Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Forums › Vodafone New Zealand › Issues with PPTP VPN


6328 posts

Uber Geek
+1 received by user: 391

Moderator
Trusted
Lifetime subscriber

Topic # 203178 20-Sep-2016 17:06
Send private message

Seems I can't VPN to our office while tethered to my phone on Vodafone 4G. I did find a post here on GZ where if I change the APN from vodafone to internet it works.

 

Just want to check if anyone here also has this issue, Vodafone on Twitter have asked me to get in touch, but want to make sure it's not my settings first.

Create new topic
622 posts

Ultimate Geek
+1 received by user: 12


  Reply # 1636711 20-Sep-2016 17:27
Send private message

Havent tried it.. but I also had a few problems with android phones and tethering I, in the end bought

 

a app for rooted devices which seem to solve DNS resolving etc called WiFi Tether Router

 

 

 

they app dev also replies to emails to resolve issues think it cost $5 or so to buy though.

 

 

 

it also fixes some apn issues for various brand of phones

 

 

 

https://play.google.com/store/apps/details?id=net.snclab.wifitetherrouter&hl=en

 

 

 

 

 

seems various android builds also have weird issues or dont work

4962 posts

Uber Geek
+1 received by user: 1134

Moderator
Trusted
Lifetime subscriber

  Reply # 1636713 20-Sep-2016 17:44
Send private message

I wonder if they're not supporting PPTP ports, etc, on a particular APN anymore.... I mean it's pretty old insecure stuff.  MacOS Sierra just deprecated PPTP support completely so stands to reason others will be doing the same.  

BDFL - Memuneh
61506 posts

Uber Geek
+1 received by user: 12225

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1636935 20-Sep-2016 22:51
2 people support this post
Send private message

If you are using this for work you SHOULD NOT be using PPTP. PPTP is unsecure, and keys exchange can be easily cracked.

 

If you want a VPN either get a router with built-in L2TP/OpenVPN, run a Windows Server with a SSTP VPN (need a SSL certificate), or a small Linux box with OpenVPN.

 

DO NOT USE PPTP.

 

 

 

 

 

*EDIT* SSTP is really only good if all you use is Windows servers and clients.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

622 posts

Ultimate Geek
+1 received by user: 12


  Reply # 1636937 20-Sep-2016 22:55
Send private message

i thought it was only man in the middle where its weak? means someone needs to setup a fake wifi hotspot

 

or access to router

1639 posts

Uber Geek
+1 received by user: 419


  Reply # 1636938 20-Sep-2016 22:55
Send private message

^!

So many solutions to this it's not funny. And cost is nothing, not that cost should even be a concern here.

Edit: this was endorsing freitasms post.

BDFL - Memuneh
61506 posts

Uber Geek
+1 received by user: 12225

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1636940 20-Sep-2016 22:58
One person supports this post
Send private message

kiwigeek1:

 

i thought it was only man in the middle where its weak? means someone needs to setup a fake wifi hotspot

 

or access to router

 

 

PPTP challenge and response needs only 2^56 combinations to crack.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

1639 posts

Uber Geek
+1 received by user: 419


  Reply # 1636943 20-Sep-2016 23:05
One person supports this post
Send private message

Fwiw, vodafone started blocking pptp maybe 6 or so years ago.

622 posts

Ultimate Geek
+1 received by user: 12


  Reply # 1636944 20-Sep-2016 23:06
Send private message

but it says Since the attacker can eavesdrop on the challenge and response, CloudCracker therefore only needs to try out all 256 possible DES keys 

 

eaves drop.. which means the attacker has to be on your network 

 

we recorded an iPhone's PPTP login process on an encrypted WLAN by using the arpspoof tool. With the tool, all of the iPhone's network traffic 

 

so the sniffed the traffic.. its not like that broke into the encrypted tunnel once its connected to the pptp server 

 

unless im missing something. 

 

sure i can seed plaintext is silly and weak but they still have to sniff (man in the middle attack)

BDFL - Memuneh
61506 posts

Uber Geek
+1 received by user: 12225

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1636945 20-Sep-2016 23:07
Send private message

Nowhere Nate says he only uses this PPTP on mobile. For all we know he could be using this on a conference WiFi, hotel WiFi or somewhere else. And that's where the real danger is.

 

Regardless of being on mobile PPTP is not safe. 




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

622 posts

Ultimate Geek
+1 received by user: 12


  Reply # 1636946 20-Sep-2016 23:10
Send private message

yes I get that..and agree with you and indeed openvpn is way to go.. but

 

its only as weak how you use it as long as you know to only use it from home to work

 

 

 

and sure no trojan sniffers exist..

 

 

 

 

 

nothing is ever safe as we all know.. NSA and hackers can get in if they are determined

1639 posts

Uber Geek
+1 received by user: 419


  Reply # 1636948 20-Sep-2016 23:12
Send private message

*facepalm*

21534 posts

Uber Geek
+1 received by user: 4387

Trusted
Subscriber

  Reply # 1636950 20-Sep-2016 23:16
Send private message

I only use PPTP for my router that my TV and consoles sit behind to get them on a US IP address. I wouldn't trust it for anything that mattered with all the exploits, its just a $30 router does PPTP and not openVPN which is the other options supported.




Richard rich.ms

BDFL - Memuneh
61506 posts

Uber Geek
+1 received by user: 12225

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1636951 20-Sep-2016 23:18
Send private message

Fritzbox and Synology Router both do L2TP and OpenVPN.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

21534 posts

Uber Geek
+1 received by user: 4387

Trusted
Subscriber

  Reply # 1636952 20-Sep-2016 23:21
Send private message

freitasm:

 

Fritzbox and Synology Router both do L2TP and OpenVPN.

 

 

For the wan? Or just accepts incoming connections over it?




Richard rich.ms

BDFL - Memuneh
61506 posts

Uber Geek
+1 received by user: 12225

Administrator
Trusted
Geekzone
Lifetime subscriber

  Reply # 1636953 20-Sep-2016 23:23
Send private message

Both connect over to and can be configured as server to accept incoming connections.




Backblaze cloud backup (personal and business) | Geekzone broadband switch | Amazon (Geekzone aff) | MightyApe (Geekzone aff) | 

 

My technology disclosure  | Business Transformation | Enterprise Content Management | Customer Relationship Management

 

 

Create new topic

Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.