|
||||||||||
Sorry but I can't understand. Tech Services Terapies.org Jan Arbona __________________________________________ -----Original Message----- From: Marco Lingen [mailto:m dot lingen at ooms dot com] Sent: Monday, May 22, 2006 10:11 PM To: tech at terapies dot org Subject: Betr.: RE: [m0n0wall] PPTP questions (Ik ben vrij) Ik ben Maandag 22 tot en met vrijdag 26 Mei vrij. Bij dringende zaken kunt u contact opnemen met Cristian Stieding of een e-mailtje naar de helpdesk sturen. Marco Lingen >>> tech 05/22/06 22:10 >>> I not tested this, but see this: this academy project is very nice and I means is the right solution for you. Nice explanation and nices help images. Best regards. Tech Services Terapies.org Jan Arbona __________________________________________ _____ From: dan [mailto:haguru at gmail dot com] Sent: Monday, May 22, 2006 4:23 PM To: tech at terapies dot org Subject: Re: [m0n0wall] PPTP questions The static IP option is grayed out, but this would work, even if m0n0wall is the pptp server? On 5/22/06, Tech Terapies < tech at terapies dot org <mailto:tech at terapies dot org> > wrote: Yes of course, on the user properties on active directory on Dial in you can specify if the user it's allowed to vpn and remote dial, and one option to assign static ip and if you needs, static routing. The best is you use the same user/pass and trought the AD policy and user policies control all. Best regards from Andorra. Tech Services Terapies.org Jan Arbona __________________________________________ _____ From: dan [mailto: haguru at gmail dot com <mailto:haguru at gmail dot com> ] Sent: Monday, May 22, 2006 1:48 PM To: tech at terapies dot org Subject: Re: [m0n0wall] PPTP questions You made a few good points there, and I do use Radius. I guess I will stick with PPTP for now. Do you happen to know if it is possible to assign static IP addresses when using Radius? Thanks! On 5/19/06, Tech Terapies <tech at terapies dot org> wrote: In front of a the problems on the various vpn clients, and the many problems for install and use on basic users without admin privileges, is the best solution for a mobile clients, specially if users and pass are taken from ldap or radius. Try to run a sonic vpn client, or dlink, or cisco or any other on a portatil with w2k or xp with a basic user without privileges (specially if you made a hard work on domain polices) Is impossible. The native pptp client from w2k or xp, works fine. It's not the best, but the little problem. best regards Tech Services Terapies.org Jan Arbona __________________________________________ _____ From: dan [mailto: haguru at gmail dot com <mailto:haguru at gmail dot com> ] Sent: Friday, May 19, 2006 5:24 PM To: tech at terapies dot org Subject: Re: [m0n0wall] PPTP questions Do you consider PPTP to be secure enough? On 5/18/06, Tech Terapies <tech at terapies dot org> wrote: We have about 200 sonicwall 1260, 2040.... And about 100 m0n0, Our standard, if depends the bussines and the money, we prefer a mother and father behind all. For us, m0n0 is perfect for a first fw, little remote users, as example a Remote user needs connect to the office.... We put a ipsec vpn from m0n0 to sonicwall. Ussually we puts m0n0 over an EM appliance, never over soekris or old pc. We have pptp users on special situations, usually we puts ipsec tunnels. The bussines is the bussines, and our experience is, for a moderate support price, the problems are out. Tech Services Terapies.org Jan Arbona __________________________________________ -----Original Message----- From: dan [mailto:haguru at gmail dot com] Sent: Thursday, May 18, 2006 2:47 PM To: m0n0wall at lists dot m0n0 dot ch <mailto:m0n0wall at lists dot m0n0 dot ch> Subject: [m0n0wall] PPTP questions Hello, 1) I am strongly considering switching from an external SonicWall SOHO vpn appliance (ipsec) to the internal pptp server m0n0wall offers. I have been testing the PPTP server, and it seems to be pretty stable, but I am a little concerned about the security aspect. Most whitepapers discussing PPTP security mention that it is fairly easy to compromise this protocol. I do enforce 128 bit security, but would like more details on how secure this protocol really is. Also, are there any other reasons why I shouldn't migrate to PPTP? 2) I configured the PPTP server to use our radius server (IAS on a win2k AD box), and it looks like I can't assign static ip addresses when using radius. Is this assumption correct, or did I miss something obvious? Thanks! ------------------------------------------------------------------. De informatie verzonden met dit e-mail bericht is uitsluitend bestemd voor de geadresseerde. Gebruik van deze informatie door anderen dan de geadresseerde is niet toegestaan. Aan de inhoud van deze e-mail kunnen geen rechten worden ontleend. ------------------------------------------------------------------. |