This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

2
votes
1answer
3k views

Why should I use easy-rsa when using OpenVPN?

Reading this guide on how to setup an OpenVPN server on a Raspberry Pi, I saw this line: 4) You don’t want anyone who finds your VPN server address to be able to connect. So next, we’re going to ...
2
votes
4answers
177 views

Is there a way to make Tor network your full VPN?

Is there a way to use Tor network as your VPN, proxy or something alike? I have been gone to their website but I've seen just browser (Tor Browser), bridge, relay and exit. Is there way to tell ...
2
votes
2answers
204 views

How to create an anti-flood mechanism without leaving VPN's out?

I'm trying to protect my applications from some bots that are either malfunctioning or trying to take my sites down (lots of requests from the same IPs in the logs). Every time someone requests an ...
2
votes
2answers
321 views

OpenSSL, x509: what is the correct way to picture signing authorities?

For the purposes of creating a VPN, I can't find a logical explanation of OpenSSL's/x509 scheme. I'm royally confused about these three terms, Certificate Authorities Gateway certificates End-point ...
2
votes
1answer
144 views

Double/Chained VPN - Which IP will be vissible to the VPN providers?

I am currently using a company VPN and use Juniper Network Connect on OS X to connect to this network. I'm interested in using another VPN and set this up at my internet router at home, so all ...
2
votes
4answers
527 views

Help understanding VPN

I've been reading about VPNs lately, and I'm struggling to understand what they do and how they're essential components to upholding anonymity online. The basic idea I have is that a VPN allows two ...
2
votes
4answers
17k views

Can my company access my computer via the VPN?

The job I have requires that we have computers at home, a few years ago they had everyone install a VPN on our home personal computers (the company did not provide us with these computer) how safe if ...
2
votes
2answers
67 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
2
votes
1answer
177 views

Does a VPN Provider Know My MAC Address?

I know MAC is a layer 2 address, so it's only sent to the next router in the chain. Does a VPN provider get that information when I'm connected to their service? Is their router considered the next ...
2
votes
2answers
308 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
2
votes
2answers
1k views

How to hide real IP from browsers while using VPN?

You probably know that even when you use a VPN service, browsers like Chrome and Safari can still somehow provide your real location to Google Maps etc (if you give it a permission). My question is: ...
2
votes
3answers
1k views

Filtering In Iran

Since many of you already know the Iranian government aggressively uses internet censorship to block sites such as facebook, flicker, bbc, etc. The Iranian people use various methods to bypass ...
2
votes
4answers
2k views

IPSec VPNs and symmetric keys

When dealing with IPSec based VPNs, I understand that there is a slight "problem" with symmetric key exchange. Obviously, you can't send the keys over the VPN, since they are used to guarantee the ...
2
votes
1answer
91 views

Suspicious about no-log VPN policy - anyone care to prove me wrong?

This post may sound pretty silly for you as specialists, but for me it is a serious question I cant find an answer to on the internet. Basically, I wanted to encrypt my net connection - obviously, I'...
2
votes
1answer
142 views

How do VPN services in the US choose to comply with foreign law enforcement requests? [closed]

Imagine a user from Russia uses a VPN-service which obeys US jurisdiction. This user did violate Russian legislation and the violation is being investigated by Russian law enforcement. Let's assume ...
2
votes
2answers
206 views

How secure is VPN addons for browsers [duplicate]

I regularly uses VPN addons like browsec, Zenmate etc in my browser. These addons/Plugin boast about hiding IPs, bypass firewalls, faster and encrypted services, tracking protection etc which they ...
2
votes
1answer
238 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
2
votes
2answers
201 views

Foolproof way to hide your IP when browsing [closed]

is there a fool proof-ish way to hide your IP from websites you visit? I heard even if you use VPN, there can be 'leaks'? And one step more secure is Anonymizer or Tor? Can they have 'leaks', too? ...
2
votes
2answers
296 views

Is using an free and anonymous VPN service safe? [closed]

There are VPN services that are totally free and high speed vpn which makes me think, how can they offer such a service for free without ads nor donations? Is using this VPN safe? Regarding my ...
2
votes
2answers
442 views

What can my university see by installing a CA root certificate on my computer, even when I'm using a VPN?

To use the wifi at my university, you must install a CA root certificate by them. In my case, I am using a Mac computer with a VPN installed. I'm curious, what can they see me do on my computer by ...
2
votes
2answers
3k views

Squid proxy and VPN software

I have some questions about squid proxies, we set a squid proxy server to block certain web sites for users. and some users only can access one website that related to our work.but after install some ...
2
votes
1answer
846 views

Openvpn in front of proxy? [closed]

I have been reading books on OpenVPN, and there is one thing I don't understand yet. What happens when a person connects to OpenVPN, and their web browser is set to a Socks5 or HTTP/HTTPS proxy and ...
2
votes
1answer
6k views

Risks of Microsoft Remote Desktop access behind a secure VPN

This is mostly for my own education, but a scenario has came up at work that has me skeptical. I'd like for the security experts to tell me if this policy is overbearing or not. I remote into a VPN ...
2
votes
2answers
758 views

Test Android Secure Encrypted Traffic

For testing android traffic encryption I have configured a VPN client in my phone. What simple test I can perform in my home wifi network to verify that the traffic is really encrypted and secure?
2
votes
3answers
573 views

What security protocols provide point-to-point confidentiality?

Am I right in thinking that VPN doesn't protect until you're out onto the external network (assuming you're connecting from within an internal network)? Or does VPN provide confidentiality from the ...
2
votes
3answers
148 views

What is this Polish IP doing on my internal WiFi?

Lately I've seen many strange events in the logs of my wifi router / cable modem. Many are linked to the IP address 83.0.68.240 from the ISP, Orange Polanska. Events like "DoS attack: Ping Of Death", "...
2
votes
1answer
104 views

Can in a VPN LAN-to-LAN one site be completely isolated from the other?

In a VPN LAN-to-LAN setting, is it possible to isolate one site from the other? I know that we can use a firewall but that would obligate us to manage specific rules in the firewall. I would like to ...
2
votes
2answers
174 views

Public AP: How to reduce vulnerability window between Captive Portal and starting VPN?

I always use a VPN on my Mac when I access over public APs (such as coffee shop free WiFi) How much should I worry about the window of time where I am in the captive portal (the agreement screen) and ...
2
votes
2answers
771 views

Using VPN in the UAE - safe or trackable?

I'm currently in the United Arab Emirates, and I am wondering if Etisalat or the UAE can track what I am doing if I use the ZenMate VPN addon to Chrome?
2
votes
1answer
274 views

Is it particularly unsafe to use openvpn or pptp with only username/password authentication instead of certificates?

I use a vpn server (supporting pptp and openvpn) built in to my router at home to make a secure connection back to my home network. I currently use OpenVPN with certificate authentication, but since ...
2
votes
2answers
220 views

How to protect iKvM, IPMI, KvM Interfaces from 0day and other exploits

In REF to http://threatpost.com/ipmi-protocol-bmc-vulnerabilities-expose-thousands-of-servers-to-attack and the hacks of several companies and web hosts have been hit and had their servers wiped from ...
2
votes
2answers
353 views

How can I protect myself from the VPN operator when using a VPN to gain free access to the Internet?

I live in a country that the government blocks most ways of accessing to the uncensored Internet (like blocking VPN pptp, l2tp), Luckily there are some very fast services still available like Kerio ...
2
votes
2answers
3k views

When connecting to internet through VPN what precautions should be taken?

I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
2
votes
3answers
626 views

Are intermediate signing certs the only secure+practical way to manage OpenVPN client certs?

My organization needs to issue (and revoke) OpenVPN client certificates for people working remotely. Our system is based on a standard OpenSSL CA setup and the easy-rsa tools, and the whole directory ...
2
votes
2answers
1k views

Ordering of shared Phase 1/ISAKMP VPN policies

The various Phase 1 settings of a VPN tunnel policy are fairly well-established (encryption, hashing, DH group, lifetime), but in what order are they considered applicable to a more-secure tunnel? I ...
2
votes
1answer
997 views

Analyzing wireshark results (openvpn)

I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box. I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
2
votes
2answers
1k views

ISP role with VPN & VPS?

I have notice online that many people get a VPN so that ISP can not view the sites you visit, create a profile of you and so on. Reading How safe is it to connect to Internet through VPN?, Jonah ...
2
votes
1answer
6k views

Is there a difference between a VTI and a regular VPN tunneling process?

Is there a difference between a VTI (Virtual Tunnel Interface) and a regular VPN tunneling process? Or have I got the whole concept wrong?
2
votes
1answer
54 views

OpenVPN Client Id appearing in emails

I use OpenVPN to connect to a server. I just found that in a series of emails I sent and received to and from the same person the following line appeared after every message I sent: [cid:{a long ...
2
votes
2answers
527 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
2
votes
1answer
84 views

Properly solving IP leaking from WebRTC and other apps with STUN when using a VPN

This is really a follow-up question from this: Stun scripts/webRTC IP leaks I'm connecting to a VPN using a virtual adapter, which has a default routing rule so all traffic goes through it. I still ...
2
votes
1answer
637 views

Hide Docker Containers Behind VPN

I want to run all services within Docker containers (including RA and site-to-site VPN) such that all containers except the VPN are not exposed on the public IP, but are reachable on the VPN IP. This ...
2
votes
1answer
6k views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
2
votes
3answers
320 views

How do people know that IP adress belongs to VPN?

It seems that many servers know that I use VPN. They either block me completely or make me answer CAPTCHA etc. I want to use VPN but seems that many hosts don't want their customers to use VPN. How ...
2
votes
2answers
118 views

Would a VPN with changing configs do the same job as different VMs

I was reading this post: Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website? So my question: Would using a VPN and swapping out ...
2
votes
1answer
190 views

Does having a VPN service mean accessing my email etc. over public free open WiFi mean I have security/privacy? [duplicate]

Is my information secure over public WiFi if I use a VPN service? i.e. protection of emails and login details.
2
votes
2answers
118 views

How would an attacker know the Gateway IP's of 2 VPN endpoints?

My office has two Sonicwall Routers each at a different physical location and with two different ISPs. There is an SSL-VPN tunnel between the two. Today I noticed that the same Chinese IP address ...
2
votes
3answers
208 views

Is there any point to connecting to a VPN server while on the local network?

I plan on installing a VPN server on one of my computers that is running Ubuntu for purposes of connecting to my local network while I am not at home. At home I also have a desktop computer (separate ...
2
votes
1answer
537 views

PFS incentive during IKE Phase 2

I'm trying to see the actual point in implementing Perfect Forward Secrecy during Internet Key Exchange Phase 2, if it had already been used during Phase 1. Quoting the IKEv2 RFC: RFC 5596 3.3....
2
votes
2answers
2k views

How does VPN (IPSec) work?

Let's assume both, my VPN client and VPN gateway has public and private keys. I encrypt my request with VPN gateway's public key. VPN gateway gets the request, decrypts it with private key. Then, VPN ...