Hallo ,

I need your help .....
Our office has a webbased application (using LAMP - Linux Apache Mysql Php) in a Slackware Linux server at our office. We have 3 branches located at other cities. We want to access the application from each branch using simple browser, but the application MAY NOT be accessed by public. The cost must be as cheap as possible.

*) Is there any other solution cheaper than VPN ?

*) Is it possible to access the webserver via VPN ?

*) Planning: client browser (windows) with dynamic IP => internet => Router + Firewall (slackware Linux) => webserver (Slackware)

Where is the best position for VPN, the same as webserver or in the Router+Firewall server ?

*) Is it possible to use dynamic IP for Router+Firewall server ? Or it must be static IP ?

Any suggestion is very helpful.
Thank you very much.
Best Regards,
= gio =

http://www.cyberciti.biz/tips/iptabl...filtering.html may help.

but there's likely more options than just iptables.

Hi Habitual,

Many thanks. I'm trying to solve it using OpenVPN (openvpn.net). A friend told me to use 2 vpn+firewall+router hardware like Cisco's vpn or dlink DFL family.

If using OpenVpn, at server side i just need a linux box for vpn+firewall+router, another linux box for application (LAMP). And at client, just use the OpenVPN GUI for windows.

But using second solution, i still don't know, beside the application linux box, do I need 2 hardware (at server & client side), or just need 1 hardware (at server side) and use software at client side.
If any body having information about this, please share.

Thanks
Gio

Hi,

found this at another forum :

*) using cisco vpn+firewall router at server (support IPsec) & software client for windows client

*) using OpenVPN in a linux box (vpn + iptables) - another linux box for LAMP. Using OpenVPN GUI for windows client.

Thanks