OpenVPN is a perfect example of getting it right after having seen all the things that're wrong with IPsec. It's easy to configure, it logs sensible stuff and, above all else, it usually Just Works. I like it.

There's a real chance that it'll be superseded by the new VPN and tunnelling features in OpenSSH, though, now they've given in and support tun/tap for tunnelling (which means that finally it's possible to forward more than single TCP ports).

(Reply to this) (Thread)

The problem with OpenVPN is that it's impossible to create a LAN-LAN connection with it. Aside from that, it does seem to work fairly well. I got it downloaded and built late last night. It's definitely Tunnelblick that's screwing up the remainder of my network settings, as without it, OpenVPN establishes the tunnel without touching anything else.

(Reply to this) (Parent) (Thread)

What's the problem with LAN-LAN? I've bridged LANs together with OpenVPN, I've routed LANs together with OpenVPN, everything worked, even with WinDOS.

(Reply to this) (Parent) (Thread)