FlyerTalk Forums

FlyerTalk Forums (https://www.flyertalk.com/forum/index.php)
-   Travel Technology (https://www.flyertalk.com/forum/travel-technology-169/)
-   -   VPN - Explain to a dummy (https://www.flyertalk.com/forum/travel-technology/1177101-vpn-explain-dummy.html)

sonofzeus Jan 27, 2011 8:05 am


Originally Posted by dtsm (Post 15745779)
When I turn on my witopia.net VPN stateside, google voice is not affected. Never tried when overseas....will do so next visit.

Thanks for reply.

Meanwhile, if any non-US based FTers wish to test GV with a US based VPN, I'd appreciate their input.

Zarf4 Jan 27, 2011 8:48 am


Originally Posted by dtsm (Post 15745745)
1. When sending out emails while VPN is on, some recipient email networks will not accept it and/or consider it spam. So, while you'll be able to send out, the recipient might not be able to receive it. I use witopia.net, they are excellent. But at least two networks, mindspring and bellsouth.net bounce them back.

2. Many websites can detect you using vpn and will block access. Hulu is one example.

I suspect that some services may be aware of some of the commercial VPN IPs and are blocking them. I run an OpenVPN Linux server at home so my traffic appears to originate there and haven't had any problems with e-mail or accessing Hulu overseas.

I set up the home server because outbound e-mails are blocked by my work VPN. My reply-to personal email addy is: [email protected] and our work server only allows [email protected] mails to go out.

It's also pretty easy these days to pick up a $30 dd-wrt wireless router and reflash the firmware to give you a very cheap home VPN server.

JClishe Jan 27, 2011 8:52 am


Originally Posted by gfunkdave (Post 15743715)
After creating the connection, all your network traffic - web browsing, email, IM, everything - is routed through your encrypted VPN connection. It's like your computer is plugged into your office network or your home network, but you can be across the street or across the world.

I've seen this mentioned a few times within this thread so just wanted to clarify that the above statement is not necessarily accurate.

If you're using a full tunnel VPN connection, then yes, the above statement is accurate. All traffic is routed through the VPN connection.

If you're using a split tunnel VPN connection, then no, the above statement is not accurate. Only traffic destined for the VPN network will travel through the VPN connection, while all other traffic ignores the VPN connection completely and goes straight out to the Internet.

PTravel Jan 27, 2011 9:22 am


Originally Posted by Zarf4 (Post 15746126)
It's also pretty easy these days to pick up a $30 dd-wrt wireless router and reflash the firmware to give you a very cheap home VPN server.

I use a Trendnet router that supports both IPSEC and SSH. I think it cost around $100. There are lots of inexpensive routers around that support only IPSEC.

gfunkdave Jan 27, 2011 9:43 am


Originally Posted by JClishe (Post 15746155)
I've seen this mentioned a few times within this thread so just wanted to clarify that the above statement is not necessarily accurate.

If you're using a full tunnel VPN connection, then yes, the above statement is accurate. All traffic is routed through the VPN connection.

If you're using a split tunnel VPN connection, then no, the above statement is not accurate. Only traffic destined for the VPN network will travel through the VPN connection, while all other traffic ignores the VPN connection completely and goes straight out to the Internet.

Fair enough. The default behavior in the Windows VPN client is full tunnel.

Astrophsx Jan 27, 2011 1:30 pm

Gizmodo.com article on VPN:
http://gizmodo.com/5713626/how-to-wa...ramming-abroad

deubster Jan 27, 2011 2:38 pm


Originally Posted by PTravel (Post 15746413)
I use a Trendnet router that supports both IPSEC and SSH. I think it cost around $100. There are lots of inexpensive routers around that support only IPSEC.

Looks like a good place to mention the novice VPN configuration dilemma:

If you have DD-WRT on a router, you can setup the VPN client on any Win pc anywhere quite easily - they even have wizards to walk you through it. Not so with IPSEC - this can take considerable technical acumen.

OTOH, if you are able to install DD-WRT, you can probably handle either. :D

PTravel Jan 27, 2011 3:04 pm


Originally Posted by deubster (Post 15748911)
Looks like a good place to mention the novice VPN configuration dilemma:

If you have DD-WRT on a router, you can setup the VPN client on any Win pc anywhere quite easily - they even have wizards to walk you through it. Not so with IPSEC - this can take considerable technical acumen.

OTOH, if you are able to install DD-WRT, you can probably handle either. :D

Very true. Before getting the Trendnet, I'd successfully set up IPSEC vpn on other home routers, but it was a combination of internet, trial-and-error and witchcraft (e.g. always face east when setting up IPSEC and never do it on a Tuesday or during a full moon). The Trendnet is terrific. I just set it up for LAN and internet connection, quickly configured VPN and pointed the Microsoft VPN client at it and it connected the first time (and second, and third . . .). Best darn purchase I ever made.

nerd Jan 27, 2011 4:24 pm


Originally Posted by gfunkdave (Post 15743715)
The basic idea of a VPN is that your computer creates an encrypted connection, over the internet, to a computer network that you trust. This could be, say, the network at your office, your home, or a third party VPN service provider.

After creating the connection, all your network traffic - web browsing, email, IM, everything - is routed through your encrypted VPN connection. It's like your computer is plugged into your office network or your home network, but you can be across the street or across the world.

The "tunnel" mentioned is simply the idea that any outsider trying to snoop on you would only see an encrypted connection between you and your trusted computer network. Within that encrypted connection, you are sending all kinds of information.

Finally, an explanation for dummies. Thank you. ^

It's always funny watching technical people try to explain concepts to non-techies, and being completely unable to avoid terms (certificate, protocol, tunnel, client, LAN) the non-techie won't understand. :)

Landing Gear Jan 28, 2011 10:41 pm


Originally Posted by Zarf4 (Post 15741838)
To dumb it down even a bit more...

. . .


SECURITY

When you connect to the internet at a Holiday Inn or Starbucks most of your web browsing can be intercepted by: a) other users close enough to hear your wireless connection and b) nefarious folks between the hotel router and the final www address you're linking up to. Sites starting with https:// (as opposed to http://) are relatively secure but not 100%. Since your traffic is encrypted all anyone in the middle will see will be unintelligible.

. . .

I use Starbucks wifi but the only (at least the only one of which I am aware) security issue for me is using Outlook to get email from my ISP.

Should I get VPN?

How about if I want to use something like www.aa.com to make and check reservations?

Taiwaned Jan 29, 2011 6:11 am


Originally Posted by Landing Gear (Post 15758395)
I use Starbucks wifi but the only (at least the only one of which I am aware) security issue for me is using Outlook to get email from my ISP.

Should I get VPN?

How about if I want to use something like www.aa.com to make and check reservations?

If you are on a public wifi life Starbucks, there is most defintely security issues. VPN will give you security when using these public wifi's.

payam81 Jan 29, 2011 8:53 am


Originally Posted by Zarf4 (Post 15746126)
I suspect that some services may be aware of some of the commercial VPN IPs and are blocking them. I run an OpenVPN Linux server at home so my traffic appears to originate there and haven't had any problems with e-mail or accessing Hulu overseas.

I set up the home server because outbound e-mails are blocked by my work VPN. My reply-to personal email addy is: [email protected] and our work server only allows [email protected] mails to go out.

It's also pretty easy these days to pick up a $30 dd-wrt wireless router and reflash the firmware to give you a very cheap home VPN server.

Do you have a link to a tutorial to set up a DD-WRT OpenVPN server?

I'm in a similar boat as you and don't want to get a commercial VPN service where my data would end up at someone else's server needlessly if I can route it through home.

What are the Pros/Cons to this approach?

PTravel Jan 29, 2011 9:35 am


Originally Posted by payam81 (Post 15760098)
Do you have a link to a tutorial to set up a DD-WRT OpenVPN server?

I'm in a similar boat as you and don't want to get a commercial VPN service where my data would end up at someone else's server needlessly if I can route it through home.

What are the Pros/Cons to this approach?

With all due respect, information on DD-WRT is readily available, and a couple of minutes of googling around would find it. Though it doesn't require a lot of technical expertise to mod a router, if you do it wrong you can wind up with a useless brick.

Why not just get something like this?

http://ak.buy.com/PI/0/250/207552331.jpg

http://www.buy.com/prod/trendnet-4-p...207552331.html

payam81 Jan 29, 2011 10:00 am


Originally Posted by PTravel (Post 15760332)
With all due respect, information on DD-WRT is readily available, and a couple of minutes of googling around would find it. Though it doesn't require a lot of technical expertise to mod a router, if you do it wrong you can wind up with a useless brick.

Why not just get something like this?

http://ak.buy.com/PI/0/250/207552331.jpg

http://www.buy.com/prod/trendnet-4-p...207552331.html

I already have a WRT54G in DD-WRT already but it's set up as a wifi repeater with a hidden SSID which is feeding my VOIP adapter with a wired ethernet. I was mainly looking for some info on how to modify that set up to:

A) Keep the current role of the router as a repeater.
B) Be able to enable/access the OpenVPN on it even though it's behind my main network router.

Thanks anyway.

Landing Gear Jan 29, 2011 11:11 am


Originally Posted by PTravel (Post 15760332)
Why not just get something like this?


http://www.buy.com/prod/trendnet-4-p...207552331.html

PTravel, do you have any thoughts on my question, supra in post 25, especially since you and I are in the same "racket?" :)


All times are GMT -6. The time now is 2:42 pm.


This site is owned, operated, and maintained by MH Sub I, LLC dba Internet Brands. Copyright © 2026 MH Sub I, LLC dba Internet Brands. All rights reserved. Designated trademarks are the property of their respective owners.