* Anne Carasik <[EMAIL PROTECTED]> [2003-04-16 18:59 +0200]:
> A true VPN is something like IPSec. SSH and SSL only tunnel TCP-based
> traffic (at least that's what they are supposed to do).

You can actually pipe ppp through ssh and thus tunnel arbitrary ip
packets over ssh, as shown in
http://www.jfranken.de/homepages/johannes/vortraege/ssh2.en.html#ToC12

> If you want a true VPN, do not use SSH or SSL.

I'd rather say, it depends on your setup...
Remember how easy it is to tunnel ssh over http proxies :-)  (examples at
http://www.jfranken.de/homepages/johannes/vortraege/ssh3.en.html )

-- 
Johannes Franken
 
Professional unix/network development
mailto:[EMAIL PROTECTED]
http://www.jfranken.de/

Reply via email to