[tech] flying and pptp

Grahame Bowland grahame at azale.net
Sun Aug 11 03:30:11 WST 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 10 Aug 2002 07:05 pm, Bernard Blackham wrote:
> On Thu, Aug 08, 2002 at 01:21:44AM +0800, Grahame Bowland wrote:
> > How're you planning to get to flying from SNAP? You won't be able
> > to see anything except 130.95.11.0/24, and flying isn't on that
> > network.. or are you planning to run a tunnel over the PPTP
> > tunnel? That would seem redundant.
>
> The SNAP VPN server is accessible from the 130.95.13.64/26 network
> that the UCC user machines are on, and I've got a feeling it's
> accessible from anywhere. It was simply NAT that was causing the
> issues with the GRE PPTP tunnel.
>
> Flying is now handing out real IPs in 130.95.13.240/28 and SNAP
> works perfectly over wireless. As does streaming raw CD audio :)

Ok, I'd misunderstood. I was thinking that you were going to use the SNAP 
access points in the Guild area, and connect people from those into UCC. If 
you're just connecting to the SNAP VPN server then yes, it's easy and 
possible from anywhere.

Is there any authentication or user tracking when you hand out these real 
world IPs? There are several problems with handing out real UWA IPs without 
any way of authenticating:
  - it violates UCS security policy
  - someone might cause a nuisance from it and UCC would get blamed
  - someone might send traffic in such a way as to cause a huge bill

Or is this some scheme to have a UCC VPN server handing out UCC IP addresses 
once they have authenticated?

Cheers,
Grahame

- -- 
Grahame Bowland - <grahame at azale.net>
'All programmers are playwrights and all computers are lousy actors'
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE9VWnJN7eIygKWKbARAlxLAKCJNLajC4Vtm/+JXRDulWLFzwkVLQCfZ5mo
SkUHuFVorDmiWqlQcUPCJ5k=
=h1v7
-----END PGP SIGNATURE-----




More information about the tech mailing list