From owner-freebsd-security Mon Dec 9 18:40:25 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2B87537B401 for ; Mon, 9 Dec 2002 18:40:24 -0800 (PST) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2B62D43EB2 for ; Mon, 9 Dec 2002 18:40:23 -0800 (PST) (envelope-from fgleiser@cactus.fi.uba.ar) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id gBA2e42b013911; Mon, 9 Dec 2002 23:40:04 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Mon, 9 Dec 2002 23:40:04 -0300 (ART) From: Fernando Gleiser To: Eric Anderson Cc: security@freebsd.org Subject: Re: (slightly OT) IPSec with dynamic IP In-Reply-To: <3DF52076.4020700@centtech.com> Message-ID: <20021209233412.H5648-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=-103.4 required=5.0 tests=IN_REP_TO,USER_IN_WHITELIST version=2.31 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, 9 Dec 2002, Eric Anderson wrote: > 1. Yes, it is possible.. You'll have to do something with certificates > probably, or use mpd on the server end. There are other solutions, > those are just a few things.. It *has* to be IPSec (corporate policy), so mpd as PPTP server is out of the question. > > 2. Maybe.. Are you trying to connect each individual windows box, or > are you going to have a firewall/gateway that does this for all of them > (the entire lan)? I want each of the remote Windows boxes to see the corporate LAN. We have a FreeBSD box as firewall, which will be the local node of the tunnel. > > 3. I don't know .. maybe... I have this working, so maybe I should > write one up.. :) Well, if you have some config files I can use as an example (with the names and IP changed to protect the innocent, of course), I'd be very grateful. Fer > > Eric > > > -- > ------------------------------------------------------------------ > Eric Anderson Systems Administrator Centaur Technology > Beware the fury of a patient man. > ------------------------------------------------------------------ > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message