[pptp-server] Win 95/98 128 bit Encryption

[Phil Van Baren]

Jim,

The version of pppmac.vxd in msdun128.exe (the 128-bit update for Win98SE)
is 4.10.2222, and has internal name "PPPMAX (US/Canada Only, Not for
Export)"  It appears that the 40-bit and 128-bit files can have the same
version numbers.

I was able to get Win98 (classic edition) to work at 128-bit by first
installing the normal updates to get it to work at 40-bit, and then
extracting the pppmac.vxd from the msdun128.exe file, putting it in
c:\windows\system, and rebooting.  You can use an FTP web search to find the
msdun128.exe file, and use WinZip to extract the pppmac.vxd file from
msdun128.exe.

Phil
  -----Original Message-----
  From: pptp-server-admin at lists.schulte.org
[mailto:pptp-server-admin at lists.schulte.org]On Behalf Of Jim Gay
  Sent: Thursday, October 26, 2000 11:59 AM
  To: pptp-server at lists.schulte.org
  Subject: [pptp-server] Win 95/98 128 bit Encryption


  The following is for anyone who has an NT Server using PPTP and wants to
make sure all Windows 95/98/2000 clients connect at 128 bit.

  I have about 20 clients who connect to an NT machine using PPTP and I
thought they were connecting at 128 bit encryption as they all had the
latest upgrades installed on their Windows 95/98/2000 machines.  However, I
recently found out that if the event log entry for their connection does not
say "strong encryption" then they are connecting at 40 bit. After trying to
figure out why I couldn't get them to connect at 128 I contacted Microsoft
and their technician was of little help.  He did says that Microsoft is
working on a new upgrade for VPN but it is a VERY low priority.  Since they
are working on a new upgrade this is why you will not be able to find some
of the old VPN upgrades on their web site.  The technician was not much help
so I went at it myself and here is what I found.

  According to Microsoft article (Q104292) you can determine if you are
connecting with 128-bit by looking at the internal name of pppmac.vxd (right
click on file and go to properties).  If the name says something about "for
export" you are not connecting at 128.  I have found four different versions
of this file, 4.10.1903 (Win95), 4.10.1998 (Win98), 4.10.2002 (VPNUPD.EXE)
and 4.10.2222 (Win98SE), and only 1903 is a non export version and thus
allows 128.  As you can see if you install Microsoft's recommended upgrade,
VPNUPD.EXE it will replace whatever copy of pppmac.vxd you have with one
that does no support 128.  I tried simply replacing pppmac.vxd with the 1903
version and found that this worked fine on all the 95 and 98 machines.
  With Windows 2000 I found I had to install the high encryption pack via
Internet Explorer 5.5 and then it would also connect with 128 bit.

  I hope this helps someone else.


  Jim Gay
  jimgay at colubs.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.schulte.org/mailman/private/pptp-server/attachments/20001028/b730691e/attachment.html>