similar to: Multiple Vpns

I am trying shorewall as my previous post With alisias on eth1 loc and 4 pptp client vpns. The odd thing is when I enter one of the vpns in interfaces such as vpn1 it works. But if I enter the vpn in the hosts file shorewall blocks the vpns. shorewall/hosts #ZONE HOST(S) OPTIONS loc eth1:192.168.25.0/24 loctw eth1:192.168.50.0/24 locsa eth1:192.168.75.0/24 vpntw

I will shortly be replacing a couple of proprietary VPN boxes with a FreeBSD solution. Section 10.10 of the Handbook has a detailed description of how to do this. However I remember a lot of discussion about a year ago about whether the gif interface was necessary to set up VPNs like this or whether it was just a convenience, for "getting the routing right". A number of people said

I am looking at options for VPN connections from iPhones and iPod Touches to CentOS systems. We use OpenVPN for connections with Windows, Mac OS X, and other Linux systems, but there don't appear to be any OpenVPN clients for iPhones (presumably because there are no tun/tap interfaces available yet). My experiences getting IPsec running on CentOS systems with OpenVPN have not been pretty.

Hi list, I have to build vpn server for 1500 clients. No encryption necessary. can anyone please recommend me vpn server. I do not have experience on vpn. I have tested openvpn on my test setup, & its working fine. I want to check if there any other vpn server available. I have not checked but can pptp vpn be usefull? My requirement is to connect 1500 clients on vpn server. Need

we have an external 2Mbit dsl connection and running on it are several gre vpn tunnels so far i''ve given priority to the vpn traffic (using htb) can i now put rules in for the tunnels to control traffic within each tunnel (that''s where our video conferencing etc runs)? or can i only control the real interface (eth1 in our setup)? if not can i somehow see the packets inside the

Hi All, This is a general VPN question; PPTP VPNs seem to be very easy to set up with CentOS as the VPN server and the built-in windose client, but how do list members feel about the security vunerabilities reported with the MS implementation? Specifically the 6 problems reported here : http://www.schneier.com/pptp-faq.html or maybe im being paranoid? Would any of you roll this solution out

Hi All, Just joined the list to try and solve a problem. To show that I''ve read the rules I''ll start with the requested info os linux kernel-2.4.27 with latest netfilter pom for gre and pptp conntrack etc iptables is 1.3.0 - downloaded and compiled with the pom stuff and the 2.4.27 kernel shorewall version shorewall-2.2.1-2 from rpm ip addr show [root@squid3 root]# ip addr

Hi, I am using Shorewall 2.0.6 on Debian with iptables 1.29. Before I was using Shorewall 2.0.3 and If work correctly, I am not sure that my problems begin after upgrade to 2.0.6, but my problem is that I can''t see some websites on the pc clients ( such as www.microsoft.com ), but some websites yes ( they are not in the pc cache ). My config is Shorewall as gateway/router of

Hi List, After some research, it seems the only reasonable thing to do in order to get SIP phones behind NAT working reasonably well without fiddling with the DSL router is to have some kind of far end nat traversal mechanism. Is there any way to do this with open source tools? I've seen somewhere that far end nat traversal can be achieved with SER + nathelper does the job... has anybody

I am looking for the optimal VPN. Well it doens't have to be that elaborate. Just the best VPN. We currently have some customers using PPTP, some using openvpn, some using Cisco Any Connect and there are a few others. So my question is, if you have control of both ends (client and server) what is the best VPN to use? There are not too many requirements, but a big one is The VPN must return

I have clients, which connectin to Internet through vpn. I want to dynamically share bandwith between vpn connections, so if there few connections, then they get all bandwith, if more then they get their minimal guaranteed bandwith. my idea is: ip-up.local: tc class add dev $DEV parent 1:1 classid 1:2${1/ppp/} htb rate $[$RATEUP/$VPNS]kbit ceil ${RATEUP}kbps tc filter add dev $DEV protocol ip

Hello, I'm looking to use tinc. What are my options for connecting from a mobile device, e.g. iPhone/iPad or a droid? Is there any backwards compatibility with IPSec or PPTP or anything? Or would it be possible to implement a solution where a pptp vpn is bridged to the tinc vpn so clients can 'see' other clients on either network? Thanks, Adam

I use 3 Ubuntu server 14.04 as KVM guest. Now I run 5 tinc vpns in switch mode. I use the same key for every vpn. Every kvm has connect to the two other servers. I need 5 vpns to have 5 networks connected but seperated. 1 vpn was running fine, but now that I run 5 vpns, my kvm crashes sometimes. Especially when I stop tinc. I used tinc 1.0.26 from repo. Now I tried tinc 1.1 pre, same problem but

Hello, response time: how is it possible to increase the response time on Tinc VPNs. When I use tinc over a fast or giga-bit network connection the ping-response time is normally about 1800 to 2000 ms. Sometimes I get ping response times at about 2.500 to 3.000 ms over a normal Ethernet Connection or a television-cable connection within the same providers-network in the same city. The ping-time

I am running Poptop 1.1.4 VPN server, Samba 3.0.6, RH 9 (2.4.20-8 patched for mppe-mppc). When the end user connects via VPN, they can create a share to the samba shared folder that was created. When they clost the explorer window, then reopen the shared drive from the "My Computer" view, the share can not be re-opened with the error that the mapped drive is alreay in use. I have

Mike Messick wrote: > Hi Kevin, > > You might take a look at openvpn instead - http://openvpn.net. > > I've had great success for 3+ years using openvpn on my samba server and > having windows machines accessing shares via the vpn link. Since openvpn > can use udp as well it provides a much more resilient transport for samba > traffic (At the cost of some throughput

I have set up a VPN over PPTP on a CentOS server using the DKMS module rpm dkms-0-2.0.6-3.el4 from http://centos.karan.org/el4/extras/stable/i386/RPMS/repodata/repovie w/dkms-0-2.0.6-3.el4.kb.html and kernel_ppp_mppe-0.0.5-2dkms.noarch.rpm at http://pptpclient.sourceforge.net/howto-fedora- core-3.phtml. I have configured the pptpd server on Centos4 to use MS_CHAPv2, 128bit encryption and

Hi There, We currently using iproute2 for load balancing. However we need more upload speed as we load balance over 3 dsl lines. I''ve been looking for a way to combine the upload speed to more faster. Found a site called www.upstreaminter.net where these guys bond the adsl channels to improve uploads, Since downloading is problem as its need to know the ip address of the downloader they

Hello everyone, I have a problem regarding gre tunneling, I have two linux box both of them has a private network and the linux A is connected to the internet via wireless radio and the other linux B is connected to the internet via lease line. Here is the setup of my two linux box Linux A eth0 = 203.189.x.1 (internet) eth1 = 192.168.1.1 (going to hub private network) Linux B eth0 = 205.198.x.1

I have a firewall running Shorewall 1.3.13-1 from rpm on a redhat 7.3 box. The box has three nics assigned to zones loc net and dmz. We also have multiple vpn links accomplished via ssh tunnels, These links all come from dynamic IP addresses with known private subnets behind them. There are basically two types of networks these vpns connect, one with access to almost everything and one with