From owner-freebsd-security@FreeBSD.ORG  Wed Jan 25 01:18:10 2006
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
X-Original-To: freebsd-security@freebsd.org
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EF6CD16A41F;
	Wed, 25 Jan 2006 01:18:10 +0000 (GMT)
	(envelope-from julian@elischer.org)
Received: from a50.ironport.com (a50.ironport.com [63.251.108.112])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 9942A43D49;
	Wed, 25 Jan 2006 01:18:06 +0000 (GMT)
	(envelope-from julian@elischer.org)
Received: from unknown (HELO [10.251.17.229]) ([10.251.17.229])
	by a50.ironport.com with ESMTP; 24 Jan 2006 17:18:04 -0800
Message-ID: <43D6D1CD.5060504@elischer.org>
Date: Tue, 24 Jan 2006 17:18:05 -0800
From: Julian Elischer <julian@elischer.org>
User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US;
	rv:1.7.11) Gecko/20050727
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: gahn <ipfreak@yahoo.com>
References: <20060124235945.92438.qmail@web52114.mail.yahoo.com>
In-Reply-To: <20060124235945.92438.qmail@web52114.mail.yahoo.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
X-Mailman-Approved-At: Wed, 25 Jan 2006 01:30:16 +0000
Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org
Subject: Re: IPsec, VPN and FreeBSD
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jan 2006 01:18:11 -0000

gahn wrote:

>Hi:
>
>We intend to build IPSec based VPN server on FreeBSD
>platform so that we can access internal network of a
>lab. The remote side will use VPN client and could be
>from anywhere of the Internet, or may be from the
>another site of the company. From the hnadbook, I saw
>the sample of site-to-site configurations and we do
>have one FreeBSD firewall (running ipfw) on both site
>and another one on another site (both have firewalls
>on them), can we do that?  Also what about the
>client-server model? What kind of clients do we need
>in order to connect to the FreeBSD/IPsec/VPN? Any
>tips/information for the configuration of the
>clients/server model on internet?
>
>Any help will be greatly appreciated.
>  
>
there are almost too many options to mention..

however you should be able to implement pptp
tunnels (as used on windows) using mpd (in ports)
alternatively there is always ssh or ipsec.
(or a combination of them)

If as you suggest, both ends are freebsd, then I've used mpd over ssh 
with great effect.
use the 'tcp transport' option of mpd and connect it through an ssh tunnel.

is the 'client' roaming or at a fixed address? if a fixed address then 
ipsec becomes easier.



>Thanks
>
>
>
>__________________________________________________
>Do You Yahoo!?
>Tired of spam?  Yahoo! Mail has the best spam protection around 
>http://mail.yahoo.com 
>_______________________________________________
>freebsd-security@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-security
>To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
>  
>