VPN'ing out of China...

...long time, no see. How is everybody?

I got a friend outside Beijing near Tsingtao who is hemmed in by
the Chinese Great Firewall. I've got her PPTP'ed into an old W2K
server I use in my office, but she got disconnected. I cleared the
mgm't console and she reconnected fine, but I'm not sure that is
the problem. The ISP rolls her into a new ip every day from the
looks of it and am wondering if they blocked her on an old ip addy.

Would SSL (OpenVPN) be a better option for her? I can add the
module to my gateway (IPCop), which suits me better than her
coming into the network. I was supporting PPTP users (sales reps
and engineers) from China two or three years back, and we'd have
sporadic problems. She's not pulling a lot of bandwidth so far.

Opinions? Thanks, BC

Greetz BrokenCrow. :)

And yes has been awhile, were you been? What have you been upto?

anyhow to your question, check out this site> http://ya.iyee.cn/2009/03/10-handy-t...ypass-gfw.html

now i've re-read your initial post and you have not mentioned exactly why your friend needs this outside connection?

anyhow glad to see you back. ;)

cheers
kris...:thumbsup:

Just doin' the support thing, t34b4g5. Life is...life is. It's a Zen thing.
Yeah, a Zen thing.

Anyway, Maggie's over there teaching and like any normal red-blooded
(even blue-blooded) American male, I'm thinking I'll get "lucky" when she
gets back. Does that work? ;)

I was just wondering what experience admins have had here. At "The
Machine" where I supported remote users in China, we had all kinds of
PPTP issues, but some of that was due to the MPLS implementation,
and some, who the feck knows?

Cheers...

I supported a small manufacturing outfit in Wuxi, China (really small town only 4 million people).

Anyway, I eventually broke down and used CISCO VPN Clients. PPTP just didn't work and SSL - **** would work for about 12 hours and then never work again until ipconfig /release && ipconfig /renew.

The best way for personal use is to use TOR. Do not use the FF plugin - that sucks.
Oh and disable all FF plugins (except noscript)

Once TOR is configured, your PPTP connection should work perfectly. Except of course when the ISP just blinks out of existence for 2 hours every second Monday of each month.

Quote:

---

Anyway, Maggie's over there teaching and like any normal red-blooded
(even blue-blooded) American male, I'm thinking I'll get "lucky" when she
gets back. Does that work? ;)

---

HAHA...

So does the chinese government block any connection that wants go out??? Sorry I am out of the loop here ...

Jsut read the T0r post ... T0r is dreadfully slow though. I use it on a VM with IE (Jsut insert local host proxy details) but yeah, slow as death! But on the other hand it gets the job done if you want to encrypt ...

Cider Tor is not slow the Internet in S.A. is. Not sure where I read it but some companies in SA are looking at homing pidgins and USB sticks to transfer data because homing pidgin is FASTER! :Shock:

Tor does NOT entirely encrypt either. What gets encrypted as I understand
it is everything between you and the Tor server and within the Tor network,
but from Tor to the destination website goes unencrypted. But inside a PPTP
tunnel certainly would give things an added dimension.

Personally, I wonder about Tor sometimes. Tor servers are often found on
military bases here in the US (don't ask how I know), and it is a Navy project
originally. In my more paranoid moments, I often wonder if they aren't a honeypot
of sorts. But then, any ISP is a honeypot of sorts, too, I suppose.

I'll suggest Tor to Maggie if she's up to it. Thanks, Dino.