Re: ssh, openswan, openvpn or ...?

Greg Russell wrote:
> We have an iptables firewalling router setup here that is working well,
> as we've stress-tested it from external sites using all the attack tools
> we can find.
>
> We have several users that are "on the road" and require connectivity
> from various sites such as motels, coffeehouses, airports and dialup to
> various ISPs. We'd like to have a secure tunneling connection for these
> users, and we'd like to ask what might be a viable solution that works
> for all these various connection points?

I would recommend ssh with public/private cryptography keys. It is the
easiest to configure correctly and is flexible enough for most scenarios. It
is also very network/router/firewall friendly.

> By viable I mean that even username and password wouldn't be sniffable
> during connection initiation.

Don't use password authentication. The component between the screen and the
chair is too insecure and unreliable!

Regards.