<< | Thread Index | >> ]    [ << | Date Index | >> ]

To: cipe-l,AT,inka,DOT,de, skraw,AT,ithnet,DOT,com, jou,AT,gmx,DOT,net, karl,AT,charcoal,DOT,com, les,AT,futuresou,DOT,rce,DOT,com, digium,AT,sanguinarius,DOT,co,DOT,uk
Subject: Re: Cipe configuration error
From: Roger Young <r.young,AT,irl,DOT,cri,DOT,nz>
Date: Thu, 4 Jan 2007 15:58:46 +1300
Cc: r.young,AT,irl,DOT,cri,DOT,nz, steegers,AT,steegers,DOT,nl
In-reply-to: <459C51BE.8020704@gmx.net>
References: <20070103183546.db162bc3.r.young@irl.cri.nz><yu0slese37c.fsf@mesquite.charcoal.com><20070103171528.ef823567.skraw@ithnet.com><459C51BE.8020704@gmx.net>

Thankyou for your replies and this discussion.
Relevant to this, I have also been in contact with
Hans Steegers who is the developer of cipex.
He has kindly supplied me with a patched version
of cipe (and cipex) which installs cleanly under 2.6.18.
So I no longer have a problem.
He has also indicated that he has patches for
2.6.19. The patched files are

cipex-1.6.0-0.70 (2.6.18)
cipe-1.60-StE-3  (2.6.18)
cipex-1.6.0-0.71 (2.6.19)
cipe-1.6.0.-StE-4 (2.6.19)

Regards,
Roger.

....................................................................................

On Thu, 04 Jan 2007 02:00:46 +0100
Joachim Otahal <jou,AT,gmx,DOT,net> wrote:

> Stephan von Krawczynski wrote:
> > Please Karl, stop that. If you like OpenVPN more please go and read/write
> > their mailing-list.
> >   
> auch besser die Finger von cipe lassen, hat Security Probelme by design, 
> (ab jetzt auf englisch:)
> 
> The Problem with cipe is that the developer themself gave up the project 
> since cipe has no real reason to continue, OpenVPN is more simple in 
> config, uses existing kernel modules (tun/tap modules), and the link is 
> more reliable. On top of that OpenVPN does not have "by design" 
> weaknesses like the cipe protocol has. OpenVPN uses some parts of 
> cipe-win for its Windows driver code stuff.
> Check http://openvpn.net/static.html the config is sooo simple, I just 
> suggest to add the line 'cipher AES-256-CBC'. Server and client side 
> linux/windows mix is no problem, even mac osx clients exist.
> 
> You are free to continue developing cipe to work with the latest 2.4 and 
> 2.6 kernels if you want to, cipe is somewhat dead since last code update 
> was January 2002 (see http://sites.inka.de/bigred/devel/cipe.html and  
> http://sourceforge.net/project/showfiles.php?group_id=66201 ).
> 
> The most common OpenVPN start problems are: forgotten tun/tap kernel 
> modules in kernel (no prob in debian and other newer distros, just 
> modprobe tun) and missing /dev/net/tun device. For the latter mkdir 
> /dev/net and mknod /dev/net/tun c 10 200 should be sufficient (needed 
> for the six years old RedHat Linux 7.1 as example).
> 
> IMHO Olaf Titz should give some big notes on the cipe homepage and the 
> sourceforge-dl page that cipe will not be continued by him, since this 
> mailing list ONLY wakes up due to allways the same reason, cipe in newer 
> kernels/distros.
> 
> kind regards,
> 
> Joachim Otahal
> 
> > Roger:
> > what does "uname -r" say?
> >
> > Regards,
> > Stephan
> >
> > --
> > Message sent by the cipe-l,AT,inka,DOT,de mailing list.
> > Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body
> > Other commands available with "help" in body to the same address.
> > CIPE info and list archive: 
> > <URL:http://sites.inka.de/~bigred/devel/cipe.html>
> >
> >
> >   
> 
> 
> --
> Message sent by the cipe-l,AT,inka,DOT,de mailing list.
> Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body
> Other commands available with "help" in body to the same address.
> CIPE info and list archive: 
> <URL:http://sites.inka.de/~bigred/devel/cipe.html>
> 
> This message has been scanned for viruses and dangerous content by 
> MailScanner, and is believed to be clean.
> 

-- 
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
Dr. Roger Young
Industrial Research Ltd             Telephone: 64-4-5690-247
Applied Mathematics                 Fax:       64-4-5690-003        
P O Box 31-310, Lower Hutt          Internet:  R.Young,AT,irl,DOT,cri,DOT,nz
New Zealand.                       
*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*

This message has been scanned for viruses and dangerous content by 
MailScanner, and is believed to be clean.


<< | Thread Index | >> ]    [ << | Date Index | >> ]