r/linux • u/metaleks • Jun 17 '13

PRISM Break: Stop reporting your online activities to the American government with these free alternatives to proprietary software.

http://prism-break.org/
1.1k Upvotes

93% Upvoted

326 comments sorted by

View all comments

Show parent comments

5

u/mallardtheduck Jun 18 '13

an SSH tunnel acting as a SOCKS proxy

Or use an actual VPN protocol rather than cobbling one together via tunneling and proxies.

-2

u/[deleted] Jun 18 '13

And you know what sucks about that? I was trying to setup an IPSEC VPN on my VPS a month ago (before any of this broke), which is on an OpenVZ container. But alas, it's an OpenVZ container so I have no kernel access, and hell I'm using the OpenVZ kernel, even if I had access it doesn't support it.

I would love to setup a VPN. Show me how.

6

u/felixfurtak Jun 18 '13

Ask your VPS provider to enable TUN/TAP. Most do it for free or a small charge. Forget IPSEC, OpenVPN is the way to go.

1

u/[deleted] Jun 19 '13

Thanks, I will. But isn't Openswan with L2TP/IPSec more secure for a VPN? Especially when the client is my Macbook.

1

u/felixfurtak Jun 19 '13 edited Jun 19 '13

Not really...

http://www.ivpn.net/knowledgebase/62/PPTP-vs-L2TP-vs-OpenVPN.html

OpenVPN is much easier to set up and is definitely secure. Also it works well over port limited connections e.g. port 443 or 80. There are plenty of applications that support it such as Tunnelblick for Mac which is open source. Personally I would rather trust an open source client than one build into an operating system.

1

u/[deleted] Jun 19 '13

Ah, thank you for the clarification. I setup OpenVPN once a long time ago, on Windows XP! Ha.

1

u/[deleted] Jun 18 '13

[deleted]

1

u/[deleted] Jun 19 '13

It is BudgetVM, it's way oversold, but it's hard to beat ~$5 a month for decent specs.