
hi, i have a 9600 b/s pocket net point to point tcp/ip connection and i want to encrypt and compress all data transferrd over this device (sm0 or ax25). i use http, pop, ssh, telnet, nfs, samba, ftp and many more with partly confidential data over this connection and i think the best solution would be to encrypt and compress on one side and to decrypt and decompress on the other side paticularly because the data is tranferred over the air and monitoring is absolute no problem. changing all protocols would be much more work a no real alternativ because same protocols have no secure alternativ (intranet http, samba a.s.o.). is there a solution for encrypting and compressing all trafic for a device (tcp and udp) with no big data overhead but if necessary cpu power? thx; bernd

There are several options available for TCP (I don't know about UDP). Check out http://www.vpn.outer.net/Unix___VPN_s/unix___vpn_s.html. There are several solutions listed there. I personally have set up secure TCP by encapsulating a PPP connection over SSH. It's a snap to set up but takes some overhead. -Dan
-----Original Message----- From: Bernd Thallner [mailto:bernd@kangaroo.at] Sent: Sunday, August 01, 1999 7:13 PM To: suse-security@suse.com Subject: [suse-security] network device encryption and compression
hi,
i have a 9600 b/s pocket net point to point tcp/ip connection and i want to encrypt and compress all data transferrd over this device (sm0 or ax25).
i use http, pop, ssh, telnet, nfs, samba, ftp and many more with partly confidential data over this connection and i think the best solution would be to encrypt and compress on one side and to decrypt and decompress on the other side paticularly because the data is tranferred over the air and monitoring is absolute no problem. changing all protocols would be much more work a no real alternativ because same protocols have no secure alternativ (intranet http, samba a.s.o.).
is there a solution for encrypting and compressing all trafic for a device (tcp and udp) with no big data overhead but if necessary cpu power?
thx; bernd
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com

You may want to look for Linux FreeS/WAN. (Freshmeat.net has links to it..) It may or may not be a drop-in solution, but I imagine it would work quite nicely for you. :) On Mon, Aug 02, 1999 at 01:13:18AM +0200, Bernd Thallner wrote:
hi,
i have a 9600 b/s pocket net point to point tcp/ip connection and i want to encrypt and compress all data transferrd over this device (sm0 or ax25).
i use http, pop, ssh, telnet, nfs, samba, ftp and many more with partly confidential data over this connection and i think the best solution would be to encrypt and compress on one side and to decrypt and decompress on the other side paticularly because the data is tranferred over the air and monitoring is absolute no problem. changing all protocols would be much more work a no real alternativ because same protocols have no secure alternativ (intranet http, samba a.s.o.).
is there a solution for encrypting and compressing all trafic for a device (tcp and udp) with no big data overhead but if necessary cpu power?
thx; bernd
-- To unsubscribe, e-mail: suse-security-unsubscribe@suse.com For additional commands, e-mail: suse-security-help@suse.com
-- Seth Arnold | ICQ 3172483 | http://cswww.willamette.edu/~sarnold/ I prosecute unsolicited bulk emails, using the RealTime BlackHole List. You should too. Ask me how, or visit http://maps.vix.com/rbl/
participants (3)
-
Bernd Thallner
-
Dan Shinton
-
Seth R Arnold