Re: poptop on OpenBSD 5.3

2013-08-12 Thread Marko Cupać
On Mon, 5 Aug 2013 14:46:20 -0600 Alvaro Mantilla Gimenez wrote: > Hi Wesley, Lo__c, > >Thanks for the advice. I didn't know about npppd. It seems an > interesting option. >I am going to try that. +1 for npppd, i wrote howto (in Serbian though) here: https://www.mimar.rs/npppd-novi-open

Re: poptop on OpenBSD 5.3

2013-08-05 Thread Alvaro Mantilla Gimenez
Hi Wesley, Loïc, Thanks for the advice. I didn't know about npppd. It seems an interesting option. I am going to try that. Cheers, Alvaro 2013/8/4 Loïc BLOT > I approve Wesley, > if you use OpenBSD 5.3 you should use npppd it's simpler than poptop and > have nearly the same

Re: poptop on OpenBSD 5.3

2013-08-04 Thread Loïc BLOT
I approve Wesley, if you use OpenBSD 5.3 you should use npppd it's simpler than poptop and have nearly the same functionalities -- Best regards, Loïc BLOT, UNIX systems, security and network expert http://www.unix-experience.fr Le lundi 05 août 2013 à 08:46 +0400, Wesley MOUEDINE ASSABY a éc

Re: poptop on OpenBSD 5.3

2013-08-04 Thread Wesley MOUEDINE ASSABY
Hi, Why not use the embedded package in OpenBSD 5.3 : npppd ?? conf files : /etc/npppd/npppd.conf and npppd-users Below a link that will help you on : http://fr.slideshare.net/GiovanniBechis/npppd-easy-vpn-with-openbsd Cheers, Wesley Le 2013-08-05 4:48, Alvaro Mantilla Gimenez a écrit : Hi,

Re: poptop connection problem

2008-10-07 Thread Richard P. Koett
Richard P. Koett wrote: > I installed -current (i386), downloaded src & ports, and installed > poptop-1.3.0 and pptp-1.7.1p0. > Trying to establish a pptp connection fails, and the following is > logged in /var/log/daemon: > > Oct 5 13:31:58 gateway ppp[25094]: Warning: Label plugin rejected >

Re: PoPToP Vulnerability Question

2008-01-29 Thread Richard P. Koett
Stuart Henderson wrote: > On 2008/01/29 09:20, Richard P. Koett wrote: >> The audit I was shown stated that vulnerable versions are prior to >> "1.1.4-bs". These version numbers seem to follow a pattern I don't >> understand. Would I be correct in interpreting "bs" as later than >> "b3p1"? > > sur

Re: PoPToP Vulnerability Question

2008-01-29 Thread Stuart Henderson
On 2008/01/29 09:20, Richard P. Koett wrote: > Joel Sing wrote: > > Note that that exploit is for versions earlier than 1.1.4.b3 - the > > previous ports version was 1.1.4.b4, which one would presume is > > patched for this vulnerability. Obviously this assumes that no other > > exploits have been

Re: PoPToP Vulnerability Question

2008-01-29 Thread Richard P. Koett
Joel Sing wrote: > Note that that exploit is for versions earlier than 1.1.4.b3 - the > previous ports version was 1.1.4.b4, which one would presume is > patched for this vulnerability. Obviously this assumes that no other > exploits have been found since version 1.1.4.b4. The audit I was shown st

Re: PoPToP Vulnerability Question

2008-01-29 Thread Joel Sing
On Tuesday 29 January 2008, Stuart Henderson wrote: > On 2008/01/28 20:05, Richard P. Koett wrote: > > The machine is running poptop-1.1.4.b4p1. Someone did an audit and > > declared "PoPToP servers prior to version 1.1.4-bs are vulnerable to a > > buffer overflow". > > Nice of PoPToP to warn about

Re: PoPToP Vulnerability Question

2008-01-29 Thread Stuart Henderson
On 2008/01/28 20:05, Richard P. Koett wrote: > > The machine is running poptop-1.1.4.b4p1. Someone did an audit and declared > "PoPToP servers prior to version 1.1.4-bs are vulnerable to a buffer > overflow". Nice of PoPToP to warn about this on their web page (not...) > I notice that even the c

Re: PoPToP Vulnerability Question

2008-01-28 Thread Richard P. Koett
Eduardo Tongson wrote: > Did you look at ports if it has patch applied for the vulnerability? > The administrator of that OpenBSD machine should already be aware the > installed software. It is not an automagical secure system after all. > I don't mean to imply that I expect ports to be automagica

Re: PoPToP Vulnerability Question

2008-01-28 Thread Richard P. Koett
Axton wrote: > On Jan 28, 2008 11:05 PM, Richard P. Koett <[EMAIL PROTECTED]> wrote: >> Dear Misc: >> >> I've been asked to look into an issue on a i386 system running >> OpenBSD 3.7. I realize this is rather out-of-date, so feel free to >> ignore this question if it's inappropriate... >> >> The

Re: PoPToP Vulnerability Question

2008-01-28 Thread Eduardo Tongson
Did you look at ports if it has patch applied for the vulnerability? The administrator of that OpenBSD machine should already be aware the installed software. It is not an automagical secure system after all. On Jan 29, 2008 12:05 PM, Richard P. Koett <[EMAIL PROTECTED]> wrote: > Dear Misc: > > I'

Re: PoPToP Vulnerability Question

2008-01-28 Thread Axton
On Jan 28, 2008 11:05 PM, Richard P. Koett <[EMAIL PROTECTED]> wrote: > Dear Misc: > > I've been asked to look into an issue on a i386 system running OpenBSD 3.7. I > realize this is rather out-of-date, so feel free to ignore this question if > it's inappropriate... > > The machine is running popto

Re: Poptop

2007-11-14 Thread David Brohall
Thanks Bryan, I haven't tried it on 4.1 and have nothing to compare. Would you please direct me to some actual information (openbsd where you don't need to recompile) or tell me what settings you have? - ppp.conf - pptpd.conf - ifconfig - what interface(s) you use for VPN and LAN and how you

Re: Poptop

2007-11-14 Thread Bryan Irvine
Should be the same as in 4.1. A tip though, use a different IP range not in use on your LAN. I had issues with machines not knowing where to route before I did that. --Bryan On Nov 14, 2007 12:00 PM, David Brohall <[EMAIL PROTECTED]> wrote: > Does anyone know a working poptop howto or have some

Re: poptop with arp proxy?

2007-03-19 Thread Bryan Irvine
Nevermind, I figured it out. I set up an alias on my internal interface and then set up my pptp.conf and ppp.conf to assign IP's on this new range. Now everything works as I expect. Thanks for the suggestions. --Bryan On 3/19/07, Bryan Irvine <[EMAIL PROTECTED]> wrote: On 3/9/07, Joachim Sch

Re: poptop with arp proxy?

2007-03-19 Thread Bryan Irvine
On 3/9/07, Joachim Schipper <[EMAIL PROTECTED]> wrote: On Fri, Mar 09, 2007 at 01:31:38PM -0800, Bryan Irvine wrote: > I'm running poptop on my home firewall, but I can't see any of the > machines on that network (though I can see indivudal machine on > friends network that are connected via isak

Re: poptop with arp proxy?

2007-03-09 Thread Joachim Schipper
On Fri, Mar 09, 2007 at 01:31:38PM -0800, Bryan Irvine wrote: > I'm running poptop on my home firewall, but I can't see any of the > machines on that network (though I can see indivudal machine on > friends network that are connected via isakmpd). Running tcpdump I > can see the packets going into

Re: poptop config question

2007-02-08 Thread James Mackinnon
the non-tunneled link James - Original Message - From: "Bryan Irvine" <[EMAIL PROTECTED]> To: "James Mackinnon" <[EMAIL PROTECTED]> Cc: Sent: Thursday, February 08, 2007 5:45 PM Subject: Re: poptop config question On 2/8/07, James Mackinnon <

Re: poptop config question

2007-02-08 Thread James Mackinnon
Brian, if using windows PPTP setup, remove the Use remote networks gateway checkmark so that everything you do doesn't go through the Poptop box including web. You will however require the use remote network gateway if the side you are connecting has multiple networks routed in other locations

Re: poptop config question

2007-02-08 Thread Bryan Irvine
On 2/8/07, James Mackinnon <[EMAIL PROTECTED]> wrote: Brian, if using windows PPTP setup, remove the Use remote networks gateway checkmark so that everything you do doesn't go through the Poptop box including web. I've tested using the windows vpn setup and the mac os x. Same problem. You wi