[conspire] another 'survey' - home VPN server

[Ehud Kaldor]

i agree. but, my router is D-Link DIR-655, which does not have VPN abilities
(to the best of my knowledge), and cannot be flushed with WRT. so, it's
either replacing a rather decent router by paying up for a new one, or
having the VPN inside, on physical or virtual. the benefit of virtual is
cleanliness - i want to kill the VPN - i kill the VM. no need to worry about
what happens after reboots, dependencies on my main server and such. benefit
of having an appliance - nice management interface. benefit of having a
white-box, ubuntu based appliance - have some freedom in logging in,
installing extra modules if i want.

other than that - i agree. if i had my way, i would have a dual NIC
connected to the modem, acting as gateway, firewall, VPN and all else.

Ehud


On Wed, Dec 22, 2010 at 10:50 PM, Tony Godshall <tony at of.net> wrote:

> It seems rather backward- I'd want to run my VPN on the gateway, not
> tunnel it into a VM and then try to default-route through that...
> seems like what you gain in not having to run apt-get or whatever is
> lost in networking complexity...
>
> Best Regards.
>
>
>
> On Wed, Dec 22, 2010 at 22:05, Ehud Kaldor <ehud.kaldor at gmail.com> wrote:
> > i am playing with a virtual network appliance, specifically Zentyal
> server,
> > running as VM on VirtualBox.
> > http://www.zentyal.org/downloads/
> > ((which is using openVPN as its VPN module).
> >
> > if anyone know this, especially bad stuff - let me know...
> >
> > Ehud
> >
> >
> > On Wed, Dec 22, 2010 at 5:49 PM, Tony Godshall <tony at of.net> wrote:
> >>
> >> >> i'm looking to install a VPN server at home, so i can connect while
> >> >> away.
> >> >> i'm not sure what the technical terminology is, but i'm looking to
> >> >> having
> >> >> access to all machines on the network (get an IP on the network,
> >> >> assigned
> >> >> by the DHCP server, i guess).  any recommendation? i am a bit
> familiar
> >> >> with
> >> >> openVPN, but ...
> >>
> >> > I've used OpenVPN for this, in several different organizations, with
> >> > good
> >> > success.  ...
> >>
> >> Why are you looking for something else?  I've been OpenVPN in
> >> production environments for nearly a decade- it is solid and stable.
> >>
> >> Alternatively if you value security and don't really want to expose
> >> one whole network to another, ssh tunneling works great for tunneling
> >> specific services here and there.
> >>
> >> Tony
> >>
> >> > having access to the machines on your network), but it's not that
> awful
> >> > to
> >> > do (and there's good help to be found for this online), and also
> really
> >> > doesn't require much of any hand-holding once it's set up.
> >> >
> >> > You can feel free to email me offlist if you have specific questions.
> >> >
> >> > DR
> >> >
> >> > _______________________________________________
> >> > conspire mailing list
> >> > conspire at linuxmafia.com
> >> > http://linuxmafia.com/mailman/listinfo/conspire
> >> >
> >
> >
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://linuxmafia.com/pipermail/conspire/attachments/20101222/24b9730d/attachment.html>