Issues with PPTP VPN

Forums › One New Zealand (including Vodafone, WxC, Farmside) › Issues with PPTP VPN

nate

6473 posts

Uber Geek

Retired Mod

Trusted

Lifetime subscriber

#203178 20-Sep-2016 17:06

Seems I can't VPN to our office while tethered to my phone on Vodafone 4G. I did find a post here on GZ where if I change the APN from vodafone to internet it works.

Just want to check if anyone here also has this issue, Vodafone on Twitter have asked me to get in touch, but want to make sure it's not my settings first.

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1636711 20-Sep-2016 17:27

Havent tried it.. but I also had a few problems with android phones and tethering I, in the end bought

a app for rooted devices which seem to solve DNS resolving etc called WiFi Tether Router

they app dev also replies to emails to resolve issues think it cost $5 or so to buy though.

it also fixes some apn issues for various brand of phones

https://play.google.com/store/apps/details?id=net.snclab.wifitetherrouter&hl=en

seems various android builds also have weird issues or dont work

gehenna

8495 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

#1636713 20-Sep-2016 17:44

I wonder if they're not supporting PPTP ports, etc, on a particular APN anymore.... I mean it's pretty old insecure stuff. MacOS Sierra just deprecated PPTP support completely so stands to reason others will be doing the same.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1636935 20-Sep-2016 22:51

If you are using this for work you SHOULD NOT be using PPTP. PPTP is unsecure, and keys exchange can be easily cracked.

If you want a VPN either get a router with built-in L2TP/OpenVPN, run a Windows Server with a SSTP VPN (need a SSL certificate), or a small Linux box with OpenVPN.

DO NOT USE PPTP.

*EDIT* SSTP is really only good if all you use is Windows servers and clients.

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1636937 20-Sep-2016 22:55

i thought it was only man in the middle where its weak? means someone needs to setup a fake wifi hotspot

or access to router

MadEngineer

4271 posts

Uber Geek

Trusted

#1636938 20-Sep-2016 22:55

^!

So many solutions to this it's not funny. And cost is nothing, not that cost should even be a concern here.

Edit: this was endorsing freitasms post.

You're not on Atlantis anymore, Duncan Idaho.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1636940 20-Sep-2016 22:58

kiwigeek1:

i thought it was only man in the middle where its weak? means someone needs to setup a fake wifi hotspot

or access to router

PPTP challenge and response needs only 2^56 combinations to crack.

MadEngineer

4271 posts

Uber Geek

Trusted

#1636943 20-Sep-2016 23:05

Fwiw, vodafone started blocking pptp maybe 6 or so years ago.

You're not on Atlantis anymore, Duncan Idaho.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1636944 20-Sep-2016 23:06

but it says Since the attacker can eavesdrop on the challenge and response, CloudCracker therefore only needs to try out all 256 possible DES keys

eaves drop.. which means the attacker has to be on your network

we recorded an iPhone's PPTP login process on an encrypted WLAN by using the arpspoof tool. With the tool, all of the iPhone's network traffic

so the sniffed the traffic.. its not like that broke into the encrypted tunnel once its connected to the pptp server

unless im missing something.

sure i can seed plaintext is silly and weak but they still have to sniff (man in the middle attack)

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1636945 20-Sep-2016 23:07

Nowhere Nate says he only uses this PPTP on mobile. For all we know he could be using this on a conference WiFi, hotel WiFi or somewhere else. And that's where the real danger is.

Regardless of being on mobile PPTP is not safe.

kiwigeek1

637 posts

Ultimate Geek
Inactive user

#1636946 20-Sep-2016 23:10

yes I get that..and agree with you and indeed openvpn is way to go.. but

its only as weak how you use it as long as you know to only use it from home to work

and sure no trojan sniffers exist..

nothing is ever safe as we all know.. NSA and hackers can get in if they are determined

MadEngineer

4271 posts

Uber Geek

Trusted

#1636948 20-Sep-2016 23:12

*facepalm*

You're not on Atlantis anymore, Duncan Idaho.

richms

28168 posts

Uber Geek

Trusted

Lifetime subscriber

#1636950 20-Sep-2016 23:16

I only use PPTP for my router that my TV and consoles sit behind to get them on a US IP address. I wouldn't trust it for anything that mattered with all the exploits, its just a $30 router does PPTP and not openVPN which is the other options supported.

Richard rich.ms