How to configure FTP through SoftEther VPN

[zebi]

Hello

I have configured SoftEhter VPN client and server in a LAN, and it is working fine. but when i access FTP server on the same machine where SoftEther VPN Server is running then all the information in terms of authentication goes in plain text, when i check traffic from wireshark the username and password of FTP server appears in plain text although i have enable encrypted option from the settings of the user account. Please guide me to solve this problem with softEhter, moreover i have to configured it with SMTP for secure mail transmission later.

Thank You

[kh_tsang]

Are you using SecureNAT?

[zebi]

No, I am not using SecureNAT. I just have configured Windows 7 IIS FTP server to check that the VPN connection is secure, and when I access FTP server on which SoftEther Client make connection to the SoftEther Server the credentials are not encrypted bye the VPN.
Please show me the steps how to secure FTP connection so I can configure SMTP server for secure mail forwarding.

[kh_tsang]

When you are checking whether the connection is secured by the VPN, you should observe using your original adapter for internet traffic. At the same time, the traffic to the IP address of the VPN Server will not go through the VPN so you may want to use a dedicated IP for the VPN server.

*VPN is encrypting your traffic between the client and the VPN server and will be decrypted at the VPN server side, not encryption between client and your FTP server. If you want to have encryption between the client and your FTP server, you should use FTP over SSL instead.

[zebi]

So how do we configure SMTP for example Thunderbird over softEther VPN. if it encrypt traffic between client and server then how we can check that mails are going to forward encrypted

[kh_tsang]

Do a packet capturing on your original NIC. Make sure the destination IPs are different, you may connect to the SMTP using a private IP address.

[zebi]

Hello
we have configured softEther VPN client and server on two computers working on a LAN. it is seems to be working fine, my question is this that is there any procedure or technique to observe that the connection between server and client is secure and how we can check that traffic between client and server is encrypted for example if we use wireshark packet capture tool to monitor traffic between client and server how can we generate traffic between client and server to ensure our traffic is secure through tunnel which formed by softEther VPN.
moreover if you suggest any web based application to check the functionality of the VPN which gives proof of secure communication.

Thank You

[kh_tsang]

You will not be able to see your password if the content is encrypted.

[zebi]

yes i know that i would not be able to see my password when it is encrypted, but now i can see my password in plain text and it is not encrypted, how can we check that SoftEther encrypt traffic between client and server.
can you suggest any scenario regarding it

[kh_tsang]

For example, there is an adapter eth0 and vpn_vpn is the adapter connecting to the virtual hub.

If you do packet capturing on vpn_vpn, of course you will see the password is sent in plain text. You should do packet capturing on eth0 which is the original internet connection instead of vpn_vpn. If you cannot see the password, then it is encrypted by the VPN.

If you want to see encrypted packets on vpn_vpn, you should use FTP over TLS instead of VPN.

[zebi]

Okay

Lets have a scenario , if i have a mail server working behind the softEther VPN server, so if i mail from a client machine which also have installed SoftEther VPN client agent, so when i mail it from client machine then it goes through VPN tunnel and encrypted mail should be transferred from client to the server machine. i can use Thunderbird mail client to generate and send the mail

[thisjun]

Which interface did you capture packets?

[zebi]

I am capturing packets on softEhter virtual adaptor.

[thisjun]

You should capture packets on physical interface.