Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Dimitri Yioulos
On Wednesday 07 September 2005 5:58 pm, you wrote: > --On 07 September 2005 17:30 -0400, Dimitri Yioulos wrote: > > This takes the thread even OT, is the "stealth" mechanism built in, > > or is there a special directive to be added? > > It uses a pre-shared key, so it doesn't happen by default wit

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Stuart Henderson
--On 07 September 2005 17:30 -0400, Dimitri Yioulos wrote: This takes the thread even OT, is the "stealth" mechanism built in, or is there a special directive to be added? It uses a pre-shared key, so it doesn't happen by default with TLS (read about tls-auth in doco to learn how to enable i

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Dimitri Yioulos
Simon, This takes the thread even OT, is the "stealth" mechanism built in, or is there a special directive to be added? Thanks. Dimitri On Wednesday 07 September 2005 4:59 pm, you wrote: > Why not give OpenVPN a try, works well with OpenBSD and Windows XP and > has various options for password

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Simon Slaytor
Why not give OpenVPN a try, works well with OpenBSD and Windows XP and has various options for password protection along with a nice 'stealth' mechanism preventing it from appearing to none authorised clients. http://openvpn.net Tomas wrote: Hello, Please, can someone give me a clue how to

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Harford, Colin
You had the right idea with authpf. What I have done in the past is add the VPN pass rule to the authpf rule... Therefore, people have to ssh in, then the VPN can be established. You could do something similar. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] O

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Ryan Puckett
To echo the other replies, I highly suggest OpenVPN as well. Both isakmpd and openvpn recommend using digital certs to control access. Openvpn also has the "auth-user-pass-verify" switch which calls a script/app to do additional authentication. Think poor-man's 2-phase authentication: have d

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Stuart Henderson
--On 07 September 2005 14:08 +0300, Tomas wrote: Please, can someone give me a clue how to setup a vpn with authentication. I've set up a vpn between Windows clients and OpenBSD server, everything works fine. By itself 'vpn' can mean many things... tunnels over IPsec? PPTP? unencrypted GRE/G

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread knitti
try poptop. I've used it only in a most basic scenario, but it seemed to work well. it does VPN Windows-style (PPTP). --knitti

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Rod.. Whitworth
On Wed, 7 Sep 2005 14:08:08 +0300, Tomas wrote: >Hello, > >Please, can someone give me a clue how to setup a vpn with authentication. >I've set up a vpn between Windows clients and OpenBSD server, everything >works fine. But since most of our clients are using ADSL lines and their >IP's aren't sta

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread Mike Hernandez
I use openvpn, it uses PKI so only hosts with keys that you've signed will be able to access your vpn. I found an article (http://blog.innerewut.de/articles/2005/07/04/openvpn-2-0-on-openbsd) that helped me get it set up. openvpn also has client + server versions for windows, so it might be usefu

Re: [OT] Question about vpn and athorization between OpenBSD and Windows clients

2005-09-07 Thread [EMAIL PROTECTED]
Try this: http://www.thegreenbow.com/vpn.html. works very very well with openbsd. Tomas wrote: Hello, Please, can someone give me a clue how to setup a vpn with authentication. I've set up a vpn between Windows clients and OpenBSD server, everything works fine. But since most of our clients ar