[leaf-user] I would like to use Internet through Gateway in (B) as local.....

2003-03-27 Thread Byounghae Kim
Hi all, I am a Bering user. I nearly completed the test and installation related to http://www.openbrick.org/openbrick/Members/seb/doc/vpn.stx/view. However, there is no serious problem when it is operated as it is in the general companies, but there is Client Program for MS-Window that is

Re: [leaf-user] uCLIB Bering Question

2003-03-27 Thread K.-P. Kirchdörfer
Am Donnerstag, 27. März 2003 02:28 schrieb David Pitts: Hi again. With the advent of uCLIB I thought I would return to my original plan to create a single floppy disk Bering with SSHD instead of wasting a CDROM drive. The packages I need seem to fit on a floppy no trouble but I get an odd

[leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
Hi We are considering using a Bering firewall to connect two networks via the internet. Both these networks will have a windows 2000 server which will need to communicate with each other. I have got to grips with installing Bering and Shorewall, but I am struggling with ipsec I have several

[leaf-user] [Bering] script to send e-mail for ip address change

2003-03-27 Thread Thomas V. Fischer
Hi all, I am looking for an e-mail to send an e-mail when the ip address changes on my ppp link. I have seen the ez-ipupd package but that doesn't quite suite me and is too complex for my use. Rgds Thomas Fischer, MCSE mailto:[EMAIL PROTECTED] mailto:[EMAIL PROTECTED] Apple,

Re: [leaf-user] [Bering] script to send e-mail for ip address change

2003-03-27 Thread K.-P. Kirchdörfer
Am Donnerstag, 27. März 2003 12:01 schrieb Thomas V. Fischer: Hi all, I am looking for an e-mail to send an e-mail when the ip address changes on my ppp link. add to /etc/ppp/ip-up echo | mail -s ${PPP_LOCAL}_LEAF to [EMAIL PROTECTED] Please read Bering doc's - there is a chapter about mail

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Charles Steinkuehler
Simon Chalk wrote: Hi We are considering using a Bering firewall to connect two networks via the internet. Both these networks will have a windows 2000 server which will need to communicate with each other. I have got to grips with installing Bering and Shorewall, but I am struggling with ipsec I

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Luis.F.Correia
While i am not 100% sure but i think that Jacques has included the ipsec509 patches to the latest ipsec.lrp package. This means you no longer need to have a separate ipsec509.lrp. All, please correct me if i am wrong :) -Original Message- From: Charles Steinkuehler [mailto:[EMAIL

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Lynn Avants
On Thursday 27 March 2003 04:10 am, Simon Chalk wrote: 1) Do I need ipsec or ipsec509 for use with windows 2000 servers located on each network. As CS noted, this doesn't matter as long as both are gateways. x509 certs are much more difficult than RSA-keys IMHO. 2) If I do need ipsec509,

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
Hi Charles, Are you saying that windows 2000 is quite happy with RSA keys, and will still offer a secure path connecting two networks. I am a little confused about the whole concept of which method to use, and the relevance of X509. I had assumed that since it gets mentioned everywhere that it

Re: [leaf-user] I would like to use Internet through Gateway in (B) as local.....

2003-03-27 Thread Lynn Avants
On Sunday 16 March 2003 02:27 am, Byounghae Kim wrote: I need all environment setting methods for Server and Client. I wish your reply in details. I'm not sure about any details of Global IP, expecially if this is propietary within a Win32 environment you'll likely need details from the

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Charles Steinkuehler
Simon Chalk wrote: Hi Charles, Are you saying that windows 2000 is quite happy with RSA keys, and will still offer a secure path connecting two networks. I am a little confused about the whole concept of which method to use, and the relevance of X509. I had assumed that since it gets mentioned

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
Hi Charles, Thanks for your information. I essentially need what you describe in option 1, but assumed that I had also to do option 2 to achieve the required result. To confirm my requirement: - I essentially have two private networks permantently connected to the internet, each to be

[leaf-user] FreeS/WAN AES alg

2003-03-27 Thread Bibinsa
Does the freeswan lrp package supports EAS alg ? I want to use Cisco VPN Client under winXP/2k avec Bering running freeswan but freeswan appears not to be able to use AEC algo. How can I use Cisco VPN Client ? ___ Do You Yahoo!? -- Une

[leaf-user] ipsec and Shorewall

2003-03-27 Thread Guillermo Kunst
Hi all, i have setup a Bering-uClibc 1.1 version with ipsec.lrp and shorewall. I have some tunnels running with out a problem. No i like to setup some Road Warrior users. I follow the settings under http://www.shorewall.net/IPSEC.htm. In /etc/shorewall/zones i put: ZONEDISPLAY COMMENTS

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Tom Eastep
On Thu, 27 Mar 2003, Guillermo Kunst wrote: I need to setup dif. rules for each mobile user. So i was thinking to control this over the zone name (eg. mvpn1 - loc, mvpn2 only port 80 to loc etc) But how is shorewall seeing that this user is now aktiv?? You will need to use Shorewall's

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Guillermo Kunst
Dear Tom, yes you are right. I follow the dynamic zone descr. But i´m noch sure where to put the /sbin/shorewall add ipsec0:134.28.54.2 vpn2 command in freeswan. Can you give me a direction? Thanks for your help Guillermo --On Donnerstag, 27. März 2003 09:20 -0800 Tom Eastep [EMAIL

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Tom Eastep
On Thu, 27 Mar 2003, Guillermo Kunst wrote: Dear Tom, yes you are right. I follow the dynamic zone descr. But i´m noch sure where to put the /sbin/shorewall add ipsec0:134.28.54.2 vpn2 command in freeswan. Can you give me a direction? You put it in the updown' script that you specify

[leaf-user] OpenVPN

2003-03-27 Thread Scott Merrill
I've seen some posts (here and on the Shorewall list) about OpenVPN, so I thought I'd take a look. I like what I see, and I'd like to try to implement it on LEAF/Bering. Getting OpenVPN compiled for Bering is problematic, though. I followed the Bering UML instructions for creating a virtual

[leaf-user] ip route ... table commands

2003-03-27 Thread Guillermo Kunst
I must use some extra ip route and ip rule commands as described in the Linux Advanced Routing Traffic Control HOWTO Chapter 4.2.1 Split access to setup 2 ISP connections with proper routing. Where is the best place to put this type of commands. In the network file or in the shorewall config??

Re: [leaf-user] ip route ... table commands

2003-03-27 Thread Tom Eastep
On Fri, 28 Mar 2003, Guillermo Kunst wrote: I must use some extra ip route and ip rule commands as described in the Linux Advanced Routing Traffic Control HOWTO Chapter 4.2.1 Split access to setup 2 ISP connections with proper routing. Where is the best place to put this type of commands.

Re: [leaf-user] ip route ... table commands

2003-03-27 Thread bino-psn
I use ip rule and extra ip route table (modified /etc/iproute2/rt_tables) for long time. For this to work, I've created a new script and put it in /etc/init.d directory. Don't forget about the RCDLINK. Sincerely -bino- - Original Message - From: Tom Eastep [EMAIL PROTECTED] To: Guillermo

Re: [leaf-user] FreeS/WAN AES alg

2003-03-27 Thread Lynn Avants
On Thursday 27 March 2003 09:16 am, Bibinsa wrote: Does the freeswan lrp package supports EAS alg ? No, it supports 3DES. How can I use Cisco VPN Client ? Pass Ipsec through the router so you can connect to the Cisco router that the client software is designed to connect to. If you want

Re: [leaf-user] OpenVPN

2003-03-27 Thread Lynn Avants
On Thursday 27 March 2003 02:46 pm, Scott Merrill wrote: Getting OpenVPN compiled for Bering is problematic, though. I followed the Bering UML instructions for creating a virtual slink environment for compiling userland programs, but the compilation of OpenVPN produced a binary that did not

[leaf-user] Re: Can't make keys for SSHD

2003-03-27 Thread Richard Saunders
Forget it. DOH. stupid. sorry. I've followed the instructions at http://leaf.sourceforge.net/devel/jnilo/openssh2.html but I don't get very far. When I type makekey, I get the message /usr/bin/makekey :ssh-keygen: notfound I'm using the latest image of Bering on 2 floppies set up for dial up

[leaf-user] eth assign to NIC problem

2003-03-27 Thread Otto Halk - TeleLarm
Hello all! Is it possible to assign eth* to a specific NICs? I read about PCI card slot positions and MAC and HW addresses order for ISA cards in this mail-list but I think my case is differend. The problem: I use Bering 1.1 with 2 NICs. 1.card is Orinoco Silver wireless PCMCIA card in ISA