> well one way or another there will be at least one externally
> addressable open port
Even that can be made temporary if you implement port-knocking. But I don't.
> If you are
> providing a VPN for people to use from home then a PPTP or openVPN thing
> will be fine because they can get out directly on the right port.
IME OpenVPN is *much* easier to use than PPTP if you've got cheapo NAT
routers in play. And as there is a Windows client available, it's a fairly
simple choice...
> If you
> have users who need to access the VPN from more challenging locations
> then take a look at adito which is a fork of ssl-explorer which was GPL
> then got relicensed and unfreed by Baracuda. This allows you to use a
> browser and a java applet to get at stuff through proxies and somewhat
> locked down PCs
And for relly tricky situations, look to iodine :-)
http://code.kryo.se/iodine/
Vic.
