[Astlinux-users] can anyone explain me how to use those extensions.conf snippet from Lonnie for folowme blacklist and whitelist

2012-04-03 Thread Nedi
Hi, can anyone explain me how to use those extensions.conf snippet from Lonnie. I tried some times to insert it in my dialplan without success. in the Prefs I changed the Number Format to ^[0-9]{6,16}$and CID Name Mx Lengt to 16 I would like to have follow me with Internal and Externa

Re: [Astlinux-users] IPsec Peers config

2012-04-03 Thread Tom Chadwin
Ack. User error. Kind of. "Allow IPv4 ICMP (ping) on External (EXT) Interface" was unchecked on the remote box. I would argue that I am not pinging the WAN NIC, but let's not split hairs. I think it might be working. I can't test pinging another host on the remote subnet very easily because their

Re: [Astlinux-users] IPsec Peers config

2012-04-03 Thread Lonnie Abelbeck
Tom, Take a look at ipsec-vpn.conf, it is actually a script that automatically sets the ENABLED shell variable based on the VPN rc.conf variable (among others). >From the CLI, when you issue $ arno-iptables-firewall restart you should see something like: -- IPsec VPN plugin v0.83BETA Loade

Re: [Astlinux-users] IPsec Peers config

2012-04-03 Thread Tom Chadwin
Is the ENABLED var in the config file set to 1, or is it enabled without that text file changing? Tom -Original Message- From: Lonnie Abelbeck [mailto:li...@lonnie.abelbeck.com] Sent: 03 April 2012 16:05 To: AstLinux Users Mailing List Subject: Re: [Astlinux-users] IPsec Peers config

Re: [Astlinux-users] IPsec Peers config

2012-04-03 Thread Lonnie Abelbeck
On Apr 3, 2012, at 9:48 AM, Michael Keuter wrote: > Am 03.04.2012 um 16:33 schrieb Lonnie Abelbeck: > >> Tom, >> >> You don't need to enable the IPsec VPN plugin, that is done automatically, >> as the comment in the plugin states. > > I also needed to enable it manually (because it still was

Re: [Astlinux-users] IPsec Peers config

2012-04-03 Thread Michael Keuter
Am 03.04.2012 um 16:33 schrieb Lonnie Abelbeck: > Tom, > > You don't need to enable the IPsec VPN plugin, that is done automatically, as > the comment in the plugin states. Lonnie, I also needed to enable it manually (because it still was disabled, after enabling IPSec (on 0.7.10 though)), o

[Astlinux-users] IPsec Peers config

2012-04-03 Thread Lonnie Abelbeck
Tom, You don't need to enable the IPsec VPN plugin, that is done automatically, as the comment in the plugin states. You mentioned you were getting a gui error message, don't ignore that, tell me more about that. Can you post a *sanitized* screen shot like Michael did, Michael's example is a

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Tom Chadwin
Well, I've discovered one reason why it is currently not working. A power cut at the remote site. *sigh* I'll try again once things are back up again. Thanks for all the help Tom From: Michael Keuter [mailto:li...@mksolutions.info] Sent: 03 April 2012 13:45 To: nnpait.servi...@g

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Michael Keuter
Am 03.04.2012 um 10:56 schrieb Tom Chadwin: > No joy with the IPSec VPNs yet. I've set up both boxes, hopefully mirroring > each others' config. I've tried both with and without NAT-T. I've not set > Auto-Establish-IP. > > Each box, when pinging the LAN address of the other, replies with: > > p

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Tom Chadwin
No joy with the IPSec VPNs yet. I've set up both boxes, hopefully mirroring each others' config. I've tried both with and without NAT-T. I've not set Auto-Establish-IP. Each box, when pinging the LAN address of the other, replies with: ping: sendto: Operation not permitted Other than setting the

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Michael Keuter
Am 03.04.2012 um 09:16 schrieb Tom Chadwin: > Thanks Michael. One other question - in the IPsec config, should local host > be the local box's LAN or WAN address? > > Thanks again > > Tom Local-Host is the WAN-address of your local box, Local-Net the LAN-network of this box like 192.168.1.0/

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Tom Chadwin
Thanks Michael. One other question - in the IPsec config, should local host be the local box's LAN or WAN address? Thanks again Tom -Original Message- From: Michael Keuter [mailto:li...@mksolutions.info] Sent: 03 April 2012 08:13 To: nnpait.servi...@googlemail.com; AstLinux Users Maili

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Michael Keuter
Am 03.04.2012 um 08:58 schrieb Tom Chadwin: > Thank you all. I shall maybe try IPSec, in that case. Final question until I > break something again: presumably there are no problems with an Astlinux box > as an IPSec server (static VPNs) and OpenVPN server (road warriors) at once? > > Thanks agai

Re: [Astlinux-users] OpenVPN config

2012-04-03 Thread Tom Chadwin
Thank you all. I shall maybe try IPSec, in that case. Final question until I break something again: presumably there are no problems with an Astlinux box as an IPSec server (static VPNs) and OpenVPN server (road warriors) at once? Thanks again, all Tom -Original Message- From: Lonnie Ab