a Virtual Private Network is a private network that is built upon a public network, typically using encryption for to secure the private communication.

learn more… | top users | synonyms

2
votes
1answer
10k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
0
votes
1answer
49 views

PPTP and Split Routing

If I uncheck the "use default gateway on remote network" to be able to browse local shares and the internet at the same time, does that void encryption?
0
votes
1answer
2k views

What methods are there of protecting a VPS from DDOS attacks? [duplicate]

I was just wondering what would be the best way to stop a VPS from being attacked, bandwidth would be a problem in this case so methods that reduce the amount of incoming attacks and stop sending ...
3
votes
1answer
4k views

TLS v1.0 best cipher for OpenVPN setup

I'm trying to setup OpenVPN with as much security as I can. I'm in the process of selecting a cipher for OpenVPN. Which is the safest one, tls-cipher DHE-RSA-AES256-SHA or tls-cipher AES256-SHA? I've ...
3
votes
1answer
4k views

Are there any known vulnerabilities in PPTP VPNs when configured properly?

PPTP is the only VPN protocol supported by some devices (for example, the Asus RT-AC66U WiFi router). If PPTP is configured to only use the most secure options, does its use present any security ...
0
votes
2answers
62 views

Secure the Datacenter, untrust the LAN?

In a scenario where you have a Wireless network provisioned as untrusted behind a firewall, using VPNs to reach the trusted Datacenter. Does anyone have an reason why this should/not be expanded to ...
4
votes
2answers
249 views

Does the password you use to sign into a VPN determine the strength?

I subscribed to a VPN service and need to change the password. Does the password I use to log in determine the strength? For example should it be 64 characters long or can it be 10? I'm thinking of ...
1
vote
0answers
51 views

What's The Easiest Way To Maintain Remote Users Access to a Webapp

Here is a real world case: A chain of high schools (several hundreds) has many websites (~ 3x number of Schools) that are content driven by users (the students). Every school maintains about 2-4 ...
1
vote
1answer
238 views

Setting up a ram based VPN

Are there any ram based VPN solutions that have options to keep no logs? I've been looking to set up a portable linux distro, probably Debian, that I'd run from CD without any form of persistence. It ...
2
votes
3answers
739 views

Filtering In Iran

Since many of you already know the Iranian government aggressively uses internet censorship to block sites such as facebook, flicker, bbc, etc. The Iranian people use various methods to bypass ...
2
votes
2answers
137 views

How to create an anti-flood mechanism without leaving VPN's out?

I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs). Every time someone requests an ...
4
votes
2answers
1k views

How does VPN encryption work?

I've been searching and searching, but I can't seem to find a good-enough technical explanation. From what I've gathered, there are two "things" able to secure VPNs: 1) Pre-Shared Key: This handles ...
5
votes
2answers
3k views

How effective is the iOS “Send All Traffic to VPN” setting at deterring Wifi-based attacks?

iOS version 5 and newer has a setting for VPNs to "Send All Traffic" over that VPN. I think that sending all data to a trusted VPN target would ensure privacy of all communication sent over that WiFi ...
1
vote
2answers
237 views

How to uniquely identify / tag client devices to whitelist VPN access?

I'm just wondering if there is any way to uniquely identify or tag client devices like laptops and towers in order to whitelist them for vpn access. (Note: This is a thought-experiment at the moment, ...
1
vote
1answer
4k views

Is it safe to use VPNbook or similar sites? [duplicate]

Sometimes I need to use Internet from cybercafes or restaurants. I'm concerned about the security when accessing critical sites such as my bank, Paypal or just my Facebook. Besides the typical ...
0
votes
2answers
1k views

Protecting yourself against DNS spoofing?

Are there any things which the user can do, on their own machine, to protect against DNS spoofing? I was just thinking when I was at the airport last and I wanted to check my email I used a hotspot ...
1
vote
0answers
63 views

How did these websites see through the VPN tunnel? [duplicate]

I'm using privateineternetaccess to VPN my internet connection. Recently I've noticed some web sites appear to know my real location and IP address. The most alarming incident I've seem to have been ...
1
vote
5answers
383 views

Manual DNS change

If I manually change my DNS setting in the router or in Windows settings from the provider's one to, say, 8.8.4.4 by Google - will it mean that my ISP has no idea which sites I am going to? Maybe it ...
-1
votes
1answer
8k views

Is it safe to use TunnelBear VPN [closed]

Tunnelbear is a VPN with an easy interface to choose your country IP - https://www.tunnelbear.com/ On installation it installs a network service. When the app is turned off would it be able to ...
5
votes
1answer
737 views

Is EAP-MSCHAP v2 secure?

I am in a process of enforcing more strict VPN access policy after learning about the attack on PPTP with MSCHAP v2. Basically this I will be disabling the traditional PPP authentication methods and ...
6
votes
2answers
490 views

Should you use VPN if the website uses HTTPS?

If I visit the website which uses https, is there a point using an VPN? In places like coffee shop where internet is not secure. Because I think https already encrypts data?
-1
votes
1answer
67 views

firewall settings for VPN

In my firewall settings there are options for "Allow VPN connections via PPTP" and "Allow VPN connections via L2tp-IPsec". All of my internet traffic goes through a VPN. Should I have these settings ...
0
votes
2answers
708 views

VPN and Firefox proxy

What happens if I use VPN and then configure my firefox browser to use SOCKS proxy? Am I then behind both or just proxy?
0
votes
1answer
157 views

Does the VPN provider will have access to my content? [duplicate]

I am planning to buy a VPN service just to circumvent the filtering applied by the government. However as I am planning to use OpenVPN on my dd-wrt router, all of my data will pass through this ...
0
votes
2answers
193 views

A thought experiment about obfuscating the location of a smartphone when it is in use, is it possible? [closed]

I was thinking about how smartphones are very difficult to use in a way that does not transmit your location, with all the networks it has to connect to (and let's say a 'burner phone' is too ...
1
vote
1answer
494 views

Openvpn in front of proxy? [closed]

I have been reading books on OpenVPN, and there is one thing I don't understand yet. What happens when a person connects to OpenVPN, and their web browser is set to a Socks5 or HTTP/HTTPS proxy and ...
11
votes
8answers
8k views

Whats the best way to make my internet traffic anonymous?

Recently I have thought more and more about how to make my Internet traffic anonymous. Not for illegal reasons, but just to stop leaving information about me. The methods I know of to anonymize my ...
1
vote
2answers
4k views

OpenSSL, x509: what's the significance of CN (Common Name)?

With regard to these three items Certificate Authorities (CA) Gateway certificates End-point Certificates (client-cert) What is the significance of the Common Name CN with regard to the a VPN? ...
2
votes
2answers
199 views

OpenSSL, x509: what is the correct way to picture signing authorities?

For the purposes of creating a VPN, I can't find a logical explanation of OpenSSL's/x509 scheme. I'm royally confused about these three terms, Certificate Authorities Gateway certificates End-point ...
7
votes
4answers
2k views

Can a VPN avoid the Prism Surveillance Programme?

This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off. Can a VPN avoid the ...
9
votes
2answers
513 views

NFC used in place of contact based smart card two-factor authentication

My organization is trying to move away from contact based smartcards (because our hardware vendor is no longer integrating them into their current systems) to some other form of two-factor ...
3
votes
2answers
3k views

Does Microsoft Remote Desktop require a VPN to be secured?

I am connecting from my home Windows 7 machine to a hosted server Windows Server 2008 R2. I am connecting to it using Remote Desktop on a non-default port. I am wondering if I should go to the effort ...
-1
votes
1answer
3k views

Is it possible to set up my own VPN using an ISP without having to open a 3rd party VPN account? [closed]

I have a home network and I would like to implement a VPN to the cloud. Is this possible without the ISP's cooperation in port forwarding? In other words, is my only option to use a 3rd party VPN ...
2
votes
1answer
4k views

Risks of Microsoft Remote Desktop access behind a secure VPN

This is mostly for my own education, but a scenario has came up at work that has me skeptical. I'd like for the security experts to tell me if this policy is overbearing or not. I remote into a VPN ...
1
vote
4answers
1k views

IPSec VPNs and symmetric keys

When dealing with IPSec based VPNs, I understand that there is a slight "problem" with symmetric key exchange. Obviously, you can't send the keys over the VPN, since they are used to guarantee the ...
1
vote
1answer
664 views

What is the difference between an HTTPS traffic setup with Stunnel and a SSL-VPN

We have a scenario where we cannot connect to our stunnel server running on port 443 on our network, which only allows access to Internet via a proxy server. On the contrary, when we tried a SSL VPN ...
3
votes
2answers
5k views

How is a website determining my location even via VPN? [duplicate]

I'm currently in China, and accessing the Internet via a VPN in the USA. When I access Google maps or other location-based web services, they all show my location as that of the VPN server. However, ...
-1
votes
1answer
521 views

Is there a way to get OS X to start a VPN connection before allowing network traffic? [closed]

I'm running OS X 10.8 and have Tunnelblick set up so I can connect to my OpenVPN server at home. I've also used this at $WORK in the past. When I'm out and about and want to jump on a public network, ...
7
votes
3answers
795 views

Once VPN is unplugged can work still monitor?

Work provides people from my company that 'work at home' with a separate VPN router which will be plugged into my existing home router. They have also asked for the router model, username and ...
-1
votes
1answer
99 views

Where else is IPSec used, besides with VPNs? [closed]

IPSec is most commonly used to secure VPN traffic. Where else is this protocol suite used? What else can it be used for?
-4
votes
1answer
2k views

Is my computer being hacked? How can wireshark reveal if I am being hacked? [closed]

So last night I was using openVPN via my personal cloud server to watch some Hulu. About 15 minutes into the movie I noticed my network stats were download: ~250 MB upload: ~1.8 GB This is ...
-1
votes
2answers
7k views

How can using a VPN increase network speed? [closed]

There are lots of guides online which suggest that using a VPN or proxy will gain better speed or 'free internet' however this seems unlikely. If my ISP is performing packet shaping on my connection. ...
2
votes
1answer
71 views

Remote network security option

I'm a bit confused with some different network security techniques. Say we want a secure communication with a particular mail server in a remote company network. Reading and sending mails should be ...
4
votes
2answers
889 views

I'm being followed on the web. Explanations for mysterious behavior

Am I being stalked? I was recently doing some basic Python development scripting. Python has a nice feature where it can run a simple HTTP server that serves the contents of the local directory, on ...
4
votes
3answers
306 views

The safest way to circumventing Iran's Internet censorship

We usually buy services like VPN, SOCKS, Kerio [Kerio Connect?]... to circumvent Iran's Internet censorship policy. Recently, one of the shops started selling [one of] Kerio's products, for which I do ...
2
votes
1answer
1k views

IPSec AH + ESP used together

When ESP and AH are used together (ESP transport, AH transport) on the same packet does ESP encrypt the AH's hash, or is the hash left in the clear? If the hash isn't encrypted, there are obviously ...
11
votes
5answers
3k views

How can encrypted traffic bypass the Great Firewall of China when it is being blocked?

The Great Firewall of China is controlled by the government and has put in place a "learning algorithm" to block unapproved encrypted traffic. The only way to get encrypted traffic through the ...
1
vote
2answers
365 views

How do I ensure that a VPS host will keep my information private?

Basically, I want to use OpenVPN on a VPS to browse confidentially. However, I don't know much about VPS hosters and to me, it seems to be a hard choice because there are so many. However, I think ...
1
vote
3answers
798 views

Sniffing on VPN configuration

Our company wants to implement a service based on sniffing for security purposes, since we manage important information this requirement is imperative. The situation is as follows. Everyone in the ...
0
votes
1answer
80 views

VPN using SmartPhone Location

When you VPN using your smartphone as a hotspot, can the VPN tell your location like it can when you VPN over a wireless connection hotspot?