The bottom line is that a VPN could work, but Comcast can also block it. They don't mind if their subscribers occasionally use a VPN client to check email from home, for online banking, etc. They don't want permanent VPN connection to outside resources. That's what Comcast@Home Pro is for, which is what the FAQ posted previously refers to. For more info, see the article below or just google "comcast vpn" http://archive.infoworld.com/articles/op/xml/00/09/04/000904opfoster.xml Larry > > from current comcast support site: > > *** > FAQs : Connection : Troubleshooting > Can I use a VPN connection on the Comcast High-Speed Internet Service? > > Yes, you can utilize a VPN connection as a residential customer on the > Comcast High-Speed Internet Network. However, it is important to note that > Comcast Customer Care cannot provide technical support for your VPN > connection. For help setting up, using or troubleshooting your VPN > connection, please contact your company's IT department or VPN provider. > > If you are able to browse web pages, send and receive your Comcast.net > E-Mail, but are unable to use your VPN, the problem is not with your > Comcast High-Speed Internet connection. Please contact your VPN provider > for assistance. > *** > > > On Sat, 21 Feb 2004, mylist@xxxxxxx wrote: > >> Unfortunately, Comcast has another restriction for residential customers >> on their networks - no VPNs! :-( >> >> Larry >> >> > >> > I am planning on running a Virtual Private Network from my Fedora >> > firewall out to a UML virtual colo (running RH9) at another site. >> > That site will be the place I present services to the world; >> > httpd, ssh, sftp, smtp. This is to comply with the "no servers" >> > and dynamic ip restrictions on my Comcast connection to the net; >> > if my firewall always drives an outbound connection to the >> > colocation site, I am not worried about changes of ip address, >> > and I am not opening any inbound ports. >> > >> > There are a number of options for the VPN - the most attractive >> > are cipe ( http://sites.inka.de/sites/bigred/devel/cipe.html ) >> > and FreeSwan ( http://www.freeswan.org/ ), though I am told that >> > one can do all this through an ssh tunnel. I would rather have >> > simple and secure than super-duper; I have plenty of bandwidth, >> > and will send outbound http and smtp from the firewall, so the >> > main bandwidth user will be incoming spam/b/b/b/b mail. >> > >> > Anyone have some experiences to share about setting up VPN? Is >> > there anything about either cipe or FreeSwan that is likely to >> > break with FC1 or FC2? >> > >> > Keith >> > >> > -- >> > Keith Lofstrom keithl@xxxxxxxx Voice (503)-520-1993 >> > KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in >> Silicon" >> > Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs >> > >> > >> > -- >> > fedora-list mailing list >> > fedora-list@xxxxxxxxxx >> > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list >> > >> >> >> -- >> fedora-list mailing list >> fedora-list@xxxxxxxxxx >> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list >> > > > -- > fedora-list mailing list > fedora-list@xxxxxxxxxx > To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list >