Re: [Leaf-user] VPN / IPSEC Problem

2001-06-15 Thread Greg Morgan
Phil, I believe IPSEC is the keyword here. I have to use Secure Remote another commercial VPN client to logon for on call duty. I had to VPN in today, so I said let's figure this out. Right now my solution is a removal hard drive with Check Points secure remote installed. I swap the hard driv

Re: [Leaf-user] Explain these DENY's ???

2001-06-15 Thread Scott C. Best
mds: Huh. These are interesting: > Jun 15 23:50:55 bluetrout kernel: Packet log: input DENY eth0 PROTO=17 > 192.168.0.2:137 a.b.c.d:137 L=78 S=0x00 I=1498 F=0x T=107 (#11) > [snip] > > Now, the interesting things are these: > > [1] 192.168.0.2 is an DHCP leased address on our intern

Re: [Leaf-user] LRP.MIRAZON.COM

2001-06-15 Thread Brian Camp
Title: Does everyone else consider this SPAM also. - Original Message - From: Christine Hall To: [EMAIL PROTECTED] Sent: Friday, June 15, 2001 5:38 PM Subject: [Leaf-user] LRP.MIRAZON.COM Hello, I visited lrp.mirazon.com and I noticed th

[Leaf-user] Explain these DENY's ???

2001-06-15 Thread Michael D. Schleif
Jun 15 23:50:55 bluetrout kernel: Packet log: input DENY eth0 PROTO=17 192.168.0.2:137 a.b.c.d:137 L=78 S=0x00 I=1498 F=0x T=107 (#11) Jun 15 23:50:57 bluetrout kernel: Packet log: input DENY eth0 PROTO=17 192.168.0.2:137 a.b.c.d:137 L=78 S=0x00 I=1502 F=0x T=107 (#11) Jun 15 23:50:58 blu

Re: [Leaf-user] Trying to get LRP to boot from harddrive?

2001-06-15 Thread Charles Steinkuehler
> I setup LRP without a hitch using the EigerStein boot disk. I want to > transfer it to the harddrive. I followed the harddrive how to and > everything was running smoothly up until I have to put a kernel and modules > on the harddrive. I am not sure which file to download or what to do with >

Re: [Leaf-user] Trying to get LRP to boot from harddrive?

2001-06-15 Thread b.eisenmann
I got that part of the instructions. Thanks, though. The output that I showed is when everything was said and done. I followed the how-to pretty well and went back over it. Looked around the internet and also through the old mail postings for this group. If all else fails, I will just leave i

RE: [Leaf-user] Trying to get LRP to boot from harddrive?

2001-06-15 Thread Steven Peck
I went to the following website (also, I think I have a ide harddrive)to get the files I need. Is the kernel I need called 2.2.16-1-LRP-IDE-zimage (the hyperlink under "Eiger" labeled "kernel")? What do I do with it (uncompress or not and fit on a disk)? Do I need ext2.o or hdsupp.lrp http://

[Leaf-user] LRP.MIRAZON.COM

2001-06-15 Thread Christine Hall
Title: Hello, I visited lrp.mirazon.com and I noticed that you are not listed on some search engines. I am sure you can increase the number of people who visit lrp.mirazon.com . Do you know TrafficMagnet? TrafficMagnet is a unique technology that instantly submits your web site to over 30

[Leaf-user] Trying to get LRP to boot from harddrive?

2001-06-15 Thread b.eisenmann
I setup LRP without a hitch using the EigerStein boot disk. I want to transfer it to the harddrive. I followed the harddrive how to and everything was running smoothly up until I have to put a kernel and modules on the harddrive. I am not sure which file to download or what to do with the downl

Re: [Leaf-user] VPN pre-install question

2001-06-15 Thread Jonathan Rawson
Yep, I used practically the exact config given for the VPN 3000 client (none of the vpdn or isakmp commands) and it works. Sometimes. I'm still trying to figure out why I get malformed_payload errors and dropped connections more than I get good connections, but I tend to think that it's more a p

RE: [Leaf-user] External acces via SSH

2001-06-15 Thread smorilla
Thanks!! I was 'sure' it was something that easy!!! -Mensaje original- De: [EMAIL PROTECTED] Enviado el: Friday, June 15, 2001 13:30 Para: [EMAIL PROTECTED] Asunto: Re: [Leaf-user] External acces via SSH Did you open up the firewall - be specific like you were in /etc/hosts.allo

Re: [Leaf-user] External acces via SSH

2001-06-15 Thread Victor McAllister
Did you open up the firewall - be specific like you were in /etc/hosts.allow in /etc/network.conf EXTERN_TCP_PORTS="0/0_smtp x.x.x.x/24_ssh" [EMAIL PROTECTED] wrote: > Hi all, > > I'm trying to access my home LRP (Eigerstein) router via ssh from my office. > So far I have added > > ALL:LOCA

Re: [Leaf-user] masquerading PPTP Clients and Seawall

2001-06-15 Thread Tom Eastep
On Friday 15 June 2001 09:14, Sandro Minola wrote: > > Now my question: > If I DON'T use seawall, will the clients be able to connect to any PPTP > server? and with seawall only to these which are listed in the config file? > If you want to be able to connect to any PPTP server, you should be abl

[Leaf-user] masquerading PPTP Clients and Seawall

2001-06-15 Thread Sandro Minola
I've a question: I have currently running EG2 Beta with VPN-masq kernel. I also installed the ip_masq_pptp module. I don't need PPTP access to remote servers NOW, but perhaps in the near future. I want to use Seawall and in the config file, there is an entry "pptpservers=""". If I don't know to wh

[Leaf-user] VPN / IPSEC Problem

2001-06-15 Thread Phil Faris
Hi, I am trying to establish a VPN tunnel between a remote Internet attached PC (RoadWorrior) and the masqueraded private network (192.168.1.0) on my LRP (Charles Steinkuehler's Eigerstein modified for ipsec 1.5). The RoadWarrior is using PGPnet configured according to the instructions given in

Re: [Leaf-user] USB for legacy systems

2001-06-15 Thread Oliver Gorwits
thanks Jack, I agree. although those Google results are for USB->ISA devices rather than ISA->USB, I think. cheers, olly. -- ~~~ Oliver Gorwits ~~~

re: [Leaf-user] ipfwadm autofw on EigerStein2B

2001-06-15 Thread Scott C. Best
Stephen: Heya. Sounds troubling. :) Try this: 1. Flush all the portfw's: ipmasqadm portfw -f ipmasqadm autofw -F 2. Try your "ipfilter reload", then post the results of the "network ipfilter list autofw". I seem to recall always being frustrated that it was h

Re: [Leaf-user] USB for legacy systems

2001-06-15 Thread Jack Coates
I've seen USB PCI cards, but not USB ISA cards. Let's see: http://www.google.com/search?q=usb+isa+card&num=10 Okay, they do exist, but they're too expensive. You're better off buying a PCI-based system for twenty bucks and a USB-PCI card for another $20. -- Jack Coates Monkeynoodle: It's what's

RE: [Leaf-user] re: dhclient problem

2001-06-15 Thread John Ridout
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > Brock Nanson > Sent: 15 June 2001 15:47 > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: [Leaf-user] re: dhclient problem > > > Hi Bob, > > I have the same trouble, made the switch to the '

[Leaf-user] re: dhclient problem

2001-06-15 Thread Brock Nanson
Hi Bob, I have the same trouble, made the switch to the 'latest' .lrp without effect. I did find that issuing 'svi dhclient restart' enables both the old and the new lrp to start successfully the second time. My problem started after the cable provider put me on a new subnet. I suspect a diffe

[Leaf-user] External acces via SSH

2001-06-15 Thread smorilla
Hi all, I'm trying to access my home LRP (Eigerstein) router via ssh from my office. So far I have added ALL:LOCAL ssh:x..x.x.x/255.255.255.0 to my hosts.allow file hosts.deny is: ALL: PARANOID Am I forgeting something??? TIA Sergio Morilla ___

Re: [Leaf-user] FlashPath / 2.2.16 Kernel

2001-06-15 Thread Charles Steinkuehler
> I have been looking at the costs of Compact Flash and DOC/DOM. > It is insane to use DOC/DOM @$120/32M, while a 32M Compact Flash > costs about $50 (plus $20 for the CF-IDE adapter). > > Have anybody compared or have experienced using CF as a replacement > of DOC/DOM? They both work quite well,

Re: [Leaf-user] USB for legacy systems

2001-06-15 Thread Oliver Gorwits
"Luis.F.Correia" wrote: > By using USB, they are trying to keep people from using Linux based > routers, for which they normally do NOT make drivers. Also no support. Drivers aren't a problem, thankfully, as some kind person at Alcatel has provided for Linux. See: http://www.kernel.org/LDP/HOWTO/

RE: [Leaf-user] FlashPath / 2.2.16 Kernel

2001-06-15 Thread smorilla
As long as I know the only difference is that FLSADP2 will accept IBM Microdrives. If that is important to you then its a big difference!! > -Mensaje original- > De: [EMAIL PROTECTED] > Enviado el: Thursday, June 14, 2001 18:30 > Para: [EMAIL PROTECTED] > Asunto: RE: [Leaf-user]

Re: [Leaf-user] USB for legacy systems

2001-06-15 Thread Michael Leone
From: "Luis.F.Correia" <[EMAIL PROTECTED]> > By using USB, they are trying to keep people from using Linux based > routers, for which they normally do NOT make drivers. Also no support. They may not have the expertise to write Linux drivers. Or (more likely) they feel that 9 out of 10 of their p

[Leaf-user] ipfwadm autofw on EigerStein2B

2001-06-15 Thread Stephen Lee
Hi, I am trying to forward ports 1-11999 to an internal server with the following command: ipmasqadm autofw -A -r tcp 1 11999 -h 192.168.1.1 It seems to not complain when I enter it manually on the command line. It also seems okay if I add it to the bottom (just before the last brace) i

RE: [Leaf-user] USB for legacy systems

2001-06-15 Thread Luis.F.Correia
I guess it will be like that. By using USB, they are trying to keep people from using Linux based routers, for which they normally do NOT make drivers. Also no support. Well, three times the price is obscene!!! If you plan to buy the modem, then the prices are: Alcatel Speed Touch USB Manta

Re: [Leaf-user] USB for legacy systems

2001-06-15 Thread Oliver Gorwits
thanks for the suggestion Luis, but the Ethernet option is actually three times the price (no kidding) per month, for the same bandwidth service(!) Understandably, I'd prefer to pay for hardware I get to keep. olly. "Luis.F.Correia" wrote: > > I guess not... > > All USB boards I've seen are

RE: [Leaf-user] USB for legacy systems

2001-06-15 Thread Luis.F.Correia
I guess not... All USB boards I've seen are PCI. Why not go for a standard modem ? Here in Portugal, you can choose, 'tough it will cost more... -Original Message- From: Oliver Gorwits [mailto:[EMAIL PROTECTED]] Sent: Friday, June 15, 2001 11:05 AM To: [EMAIL PROTECTED] Subject: [Leaf-

[Leaf-user] USB for legacy systems

2001-06-15 Thread Oliver Gorwits
Hi there folks, sorry this isn't really software related, but you guys are so smart I'm sure someone will have a solution: I'm about to get ADSL here in the UK, and I'll be supplied with the Alcatel USB modem. I have no problems with getting USB/modem/PPPoX running under LRP ;) However, my litt

RE: [Leaf-user] VPN pre-install question

2001-06-15 Thread John Ridout
Hi, Thanks for the link, it seems PIX supports something called dynamic crypto maps which allow for IPSec connections to be initiated by a client with a dynamic IP address. > As Michael says, when using Cisco's VPN client at least, the > PIX assigns (from a pool configured on it) an IP address