Slightly off topic, but I'd be interested while I have the VPN people here to hear opinions about Softether. I've been using it for a while and like it. But I can't get much independent information about it from a security point of view.
I once looked extensively into Softether. It's the work of a Japanese professor and his lab. It's over a million lines of code because squeezes different VPN protocols into one server. IIRC it might even require some binaries as a prerequisite to installation. Nobody has ever audited its source code (how could they? it's million+ lines), and it has not popular long enough to have faced serious scrutiny.
I would assume it to be insecure against a motivated attacker.
That's interesting. Guess that might be a problem for the people who use http://www.vpngate.net/en/ which I know the Softether guys created expressly to help people circumvent Governmental level firewalls.
