Re: [gentoo-user] Re: Reaching my network over the internet

2005-12-29 Thread Ryan Viljoen
 KISS - keep it short and simple.

Doesnt that also stand for keep it simple stupid!?

You can also use port knocking for additional security for SSH. I dont
know anything about VPN so I wont comment.

--
Ryan Viljoen Bsc(Eng) (Electrical)

When you say I wrote a program that crashed Windows, people just
stare at you blankly and say Hey, I got those with the system, for
free. - Linus Torvalds, 1995

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Reaching my network over the internet

2005-10-17 Thread Jonathan Wright

John Jolet wrote:

Why do though all the hassle of setting up a VPN when you can use SSH to
provide a secure tunnel into the network and use that instead? Works
fine for me.

# ssh -L5900:hostname:5900 [EMAIL PROTECTED]
# vncviewer localhost:0


Okay, now show me the instance where you want box-internet-box-vnc server.


That does provide a tunnel between two boxes. It's quick and simple to 
setup and can be used by any ssh client, regardless of the system. 
Whether you're on Unix or Linux. You can even do it using Windows using 
PuTTY.


It's good to know in case if you need access but don't have a box that 
can't do VPN, or there's a problem with the VPN.


If you want to open it up for some reason to another box, you can use 
the gateway switch (-g) and SSH will listed to all incoming connections 
on that port on the remote computer.


# ssh -g -L5900:remote:5900 [EMAIL PROTECTED]:port

If you set up openvpn on your ssh server, you easily can tunnel across it.  
Doing that with ssh would add another tunnel.  Takes 5 minutes to set up.


I'm not disagreeing with you, but a VPN can add a whole level of 
complexity and setup, whereas if you just want to remotely access a VNC 
server across the Internet, SSH works great and has added security built in.


If you want to access more than VPN, i.e. SMB, or need the remote 
computer to 'appear' on the local network for some reason, VPN is fine - 
go ahead and use it.


KISS - keep it short and simple.

--
 Jonathan Wright   ~ mail at djnauk.co.uk
   ~ www.djnauk.co.uk
--
 2.6.13-gentoo-r3-djnauk-b2 AMD Athlon(tm) XP 2100+
 up 1 day, 21:39,  0 users,  load average: 0.64, 0.46, 0.33
--
 My mother took me to a psychiatrist when I was fifteen  because
 she thought I was a latent homosexual. There was nothing  latent
 about it.

  ~ Amanda Bearse
--
gentoo-user@gentoo.org mailing list



[gentoo-user] Re: Reaching my network over the internet

2005-10-16 Thread Gabriel M. Beddingfield
Grant wrote:

 Hello, I'd like to ssh into my network over the internet.  Do I need
 to set up VPN for that?  Can anyone point me in the right direction?

It depends on what you're trying to do.

If you just want to ssh into a machine on your network... then no.  From a
shell session on that machine you can access the other hosts on your
network.

If you want to ssh into your network and have your computer connected as
if you were actually on the network... then yes you will need VPN for that.

What sort of network access are you wanting?

-Gabriel


-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Reaching my network over the internet

2005-10-16 Thread Grant
  Hello, I'd like to ssh into my network over the internet.  Do I need
  to set up VPN for that?  Can anyone point me in the right direction?

 It depends on what you're trying to do.

 If you just want to ssh into a machine on your network... then no.  From a
 shell session on that machine you can access the other hosts on your
 network.

 If you want to ssh into your network and have your computer connected as
 if you were actually on the network... then yes you will need VPN for that.

 What sort of network access are you wanting?

 -Gabriel

Hi Gabriel,

Basically I have a network back home with a couple Gentoo systems
connected and I'd like to have ssh (and maybe vnc) access to them from
my Gentoo laptop no matter where I am.  What do you think?

- Grant

-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Reaching my network over the internet

2005-10-16 Thread John Jolet
On Sunday 16 October 2005 13:01, Grant wrote:
   Hello, I'd like to ssh into my network over the internet.  Do I need
   to set up VPN for that?  Can anyone point me in the right direction?
 
  It depends on what you're trying to do.
 
  If you just want to ssh into a machine on your network... then no.  From
  a shell session on that machine you can access the other hosts on your
  network.
 
  If you want to ssh into your network and have your computer connected
  as if you were actually on the network... then yes you will need VPN for
  that.
 
  What sort of network access are you wanting?
 
  -Gabriel

 Hi Gabriel,

 Basically I have a network back home with a couple Gentoo systems
 connected and I'd like to have ssh (and maybe vnc) access to them from
 my Gentoo laptop no matter where I am.  What do you think?

 - Grant
if you just need ssh, you don't need a vpn, just a port forward on your 
router.  for vnc, I'd use openvpn.
-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
[EMAIL PROTECTED]
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Reaching my network over the internet

2005-10-16 Thread Jonathan Wright
John Jolet wrote:
Basically I have a network back home with a couple Gentoo systems
connected and I'd like to have ssh (and maybe vnc) access to them from
my Gentoo laptop no matter where I am.  What do you think?
 
 if you just need ssh, you don't need a vpn, just a port forward on your 
 router.  for vnc, I'd use openvpn.

Why do though all the hassle of setting up a VPN when you can use SSH to
provide a secure tunnel into the network and use that instead? Works
fine for me.

# ssh -L5900:hostname:5900 [EMAIL PROTECTED]
# vncviewer localhost:0

-- 
 Jonathan Wright   ~ mail at djnauk.co.uk
   ~ www.djnauk.co.uk
--
 2.6.12-gentoo-r10-djnauk-b3 Intel(R) Pentium(R) 4 Mobile CPU 1.80GHz
 up 2 min,  1 user,  load average: 1.68, 0.87, 0.33
--
 People sometimes think I'm gay because I once played a  gay  in  a
 movie. It's funny. Audiences don't think you're a murderer  if  you
 play a murderer, but they do think you're gay if you play a gay.

~ Perry King
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: Reaching my network over the internet

2005-10-16 Thread John Jolet
On Sunday 16 October 2005 15:44, Jonathan Wright wrote:
 John Jolet wrote:
 Basically I have a network back home with a couple Gentoo systems
 connected and I'd like to have ssh (and maybe vnc) access to them from
 my Gentoo laptop no matter where I am.  What do you think?
 
  if you just need ssh, you don't need a vpn, just a port forward on your
  router.  for vnc, I'd use openvpn.

 Why do though all the hassle of setting up a VPN when you can use SSH to
 provide a secure tunnel into the network and use that instead? Works
 fine for me.

 # ssh -L5900:hostname:5900 [EMAIL PROTECTED]
 # vncviewer localhost:0
Okay, now show me the instance where you want box-internet-box-vnc server.
If you set up openvpn on your ssh server, you easily can tunnel across it.  
Doing that with ssh would add another tunnel.  Takes 5 minutes to set up.

 --
  Jonathan Wright   ~ mail at djnauk.co.uk
~ www.djnauk.co.uk
 --
  2.6.12-gentoo-r10-djnauk-b3 Intel(R) Pentium(R) 4 Mobile CPU 1.80GHz
  up 2 min,  1 user,  load average: 1.68, 0.87, 0.33
 --
  People sometimes think I'm gay because I once played a  gay  in  a
  movie. It's funny. Audiences don't think you're a murderer  if  you
  play a murderer, but they do think you're gay if you play a gay.

 ~ Perry King

-- 
John Jolet
Your On-Demand IT Department
512-762-0729
www.jolet.net
[EMAIL PROTECTED]
-- 
gentoo-user@gentoo.org mailing list