Topic: VPN support

[e-smith fan]

Do you plan on adding VPN support to e-smith? It would be nice to be able to build firewall to firewall and client to firewall VPNs.

Thanks

[Charlie Brady]

e-smith fan wrote:

> Do you plan on adding VPN support to e-smith? It would be nice
> to be able to build firewall to firewall and client to
> firewall VPNs.

If you look at http://www.e-smith.org/future/ you will see
the current roadmap for the e-smith server. Free S/WAN is
there on the list of things to do when there are resources
available to do them.

Charlie

[Corey Drake]

I am currently in the testing phases of FreeS/WAN on e-emith. After sucessfull testing, I will be working on the interface and details of getting it into e-smith.

[Billy Coleman]

Can you explain why Free/SWAN over an implementation such as VPNd (http://www.securiteam.com/tools/VPNd_-Virtual_Private_Networks_daemon_for_Linux.html)?  After only a quick look at VPNd, it appears rather easy to implement (just difficult if you have to travel between two sites to test .  I thought that Andre Couture had even posted something to the devel list (mid-Nov) regarding a package that integrated into e-smith's web manager.

I too am looking for a good solution so that I can extend my working hours into the evening without leaving the house (I know, it's sick

[e-smith fan]

Please keep us "closely" posted, Corey. This e-smith solution is sounding better all the time.

Thanks

[Charlie Brady]

Billy Coleman wrote:

> Can you explain why Free/SWAN over an implementation such as
> VPNd

The advantage of Free/SWAN is that it is an implementation of
the IPSEC security architecture, and interoperates with IPSEC
implementations from other vendors. It's based on open standards which have been subject to a lot of scrutiny by the best Internet security people around.

Charlie

[Billy Coleman]

Charlie Brady wrote:

>  It's based on open
> standards which have been subject to a lot of scrutiny by the
> best Internet security people around.
>
Ahhh yes, I forgot about the IPSEC aspect.  And the paranoid among those of us who are not guru programmers always wonder about what the code is doing behind our monitors.

"Safety in numbers" is not a bad thing.