Re: Required Software

2007-01-26 Thread Richi Plana
On Fri, 2007-01-26 at 09:00 -0500, Duncan Hudson wrote:
 I'm sure that this has been discussed, but there will be a VPN client 
 pre-installed right?  I know it's open source and I'm free to put what I 
 want but don't you think there should be a pre-installed client that is 
 certified to work with the most popular business and prosumer router / 
 vpn boxes.

I've been working with Linux for such a long time and I'm not sure what
that VPN client is. Truth is, though most popular network devices
(Cisco, etc.) use VPN that Linux supports, it's Microsoft's VPN system
that's most prevalent in the companies I've encountered. Does anyone
know which VPN system works with MS? The choices for Linux I'm aware of
are Open/FreeSWAN (IPSec), Cisco VPN 5000 client, PPTP VPN and OpenVPN
(SSL-based).

Security is very important to roaming devices which have to go through
public infrastructures like the Internet.
--

Richi


___
OpenMoko community mailing list
community@lists.openmoko.org
https://lists.openmoko.org/mailman/listinfo/community


Re: Required Software

2007-01-26 Thread Alexandru Lazar

I've been working with Linux for such a long time and I'm not sure what
that VPN client is. Truth is, though most popular network devices
(Cisco, etc.) use VPN that Linux supports, it's Microsoft's VPN system
that's most prevalent in the companies I've encountered. Does anyone
know which VPN system works with MS? The choices for Linux I'm aware of
are Open/FreeSWAN (IPSec), Cisco VPN 5000 client, PPTP VPN and OpenVPN
(SSL-based).


OpenVPN sounds like a decent choice for porting, as it runs in
userspace, but afaik it's not compatible with MS (or any other VPN
solution). However, it does run on Linux, *BSD, OS X and Windows (I've
seen it ran on WinXP, not sure about Vista but it should do well).
It's also pretty secure (uses SSL and can use HMAC too). I haven't
looked at the code though so I can't say if it would be easy to port
or not.


Security is very important to roaming devices which have to go through
public infrastructures like the Internet.


:-D

___
OpenMoko community mailing list
community@lists.openmoko.org
https://lists.openmoko.org/mailman/listinfo/community


Re: Required Software

2007-01-26 Thread Joe Pfeiffer
Alexandru Lazar writes:
 I've been working with Linux for such a long time and I'm not sure what
 that VPN client is. Truth is, though most popular network devices
 (Cisco, etc.) use VPN that Linux supports, it's Microsoft's VPN system
 that's most prevalent in the companies I've encountered. Does anyone
 know which VPN system works with MS? The choices for Linux I'm aware of
 are Open/FreeSWAN (IPSec), Cisco VPN 5000 client, PPTP VPN and OpenVPN
 (SSL-based).

OpenVPN sounds like a decent choice for porting, as it runs in
userspace, but afaik it's not compatible with MS (or any other VPN
solution). However, it does run on Linux, *BSD, OS X and Windows (I've
seen it ran on WinXP, not sure about Vista but it should do well).
It's also pretty secure (uses SSL and can use HMAC too). I haven't
looked at the code though so I can't say if it would be easy to port
or not.

It does require the tun/tap driver in the kernel.

___
OpenMoko community mailing list
community@lists.openmoko.org
https://lists.openmoko.org/mailman/listinfo/community


Re: Required Software

2007-01-26 Thread Knight Walker
On Fri, 2007-01-26 at 10:16 -0700, Richi Plana wrote:
I've been working with Linux for such a long time and I'm not sure what
 that VPN client is. Truth is, though most popular network devices
 (Cisco, etc.) use VPN that Linux supports, it's Microsoft's VPN system
 that's most prevalent in the companies I've encountered. Does anyone
 know which VPN system works with MS? The choices for Linux I'm aware of
 are Open/FreeSWAN (IPSec), Cisco VPN 5000 client, PPTP VPN and OpenVPN
 (SSL-based).


There's one I've heard of called PopTop that is supposed to work with
Microsoft's PPTP VPN system.  As for Cisco, there is the VPN client, but
I don't like compiling their modules into my kernel.  The one I use with
the Ciscos at work is called vpnc 
( http://www.unix-ag.uni-kl.de/~massar/vpnc/ ) and it works well, only
requiring the tun/tap driver in the kernel.  OpenVPN, while it's my
favorite, is only compatible with itself.

 Security is very important to roaming devices which have to go through
 public infrastructures like the Internet.

I agree, which is why my OpenMoKo will probably have vpnc and OpenVPN on it.

-KW

___
OpenMoko community mailing list
community@lists.openmoko.org
https://lists.openmoko.org/mailman/listinfo/community