From owner-freebsd-questions@freebsd.org Sun Jul 17 20:18:12 2016 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3F879B9C0DA for ; Sun, 17 Jul 2016 20:18:12 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id 1D03F12CC for ; Sun, 17 Jul 2016 20:18:12 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mailman.ysv.freebsd.org (Postfix) id 18818B9C0D9; Sun, 17 Jul 2016 20:18:12 +0000 (UTC) Delivered-To: questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 18205B9C0D8 for ; Sun, 17 Jul 2016 20:18:12 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: from mail-it0-x22f.google.com (mail-it0-x22f.google.com [IPv6:2607:f8b0:4001:c0b::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id D462912CB for ; Sun, 17 Jul 2016 20:18:11 +0000 (UTC) (envelope-from luzar722@gmail.com) Received: by mail-it0-x22f.google.com with SMTP id j124so16503359ith.1 for ; Sun, 17 Jul 2016 13:18:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-transfer-encoding; bh=gY486Gx4d8qHyTKvCpPfVEPxbfHB2omxhkZPjC7+Qy8=; b=Gl4DIJVRbbGzZIjwpzYs8TswOi3hIW30SfD1ByjhjR497dpDehoNPqbcaKWMX8372R BpniqwxZ6JDuJFmT9jswwcIoGSTJxACj8dvqVx7j8Oink0XBxoOTJmMxlgjM//OixSgK DPM+8bL5enP7aFJ9b3aq/bClSJ25N4MdYx3bORG1fQ3qd6DacS46o4Sp3QZ0z7gGcaLV 2SJ95IyxnMalgaZTly0K9ZFWx2URwdBUk+F4F8gWgguBWhU0dXwnYokL4V1DyvnuBam0 vxO1bxbVjsSJijm2byxI2WRM9qZYX3FvOYAEnsQFOXjdI+t8MHeBQGi+8dI72U2XBw1G 1mtw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-transfer-encoding; bh=gY486Gx4d8qHyTKvCpPfVEPxbfHB2omxhkZPjC7+Qy8=; b=e0zzje1TYSPTnrCulrdvIvKQgdYy3lszAbyw5GYRGEW3FWgkkiohzy4V4L7qy26klK SBJC8bAOmcH5DwU6qxnife5+IrBxf6DJWZLh4YeJGb33isVEaSoQO5DY8i0tzT2OuklK 1LeQn3dk2Zy0mvT/sQWJjzQF7N4UvIjjKKSOtpf6w06h/E4v+qlivN7Cb17WQGx08ty4 3DtuYuEBsafwkduEQfM5V6n8HplLnccp5l2ViG7QHlMf2LI2G8PLTuXXoE1D80PFZg+1 mbTEyXyu+rcqWE5DMDB66dmOuicutPWrSgK1AgDxzbP0W1FUHrbv148cHoS1nZ1RQtIf 0BsQ== X-Gm-Message-State: ALyK8tLi5fmt94m7M5ozBrsNXPqWUGRkbv6Bqh5F6fNBxGswtPIqAmCsDcpfa57zAmZu1g== X-Received: by 10.36.73.70 with SMTP id z67mr46500565ita.33.1468786691115; Sun, 17 Jul 2016 13:18:11 -0700 (PDT) Received: from [10.0.10.3] (cpe-184-56-210-236.neo.res.rr.com. [184.56.210.236]) by smtp.googlemail.com with ESMTPSA id e63sm3410438ith.0.2016.07.17.13.18.10 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sun, 17 Jul 2016 13:18:10 -0700 (PDT) Message-ID: <578BE812.9000601@gmail.com> Date: Sun, 17 Jul 2016 16:18:26 -0400 From: Ernie Luzar User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Odhiambo Washington CC: questions Subject: Re: OpenVPN with xp & win7 clients References: <578BAB1A.2010109@gmail.com> In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Jul 2016 20:18:12 -0000 Odhiambo Washington wrote: > > > On 17 July 2016 at 18:58, Ernie Luzar > wrote: > > Hello List; > > I travel outside of my home country a lot and can not access some > web site content because internet connection is from foreign ip > address range. > > I see many how-tos for installing and configuration VPN on a FreeBSD > host. But all most all of these how-tos assume the client will be a > FreeBSD box also. In my case I have 2 laptops I travel with, win xp > & win7. The official OpenVPN website does offer clients for xp & > win7 but configuration info is not available. > > Looking for how-to to setup VPN client on xp & win7. > > > > For Windows client, use the > following: http://download.securepoint.de/?d=Securepoint%20SSL%20VPN%20Client/v1.0.3 > > > > > The FreeBSD handbook has section on IPsec/VPN, but again it assumes > server and client is a FreeBSD host. Looking for how-to on setting > up IPsec/VPN on xp & win7. > > > For setting up the server, use the following: Use this link: > http://linoxide.com/linux-how-to/install-configure-openvpn-freebsd-10-2/ > > > > I have 2 concerns. How much hesitation will VPN inject into watching > tv programs or movies on my laptops in a foreign country? Will > IPsec/VPN inject longer hesitations? > > > I cannot tell about the latencies (I guess that is what you call > hesitation :-)) because I haven't tried it. > > > > Can I use the remote VPN client to start the show streaming and then > have the VPN host record the program? Later down loading the program > file to my laptop for viewing? > > > That is beyond the scope of FreeBSD questions I guess :-) > But maybe someone has done it and will give you their story. > > " For setting up the server, use the following: Use this link: http://linoxide.com/linux-how-to/install-configure-openvpn-freebsd-10-2/" That link content is out-dated. The openvpn port/pkg does not include the easy-rsa scripts build-ca, build-key-server, build-key, build-dh that are described in that how-too. The certificates are the backbone of security for VPN and without correct documentation that how-to is useless. To make things even worse, the easy-rsa port is lacking a manual page.