I think OpenVPN is being looked at by various clever contrib-writing types ... you might search the forums for that. There used to be a FreeS/WAN contrib that worked great but development on that was stopped at around SME version 5.6.
What I have gleamed form your statement was basically you have no experience with VPN of two SME servers
or DMZ/VPN capable firewalls.
DMZ/VPN capable firewalls are one of the many mainstream solutions
and all solutions of this nature should be considered for any system
deployment of any size including a single server setup IMHO.
I simply presented Smoothwall & IPcop as possible low cost options for
Home or Commercial environments.
Athough there are more expensive solutions/options availible.
With Smoothwall & IPcop the software is free for home use, so it becomes
a matter of hardware and desire and need.
Hardware is in some cases, the old system on the storage shelf collecting dust and the desire to put it to good use late in the game.
If one has a need for increased system security (basically bullet proof)
and ease of system management then all that needs to be said is...
Try it...!!
If your only need is a VPN then it's the perfect solution to the problem and
system security and management are just extras.
You always have the option of disabling the extras.
You always have the option of dealing with viruses, worms, spam, spam
engines, pop ups, identity thieft and the entire evil empire on the internet.
We did setup a VPN of two SME servers for evaluation and testing.
Results that became evident were, that network setup failed to provide basic Network system security
required to be able to deploy the setup in a Home or Commercial environment.
However I'm not saying one cannot deploy the setup in a Home or Commercial environment.
Also I'm am not stating or implying that there is any security flaw within SME server and I assume any
Experience Network Administrator already knows that.
Simply the risk is to high to ensure long term Network Administrator employment or customer relations.
Again I assume a Experience Network Administrator already knows that.
As for electroman's diatribe,
Due to the vagueness of the statement I'm not sure what you considered to be abusive in my post, so if you
would be so kind as to point out what it was, I would be more than happy to edit my post and repost within this thread.
I don't really think SME's security is compromised by adding a site-to-site VPN.
Well I re-read the post and can't see where I made the statement....
SME's security is compromised by adding a site-to-site VPN.
So again if you would point it out, I would be more than happy to edit my post.
Historically, IMHO, the only reason the GPL version of SME doesn't include such a capability right out of the box is that Mitel quite correctly wanted to have SOMEthing they could sell as a value-added extra!
That certainly is a valid hypothesis, not sure if it could / would be validated by anyone.
Not sure if I could / would limit to just that one.
I can think of several other reasons, however I don't believe this thread would be a good place to debate it, possibly you could consider starting
another thread, I feel I would have difficulty debating without
a basis of factual information form Mitel and anything I might present
would simply be another hypothesis.
As I have said once you indicate the problem areas in my post I will make edits and repost in this thread.
I apologize in advance to anyone whom I may have offended in any way.
MSmith thank you for your input and understanding.
As always
4 Replies
2765 Views