Re: PPTPD security



On Mon, 2012-04-02 at 14:53 +0200, Luc MAIGNAN wrote:

I've seutp a PPTPD daemon to let an external iPad access to my network
via a tunnel.

All seem to work fine.

But I wonder if it is enough secure ?

http://www.schneier.com/pptp.html

As usual, the answer to "is this secure enough" is "it depends on how
valuable whatever you are protecting is". PPTP is riddled with design
flaws. None of those attacks are trivial, but a skilled attacker can
probably break just about any PPTP installation. That is why use of PPTP
is banned at my workplace.

--Greg


--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org


Relevant Pages

  • Re: IPSec VPN into XP Pro
    ... SSH generally is used for setting up a secure shell. ... How is PPTP not secure, ... communications between the computer is encapsulated in the tunnel.. ...
    (microsoft.public.windowsxp.work_remotely)
  • Telnet over VPN
    ... We have a small sub office in Connecticut which is connected to our ... LAN in the UK using business DSL down a secure VPN tunnel. ... The only other traffic going down the tunnel is Outlook to Exchange ...
    (comp.os.vms)
  • Re: VPN server security
    ... You have to protocols to choose between, PPTP or L2TP/IpSec. ... is the most secure as it does 2 way computer validation as well as ... clients and you VPN server will be directly attached to the Internet ... is quite secure also. ...
    (microsoft.public.win2000.security)
  • Re: [Full-disclosure] HTTP AUTH BASIC monowall.
    ... authentication that is secure even if the SSL pipe is compromised. ... Either your secondary tunnel corrects the issues with the initial tunnel ...
    (Full-Disclosure)
  • Re: [Full-disclosure] HTTP AUTH BASIC monowall.
    ... authentication that is secure even if the SSL pipe is compromised. ... Either your secondary tunnel corrects the issues with the initial tunnel ...
    (Full-Disclosure)