OpenVPN is a good solution, I'm sure, but probably no better than the IPSEC solution I have now. I run a setup program, then import a policy file. Done. Unfortunately, even that is too much to ask of many users. Plus, once a computer is set up, it now has access to the VPN. This is not acceptable with public access computers such as those at the library or cyber cafe. :-(
> -----Original Message----- > From: Garrett P. Taylor [mailto:[EMAIL PROTECTED] > Sent: Monday, May 17, 2004 3:22 PM > To: [EMAIL PROTECTED] > Subject: RE: [RLUG] Writing an Encrypting Router Program > > > I use OpenVPN here at work. It works great and is highly secure. The > best part is all the data packets run over UDP cutting the overhead of > TCP. (Wrapping TCP in TCP can get nasty when it comes to > handshaking and > what have you.) The HowTo on openvpn page is easy to follow. There's a > Gentoo emerge for it as well. > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of > Mike McKay > Sent: Saturday, May 15, 2004 3:14 PM > To: [EMAIL PROTECTED] > Subject: Re: [RLUG] Writing an Encrypting Router Program > > Robinson, Eric R. wrote: > > > Traditional IPSEC VPN solutions are out of the question > because they > > require software to be installed on the client workstation > and can be > > difficult to configure. > > Have you looked at openvpn? http://openvpn.sourceforge.net/ I > don't know > much about vpns but I managed to setup one up between home > and my wife's > office using VNC to do the remote configure (3 lines of a config file > was all it took I think) in about 30 minutes. 30 minutes > total from when > I first hit the above web site. > > > > My thought is to write an encrypting router program that would be > > implemented as an ActiveX control or Java applet. When the applet > > loads, it binds itself to 127.0.0.2 with a bogus MAC address. It > > modifies the local routing table to become the new default gateway. > > You probably can't do it with an applet due to the Java > security model. > Look into Java Web Start if you need to break out of the > sandbox. I have > never built an ActiveX so can't help you there... > > Good luck > > Mike > > > _______________________________________________ > RLUG mailing list > [EMAIL PROTECTED] > http://lists.rlug.org/mailman/listinfo/rlug > > > > _______________________________________________ > RLUG mailing list > [EMAIL PROTECTED] > http://lists.rlug.org/mailman/listinfo/rlug > _______________________________________________ RLUG mailing list [EMAIL PROTECTED] http://lists.rlug.org/mailman/listinfo/rlug
