SDSL/Linksys to @home cable/linksys VPN

[dmsmed]

Is there anyone who knows how to network via VPN my Telocity SDSL (fixed IP)/4 port Linksys to a relatives @home cable/4 port Linksys? :D

[cyberskye]

excite@home in greater DC area uses NAT and that prevents most tunneling protocols at the network level. For this very reason I have DSL to connect to my office and my cable modem for browsing/downloads. I am told that there are differences from area to area. Have them check their AUP concerning tunneling and that should tell you straight away.

Cheers

[dmsmed]

What is an AUP?

[cyberskye]

That's what I said when @home told me to read it before my service got cut
Acceptable Use Policy

The 200page agreement you make with them so that they can turn around and kill your service for any reason.

Cheers

[dmsmed]

Is that acceptable use policy?

[dmsmed]

What would be the best way to transfer large files using this hardware/provider combination. :)

[cyberskye]

Easiest would beto set up an FTP server on your side. That way, you are hosting the service so the cable users won't get into trouble. If you have a firewall, allow ftp from their ip address. They can upload to your server using command line or free ftpclients.

I have heard on other threads that AT&T@home allows servers now. If that is their ISP you may be ok, but NAT may still be an issue. Lotsa variables.

[dmsmed]

Can I do this securely using a Linksys with other machines on the router?

[cyberskye]

Sorry for the delay - was on the road for a bit. I had assumed by the original post that you already had access to vpn server sw. There are manual ways to make the connection more secure (forward ftp ports only when needed) - but there is always a window of opportunity when you aren't using strong authentication (and, unfortunately, even when you are).

There are A LOT of complications that go along with ftp. It is not at all secure, there are multiple modes of ftp, it doesn't play well with NAT in general (depending on the mode).

you can always forward the ftp port to a specific machine through the router. Linksys' latest firmaware handles pptp passthru pretty well, but VPN sw costs money.

comcast@home scans me regularly for open ports (servers violate my acceptable use plicy) and they are pretty quick to send nasty, threatening emails. You could always use a non-standard port for ftp...but that takes some configuration and coordination with those who will access your server. I charge by the hour, not the job;-)

Good luck,

Skye

[ 05-01-2001: Message edited by: cyberskye ]