Free clarkconnect openvpn software for linux

ClarkConnect is a powerful yet easy-to-use software package that transforms off-the-shelf server hardware into a dedicated Internet firewall, gateway or server.
ClarkConnect is a great solution for schools, businesses, organizations, and home offices.
ClarkConnect transforms standard PC hardware into either:
- a dedicated firewall/gateway for your network, or
- a standalone server on your local network
The award-winning Linux-based solution includes firewall and security tools, along with file, print, web, e-mail, proxy, antivirus, antispam, content filtering, VPN servers and more. A detailed feature list is shown in the sidebar below.
Easy to Install and Manage
The software is easy to install on off-the-shelf hardware ... you can be up and running in minutes.
- purchase a CD, or download burn your own
- insert the CD into the server system
- start the server from the CD
- follow the installation wizard
Once you have your ClarkConnect system up and running, you can configure the server/gateway with an easy-to-use web-based administration tool.
Integrated Updates and Managed Services
- ClarkConnect includes integrated Gateway Services (GS). to update, manage and monitor your system.
- 24/7 port and resource monitoring
- DNS services, including dynamic DNS
- antivirus protection
- antispam tools
- content filter updates
- managed/dynamic VPN
- daily security audits
- intrusion detection updates
- e-mail/MX backup
Different Needs... Different Solutions
We offer three different editions of the ClarkConnect software. Each edition solves different needs.
Professional Edition - Firewall and Gateway
The Professional Edition is a firewall solution that protects your network from the constant hazards lurking on the Internet. The software includes a stateful firewall, antispam protection, antivirus protection, content filtering, managed VPN, intrusion prevention, and more.
Office Edition - All-in-One Gateway/Server
The Office Edition includes not only the core security features found in the Professional Edition, but also server features: file server, print server, web server, advanced mail server, and database server.
Home Edition - Home and Hobbyist Solution
The Home Edition is designed for home use -- we include extras such as MP3 support, online photo albums and computer security model appropriate for a home environment.
Main features:
- IPsec VPN
- PPTP VPN
- Managed/Dynamic VPN
- 1-to-1 NAT support
- DMZ support
- Stateful Firewall
- Intrusion detection
- Intrusion prevention
- Antispam
- Antivirus (license req.)
- SMTP authentication
- SMTP gateway
- SMTP server
- POP and IMAP servers
- Webmail
- Banner ad blocking
- Web proxy
- Content filtering
- Bandwidth manager
- DSL (including PPPoE)
- Cable Modem
- 802.11b Wireless
- Internal DHCP server
- Caching DNS server
- Hardware and Software RAID
- multi-processor support
- Web-based configuration
- Optional Webmin package
- Apache web server
- Support for CGI and PHP
- Secure/SSL support
- FTP server
- Windows file server
- AppleShare file server
- Print server support
- Printer sharing
- MySQL Database
Whats New in 4.1 Stable Release:
- File server antivirus; Samba PDC (Primary Domain Controller) support; improved server and LAN backup features; new greylist and blacklist support for the antispam engine; greylist antispam engine; e-mail disclaimer; e-mail virtual domain support; e-mail catch-all mailbox support; webmail administration tools; the backup and restore system settings now includes the user database; the firewall has changed to accommodate the new Hot LAN and Blocking features...
Whats New in 4.2 Alpha 1 Development Release:
- ClarkConnect Community 4.2 Alpha 1 is available. Though it has only been four months since the last release, version 4.2 brings quite a few new features. This alpha build is intended for developers, integrators and curious users. Typical uses for this alpha build: final integration testing for third party developers; testing new hardware and drivers with the Linux 2.6.18 kernel; getting a sneak preview of the upcoming 4.2 release. This is alpha software, so quite a few software modules are still incomplete or not well tested. The most important known issues are: Webconfig template graphics and icons are incomplete; graphical console tool does not display on the screen properly....

OpenVPN Admin is a GUI for OpenVPN it is writen in Mono and runs under Linux and Windows.

Included in OpenVPN-Admin is a Certificate wizard and a certificate management for the client.

OpenVPN Auth Passwd is a plugin that authenticates OpenVPN users using the local passwd or shadow files, using a privilege separation model.
OpenVPN Auth Passwds authentication method must be defined in the Makefile prior to the compilation of the plugin.
On shadowed systems it uses the functions provided in the shadow suite and, on other systems, the getpwnam(3) function to verify the username/password.
SYNOPSIS
The openvpn-auth-passwd module implements username/password authentication via the passwd files and, in the systems with shadow support, we use it. It is provided for systems that dont have PAM.
This module uses a split privilege execution model, the same used in the auth-pam and down-root plugins. That is, even if you drop the openvpn daemon privileges using the user, group, or chroot directives, the plugin still work.
BUILD
To build openvpn-auth-passwd on systems that use shadow, you will need to have the shadow suite and its devel headers installed.
On GNU systems build with the "make" command. In other systems you should install the GNU make, if you dont have it, and type "gmake". The module will be named openvpn-auth-passwd.so
USAGE
To use this plugin module, add to your OpenVPN config file:
plugin openvpn-auth-passwd.so
Run OpenVPN with --verb 7 or higher to get debugging output from this plugin.
CAVEATS
This module is supposed to work on any *nix system but, more testing should be done. Right now it works in the Linux and OpenBSD.
There is no portable way to check if you are using the shadow suite or not. And, as we are not using autoconf to do this, you must manually set the USE_SHADOW directive in the Makefile. We assume by default that you are using it (the majority of linux distributions and sun). If you arent (the majority of *bsd systems and others),
you should set it to 0.
Enhancements:
- Added a new funtion to check if the user belong to a given group or not.

KNetworkManager is the KDE front end for NetworkManager. KNetworkManager project provides a sophisticated and intuitive user interface which enables users easily to switch their network environment.

The range of functions encompasses the features implemented by NetworkManager daemon. Up until now NetworkManager supports:

Wired Ethernet Devices (IEEE 802.3)
Wireless Ethernet Devices (IEEE 802.11): Unencrypted, WEP, WPA Personal, WPA Enterprise
Virtual Private Network (VPN): OpenVPN, VPNC
Dial-Up (PPP)

How does it work?

For both, Wireless LAN and Wired LAN, NetworkManager supports devices known to HAL. Unless working in offline mode, NetworkManager tries to keep the system connected at any time. For this, NetworkManager follows the following policy.

Once started, NetworkManager asks HAL about available network interfaces. If a wired network interface with a carrier is found, NetworkManager connects to this. Either by DHCP (default) or by setting up previously defined static configuration. Later on, when KNetworkManager starts up, NetworkManager will expose its information about network devices and wireless networks found by scanning to the applet.

At this point, if a user decides to unplug the wired connection, NetworkManager will not connect to an arbitrary wireless network. By default all available networks are untrusted. Only if a user decides to connect to a network manually once, this specific network n henceforth being marked as trusted.

n = { ESSID, Hardware address or addresses of the access point}

The trusted networks are stored individually for each user. KNetworkManager stores them and informs NetworkManager about the known, trusted networks. If a wired connection drops due to unplugging the cable NetworkManager will automatically connect to a trusted network. As this step was done without user interaction, NetworkManager will reconnect to the wired connection once it has a carrier.

If a user joins a wireless network by manual intervention (e.g. user clicks on a network listed in the context menu of KNetworkManager or connects to a hidden wireless network), NetworkManager will take down any previous connection. If one unplugs the wired connection after such a step, NetworkManager will not connect to the wired connection once it has a carrier.

/etc/net represents a new approach to Linux network configuration tasks. /etc/net Scripts is inspired by the limitations of traditional configuration subsystems.
/etc/net provides builtin support for configuration profiles, interface name management, removable device support, full iproute2 command set support, interface dependency resolution, and a QoS configuration framework.
/etc/net provides support for the following interface types: Ethernet, WiFi (WEP), IPv6/IPv6 tunnels, PSK IPSec tunnels, VLAN, PLIP, Ethernet bonding and bridging, traffic equalizer, Pent@NET, usbnet, and PPP.
Due to its modular design, support for new interface types can be added without overall design changes.
Enhancements:
- This release features mostly new features (ip6tables, ebtables, OpenVPN, and tun/tap) and some bugfixes (IP rules, wireless, firewall, and DVB).

OpenVPN authentication server is a project which allows you to add very flexible authentication for your OpenVPN server.
OpenVPN authentication server provides very flexible authentication (LDAP, Kerberos, Radius, PAM, SASL, File, SQL, IMAP, POP3) for your OpenVPN server. You can also retrieve per-client configuration in your LDAP server.
Main features:
- Very flexible authentication configuration
- Chainable authentication backends. You can mix several authentication backends
- Authentication server written in perl
- Authentication server can run completely in chroot (recommended)
- Authentication client written in C
- Authentication client can run completely in chroot if OpenVPN server is chrooted
- Supports almost all existing authentication backends.
- Supported authentication backends:
- LDAP
- Kerberos5 (works also with Microsoft AD)
- any SQL database supported by perl DBI driver
- IMAPv4 server
- POP3 server
- plain file
- SASL library
- PAM library
- Radius service
- custom certificate validation algorithm.

KVpnc is a KDE frontend for various vpn clients. KVpnc project supports Cisco VPN (vpnc) and IPSec (FreeS/WAN, racoon).
vpnc is a replacement for the cisco VPN client and its used as client for the cisco3000 VPN Concentrator, FreeS/WAN (OpenS/WAN) is a IPSec client for Linux 2.4.x and racoon is a IPSec client for Linux 2.6.x and *BSD. It supports also PPTP (pptpclient) and OpenVPN.
You need vpnc >= 0.2-rm+zomb-pre9.
Note: translators still welcome. Kvpnc is currently translated to Bulgarian, Chinese, Dutch, German, Hungary, Italian, French, Portuguese Brazilian, Polish, Slovak and Spanish.
Main features:
- Easy to use KDE gui
- Docking in kicker
- Localized GUI:
Bulgarian
Chinese
Dutch
French
German
Hungarian
Italian
Slovak
Polish
Portuguese Brazilian
Spanish
- VPN connection to Cisco concentrator
- VPN connection to VPN servers by using IPsec
- FreeS/WAN (Linux 2.4.x) support
- racoon (Linux 2.6.x/BSD) support
- PPTP support (pptpclient)
- OpenVPN support
- Multiple profiles
- Preshared secret support
- X509 certificate support
- Cisco PCF file import
- PKCS12 certificate import
- Ping test
- Automaticlly setting of routes and firewall rules (iptables) (currently: freeswan/racoon)
- Automaticlly network device detection (can be overridden)
- Log file writing
- DCOP interface
- user notification for sucessful connect/disconnect
- NAT-T support (racoon/OpenVPN/vpnc)

redWall is a bootable CD-ROM Firewall. redWall Firewalls goal is to provide a feature rich firewall solution, with the main goal, to provide a webinterface for all the logfiles generated!
Main features:
- Configuration is currenty stored on a floppy/USB Memory Stick/Harddrive or sent by email (see todo !)
- Due the fact, that most reporting functionality is done via mysql (except for the squid reports), its possible to use the cd as a Mangagement/Logging Console for other firewalls running in your environment using the same cd! Take snort for instance.. you can have 10 firewalls :) running snort, reporting back to the main database on the management/Logging system, in order to have a central "overview" of all your firewalls... Using the SAME CD !! Its all up to you how you configure your firewall and/or Management box !
- based on redhat 9.0
- bridging support
- Mail Virusscanning, spamfiltering and gateway functionality
- /etc is writable (tmpfs) feeded by the configuration medium
- /var is writable (ramdisk or harddisk) (you are not going to run squid on a ramdisk... arent you ?)
- The cd will (at least it should) detect all your network cards (using kudzu) during the initial boot
- During the initial boot, you can setup some basic things like IP Address, Services to start (all disabled by default) and so on
Enhancements:
- A whole lot of new features have been added.
- vuurmuur has been installed again.
- The initial setup has been rewritten to be like a step-by-step configuration.
- A webmin module for openvpn has been added.
- A comprehensive reverse proxy called vultureng has been added.
- Major bugfixes have been applied.