mpd pptp server?

I have tried some different ways to make a working VPN
server on FreeBSD 7.0.
The main goal is to make it possible for Windows clients to
access their
Samba home shares. I'm not sure if mpd is the best solution,
but I will give
it a try.
I have installed /usr/ports/mpd4 and have the following
configuration:

==============/usr/local/etc/mpd4/mpd.conf============
startup:
<don't know what to put in here...>

default:
load pptp1

pptp1:
new -i ng0 pptp1 pptp1
set iface disable on-demand
set iface enable proxy-arp
set iface idle 0
set iface enable tcpmssfix
set bundle enable multilink
set link yes acfcomp protocomp
set link no pap chap
set link enable chap
set link keep-alive 10 60
set ipcp yes vjcomp
set ipcp ranges 192.168.1.4/32 192.168.1.151/32
set ipcp dns 192.168.1.4
set ipcp nbns 192.168.1.4
set link disable pap
set bundle enable compression
set ccp yes mppc
#set ccp yes mpp-e40
set ccp yes mpp-e128
set ccp yes mpp-stateless
#set bundle enable crypt-reqd

==============/usr/local/etc/mpd4/mpd.linksf============
pptp1:
set link type pptp      ## define the link type protocol as
PPTP
set pptp self 192.168.1.4        ## define the IP address 
on which MPD will
run
set pptp enable incoming      ## define the connection as
Incoming
set pptp disable originate     ## enables PPTP connection
for communication
with the client

And then I also have a mpd.secrets file of course.

I can start the service, but I don't see any pptp interface
after an
ifconfig command. And netstat -an does not show any port
1723 listening.

Do I need to have a customized kernel to make it work? Or
are there any
obvious errors in the above configuration?

Regards,
Jon Theil Nielsen
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

On Wed, Mar 19, 2008 at 12:43:58AM +0100, Jon Theil Nielsen
wrote:
> I have tried some different ways to make a working VPN
server on FreeBSD 7.0.
> The main goal is to make it possible for Windows
clients to access their
> Samba home shares. I'm not sure if mpd is the best
solution, but I will give
> it a try.
> I have installed /usr/ports/mpd4 and have the following
configuration:

I run openvpn on FreeBSD and Windows XP.

-- 
Alex

Please copy the original recipients, otherwise I may not
read your reply.

Howtos based on my personal use, including information about

setting up a firewall and creating traffic graphs with MRTG
http://alex.kruijff.
org/FreeBSD/

_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

2008/3/23, Alex de Kruijff <freebsdakruijff.dds.nl>:
>
> On Wed, Mar 19, 2008 at 12:43:58AM +0100, Jon Theil
Nielsen wrote:
> > I have tried some different ways to make a working
VPN server on FreeBSD
> 7.0.
> > The main goal is to make it possible for Windows
clients to access their
> > Samba home shares. I'm not sure if mpd is the best
solution, but I will
> give
> > it a try.
> > I have installed /usr/ports/mpd4 and have the
following configuration:
>
> I run openvpn on FreeBSD and Windows XP.
>
> --
> Alex
>
I have now succeeded in establishing connections from
Windows to a VPN
server based on mpd4. But it has some severe limitations: I
have to define
every single connection in the conf file (not a major
problem). And I don't
see any option to authenticate against neither UNIX or Samba
passwords. Is
that different through openvpn? Could you give some brief
hints on the
configuration or maybe a reference to a useful howto?

Regards,
Jon
_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"

On Sun, Mar 23, 2008 at 10:45:57PM +0100, Jon Theil Nielsen
wrote:
> 2008/3/23, Alex de Kruijff <freebsdakruijff.dds.nl>:
> > On Wed, Mar 19, 2008 at 12:43:58AM +0100, Jon
Theil Nielsen wrote:
> > > I have tried some different ways to make a
working VPN server on FreeBSD
> > 7.0.
> > > The main goal is to make it possible for
Windows clients to access their
> > > Samba home shares. I'm not sure if mpd is the
best solution, but I will
> > give
> > > it a try.
> > > I have installed /usr/ports/mpd4 and have the
following configuration:
> >
> > I run openvpn on FreeBSD and Windows XP.
> >
> I have now succeeded in establishing connections from
Windows to a VPN
> server based on mpd4. But it has some severe
limitations: I have to define
> every single connection in the conf file (not a major
problem). And I don't
> see any option to authenticate against neither UNIX or
Samba passwords. Is
> that different through openvpn? Could you give some
brief hints on the
> configuration or maybe a reference to a useful howto?

Giving you the program name ought to be enove of a hint.
http://www.goo
gle.com/search?q=openvpn
The openvpn site has a very nice howto.

I can tell you the setup I have. I don't authenticate
against UNIX or
Samba passwords. I don't see what good it will do to require
such
autentication. It might even post a security risk. It might
be posible.

I do use certificates (standard) so I can cut off machines.
Users need
to authenticate when the connect to the services of a
machine. I have
a firewall on each computer.

I have a VPN tunnel beteen sites and a road warrior setup
for laptops.
And I have a setup that allows me to take a server down
without
disrupting traffic flow beteen sites.
-- 
Alex

Please copy the original recipients, otherwise I may not
read your reply.

Howtos based on my personal use, including information about

setting up a firewall and creating traffic graphs with MRTG
http://alex.kruijff.
org/FreeBSD/

_______________________________________________
freebsd-questionsfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-que
stions
To unsubscribe, send any mail to
"freebsd-questions-unsubscribefreebsd.org"