LinuxSA Mailing list archives

  From: Richard Russell <richard@yellowgoanna.com>
  To  : John Edwards <isplist@adam.com.au>
  Date: 28 May 2002 10:15:30 +0930

Re: FreeS/WAN and PoPToP VPN Hell

On Tue, 2002-05-28 at 10:05, John Edwards wrote:
> Richard Russell wrote:
> 
> > Situation is that I need secure comms via internet from a Private
> > 192.168.x.y LAN behind a static IP Debian gateway machine to roving
> > users on Windows 95|98|ME|NT4|2000|XP laptops and home PCs, which
> > presumably will be on real IPs, but I guess I can't garantee that.
> > 
> > Pretty normal, eh?
> 
> You'd think so, but no.
> 
> Most IP VPN systems do not work through ordinary Network Address
> Translation.

yes... I'm discovering that...

> 
> PPTP at least uses GRE, which is a different IP protocol type. Most
> implementations of NAT do not support GRE properly, only TCP and UDP.

thrills

> 
> It shouldn't be too hard to get users from the Internet connecting to
> the Debian machine directly, but it will be difficult if you're trying
> to connect to a server behind it.

I beleive I am trying to get real IPs mostly, but it's impossible to
tell....

Thanks..

rr

> 
> John Edwards
> 
-- 
Richard Russell
Yellow Goanna P/L
e: richard@yellowgoanna.com
m: +61 412 827 805
f: +61 8 8462 2362

-- 
LinuxSA WWW: http://www.linuxsa.org.au/  IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
  mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject