Re: Remote networking / VPNs

["Rob Dobson" <ukha@xxxxxxxxxxxx>]

Tim,

In the VPN world this is more commonly known as "split
tunnelling".

Its something that gets security types very excitable. The idea is
that if you disable split tunnelling all traffic goes via the VPN,
whether its meant for systems locally, at the other end or on the
internet etc..

So security people like it as all traffic goes via systems under
there
control so they can make sure confidential type stuff does not get
re-
routed somewhere else if the system has been compromised, you are
not
browsing restricted sites on a corporate device etc..

>From an end user point of view it can be a pain, imagine the
scenario
where you have a small LAN with a network attached printer, you
connect into a VPN that has split tunnelling disabled, you can  no
longer print to that local printer - so it becomes an inconvenience.

Cheers,

Rob



--- In ukha_d@xxxxxxx, "Tim Hawes" <timsyahoo@...> wrote:
>
> On 9/28/06, Jim Noble <yahoo-groups@...> wrote:
> >
> > > "split routing" ??
> >
> > ie. home network stuff goes via VPN, wider internet stuff goes
> > direct. That's split routing. The alternative is to send
everything
> > via the VPN.
>







** Sponsored by http://www.BERBLE.com **
all the Cool Stuff, in one Place