From owner-freebsd-questions@FreeBSD.ORG  Wed Jun  6 12:38:36 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id A6CD116A400
	for <freebsd-questions@freebsd.org>;
	Wed,  6 Jun 2007 12:38:36 +0000 (UTC)
	(envelope-from wmoran@potentialtech.com)
Received: from mail.potentialtech.com (internet.potentialtech.com
	[66.167.251.6])
	by mx1.freebsd.org (Postfix) with ESMTP id 77DE113C46C
	for <freebsd-questions@freebsd.org>;
	Wed,  6 Jun 2007 12:38:36 +0000 (UTC)
	(envelope-from wmoran@potentialtech.com)
Received: from vanquish.pgh.priv.collaborativefusion.com
	(pr40.pitbpa0.pub.collaborativefusion.com [206.210.89.202])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mail.potentialtech.com (Postfix) with ESMTP id 6D36EEBC7F;
	Wed,  6 Jun 2007 08:38:35 -0400 (EDT)
Date: Wed, 6 Jun 2007 08:38:34 -0400
From: Bill Moran <wmoran@potentialtech.com>
To: "Steven" <steven_list@techtron.co.za>
Message-Id: <20070606083834.6df22754.wmoran@potentialtech.com>
In-Reply-To: <000a01c7a819$f782c620$e6885260$@co.za>
References: <000a01c7a819$f782c620$e6885260$@co.za>
X-Mailer: Sylpheed 2.3.1 (GTK+ 2.10.11; i386-portbld-freebsd6.1)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
Subject: Re: how secure is a VPN
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Jun 2007 12:38:36 -0000

In response to "Steven" <steven_list@techtron.co.za>:

> I have setup various VPN links using a variety of routers and
> configurations, and always been under the assumption that they are fairly
> well secured if setup correctly.   Now I understand that the level of
> security will differ depending on your particular setup.  However I guy I
> know who runs a rather large ISP claims that under the current SA
> infrastructure VPN's are simply not secure at all.

Just like all politicians are corrupt?

The security of a VPN is dependent on the VPN software using sufficiently
strong encryption and being free from bugs, in addition to proper setup by
the sysadmin.

I'd stop taking advice from this guy you know.  He doesn't seem very
knowledgeable.  Either that or you misunderstood his statement.

-- 
Bill Moran
http://www.potentialtech.com