iVPN - graphical interface to ipseccmd Files

TauVPN 0.50beta2
----------------

Author: Stefan Markowitz	stef6510@users.sourceforge.net
	Based on Nejc Skoberne's iVPN



This version runs under W2k, XP, Vista and Windows 7.


System requirements:

Windows 7
---------

No special requirements.



Vista SP1
---------
Hotfix KB957624 http://support.microsoft.com/kb/957624

WLAN requires SP2.


Installation and configuration must be done as administrator.

Debug-mode: "Global Settings -> Advanced -> Enable Debug Logfile" - this will log the TauVPN-service to windows\debug\TauVPN.log.
Unfortunately, the Oakley-log does not work in this version under Windows 7 and Vista.
	    


XP
__
Support tools (complete install). There are different versions depending on the servicepack!



W2k
---
Resource kit





----------------------------------------------------------------------------------------


Version 0.42
------------

New features:
Improved installer - checks for support tools or resource kit and if missing, it suggests to download the requiered files (opens browser).
Drive mapping after connect (with user/passwd dialog, the password is not stored in the ini file)
Connect before login (experimental) - works only if the IPs of client and server do not change.
Handling of simultaneous connections improved.


Changes:
Location of debug logs changed to %SystemRoot%\debug (suggested by Stefan Kanthak, thanks!)
The icons for creating or deleting locations are not showed when logged in as non-admin user. 
Some code cleanup



Version 0.41
------------

New feature:
Debug mode (logs to C:\TauVPN.log)
Global settings -> Advanced -> Enable Debug Logfile
This setting will not be saved. The Log will be deleted each time the
debug mode gets enabled.

Bugfixes:
Previous versions did not work if the CA-subject string was too long.
0.40 raised exceptions when the programm was started before the service was running.



Version 0.40
------------
New features:
GUI facelifted
Multiple connections at the same time possible
Simple certificate manager (allows to view and delete certs)
Shows connection time
3DES/DES - MD5/SHA PFS configurable
Suspend of the OS fully supported (reconnects on Resume automatically)

Bugfixes:
Does not say "Connected to unknown host."
No more occasional exceptions (I hope)
Problem with mouse focus should be gone


Version: 0.37
-------------
Bugfixes: 
Does not say "Connected to unknown host." (XP SP2)
No error messages when clicking into empty connection list.

New features:
Supports suspend of the OS. (Disconnects when entering suspend mode).
Ping to remote host can be disabled.


Version: 0.36
-------------
Bugfixes:
Automatic local IP detection should work better now (especially if you use WLAN)
Certificate import: path to the certificate may have spaces now

New feature:
Automatic drive mapping (to a Windows share) after connect and un-mapping at disconnect
This is an experimental feature at this time.
To use it, the following line must be entered in the TauVPN.ini file:
DrvMap=x: \\ip_of_server\share_name password /USER:username
Be aware that the password is plaintext!


Version: 0.35
-------------
New features / fixes:
Ping to remote host (local ip) every 10s in order to keep the connection alive.
On some systems, it disconnected after a very short time of inactivity.
Ping to remote host (public ip) before trying to connect.


Version: 0.34
-------------
New features:
PMTUD checkbox added (Path MTU discovery, disable this if you have problems when transferring data through the tunnel)
Restart policy checkbox added (restarts the policyagent - it seems to lock up sometimes under W2k)
Server subnet 0.0.0.0/0.0.0.0 now supported 
Connection can be established very fast (under XP, try the setting 'Number of pings when connecting' to 1 or 2)


Version: 0.33
-------------

New features:
Certificate import builtin (thanks to Matt)
PSK support added
Enable Oakley logging added
External log viewer (tail for win32 by Paul Perkins - thanks)
Keylife now can be adjusted

PSK support is intended for testing purposes - it is easier to get it running :-)
Though it is not recommended because of less security and -
in this version, the PSK is stored as cleartext in the ini file!




Version: 0.32
--------
Documentation: Not completed, please read Nejc's README.txt

You will need Marcus Mueller's msc plugin to import the certificate. (http://vpn.ebootis.de)

PSK not supported in this version. 
   
Changes: 
Runs under Windows XP and Windows 2000
Does not need admin rights.
Runs with dialup (iVPN 0.20 did not when there was an Ethernet adapter besides
the dialup PPP adapter, it detected falsely the Ethernet's IP as local IP address).

Bug in connection status (color of the icon) removed.

Now it does not try to connect when no local IP is detected.


XP:
---
ipseccmd must be installed (XP Support Tools - complete install)
Be sure to install the correct version of the Support Tools (depending on SP2)
Runs with SP2 and activated firewall.



W2k:
----
SP2 or higher required.
ipsecpol must be installed (Resource Kit) into "%ProgramFiles%\resource kit". 

The path to ipsecpol.exe must not be entered in the ini-file. In this version
this line in the config file is not used.
If you are using a firewall, ping to the remote server's local ip must be
allowed.


Installation:
Run TauVPN-040-setup.exe
You can install over an existing installation, the ini file will be
preserved. The service (of the old installation) will automatically be
stopped and removed.

The service will be installed and started. No reboot requiered.


The ini file: (TauVPN.ini)
--------------------------

There is a new parameter in the ini-file:
CleanRegistryAtExit=0|1 - This applies to W2k and XP only.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Use this parameter with caution!
If set to 1, it deletes the following registry key at exit:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local
After deleting, the ....\Local key gets recreated.
This is tested on XP Home SP2 and W2k SP4, and it seems to do no harm.
Though it might be better to make a backup of the registry before activating
this parameter. 





Tested with:
------------
XP Home SP2
XP Professional SP2 and SP3
W2k Professional SP2 and SP4
Vista Business SP1 and SP2
Windows 7
Windows 7 64Bit

Interoperability:
Tested with IpCop 1.4.0, 1.4.2, 1.4.6, 1.4.10, 1.4.21 (W2k and XP)
Tested with IPCop 1.4.21 (Vista and Windows 7 - there may be compatibility issuses with old versions of IPCop!)
Tested with mOnOwall 1.2 
Thanks to Bjrn Euler http://www.edain.de/howtos/wlan_protection.shtml


If it does not work
-------------------
Please try Marcus Mueller's commandline tool, which is known to work in most cases (W2k and XP only, it does not work under Vista or Windows7). If
this does not work too, you probably made some error on the ipsec server
configuration or the certificate is invalid.
If in doubt, restart Windows.



Uninstalling:
It can be uninstalled via control panel -> software.
Alternatively, you can uninstall the service manually:
net stop TauVPNService
programdir\TauVPNSVC_ /uninstall


Please send Bug reports and suggestions to stef6510@users.sourceforge.net

Have fun :-)

Thanks to
---------

Nejc Skoberne	
Marcus Mueller	
Nate Carlson	
Jordan Russel (Inno Setup)
Matt (certimport)
Paul Perkins (tail for win32)
Christiaan Theron (beta testing, docu)
Jerry Ryle (Delphi APM component)