VPN Security Question

[Tomai]

Hello,

In order for me to get my vpn to work i had to put my server out on the dmz and turn off all firewalls, I was wondering if there is a way around this? and offer more security to the server and the connection? Because this makes me a bit nervous because it seems so out in the open?

Thank you!

 

[KiscoKid]

If you have a server that is directly accessible from the Internet with no security device defending it, it will eventually get hacked. In fact it may already be hacked.

I would suggest that if you can't get your VPN working through the firewall then the firewall configuration may not have been 100%.. either that or the firewall is not that good. Even these cheap DSL routers with builtin firewall out of the box support VPN Passthrough so I'm surprised you couldn't get this working behind a firewall.

If you must make the server openly accessible to anyone, I would strongly encourage you to at least follow standard server hardening techniques inc. a STRONG password i.e. use some $^%*£ chars in there, closing unnecessary ports, disabling non essential services etc etc etc.

 

[cyberspace]

You should definately not have to do this to get the VPN to work!

You certainly don't want Servers out in the open and you certainly don't want all your firewalls turned off! That is a ticking time bomb.

What VPN hardware/software are you using? And for what purpose? I'm sure someone could give you some tips for a significantly more secure setup.

'When all else fails.......read the manual'

 

[Tomai]

Currently I am doing just the basic vpn with the windows, the remote access and routing under administrative tools. I dont think there is a firewall on the server but I will install one, is there any recommendation for a good one for servers thats not very complex to configure?

as for the router, it is the d-link DI-804HV and the control panel is not very direct so i had a hard time figuring out where i had to go to open the 1723 port and i didnt see anything about allowing the gre protocol either (even tho its supposedly a vpn router)

Only reason i had it on the dmz was because it was the only way that let me login otherwise id get the 800 error that it cannot connect to the vpn.

Thanks for all the help everyone, i really appreciate it