<div dir="ltr">OpenVPN or most easily OpenVPNAS - comes with 2 licenses (you can share creds between user groups) or you can get an unlimited license from OpenVPN for $50.00 (last I looked) forever. <div><br></div><div style>
You can get a plug and play appliance as well with everything already configured, however it installs via package management and is easy to configure. </div><div style><br></div><div style>You can pull it up via a web based browser and download the client of your OS and your cert. It's a two click process for adding a new client. Be sure to enable passthrough for VPN on your SOHO router. </div>
<div style><br></div><div style>It's about the best application out there, since it uses IPtables, you can just use it for your Gateway machine with a well crafted iptables recipe and dnsmasq (easiest way to get into anything is via <a href="http://www.purehacking.com/news/dns-tunnelling-shellcode">DNS tunneling </a></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Apr 20, 2013 at 2:21 AM, Phil Waclawski <span dir="ltr"><<a href="mailto:phil.waclawski@mesacc.edu" target="_blank">phil.waclawski@mesacc.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">I'll skip that honor. I am aware of things like SSH brute force attacks (I do have a iptables throttle on that that limits attempts to a couple of tries), but I make no claim to really know the ins and outs of SSH. So, you are basically saying there is NO secure way to ever connect to a machine remotely? That's rather depressing. So it's more of a hope that someone who knows what they are doing will never target you specifically.<div>
<br></div><div>Phil W.</div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Apr 20, 2013 at 1:32 AM, Lisa Kachold <span dir="ltr"><<a href="mailto:lisakachold@obnosis.com" target="_blank">lisakachold@obnosis.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p>Your key is as sècure as the version of SSL/SSH. Îf you lèave password SSH login via. Pam.d ènabled, you will be targeted by more than DefCon's hackers! The mere fact that you have SSH turned ôn indicàtes you do not understand the risks. Your passwords most probably fail to be adequately complex? What's your router IP; we will make you a flag at the next hackfest?</p>
<div class="gmail_quote">On Apr 19, 2013 11:52 PM, "Phil Waclawski" <<a href="mailto:phil.waclawski@mesacc.edu" target="_blank">phil.waclawski@mesacc.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Well, I'm attending it in the hopes of learning about how some of these attacks work, and how to defend against them. Helps me teach my students better practices (and myself as well).<div><br></div><div>
To be honest, I had planned on having an old laptop with a brand new kubuntu install on it (no data I care about) and just doing some blender work and note taking offline, and never connecting it to a network while at the convention.</div>
<div><br></div><div>However, I'm curious, if I set up an ssh tunnel to a server I've already established a Key system with, wouldn't ssh throw up a huge warning from a man in the middle attack not having the right "handshake"? At that point I'd only be hosed if I was dumb enough to say "connect anyway"?.</div>
<div><br></div><div>Phil W.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Fri, Apr 19, 2013 at 10:30 PM, der.hans <span dir="ltr"><<a href="mailto:PLUGd@lufthans.com" target="_blank">PLUGd@lufthans.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Am 19. Apr, 2013 schwätzte Alan Dayley so:<br>
<br>
moin moin Alan,<div><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Why in the world would anyone actually attend a conference where you KNOW<br>
people are going to attack your electronics and data? Erasing everyone's<br>
</blockquote>
<br></div>
It's in the city where people pay to let someone steal from them, so it<br>
fits the theme.<br>
<br>
<a href="http://www.newyorker.com/online/blogs/culture/2013/01/video-the-art-of-pickpocketing.html" target="_blank">http://www.newyorker.com/<u></u>online/blogs/culture/2013/01/<u></u>video-the-art-of-<u></u>pickpocketing.html</a><div>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
credit cards? For the lulz, I guess. It sounds like a bunch of very smart<br>
trolls getting together to see who can out-troll who. I would just<br>
be collateral damage in such a group. I guess it's an effective way to keep<br>
the non-trolls and newbies out of the "defcon club." Or maybe it is a from<br>
of hazing.<br>
<br>
And, if I HAD to go, cash, pen and paper is all I would bring.<br>
</blockquote>
<br></div>
Make sure to keep them somewhere safe ;-).<br>
<br>
ciao,<br>
<br>
der.hans<span><font color="#888888"><br>
-- <br>
# <a href="http://www.LuftHans.com/" target="_blank">http://www.LuftHans.com/</a> <a href="http://www.LuftHans.com/Classes/" target="_blank">http://www.LuftHans.com/<u></u>Classes/</a><br>
# Like the maid, I don't do (M$)Windows. - der.hans</font></span><br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div>
<br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br></div>
</div></div><br>---------------------------------------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" target="_blank">http://lists.phxlinux.org/mailman/listinfo/plug-discuss</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div><br></div>
(503) 754-4452 Android<br>(623) 239-3392 Skype<br>(623) 688-3392 Google Voice<br>**<br><a href="http://it-clowns.com" target="_blank">it-clowns.com</a> <br>Chief Clown<br><br><br><br><br><br><br><br><br><br><br><br><br><br>
</div>