RE: [leaf-user] Couple of General Questions

2003-02-09 Thread David Pitts
Thanks Lynn. The RCDLinks = in your uDHCPC is "S,S38 6,K38" . I will try RCDLINKS="2,S38 3,S38 6,K38" which looks more consistent with other packages (including uDHCPD which I hadn't noticed earlier). Thanks again. Fingers crossed. David Pitts IT Services Manager Reid Library University of W

Re: [leaf-user] More Bering IPSec questions ...

2003-02-09 Thread K.-P. Kirchdörfer
Am Montag, 10. Februar 2003 06:19 schrieb Mike Leone: > OK; so I think I'm making progress ... > > Anyway, when ipsec starts, I get: > > # svi ipsec start > ipsec_setup: Starting FreeS/WAN IPsec 1.99... > ipsec_setup: Using /lib/modules/ipsec.o > ipsec_setup: WARNING: eth0 has route filtering turne

RE: [leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread S Mohan
If you are using Win2K clients, Chad has put up a good chapter. It would do good to understand what exactly it does. I then used Marcus Mueller's IPSec utility. It uses a freeswan ipsec.conf file and allows you to define the policies using IP assigned by your ISP to your interface by acquiring it

RE: [leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread S Mohan
Yes in a single line beginning with ":". It is really easy to use this than to extract and transfer. Moreover, newer systems do not have fswcert. On RH7.3 and 8.0 which I use, I did not have them. I also downloaded fswcert, compiled and checked it out. Since both worked, I let it be. Mohan -O

Re: [leaf-user] Couple of General Questions

2003-02-09 Thread Lynn Avants
On Sunday 09 February 2003 11:35 pm, David Pitts wrote: > One more time. > > Lynn, as you suggested I checked out the RCDlinks= parameters in > Shorewall and uDHCPC init.d scripts. Unfortunately, I didn't make too > much sense of them. What number indicates the order in which the > scripts will r

RE: [leaf-user] Couple of General Questions

2003-02-09 Thread David Pitts
One more time. Lynn, as you suggested I checked out the RCDlinks= parameters in Shorewall and uDHCPC init.d scripts. Unfortunately, I didn't make too much sense of them. What number indicates the order in which the scripts will run? I also noticed that the start script I had included a note t

[leaf-user] More Bering IPSec questions ...

2003-02-09 Thread Mike Leone
OK; so I think I'm making progress ... Anyway, when ipsec starts, I get: # svi ipsec start ipsec_setup: Starting FreeS/WAN IPsec 1.99... ipsec_setup: Using /lib/modules/ipsec.o ipsec_setup: WARNING: eth0 has route filtering turned on, KLIPS may not work ipsec_setup: (/proc/sys/net/ipv4/conf/eth0

Re: [leaf-user] problems with BEFW11S (wireless router) and LEAF (Bering)

2003-02-09 Thread Ray Olszewski
At 10:59 PM 2/9/03 -0500, Camille King wrote: I'm having some major problems with my Linkys 4-port/wireless cable/dsl router. My regular wired connection works with no problems and I'm using the dhcpd.lrp so that all my internal network connections are assigned addresses by dhcp. Even my wireles

[leaf-user] problems with BEFW11S (wireless router) and LEAF (Bering)

2003-02-09 Thread Camille King
I'm having some major problems with my Linkys 4-port/wireless cable/dsl router. My regular wired connection works with no problems and I'm using the dhcpd.lrp so that all my internal network connections are assigned addresses by dhcp. Even my wireless network connection is assigned all the proper s

Re: [leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread Mike Leone
S Mohan ([EMAIL PROTECTED]) had this to say on 02/09/03 at 21:18: > You do not need fswcert for Freeswan 1.96 upwards. In the ipsec.secrets > file, you can give the name of the pem file itself. Freeswan will > "automagically" discover the format of the key and extract it at > startup. Good to kn

[leaf-user] Bering/Shorewall vs. Dachstein

2003-02-09 Thread Sean
I have been using Dachstein for a few years. I recently decided to give Bering a try. I use an app, EyeBall chat, to video chat to relatives. It worked just fine under Dachstein. It is NOT working under Bering. It appears the app uses a number of dynamic UDP and TCP connections for the audio/vid

RE: [leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread S Mohan
You do not need fswcert for Freeswan 1.96 upwards. In the ipsec.secrets file, you can give the name of the pem file itself. Freeswan will "automagically" discover the format of the key and extract it at startup. Your ipsec gateway's certificate should be stored in the /etc/ipsec.d/private directo

[leaf-user] Ping Crashes bering with 2.4.20 Kernel

2003-02-09 Thread Steve Bihari
Hi all, Just to follow-up on a previous post of mine RE:"Bering1.0-stable Problem with 2.4.20 on net4501". I managed to duplicate the probolem everytime by just pinging any interface on the box. ...Steve --- This SF.NET email is sponsored b

[leaf-user] Wireless IPSec network ideas

2003-02-09 Thread Henry Psenicka
Chris.. What you propose is likely do-able--- some of it fairly straightforward, other parts more complex. Trying to support a wireless client as well as a router/firewall from the same wireless interface could be troublesome. Note that we used Orinoco 802.11b adapters, which would not be suita

[leaf-user] Bering1.0-stable Problem with 2.4.20 on net4501

2003-02-09 Thread Steve Bihari
Hi all, I'm getting the following kernel panic on my bering1.0_stable box with kernel 2.4.20 This is running on a Soekris net4501 . Anyone else see this? Unable to handle kernel NULL pointer dereference at virtual addr ess printing eip: *pde = Oops: CPU:

RE: [leaf-user] Win2K and LEAF

2003-02-09 Thread John Mullan
OK Charles. I understand. As you know by now, I only really do this stuff at home. I have helped a buddy by putting a LEAF router at his office. So, not being the guru and not having a great amount of time, I will eventually read bits and pieces. I only ended up with Win2K server because my dr

[leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread Mike Leone
I'm trying to set up my Bering 1.0-stable installation to use IPSec (eventually, I want to do IPSec passthru to my office's Pix firewall, but I might also want to use IPSec to connect into my LAN from the outside). I'm following http://leaf.sourceforge.net/devel/jnilo/buipsec.html, creating the c

Re: [leaf-user] Bering vs. Bering-Uclib

2003-02-09 Thread Eric Spakman
> I've recently tried switching from Bering 1.0 (stable) to Bering-Uclib > in order to have room on my single floppy for sshd. However, it seems > that my router running the Uclib version works much less well. I > can't be very specific about what "much less well" means: the network > connection

[leaf-user] Bering vs. Bering-Uclib

2003-02-09 Thread Eric House
I've recently tried switching from Bering 1.0 (stable) to Bering-Uclib in order to have room on my single floppy for sshd. However, it seems that my router running the Uclib version works much less well. I can't be very specific about what "much less well" means: the network connection feels slow

[leaf-user] Re: leaf-user digest, Vol 1 #1582 - 10 msgs

2003-02-09 Thread H.G. Bekker
Hi, The flashfxp util probably uses the passive ftp protocol. This will open some higher port for the actual data connection. What I had to do to get passive ftp up and running behind my bering firewall was the following: add the following lines to /etc/shorewall/rules DNATnet