Re: [Asterisk-Users] Best VPN server for * and woad warriors using windows?

2005-01-24 Thread Remco Barende
I would like to
install vpn software on the * server for roadwarriors to connect to with
laptops running windows.
OK, take a hard look at this before you get too far. Installing VPN
software *on* the Asterisk box is not a good idea. Now, you haven't
explained the volume of users on the box, or the availability needs of
the box, but either way, this is bad practice. The term "roadwarriors'
makes me think this is for a business.
Actually, both. I want to use it when I on holiday (then I am the 
roadwarrior) and want to make a cheap call home but I'm also considering 
it for business use.

Why is it bad to put a vpn server on the * box? I will not have any users 
logging into it or anything and none of the users will have shell on the 
box. Also that particular VPN connection will not be used for anything 
else but phonecalls.


There are numerous vpn server daemons around and I found many messages
about some of them using tcp/udp etc and instead of trying them all out
hopefully someone can recommend one?
If you want IPSec, take a look at OpenWall. If you must run this on
your asterisk box, so be it.
I was considering IPSEC because I heard it is safer or more secure than 
PPTP and Windows XP supports IPSEC natively (or so it claims). I don't 
care about connecting Win9x clients, stoneage hardware shouldn't be 
doing voip anyways. :)

Thanks!!
Remco
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Best VPN server for * and woad warriors using windows?

2005-01-23 Thread Doug Lytle
Remco Barende wrote:
What would be the best / easiest VPN software solution. I would like 
to install vpn software on the * server for roadwarriors to connect to 
with laptops running windows. Ideally the vpn solution will not 
require any additional software on the client side but will use IPSEC.

Remco,
I've had very good success with OpenVPN 
http://sourceforge.net/projects/openvpn

Doug
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Best VPN server for * and woad warriors using windows?

2005-01-23 Thread Brian Roy
On Sun, 23 Jan 2005 10:33:14 +0100 (CET), Remco Barende
<[EMAIL PROTECTED]> wrote:

> I would like to
> install vpn software on the * server for roadwarriors to connect to with
> laptops running windows. 

OK, take a hard look at this before you get too far. Installing VPN
software *on* the Asterisk box is not a good idea. Now, you haven't
explained the volume of users on the box, or the availability needs of
the box, but either way, this is bad practice. The term "roadwarriors'
makes me think this is for a business.

> There are numerous vpn server daemons around and I found many messages
> about some of them using tcp/udp etc and instead of trying them all out
> hopefully someone can recommend one?

If you want IPSec, take a look at OpenWall. If you must run this on
your asterisk box, so be it.

Now, if I were you, I would take this opportunity to install a good
Linux based firewall solution that sits in FRONT of the asterisk
server. I can't stress this enough. Take a look at m0n0wall. It has
vpn support (ipsec and pptp) built in, and it will run on nearly
anything. Put this on a machine by itself.

http://m0n0.ch/wall/

> 
> (I guess this would make a useful wiki page too).
> 
> Thanks!! Remco
>

Hope this helps!

-Chuji
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


Re: [Asterisk-Users] Best VPN server for * and woad warriors using windows?

2005-01-23 Thread Brancaleoni Matteo
Hi,

Il giorno dom, 23-01-2005 alle 10:33 +0100, Remco Barende ha scritto:
> What would be the best / easiest VPN software solution. I would like to 
> install vpn software on the * server for roadwarriors to connect to with 
> laptops running windows. Ideally the vpn solution will not require any 
> additional software on the client side but will use IPSEC.
> (Ofcourse call quality is important)

best if ofcourse some ipsec-based solutions, but that leads
to installing a client on winblow machines.
You can use pptp, ok is not secure as ipsec but is built in
in winblow 98,2k,xp... so on the client you must only
create a new VPN connection (under connections manager)
and you're done.

On the linux side, go to http://poptop.sourceforge.net/dox/
to grab the server.

I think that this is the easiest solutions for a decent
encryption ad ease of use, when using m$ clients.
(hoping you don't need to protect millions $$$ value data :> )

of course ipsec is better, but needs more work to set it
up, on client and on server side.

just my 2 cents,
Matteo


___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
   http://lists.digium.com/mailman/listinfo/asterisk-users


[Asterisk-Users] Best VPN server for * and woad warriors using windows?

2005-01-23 Thread Remco Barende
Hi list!
I'm sure the topic has been discussed but I could not find what I was 
looking for.

What would be the best / easiest VPN software solution. I would like to 
install vpn software on the * server for roadwarriors to connect to with 
laptops running windows. Ideally the vpn solution will not require any 
additional software on the client side but will use IPSEC.
(Ofcourse call quality is important)

There are numerous vpn server daemons around and I found many messages 
about some of them using tcp/udp etc and instead of trying them all out 
hopefully someone can recommend one?

(I guess this would make a useful wiki page too).
Thanks!! Remco
___
Asterisk-Users mailing list
Asterisk-Users@lists.digium.com
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users