The central voice for Linux and Open Source security news
Home
News Topics
Advisories
HOWTOs
Features
Newsletters
About
Register
LS.com
Advisories
Features
HOWTOs
Linux Events
News
Newsletters
Press
Security Dictionary
Security Tips
Welcome!
Sign up!
EnGarde Community
Login
Polls
What is the most important Linux security technology?
SELinux
grsecurity
CIS Benchmark
Bastille Linux
iptables
LIDS
Advisories
Debian: 2477-1: sympa: authorization bypass
Debian: 2476-1: pidgin-otr: format string vulnerability
Ubuntu: 1445-1: Linux kernel vulnerabilities
Ubuntu: 1445-1: Linux kernel vulnerabilities
Debian: 2475-1: openssl: integer underflow
Ubuntu: 1444-1: BackupPC vulnerability
Ubuntu: 1443-1: Update Manager vulnerabilities
Mandriva: 2012:078: imagemagick
Community
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
SELinux
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Securitydistro
Latest Newsletters
Linux Security Week: May 14th, 2012
Linux Advisory Watch: May 10th, 2012
Subscribe
LinuxSecurity Newsletters
E-mail:
Choose Lists:
Both Lists
Newsletter
Security Advisories
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By
VPN HOWTO
VPN HOWTO
Matthew D. Wilson
<
matthew@shinythings.com
>
This HOWTO describes how to set up a Virtual Private Network with Linux.
Table of Contents
1.
Introduction
1.1.
Why I wrote this HOWTO
1.2.
Acknowledgements and Thanks
1.3.
Format of this document
1.4.
Legal Information
1.4.1.
Copyright
1.4.2.
Disclaimer
1.4.3.
GNU Free Documentation License
1.4.4.
PREAMBLE
1.4.5.
APPLICABILITY AND DEFINITIONS
1.4.6.
VERBATIM COPYING
1.4.7.
COPYING IN QUANTITY
1.4.8.
MODIFICATIONS
1.4.9.
COMBINING DOCUMENTS
1.4.10.
COLLECTIONS OF DOCUMENTS
1.4.11.
AGGREGATION WITH INDEPENDENT WORKS
1.4.12.
TRANSLATION
1.4.13.
TERMINATION
1.4.14.
FUTURE REVISIONS OF THIS LICENSE
1.4.15.
How to use this License for your documents
1.5.
Document History
1.6.
Related Documents
2.
Theory
2.1.
What is a VPN?
2.2.
But really, what IS a VPN?
2.3.
So how does it work?
2.4.
SSH and PPP
2.5.
Alternative VPN Systems
2.5.1.
PPTP
2.5.2.
IP Sec
2.5.3.
CIPE
3.
Server
3.1.
Security - keeping people out
3.1.1.
Trim your daemons
3.1.2.
Don't allow passwords
3.2.
User Access - letting people in
3.2.1.
Configuring
sshd
3.3.
Restricting Users
3.3.1.
sudo or not sudo
3.4.
Networking
3.4.1.
The Kernel
3.4.2.
Filter Rules
3.4.3.
Routing
4.
Client
4.1.
The Kernel
4.2.
Bring up the link
4.3.
Scripting
4.4.
LRP - Linux Router Project
5.
Implementation
5.1.
Planning
5.2.
Gather the tools
5.2.1.
For the Server:
5.2.2.
For the Client:
5.3.
Server: Build the kernel
5.4.
Server: Configure Networking
5.4.1.
Configuring the interfaces
5.4.2.
Setting routes
5.4.3.
Making filter rules
5.4.4.
Routing
5.5.
Server: Configure
pppd
5.5.1.
/etc/ppp/
5.5.2.
/etc/ppp/options
5.5.3.
Avoiding conflicts
5.6.
Server: Configure
sshd
5.7.
Server: Set up user accounts
5.8.
Add
vpn-users
group
5.9.
create the
vpn-users
home directory
5.10.
The
.ssh
directory
5.11.
Adding users
5.12.
Server: Administration
5.13.
Client: Build the kernel
5.14.
Client: Configure Networking
5.14.1.
Interface
5.14.2.
Filter rules
5.14.3.
Routing
5.15.
Client: Configure
pppd
5.16.
Client: Configure
ssh
5.17.
Client: Bring up the connection
5.18.
Client: Set the routes
5.19.
Client: Scripting
5.19.1.
Keeping it running
6.
Addenda
6.1.
Pitfalls
6.1.1.
read: I/O error
6.1.2.
SIOCADDRT: Network is unreachable
6.1.3.
IPv4 Forwarding and 2.2 kernels
6.1.4.
Routing
6.2.
Hardware and Software Requirements
6.2.1.
Minimum Hardware Requirements
6.2.2.
Software Requirements
Introduction
Partner
Latest Features
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Using the sec-wall Security Proxy
sec-wall: Open Source Security Proxy
Yesterday's Edition
ZTE admits to backdoor in one of its Android devices
Anonymous hater claims responsibility for Pirate Bay DDoS attack
Partner Sponsor
Community
|
HOWTOs
|
Blogs
|
Features
|
Book Reviews
|
Networking
Security Projects
|
Latest News
|
Newsletters
|
SELinux
|
Privacy
|
Home
Hardening
|
About Us
|
Advertise
|
Legal Notice
|
RSS
|
Guardian Digital
(c)Copyright 2012 Guardian Digital, Inc. All rights reserved.