free s/wan

[Siglite <siglite () criticalstop com>]

Has anyone out there done a real serious penetration test on free s/wan?

Free s/wan listens on a few services, and I was wondering if anyone's
attempted to break these.  Also, could anyone give me a quick sanity check
for my proposed implementation of it.....


1. Linux 2.0.36 on both ends
2. NAT on both ends for protected rfc 1918 addresses
3. Strongly secured linux boxes, ie: ONLY the sshd and free s/wan
   services running, and using firewall rules and built in tcpwrappers
   (hosts.allow) 


/*-----------------------------------*/
/* I live with FEAR every day.       */
/* But, sometimes, she lets me RACE. */
/*-----------------------------------*/

KT Morgan
Network Engineer
Checkpoint Firewall-1 CCSA/CCSE
Microsoft MCP
Software Systems Group, Inc


the compaq support website, crib notes version:   
"you cant do that."