Peer to Peer security over VPN

[rundownbytechnology]

No one responded to the last thread regarding this.

What is the best software, or solution to implementing user level folder permissions and other security accross a router to router VPN configuration that has no authentication server on either end.

Just a bunch of workstations in the same workgroup.

All Win9x boxes, and some ME and XP workstations thrown in for good measure.

This is becoming a common site, and really scary if you stop and think about it. As this technology falls into the hands of the average consumer or techno junkie who thinks it would be great to hook up all his freinds on a VPN tunnel to his store of MP3's, or an inexpensive small company solution, they are unknowingly exposing any share to everyone, and any device that is inside the router is accessible.

So, anybody got any good links or ideas on how to fix this big hole?

 

[markku]

If you have box-to-box VPN with 3DES-encryption it takes 64 billion years to break it. More info in

http://www.hifn.com

No need for paranoia, the solution is as safe it can be, officials, military and police are happy with the level of security.

 

[rundownbytechnology]

No, that's not my concern, there are some really computer illiterate people using these setups, and companies that don't even know what they have, and theusers can randomly delete anything in any open shares, or network aware viruses can travel the whole VPN looking for an open share without security.

The need here is to implement, at least folder level security, but without any server at all, how can this be accomplished? I have been told the cheapest, and secure way is to set up samba server on an old pentium box at each end of the tunnel.

Too much work and expense for alot of small businesses. There has to be a software solution that will run on the PC's themselves to do this.