[TriLUG] VPN suggestions

[Jon Carnes]

Just as a suggestion, you might want to play around with OpenBSD and use
that as your firewall.  It makes a much better firewall than RedHat 8.
Also, OpenBSD does IPSec vpn's very easily.

I know... yet another thing to learn - but a *good* thing to learn!

Jon Carnes

On Tue, 2003-10-28 at 14:53, Mark Fowle wrote:
> Right now I am using RH8 as a firewall - I've been looking at OpenVPN,
> but this seemed a little easier to do. OpenVPN just seems like a
> bear...(at least so far)
> 
> 
> On Tue, 2003-10-28 at 14:34, Jon Carnes wrote:
> > On Tue, 2003-10-28 at 14:10, Mark Fowle wrote:
> > > Does it need an external IP address - or can you open and forward a port
> > > from the firewall to the VPN ?
> > > 
> > 
> > It really depends on your firewall and whether it can forward IPSec.  An
> > OpenBSD firewall can, as can a Linksys or Dlink appliance.  Most
> > firewalls that can *forward* IPSec can also *do* IPSec, so their would
> > be no need to put a Linksys BEFVP41 on the corporate network - just use
> > the existing firewall (assuming it's not some POS from Checkpoint that
> > charges you an arm and a leg to use IPSec).
> > 
> > Jon Carnes