Free vpn software software for linux

VPN HOWTO is a document that describes how to set up a Virtual Private Network with Linux.
Main features:
- Section 1: Introduction
- Section 2: Theory
- Basic VPN theory. What is a VPN, and how does it work. Read this if you are entirely new to VPN.
- Section 3: Server
- This section describes how a VPN server is set up.
- Section 4: Client
- This section describes how a VPN client is set up.
- Section 5: Implementation
- A step by step implementation of a sample VPN setup.
- Section 6: Addenda
- Other bits and pieces of info that you might find helpful.

VPNmonitor is a free Java tool to observe network traffic. Network administrators can use it to monitor VPN (PPTP and IPSec) and SSL (HTTPS) connectivity of wireline/wireless networks.

If you are using Linux this way you will run VPNmonitor:
1. Install libpcap 0.7.2 or above from http://www.tcpdump.org/
2. Copy Jpcap libraries to the jre directories:
cp net.sourceforge.jpcap-0.01.13.jar /jre/lib/ext
cp libjpcap.so /jre/lib/i386
3. su to root
4. Run VPNmonitor
java -jar VPNmonitor.jar

WifiWare is a custom mini slackware based, Linux distribution intended for wifi routers, VPN servers and file servers.
Full install will take cca 300MB hdd space.
Wlan-drivers package with support for major wifi chipsets included.
Other utils in /utils folder on cdrom:
- Unreal ircd
- Hybrid ircd
- bridge-utils
- kismet
- webmin
- glftpd
- and more.
Distribution contains patched ppp and kernel package/source with support for Microsoft Point-to-Point Encryption(MPPE) and Microsoft Point-to-Point Compression(MPPC). MPPC itself is patented algorithm. Patent for *Microsoft* PPC is holded by the Hifn Inc. MPPE uses RC4 encryption algorithm which itself isnt patented, but RC4 is trademark of RSA Data Security Inc.
To avoid legal problems, US citizens shouldnt use this module. Ok, you have been warned, now you can do whatever you want.
Enhancements:
- Some minor bugfixes and WiFi driver updates.

Bastard is virtual server oriented patchset, containing essential elements for building virtual server container machines.
It includes a CTX-VS patch, squashfs for creating a small template server, lufs and bme for easily creating overlayed filesystems on top of the template, and honeynet- inspired extensions to enhance monitoring of hosted servers.
Bastard project also includes VPN extensions like OpenSWAN, MPPE, and CIPE to enable direct access to hosted virtual servers in situations where IPs are scarce.
Enhancements:
- The softirq changes were backed off.
- The openwall patch was updated.

KNetworkManager is the KDE front end for NetworkManager. KNetworkManager project provides a sophisticated and intuitive user interface which enables users easily to switch their network environment.

The range of functions encompasses the features implemented by NetworkManager daemon. Up until now NetworkManager supports:

Wired Ethernet Devices (IEEE 802.3)
Wireless Ethernet Devices (IEEE 802.11): Unencrypted, WEP, WPA Personal, WPA Enterprise
Virtual Private Network (VPN): OpenVPN, VPNC
Dial-Up (PPP)

How does it work?

For both, Wireless LAN and Wired LAN, NetworkManager supports devices known to HAL. Unless working in offline mode, NetworkManager tries to keep the system connected at any time. For this, NetworkManager follows the following policy.

Once started, NetworkManager asks HAL about available network interfaces. If a wired network interface with a carrier is found, NetworkManager connects to this. Either by DHCP (default) or by setting up previously defined static configuration. Later on, when KNetworkManager starts up, NetworkManager will expose its information about network devices and wireless networks found by scanning to the applet.

At this point, if a user decides to unplug the wired connection, NetworkManager will not connect to an arbitrary wireless network. By default all available networks are untrusted. Only if a user decides to connect to a network manually once, this specific network n henceforth being marked as trusted.

n = { ESSID, Hardware address or addresses of the access point}

The trusted networks are stored individually for each user. KNetworkManager stores them and informs NetworkManager about the known, trusted networks. If a wired connection drops due to unplugging the cable NetworkManager will automatically connect to a trusted network. As this step was done without user interaction, NetworkManager will reconnect to the wired connection once it has a carrier.

If a user joins a wireless network by manual intervention (e.g. user clicks on a network listed in the context menu of KNetworkManager or connects to a hidden wireless network), NetworkManager will take down any previous connection. If one unplugs the wired connection after such a step, NetworkManager will not connect to the wired connection once it has a carrier.

OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls (articles) (examples) (security overview) (non-english languages).
OpenVPN implements OSI layer 2 or 3 secure network extension using the industry standard SSL/TLS protocol, supports flexible client authentication methods based on certificates, smart cards, and/or 2-factor authentication, and allows user or group-specific access control policies using firewall rules applied to the VPN virtual interface. OpenVPN is not a web proxy and does not operate through a web browser.
For a good conceptual introduction to OpenVPN, see the program notes for James Yonans talk at Linux Fest Northwest 2004 -- Understanding the User-Space VPN: History, Conceptual Foundations, and Practical Usage. See also OpenVPN and the SSL VPN Revolution by Charlie Hosner.
OpenVPN is an Open Source project and is licensed under the GPL. Commercial licenses are also available for firms who would like to redistribute OpenVPN with their own proprietary applications. Contact info@openvpn.net for more information.
Main features:
- tunnel any IP subnetwork or virtual ethernet adapter over a single UDP or TCP port,
- configure a scalable, load-balanced VPN server farm using one or more machines which can handle thousands of dynamic connections from incoming VPN clients,
- use all of the encryption, authentication, and certification features of the OpenSSL library to protect your private network traffic as it transits the internet,
- use any cipher, key size, or HMAC digest (for datagram integrity checking) supported by the OpenSSL library,
- choose between static-key based conventional encryption or certificate-based public key encryption,
- use static, pre-shared keys or TLS-based dynamic key exchange,
- use real-time adaptive link compression and traffic-shaping to manage link bandwidth utilization,
- tunnel networks whose public endpoints are dynamic such as DHCP or dial-in clients,
- tunnel networks through connection-oriented stateful firewalls without having to use explicit firewall rules,
- tunnel networks over NAT,
- create secure ethernet bridges using virtual tap devices, and
- control OpenVPN using a GUI on Windows or Mac OS X.

Amrita VPN is an easy-to-use open source VPN solution that runs on the GNU/Linux platform. The implementation is fully in userspace and requires no kernel patches or enhancements. It uses openssl library for strong encryption and authentication through SSLv3.
Amrita VPN IS used to connect two private networks through a public network such as the Internet. It requires only one end to have a direct Internet connection preferably with a permanent public IP address. The other end could be connected to the Internet via a masquerading router.
tar xvfz amvpn-0.99.tar.gz
- cd amvpn-0.99
- ./configure
- make
- make install
Root privilege is required to install and run AmritaVPN. You would need a root login shell to succesfully run make install. If youre logged in as root, then of course you already have a root login shell.Otherwise you must do: su - instead of simply su at command prompt.
Enhancements:
- Added keepalive message option.
- Added basic flow control logic in the relay loop - Prevents amvpn from becoming CPU-bound when theres a break/congestion in the outbound link.

strongSwan is an OpenSource IPsec implementation for the Linux operating system. strongSwan is based on the discontinued FreeS/WAN project and the X.509 patch which we developped over the last three years.
In order to have a stable IPsec platform to base our future extensions of the X.509 capability on, we decided to lauch the strongSwan project.
Main features:
- runs both on Linux 2.4 (KLIPS) and Linux 2.6 (native IPsec) kernels
- strong 3DES, AES, Serpent, Twofish, or Blowfish encryption
- Authentication based on X.509 certificates or preshared keys
- Powerful IPsec policies based on wildcards or intermediate CAs
- Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
- Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
- Optional storage of RSA private keys on smartcards or USB crypto tokens
- Smartcard access via standardized PKCS #11 interface
- PKCS #11 proxy function offering RSA decryption services via whack
- NAT-Traversal (RFC 3947) and support of Virtual IPs and IKE Mode Config
- CA management (OCSP and CRL URIs, default LDAP server)
- Dead Peer Detection (DPD, RFC 3706)
- Group policies based on X.509 attribute certificates ( RFC 3281)
- Generation of default self-signed certificates during strongSwan setup
Whats New in 2.8.0 Stable Release:
- The implementation of the IKE Mode Config push mode allows interoperability with Cisco VPN gateways.
- By setting "modeconfig=push", strongSwan will wait for the peer to push down a virtual IP address that can be used within an IPsec tunnel.
- The default value of the new keyword is "modeconfig=pull".
- The command "ipsec statusall" now shows "DPD active" for all ISAKMP Security Associations that are under active Dead Peer Detection control.
Whats New in 4.0.7 Development Release:
- Extended authentication (XAUTH) in conjunction with IKE Main Mode authentication (RSA and PSK) is now possible with most VPN clients and gateways (e.g. Cisco, NCP, Shrew, etc.).
Whats New in 2.8.3 Stable Release:
- A bug in the computation of the SHA-512-HMAC function was fixed.
- The SHA-384 hash and HMAC functions were implemented.
- SHA-2 signatures are now supported in X.509 certificates.
- Automatic test vector-based self-tests of all hash functions (MD5, SHA-1, SHA-2) during pluto startup was introduced to increase the reliability of the software.