Re: freebsd vpn server behind nat dsl router

2007-03-26 Thread Robert Johannes
On Thu, 15 Mar 2007, Tom Judge wrote: Robert Johannes wrote: On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: Ok, I have done quite a bit of work since my last email, but I still don't see visible progress. I did rebuild world and the kernel with the NAT-T patches/support that you recommended.

Re: freebsd vpn server behind nat dsl router

2007-03-14 Thread Tom Judge
Robert Johannes wrote: On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: Ok, I have done quite a bit of work since my last email, but I still don't see visible progress. I did rebuild world and the kernel with the NAT-T patches/support that you recommended. I have been playing around with ipsec

Re: freebsd vpn server behind nat dsl router

2007-03-14 Thread Robert Johannes
On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: On Wed, Mar 07, 2007 at 12:04:17PM -0600, Robert Johannes wrote: Thanks for your response. My freebsd vpn servers are behind the dsl routers at each site which. The modems have firewall and NAT turned on. The vpn servers are part of the local LANs,

Re: IPSec tunnel interfaces (was: freebsd vpn server behind nat dsl router)

2007-03-10 Thread Jeremie Le Hen
Hi Yvan, On Wed, Mar 07, 2007 at 06:06:17PM +0100, VANHULLEBUS Yvan wrote: > - FreeBSD handbook talks about Gif interfaces for IPSec tunnels. Just > forget that part and use directly IPSec tunnels without Gif > interfaces. While I understand why using gif(4) to create IPSec tunnels is not rec

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Tom Judge
Robert Johannes wrote: On Wed, 7 Mar 2007, Tom Judge wrote: Looking into adding nat-t to ipsec as we speak. I would suggest you go with Yvan's suggestion of doing away with gif and adding the nat-t support to ipsec. Alternatively you could use a UDP/TCP based vpn solution such as openvpn

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Thomas Wahyudi
Robert Johannes wrote: As far as openvpn goes, I looked into it in October or Nov. last year, and it seemed not to be very scalable; I have 6 different offices that all need to connect and chat with each other, and it didn't seem like openvpn would allow for this to happen. I didn't investiga

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Robert Johannes
On Wed, 7 Mar 2007, Tom Judge wrote: Robert Johannes wrote: On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: My situations is rather unique, and I am needing an expert's eyes to glance at it and confirm whether it is doable or not. I have a simple diagram that illustrates what I am trying to do

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Robert Johannes
On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: On Wed, Mar 07, 2007 at 12:04:17PM -0600, Robert Johannes wrote: Thanks for your response. My freebsd vpn servers are behind the dsl routers at each site which. The modems have firewall and NAT turned on. The vpn servers are part of the local LANs,

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Tom Judge
Robert Johannes wrote: On Wed, 7 Mar 2007, VANHULLEBUS Yvan wrote: My situations is rather unique, and I am needing an expert's eyes to glance at it and confirm whether it is doable or not. I have a simple diagram that illustrates what I am trying to do, and it is located here (about 40k): h

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread VANHULLEBUS Yvan
On Wed, Mar 07, 2007 at 12:04:17PM -0600, Robert Johannes wrote: > Thanks for your response. My freebsd vpn servers are behind the dsl > routers at each site which. The modems have firewall and NAT turned on. > The vpn servers are part of the local LANs, and I have port-forwarding > setup betw

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread Robert Johannes
Thanks for your response. My freebsd vpn servers are behind the dsl routers at each site which. The modems have firewall and NAT turned on. The vpn servers are part of the local LANs, and I have port-forwarding setup between the dsl modems and the vpn servers. E.g, when traffic comes from th

Re: freebsd vpn server behind nat dsl router

2007-03-07 Thread VANHULLEBUS Yvan
On Wed, Mar 07, 2007 at 09:59:44AM -0600, Robert Johannes wrote: > Hello Greg, > I am writing you, because I saw your responses to a couple of messages on > the freebsd-security mailing list related to freebsd vpn and nat. Well, I'm not Greg, but hi, and here are some informations :-) > My situ

freebsd vpn server behind nat dsl router

2007-03-07 Thread Robert Johannes
Hello Greg, I am writing you, because I saw your responses to a couple of messages on the freebsd-security mailing list related to freebsd vpn and nat. My situations is rather unique, and I am needing an expert's eyes to glance at it and confirm whether it is doable or not. I have a simple d