[leaf-user] Dach-CD ipsec -- no connection has been authorized

2002-07-19 Thread Matt Brennan
I'd like to setup a 'roadwarrior' VPN from a win2k/SSH-Sentinel box to a dachstein CD firewall running the ipsec package from Charles's distro. Following guitarlynn's Basic IPSec VPN HowTo I have configured the basics for a PSK authentication. There is udp/500 traffic between the boxes but no

[leaf-user] DCD - bits and pieces

2002-07-08 Thread Matt Brennan
firewall happy thing. :-) matt -- -- Matt Brennan || classForge Pty Ltd || 0403 355 602 -- --- This sf.net email is sponsored by:ThinkGeek Oh, it's good to be a geek. http://thinkgeek.com/sf

[Leaf-user] No masquerade access to private DMZ

2001-12-10 Thread Matt Brennan
Dear List, Using E2B with Extended Scripts, I have an email server sitting in a private address DMZ (172.20.x.x) with two internal networks (192.168.x.y). Connections from the internal network to an SMTP server in the DMZ are masqueraded so they look like connections from the firewall

[Leaf-user] E2B DMZ_SWITCH=PRIVATE

2001-12-04 Thread Matt Brennan
Sorry to spam the list with repeated questions but I am still having no luck with E2B and a private DMZ network. I guess this functionality is just supposed to work out of the box and I must have misconfigured something. I have tried the same setup on two different firewalls with pretty much

Re: [Leaf-user] E2B DMZ_SWITCH=PRIVATE

2001-12-04 Thread Matt Brennan
Charles Steinkuehler wrote: The DMZ network does NOT need to have any particular relationship to the internal network. The fact that when you put the DMZ 'inside' your internal network space, the DMZ is able to access the internet (and isn't able to otherwise) indicates the outbound

[Leaf-user] More info on E2B DMZ_SWITCH=PRIVATE problems

2001-12-02 Thread Matt Brennan
Further to an email of yesterday, having set the DMZ network to be 192.168.2.0/24 as part of the greater internal 192.168.0.0/16 network, I can now talk out of the DMZ to the external world. However, none of the DMZ features appear to work: no connection from internal or external networks to

[Leaf-user] Multiple Internal Interfaces on E2B?

2001-11-28 Thread Matt Brennan
Thanks to Charles, Jacques and all for recent answers on going from e2b to Dachstein rc2. I have decided to stick with e2b for now until I can test things like axfrdns on the eventual final dachstein floppy. In the interim, I wanted to add a second internal network and DMZ to an existing E2B

[Leaf-user] accounting, subnets

2001-10-30 Thread Matt Brennan
i'm currently (happily) using eigerstein2beta with a small home network. i'd like to share my permanent connection to the net with my next-door-neighbour but maintain separate networks. i also have a web server that needs to be moved into a DMZ. the thing to do seems to be to add another couple

[Leaf-user] Re: remote backup of firewall

2001-10-14 Thread Matt Brennan
Charles Steinkuehler wrote: As Ray pointed, out, using dd to make a disk image in RAM and using scp to make a remote copy is a good way to go. There's also another trick I use a lot charles, ray, thanks for your responses. i tried the dd method with little success until finding a message

[Leaf-user] remote backup of firewall

2001-10-13 Thread Matt Brennan
i'm using an eigerstein beasty on a remote firewall. after a few months of robust and useful service (thanks charles!) with occasional remote administration of port forwarding and dns stuff, i'd like to backup the firewall in order to be able to create a new floppy image in case of disaster.