Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 18 Jun 2003 22:13:07 -0400
From:      Doug Lee <dgl@dlee.org>
To:        freebsd-questions@freebsd.org
Subject:   mpd 3.13 problem - man-in-the-middle or legit. issue?
Message-ID:  <20030619021307.GE645@kirk.dlee.org>

next in thread | raw e-mail | index | archive | help
I upgraded to FreeBSD 4.8-STABLE from 4.6-STABLE this weekend without
major incident (trouble with terminal left/right arrows, but that's
another matter), and my mpd-based VPN seemed unaffected... until
this morning, when it suddenly went down after functioning properly
under load for a while, then refused to come up.  I got connected
but couldn't negotiate parameters.  This evening it did come up but
began spewing protocol rejections on my side and unexpected protocol
alerts on the other side, like the data stream was being corrupted.
Last week, a Windows user in my office (the destination of my VPN)
informed me that attempts to set up a VPN link from XP to the
office's mpd-based VPN host locks up his machine now.

Is there any chance someone is trying to pull off a man-in-the-middle
attack on us, or are these more likely separate issues?  I have noted
a few such protocol rejections mentioned on this list and/or
FreeBSD-STABLE but little or no remarks on why.

I'm using mpd 3.13 at both ends, btw, as installed from ports.  The
link is usually running with 128-bit MPPE.

Much thanks for any info.


-- 
Doug Lee           dgl@dlee.org        http://www.dlee.org
"It's not easy to be crafty and winsome at the same time, and few accomplish
it after the age of six." --John W. Gardner and Francesca Gardner Reese



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030619021307.GE645>