has a detailed description of how to do this. However I remember a lot of discussion about a year ago about whether the gif interface was necessary to set up VPNs like this or whether it was just a convenience, for "getting the routing right". A number of people said that gif was not needed but I've never found a step-by-step description of how to set up a lan-to-lan VPN without using it. Is the Handbook the current received wisdom on how to...

...t; stronger passwords for SQL > > > the hackers had the database administrators user account credentials, and > were coming in through the VPN via said credentials. I doubt stronger > passwords would have mattered. Hmmm, maybe a reasonable argument for the crypto-card type VPNs where the passwords aren't reusable... -- Les Mikesell lesmikesell at gmail.com

...e of two possible routes like this? And if so, is it also possible over a bridged connection which has no external IP address (by specifying the interface in the config file)? I realise there are other ways to do this, but I'm hoping that my previous post regarding Tincs ability to hop across VPNs will allow the site at the end of the Wireless to connect to other external VPNs. If you've had the patience to read this far, then thanks for any advice you can offer! John _______________________________________________ Join Excite! - http://www.excite.com The most personalized portal on t...

Definitely considered that. Running different VPNs and even running different instances of the daemon on different ports. But, as you rightly pointed out: *additional complexity*. It basically comes down to: what if you have a bad actor who needs credentials revoked immediately? We have a way of doing this already, but it can take up to 5 minutes...

I have this: class htb 1:29 parent 1:1 prio 0 rate 3000bit ceil 100000bit burst 1599b cburst 1611b Sent 33233 bytes 772 pkts (dropped 0, overlimits 0) lended: 415 borrowed: 357 giants: 0 tokens: -3756376 ctokens: 128779 or this: class htb 1:21 parent 1:1 prio 0 rate 3000bit ceil 100000bit burst 1599b cburst 1611b Sent 57554 bytes 618 pkts (dropped 0, overlimits 0) lended: 193 borrowed: 425