Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Debugging with tcpdump and IPTraf


Another very handy tool to control traffic is tcpdump. As a network sniffer, tcpdump is often used by administrators or hackers to collect the data exchanged on the network. tcpdump prints all traffic that passes the interface given as a parameter. The following example shows the usage of tcpdump. When called with the options -n and -i eth1, tcpdump will listen on interface eth1 and give a numeric output (without resolving DNS):

debian01:~# tcpdump -n -i eth1
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth1, link-type EN10MB (Ethernet), capture size 96 bytes
21:00:16.640142 IP 192.168.250.128 > 172.16.76.128: ICMP echo request, id 
55298, seq 0, length 64
21:00:16.648116 IP 172.16.76.128 > 192.168.250.128: ICMP echo reply, id 55298, seq 0,
 length 64
21:00:17.678429 IP 192.168.250.128 > 172.16.76.128: ICMP echo request, id 55298, seq 256, 
length 64
21:00:17.680701 IP 172.16.76.128 > 192.168.250.128...