From owner-freebsd-questions@FreeBSD.ORG Tue Oct 11 13:23:00 2005 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB59316A428 for ; Tue, 11 Oct 2005 13:23:00 +0000 (GMT) (envelope-from algould@datawok.com) Received: from smtpauth04.mail.atl.earthlink.net (smtpauth04.mail.atl.earthlink.net [209.86.89.64]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1FFDF43D46 for ; Tue, 11 Oct 2005 13:23:00 +0000 (GMT) (envelope-from algould@datawok.com) Received: from [206.255.31.21] (helo=grokwell.org) by smtpauth04.mail.atl.earthlink.net with asmtp (TLSv1:AES256-SHA:256) (Exim 4.34) id 1EPK5q-0007TX-Mq; Tue, 11 Oct 2005 09:22:58 -0400 Date: Tue, 11 Oct 2005 08:23:35 -0500 From: "Andrew L. Gould" To: Norberto Meijome Message-ID: <20051011082335.19e61f60@grokwell.org> In-Reply-To: <434BB776.5030209@meijome.net> References: <20051011093459.9887B186800@mgedv.at> <434BB776.5030209@meijome.net> X-Mailer: Sylpheed-Claws 1.9.11 (GTK+ 2.6.8; i386-portbld-freebsd5.4) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-ELNK-Trace: ee791d459e3d6817d780f4a490ca69563f9fea00a6dd62bc5f9c661ed95b5cc51884a543f37361fa350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 206.255.31.21 Cc: freebsd-questions@freebsd.org, nospam@mgedv.net Subject: Re: encrypted file sharing bsd<-->winxp/2k3 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 11 Oct 2005 13:23:00 -0000 On Tue, 11 Oct 2005 23:00:38 +1000 Norberto Meijome wrote: > mdff wrote: > >>>staying away from ipsec and hw-crypto-ether-cards how > >>>can i connect to network-shares on freebsd-boxes from > >>>windows-clients having the whole connection (auth and > >>>data stuff) encrypted? > >>>it should be possible to map the share as a nw-drive. > >>>br... > >>> > >> > >>VPN is probably your choice. Check out OpenVPN > >>(http://openvpn.net/) for a portable and relatively > >>easy-to-setup solution. > > > > > > thx for the hint, but we don't want VPN/tunnels/ipsec > > solutions for this. > > would you mind explaining why not? > > (I was going ot suggest SSH forwarding and then your protocol of > choice, but that is a tunnel ). > > Beto Have you considered webdav over SSL? Configure Apache2 to listen on port 443 (SSL) only and activate webdave directories with web authentication. Windows will map the webdav directories as "webfolders". Andrew