New answers tagged vpn
5
Let's clear up some confusion here first. Internet Key Exchange (IKE) is a hybrid protocol, it consists of 3 "protocols"
ISAKMP: It's not a key exchange protocol per se, it's a framework on which key exchange protocols operate.
Oakley: Describes the "modes" of key exchange (e.g. perfect
forward secrecy for keys, identity protection, and authentication)
...
1
IKE is a superset of ISAKMP, Oakley protocol and SKEME.
ISAKMP (protocol to establish a framework for authentication and key exchange)
Oakley (describes a series of key exchanges and services)
SKEME (key exchange technique that provides anonymity, repudiability,and key refreshment).
The RFC you have referred to states that ISAKMP is an IPSEC protocol and ...
2
This is an answer from Craig Constatine from network engineering for a similar question:
ISAKMP is part of IKE. (IKE has ISAKMP, SKEME and OAKLEY). IKE
establishs the shared security policy and authenticated keys. ISAKMP
is the protocol that specifies the mechanics of the key exchange. The
confusion, (for me,) is that in the Cisco IOS ISAKMP/IKE ...
-1
A possible solution must be direct uplink/downlink satellite connection to bypass this kind of restrictions. You have some satellites who have footprint in your area.
3
It's hard to tell for sure what they are doing, but they may be doing something as simple as cutting off any connection they don't understand that is leaving the country. If that's the case, then you would basically be out of luck.
If they are doing something more elaborate, it unfortunately wouldn't be possible to know what they are doing without a fair ...
2
I agree with TildalWave and Tracy Reed. This is almost certainly a caching proxy or an indexer of some sort being run either by your VPN provider, their upstream connectivity provider, or the server hosting provider.
It's not NSA/TLA "snooping" for the following reasons:
The NSA would just sniff the packets over the wire
The NSA would force your VPN ...
1
Web proxy. Maybe your VPN provider is caching. Try this test without the VPN. Is the server on your localhost? Try connecting to 127.0.0.1 to get the file. See which of these steps causes the shadow behavior to stop. That will help you deduce where the proxy/stalker is. :)
2
Even if Kerio makes products that are secure, you cannot be sure that the product you would buy is the genuine product from Kerio and not one where the seller has added a backdoor.
Furthermore, even if you do find a reliable product, the fact that you are using that product can still be detected. At a minimum, your Internet service provider can see that ...
3
In a simple answer, yes. If the reseller has a local installation of the server you are connecting to then it is possible that they can sniff the network traffic using Snort or Wireshark and extract your data. Additionally, there may be logging installed on the servers that the reseller may be able to view and see what you are doing.
However, if you are ...
4
The Onion Router (tor) was designed specifically for this purpose.
This is a program that you run locally that provides a socks proxy, which allows you to access an unfiltered, and anonymous connection to the open internet. It is very difficult for governments to prevent you from accessing tor.
1
You already mentioned that the AH header precedes the ESP header when applying both. Consequently the ESP header doesn't have any effect on the AH header. But the AH header can be used to protect the IP header when using transport mode and to protect the ESP header for both modes. But this is not very common and requires an additional Security Association ...
Top 50 recent answers are included
