<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content=text/html;charset=ISO-8859-1>
<META content="MSHTML 6.00.2900.5659" name=GENERATOR></HEAD>
<BODY text=#000000 bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=531365915-25112008><FONT face="Courier New"
color=#0000ff size=2>Sorry for the late jump in here, hence the top post
(missing earlier posts).</FONT></SPAN></DIV>
<DIV><FONT face="Courier New" color=#0000ff size=2></FONT> </DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2>I have a working setup as you described with out the reboot problem.
There is one difference, we are using VMWare (free version).</FONT></SPAN></DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2>It even authenticates against the domain controller for vpn
sessions.</FONT></SPAN></DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2>I would be happy to help find the differences in your setup, or help you
"copy" ours.</FONT></SPAN></DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=531365915-25112008><FONT face="Courier New" color=#0000ff
size=2>-Jason </FONT></SPAN></DIV>
<DIV><FONT face="Courier New" color=#0000ff size=2></FONT> </DIV><FONT
face="Courier New" color=#0000ff size=2></FONT><FONT face="Courier New"
color=#0000ff size=2></FONT><BR>
<BLOCKQUOTE dir=ltr
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> centos-bounces@centos.org
[mailto:centos-bounces@centos.org] <B>On Behalf Of </B>"Germán Andrés Pulido
F."<BR><B>Sent:</B> Monday, November 24, 2008 11:31 PM<BR><B>To:</B> CentOS
mailing list<BR><B>Subject:</B> Re: [CentOS] PPTP VPN
server<BR></FONT><BR></DIV>
<DIV></DIV>Thanks everyone for your help. I still cannot guess what the
problem is with the rebooting of the server, but I'm currently reading about
openvpn, it seems to be the best solution for my
issue.<BR><BR>Regards.<BR><BR>Filipe Brandenburger wrote:
<BLOCKQUOTE
cite=mid:e814db780811241038n482ec692wef50c63b01669a14@mail.gmail.com
type="cite">Hi,<BR><BR>On Mon, Nov 24, 2008 at 12:56, Les Mikesell <<A
href="mailto:lesmikesell@gmail.com"
moz-do-not-send="true">lesmikesell@gmail.com</A>> wrote:<BR>>
Microsoft has updated PPTP since the only paper I know about was
written.<BR>> Does anyone know if there are still problems with it or if
the linux<BR>> version is updated to match?<BR><BR>>From <A
href="http://pptpclient.sourceforge.net/protocol-security.phtml"
moz-do-not-send="true">http://pptpclient.sourceforge.net/protocol-security.phtml</A>:<BR><BR>"PPTP
on Linux, and Microsoft's PPTP, both implement fixes for vulnerabilities
that were detected years ago in Microsoft's PPTP. <B>But there remain the
design vulnerabilities that cannot be fixed without changing the design.</B>
The changes needed would break interoperability. We can't change the Linux
PPTP design, because it would stop working with Microsoft PPTP. They can't
change their design, because it would stop working with all the other
components out there, such as Nortel and Cisco, embedded routers, ADSL
modems and their own Windows installed base."<BR><BR>And POPTOP (<A
href="http://poptop.sourceforge.net/dox/qna.html#12"
moz-do-not-send="true">http://poptop.sourceforge.net/dox/qna.html#12</A>):<BR><BR>In
conclusion: <B>Poptop suffers the same security vulnerabilities as the NT
sever</B> (this is because it operates with Windows clients).<BR>Update:
MSCHAPv2 has been released and addresses <B>some</B> of the security issues.
Poptop works with MSCHAPv2, which is implemented in pppd. <BR><BR>Wikipedia
(<A href="http://en.wikipedia.org/wiki/PPTP"
moz-do-not-send="true">http://en.wikipedia.org/wiki/PPTP</A>):<BR><BR>PPTP
has been made obsolete by Layer 2 Tunneling Protocol (L2TP) and
IPSec.<BR><BR><BR>>From these sources, I can't tell for sure if the
protocol has vulnerabilities by design or not, but in any case it seems to
be agreement that other VPN protocols such as IPSec are much more secure and
reliable than PPTP. I would not recommend starting a VPN implementation
using PPTP.<BR><BR>L2TP/IPSec seems to be the best alternative regarding
client support (built-in support on Windows XP, Mac and the iPhone), only it
is very hard to implement on a Linux server, and there are issues with NAT
traversal. OpenVPN is easy to implement and seems to work very well with
NAT, but clients must be downloaded and installed for most platforms, and
are not available, for instance, for the
iPhone.<BR><BR>HTH,<BR>Filipe<BR><BR><PRE wrap=""><HR width="90%" SIZE=4>
_______________________________________________
CentOS mailing list
<A class=moz-txt-link-abbreviated href="mailto:CentOS@centos.org">CentOS@centos.org</A>
<A class=moz-txt-link-freetext href="http://lists.centos.org/mailman/listinfo/centos">http://lists.centos.org/mailman/listinfo/centos</A>
</PRE></BLOCKQUOTE><BR><BR><PRE class=moz-signature cols="72">--
Cordialmente,
GERMAN ANDRES PULIDO F.
Ingeniero de Proyectos
GLOBAL TECHNOLOGY SERVICES - GTS S.A.
-------------------------------------
Tel: (571) 658 34 10 ext 110
Carrera 7b No. 123-46
Bogotá-Colombia
Sitio Web: <A class=moz-txt-link-abbreviated href="http://www.gtscolombia.com">www.gtscolombia.com
</A><SPAN class=531365915-25112008><FONT color=#0000ff size=2> </FONT></SPAN></PRE><PRE class=moz-signature cols="72"><SPAN class=531365915-25112008></SPAN> </PRE></BLOCKQUOTE><PRE class=moz-signature dir=ltr cols="72"><SPAN class=531365915-25112008><P align=left><FONT face="Courier New" size=2>--<BR>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<BR>- -<BR>- Jason Pyeron PD Inc. </FONT><A href="http://www.pdinc.us/"><FONT face="Courier New" size=2>http://www.pdinc.us</FONT></A><FONT face="Courier New" size=2> -<BR>- Principal Consultant 10 West 24th Street #100 -<BR>- +1 (443) 269-1555 x333 Baltimore, Maryland 21218 -<BR>- -<BR>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-<BR><BR>This message is for the designated recipient only and may contain<BR>privileged, proprietary, or otherwise private information. If you<BR>have received it in error, purge the message from your system and<BR>notify the sender immediately. Any other use of the email by you<BR>is prohibited. </FONT></P> </SPAN></PRE></BODY></HTML>