Alternative to OpenVPN

Tuono63 · 13. August 2014

Hi,

i'am running my OMV with the openvpn Plugin and it works well. Now i need connections for 5 clients and this costs money (2 free clients). The price of the additional clients is increased (1. Aug) to nearly $10.00 (before $5.00) and a minimum purchase of 10 clients for one year. It's to much... (i know its worth!)

I'am searching for a free vpn solution which is running with OMV. Found this: http://www.howtogeek.com/51237…pn-pptp-server-on-debian/ looks interesting.

What is the best solution to running a free vpn server (no limit of clients) on OMV?

Thanks in advance.

ryecoaaron · 13. August 2014

As far as I know, the openmediavault-openvpnas plugin has the limit. The openmediavault-openvpn plugin does not have the limit. Which one are you using?

deejc · 13. August 2014

i believe PPTP is broken..
this is from wikipedia
http://en.wikipedia.org/wiki/P…-Point_Tunneling_Protocol

Zitat

Security
PPTP has been the subject of many security analyses and serious security vulnerabilities have been found in the protocol. The known vulnerabilities relate to the underlying PPP authentication protocols used, the design of the MPPE protocol as well as the integration between MPPE and PPP authentication for session key establishment.[8][9]

A summary of these vulnerabilities is below:

MS-CHAP-v1 is fundamentally unsecured. Tools exist to trivially extract the NT Password hashes from a captured MSCHAP-v1 exchange.[10]
When using MSCHAP-v1, MPPE uses the same RC4 session key for encryption in both directions of the communication flow. This can be cryptanalysed with standard methods by XORing the streams from each direction together.[11]

MS-CHAP-v2 is vulnerable to dictionary attack on the captured challenge response packets. Tools exist to perform this process rapidly.[12]
In 2012, it was shown that brute-force attack on MSCHAP-v2 is equivalent to single DES key brute-force attack. Online service was presented, which is capable to restore MSCHAP-v2 passphrase's MD4 in 23 hours.[13][14]

MPPE uses RC4 stream cipher for encryption. There is no method for authentication of the ciphertext stream and therefore the ciphertext is vulnerable to a bit-flipping attack. An attacker could modify the stream in transit and adjust single bits to change the output stream without possibility of detection. These bit flips may be detected by the protocols themselves through checksums or other means.[10]

Alles anzeigen

tekkb · 13. August 2014

I wouldn't use PPTP.

On OpenVPN Access Server:
Those are 2 concurrent clients. Do you need more then 2 people connecting at the same time?? You can have 5 people connecting but not at once. Only 2 people can be connecting at the same time.

davidh2k · 13. August 2014

Just use the OpenVPN Plugin instead of the OpenVPNAS Plugin if you need more than 2 concurrent connections. Just needs a bit more to setup... using PPTP instead is just wrong, and broken too.

Greetings
David

Tuono63 · 14. August 2014

Zitat von ryecoaaron

As far as I know, the openmediavault-openvpnas plugin has the limit. The openmediavault-openvpn plugin does not have the limit. Which one are you using?

I'am using the openvpnnas plugin 1.0.3 Where can i get the openvpn plugin? I cant find it in the plugin directory...

Zitat

Those are 2 concurrent clients. Do you need more then 2 people connecting at the same time?? You can have 5 people connecting but not at once. Only 2 people can be connecting at the same time.

Yes, i know but this is the problem. Sometimes more than 2 clients are connecting the OMV via vpn. In the worse case i have 5 clients connected at the same time.

Zitat

Just use the OpenVPN Plugin instead of the OpenVPNAS Plugin if you need more than 2 concurrent connections. Just needs a bit more to setup... using PPTP instead is just wrong, and broken too.

I will try to install the openvpn plugin. Where is a download for this?

Thanks to all!

WastlJ · 14. August 2014

Zitat von Tuono63

I will try to install the openvpn plugin. Where is a download for this?

You only have to enable the "VPN Repository" in your OMV-Extras.org >> Secondary Tab. And then you can find the plugin in your plugin list.

Tuono63 · 14. August 2014

Thanks but this is what did. I'am working with this plugin already.

This is the openvpnnas but the guys talking about the openvpn...i'am a bit confused ?!?

davidh2k · 14. August 2014

Both OpenVPNAS and OpenVPN are in that repo.

Try to install via CLI:

apt-get install openmediavault-openvpn

Greetings
David

ryecoaaron · 14. August 2014

I forgot that the openvpn plugin is only in the kralizec-vpn repo.

davidh2k · 14. August 2014

But according to his Screenshot he is using Kralizec?!

Greetings
David

ryecoaaron · 14. August 2014

How can you tell? openmediavault-openvpnas-1.0.3 works on sardaukar as well. If the vpn repo is enabled, the openvpn plugin should show up (if running kralizec).

davidh2k · 14. August 2014

Okay... I thought I clould trust that if its 1.0 for AS, its 1.0 for normal too.

My mistake.

Greetings
David

Tuono63 · 15. August 2014

So, for me that means the openvpn is running with kralizec only?

Or is there a chance to install openvpn under sardaukar? I would not install openvpn if i'm not sure the plugin is running correctly.

The limitation of 2 clients (connection at the same time) is quit important and a problem for me. It's a "must" for this system to have more clients (very small company).

Greetings

P.S. Running with OMV 0.5.53 (Sardaukar)

ryecoaaron · 15. August 2014

I would say wait until Kralizec is released and upgrade to it. Then you can use the openvpn plugin.

Tuono63 · 16. August 2014

Ok, i will do this...probably the best solution

Is already known when Kralicek is released...near future?

Thanks for any help!

Greetings

davidh2k · 16. August 2014

We have a specific date but it has yet to be announced.

Greetings
David

Jetzt mitmachen!