RE: [Openvpn-users] OpenVPN with XP client - can ping both ends but do little else !

["Conor Rafferty" <cr@xxxxxxxxxxxxx>]

Hold on, but anyone who guessed/hacked my VNC password could still connect
to my VNC server the orthodox way....

...Unless of course I closed down ports 5800 & 5900 on the external
firewall - which I won't need to keep open anymore
...because VNC traffic will go thru' VPN straight to the VNC server, not out
into the raw internet and back into the LAN via the firewall on the router

n'est pas ?
Gurus, please verify...

Oi fink Oi've cracked it !
(not bad for a non-techhie)

-----Original Message-----
From: openvpn-users-admin@xxxxxxxxxxxxxxxxxxxxx
[mailto:openvpn-users-admin@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of Conor
Rafferty
Sent: 02 November 2004 17:10
To: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
Subject: RE: [Openvpn-users] OpenVPN with XP client - can ping both ends
but do little else !


Thanks Leonard,

How do I do this ?

Hold on - let me see if I work it out for myself...
If I am running OpenVPN in "dev tap" configuration with network bridging, I
can ping the VNC Server using its private VPN address (e.g. 192.168.0.2) -
- so I merely point VNC Viewer (or web browser client) to this address ?
(192.168.0.2)

Sounds really cool, elegant, simple, and secure !
too good to be true ? or is it....

Ah, one query - will there be a performance issue running VNC thru'
OpenVPN - i.e. all that extra switching / routing / tunnelling /
translation - will that add any significant delay onto the transmissions ?

-----Original Message-----
From: Leonard Isham [mailto:leonard.isham@xxxxxxxxx]
Sent: 02 November 2004 13:01
To: cr@xxxxxxxxxxxxx
Cc: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
Subject: Re: [Openvpn-users] OpenVPN with XP client - can ping both ends
but do little else !


On Tue, 2 Nov 2004 10:54:11 -0000, Conor Rafferty <cr@xxxxxxxxxxxxx> wrote:
> OK, went back through and read everything AGAIN, and took a chance on
> changing over to a "dev tap" connection -
>
> didn't work on its own
>
> but then I found out about "bridges" and how to set them up in Windows
>
> hey presto - could ping from laptop to every machine on LAN, and vice
versa
>
> Eventually the network shares on the LAN became visible too !
>
> So now I am well and truly OpenVPN-enabled.....
>
> BUT, disappointed by the performance over dial-up, and also my
> "client-server" business application won't work. Its not really client
> server at all !!
>
> .. may need to go back to VNC, using a faster connection for laptop e.g.
> broadband...
>
> Any ideas on how to boost performance ?
>
> (e.g. Outlook is currently loading a .pst file with 10,000 emails in it
over
> the VPN, taken 10mins so far, and no sign of being finished)
>
> ### LATER #####
>
> With broadband both ends (300k & 500k respectively, obviously limited to
> 300k) the VPN becomes usable though slow....
>
> Luckily VPN and VNC can co-exist, so I'll run them both - use the VNC for
my
> business' client-server app, email etc, and if I need to do any extensive
> edits on a file, I'll drag it down using VPN and edit it locally.
>
> Maybe will revisit doing it all on VPN if I upgrade both broadband ends to
> 1M+, but in the meantime I have a workable solution.
>
> I have learned tonnes from this process and am ever so grateful to all you
> guys for your support.
>

I would recommend that you use VNC over OpenVNC to gain the security
of OpenVPN.  MS remote desktop works over OpenVPN as well.

I have theses running nearly continously.

P.S. I use UltraVNC on windows and TightVNC on Linux.

--
Leonard Isham, CISSP
Ostendo non ostento.



____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users



____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users