Re: New to PPTPD and had a few questions

--===============5810288831872179859==
Content-Type: multipart/alternative; boundary=001a11c1628ee7330704f32d4b49

--001a11c1628ee7330704f32d4b49
Content-Type: text/plain; charset=US-ASCII

On Mon, Feb 24, 2014 at 3:31 PM, James Cameron <[email protected]> wrote:

> On Mon, Feb 24, 2014 at 09:28:16AM -0600, Greg wrote:
> > I know that there are several methods for authentication, [...]
>
> There's only one method for authentication that works with the
> encryption.
>

James there are actually two methods - MSChapv2 (password), and EAP-TLS
(x509 certs). MSChapv2 is deprecated, because it's relatively easily
cracked if you can capture all the traffic. There's not a lot of
documentation on setup of EAP-TLS, but it does work.


> If you need other methods badly, then switch to OpenVPN.
>
> If you don't need encryption, then other authentication methods can be
> built; all use pppd, not pptpd.
>
> --
> James Cameron
> http://quozl.linux.org.au/
>
>
> ------------------------------------------------------------------------------
> Flow-based real-time traffic analytics software. Cisco certified tool.
> Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
> Customize your own dashboards, set traffic alerts and generate reports.
> Network behavioral analysis & security monitoring. All-in-one tool.
>
> http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk
> _______________________________________________
> Poptop-server mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/poptop-server
>

-- 
This e-mail (including any attachments) is for the sole use of the intended 
recipient(s) and may contain information that is confidential and/or 
protected by legal privilege. Any unauthorized review, use, copy, 
disclosure or distribution of this e-mail is strictly prohibited. If you 
are not the intended recipient, please notify Mitel immediately and destroy 
all copies of this e-mail.  Mitel does not accept any liability for breach 
of security, error or virus that may result from the transmission of this 
message.

--001a11c1628ee7330704f32d4b49
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">On Mon, Feb 24, 2014 at 3:31 PM, James Cameron <span dir=
=3D"ltr">&lt;<a href=3D"mailto:[email protected]" target=3D"_blank">quozl@la=
ptop.org</a>&gt;</span> wrote:<br><div class=3D"gmail_extra"><div class=3D"=
gmail_quote">
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">On Mon, Feb 24, 2014 at 09:28:16AM -0600, Gr=
eg wrote:<br>
&gt; I know that there are several methods for authentication, [...]<br>
<br>
There&#39;s only one method for authentication that works with the<br>
encryption.<br></blockquote><div><br></div><div>James there are actually tw=
o methods - MSChapv2 (password), and EAP-TLS (x509 certs). MSChapv2 is depr=
ecated, because it&#39;s relatively easily cracked if you can capture all t=
he traffic. There&#39;s not a lot of documentation on setup of EAP-TLS, but=
 it does work.<br>
</div><div>=A0<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0=
 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
If you need other methods badly, then switch to OpenVPN.<br>
<br>
If you don&#39;t need encryption, then other authentication methods can be<=
br>
built; all use pppd, not pptpd.<br>
<br>
--<br>
James Cameron<br>
<a href=3D"http://quozl.linux.org.au/" target=3D"_blank">http://quozl.linux=
.org.au/</a><br>
<br>
---------------------------------------------------------------------------=
---<br>
Flow-based real-time traffic analytics software. Cisco certified tool.<br>
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer<br>
Customize your own dashboards, set traffic alerts and generate reports.<br>
Network behavioral analysis &amp; security monitoring. All-in-one tool.<br>
<a href=3D"http://pubads.g.doubleclick.net/gampad/clk?id=3D126839071&amp;iu=
=3D/4140/ostg.clktrk" target=3D"_blank">http://pubads.g.doubleclick.net/gam=
pad/clk?id=3D126839071&amp;iu=3D/4140/ostg.clktrk</a><br>
_______________________________________________<br>
Poptop-server mailing list<br>
<a href=3D"mailto:[email protected]">Poptop-server@lists.=
sourceforge.net</a><br>
<a href=3D"https://lists.sourceforge.net/lists/listinfo/poptop-server" targ=
et=3D"_blank">https://lists.sourceforge.net/lists/listinfo/poptop-server</a=
><br>
</blockquote></div><br></div></div>

<br>
<font size=3D"1">This e-mail (including any attachments) is for the sole us=
e of the intended recipient(s) and may contain information that is confiden=
tial and/or protected by legal privilege. Any unauthorized review, use, cop=
y, disclosure or distribution of this e-mail is strictly prohibited. If you=
 are not the intended recipient, please notify Mitel immediately and destro=
y all copies of this e-mail. =A0Mitel does not accept any liability for bre=
ach of security, error or virus that may result from the transmission of th=
is message.</font>
--001a11c1628ee7330704f32d4b49--


--===============5810288831872179859==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk
--===============5810288831872179859==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Poptop-server mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/poptop-server

--===============5810288831872179859==--