{"id":60,"date":"2008-11-07T13:46:30","date_gmt":"2008-11-07T04:16:30","guid":{"rendered":"http:\/\/www.clearchain.com\/blog\/?p=60"},"modified":"2009-06-26T08:29:04","modified_gmt":"2009-06-25T22:59:04","slug":"freebsd-vpn","status":"publish","type":"post","link":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn","title":{"rendered":"FreeBSD VPN"},"content":{"rendered":"<p>This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and other freebsd boxes.<\/p>\n<p><span style=\"color: #ff0000;\"><em><strong>Note, it was based on FreeBSD 6 series, whether it works with later versions of FreeBSD is unknown.<\/strong><\/em><\/span><\/p>\n<p>The basic process:<\/p>\n<pre> - Install &amp; configure pptpserver on the freebsd server\r\n - Configure ppp on the freebsd server\r\n - Setup the clients<\/pre>\n<p><!--more--><\/p>\n<h5><span class=\"mw-headline\">1. Installing pptpserver<\/span><\/h5>\n<p>This part is handled really easily as it pptp server exists in the ports collections. Hence all you need to do is:<\/p>\n<pre> cd \/usr\/port\/net\/poptop\r\n make install<\/pre>\n<p>To configure pptp modify \/usr\/local\/etc\/pptp.conf\\\\ Put the following lines in the file:<\/p>\n<pre> localip 192.168.2.1\r\n remoteip 192.168.2.56-75\r\n\r\n # Listen on the outside interface only\r\n listen 130.220.37.202<\/pre>\n<p><a name=\"Configure__ppp_on_the_freebsd_server\"><\/a><\/p>\n<h5><span class=\"mw-headline\">Configure ppp on the freebsd server<\/span><\/h5>\n<p>Edit \/etc\/ppp\/ppp.conf and set the following target only:<\/p>\n<pre>  pptp:\r\n    set ifaddr 192.168.1.1 192.168.1.56-192.168.1.74 255.255.255.255\r\n   set dns 192.168.0.1\r\n    set nbns 192.168.0.1\r\n   disable pap\r\n   disable utmp\r\n   disable passwdauth\r\n   #enable chap     # MPPE Requirest chap81\/MSChapV2\r\n   enable MSChapV2\r\n   enable mppe      # Enable Encrptions\r\n   set log Phase Chat LCP IPCP CCP tun command  # Debugging\r\n   set timeout 0   # Don't drop the connection<\/pre>\n<pre>   #\r\n   # Force 128 bit encryption with a key change every packet\r\n   # MacOSX only works with stateless connections and the are more\r\n   # secure anyway - just less efficient.\r\n   set mppe 128 stateless<\/pre>\n<pre>   # Disable compression - freebsd clients try to use it but it breaks mppe\r\n   disable deflate pred1\r\n   deny deflate pred1\r\n   set server \/var\/run\/pptp_ppp_%d \"\" 0700\r\n   accept dns              # Enable clients to request dns details\r\n   disable ipv6cp          # Disable ipv6\r\n   enable proxy            # Enable proxying addresses on the local net for clients<\/pre>\n<p>Now modify\/create \/etc\/ppp\/ppp.secret and put in it:<\/p>\n<pre> someuser  userpassword  192.168.1.75<\/pre>\n<p>Now &#8216;someuser&#8217; can log in with the password &#8216;userpassword&#8217; and will get an IP address of 192.168.1.75. If you don&#8217;t want to specify the ip, just leave the 3rd parameter off that line of the file.<\/p>\n<p><a name=\"Setup_Clients\"><\/a><\/p>\n<h5><span class=\"mw-headline\">Setup Clients<\/span><\/h5>\n<p>This section details how to setup various clients<\/p>\n<p><a name=\"Windows_XP\"><\/a><\/p>\n<h4><span class=\"mw-headline\">Windows XP<\/span><\/h4>\n<pre> - Create a new VPN connection\r\n - Specify host\r\n - Specify Usename  \/ password\r\n - Hit connect<\/pre>\n<p><a name=\"FreeBSD\"><\/a><\/p>\n<h4><span class=\"mw-headline\">FreeBSD<\/span><\/h4>\n<p>Freebsd works with MPPE out the box. Simply setup the following in \/etc\/ppp.conf<\/p>\n<pre> MYVPN:\r\n   set authname someuser\r\n   set authkey  userpassword\r\n   disable pred1\r\n   enable proxy\r\n   disable ipv6cp\r\n   set timeout 0\r\n   add default HISADDR<\/pre>\n<p>Install pptpclient<\/p>\n<pre>   cd \/usr\/ports\/net\/pptpclient\r\n   make install<\/pre>\n<p>Now run it with: pptp serverip MYVPN\\\\ ie:<\/p>\n<pre>  pptp  130.220.37.2 MYVPN<\/pre>\n<p><a name=\"Mac_OsX\"><\/a><\/p>\n<h4><span class=\"mw-headline\">Mac OsX<\/span><\/h4>\n<p>Simply configure the GUI tool.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and other freebsd boxes. Note, it was based on FreeBSD 6 series, whether it works with later versions of FreeBSD is unknown. The basic process: &#8211; Install &amp; configure pptpserver<a href=\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\"> <font size=-2>[..more..]<\/font><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[34,4],"tags":[54,53,52,55,51],"class_list":["post-60","post","type-post","status-publish","format-standard","hentry","category-computers","category-freebsd","tag-encryption","tag-mppe","tag-pptp","tag-tunnel","tag-vpn"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.1.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>FreeBSD VPN - ClearChain<\/title>\n<meta name=\"description\" content=\"This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Benjamin Close\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\"},\"author\":{\"name\":\"Benjamin Close\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98\"},\"headline\":\"FreeBSD VPN\",\"datePublished\":\"2008-11-07T04:16:30+00:00\",\"dateModified\":\"2009-06-25T22:59:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\"},\"wordCount\":200,\"commentCount\":8,\"keywords\":[\"encryption\",\"mppe\",\"pptp\",\"tunnel\",\"vpn\"],\"articleSection\":[\"Computers\",\"FreeBSD\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\",\"url\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\",\"name\":\"FreeBSD VPN - ClearChain\",\"isPartOf\":{\"@id\":\"https:\/\/www.clearchain.com\/blog\/#website\"},\"datePublished\":\"2008-11-07T04:16:30+00:00\",\"dateModified\":\"2009-06-25T22:59:04+00:00\",\"author\":{\"@id\":\"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98\"},\"description\":\"This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and\",\"breadcrumb\":{\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.clearchain.com\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FreeBSD VPN\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/#website\",\"url\":\"https:\/\/www.clearchain.com\/blog\/\",\"name\":\"ClearChain\",\"description\":\"-= Daily Happenings =-\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.clearchain.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98\",\"name\":\"Benjamin Close\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/19dca0aa372edfa901b93c556dfda2e78ad4434558fe4d139598e086315d714a?s=96&d=mm&r=pg\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/19dca0aa372edfa901b93c556dfda2e78ad4434558fe4d139598e086315d714a?s=96&d=mm&r=pg\",\"caption\":\"Benjamin Close\"},\"sameAs\":[\"http:\/\/www.clearchain.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FreeBSD VPN - ClearChain","description":"This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn","twitter_misc":{"Written by":"Benjamin Close","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#article","isPartOf":{"@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn"},"author":{"name":"Benjamin Close","@id":"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98"},"headline":"FreeBSD VPN","datePublished":"2008-11-07T04:16:30+00:00","dateModified":"2009-06-25T22:59:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn"},"wordCount":200,"commentCount":8,"keywords":["encryption","mppe","pptp","tunnel","vpn"],"articleSection":["Computers","FreeBSD"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn","url":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn","name":"FreeBSD VPN - ClearChain","isPartOf":{"@id":"https:\/\/www.clearchain.com\/blog\/#website"},"datePublished":"2008-11-07T04:16:30+00:00","dateModified":"2009-06-25T22:59:04+00:00","author":{"@id":"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98"},"description":"This document describes how to setup both the server side and client side for a PPTP connection with MPPE encryption that works for windows, MacOsX and","breadcrumb":{"@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.clearchain.com\/blog\/posts\/freebsd-vpn#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.clearchain.com\/blog"},{"@type":"ListItem","position":2,"name":"FreeBSD VPN"}]},{"@type":"WebSite","@id":"https:\/\/www.clearchain.com\/blog\/#website","url":"https:\/\/www.clearchain.com\/blog\/","name":"ClearChain","description":"-= Daily Happenings =-","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.clearchain.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/aef6faa2c32188398139db9270ca1c98","name":"Benjamin Close","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.clearchain.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/19dca0aa372edfa901b93c556dfda2e78ad4434558fe4d139598e086315d714a?s=96&d=mm&r=pg","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/19dca0aa372edfa901b93c556dfda2e78ad4434558fe4d139598e086315d714a?s=96&d=mm&r=pg","caption":"Benjamin Close"},"sameAs":["http:\/\/www.clearchain.com"]}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/posts\/60","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/comments?post=60"}],"version-history":[{"count":5,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/posts\/60\/revisions"}],"predecessor-version":[{"id":457,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/posts\/60\/revisions\/457"}],"wp:attachment":[{"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/media?parent=60"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/categories?post=60"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.clearchain.com\/blog\/wp-json\/wp\/v2\/tags?post=60"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}