Re: [leaf-user] A couple of odd behavior issues???

2005-02-21 Thread Mike Leone
Luis.F.Correia wrote: > > Hi! > > answer to question 1 > >> -Original Message- >> From: Craig Caughlin [mailto:[EMAIL PROTECTED] >> Sent: Thursday, February 17, 2005 3:04 AM >> To: LEAF >> Subject: [leaf-user] A couple of odd behavior issues??? >> >> Hi folks, >> I'm having a little s

Re: [leaf-user] howto_restart/reload modules

2003-03-23 Thread Mike Leone
Jeff Newmiller ([EMAIL PROTECTED]) had this to say on 03/23/03 at 16:56: > > > > Can I get help on this in this fourm? > > This is an odd question... I think he meant it as "Should I ask this here, or on the Shorewall list?". At least, I hope that's what he meant pgp0.pgp Descriptio

Re: [leaf-user] Dachstein Port Forwarding

2003-02-14 Thread Mike Leone
Doug Sampson ([EMAIL PROTECTED]) had this to say on 02/14/03 at 15:07: > > > > But ... the ONLY change we are suggesting you make is to the Exchange > > server's default gateway. Does that *really* require a reboot > > on Windows? > > (I know the old joke about "You have moved your mouse - pre

Re: [leaf-user] More Bering IPSec questions ...

2003-02-10 Thread Mike Leone
Lynn Avants ([EMAIL PROTECTED]) had this to say on 02/10/03 at 22:05: > On Monday 10 February 2003 06:31 pm, Mike Leone wrote: > > Hopefully, we'll find out soon. I followed the Shorewall VPN document to > > the letter, and now will be trying to verify my ipsecrets.conf entri

Re: [leaf-user] More Bering IPSec questions ...

2003-02-10 Thread Mike Leone
Lynn Avants ([EMAIL PROTECTED]) had this to say on 02/10/03 at 19:17: > On Monday 10 February 2003 10:58 am, Charles Steinkuehler wrote: > > > I am unaware of any issue that would prevent you from continuing to use > > PSKs after switching to the 509 version of FreeS/WAN. As far as I know, > > P

[leaf-user] More Bering IPSec questions ...

2003-02-09 Thread Mike Leone
OK; so I think I'm making progress ... Anyway, when ipsec starts, I get: # svi ipsec start ipsec_setup: Starting FreeS/WAN IPsec 1.99... ipsec_setup: Using /lib/modules/ipsec.o ipsec_setup: WARNING: eth0 has route filtering turned on, KLIPS may not work ipsec_setup: (/proc/sys/net/ipv4/conf/eth0

Re: [leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread Mike Leone
S Mohan ([EMAIL PROTECTED]) had this to say on 02/09/03 at 21:18: > You do not need fswcert for Freeswan 1.96 upwards. In the ipsec.secrets > file, you can give the name of the pem file itself. Freeswan will > "automagically" discover the format of the key and extract it at > startup. Good to kn

[leaf-user] Bering w/IPSec troubles - no fswcert command in Debian?

2003-02-09 Thread Mike Leone
I'm trying to set up my Bering 1.0-stable installation to use IPSec (eventually, I want to do IPSec passthru to my office's Pix firewall, but I might also want to use IPSec to connect into my LAN from the outside). I'm following http://leaf.sourceforge.net/devel/jnilo/buipsec.html, creating the c

Re: [leaf-user] Trouble getting to the Web (2nd time)

2003-01-24 Thread Mike Leone
Jay Langford ([EMAIL PROTECTED]) had this to say on 01/24/03 at 00:44: > > I think this is the problem > > >>LRP=root,dhcpd,etc,local,modules,iptables,shorwall,dnscache,weblet > > Not enough packages there by the look of it.., You said you have a DSL > modem.. you should use the PPPOE package t

Re: [leaf-user] ICQ direct connection

2002-11-14 Thread Mike Leone
Vaclav Bouse ([EMAIL PROTECTED]) wrote this on 11 13, 02 at 15:04: > But I the biggest problem with Bering is, that it's impossible to use ssh > (too big and the smaller from dachstein need some libaries) and telnet Works fine for me. But then, I use 2 floppy drives, and store ssh on the 2nd one.

Re: [Leaf-user] AOL vpn restricted??

2002-03-12 Thread Mike Leone
> We have a user trying to use our VPN (ipsec) > thru a dialup AOL account and it dont work. > > Does anyone know for sure if AOL filters ipsec, > protocol 50 & 51, udp port 500 ?? Empirically, I'm gonna say yes. Which means I had the same problems as you - using AOL v6, I could not complete a

Re: [Leaf-user] Help with demand dial on Dachstein

2002-02-19 Thread Mike Leone
- Original Message - From: "Matt Schalit" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 19, 2002 12:39 PM Subject: Re: [Leaf-user] Help with demand dial on Dachstein > Mike Leone wrote: > > > > > This FAQ and many othe

Re: [Leaf-user] Help with demand dial on Dachstein

2002-02-19 Thread Mike Leone
> This FAQ and many others needs to be updated. The lrp.c0wz.com site is no > longer maintained. There are mirrors of its content at: Really? Rick called it quits with LRP/LEAF? How sad. ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.so

Re: [Leaf-user] VPN horsepower

2002-02-01 Thread Mike Leone
Think it would depend smore on the number of simultaneous connections, and the amount of traffic. My Cisco Pix 515 firewall has a Pentium 200, 32M of RAM in it. I'd had a couple simultaneous connections with it with no problems. - Original Message - From: "Christopher Holmes" <[EMAIL

Re: [Leaf-user] tcp ports 445 & 524 ???

2002-01-09 Thread Mike Leone
> Jan 8 17:12:31 trout kernel: Packet log: input DENY eth0 PROTO=6 > a.b.c.157:63882 x.y.z.86:524 L=48 S=0x00 I=15350 F=0x4000 T=112 SYN > (#45) > > Jan 8 17:12:55 trout kernel: Packet log: input DENY eth0 PROTO=6 > a.b.c.157:63884 x.y.z.86:445 L=48 S=0x00 I=15570 F=0x4000 T=112 SYN > (#45) > >

Re: [Leaf-user] loading PCMCIA modules; PCI vs ISA

2002-01-04 Thread Mike Leone
> > The problem is that the bridge chips don't handle ISA > > interrupts too well: Basically, the 4:1 clock speed difference > > causes each ISA interrupt to cause 4 interrupts on the PCI > > bus. OUCH! > > Could you clarify this a little? Could you explain *why* it generates > 4 interrupts? I *

[Leaf-user] Charles makes it into Linux Journal!

2001-12-12 Thread Mike Leone
Among others here on this list ... I have created a single-diskette distribution that installs the base configuration of a VPN firewall based on the Linux Router Project (LRP, www.linuxrouter.org), a compact Linux distribution that can fit on a single, bootable floppy diskette. The distribution

Re: [Leaf-user] DNS flood?

2001-10-26 Thread Mike Leone
> I've checked, double checked, and triple checked this a number of times - > the culprit is ads.x10.com. Every time I see this ad, I check my lrp. > Consistently, this is the onlysite for me that causes this DNS flood in my > logs. Unfortunately, this ad site is attaching to more and more web s