[Leaf-user] Starting from scratch to build a high capacity VPN tunnel appliance

2001-12-18 Thread expresso
Good evening, folks! I have a new customer with two (soon to be four) offices; and when I got there their Internet access on both ends (Cherry Hill NJ & Manila) was a DSL mess. In fact, it's so bad they send 1 to 2 DVD's per day via DHL to Manila. I'm finalizing the design & cost

[Leaf-user] Introduction

2001-12-18 Thread expresso
Good evening, folks! On the two mailing lists I moderate - The AlphaNT and Mac-NT lists - we have a tradition of asking new members to introduce themselves... So, Hello, LEAF gang! It's time for me to dip my toe back into *nix, after a 22 year hiatus from pounding on a PDP1

Re: [Leaf-user] Puzzled about Port Forwarding

2001-12-18 Thread Victor McAllisteer
Rob Dover wrote: > There seems to be so many different ways of doing port forwarding, I confess > to being totally stumped. > I am running an E2B firewall which has been working quite nicely for several > months now. I am now adding a new machine behind the firewall and need to > open a few por

[Leaf-user] Puzzled about Port Forwarding

2001-12-18 Thread Rob Dover
There seems to be so many different ways of doing port forwarding, I confess to being totally stumped. I am running an E2B firewall which has been working quite nicely for several months now. I am now adding a new machine behind the firewall and need to open a few ports. The only option I seem to

RE: [Leaf-user] CPU loading monitor

2001-12-18 Thread Kevin Kropf
I get the following error: # top top: error in loading shared libraries libncurses.so.4: cannot open shared object file: No such file or directory Help... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kenneth Hadley Sent: Tuesday, December 18, 2001 8:

Re: [Leaf-user] CPU loading monitor

2001-12-18 Thread Kenneth Hadley
Not that im aware of, though I do know that I a have a top (which can watch CPU usage among other things) package on my site under the packages section ( http://leaf.sourceforge.net/devel/khadley/ ) and yes, I am doing shameless advertising ;-) -Kenneth Hadley - Original Message - From:

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Kenneth Hadley
Glad it worked for you, and its also nice to have a little more evidence that CPU IS a determining factor with PPPoE, though I think you went a little overboard on speed and memory, LOL :-) -Kenneth Hadley - Original Message - From: "Robert Chambers" <[EMAIL PROTECTED]> To: "Kenneth Ha

Re: [Leaf-user] Dachstein 1.0.2 with PPPoE

2001-12-18 Thread Kenneth Hadley
If I remember correctly "pppoe uses obsolete (PF_INET, SOCK_PACKET)" is just warning that happens with the older version of the PPPoE client that is available for LEAF, the error basically means nothing. Theoretically since we are dealing with less than 5mbit of traffic a ISA card is should be pro

[Leaf-user] ez-ipupdate

2001-12-18 Thread David B. Cook
Could somebody out there with a valid development system for Dachstein compile a copy of ez-ipupdate to be included on Charles' CD? Thanks, dbc. -- David B. Cook, <[EMAIL PROTECTED]> Linux -- up 50 days because it can. 11:32pm up 50 days, 2:24, 0 users, load average: 0.02, 0.01, 0.00 __

[Leaf-user] Re: Dachstein CD v1.0.2 w/PPPoE

2001-12-18 Thread Kenneth Hadley
Unfourtunatly at this time I know of no work around and I believe Charles Steinkuehler (DachStein's creator) is looking for ways to integrate PPPoE into the network scripts wich would take of this problem, unfourtunatly firwall scripts are out of my leauge in terms of understanding. - Origina

RE: [Leaf-user] CPU loading monitor

2001-12-18 Thread Kevin Kropf
Has anyone made an lrpStat.lrp? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of KP Kirchdörfer Sent: Tuesday, December 18, 2001 3:31 PM To: [EMAIL PROTECTED]; Leaf-User (E-mail) Subject: Re: [Leaf-user] CPU loading monitor Am Dienstag, 18. Dezember 200

Re: [Leaf-user] Timelag in Dachstein 1.0.2

2001-12-18 Thread KP Kirchdörfer
Am Montag, 17. Dezember 2001 19:34 schrieb Maxim Heijndijk: > * Stardate: 2001-12-17 18:28 > > * Incoming subspace signal from "KP Kirchdörfer <[EMAIL PROTECTED]>" : > > Am Montag, 17. Dezember 2001 14:07 schrieb Maxim Heijndijk: > > > I run Dachstein 1.0.2 and the time is one hour earlier than it

[Leaf-user] Re: [LRP] pppoe sharing

2001-12-18 Thread Robert Chambers
Carlos: Take a look at Dachstein 1.0.2 with PPPoE from Kenneth Hadley http://leaf.sourceforge.net/devel/khadley You will need Windows to extract the file and create a 1680k floppy. Get a Pentium or better machine, two ethernet cards, and a 10/100 switch. Then you can hook up several machines to

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Matthew Schalit
Robert Chambers wrote: > > Good idea. I'll try it with the Netgear FA311 and one 3c509b card. > Post your results and with any specifics that might be interesting, if you have time. Thanks, Matt ___ Leaf-user mailing list [EMAIL PROTECTED] https://

Re: [Leaf-user] CPU loading monitor

2001-12-18 Thread KP Kirchdörfer
Am Dienstag, 18. Dezember 2001 21:58 schrieb Kevin Kropf: > Is anyone aware of a CPU monitor for LRP that I could use to > see what my box is doing? lrpStat from http://leaf.sourceforge.net/devel/hejl Read there about using the C-program lrpStat instead of stat.sh, which is used in weblet fro

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
Ken: That was it.  When I used one PCI and one ISA card it got the IP address from Covad.  My connection from Covad is 1.5mbps down/ 384kbps up PPPoE.  When I had the 486DLC-40 with 32 meg of memory as the LRP, speed was 538kbps/ 328kbps according to DSL Reports.com.  With the HP, PII 400 mhz wi

[Leaf-user] CPU loading monitor

2001-12-18 Thread Kevin Kropf
Is anyone aware of a CPU monitor for LRP that I could use to see what my box is doing? Thanks. Kevin ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Dachstein 1.0.2 with PPPoE

2001-12-18 Thread Robert Chambers
I wonder how much of a difference ISA to PCI makes in speed?   I have noticed on both Eigerstein2beta and Dachstein with PPPoE I keep getting the message " pppoe uses obsolete (PF_INET, SOCK_PACKET).  Anything I should be concerned with? Kenneth Hadley wrote: 026401c187fe$f9558960$[EMAIL PROTEC

Re: [Leaf-user] Dachstein 1.0.2 with PPPoE

2001-12-18 Thread Kenneth Hadley
To tell the truth I'm not sure exactly why I saw such a dramatic speed boost. When my total incoming bandwidth reached 1mbit (and usually not much further) I saw CPU usage on my AMD583-133 reach 70% typically but this was with a 3com 3c509b ISA card on the WAN side (eth0) and a NetGear 310tx PCI o

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
Good idea.  I'll try it with the Netgear FA311 and one 3c509b card. Kenneth Hadley wrote: [EMAIL PROTECTED]"> Have you tried using two PCI nics or just one ISA card and one PCI card?I've run into problems with P2/P3/Athlon systems that have two ISA slots butthe first ISA slot is shared with t

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Kenneth Hadley
Have you tried using two PCI nics or just one ISA card and one PCI card? I've run into problems with P2/P3/Athlon systems that have two ISA slots but the first ISA slot is shared with the last PCI slot so they conflict even if nothing is in the last PCI slot - Original Message - From:

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
Charles: I also tried Dachstein 1.0.2 with PPPoE from Ken and it also would not get an IP address from Covad. " starting ADSL" would come back with "timed out".  I was able to connect to the weblet in  both Eigerstein2beta and Dachstein and look at the firewall status, so I know that I had the c

Re: [Leaf-user] Telnet Client

2001-12-18 Thread seanecovel
Nevermind. I found a version that works on David's latest Oxygen ISO. > Does anybody have a working Telnet for LEAF. I know, I > know, its not secure, but I'm SSHing into my LEAF box, > then I want to Telnet into another Linux box on my > internal network. Yes, I will try later to forward a

Re: [Leaf-user] VPN Architecture Options

2001-12-18 Thread Charles Steinkuehler
> Did I understand right that you use the IDs with %any IPs for your gateway > to gateway connections? I currently have 2 users with home LANs that are on > dynamic IPs. Since the IPs change rarely I treat them as static, but when > they change I need update the ipsec.conf file. Yes...this is p

Re: [Leaf-user] Dachstein-CD, symlinks vs bootup ???

2001-12-18 Thread Charles Steinkuehler
> OK, I have a package which contains a symlink: > > /var/log/iptraf -> /var/log > > Also, I am using ramlog.lrp and ram1 for /var/log . > > During bootup and initial package install, that symlink does *NOT* get > created! > > However, if I load that same package a second (2nd) time -- after bootu

RE: [Leaf-user] VPN Architecture Options

2001-12-18 Thread Todd Pearsall
> This is really simple, especially if you're using RSA keying. On the VPN > Gateway, simply create a connection with the ID and RSA sig. of your > roadwarrior (roaming laptop) system. Set the IP address to %any. > > On the roadwarrior, set interfaces=%defaultroute and > [left|right]=%defaultrou

[Leaf-user] Dachstein-CD, symlinks vs bootup ???

2001-12-18 Thread Michael D. Schleif
OK, I have a package which contains a symlink: /var/log/iptraf -> /var/log Also, I am using ramlog.lrp and ram1 for /var/log . During bootup and initial package install, that symlink does *NOT* get created! However, if I load that same package a second (2nd) time -- after bootup is co

Re: [Leaf-user] VPN Architecture Options

2001-12-18 Thread Charles Steinkuehler
> Having read some about FreeS/WAN, I am still confused on what it takes to > connect from a roaming laptop --- with a varying IP. Most of the instructions > tend to be focused on gateway-to-gateway connections, not laptop-to-gateway -- > and almost all doc uses non-routable IPs in the examples.

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Charles Steinkuehler
> I tried to upgrade my lrp box from the little 486DLC to my HP Pavilion > which has a PII 400 mhz cpu. > So I took the nic's which are 3Com 3c509b ISA bus and the > Eigerstein2beta pppoe v.0.4 disk from the 486 and put them into the HP. > After the system boots up I checked to see if it found t

[Leaf-user] tinydns vs. dmz ???

2001-12-18 Thread Michael D. Schleif
How should tinydns deal with a dmz? One of our Dachstein-CD firewalls was up for several days, functioning as we expected. mailonerr is configured to use our mail server that sits on the dmz -- and we were getting our periodic notices, until sometime after 2200 last night. tinydns/public is se

RE: [Leaf-user] Dachstein 1.0.2 with PPPoE

2001-12-18 Thread Simon Bolduc
Running a 486/66 on a cable line - my router does 3mb/s without a hitch - mind you I only ever see about 300KB/s max (instead of the 375KB/s I should - but that has nothing to do with the router). Math below is wrong BTW (sorry to be picky). 1 byte = 8 bits thus 62KB/s would equate to 496kb/

[Leaf-user] Telnet Client

2001-12-18 Thread seanecovel
Does anybody have a working Telnet for LEAF. I know, I know, its not secure, but I'm SSHing into my LEAF box, then I want to Telnet into another Linux box on my internal network. Yes, I will try later to forward an SSHD port to that box, but for now, how about Telnet? I tried the one in Ox

RE: [Leaf-user] VPN Architecture Options

2001-12-18 Thread Todd Pearsall
> 1. Sitting in their US office, accessing multi-vendor VPN > systems at major > corporations. I have had success connecting to Cisco VPN concentrators and seen reports of connecting to others. One of the headache's I ran into was overlapping NAT's subnets which you mention below. > 2. Sitting

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
Sorry I forgot to mention that I did cycle the modem. guitarlynn wrote: On Tuesday 18 December 2001 02:27, you wrote: Any suggestions? Some ISP's map the MAC on the connected NIC. cycle the modem,have the ISP update the MAC info, or use the externel NIC out of the486 machineG

Re: [Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
The two nic's that I used were from the 486.  Eth0 in the HP is the same Eth0 ( with the same mac address) that was in the 486. guitarlynn wrote: On Tuesday 18 December 2001 02:27, you wrote: Any suggestions? Some ISP's map the MAC on the connected NIC. cycle the modem,have t

[Leaf-user] upgrading lrp box

2001-12-18 Thread Robert Chambers
I tried to upgrade my lrp box from the little 486DLC to my HP Pavilion which has a PII 400 mhz cpu. So I took the nic's which are 3Com 3c509b ISA bus and the Eigerstein2beta pppoe v.0.4 disk from the 486 and put them into the HP. After the system boots up I checked to see if it found the card