[leaf-user] Trouble setting up IPSEC VPN tunnels

2005-05-07 Thread Calvin Webster
I'm having trouble deciding what to put in /etc/ipsec.conf, found on the Bering-uClibc configuration menu (3)[Packages Configuration]-(5)[ipsec]-(2)[IPSEC Main Configuration File]. Forgive me if the link illustrations below don't line up. My Evolution email client doesn't seem to have true

Re: [leaf-user] Trouble setting up IPSEC VPN tunnels

2005-05-07 Thread Erich Titl
Calvin Webster wrote: I'm having trouble deciding what to put in /etc/ipsec.conf, found on the Bering-uClibc configuration menu (3)[Packages Configuration]-(5)[ipsec]-(2)[IPSEC Main Configuration File]. ... Can someone give me an example of what settings I'd use for setups like the ones

Re: [leaf-user] Trouble setting up IPSEC VPN tunnels

2005-05-07 Thread cpu memhd
I'm having trouble deciding what to put in /etc/ipsec.conf, found on Really?? you don't say... :) Try looking at it this way: |- 172.16.0.100 (your PC) | |- 172.16.0.110 (your roomate's PC) | | 172.16.0.1 (eth1, your leaf router's

[leaf-user] Shorewall confusions ???

2005-05-07 Thread Michael D Schleif
Ongoing conversion of several Dachstein-CD installations have resulted in several challenges. Please, ask if I have left out pertinent information. What am I missing? How can we setup the following scenarios with Bering-uClibc/Shorewall? Shorewall zones: fw loc dmz (proxyarp)

Re: [leaf-user] Shorewall confusions ???

2005-05-07 Thread Erich Titl
Michael D Schleif wrote: Ongoing conversion of several Dachstein-CD installations have resulted in several challenges. Please, ask if I have left out pertinent information. What am I missing? How can we setup the following scenarios with Bering-uClibc/Shorewall? Shorewall zones: fw loc

Re: [leaf-user] Shorewall confusions ???

2005-05-07 Thread Tom Eastep
Michael D Schleif wrote: resides in loc? [2] Internet - public_IP:5 - private_IP:555 Notice the port forwarding of one port to a different port. This is Shorewall FAQ #1c (http://shorewall.net/FAQ.htm#faq1c). -Tom -- Tom Eastep\ Nothing is foolproof to a sufficiently