Re: [Leaf-user] STEP 1 IN INSTALLING BERING WITH ADSL-ALCATEL SPEEDTOUCH ON ETHER NET

Yes, I hva now found out it´s PPTP to PPPoA connection. I need a dial up client for Bering. Where do I find a like? r/Halldor >JN: You need the pptp client to communicate with your modem. It is available here: http://leaf.sourceforge.net/devel/jnilo/packages/pptp.lrp I have written a doc to exp

[Leaf-user] Re: [off-list] Your project (other questions)

Lynn, >You do have an ipsec-enabled kernel don't you? Yes I do. No errors on IPsec startup. >What exactly did you strip beside the packages not listed above? >I would have to assume that you've stripped more than the extra NIC >modules to keep it that small. Just the extra NIC Modules. I kept

[Leaf-user] Dachstein CD remote login

My DCD firewall/VPNs are working perfectly. The only thing I have not figured out is how to log in to the machines and configure them from another terminal. Logins would only be from the secure network, so ssh would not be strictly needed, but it would be nice to know how to set up the ssh connec

Re: [Leaf-user] Changes for new Dachstein release

> The SANS site http://www.sans.org/dosstep/ list some IP's that should be > blocked from leaving a firewall. The code in the stopMartians function > of (Dachstein) ipfilter.conf blocks all but one of the addresses listed > in that document. The exception is > > 192.0.2.0/24- TEST-NET > >

Re: [Leaf-user] Your project (other questions)

Lynn, You said before: "The only thing your looking to add to it is authoritative DNS which would be covered by adding tinydns.lrp. You won't be able to add it unless you replace dnscache.lrp or someone ports the ipsec scripts to iproute2 (which as found before is not a easy project in the le

Re: [Leaf-user] LaBrea for DMZ interface

> Must LaBrea run on a seperate machine than the firewall, or am I doing > something else wrong? I haven't crawled through the low-level code, and at this point don't know enough low-level networking to be able to recognize what I'm looking at, but I think LaBrea needs to run where it is "recievi

[Leaf-user] LaBrea for DMZ interface

I would like to configure LaBrea on my firewall to look for port scans on my DMZ. I have replaced eth0 in the init script with eth2 (my DMZ), and inserted the -s option (I am using a network switch instead of a hub - not sure if this is needed since I would think any traffic would have to hit the

[Leaf-user] IPsec.lrp vs. IPsec509.lrp

Hello, Earlier it was posted that IPsec509.lrp is not needed if you are not doing 509 certs. However I was wondering about the nature of IPsec509.lrp. Is it an additional package to extend IPsec.lrp or is it the only IPsec package you need. It is much smaller, and if I can replace IPsec.lrp w

RE: [Leaf-user] Modifications of network.conf to support changing MAC address

Just to add up a little... Some drivers/cards accept a MAC address when loading the module. Also if dhcpclient is used in the external interface, there are options for specifying the MAC address. I think... -Original Message- From: Charles Steinkuehler [mailto:[EMAIL PROTECTED]] Sent: