Re: [Leaf-user] DCD, ipsec, gateways & road warriors ???

2002-02-01 Thread Michael D. Schleif
[EMAIL PROTECTED] wrote: > > This sounds like the problem I was having with SNMP data. The packets vent > out the VPN with the source address of the external interface not the > internal. The solution was to modify the _updown script to include the > source address in the route command, or you c

[Leaf-user] dhclient and firewall question

2002-02-01 Thread Paul Rimmer
Wow, for the first time since I can remember, my IP address has changed via DHCP with Shaw cable. I've seen it happen when I've changed eth0 NICs before, but never for no apparent reason. The reason I noticed is that I saw a boatload of port80 logs. I have a line added to ipfilter.conf to not l

Re: [Leaf-user] Fwd: Where do I find CD image boot documentation

2002-02-01 Thread Michael D. Schleif
Scott Sandeman-Allen wrote: > > In reviewing the Dachstein version of LRP and making changes etc. I > have come across the need to crack open the bootdisk.bin binary file > and re-create a new one. Can anyone direct me to the documentation > for manipulating this file/disk image. > > Thanks in

Re: [Leaf-user] Fwd: Where do I find CD image boot documentation

2002-02-01 Thread guitarlynn
On Friday 01 February 2002 20:04, Scott Sandeman-Allen wrote: > Hi, > > In reviewing the Dachstein version of LRP and making changes etc. I > have come across the need to crack open the bootdisk.bin binary file > and re-create a new one. Can anyone direct me to the documentation > for manipulating

[Leaf-user] Fwd: Where do I find CD image boot documentation

2002-02-01 Thread Scott Sandeman-Allen
Hi, In reviewing the Dachstein version of LRP and making changes etc. I have come across the need to crack open the bootdisk.bin binary file and re-create a new one. Can anyone direct me to the documentation for manipulating this file/disk image. Thanks in advance for any assistance, Scott

RE: [Leaf-user] How to connect the router with 2 external IPs

2002-02-01 Thread Binh Do
Hi Charles. Do I understand you correctly like that: - nothing in hardware should change, i.e. the cable-modem should still go into one external NIC. If the ISP gives me 2 IPs, those could go to that same NIC. If so, it sounds good regarding the hardware config. And I digged into the dhc

Re: [Leaf-user] VPN horsepower

2002-02-01 Thread Phillip . Watts
You've got WAY more horsepower than you do bandwidth "Christopher Holmes" <[EMAIL PROTECTED]> on 02/01/2002 12:20:53 PM To: [EMAIL PROTECTED] cc:(bcc: Phillip Watts/austin/Nlynx) Subject: [Leaf-user] VPN horsepower Forgot to ask in my last post... Is a Pentium 90 beefy enough

Re: [Leaf-user] VPN setup

2002-02-01 Thread guitarlynn
On Friday 01 February 2002 11:24, Christopher Holmes wrote: > I've set up a Dachstein box at my office & one for a small network at > home. I'd like to set up a VPN at work that allows employees to work > from home. > > I've started reading through some of the docs, but don't have a clear > idea

Re: [Leaf-user] VPN horsepower

2002-02-01 Thread Mike Leone
Think it would depend smore on the number of simultaneous connections, and the amount of traffic. My Cisco Pix 515 firewall has a Pentium 200, 32M of RAM in it. I'd had a couple simultaneous connections with it with no problems. - Original Message - From: "Christopher Holmes" <[EMAIL

Re: [Leaf-user] DCD, ipsec, gateways & road warriors ???

2002-02-01 Thread rmcclurg
This sounds like the problem I was having with SNMP data. The packets vent out the VPN with the source address of the external interface not the internal. The solution was to modify the _updown script to include the source address in the route command, or you can change the route statement after t

Re: [Leaf-user] VPN horsepower

2002-02-01 Thread Simon Bolduc
P 90 should be fine - I run a 486 33 with a 50 KB (ISP's cap for outgoing traffic) VPN connection no problem - so I can't see how you'd have an issue... S >From: "Christopher Holmes" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: [Leaf-user] VPN horsepower >Date: Fri, 1 Feb 2002 13:20

[Leaf-user] VPN horsepower

2002-02-01 Thread Christopher Holmes
Forgot to ask in my last post... Is a Pentium 90 beefy enough to handle the encryption on a VPN? We've got about 200K DSL connection. Chris ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] Re: NFS mounting through Firewall

2002-02-01 Thread David B. Cook
Something else to consider ... My comment about the possibility of NFS was as much a question as a solution because I never done so myself, but NFS is pretty easy to administer. However, a known (kick-butt) solution but difficult to administer is AFS (Andrew's File System). It is a Kerberos e

[Leaf-user] VPN setup

2002-02-01 Thread Christopher Holmes
I've set up a Dachstein box at my office & one for a small network at home. I'd like to set up a VPN at work that allows employees to work from home. I've started reading through some of the docs, but don't have a clear idea of the "big picture." This is how I undersand it. Please let me kno

Re: [Leaf-user] Weblet Bandwidth Monitor

2002-02-01 Thread rmcclurg
Michael, After your message I looked at my code again. I neglected to change the device name. I had two sections with DEV0. That will teach me to cut and paste! Now that it says DEV2, netmon works for me as well. Thanks. Best Regards, Roger McClurg [EMAIL PROTECTED]

Re: [Leaf-user] Weblet Bandwidth Monitor

2002-02-01 Thread Michael D. Schleif
[EMAIL PROTECTED] wrote: > > That is what I tried first. When it didn't work I thought that the > interfaces must be hardcoded into the Java script. I guess ipsec0 just > doesn't look like an interface to the Java script. > > Oh well, it would have been nice. I guess I'll have to live with MRTG

Re: [Leaf-user] Weblet Bandwidth Monitor

2002-02-01 Thread rmcclurg
Martin, That is what I tried first. When it didn't work I thought that the interfaces must be hardcoded into the Java script. I guess ipsec0 just doesn't look like an interface to the Java script. Oh well, it would have been nice. I guess I'll have to live with MRTG. Thanks for the advice. Bes

[Leaf-user] DCD and IPSEC

2002-02-01 Thread Bernhard Frey [bmsoft]
Hi all, I've set up a working VPN with DCD 1.02. I had to use Freeswan 1.90 though because I needed a DES-patch which was created for 1.90 (and yes, I've read the Freeswan manual concerning weak encryption ;) ). I've changed the scripts so they reflect the DCD environment. The thing I haven't figu

Re: [Leaf-user] LRP Oxygen CD and floppy disk boot question

2002-02-01 Thread Matt Schalit
malik menzong wrote: > > The good news is that I can ping the world now from the router. Every time I > think I saved my config. and I reboot it was not actually saved. > The only hurdle I have now is to see the internet from my machine behind the > firewall. that machine do ping to the etho netw