Do you have a port 443 out from your job or school and need to have
secure VPN access files or ssh resources on your internal network at
home?
IPSEC & PPTP are imperfect as most firewalls can block them (PPTP
requires two sessions). Both have (ironically) protocol inherent
security holes, that can be disasterous without careful implementation
and patch upgrades.
References:
http://www.fx.dk/firewall/ipsec-firewall.html
http://en.wikipedia.org/wiki/Point-to-point_tunneling_protocol
http://www.darknet.org.uk/tag/ipsec-security/
http://www.securityfocus.com/infocus/1821
Well Adito (OpenVPN-ALS) to the rescue for all users, developers, and
administrators!
Alternate uses include controlling resources from a DMZ in the cloud;
maintaining control of borrowed or contract support sites, and of
course nepharious ones such as maintaining access to a hacked network
or site (so it's good that systems administrators know what this is
and how it's installed). NOTE this does require a static IP, so if
you have enabled a Ubuntu server as DMZ behind a Linksys, and cox
resets your DHCP address, you simply must run the installer again to
recreate your self signed certificate!
References:
http://sourceforge.net/projects/adito/
http://www.sohoadvisers.com/tutorials/adito-ssl-vpn/installing-adito-ssl-vpn
http://holisticinfosec.blogspot.com/2009/02/toolsmith-article-on-adito-ssl-vpn-now.html
http://reader.feedshow.com/show_items-feed=0706301c18a68fbfc5c65367d530382c
There's even a windows installer:
http://lars.werner.no/?p=174
Next Saturday is BT4 802.11 Disassembled at the Foundation for Blind
Children at 10:00 - 13:00
http://plug.phoenix.az.us/node/661
--
(623)239-3392
(503)754-4452
www.obnosis.com
http://www.obnosis.com/bt4.html
http://www.obnosis.com/motivatebytruth/beprepared.jpg
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
:%20Adito%20(a%20SourceForge%20Project)%20%5BNow%0A(OpenVPN-ALS)%5D&References=d4e0a6fd0910041702s4461b23cj3f7077de43952709@mail.gmail.com&In-Reply-To=d4e0a6fd0910041702s4461b23cj3f7077de43952709@mail.gmail.com&CC=%22Lisa%20Kachold%22%20<lisakachold@obnosis.com>,%20%22Main%20PLUG%20discussion%20list%22%20<plug-discuss@lists.plug.phoenix.az.us>&Body=On%202009-10-04%2022:59,%20Lisa%20Kachold%20wrote:%0A>%20Do%20you%20have%20a%20port%20443%20out%20from%20your%20job%20or%20school%20and%20need%20to%20have%0A>%20secure%20VPN%20access%20files%20or%20ssh%20resources%20on%20your%20internal%20network%20at%0A>%20home?%0A>%20%0A>%20IPSEC%20&%20PPTP%20are%20imperfect%20as%20most%20firewalls%20can%20block%20them%20(PPTP%0A>%20requires%20two%20sessions).%20Both%20have%20(ironically)%20protocol%20inherent%0A>%20security%20holes,%20that%20can%20be%20disasterous%20without%20careful%20implementation%0A>%20and%20patch%20upgrades.%0A>%20References:%0A>%20http://www.fx.dk/firewall/ipsec-firewall.html%0A>%20http://en.wikipedia.org/wiki/Point-to-point_tunneling_protocol%0A>%20http://www.darknet.org.uk/tag/ipsec-security/%0A>%20http://www.securityfocus.com/infocus/1821%0A>%20%0A>%20Well%20Adito%20(OpenVPN-ALS)%20to%20the%20rescue%20for%20all%20users,%20developers,%20and%0A>%20administrators!%0A>%20%0A>%20Alternate%20uses%20include%20controlling%20resources%20from%20a%20DMZ%20in%20the%20cloud;%0A>%20maintaining%20control%20of%20borrowed%20or%20contract%20support%20sites,%20and%20of%0A>%20course%20nepharious%20ones%20such%20as%20maintaining%20access%20to%20a%20hacked%20network%0A>%20or%20site%20(so%20it's%20good%20that%20systems%20administrators%20know%20what%20this%20is%0A>%20and%20how%20it's%20installed).%20%20NOTE%20this%20does%20require%20a%20static%20IP,%20so%20if%0A>%20you%20have%20enabled%20a%20Ubuntu%20server%20as%20DMZ%20behind%20a%20Linksys,%20and%20cox%0A>%20resets%20your%20DHCP%20address,%20you%20simply%20must%20run%20the%20installer%20again%20to%0A>%20recreate%20your%20self%20signed%20certificate!%0A>%20%0A>%20References:%0A>%20http://sourceforge.net/projects/adito/%0A>%20http://www.sohoadvisers.com/tutorials/adito-ssl-vpn/installing-adito-ssl-vpn%0A>%20http://holisticinfosec.blogspot.com/2009/02/toolsmith-article-on-adito-ssl-vpn-now.html%0A>%20http://reader.feedshow.com/show_items-feed=0706301c18a68fbfc5c65367d530382c%0A>%20%0A>%20There's%20even%20a%20windows%20installer:%20%20http://lars.werner.no/?p=174%0A>%20%0A>%20Next%20Saturday%20is%20BT4%20802.11%20Disassembled%20at%20the%20Foundation%20for%20Blind%0A>%20Children%20at%2010:00%20-%2013:00%0A>%20%0A>%20http://plug.phoenix.az.us/node/661%0A>%20%0A>%20--%20%0A>%20(623)239-3392%0A>%20(503)754-4452%20www.obnosis.com%0A>%20http://www.obnosis.com/bt4.html%0A>%20http://www.obnosis.com/motivatebytruth/beprepared.jpg%0A>%20---------------------------------------------------%0A>%20PLUG-discuss%20mailing%20list%20-%20PLUG-discuss@lists.plug.phoenix.az.us%0A>%20To%20subscribe,%20unsubscribe,%20or%20to%20change%20your%20mail%20settings:%0A>%20http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss%0A>%20%0A>%20 "Reply to this message")
(text/plain)