Re: [Openvpn-users] OpenVPN with XP client - can ping both ends but do little else !

[Leonard Isham <leonard.isham@xxxxxxxxx>]

On Tue, 2 Nov 2004 17:46:56 -0000, Conor Rafferty <cr@xxxxxxxxxxxxx> wrote:
> Hold on, but anyone who guessed/hacked my VNC password could still connect
> to my VNC server the orthodox way....
> 
> ...Unless of course I closed down ports 5800 & 5900 on the external
> firewall - which I won't need to keep open anymore
> ...because VNC traffic will go thru' VPN straight to the VNC server, not out
> into the raw internet and back into the LAN via the firewall on the router

Yes correct.

> 
> n'est pas ?
> Gurus, please verify...
>> Oi fink Oi've cracked it !
> (not bad for a non-techhie)
> 
> 
> 
> -----Original Message-----
> From: openvpn-users-admin@xxxxxxxxxxxxxxxxxxxxx
> [mailto:openvpn-users-admin@xxxxxxxxxxxxxxxxxxxxx]On Behalf Of Conor
> Rafferty
> Sent: 02 November 2004 17:10
> To: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> Subject: RE: [Openvpn-users] OpenVPN with XP client - can ping both ends
> but do little else !
> 
> 
> Thanks Leonard,
> 
> How do I do this ?
> 
> Hold on - let me see if I work it out for myself...
> If I am running OpenVPN in "dev tap" configuration with network bridging, I
> can ping the VNC Server using its private VPN address (e.g. 192.168.0.2) -
> - so I merely point VNC Viewer (or web browser client) to this address ?
> (192.168.0.2)
> 
> Sounds really cool, elegant, simple, and secure !
> too good to be true ? or is it....
> 
> Ah, one query - will there be a performance issue running VNC thru'
> OpenVPN - i.e. all that extra switching / routing / tunnelling /
> translation - will that add any significant delay onto the transmissions ?
> 

You have the idea.  I do it all the time and I don't see a performance
issue.  I *do* limit the number of colors and use the UltraVNC video
driver for performance reasons with and without OpenVPN.

> 
> -----Original Message-----
> From: Leonard Isham [mailto:leonard.isham@xxxxxxxxx]
> Sent: 02 November 2004 13:01
> To: cr@xxxxxxxxxxxxx
> Cc: openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> Subject: Re: [Openvpn-users] OpenVPN with XP client - can ping both ends
> but do little else !
> 
> On Tue, 2 Nov 2004 10:54:11 -0000, Conor Rafferty <cr@xxxxxxxxxxxxx> wrote:
> > OK, went back through and read everything AGAIN, and took a chance on
> > changing over to a "dev tap" connection -
> >
> > didn't work on its own
> >
> > but then I found out about "bridges" and how to set them up in Windows
> >
> > hey presto - could ping from laptop to every machine on LAN, and vice
> versa
> >
> > Eventually the network shares on the LAN became visible too !
> >
> > So now I am well and truly OpenVPN-enabled.....
> >
> > BUT, disappointed by the performance over dial-up, and also my
> > "client-server" business application won't work. Its not really client
> > server at all !!
> >
> > .. may need to go back to VNC, using a faster connection for laptop e.g.
> > broadband...
> >
> > Any ideas on how to boost performance ?
> >
> > (e.g. Outlook is currently loading a .pst file with 10,000 emails in it
> over
> > the VPN, taken 10mins so far, and no sign of being finished)
> >
> > ### LATER #####
> >
> > With broadband both ends (300k & 500k respectively, obviously limited to
> > 300k) the VPN becomes usable though slow....
> >
> > Luckily VPN and VNC can co-exist, so I'll run them both - use the VNC for
> my
> > business' client-server app, email etc, and if I need to do any extensive
> > edits on a file, I'll drag it down using VPN and edit it locally.
> >
> > Maybe will revisit doing it all on VPN if I upgrade both broadband ends to
> > 1M+, but in the meantime I have a workable solution.
> >
> > I have learned tonnes from this process and am ever so grateful to all you
> > guys for your support.
> >
> 
> I would recommend that you use VNC over OpenVNC to gain the security
> of OpenVPN.  MS remote desktop works over OpenVPN as well.
> 
> I have theses running nearly continously.
> 
> P.S. I use UltraVNC on windows and TightVNC on Linux.
> 
> --
> Leonard Isham, CISSP
> Ostendo non ostento.
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE
> LinuxWorld Reader's Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by:
> Sybase ASE Linux Express Edition - download now for FREE
> LinuxWorld Reader's Choice Award Winner for best database on Linux.
> http://ads.osdn.com/?ad_id=5588&alloc_id=12065&op=click
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 


-- 
Leonard Isham, CISSP 
Ostendo non ostento.

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users