Re: Comcast@Home bans VPNs

2000-08-27 Thread Damien Miller

On Thu, 24 Aug 2000, Phil Karn wrote:

 I've been saying for some time that we need a IP-over-SSL tunneling
 protocol standard. ISPs would *never* dare block TCP port 443, since
 as we all know the only important Internet application is to let
 people buy stuff online...

You can do this using ppp over stunnel[1], a SSL wrapper tool.

-d

[1] http://www.stunnel.org/

-- 
| "Bombay is 250ms from New York in the new world order" - Alan Cox
| Damien Miller - http://www.mindrot.org/
| Email: [EMAIL PROTECTED] (home) -or- [EMAIL PROTECTED] (work)







Re: Comcast@Home bans VPNs

2000-08-26 Thread Bram Cohen

On Thu, 24 Aug 2000, Phil Karn wrote:

 I've been saying for some time that we need a IP-over-SSL tunneling
 protocol standard. ISPs would *never* dare block TCP port 443, since
 as we all know the only important Internet application is to let
 people buy stuff online...

You can tunnel PPP over SSH ...

-Bram Cohen





Re: Comcast@Home bans VPNs

2000-08-24 Thread Phil Karn

Is making an SSL connection creating a VPN? It's really not much 
different in an abstract sense. Most applications are using browsers 

I've been saying for some time that we need a IP-over-SSL tunneling
protocol standard. ISPs would *never* dare block TCP port 443, since
as we all know the only important Internet application is to let
people buy stuff online...

*Great* essay in today's NYT, by the way.

Phil




Re: Comcast@Home bans VPNs

2000-08-21 Thread Dennis Glatting


Has comcast defined a VPN (i.e., IPsec, SSH, etc.)?








Re: Comcast@Home bans VPNs

2000-08-21 Thread Peter Wayner


Is making an SSL connection creating a VPN? It's really not much 
different in an abstract sense. Most applications are using browsers 
as interfaces anyway. So I think this will only encourage businesses 
to set up SSL server/client models instead of general VPNs.

-Peter
-- 
--
Tune to http://www.wayner.org/books/ffa/  for information on my book 
on Free Software.




Re: Comcast@Home bans VPNs

2000-08-20 Thread Ben Laurie

Russell Nelson wrote:
 
 Ian Brown writes:
   ... subscribers to agree not to use the service as a means to create a VPN.
 
 Could someone describe to me (in my ignorance) the problem this rule
 is intended to solve?

Loss of revenue from leased lines. BT did a number of interesting things
during their ADSL trial to prevent the same problem, culminating with
configuring the routers to block incoming connects (so you can't run
servers on ADSL). One thing they overlooked was that the routers are in
the customers' premises, leading to widepsread router hacking. This led
to a rather amusing email reminding triallists that hacking their router
was in breach of the TCs!

They also reduced the bandwidth available considerably once they
realised that, strangely, people hadn't subscribed to ADSL to watch
postage-stamp-sized versions of crap movies served directly on the ADSL
backbone, and really just wanted faster Internet access (I used to love
the survey calls I got during the trial - BT: "So, sir, which movies
have you watched from our multimedia server?" ... me: "What multimedia
server?", and so on).

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

Coming to ApacheCon Europe 2000? http://apachecon.com/




Re: Comcast@Home bans VPNs

2000-08-20 Thread James A. Donald

 --
Ian Brown writes:
... subscribers to agree not to use the service as a means to create 
a VPN.

At 10:52 PM 8/19/2000 -0400, Russell Nelson wrote:
  Could someone describe to me (in my ignorance) the problem this rule is 
intended to solve?

Sounds like a market differentiation tactic.

Businesses are less sensitive to price than consumers, because it is the 
shareholders money, not the money of the man making the decision, and 
because it is pre tax money, whereas consumer money is after tax money.

For a long time isps have sold high price high bandwidth connections to 
businesses, and lower price low bandwidth connections to consumers.  Now 
they want to continue selling high price high bandwidth connections to 
business while selling low price high bandwidth connections to consumers.

 --digsig
  James A. Donald
  6YeGpsZR+nOTh/cGwvITnSR3TdzclVpR0+pr3YYQdkG
  Hr/YyHXmYGQ7/+ZP37tbmWdEyV+JYlnjJGBtKW4R
  4hi3WCtze8wlEEA1ucGrUy2hUJwkdS2JoNRWBxGlj





Re: Comcast@Home bans VPNs

2000-08-19 Thread Russell Nelson

Ian Brown writes:
  ... subscribers to agree not to use the service as a means to create a VPN.

Could someone describe to me (in my ignorance) the problem this rule
is intended to solve?

-- 
-russ nelson [EMAIL PROTECTED]  http://russnelson.com  | If you think 
Crynwr sells support for free software  | PGPok | health care is expensive now
521 Pleasant Valley Rd. | +1 315 268 1925 voice | now, wait until you see
Potsdam, NY 13676-3213  | +1 315 268 9201 FAX   | what it costs when it's free. 




Comcast@Home bans VPNs

2000-08-17 Thread Ian Brown

Customers blast Comcast move to foil bandwidth hogs 
By Corey Grice
Staff Writer, CNET News.com
August 16, 2000, 12:00 p.m. PT 

Revisions made to a Comcast Online customer agreement document
have irked some high-speed cable-modem customers concerned about
a prohibition on the use of secure networking technology. 

The document, which governs acceptable uses for the company's
cable-modem service Comcast@Home, was recently updated for the third
time. The new version, in section 6B, requires subscribers to agree not to
use
the service as a means to create what is known as a virtual private
network, or
VPN--a technology that provides a secure connection across the Internet...

http://news.cnet.com/news/0-1004-200-2536215.html