full-disclosure - Long intevals on phase I rekey on VPN

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

From: daniels at ponderosatel.com (Daniel Sichel)
Subject: Long intevals on phase I rekey on VPN

We are currently struggling with SoftRemote VPN client software
connecting to a Sidewinder G2. The problem is the clients foul up the
phase one rekey process and drop the connection regularly. Needless to
say Citrix and the AS/400 don't thank me for that. I can set the phase I
rekey out pretty long and keep a connection up. My question is, am I
opening myself up to attack by doing this. The phase two rekey can be as
frequent as I like and not affect this, so I set those pretty low (rekey
often).

Let me know what you think.

Thanks, and Happy Hanukkah/Merry Christmas to all. 

Dan Sichel, Network Engineer
Ponderosa Telephone Company
(559) 868-6367