Vpn - Argh.

Soon have to implement a VPN between two gateway machines running
linux 2.4.x (+iptables) . I've been looking over freeswan and such and it's
looking the most promising so far. One of the things they want to be able
to do is share a database file (proprietary format win32 based) that is on
one
of the servers and shared through samba. Has anyone here sucessfully set
anything quite like this up? will the record/file locking work properly
through
the vpn ? I read also I'd probably have to set up WINS in samba. I want
gateway <-> gateway encrypted not so much gateway<->host . If anyone has
useful firsthand knowledge on doing this please let me know.

George Peverill wrote:

> Soon have to implement a VPN between two gateway machines running
> linux 2.4.x (+iptables) . I've been looking over freeswan and such and
> it's looking the most promising so far. One of the things they want to be
> able to do is share a database file (proprietary format win32 based) that
> is on one
> of the servers and shared through samba. Has anyone here sucessfully set
> anything quite like this up? will the record/file locking work properly
> through
> the vpn ? I read also I'd probably have to set up WINS in samba. I want
> gateway <-> gateway encrypted not so much gateway<->host . If anyone has
> useful firsthand knowledge on doing this please let me know.
>
>

You might want to try CIPE, which comes with Red Hat and maybe other
distros. It works well and appears to the system as another network
interface. So, if the database works over a network, it should be OK over
the VPN.

--

Fundamentalism is fundamentally wrong.

To reply to this message, replace everything to the left of "@" with
james.knott.

James Knott wrote:

> George Peverill wrote:
> You might want to try CIPE, which comes with Red Hat and maybe other
> distros. It works well and appears to the system as another network

I read somewhere (/. probably) that CIPE has security problems; iirc
insufficient packet padding and distinguishable key exchange packets, among
others.

I switched to OpenVPN which brings the additional advantage of working
between two hosts with dynamic IP. And besides I found it easier to set up.

MfG, Ulrich