Re: anyone using openvpn?

WG looks nice, but it can not deal with smart cards (yet, I hope it will be added).
Also it lacks encapsulation; essential for punching restrictive firewalls.

Excuses for auto-typo’s

On 4 Jun 2019, at 02:49, Jack Craig <[e-mail]> wrote:

is there a sdk contact for stuff like this?  fyi, fedora 28

CC      /home/jackc/src/WireGuard/src/tools/terminal.o
  CC      /home/jackc/src/WireGuard/src/tools/ipc.o
ipc.c:7:10: fatal error: libmnl/libmnl.h: No such file or directory
 #include <libmnl/libmnl.h>
          ^~~~~~~~~~~~~~~~~
compilation terminated.

On Mon, Jun 3, 2019 at 5:39 PM Jack Craig <[e-mail]> wrote:
WOW! web page blowing e away!!! THANKS AGAIN!!!

On Mon, Jun 3, 2019 at 1:11 PM John Pilkington <[e-mail]> wrote:
On 03/06/2019 20:40, Jack Craig wrote:
> i was unaware, i'll check it out, Thx!!

Pushed to the testing repos today at rpmfusion
> On Mon, Jun 3, 2019 at 12:36 PM Bruno Wolff III <[e-mail]
> <mailto:[e-mail]>> wrote:
> On Mon, Jun 03, 2019 at 11:10:36 -0700,
>    Jack Craig <[e-mail]<mailto:[e-mail]>
> <mailto:[e-mail]<mailto:[e-mail]>>> wrote:
>  >
>  >given the problems i surmounted getting this far makes me wonder
> it openvpn
>  >is really up to the task.
>
> Have you looked at wireguard? It's not upstream yet, but the primary
> author
> updates it for development kernels, so it's usually working for rc1.
> The
> kernel module builds very easily on Fedora.
>
> The config is pretty simple. End points are mutually authenticated. One
> end can be roaming or behind nat and things will just work. It
> creates a
> normal network device the you can use ip to manipulate.
>
> I use it to give my laptops fixed ip addresses by routing through my
> home
> network, no matter where they are connected.
>
>
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]

_______________________________________________
users mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]
_______________________________________________
users mailing list -- [e-mail]
To unsubscribe send an email to [e-mail]
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]

Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

anyone using openvpn?

[Jack Craig]

certainly an interesting product.

On Mon, Jun 3, 2019 at 7:33 PM  wrote:
> WG looks nice, but it can not deal with smart cards (yet, I hope it will
> be added).
> Also it lacks encapsulation; essential for punching restrictive firewalls.
>
> Excuses for auto-typo’s
>
> On 4 Jun 2019, at 02:49, Jack Craig  wrote:
>
> is there a sdk contact for stuff like this?  fyi, fedora 28
>
> CC      /home/jackc/src/WireGuard/src/tools/terminal.o
>   CC      /home/jackc/src/WireGuard/src/tools/ipc.o
> *ipc.c:7:10: fatal error: libmnl/libmnl.h: No such file or directory*
>  #include <libmnl/libmnl.h>
>           ^~~~~~~~~~~~~~~~~
> compilation terminated.
>
> On Mon, Jun 3, 2019 at 5:39 PM Jack Craig 
> wrote:
> > WOW! web page blowing e away!!! *THANKS AGAIN!!!*
> >
> > On Mon, Jun 3, 2019 at 1:11 PM John Pilkington 
> > wrote:
> > > On 03/06/2019 20:40, Jack Craig wrote:
> > > > i was unaware, i'll check it out, Thx!!
> > >
> > > Pushed to the testing repos today at rpmfusion
> > > > On Mon, Jun 3, 2019 at 12:36 PM Bruno Wolff III <[e-mail]
> > > > > wrote:
> > > > On Mon, Jun 03, 2019 at 11:10:36 -0700,
> > > >    Jack Craig <[e-mail]
> > > > <mailto:[e-mail]>> wrote:
> > > >  >
> > > >  >given the problems i surmounted getting this far makes me wonder
> > > > it openvpn
> > > >  >is really up to the task.
> > > >
> > > > Have you looked at wireguard? It's not upstream yet, but the
> > >
> > > primary
> > > > author
> > > > updates it for development kernels, so it's usually working for
> > >
> > > rc1.
> > > > The
> > > > kernel module builds very easily on Fedora.
> > > >
> > > > The config is pretty simple. End points are mutually
> > >
> > > authenticated. One
> > > > end can be roaming or behind nat and things will just work. It
> > > > creates a
> > > > normal network device the you can use ip to manipulate.
> > > >
> > > > I use it to give my laptops fixed ip addresses by routing through
> > >
> > > my
> > > > home
> > > > network, no matter where they are connected.
> > > >
> > > >
> > > > users mailing list -- [e-mail]
> > > > To unsubscribe send an email to [e-mail]
> > > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > > List Guidelines:
> > >
> > > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > > List Archives:
> > >
> > > https://lists.fedoraproject.org/archives/list/[e-mail]
> > > >
> > >
> > > users mailing list -- [e-mail]
> > > To unsubscribe send an email to [e-mail]
> > > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > > List Archives:
> > > https://lists.fedoraproject.org/archives/list/[e-mail]
>
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]
>
> Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u
> niet de geadresseerde bent of dit bericht abusievelijk aan u is
> toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht
> te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van
> welke aard ook, die verband houdt met risico's verbonden aan het
> elektronisch verzenden van berichten.
>
> This message may contain information that is not intended for you. If you
> are not the addressee or if this message was sent to you by mistake, you
> are requested to inform the sender and delete the message. The State
> accepts no liability for damage of any kind resulting from the risks
> inherent in the electronic transmission of messages.
> _______________________________________________
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]

anyone using openvpn?

[Bruno Wolff III]

On Tue, Jun 04, 2019 at 02:31:38 +0000,
  [e-mail] wrote:
> Also it lacks encapsulation; essential for punching restrictive firewalls.

That doesn't need to be built in to the encrytion tunnel and is probably 
best to use a seperate tunnel to make your traffic look like https, http, 
dns or whatever.

anyone using openvpn?

[Jack Craig]

my goal in pursuing openvpn was to learn about VPNs and how they work.

openvpn was perfect for that. however, as a fine gentleman pointed me at
wireguard, so openvpn uninstall!

it's the only sane, opensource option...

thx again to all that replied, jackc...

On Mon, Jun 3, 2019 at 11:05 PM Bruno Wolff III  wrote:
> On Tue, Jun 04, 2019 at 02:31:38 +0000,
>   [e-mail] wrote:
> > Also it lacks encapsulation; essential for punching restrictive firewalls.
>
> That doesn't need to be built in to the encrytion tunnel and is probably
> best to use a seperate tunnel to make your traffic look like https, http,
> dns or whatever.
> _______________________________________________
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/[e-mail]