Building And Integrating Virtual Private Networks With Openswan (2006).pdf

Building and Integrating Virtual

Private Networks with

Openswan

Learn from the developers of Openswan how to build

industry-standard, military-grade VPNs and connect

them with Windows, Mac OS X, and other VPN vendors

Paul Wouters

Ken Bantoft

BIRMINGHAM - MUMBAI

Building and Integrating Virtual Private Networks with

Openswan

transmitted in any form or by any means, without the prior written permission of the publisher,

except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the

information presented. However, the information contained in this book is sold without warranty,

either express or implied. Neither the authors, Packt Publishing, nor its dealers or distributors will

be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all the companies and

products mentioned in this book by the appropriate use of capitals. However, Packt Publishing

cannot guarantee the accuracy of this information.

First published: February 2006

Production Reference: 1010206

Published by Packt Publishing Ltd.

32 Lincoln Road

Olton

Birmingham, B27 6PA, UK.

ISBN 1-904811-25-6

www.packtpub.com

Cover Design by www.visionwt.com

Credits

Authors

Paul Wouters

Ken Bantoft

Reviewers

Michael Stelluti

Tuomo Soini

Nate Carlson

James Eaton-Lee

Technical Editor

Richard Deeson

Editorial Manager

Dipali Chittar

Development Editor

Louay Fatoohi

Indexer

Abhishek Shirodkar

Proofreader

Chris Smith

Production Coordinator

Manjiri Nadkarni

Cover Designer

Helen Wood

About the Authors

Paul Wouters has been involved with Linux networking and security since he co-founded the

Dutch ISP Xtended Internet back in 1996, where he started working with FreeS/WAN IPsec in

1999 and with DNSSEC for the .nl domain in 2001.

He has been writing since 1997, when his first article about network security was published in

Linux Journal in 1997. Since then, he has written mostly for the Dutch spin-off of the German c't

magazine, focusing on Linux, networking, and the impact of the digital world on society.

He has presented papers at SANS, OSA, CCC, HAL, BlackHat, and Defcon, and several other

smaller conferences.

He started working for Xelerance in 2003, focusing on IPsec, DNSSEC, Radius, and training delivery.

Over a year ago, we wrote a proposal for an Openswan book. Without knowing about this

proposal, Louay Fatoohi of Packt Publishing asked us if we were interested in publishing

just such a book. We are very happy with the result of that collaboration.

We would like to thank everyone who is or has been part of the Linux IPsec and Openswan

communities, without whom neither Openswan nor this book would have been possible.

Many thanks to John Gilmore for founding the FreeS/WAN Project, and to XS4ALL for

hosting it. Many people contributed to FreeS/WAN, but we would like to especially thank

Hugh Daniel, Michael Richardson, Hugh Redelmeier, and Richard Guy Briggs.

The FreeS/WAN and Openswan community contributed some important features. Thanks

to Andreas Steffen of StrongSec for the X.509 patches, JuanJo Ciarlante for the original

ALG patches that included AES, Mattieu Lafon of Arkoon Systems for the NAT-Traversal

patches, and Hendrik Nordstrom of MARA Systems for the Aggressive Mode patches.

Further thanks are due to Rene Mayrhofer of Debian and Robert-Jan Cornelissen of

Xtended Internet as early adopters of Openswan. Xtended Internet also graciously hosted

the Openswan servers for two years.

We are especially grateful to Herbert Xu for his tremendous work on integrating Openswan

with the Linux 2.6 NETKEY stack, and Michael Richardson for maintaining and

enhancing tcpdump .

Thanks also to Jacco de Leeuw for his excellent work on documenting L2TP, and Nate

Carlson for his elaborate X.509 configuration guide. They have invested a large amount of

time in helping the community with Openswan configuration.

Everyone knows how important a cute logo is, but the logo that Nana Manojlovic

spontaneously gave us surpasses even the penguin. Thank you Nana!

Plik z chomika:

Inne pliki z tego folderu:

Inne foldery tego chomika: