Securifi Community Forum

General Category => Ideas/Feature requests => Topic started by: makkgyver on August 13, 2013, 12:51:09 pm

Title: PPTP client..
Post by: makkgyver on August 13, 2013, 12:51:09 pm
..preferrably to apply to only specific ports.

Title: Re: PPTP client..
Post by: Patrick Wilson on August 13, 2013, 02:45:04 pm
..preferrably to apply to only specific ports.

PPTP (http://en.wikipedia.org/wiki/Point-to-Point_Tunneling_Protocol) uses port 1723/TCP,  and requires GRE (http://en.wikipedia.org/wiki/Generic_Routing_Encapsulation) protocol support in the Router.  I doubt supporting this will be a problem for the Almond+,  however I question the wisdom of using PPTP in the first place,  as it relies on Microsoft CHAPv2 which is inherently insecure,   and can be compromised in under 4 hours,  using freely available tools available on the Internet.   See: http://www.cloiudcracker.com (http://www.cloudcracker.com).

IPSec  (http://en.wikipedia.org/wiki/IPsec) or OpenVPN (http://en.wikipedia.org/wiki/OpenVPN) would be far better (ie more secure) choices.  IMHO PPTP is depreciated,  and should never be used by anyone, regardless of their Operating System.  (Microsoft's later OS entries support PPTP right "out of the box"). 

My opinion is not gospel,  so feel free to make any choices you feel are suitable for your network.  I would however recommend that you do a Google (https://www.google.com/) search for "PPTP insecurities",  which will provide more that 1.7 Million  results (https://www.google.ca/#bav=on.2,or.r_cp.r_qf.&fp=56858b219d3e97d5&q=PPTP+insecurities).

I personally do not recommend PPTP to anyone under any circumstances.  It is completely insecure!   
Title: Re: PPTP client..
Post by: tosaid on December 06, 2013, 11:14:04 am
I understand but PPTP client is great for usage that doesn't need security i.e video streaming.



Title: Re: PPTP client..
Post by: Patrick Wilson on December 08, 2013, 08:19:27 pm
I understand but PPTP client is great for usage that doesn't need security i.e video streaming.

Personally I don't think PPTP is "great"  for anything except consuming diskspace.  It is insecure!

If you don't need "security" why would you use a VPN in the first place?   Using PPTP for data encryption is like using WEP encryption on Wi-Fi,  it is simply bad idea, and an invitation for being hacked. 



Title: Re: PPTP client..
Post by: tosaid on December 12, 2013, 06:53:30 pm
I m from canada, I m using PPTP to watch  US Netflix from Canada or when I m overseas.  Using PPTP is  very convenient and less expensive  since I need to deal with 3rd part IP provider. For anything else I use higher encryption VPN.  ;-).