Linux and VPN

[Richie1972]

We're currently looking into reducing our reliance on our LEA provider and are going to be setting up Ubuntu Linux with Shorewall, Dans Guardian and Censornet to provide filtered web access via our own broadband.

At the moment we have ISA 2004, which provides VPN access from home via Remote Desktop into our network.

Is there any Linux VPN software that can provide similar, or is it just a case of opening the appropriate port(s)? Will it also enable Active Directory authorization for staff logging in via VPN?

[CyberNerd]

Openswan is probably what you need. Also consider Smoothwall (schoolguardian - commercial) which does all the proxy/dansguardian stuff, it also has a has a VPN module.

[Richie1972]

We're not looking to spend much at the moment, so we're not going down the road of Smoothwall, etc (might change in the future, though).

Openswan? not heard of it... off to google i go.....

[Geoff]

http://www.ipsec-howto.org/

[CyberNerd]

I just re-read you post - sounds like the ISA is only port forwarding your rdp connection ? not a true VPN (i'm not experienced with ISA). In which case you can just have the firewall port forward 3389 to the RDP server.

[Geoff]

yep, if you just want port forwarding then shorewall is sufficient.

[Richie1972]

With our current ISA server setup, I'm able to use RDP to connect to any computer in the school, would Shorewall still permit me to do this?

[Geoff]

If you use port fowarding you can only forward the ports to one host. So no.

 

If you use Openswan and a VPN connection then you will be able to connect to any host.

[Richie1972]

Openswan sounds like the way to go then.

Thanks

[ranj]

We use openVPN and it works well in our school.