Hey, we got it already. You don't need to send it 50 times. I think using something like FreeS/Wan or the IPsec stack built into the 2.6 kernel is your best bet. I never got a pptpd working and the MSChap stuff I think is still experimental. On Wed, 31 Mar 2004 21:40:31 +0200, Sébastien Bisoglio <bsebastien(a)bluewin.ch&gt; wrote: > Hi at all, > > I am making a VPN with pptp protocol but i haven't find any RPM for > pptpd installation or the MSCHAPv2 cryptage for the MS protocol ! > > Is this normal ? > > We aren't able to make this with a Fedora ? > > Is-it RPM for this if yes ? > > Thanks for all answers ! > > PS : Sorry for my english ! > PS2 : Sorry if 2 messages have been send ! > > >

Forwarding TCP and UDP ports means nothing in when it comes to VPNs. Can you get a box inside to support IPSec or L2TP? I have encountered the same issue with the firewall we have and have a box setup with openVPN (openvpn.sourceforge.net) that builds a good VPN between server and client. On Thu, 01 Apr 2004 00:13:34 +0200, Sébastien Bisoglio <bsebastien(a)bluewin.ch&gt; wrote: > Thanks for the answer... > > But I can't make a VPN with IPSEC because my router don't support > this... I just can forward TCP and UDP ports.. > > Then if any1 have an idea... > > Mark Haney wrote: > >> Hey, we got it already. You don't need to send it 50 times. I think >> using something like FreeS/Wan or the IPsec stack built into the 2.6 >> kernel is your best bet. I never got a pptpd working and the MSChap >> stuff I think is still experimental. >> >> On Wed, 31 Mar 2004 21:40:31 +0200, Sébastien Bisoglio >> <bsebastien(a)bluewin.ch&gt; wrote: >> <snip> >> >> >> > > >

Am Mi, den 31.03.2004 schrieb Sébastien Bisoglio um 21:40: >Hi at all, > >I am making a VPN with pptp protocol but i haven't find any RPM for >pptpd installation or the MSCHAPv2 cryptage for the MS protocol ! > >Is this normal ? > >We aren't able to make this with a Fedora ? Quote from http://fedora.redhat.com/: "The goal of The Fedora Project is to work with the Linux community to build a complete, general purpose operating system exclusively from free software" ^^^^^^^^^^^^^!!! MSCHAPv2, as the names says, is M$ proprietary stuff.

>Is-it RPM for this if yes ? Client: http://pptpclient.sourceforge.net/howto-fedora.phtml Server: http://sourceforge.net/project/showfiles.php?group_id=44827 running the ./kernelmod.sh will ask you if it should build an rpm for you. But I recommend not using pptp since it's not as secure as openvpn or IPSec. In addition you'll need to patch your kernel/build a kernelmodule and update the pppd I think. So OpenVPN or IPSec might be easier to install, since they are available at Dag Wieers repo -> install via yum...

http://dag.wieers.com/packages/openvpn/ http://dag.wieers.com/packages/kernel-module-freeswan/ IPSec is supported by Win 2000, XP and newer, openvpn is also available as Win32 app. Christoph

On Thu, 01 Apr 2004 01:31:05 +0200, Sébastien Bisoglio <bsebastien(a)bluewin.ch&gt; wrote: > Christoph Wickert wrote: > I know IPSec is better but my ISP router can't route packets for IPSEC > vpn... I can just route TCP or UDP packets ! > > I dont'know what is open-VPN... L2TP ? Ipsec ? PPTP ? OTher ? > Then you should be just fine with openvpn as it uses the OpenSSL protocol for securing the tunnel. If your router can't route SSL packets then it's not a router it's scrap.

-- Message original -- Date: Thu, 01 Apr 2004 08:16:58 +0100 From: Chris Hewitt <fedlist(a)manordat.demon.co.uk&gt; To: For users of Fedora Core releases <fedora-list(a)redhat.com&gt; Subject: Re: VPN with Fedora - PPTP Reply-To: For users of Fedora Core releases <fedora-list(a)redhat.com&gt; Sébastien Bisoglio wrote: > Mark Haney wrote: > >> On Thu, 01 Apr 2004 01:31:05 +0200, Sébastien Bisoglio >> <bsebastien(a)bluewin.ch&gt; wrote: >> >>> Christoph Wickert wrote: >> >> >> >>> I know IPSec is better but my ISP router can't route packets for >>> IPSEC vpn... I can just route TCP or UDP packets ! >>> >>> I dont'know what is open-VPN... L2TP ? Ipsec ? PPTP ? OTher ? >>> >> Then you should be just fine with openvpn as it uses the OpenSSL >> protocol for securing the tunnel. If your router can't route SSL >> packets then it's not a router it's scrap. >> > The SSL packets is the 445 TCP port right ? > > If yes it's Ok i can... > > And my ISP router is a Cayman 3341 ! The normal SSL port is 443.

Chris -- fedora-list mailing list fedora-list(a)redhat.com To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list