Re: PPTP with Encryption

2002-05-02 Thread Tadeusz Knapik
30.04.02 pisze Derek J. Balling ([EMAIL PROTECTED]): Except that that patch is against 2.4.0 There's a lot of disjointed pieces, and not all of them seem to be maintained or kept current: o pptpd - which seems to (now) not require any special effort o pppd needs to be patched or

Re: PPTP with Encryption

2002-05-02 Thread Tadeusz Knapik
30.04.02 pisze Derek J. Balling ([EMAIL PROTECTED]): Except that that patch is against 2.4.0 There's a lot of disjointed pieces, and not all of them seem to be maintained or kept current: o pptpd - which seems to (now) not require any special effort o pppd needs to be patched or

Re: PPTP with Encryption

2002-05-01 Thread Jean-Francois Dive
another solution you may want to try is to use freeswan + pptp. If the windows machines are 2k or sup, you dont need to install any additional soft on the machine. however, ipsec config on 2k and XP is a pain. So, i reckon the best way to do, would be to use a vpn client on the windows machine

Re: PPTP with Encryption

2002-05-01 Thread Jean-Francois Dive
another solution you may want to try is to use freeswan + pptp. If the windows machines are 2k or sup, you dont need to install any additional soft on the machine. however, ipsec config on 2k and XP is a pain. So, i reckon the best way to do, would be to use a vpn client on the windows machine

PPTP with Encryption

2002-04-30 Thread Derek J. Balling
Does anyone have a nice simple HOWTO on how to add encryption to the pptpd daemon, so that windows VPN users can connect using encryption? Preferred methods do NOT include patching things, if possible, because I'd like to not have to re-patch things every time new upgrades come out. Has

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
Last time I checked, PPTP comes with encryption. All you have to do is configure it. From Freshmeat: PoPToP About: PoPToP is a PPTP server for use in PPTP VPN environments. The current release version supports Windows 95/98/NT/2000 PPTP clients and PPTP Linux clients. With the relevant patches

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
At 8:43 AM -0700 4/30/02, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure it. I don't think you should have any patching to do. :) The home page for poptop is at http://www.poptop.org. Not unless the packaged pptpd/ppp has something else

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
On Tue, Apr 30, 2002 at 12:03:09PM -0400, Derek J. Balling wrote: I don't think you should have any patching to do. :) The home page for poptop is at http://www.poptop.org. Not unless the packaged pptpd/ppp has something else, from the poptop.org page: # Available PPPD patch allows Windows

Re: PPTP with Encryption

2002-04-30 Thread Martin Hermanowski
You need the mppe-kernel-modul *and* a patch for the pppd. It would be really nice if there were .deb's Martin On Tue, Apr 30, 2002 at 08:43:21AM -0700, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure it. From Freshmeat: PoPToP

Re: PPTP with Encryption

2002-04-30 Thread Christian G. Warden
looks like there's a package for the patch: kernel-patch-mppe - ppp_mppe module for pppd xn On Tue, Apr 30, 2002 at 12:03:09PM -0400, Derek J. Balling wrote: At 8:43 AM -0700 4/30/02, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure

Re: PPTP with Encryption

2002-04-30 Thread Tim van Erven
On Tue, Apr 30, 2002 at 10:54:24AM -0400, Derek J. Balling [EMAIL PROTECTED] wrote: Does anyone have a nice simple HOWTO on how to add encryption to the pptpd daemon, so that windows VPN users can connect using encryption? As a side note: have you considered that using the encryption

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
you considered that using the encryption in pptp forces you to store userpasswords in cleartext? For my ISP [1] that was a reason not to use pptp's encryption, especially since MS-CHAPv2 contains known security holes [2]. Yes, unfortunately, for our predominant workstation (Win98), M$'s PPTP

Re: PPTP with Encryption

2002-04-30 Thread Christian G. Warden
yeah, it's a mess. i spent 2 days trying to get poptop working a few months ago. once i got everything patched and running and could setup a vpn between pptp-linux and pptpd, i still couldn't get win98 to connect to pptpd. i gave up and decided next time i'd try to use ipsec with freeswan.

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
On Tue, Apr 30, 2002 at 01:24:21PM -0400, Derek J. Balling wrote: As a side note: have you considered that using the encryption in pptp forces you to store userpasswords in cleartext? For my ISP [1] that was a reason not to use pptp's encryption, especially since MS-CHAPv2 contains known

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
At 11:23 AM -0700 4/30/02, Anne Carasik wrote: (who would LOVE to move to a _MORE_ secure solution, but is content, for now, to only allow himself and one other to even have accounts on the box with the cleartext passwds) Ugh.. I'd never be content with cleartext passwords, especially

PPTP with Encryption

2002-04-30 Thread Derek J. Balling
Does anyone have a nice simple HOWTO on how to add encryption to the pptpd daemon, so that windows VPN users can connect using encryption? Preferred methods do NOT include patching things, if possible, because I'd like to not have to re-patch things every time new upgrades come out. Has

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
Last time I checked, PPTP comes with encryption. All you have to do is configure it. From Freshmeat: PoPToP About: PoPToP is a PPTP server for use in PPTP VPN environments. The current release version supports Windows 95/98/NT/2000 PPTP clients and PPTP Linux clients. With the relevant patches

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
At 8:43 AM -0700 4/30/02, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure it. I don't think you should have any patching to do. :) The home page for poptop is at http://www.poptop.org. Not unless the packaged pptpd/ppp has something else

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
On Tue, Apr 30, 2002 at 12:03:09PM -0400, Derek J. Balling wrote: I don't think you should have any patching to do. :) The home page for poptop is at http://www.poptop.org. Not unless the packaged pptpd/ppp has something else, from the poptop.org page: # Available PPPD patch allows Windows

Re: PPTP with Encryption

2002-04-30 Thread Martin Hermanowski
You need the mppe-kernel-modul *and* a patch for the pppd. It would be really nice if there were .deb's Martin On Tue, Apr 30, 2002 at 08:43:21AM -0700, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure it. From Freshmeat: PoPToP

Re: PPTP with Encryption

2002-04-30 Thread Christian G. Warden
looks like there's a package for the patch: kernel-patch-mppe - ppp_mppe module for pppd xn On Tue, Apr 30, 2002 at 12:03:09PM -0400, Derek J. Balling wrote: At 8:43 AM -0700 4/30/02, Anne Carasik wrote: Last time I checked, PPTP comes with encryption. All you have to do is configure it. I

Re: PPTP with Encryption

2002-04-30 Thread Tim van Erven
On Tue, Apr 30, 2002 at 10:54:24AM -0400, Derek J. Balling [EMAIL PROTECTED] wrote: Does anyone have a nice simple HOWTO on how to add encryption to the pptpd daemon, so that windows VPN users can connect using encryption? As a side note: have you considered that using the encryption in pptp

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
looks like there's a package for the patch: kernel-patch-mppe - ppp_mppe module for pppd Except that that patch is against 2.4.0 There's a lot of disjointed pieces, and not all of them seem to be maintained or kept current: o pptpd - which seems to (now) not require any special effort

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
you considered that using the encryption in pptp forces you to store userpasswords in cleartext? For my ISP [1] that was a reason not to use pptp's encryption, especially since MS-CHAPv2 contains known security holes [2]. Yes, unfortunately, for our predominant workstation (Win98), M$'s PPTP

Re: PPTP with Encryption

2002-04-30 Thread Christian G. Warden
yeah, it's a mess. i spent 2 days trying to get poptop working a few months ago. once i got everything patched and running and could setup a vpn between pptp-linux and pptpd, i still couldn't get win98 to connect to pptpd. i gave up and decided next time i'd try to use ipsec with freeswan.

Re: PPTP with Encryption

2002-04-30 Thread Anne Carasik
On Tue, Apr 30, 2002 at 01:24:21PM -0400, Derek J. Balling wrote: As a side note: have you considered that using the encryption in pptp forces you to store userpasswords in cleartext? For my ISP [1] that was a reason not to use pptp's encryption, especially since MS-CHAPv2 contains known

Re: PPTP with Encryption

2002-04-30 Thread Derek J. Balling
At 11:23 AM -0700 4/30/02, Anne Carasik wrote: (who would LOVE to move to a _MORE_ secure solution, but is content, for now, to only allow himself and one other to even have accounts on the box with the cleartext passwds) Ugh.. I'd never be content with cleartext passwords, especially

PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Jean-Francois Dive
hi all, I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the impressions from people of the list about the cryptographic strenght of such algorithm, especially now that wireless WEP RC4 based encryption have been broken. I understand that the

Re: PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Christoph Moench-Tegeder
## Jean-Francois Dive ([EMAIL PROTECTED]): I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the impressions from people of the list about the cryptographic strenght of such algorithm, especially now that wireless WEP RC4 based encryption have been

Re: PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Jean-Francois Dive
On Mon, Mar 04, 2002 at 03:20:44PM +0100, Christoph Moench-Tegeder wrote: thanks, this confirm me that i really have to avoid it ;) cheers, JeF ## Jean-Francois Dive ([EMAIL PROTECTED]): I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the

PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Jean-Francois Dive
hi all, I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the impressions from people of the list about the cryptographic strenght of such algorithm, especially now that wireless WEP RC4 based encryption have been broken. I understand that the

Re: PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Christoph Moench-Tegeder
## Jean-Francois Dive ([EMAIL PROTECTED]): I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the impressions from people of the list about the cryptographic strenght of such algorithm, especially now that wireless WEP RC4 based encryption have

Re: PPTP and encryption / RC4 weaknesses

2002-03-04 Thread Jean-Francois Dive
On Mon, Mar 04, 2002 at 03:20:44PM +0100, Christoph Moench-Tegeder wrote: thanks, this confirm me that i really have to avoid it ;) cheers, JeF ## Jean-Francois Dive ([EMAIL PROTECTED]): I was wondering: PPTP use RC4 up to 128 bit keys as an encryption mechanism. I'd like to have the