Feature Requests

So, I have had a few users with Chrombooks ask.  And today there was the tearful goodbye on the mailing list...

So I was wondering if anyone was looking at OpenVPN or L2TP over IPsec right now?  I am willing to help, but it has been a while since I was really deep in the code, and I do not want to duplicate effort.

Hi Lee,  I was looking at l2tp/ipsec, it's definately possible, but will need a bunch of patches  like

http://www.freebsd.org/cgi/query-pr.cgi?pr=146190

AND

http://lists.freebsd.org/pipermail/freebsd-net/2012-September/033170.html

AND  probably more

also if m0n0wall is behind NAT I suspect it will need new patches too.

Alternatively, if you want to just use xauth and not l2tp for user auth, this would be easier, but wouldn't cover windows clients natively and would require patching of mpd to use a file for auth

PPTP is the best solution but due to the weakness in cracking auth with sniffed sessions, is too weak.  it may be worth mitigating this weakness using one time passwords like google authenticator

Note that Chromebook ONLY supports OpenVPN or L2TP over IPsec.  There is no other option without rooting it.  And the covering of Windows and Mac clients is a feature that can not be overlooked.

now that PPTP became a nogo, L2TP over IPSec is the only option which is supported by Windows and OS X out of the box. for me, it's crucial that there's no need to install additional VPN client software on the roadwarrior's PC/Mac. I only found one firewall (available for free) that can do this: Sophos UTM. I got the VPN up and running within minutes. I read that it's possible with pfSense, too. but I never got it to work... I love m0n0wall and would like to see L2TP over IPSec running on it!

regards,
michael

I have lot of the work done to support ipsec/l2tp , there are a lot of patches required for freebsd, particularly around NAT support with ipsec.

Unfortunately I am not getting as much time as I would like to work on it, but hopefully I will have something soon !

I have been moving (after 6 years in this place) and have had no free time, but in a couple weeks I will have more time available to help.

I'd love to see OpenVPN support

Any news on this on a possible ETA on this?

Would love to see it!!!