From owner-freebsd-security@FreeBSD.ORG  Thu May  8 07:52:02 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 8931837B405
	for <freebsd-security@freebsd.org>;
	Thu,  8 May 2003 07:52:02 -0700 (PDT)
Received: from mail2.qc.uunet.ca (mail2.qc.uunet.ca [198.168.54.17])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 728C343FDD
	for <freebsd-security@freebsd.org>;
	Thu,  8 May 2003 07:51:59 -0700 (PDT)
	(envelope-from anarcat@espresso-com.com)
Received: from xtanbul.studio.espresso-com.com ([216.94.147.57])
	by mail2.qc.uunet.ca (8.12.9/8.12.9) with ESMTP id h48EpubX021651;
	Thu, 8 May 2003 10:51:57 -0400
Received: from anarcat by xtanbul.studio.espresso-com.com with local (Exim
	3.36 #1 (Debian))
	id 19DmkX-000088-00; Thu, 08 May 2003 10:51:57 -0400
Date: Thu, 8 May 2003 10:51:57 -0400
From: The Anarcat <anarcat@anarcat.ath.cx>
To: Brett Glass <brett@lariat.org>
Message-ID: <20030508145156.GA442@xtanbul>
Mail-Followup-To: Brett Glass <brett@lariat.org>,
	Michael Collette <metrol@metrol.net>,
	FreeBSD Security <freebsd-security@freebsd.org>
References: <200305071921.33596.metrol@metrol.net>
	<4.3.2.7.2.20030507220032.00bcec10@localhost>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4.3.2.7.2.20030507220032.00bcec10@localhost>
User-Agent: Mutt/1.5.4i
Sender: The Anarcat <anarcat@xtanbul.FreeBSD.ORG>
cc: FreeBSD Security <freebsd-security@freebsd.org>
cc: Michael Collette <metrol@metrol.net>
Subject: Re: VPN through BSD for Win2k, totally baffled
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 08 May 2003 14:52:03 -0000

On mer mai 07, 2003 at 10:04:32 -0600, Brett Glass wrote:
> I've been using PPTP for this purpose. Microsoft's PPTP implementation
> is pretty brain dead, but if you're willing to bend the configuration
> of your network a little to accommodate it and configure your clients
> carefully, you can set up a VPN that's accessible from most versions 
> of Windows. Not super-secure, but secure enough for most purposes.
> 
> I have been interested in trying L2TP, but am not sure about the
> stability of the server software for FreeBSD. And I can't find
> a FreeBSD client. (There's an L2TP netgraph node, but there are
> no docs on how to use it with mpd and likewise nothing on how to 
> use it with userland PPP.)

I found that the mpd client is pretty easy to setup and really
powerful.

PPTP has the advantage of working out of the box over NAT or whatever
odd network you can have.

A.