Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3690 > unrolled thread

VPN

Back to article view | Back to comp.os.linux.networking

Contents

  VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-09 16:50 -0400
    Re: VPN William Unruh <unruh@invalid.ca> - 2016-04-10 00:52 +0000
      Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-10 15:38 -0400
        Re: VPN William Unruh <unruh@invalid.ca> - 2016-04-10 21:19 +0000
    Re: VPN Dominic Reich <usenet@tmsn.at> - 2016-04-10 10:20 +0200
      Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-10 20:04 -0400
    Re: VPN Stefan Monnier <monnier@iro.umontreal.ca> - 2016-04-10 20:16 -0400
      Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-11 15:06 -0400
        Re: VPN William Unruh <unruh@invalid.ca> - 2016-04-11 21:36 +0000
          Re: VPN Stefan Monnier <monnier@iro.umontreal.ca> - 2016-04-11 20:57 -0400
            Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-12 15:20 -0400
              Re: VPN Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2016-04-12 22:36 +0300
                Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-14 12:25 -0400
                  Re: VPN Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2016-04-14 23:54 +0300
        Re: VPN Bit Twister <BitTwister@mouse-potato.com> - 2016-04-12 19:43 +0000
          Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-12 16:52 -0400
          Re: VPN "Bill Cunningham" <billcun-remove-@suddenlink.net> - 2016-04-12 16:52 -0400
            Re: VPN Bit Twister <BitTwister@mouse-potato.com> - 2016-04-13 02:27 +0000

#3690 — VPN

    I have at my Mom's place a router of mine that is hooked up to her 
computer, printer, and tablet. From my Apartment I can remotely access the 
router. How an I add this computer of mine to the network at her place and 
go into the internet from it. Rather than my ISP?

Bill

[toc] | [next] | [standalone]

#3691

On 2016-04-09, Bill Cunningham <billcun-remove-@suddenlink.net> wrote:
>     I have at my Mom's place a router of mine that is hooked up to her 
> computer, printer, and tablet. From my Apartment I can remotely access the 
> router. How an I add this computer of mine to the network at her place and 
> go into the internet from it. Rather than my ISP?

Not sure what you are trying to do. But if you can go to her router, so
can others. So her system could become a source for spam/etc. 
Also, why do you want to go from her place? You want her to be arrested
when you do nasty things?

>
> Bill
>
>

[toc] | [prev] | [next] | [standalone]

#3693

"William Unruh" <unruh@invalid.ca> wrote in message 
news:nec83s$iom$3@dont-email.me...

> Not sure what you are trying to do. But if you can go to her router, so
> can others.

    Well they should not be abe to get it. I have the administrators 
password. And also the IP WAN access is allowed only to my IP address here 
to be able to get in remotely. It's not set up to allow outside access to 
others.

 So her system could become a source for spam/etc.
> Also, why do you want to go from her place? You want her to be arrested
> when you do nasty things?
>
>>
>> Bill
>>
>> 

[toc] | [prev] | [next] | [standalone]

#3694

On 2016-04-10, Bill Cunningham <billcun-remove-@suddenlink.net> wrote:
>
> "William Unruh" <unruh@invalid.ca> wrote in message 
> news:nec83s$iom$3@dont-email.me...
>
>> Not sure what you are trying to do. But if you can go to her router, so
>> can others.
>
>     Well they should not be abe to get it. I have the administrators 
> password. And also the IP WAN access is allowed only to my IP address here 
> to be able to get in remotely. It's not set up to allow outside access to 
> others.
>

I am not at all sure I would trust the security of a router, especially
not of "cler air". Spoofing IP addresses is easy. Intercepting the
resultant outgoing packets is harder I agree. Finding the admin password
is probably not all that hard (after all what is the encryption on the
line while you are entering that password).

Now, you could set up an ssh tunnel between her machine and yours--
either automatically when she logs on, or on demand, when you ask her to
let you  I agree. Finding the admin password is probably not all that
hard (after all what is the encryption on the line while you are
entering that password).

Now, you could set up an ssh tunnel between her machine and yours--
either automatically when she logs on, or on demand, when you ask her by
phone to let you in. 

At least that would be end to end encrypted. 

>
>

[toc] | [prev] | [next] | [standalone]

#3692

Bill Cunningham <billcun-remove-@suddenlink.net> wrote:
>     I have at my Mom's place a router of mine that is hooked up to her 
> computer, printer, and tablet. From my Apartment I can remotely access the 
> router. How an I add this computer of mine to the network at her place and 
> go into the internet from it. Rather than my ISP?

With vpn you can put yourself into that network, the router of your
mum needs to support it though.
Browsing internet over her network is not cool, not alone the high
traffic you will cause (the traffic first hits her network in, then
outwards to you).

Depending on the connections availaible it might be very slow
anyway.

-dr

-- 
For an email, include the word <noblock> in subject.
My thoughts might not always make sense ;)

[toc] | [prev] | [next] | [standalone]

#3695

"Dominic Reich" <usenet@tmsn.at> wrote in message 
news:20160410.faaaa$ab90772acc@tmsn.at...
> Bill Cunningham <billcun-remove-@suddenlink.net> wrote:
>>     I have at my Mom's place a router of mine that is hooked up to her
>> computer, printer, and tablet. From my Apartment I can remotely access 
>> the
>> router. How an I add this computer of mine to the network at her place 
>> and
>> go into the internet from it. Rather than my ISP?
>
> With vpn you can put yourself into that network, the router of your
> mum needs to support it though.
> Browsing internet over her network is not cool, not alone the high
> traffic you will cause (the traffic first hits her network in, then
> outwards to you).
>
> Depending on the connections availaible it might be very slow
> anyway.

    There's ssh and pptp and l2tp. IDK about pptp and linux though. Since 
it's a proprietary protocol. Before that though I need to get her (my) 
router to assign an IP by DHCP on the router. The IP address should be a 
gateway address. Things if sent through HTTPS shouldn't attract much 
attention I wouldn't think.

Bill

[toc] | [prev] | [next] | [standalone]

#3696

>     I have at my Mom's place a router of mine that is hooked up to her
> computer, printer, and tablet. From my Apartment I can remotely access the
> router. How an I add this computer of mine to the network at her place and
> go into the internet from it. Rather than my ISP?

I'm not sure I understand the situation, but my impression is that you
can definitely do that (I'd recommend you use OpenVPN for that), yet in
order for you to "go into the Internet" via your mom's router, the
packets will still have to go via *your* ISP from your place to your
mom's router.


        Stefan

[toc] | [prev] | [next] | [standalone]

#3697

"Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message 
news:jwv7fg5knlu.fsf-monnier+comp.os.linux.networking@gnu.org...

> I'm not sure I understand the situation, but my impression is that you
> can definitely do that (I'd recommend you use OpenVPN for that), yet in
> order for you to "go into the Internet" via your mom's router, the
> packets will still have to go via *your* ISP from your place to your
> mom's router.

    This is a kind of hard to explain situation. Most of the equipment, 3 
devices behind the router are off most ofthe tiem anyway. So accessing them 
by a hacker I think is going to be pretty much 100% a failure. ;)

    Open vpn might sound like what I am looking for. Accessing the router 
remotely like I can really has nothing to do with what I am trying to 
accomplish. The term here might be I am trying to use a router as a "proxy". 
I can open the internal lan addresses with ports 80-1700. If even needed. I 
want my IP to be the IP of the router. It's WAN address.

Does that make any since?

Bill

[toc] | [prev] | [next] | [standalone]

#3698

On 2016-04-11, Bill Cunningham <billcun-remove-@suddenlink.net> wrote:
>
> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message 
> news:jwv7fg5knlu.fsf-monnier+comp.os.linux.networking@gnu.org...
>
>> I'm not sure I understand the situation, but my impression is that you
>> can definitely do that (I'd recommend you use OpenVPN for that), yet in
>> order for you to "go into the Internet" via your mom's router, the
>> packets will still have to go via *your* ISP from your place to your
>> mom's router.
>
>     This is a kind of hard to explain situation. Most of the equipment, 3 
> devices behind the router are off most ofthe tiem anyway. So accessing them 
> by a hacker I think is going to be pretty much 100% a failure. ;)
>
>     Open vpn might sound like what I am looking for. Accessing the router 
> remotely like I can really has nothing to do with what I am trying to 
> accomplish. The term here might be I am trying to use a router as a "proxy". 
> I can open the internal lan addresses with ports 80-1700. If even needed. I 
> want my IP to be the IP of the router. It's WAN address.
>
> Does that make any since?

No it makes no sense, except it sounds like you want your address to
look like it is your mom's address rather than your own. While there
might be a legitimate reason for that, which you should tell us.
Otherwise, it sounds more like you are
trying to take advantage of your mom, and make sure that if something
blowback occurs because of your own activity on the net, it is your mom,
not you that gets into trouble. 

Anyway, I do not know of routers that will of themselves allow VPN from
outside to the router. Ie, you may need to have your mother keep her
computer on. 

>
> Bill
>
>

[toc] | [prev] | [next] | [standalone]

#3700

> Anyway, I do not know of routers that will of themselves allow VPN from
> outside to the router. Ie, you may need to have your mother keep her
> computer on. 

Any router running OpenWRT (and I'd argue that if your router isn't
running something like OpenWRT (or Debian, of course) it's a problem
that you should address) should be able to run OpenVPN.

I was using a wrtsl54gs router as OpenVPN server several years ago, so
any moderately current router should be up to the task.


        Stefan

[toc] | [prev] | [next] | [standalone]

#3703

"Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message 
news:jwvk2k3k5nz.fsf-monnier+comp.os.linux.networking@gnu.org...
>> Anyway, I do not know of routers that will of themselves allow VPN from
>> outside to the router. Ie, you may need to have your mother keep her
>> computer on.

    She rarely uses it. I could probably keep it on if I needed to. But 
accessing the computer isn't really what I'm trying to do.

> Any router running OpenWRT (and I'd argue that if your router isn't
> running something like OpenWRT (or Debian, of course) it's a problem
> that you should address) should be able to run OpenVPN.
>
> I was using a wrtsl54gs router as OpenVPN server several years ago, so
> any moderately current router should be up to the task.

    IDK enough about this to know f it can be done. Maybe what I am indeed 
looking for is a proxy. But there's on line lists of proxies to go through. 
All I can do is set up Tor.
    More than anything it's an experiment to see if the router can create a 
path for me to go through. As said before it would be slow. I have openvms 
for windows but it's linux that I like better.

    The router has a pool I have set to IPs it can assign in the range of 
192.168.2.2 to .75. Default it can go to 192.168.2.100. These are of course 
non-routable internal IPs. Will it assign this to a computer that would be 
accessing with an external IP in the 173.x.x.x range. < shrug>.

Bill

[toc] | [prev] | [next] | [standalone]

#3704

On 12.4.16 22:20, Bill Cunningham wrote:
> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message
> news:jwvk2k3k5nz.fsf-monnier+comp.os.linux.networking@gnu.org...
>>> Anyway, I do not know of routers that will of themselves allow VPN from
>>> outside to the router. Ie, you may need to have your mother keep her
>>> computer on.
>
>      She rarely uses it. I could probably keep it on if I needed to. But
> accessing the computer isn't really what I'm trying to do.
>
>> Any router running OpenWRT (and I'd argue that if your router isn't
>> running something like OpenWRT (or Debian, of course) it's a problem
>> that you should address) should be able to run OpenVPN.
>>
>> I was using a wrtsl54gs router as OpenVPN server several years ago, so
>> any moderately current router should be up to the task.
>
>      IDK enough about this to know f it can be done. Maybe what I am indeed
> looking for is a proxy. But there's on line lists of proxies to go through.
> All I can do is set up Tor.
>      More than anything it's an experiment to see if the router can create a
> path for me to go through. As said before it would be slow. I have openvms
> for windows but it's linux that I like better.
>
>      The router has a pool I have set to IPs it can assign in the range of
> 192.168.2.2 to .75. Default it can go to 192.168.2.100. These are of course
> non-routable internal IPs. Will it assign this to a computer that would be
> accessing with an external IP in the 173.x.x.x range. < shrug>.
>
> Bill


A VPN means that there will be a tunnel built between the two networks.
The tunnel transports the packets of your internal network using the
addresses in the public network. To set up the tunnel, at least one end
of the connection needs a publicly seen IP address, which the other end
can connect to.

There are also 4 IP addresses in the tunnel: one inside and one outside
address at each end. The inside addresses belong to the internal
networks you are connecting together, and the outside addresses are
for bulding the connection. The VPN module takes a packet from the
inside network, packs it suitably for transport and uses the outside
addresses to ship it to the other end, where it is then unwrapped from
the packaging and put into the inside network at that end.

The 'P' in VPN is privacy. It is enforced by encrypting the packets
before wrapping for the shipment, and decypted at the receiving end
after unwrapping.

-- 

-TV

[toc] | [prev] | [next] | [standalone]

#3709

"Tauno Voipio" <tauno.voipio@notused.fi.invalid> wrote in message 
news:nejigv$c8l$1@dont-email.me...
> On 12.4.16 22:20, Bill Cunningham wrote:
>> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message
>> news:jwvk2k3k5nz.fsf-monnier+comp.os.linux.networking@gnu.org...
>>>> Anyway, I do not know of routers that will of themselves allow VPN from
>>>> outside to the router. Ie, you may need to have your mother keep her
>>>> computer on.
>>
>>      She rarely uses it. I could probably keep it on if I needed to. But
>> accessing the computer isn't really what I'm trying to do.
>>
>>> Any router running OpenWRT (and I'd argue that if your router isn't
>>> running something like OpenWRT (or Debian, of course) it's a problem
>>> that you should address) should be able to run OpenVPN.
>>>
>>> I was using a wrtsl54gs router as OpenVPN server several years ago, so
>>> any moderately current router should be up to the task.
>>
>>      IDK enough about this to know f it can be done. Maybe what I am 
>> indeed
>> looking for is a proxy. But there's on line lists of proxies to go 
>> through.
>> All I can do is set up Tor.
>>      More than anything it's an experiment to see if the router can 
>> create a
>> path for me to go through. As said before it would be slow. I have 
>> openvms
>> for windows but it's linux that I like better.
>>
>>      The router has a pool I have set to IPs it can assign in the range 
>> of
>> 192.168.2.2 to .75. Default it can go to 192.168.2.100. These are of 
>> course
>> non-routable internal IPs. Will it assign this to a computer that would 
>> be
>> accessing with an external IP in the 173.x.x.x range. < shrug>.
>>
>> Bill
>
>
> A VPN means that there will be a tunnel built between the two networks.
> The tunnel transports the packets of your internal network using the
> addresses in the public network. To set up the tunnel, at least one end
> of the connection needs a publicly seen IP address, which the other end
> can connect to.
>
> There are also 4 IP addresses in the tunnel: one inside and one outside
> address at each end. The inside addresses belong to the internal
> networks you are connecting together, and the outside addresses are
> for bulding the connection. The VPN module takes a packet from the
> inside network, packs it suitably for transport and uses the outside
> addresses to ship it to the other end, where it is then unwrapped from
> the packaging and put into the inside network at that end.
>
> The 'P' in VPN is privacy. It is enforced by encrypting the packets
> before wrapping for the shipment, and decypted at the receiving end
> after unwrapping.

I noticed packaged being installed on my linux. Like l2tp that might be the 
encryption protocol open vpn uses. I don't know hot to begin setting up 
though.

Bill

[toc] | [prev] | [next] | [standalone]

#3712

On 14.4.16 19:25, Bill Cunningham wrote:
> "Tauno Voipio" <tauno.voipio@notused.fi.invalid> wrote in message
> news:nejigv$c8l$1@dont-email.me...
>> On 12.4.16 22:20, Bill Cunningham wrote:
>>> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message
>>> news:jwvk2k3k5nz.fsf-monnier+comp.os.linux.networking@gnu.org...
>>>>> Anyway, I do not know of routers that will of themselves allow VPN from
>>>>> outside to the router. Ie, you may need to have your mother keep her
>>>>> computer on.
>>>
>>>       She rarely uses it. I could probably keep it on if I needed to. But
>>> accessing the computer isn't really what I'm trying to do.
>>>
>>>> Any router running OpenWRT (and I'd argue that if your router isn't
>>>> running something like OpenWRT (or Debian, of course) it's a problem
>>>> that you should address) should be able to run OpenVPN.
>>>>
>>>> I was using a wrtsl54gs router as OpenVPN server several years ago, so
>>>> any moderately current router should be up to the task.
>>>
>>>       IDK enough about this to know f it can be done. Maybe what I am
>>> indeed
>>> looking for is a proxy. But there's on line lists of proxies to go
>>> through.
>>> All I can do is set up Tor.
>>>       More than anything it's an experiment to see if the router can
>>> create a
>>> path for me to go through. As said before it would be slow. I have
>>> openvms
>>> for windows but it's linux that I like better.
>>>
>>>       The router has a pool I have set to IPs it can assign in the range
>>> of
>>> 192.168.2.2 to .75. Default it can go to 192.168.2.100. These are of
>>> course
>>> non-routable internal IPs. Will it assign this to a computer that would
>>> be
>>> accessing with an external IP in the 173.x.x.x range. < shrug>.
>>>
>>> Bill
>>
>>
>> A VPN means that there will be a tunnel built between the two networks.
>> The tunnel transports the packets of your internal network using the
>> addresses in the public network. To set up the tunnel, at least one end
>> of the connection needs a publicly seen IP address, which the other end
>> can connect to.
>>
>> There are also 4 IP addresses in the tunnel: one inside and one outside
>> address at each end. The inside addresses belong to the internal
>> networks you are connecting together, and the outside addresses are
>> for bulding the connection. The VPN module takes a packet from the
>> inside network, packs it suitably for transport and uses the outside
>> addresses to ship it to the other end, where it is then unwrapped from
>> the packaging and put into the inside network at that end.
>>
>> The 'P' in VPN is privacy. It is enforced by encrypting the packets
>> before wrapping for the shipment, and decypted at the receiving end
>> after unwrapping.
>
> I noticed packaged being installed on my linux. Like l2tp that might be the
> encryption protocol open vpn uses. I don't know hot to begin setting up
> though.
>
> Bill


If you can control both ends, I'd opt for OpenVPN. For the outside
addresses, it needs an UDP connection (standard port 1194 both ways).

L2tp is more complicated to set up.

You have still to determine whether you want transfer IP packets
or Ethernet frames. The former means less network traffic, but
it may limit some LAN protocols out.

-- 

-TV

[toc] | [prev] | [next] | [standalone]

#3705

On Mon, 11 Apr 2016 15:06:27 -0400, Bill Cunningham wrote:
>
> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message 
> news:jwv7fg5knlu.fsf-monnier+comp.os.linux.networking@gnu.org...
>
>> I'm not sure I understand the situation, but my impression is that you
>> can definitely do that (I'd recommend you use OpenVPN for that), yet in
>> order for you to "go into the Internet" via your mom's router, the
>> packets will still have to go via *your* ISP from your place to your
>> mom's router.
>
>     This is a kind of hard to explain situation. Most of the equipment, 3 
> devices behind the router are off most ofthe tiem anyway. So accessing them 
> by a hacker I think is going to be pretty much 100% a failure. ;)
>
>     Open vpn might sound like what I am looking for. Accessing the router 
> remotely like I can really has nothing to do with what I am trying to 
> accomplish. 

I assume you have set her router to allow access from your ip address.

If you use vpn, you will not know what ip address will be used when
your connection hits her router. For that to work, you will have to
set up port knocking to allow your connection to go through.

[toc] | [prev] | [next] | [standalone]

#3706

"Bit Twister" <BitTwister@mouse-potato.com> wrote in message 
news:slrnngqk62.t05.BitTwister@wb.home.test...
> On Mon, 11 Apr 2016 15:06:27 -0400, Bill Cunningham wrote:
>>
>> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message
>> news:jwv7fg5knlu.fsf-monnier+comp.os.linux.networking@gnu.org...
>>
>>> I'm not sure I understand the situation, but my impression is that you
>>> can definitely do that (I'd recommend you use OpenVPN for that), yet in
>>> order for you to "go into the Internet" via your mom's router, the
>>> packets will still have to go via *your* ISP from your place to your
>>> mom's router.
>>
>>     This is a kind of hard to explain situation. Most of the equipment, 3
>> devices behind the router are off most ofthe tiem anyway. So accessing 
>> them
>> by a hacker I think is going to be pretty much 100% a failure. ;)
>>
>>     Open vpn might sound like what I am looking for. Accessing the router
>> remotely like I can really has nothing to do with what I am trying to
>> accomplish.
>
> I assume you have set her router to allow access from your ip address.
>
> If you use vpn, you will not know what ip address will be used when
> your connection hits her router. For that to work, you will have to
> set up port knocking to allow your connection to go through.

    For remote access yes. I can access the router from my IP here that my 
ISP's servers have assigned my machine.

Bill

[toc] | [prev] | [next] | [standalone]

#3707

"Bit Twister" <BitTwister@mouse-potato.com> wrote in message 
news:slrnngqk62.t05.BitTwister@wb.home.test...
> On Mon, 11 Apr 2016 15:06:27 -0400, Bill Cunningham wrote:
>>
>> "Stefan Monnier" <monnier@iro.umontreal.ca> wrote in message
>> news:jwv7fg5knlu.fsf-monnier+comp.os.linux.networking@gnu.org...
>>
>>> I'm not sure I understand the situation, but my impression is that you
>>> can definitely do that (I'd recommend you use OpenVPN for that), yet in
>>> order for you to "go into the Internet" via your mom's router, the
>>> packets will still have to go via *your* ISP from your place to your
>>> mom's router.
>>
>>     This is a kind of hard to explain situation. Most of the equipment, 3
>> devices behind the router are off most ofthe tiem anyway. So accessing 
>> them
>> by a hacker I think is going to be pretty much 100% a failure. ;)
>>
>>     Open vpn might sound like what I am looking for. Accessing the router
>> remotely like I can really has nothing to do with what I am trying to
>> accomplish.
>
> I assume you have set her router to allow access from your ip address.
>
> If you use vpn, you will not know what ip address will be used when
> your connection hits her router. For that to work, you will have to
> set up port knocking to allow your connection to go through.

    Port knocking. Do you mean port forwarding?

Bill

[toc] | [prev] | [next] | [standalone]

#3708

On Tue, 12 Apr 2016 16:52:55 -0400, Bill Cunningham wrote:
>
> "Bit Twister" <BitTwister@mouse-potato.com> wrote in message 

>> If you use vpn, you will not know what ip address will be used when
>> your connection hits her router. For that to work, you will have to
>> set up port knocking to allow your connection to go through.
>
>     Port knocking. Do you mean port forwarding?

No.      https://encrypted.google.com/advanced_search

Putting   port knocking   in the second box yields
About 62,900 results (0.43 seconds) 

You may want to bookmark that URL.

[toc] | [prev] | [standalone]

Back to top | Article view | comp.os.linux.networking

csiph-web