This tag is applied to questions related to various VPN types such as PPTP or IPSec.

learn more… | top users | synonyms

2
votes
2answers
66 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
2
votes
1answer
173 views

Does a VPN Provider Know My MAC Address?

I know MAC is a layer 2 address, so it's only sent to the next router in the chain. Does a VPN provider get that information when I'm connected to their service? Is their router considered the next ...
2
votes
2answers
308 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
2
votes
2answers
1k views

How to hide real IP from browsers while using VPN?

You probably know that even when you use a VPN service, browsers like Chrome and Safari can still somehow provide your real location to Google Maps etc (if you give it a permission). My question is: ...
2
votes
3answers
1k views

Filtering In Iran

Since many of you already know the Iranian government aggressively uses internet censorship to block sites such as facebook, flicker, bbc, etc. The Iranian people use various methods to bypass ...
2
votes
4answers
2k views

IPSec VPNs and symmetric keys

When dealing with IPSec based VPNs, I understand that there is a slight "problem" with symmetric key exchange. Obviously, you can't send the keys over the VPN, since they are used to guarantee the ...
2
votes
1answer
121 views

How do VPN services in the US choose to comply with foreign law enforcement requests? [closed]

Imagine a user from Russia uses a VPN-service which obeys US jurisdiction. This user did violate Russian legislation and the violation is being investigated by Russian law enforcement. Let's assume ...
2
votes
2answers
185 views

How secure is VPN addons for browsers [duplicate]

I regularly uses VPN addons like browsec, Zenmate etc in my browser. These addons/Plugin boast about hiding IPs, bypass firewalls, faster and encrypted services, tracking protection etc which they ...
2
votes
1answer
229 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
2
votes
2answers
199 views

Foolproof way to hide your IP when browsing [closed]

is there a fool proof-ish way to hide your IP from websites you visit? I heard even if you use VPN, there can be 'leaks'? And one step more secure is Anonymizer or Tor? Can they have 'leaks', too? ...
2
votes
2answers
284 views

Is using an free and anonymous VPN service safe? [closed]

There are VPN services that are totally free and high speed vpn which makes me think, how can they offer such a service for free without ads nor donations? Is using this VPN safe? Regarding my ...
2
votes
2answers
385 views

What can my university see by installing a CA root certificate on my computer, even when I'm using a VPN?

To use the wifi at my university, you must install a CA root certificate by them. In my case, I am using a Mac computer with a VPN installed. I'm curious, what can they see me do on my computer by ...
2
votes
2answers
3k views

Squid proxy and VPN software

I have some questions about squid proxies, we set a squid proxy server to block certain web sites for users. and some users only can access one website that related to our work.but after install some ...
2
votes
1answer
823 views

Openvpn in front of proxy? [closed]

I have been reading books on OpenVPN, and there is one thing I don't understand yet. What happens when a person connects to OpenVPN, and their web browser is set to a Socks5 or HTTP/HTTPS proxy and ...
2
votes
1answer
5k views

Risks of Microsoft Remote Desktop access behind a secure VPN

This is mostly for my own education, but a scenario has came up at work that has me skeptical. I'd like for the security experts to tell me if this policy is overbearing or not. I remote into a VPN ...
2
votes
2answers
741 views

Test Android Secure Encrypted Traffic

For testing android traffic encryption I have configured a VPN client in my phone. What simple test I can perform in my home wifi network to verify that the traffic is really encrypted and secure?
2
votes
3answers
565 views

What security protocols provide point-to-point confidentiality?

Am I right in thinking that VPN doesn't protect until you're out onto the external network (assuming you're connecting from within an internal network)? Or does VPN provide confidentiality from the ...
2
votes
3answers
131 views

What is this Polish IP doing on my internal WiFi?

Lately I've seen many strange events in the logs of my wifi router / cable modem. Many are linked to the IP address 83.0.68.240 from the ISP, Orange Polanska. Events like "DoS attack: Ping Of Death", "...
2
votes
1answer
103 views

Can in a VPN LAN-to-LAN one site be completely isolated from the other?

In a VPN LAN-to-LAN setting, is it possible to isolate one site from the other? I know that we can use a firewall but that would obligate us to manage specific rules in the firewall. I would like to ...
2
votes
2answers
165 views

Public AP: How to reduce vulnerability window between Captive Portal and starting VPN?

I always use a VPN on my Mac when I access over public APs (such as coffee shop free WiFi) How much should I worry about the window of time where I am in the captive portal (the agreement screen) and ...
2
votes
2answers
727 views

Using VPN in the UAE - safe or trackable?

I'm currently in the United Arab Emirates, and I am wondering if Etisalat or the UAE can track what I am doing if I use the ZenMate VPN addon to Chrome?
2
votes
1answer
264 views

Is it particularly unsafe to use openvpn or pptp with only username/password authentication instead of certificates?

I use a vpn server (supporting pptp and openvpn) built in to my router at home to make a secure connection back to my home network. I currently use OpenVPN with certificate authentication, but since ...
2
votes
2answers
216 views

How to protect iKvM, IPMI, KvM Interfaces from 0day and other exploits

In REF to http://threatpost.com/ipmi-protocol-bmc-vulnerabilities-expose-thousands-of-servers-to-attack and the hacks of several companies and web hosts have been hit and had their servers wiped from ...
2
votes
2answers
344 views

How can I protect myself from the VPN operator when using a VPN to gain free access to the Internet?

I live in a country that the government blocks most ways of accessing to the uncensored Internet (like blocking VPN pptp, l2tp), Luckily there are some very fast services still available like Kerio ...
2
votes
2answers
3k views

When connecting to internet through VPN what precautions should be taken?

I've read this similar question and it has some very good information. Can a site that has personal information about you be accessed by another site to determine who you are/where you are? For ...
2
votes
3answers
610 views

Are intermediate signing certs the only secure+practical way to manage OpenVPN client certs?

My organization needs to issue (and revoke) OpenVPN client certificates for people working remotely. Our system is based on a standard OpenSSL CA setup and the easy-rsa tools, and the whole directory ...
2
votes
2answers
1k views

Ordering of shared Phase 1/ISAKMP VPN policies

The various Phase 1 settings of a VPN tunnel policy are fairly well-established (encryption, hashing, DH group, lifetime), but in what order are they considered applicable to a more-secure tunnel? I ...
2
votes
1answer
995 views

Analyzing wireshark results (openvpn)

I signed up to Mullvad for VPN service, and manually run OpenVPN from my Linux box. I rebooted my computer and make sure not to start any OpenVPN service. Yet when I did a Wireshark analysis I am ...
2
votes
2answers
1k views

ISP role with VPN & VPS?

I have notice online that many people get a VPN so that ISP can not view the sites you visit, create a profile of you and so on. Reading How safe is it to connect to Internet through VPN?, Jonah ...
2
votes
1answer
6k views

Is there a difference between a VTI and a regular VPN tunneling process?

Is there a difference between a VTI (Virtual Tunnel Interface) and a regular VPN tunneling process? Or have I got the whole concept wrong?
2
votes
1answer
50 views

OpenVPN Client Id appearing in emails

I use OpenVPN to connect to a server. I just found that in a series of emails I sent and received to and from the same person the following line appeared after every message I sent: [cid:{a long ...
2
votes
2answers
342 views

Meterpreter session over VPN

I have the following situation: Attacker machine connected to a router with public IP assigned from ISP, forwarding enabled. Victim machine connected to another router, (obviously) different IP ...
2
votes
1answer
75 views

Properly solving IP leaking from WebRTC and other apps with STUN when using a VPN

This is really a follow-up question from this: Stun scripts/webRTC IP leaks I'm connecting to a VPN using a virtual adapter, which has a default routing rule so all traffic goes through it. I still ...
2
votes
1answer
598 views

Hide Docker Containers Behind VPN

I want to run all services within Docker containers (including RA and site-to-site VPN) such that all containers except the VPN are not exposed on the public IP, but are reachable on the VPN IP. This ...
2
votes
1answer
6k views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
2
votes
3answers
313 views

How do people know that IP adress belongs to VPN?

It seems that many servers know that I use VPN. They either block me completely or make me answer CAPTCHA etc. I want to use VPN but seems that many hosts don't want their customers to use VPN. How ...
2
votes
2answers
118 views

Would a VPN with changing configs do the same job as different VMs

I was reading this post: Can a website still detect my real MAC address even if I use different virtual machine each time I visit the website? So my question: Would using a VPN and swapping out ...
2
votes
1answer
186 views

Does having a VPN service mean accessing my email etc. over public free open WiFi mean I have security/privacy? [duplicate]

Is my information secure over public WiFi if I use a VPN service? i.e. protection of emails and login details.
2
votes
2answers
115 views

How would an attacker know the Gateway IP's of 2 VPN endpoints?

My office has two Sonicwall Routers each at a different physical location and with two different ISPs. There is an SSL-VPN tunnel between the two. Today I noticed that the same Chinese IP address ...
2
votes
3answers
199 views

Is there any point to connecting to a VPN server while on the local network?

I plan on installing a VPN server on one of my computers that is running Ubuntu for purposes of connecting to my local network while I am not at home. At home I also have a desktop computer (separate ...
2
votes
1answer
528 views

PFS incentive during IKE Phase 2

I'm trying to see the actual point in implementing Perfect Forward Secrecy during Internet Key Exchange Phase 2, if it had already been used during Phase 1. Quoting the IKEv2 RFC: RFC 5596 3.3....
2
votes
2answers
2k views

How does VPN (IPSec) work?

Let's assume both, my VPN client and VPN gateway has public and private keys. I encrypt my request with VPN gateway's public key. VPN gateway gets the request, decrypts it with private key. Then, VPN ...
2
votes
1answer
226 views

How does tunneling actually work?

I recently saw a question in which someone implied that tunneling could foil MITM even if it were implemented while an MITM was taking place. My understanding of tunneling is that it is only capable ...
2
votes
1answer
702 views

Is it necessary to use PEAP for L2TP/IPsec?

This is a sister question of Is EAP-MSCHAP v2 secure?. Based on my understanding, IPsec should have authenticated the server (we're using PKI) and secured the rest of the protocols before the user ...
2
votes
1answer
81 views

Remote network security option

I'm a bit confused with some different network security techniques. Say we want a secure communication with a particular mail server in a remote company network. Reading and sending mails should be ...
2
votes
1answer
91 views

VPN using SmartPhone Location

When you VPN using your smartphone as a hotspot, can the VPN tell your location like it can when you VPN over a wireless connection hotspot?
2
votes
1answer
5k views

Is it secure to install RSA SecurID Software Tokens on the same computer that will be used to access the VPN?

My office switched from using the old hardware RSA SecurID key tokens to the RSA SecurID Software Tokens and most users have them installed on the same machines they use to access the VPN. I asked ...
2
votes
2answers
954 views

Low level attacks on WLAN/LAN connection while connected to VPN

Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)? I know, that there have been questions like this - but I'm not asking ...
2
votes
0answers
29 views

What are the security risks of using public address schemes for the DHCP of your VPN'd Users?

At the company I work for we recently purchased a network scanning tool to help with asset inventory and overall PC network management. My supervisor, while looking at the different IP address ranges ...
2
votes
0answers
48 views

what are the advantages and disadvantages of using ipsec protocol, how vulnerable is it? [closed]

There are several ways through which the VPN can be applied, like SSL, TLS etc. But most of the VPN use IPSec. What kind vulnerabilities does ipsec possess?