[gentoo-user] [OT] A free VPN server

[gentoo-user] [OT] A free VPN server

[walt]

This company:

https://proxpn.com

sponsors my all-time-favorite podcast, which I heartily commend to you:

http://twit.tv/show/security-now
(the audio podcast is what I suggest, as the video adds very little)

Anyway, you can get a free account from proxpn.com by giving them a
working email address (no credit card or any other personal info).

Here is what I used to get it working on gentoo:

net-misc/networkmanager
net-misc/networkmanager-pptp

and I had to add these to my kernel config:

CONFIG_PPP
CONFIG_PPP_MPPE
CONFIG_PPP_ASYNC

The name of the server to give networkmanager is pptp.proxpn.com

I confess I have no idea how to do all of this without networkmanager,
but I'd like to hear from you networking nerds out there who know more
about this stuff than I do.

Re: [gentoo-user] [OT] A free VPN server

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1949 bytes --]

On Monday 27 May 2013 02:43:08 walt wrote:
> This company:
> 
> https://proxpn.com
> 
> sponsors my all-time-favorite podcast, which I heartily commend to you:
> 
> http://twit.tv/show/security-now
> (the audio podcast is what I suggest, as the video adds very little)
> 
> Anyway, you can get a free account from proxpn.com by giving them a
> working email address (no credit card or any other personal info).
> 
> Here is what I used to get it working on gentoo:
> 
> net-misc/networkmanager
> net-misc/networkmanager-pptp
> 
> and I had to add these to my kernel config:
> 
> CONFIG_PPP
> CONFIG_PPP_MPPE
> CONFIG_PPP_ASYNC
> 
> The name of the server to give networkmanager is pptp.proxpn.com
> 
> I confess I have no idea how to do all of this without networkmanager,
> but I'd like to hear from you networking nerds out there who know more
> about this stuff than I do.

Hi Walt,

PPPTP uses a rather weak proprietary RC4 based encryption for tunnels in 
old(er) MSWindows machines.  At least make sure that it uses 128bit key 
encryption, or better still drop this completely in favour of the OpenVPN 
method which uses SSL certificates.


PS. It would be better if these guys offered a more serious VPN 
implementation, like IPSec VPN (with either IKEv1 or IKEv2). If they won't, I  
would suggest you look for a provider that does.

PPS. I see they are peddling privacy from governments' snooping efforts which 
are fast being enshrined in law around the world, but can you really trust 
them?  What happens when the boys in black/blue knock on their door and ask to 
have access to their servers?  Heck, we all saw what happened with Kim Dotcom 
in New Zealand, when the US media complex decided he was taking too big a 
slice of their profits.  Hosting servers in a foreign jurisdiction offers no 
insurance, when money interests are more powerful than governments.

-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 490 bytes --]

[gentoo-user] Re: [OT] A free VPN server

[walt]

On 05/27/2013 02:36 AM, Mick wrote:
> On Monday 27 May 2013 02:43:08 walt wrote:
>> This company:
>>
>> https://proxpn.com
>>
>> sponsors my all-time-favorite podcast, which I heartily commend to you:
>>
>> http://twit.tv/show/security-now
>> (the audio podcast is what I suggest, as the video adds very little)
>>
>> Anyway, you can get a free account from proxpn.com by giving them a
>> working email address (no credit card or any other personal info).
>>
>> Here is what I used to get it working on gentoo:
>>
>> net-misc/networkmanager
>> net-misc/networkmanager-pptp
>>
>> and I had to add these to my kernel config:
>>
>> CONFIG_PPP
>> CONFIG_PPP_MPPE
>> CONFIG_PPP_ASYNC
>>
>> The name of the server to give networkmanager is pptp.proxpn.com
>>
>> I confess I have no idea how to do all of this without networkmanager,
>> but I'd like to hear from you networking nerds out there who know more
>> about this stuff than I do.
> 
> Hi Walt,
> 
> PPPTP uses a rather weak proprietary RC4 based encryption for tunnels in 
> old(er) MSWindows machines.  At least make sure that it uses 128bit key 
> encryption, or better still drop this completely in favour of the OpenVPN 
> method which uses SSL certificates.
> 
> PS. It would be better if these guys offered a more serious VPN 
> implementation, like IPSec VPN (with either IKEv1 or IKEv2). If they won't, I  
> would suggest you look for a provider that does.


They do offer openvpn, but only the windows version has it.  I've opened a
support ticket asking them if/how I can use openvpn instead.  I know it's
possible but not how to do it. Yet :)
 
Their windows vpn client is linked against openvpn and openssl, so I figure
linux support will be clarified eventually.

If everyone here would email them and offer to buy the pay version, but only
after the linux openvpn support is made official... ;)


> PPS. I see they are peddling privacy from governments' snooping efforts which 
> are fast being enshrined in law around the world, but can you really trust 
> them?  What happens when the boys in black/blue knock on their door and ask to 
> have access to their servers?  Heck, we all saw what happened with Kim Dotcom 
> in New Zealand, when the US media complex decided he was taking too big a 
> slice of their profits.  Hosting servers in a foreign jurisdiction offers no 
> insurance, when money interests are more powerful than governments.

I've always suspected that those boys in black/blue own every tor exit node
out there, why not every vpn solution too?
 

Re: [gentoo-user] Re: [OT] A free VPN server

[Timothy Millican]

[-- Attachment #1: Type: text/plain, Size: 3498 bytes --]

On Mon, May 27, 2013 at 3:40 PM, walt <w41ter@gmail.com> wrote:

> On 05/27/2013 02:36 AM, Mick wrote:
> > On Monday 27 May 2013 02:43:08 walt wrote:
> >> This company:
> >>
> >> https://proxpn.com
> >>
> >> sponsors my all-time-favorite podcast, which I heartily commend to you:
> >>
> >> http://twit.tv/show/security-now
> >> (the audio podcast is what I suggest, as the video adds very little)
> >>
> >> Anyway, you can get a free account from proxpn.com by giving them a
> >> working email address (no credit card or any other personal info).
> >>
> >> Here is what I used to get it working on gentoo:
> >>
> >> net-misc/networkmanager
> >> net-misc/networkmanager-pptp
> >>
> >> and I had to add these to my kernel config:
> >>
> >> CONFIG_PPP
> >> CONFIG_PPP_MPPE
> >> CONFIG_PPP_ASYNC
> >>
> >> The name of the server to give networkmanager is pptp.proxpn.com
> >>
> >> I confess I have no idea how to do all of this without networkmanager,
> >> but I'd like to hear from you networking nerds out there who know more
> >> about this stuff than I do.
> >
> > Hi Walt,
> >
> > PPPTP uses a rather weak proprietary RC4 based encryption for tunnels in
> > old(er) MSWindows machines.  At least make sure that it uses 128bit key
> > encryption, or better still drop this completely in favour of the OpenVPN
> > method which uses SSL certificates.
> >
> > PS. It would be better if these guys offered a more serious VPN
> > implementation, like IPSec VPN (with either IKEv1 or IKEv2). If they
> won't, I
> > would suggest you look for a provider that does.
>
>
> They do offer openvpn, but only the windows version has it.  I've opened a
> support ticket asking them if/how I can use openvpn instead.  I know it's
> possible but not how to do it. Yet :)
>
> Their windows vpn client is linked against openvpn and openssl, so I figure
> linux support will be clarified eventually.
>
> If everyone here would email them and offer to buy the pay version, but
> only
> after the linux openvpn support is made official... ;)
>
>
> > PPS. I see they are peddling privacy from governments' snooping efforts
> which
> > are fast being enshrined in law around the world, but can you really
> trust
> > them?  What happens when the boys in black/blue knock on their door and
> ask to
> > have access to their servers?  Heck, we all saw what happened with Kim
> Dotcom
> > in New Zealand, when the US media complex decided he was taking too big a
> > slice of their profits.  Hosting servers in a foreign jurisdiction
> offers no
> > insurance, when money interests are more powerful than governments.
>
> I've always suspected that those boys in black/blue own every tor exit node
> out there, why not every vpn solution too?
>
>
>
> Did the same thing: this was the response:
----
when you install proxpn there is a directory called config.. Generally you
can just copy that over the config directory in openvpn clients and then
hit connect..

Here are the openvpn server addresses.
Dallas: 107.6.100.3
NY: 173.231.141.114
NL: 213.179.208.141
UK: 78.157.207.131
LA: 64.27.29.67
Seattle: 216.18.231.179
Singapore: 223.27.170.51

When you are making your own custom config file, it should always have one
of those addresses, like

remote 107.6.100.3 443

we always use 443 as the default, but we have 80 and 8080 ports mirrored in
case there is some problem with 443

Best regards,
Team proXPN
----

I can make a copy of the files available, if any one needs them.

--
Timothy A. Millican
 +1 (603) 353-0110

[-- Attachment #2: Type: text/html, Size: 4890 bytes --]