vpnlecture.html

黑客培训教程

<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and lastly</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; lastly</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; there must be a firewall wall in 
place (i say must but it is not a required element)</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; piksel ([e-mail]) 
has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; this fire wall can be either 
software, </P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- Ralph[a 
([e-mail]) has left #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; Ralph 
([e-mail]) has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; packet filter like ipfw/ipf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; or cisco pix</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; etc</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; lol</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; now on to QoS..</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; actually questions?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; no!</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; i guess not many could ask</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; with +m on</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; can you -m</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; no</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; i'm not an op</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; but you are</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well i don't know how to do it</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; oh well</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; oh wells</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; hehe</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; well, everyone!</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well that was VPN security 
fundamentals</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; message _Jonah_ for questions</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; now i mentioned</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;&lt;Phaedrus&gt; How is the encryption 
handled?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; encryption i will get into</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; but </P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; radius and tacas are what</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; there's different methods like 
DES,3DES,ipsec</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; etc</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; hydeph: those are authentication 
protocols</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; similar to MD5</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;th0rn&gt; wait, jonah, so a vpn is simply a 
p2p link between two shared networks? (jus need a confirmation)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; exactly</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;th0rn&gt; k</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Phaedrus&gt; (thought radius was a dialup user 
directory like X.400)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; can i ask an off topic question?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; hydeph: simply its the protocols 
used for authentication exchange...</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; sure</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; got it</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; how do you eat gummy bears?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; btw AAA is cisco proprietary</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; bite the heads off</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; and then eat the rest?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; of course</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; hm</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; those things are delicous</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;th0rn&gt; wait, so do p2p links between public 
networks or public and private networks have any special names?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; i eat them differently</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; first, bite the head of</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; hmm</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; in the olden days</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; then grab them with your thumb and 
index finger</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; p2p was over uucp</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; or dial up</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; so your thumb points at their 
backs</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; and rip their back open with your 
thumb</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; like when you dial up to AOL ;-p 
its a direct connection to their server</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Phaedrus&gt; (no it's not)</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; dminus01 
([e-mail]) has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;th0rn&gt; heheh, unfortunately ;-p</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; ralph: you have to bite off their 
extremeities first</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; the little nub feet and arms</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; hydeph, too small</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; so i shal continue with QoS</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;hydeph&gt; it takes skill</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; hm, possibly</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; _Trick- 
([e-mail]) has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;Ralph&gt; i like back ripping more</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;th0rn&gt; so p2p links between other types of 
networks don't have any special names?</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;b0ttyburp&gt; pls carry on very good so far 
happyhacker approved grrrrrrr... nice1 DF for kicking asshole</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; Guest1021 ([e-mail]) 
has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; they are callled p2p links</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;DigitalFallout&gt; lol</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; rpc ([e-mail]) has 
joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; vpn just imparts security over 
those p2p links</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and the p2p in VPN is VIRTUAL</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; although the packets are sent 
through public network</P>
<P style="MARGIN-BOTTOM: 0cm">--- rpc is now known as _rpc-</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; since ints encrypted its provides 
a virtual p2p</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; i hope that cleared that up for 
you</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok next QoS for VPNs</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; T]-[3_RiPP3R 
([e-mail]) has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- T]-[3_RiPP3R 
([e-mail]) has left #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; unlike regualr tcp/ip trans</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; you beat me</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ;-p</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;DigitalFallout&gt; :)</P>
<P style="MARGIN-BOTTOM: 0cm">--- Guest1021 is now known as kf26t3a</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ulike regular tcp/ip transport</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well lemme explain regular</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; you got a packet</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; suppose ur on DSL</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and ur downloading something from 
yahoo</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; the data gets sent around the 
internet crossing routers</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and that data is inspected at each 
router (each hop)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; for data integrity</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; etc</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well not every hop</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; but</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; nevertheless</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; its hard to ensure QoS in a VPN 
environment beacuse</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; i hope i'm not getting ahead of 
myself</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; but just take this in stride i 
will explain it later</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; on packet formation</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; btw</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; 
http://unixd.com:81/lecture/vpn1.gif</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; i put a graphic</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; of a vpn up on there</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; ok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; i sure i gave you enough time to 
get it</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; well</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; QoS is imparted in a VPN</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- hydeph has quit ()</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; by redesigning of the headers</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; since the headers are different in 
VPN compared to</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; those in regular TCP/IP 
transport</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; the intermediate</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; routers are unable to do the 
regular checksum test for integrity</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; so</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; the QoS is primarily done at both 
endpoint</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; endpoints</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; of the p2p connectok</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; connections</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; shit</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; connection</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; b/c the VPN Gateway has the 
software to diagnose those packest</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; other forms of QoS</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; is Packet prioritizing at the 
gateway</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- _Trick- 
([e-mail]) has left #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and traffic shaping</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; and weighted fair queing</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; all those ensure that packets get 
a fair chance or more important packets</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; get dominant transfport rights 
over the others</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- dminus01 has quit (Ping timeout: 180 
seconds)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- DigitalFallout has quit (Remote closed the 
connection)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; so that time dependant data can 
arrive efficiently at the other endnode</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; i would also like to mention</P>
<P style="MARGIN-BOTTOM: 0cm">--&gt; Trick 
([e-mail]) has joined #bsrf</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; QoS is very difficult to employ on 
dial up vpn users</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; mainly b/c</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; they are taking so many hops 
around the shared network</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; unlike typicially with branch 
users</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;-- CHAOS has quit (Ping timeout: 180 
seconds)</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; they connect to the same telco 
ISP</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; lastly</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; VPN management</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; is quite simple</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; the most effective way is via 
telnet/ssh, CLI editing</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; CLI=command line interface</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; also management can be done at the 
CA</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; the certificate authority 
server</P>
<P style="MARGIN-BOTTOM: 0cm">&lt;_Jonah_&gt; something i will get into in a