[leaf-user] IPSEC NAT traversal with shorewall HELP!

2003-11-25 Thread Troy Aden
Hello all, I have posted earlier regarding setting up an IPSEC gateway with Bering UCLIBC 2.0. I am happy to report that I have successfully setup an IPSEC tunnel between two routers (External interface only). The next step is to setup IPSEC so that I can communicate from router A's internal

Re: [leaf-user] IPSEC NAT traversal with shorewall HELP!

2003-11-25 Thread Tom Eastep
On Tue, 25 Nov 2003, Troy Aden wrote: The next step is to setup IPSEC so that I can communicate from router A's internal subnet to Router B's internal subnet. ROUTER A Eth0 = 24.78.140.* -- Eth1 = 172.16.0.0/16 I want 172.16.0.0/16 network to be able to communicate with 192.168.1.0/24

Re: [leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-10-01 Thread Erich Titl
kp Thanks, I have a copy of your message. The thing I'd like to improve is the recovery mechanism. I somehow hate having to run a cron job to check if a connection was broken due to IP change. I believe there must be a way for IpSec to detect that the other endpoint is not reachable and to

[leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-09-30 Thread Erich Titl
Hi Has anyone successfully set up an IPSec tunnel with 2 dynamic endpoints. Would you mind to share the shorewall and up/down scripts. I seem to have a problem setting it up because 1) shorewall needs to be up to get the IP address of the remote gateway and 2) shorewall needs the address

Re: [leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-09-30 Thread Tom Eastep
On Tue, 2003-09-30 at 10:40, Erich Titl wrote: Hi Has anyone successfully set up an IPSec tunnel with 2 dynamic endpoints. Would you mind to share the shorewall and up/down scripts. I seem to have a problem setting it up because 1) shorewall needs to be up to get the IP address of the

Re: [leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-09-30 Thread K.-P. Kirchdörfer
Erich; pls search mailinglist - I described a solution for ipsec between two dynamic leaf routers 12/2002 or 1/2003. It seems to work, anyway comments and improvements are welcome kp Am Dienstag, 30. September 2003 19:40 schrieb Erich Titl: Hi Has anyone successfully set up an IPSec tunnel

RE: [leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-09-30 Thread S Mohan
PROTECTED] Subject: [leaf-user] IPSEC/shorewall with 2 dynamic IP's Hi Has anyone successfully set up an IPSec tunnel with 2 dynamic endpoints. Would you mind to share the shorewall and up/down scripts. I seem to have a problem setting it up because 1) shorewall needs to be up to get the IP address

[leaf-user] IPSEc tunnel drops on wireless link

2003-09-23 Thread Erich Titl
Hi I have 2 Bering 1.0_stable stations with FreeSwan 1.99 running over a wireless link. Occasionally (especially on rainy and stormy days) the tunnel breaks down. If I stop ipsec on one end and ping the remote ipsec gateway I get good results. Starting the tunnel again removes the capability

Fw: [leaf-user] Ipsec on bering 1.2

2003-08-27 Thread Huy Bui
] To: [EMAIL PROTECTED]; Huy Bui [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Saturday, August 23, 2003 8:44 PM Subject: RE: [leaf-user] Ipsec on bering 1.2 Sorry, but I have changed my ISP without changing my mailing list subscription, and, of course, my provious mail was rejected... Normal

[leaf-user] IPSEC warnings

2003-08-14 Thread M Lu
Hello all, I use an IPSEC client (SafeNet SoftRemote 9) to connect to Bering (v 1.2) FreeSWAN and got a lot of warnings like that in the auth.log file on the router: Aug 12 12:06:53 router pluto[14353]: packet from 209.139.216.225:4500: not enough room in input packet for ISAKMP Message Aug 12

[leaf-user] IPSEC for wireless hosts only?

2003-07-20 Thread Mark Bynum
Hello, I'm a longtime user of Charles Steinkuehler's distributions, thanks Charles for the 3 years of great firewalls for me! I just got Dachstein-CD Version 1.0.2 working for me and now have ssh access to the firewall. As an aside I had problems with using a 1680k image with the Dachstein CD,

[leaf-user] IPSec Bering 1.2

2003-07-20 Thread S Mohan
I checked the packages for Bering 1.2. Only one IPSec package called ipsec.lrp exists while in 1.0, we had ipsec.lrp and ipsec509.lrp. Does the ipsec.lrp for bering 1.2 support X509 certificates? Mohan --- This SF.net email is sponsored by:

Re: [leaf-user] IPSec Bering 1.2

2003-07-20 Thread Jacques Nilo
Le Lundi 21 Juillet 2003 06:58, S Mohan a écrit : I checked the packages for Bering 1.2. Only one IPSec package called ipsec.lrp exists while in 1.0, we had ipsec.lrp and ipsec509.lrp. Does the ipsec.lrp for bering 1.2 support X509 certificates? Mohan Among other things, yes. IPSEC used by

[leaf-user] ipsec tunnel pings OK; but *NO* app traffic ?!?!

2003-06-20 Thread Michael D. Schleif
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We thought that we had a successful tunnel between our side, with DCD gateway and freeswan v1.91, and a client with a cisco router. Both sides successfully ping each other; but, the application on our side cannot establish a tcp connection to the

[leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
Hi We are considering using a Bering firewall to connect two networks via the internet. Both these networks will have a windows 2000 server which will need to communicate with each other. I have got to grips with installing Bering and Shorewall, but I am struggling with ipsec I have several

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Charles Steinkuehler
Simon Chalk wrote: Hi We are considering using a Bering firewall to connect two networks via the internet. Both these networks will have a windows 2000 server which will need to communicate with each other. I have got to grips with installing Bering and Shorewall, but I am struggling with ipsec I

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Luis.F.Correia
PROTECTED] Sent: Thursday, March 27, 2003 1:01 PM To: Simon Chalk Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Ipsec Setup with Bering LEAF Simon Chalk wrote: Hi We are considering using a Bering firewall to connect two networks via the internet. Both these networks will have a windows 2000

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Lynn Avants
On Thursday 27 March 2003 04:10 am, Simon Chalk wrote: 1) Do I need ipsec or ipsec509 for use with windows 2000 servers located on each network. As CS noted, this doesn't matter as long as both are gateways. x509 certs are much more difficult than RSA-keys IMHO. 2) If I do need ipsec509,

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
that it was necessary. Regards, Simon. -Original Message- From: Charles Steinkuehler [mailto:[EMAIL PROTECTED] Sent: 27 March 2003 13:01 To: Simon Chalk Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Ipsec Setup with Bering LEAF Simon Chalk wrote: Hi We are considering using a Bering firewall

Re: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Charles Steinkuehler
Simon Chalk wrote: Hi Charles, Are you saying that windows 2000 is quite happy with RSA keys, and will still offer a secure path connecting two networks. I am a little confused about the whole concept of which method to use, and the relevance of X509. I had assumed that since it gets mentioned

RE: [leaf-user] Ipsec Setup with Bering LEAF

2003-03-27 Thread Simon Chalk
and sql 1433. Regards, Simon. -Original Message- From: Charles Steinkuehler [mailto:[EMAIL PROTECTED] Sent: 27 March 2003 13:27 To: Simon Chalk Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Ipsec Setup with Bering LEAF Simon Chalk wrote: Hi Charles, Are you saying that windows

[leaf-user] ipsec and Shorewall

2003-03-27 Thread Guillermo Kunst
Hi all, i have setup a Bering-uClibc 1.1 version with ipsec.lrp and shorewall. I have some tunnels running with out a problem. No i like to setup some Road Warrior users. I follow the settings under http://www.shorewall.net/IPSEC.htm. In /etc/shorewall/zones i put: ZONEDISPLAY COMMENTS

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Tom Eastep
On Thu, 27 Mar 2003, Guillermo Kunst wrote: I need to setup dif. rules for each mobile user. So i was thinking to control this over the zone name (eg. mvpn1 - loc, mvpn2 only port 80 to loc etc) But how is shorewall seeing that this user is now aktiv?? You will need to use Shorewall's

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Guillermo Kunst
Dear Tom, yes you are right. I follow the dynamic zone descr. But i´m noch sure where to put the /sbin/shorewall add ipsec0:134.28.54.2 vpn2 command in freeswan. Can you give me a direction? Thanks for your help Guillermo --On Donnerstag, 27. März 2003 09:20 -0800 Tom Eastep [EMAIL

Re: [leaf-user] ipsec and Shorewall

2003-03-27 Thread Tom Eastep
On Thu, 27 Mar 2003, Guillermo Kunst wrote: Dear Tom, yes you are right. I follow the dynamic zone descr. But i´m noch sure where to put the /sbin/shorewall add ipsec0:134.28.54.2 vpn2 command in freeswan. Can you give me a direction? You put it in the updown' script that you specify

[leaf-user] IPsec with Bering 1.1 without MAWK.LRP and IPSEC509.LRP ?

2003-03-10 Thread Francois BERGERET
Hi all folks, I am jumping into IPSec with my two feet. I am using Bering 1.1. I am surprised to see that our friend Jacques NILO has stored minus files for Bering 1.1 than the previous 1.0. I have trieved the IPSEC.LRP, but not IPSEC509.LRP and not MAWK.LRP in his current directories

Re: [leaf-user] IPsec with Bering 1.1 without MAWK.LRP and IPSEC509.LRP ?

2003-03-10 Thread Lynn Avants
On Monday 10 March 2003 03:07 pm, Francois BERGERET wrote: Hi all folks, I am jumping into IPSec with my two feet. I am using Bering 1.1. I am surprised to see that our friend Jacques NILO has stored minus files for Bering 1.1 than the previous 1.0. I have trieved the IPSEC.LRP, but not

RE: [leaf-user] IPsec with Bering 1.1 without MAWK.LRP and IPSEC509.LRP ?

2003-03-10 Thread Francois BERGERET
] [mailto:[EMAIL PROTECTED] la part de Lynn Avants Envoyé : lundi 10 mars 2003 22:36 À : [EMAIL PROTECTED] Objet : Re: [leaf-user] IPsec with Bering 1.1 without MAWK.LRP and IPSEC509.LRP ? On Monday 10 March 2003 03:07 pm, Francois BERGERET wrote: Hi all folks, I am jumping into IPSec

Re: [leaf-user] IPsec with Bering 1.1 without MAWK.LRP and IPSEC509.LRP ?

2003-03-10 Thread Jacques Nilo
On Monday 10 March 2003 22:07, Francois BERGERET wrote: Hi all folks, I am jumping into IPSec with my two feet. I am using Bering 1.1. I am surprised to see that our friend Jacques NILO has stored minus files for Bering 1.1 than the previous 1.0. I have trieved the IPSEC.LRP, but not

[leaf-user] IPsec routing

2003-02-11 Thread Erich Titl
Hi I am planning ro route a remote location on a wireless link through a ipsec tunnel to the internet. The set up specifies a 0.0.0.0/0 subnet behind the tunnel, but this is what I get in the route after issuing ipsec start. This is on Bering 1_0.stable 2.4.18 before ipsec start # ip route

Re: [leaf-user] IPsec routing

2003-02-11 Thread Charles Steinkuehler
Erich Titl wrote: Hi I am planning ro route a remote location on a wireless link through a ipsec tunnel to the internet. The set up specifies a 0.0.0.0/0 subnet behind the tunnel, but this is what I get in the route after issuing ipsec start. This is on Bering 1_0.stable 2.4.18 before ipsec

Re: [leaf-user] IPsec routing

2003-02-11 Thread Erich Titl
Charles Charles Steinkuehler wrote the following at 22:56 11.02.2003: The routes might puzzle you, but they are correct. Bingo, thanks, sometimes it helps if someone explains netmasks... :-( Erich THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC

Re: [leaf-user] IPSec for latest wisp-distibution.

2003-01-22 Thread Nicolas Cedraschi
Thanks It seems that the ipsec module is needed. Do you know, if the actual kernel is patched for freeswan or if we need a dedicated kernel? Vladimir I. wrote: Bering packages for 2.4.20 kernels may do. Although I'm not sure if ipsec support is compiled in or it's in modules in Bering.

Re: [leaf-user] IPSec for latest wisp-distibution.

2003-01-22 Thread Vladimir I.
The kernel source is not patched for FreeSWAN. Actually if you just copy kernel image (linux) from Bering IPSEC over standard WISP-Dist's image, as well as ipsec modules, it might work. However you will loose patches which are integrated into WISP-Dist kernel. Nicolas Cedraschi wrote: Thanks

[leaf-user] IPSec VPN using your dachstein image...

2003-01-21 Thread Lynn Avants
On Monday 20 January 2003 11:51 pm, Darren Schell wrote: Lynn, I have read your Basic IPSec VPN HowTo at http://leaf.sourceforge.net/devel/guitarlynn/ipsec.txt and have set out to set up a subnet to subnet scenario. If you have the time to help me sort out why the VPN doesn't seem to work,

[leaf-user] IPSec for latest wisp-distibution.

2003-01-20 Thread Nicolas Cedraschi
Hi everybody, Thanks for your competent help so far (Special thanks to Vladimir), we really profited of your knowledge. Here rolls in the next question Is there a dedicated ipsec module and package around for wisp? Or will any bering module/package do? All the best Daniel Nicloas

Re: [leaf-user] IPSec for latest wisp-distibution.

2003-01-20 Thread Vladimir I.
Bering packages for 2.4.20 kernels may do. Although I'm not sure if ipsec support is compiled in or it's in modules in Bering. Nicolas Cedraschi wrote: Hi everybody, Thanks for your competent help so far (Special thanks to Vladimir), we really profited of your knowledge. Here rolls in the

[leaf-user] IPSEC Gatewwy and Pass-Through

2003-01-20 Thread Todd Pearsall
I know historically you could not have a Linux router act as an ipsec gateway endpoint and support ipsec pass through. Is that still the case? Basically, if I have a freswan-freeswan lan to lan VPN in place can a user behind on of those routers with SSH Sentinel or Windoze ipsec masq thru the

Re: [leaf-user] IPSEC Gatewwy and Pass-Through

2003-01-20 Thread Lynn Avants
On Monday 20 January 2003 11:30 am, Todd Pearsall wrote: I know historically you could not have a Linux router act as an ipsec gateway endpoint and support ipsec pass through. Is that still the case? The same port is being used and the router cannot answer and forward on the same port, so this

Re: [leaf-user] IPSec for latest wisp-distibution.

2003-01-20 Thread Jacques Nilo
Le Lundi 20 Janvier 2003 17:36, Vladimir I. a écrit : Bering packages for 2.4.20 kernels may do. Although I'm not sure if ipsec support is compiled in or it's in modules in Bering. It's available as a module (comes from freeswan 1.99) It's here:

[leaf-user] ipsec vs ipsec509

2003-01-16 Thread Heriberto Höhlke
Hy I´m setting up a VPN conection with ipsec.lrp. I also seen a ipsec509.lrp module. In few words, what is the main difference between ipsec.lrp and ipsec509.lrp? Regards Heriberto Ahora podés usar Yahoo! Messenger desde tu celular. Aprendé cómo hacerlo en Yahoo! Móvil:

Re: [leaf-user] ipsec vs ipsec509

2003-01-16 Thread Eric Wolzak
Hello Heriberto Hy I´m setting up a VPN conection with ipsec.lrp. I also seen a ipsec509.lrp module. In few words, what is the main difference between ipsec.lrp and ipsec509.lrp? The ipsec.lrp is the freeswan package. The ipsec509 is the same package patched for the use of certificates to

[leaf-user] IPSec

2003-01-01 Thread S Mohan
Chad has made Win2K configuration using IPSec look simple in his documentation. It does not seem as if the description is enough to get it to work well first shot. I've had a horrid time going thro' a Win2K configuration. I've been in the Windows world for over 12 years and Win2K IPSec

Re: [leaf-user] ipsec connectivity

2002-12-28 Thread Charles Steinkuehler
S Mohan wrote: I'm trying to setup a VPN connection between a Win2K box and LEAF using a preshared key setup. I went as per the steps given inthe Microsoft site tosetup IPSec negotiations from IP to IP. The URL is

[leaf-user] ipsec in bering

2002-12-11 Thread S Mohan
I'm trying to generate keys using ipsec on Bering. It seems to take for ever. Do not know if I've not given all arguments and hence program is waiting or it is just taking time. Any help please. Chad's chapter talks of using another machine for generating the certificates etc. Are these utilities

RE: [leaf-user] ipsec in bering

2002-12-11 Thread Luis.F.Correia
-Original Message- From: S Mohan [mailto:[EMAIL PROTECTED]] Sent: Wednesday, December 11, 2002 9:06 AM To: [EMAIL PROTECTED] Subject: [leaf-user] ipsec in bering I'm trying to generate keys using ipsec on Bering. It seems to take for ever. Do not know if I've not given all arguments and hence

[leaf-user] IPSec

2002-11-29 Thread Homer Parker
Ok, my fears were correct :( I have a problem with a race condition the involves IPSec and Shorewall with Bering 1rc3... Here's the bad ASCII art again: 10.0.0.0/24firewall 192.168.0.0/24 | | firewall - Internet |

Re: [leaf-user] ipsec tunnel to a zyxel zywall (successful)

2002-11-19 Thread Erich Titl
Hi Lynn I got it up and running after some debugging, finally it seems to boil down to the fact that the zywall supports ranges on the ip addresses whereas freeSwan only supports entire subnets. For ipsec a range from 0 to 255 is _NOT_ a subnet. I have now a tunnel between a Zywall10 and a

Re: [leaf-user] ipsec Bering

2002-11-17 Thread Stef
Just have to say many thanks Lynn for your explanation and your patience I'm going to try to connect with another ISP, giving away the firewall=yes and trace packets with tcpdump. Ill' inform the list with my investigation. Thanks a lot Stephane guitarlynn wrote: OK, now that we have a lot

[leaf-user] ipsec tunnel to a zyxel zywall (unsuccessful)

2002-11-17 Thread Erich Titl
Hi everyone I am finally attacking the ipsec connection planned for months, unfortunately whithout much success, here is what I am trying: internal C class network 194.124.158.0/24 | Bering rc3 217.162.140.106 | Internet through cable modem on both ends actually hooked on the same switch which

Re: [leaf-user] ipsec tunnel to a zyxel zywall (unsuccessful)

2002-11-17 Thread guitarlynn
On Sunday 17 November 2002 09:03, Erich Titl wrote: + sed -n 17,$p /var/log/messages + egrep -i ipsec|klips|pluto + cat Nov 17 14:58:17 gatekeeper kernel: klips_info:pfkey_cleanup: shutting down PF_KEY domain sockets. Nov 17 15:07:26 gatekeeper kernel: klips_info:pfkey_cleanup: shutting

Re:Re:[leaf-user] ipsec Bering

2002-11-16 Thread sfroment
As you ask me, i put below the output of ipsec barf and the output of auth.log : The ipsec barf command was launch after i try to initiate the tunnel from my road-warrior (using a RAS connection to an ISP). The problem seems to come from the 3 lines from auth.log : Nov 16 13:39:21 firewall

[leaf-user] IPsec troubleshooting pointers

2002-11-16 Thread Lee Kimber
Hi, I'm trying to create a host subnet connection from an XP box to a subnet behind a Bering V1 rc4 NAT firewall. When the XP client pings an interface on the firewalled subnet, it returns one Negotiating IP security response followed by Request timed out for its other ping packets. Judging

Re:[leaf-user] ipsec Bering

2002-11-16 Thread guitarlynn
OK, now that we have a lot of information, let's go through what's here. # defaults for subsequent connection descriptions conn %default # How persistent to be in (re)keying negotiations (0 means very). keyingtries=0 # RSA authentication with keys from DNS. #

Re: [leaf-user] IPsec troubleshooting pointers

2002-11-16 Thread guitarlynn
On Saturday 16 November 2002 15:49, Lee Kimber wrote: Hi, I'm trying to create a host subnet connection from an XP box to a subnet behind a Bering V1 rc4 NAT firewall. When the XP client pings an interface on the firewalled subnet, it returns one Negotiating IP security response followed by

Re: [leaf-user] IPsec troubleshooting pointers

2002-11-16 Thread Lee Kimber
Likely this is a incorrect option set up on the WinXP client. The Bering Users manual ( http://leaf.sourceforge.net/devel/jnilo/buipsec.html#AEN1436 ) has instructions for Win2K, if they help. Possibly Chad Carr or someone else that has connected with WinXP could help here. Yeah, I have been

Re: [leaf-user] IPSec tunnels

2002-11-15 Thread Charles Steinkuehler
Homer Parker wrote: Firewall A 3: eth0: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:30:1b:09:d3:ee brd ff:ff:ff:ff:ff:ff inet 64.216.xxx.xxx/xx brd 64.216.105.127 scope global eth0 4: eth1: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100

[leaf-user] ipsec Bering

2002-11-15 Thread Stef
Hi all, I have a problem with the last distro Bering-rc4 and ipsec.lrp package. I try to conect with a road-warrior and every seems ok (SA established) except that the /var/log/auth.log mention a problem with the impossibility to write the route add for the IP of my road warrior. I follow all

Re: [leaf-user] IPSec tunnels

2002-11-15 Thread Homer Parker
On Fri, 15 Nov 2002 11:00:55 -0600 Charles Steinkuehler [EMAIL PROTECTED] wrote Um...there should be no race condition in the assignment of ipsecN interface numbering. This is done by the ipsec software. Normally, Ok, maybe I don't understand the tunneling as well as I thought

Re: [leaf-user] ipsec Bering

2002-11-15 Thread guitarlynn
On Friday 15 November 2002 16:55, Stef wrote: Hi all, I have a problem with the last distro Bering-rc4 and ipsec.lrp package. I try to conect with a road-warrior and every seems ok (SA established) except that the /var/log/auth.log mention a problem with the impossibility to write the

[leaf-user] IPSec tunnels

2002-11-14 Thread Homer Parker
I'm having a bit of fun with a kinda unique setup... Let's see if I can explain this where someone besides me understands what I'm talking about: Firewall A 64.216.xxx.xxx eth0 Public 10.0.0.0/24 eth1Private 10.0.1.0/24 eth2Secret Firewall B 192.168.1.0/24

Re: [leaf-user] ipsec connect to this?

2002-11-08 Thread Roger E McClurg
] Subject: Re: [leaf-user] ipsec connect to this? Correct me if I am wrong; but, isn't transport mode solely for host-to-host vpn's? Everything seems to be OK in auth.log and ipsec look appears OK, when I use tunnel mode -- however, we cannot ping nor telnet nor ftp to the other side. tcpdump

[leaf-user] ipsec connect to this?

2002-11-06 Thread Michael D. Schleif
Received following set of requirements for one of our DCD's to connect to a remote non-DCD site: ISAKMP Policy: Encryption: 3DES Hash: MD5 Authentication: pre shared keys Diffie Helman group 1 or 2 Use the following key: IPSec

RE: [leaf-user] ipsec connect to this?

2002-11-06 Thread Joey Officer
-Original Message- From: [EMAIL PROTECTED] [mailto:leaf-user-admin;lists.sourceforge.net]On Behalf Of Michael D. Schleif Sent: Wednesday, November 06, 2002 3:30 PM To: LEAF Subject: [leaf-user] ipsec connect to this? Received following set of requirements for one of our DCD's to connect to a remote

RE: [leaf-user] ipsec connect to this?

2002-11-06 Thread Tom Eastep
--On Wednesday, November 06, 2002 3:38 PM -0600 Joey Officer [EMAIL PROTECTED] wrote: If you are questioning can IPSec be setup with DCD sure, you can use a floppy, and with my limited experience, it looks like there is enough information here to setup your ipsec.conf file, but I don't see a

[leaf-user] IPSEC SECRETS MORE THAN ONE TUNNEL

2002-11-01 Thread Lars Emilsson
Charles Steinkuehler Thank you for your replay to my letter, as you wrote the problem was that the two VPN gateways WILL NOT be able to ping each. I am just now looking at five different Vmware-windows on my screen and the workstations in each end have contact with each other over an

Re: [leaf-user] IPSEC SECRETS MORE THAN ONE TUNNEL

2002-11-01 Thread Charles Steinkuehler
And now to my question -- IPSEC SECRETS MORE THAN ONE TUNNEL Configuration of Ipsec secrets We have one head office, two shops, two employees with cable modems with DHCP but known IP addresses for the local nets and two Roadwarriors. If possible I would like to keep

[leaf-user] IPSec tunnel

2002-10-28 Thread Mathieu Gauthier-Pilote
Hello, I have setup an IPSec vpn for our office network. Our firewall is a Debian Woody box with shorewall 1.2. It shares our DSL connection. Following the documentation, I have enabled a roadwarrior type tunnel like this: # TYPE ZONEGATEWAY GATEWAY ZONE

Re: [leaf-user] IPSec tunnel

2002-10-28 Thread guitarlynn
On Monday 28 October 2002 13:11, Mathieu Gauthier-Pilote wrote: The exact problem with this one Win2k box is that the firewall drops packets arriving on UDP port 500. Do I need to setup the tunnel differently with Shorewall? I guess I could just apply global rules to let all IPSec traffic in,

[leaf-user] IPSec shared secret problem

2002-10-24 Thread Homer Parker
I have a Bering RC3 firewall with an IPSec tunnel to a SonicWall that works fine... Until the Bering box gets a new IP... Here's what I have in ipsec.secrets: 64.216.xxx.xxx 208.189.yyy.yyy 0040100F1311 : PSK PreSharedKey Of course, the first IP is Bering, the second SonicWall..

Re: [leaf-user] ipsec and static nat problem

2002-10-01 Thread Chad Carr
On Tue, 1 Oct 2002 13:09:36 +0200 Tomaso Scarsi [EMAIL PROTECTED] wrote: anyone can help me? Please post your ipsec.conf and ipsec.secrets files. Also send the output of ip addr and ip route. We will get into barf if we have to. --

[leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Craig
Hi folks, I want to set up SSH on my currently working great Bering CD, so I added the libz, sshd, and sshkey .lrp packages to my existing CD, and apparently declared them O.K., because they seem to load upon start-up. But...I get this error message that is new- ipsec_setup...unable to create

[leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Craig
Hi folks, This is strange. For some reason the dhcpd service isn't starting on my new CD with the ssh stuff. When I type ps ax, I don't see the /usr/bin/dhcpd eth1 that I normally see. Any suggestions? Thank you. Craig --- This sf.net email

[leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Craig
Hi Erich, Here's the results of df- Filesystem 1k-blocks UsedAvailable Use%Mounted On /dev/root 614461440 100%/ Tmpfs 15292 4 15288 0% /tmp Tmpfs 2048

Re: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Brad Fritz
Craig, On Mon, 26 Aug 2002 07:51:57 MST Craig wrote: Hi folks, I want to set up SSH on my currently working great Bering CD, so I added the libz, sshd, and sshkey .lrp packages to my existing CD, and apparently declared them O.K., because they seem to load upon start-up. But...I get this

Re: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Cass Tolken
Hi Craig, --- Craig [EMAIL PROTECTED] wrote: Hi folks, This is strange. For some reason the dhcpd service isn't starting on my new CD with the ssh stuff. When I type ps ax, I don't see the /usr/bin/dhcpd eth1 that I normally see. Any suggestions? Thank you. I'm gonna guess that when you

Re: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Erich Titl
At 17:22 26.08.2002, you wrote: Hi Erich, Here's the results of df- Filesystem 1k-blocks UsedAvailable Use%Mounted On /dev/root 614461440 now what about this available 0 too many packages or too small root partition.

[leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Craig
Hey thanks guys, I have 32 Mb in this box, should I just make the syst_size twice as big, for example, by adding the entry syst_size=12M after the log_size=4M ? Will that work do you think? Thank you. Craig --- This sf.net email is

Re: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Cass Tolken
Hi Craig, --- Craig [EMAIL PROTECTED] wrote: Hey thanks guys, I have 32 Mb in this box, should I just make the syst_size twice as big, for example, by adding the entry syst_size=12M after the log_size=4M ? Will that work do you think? Thank you. I'd suggest allocating the minimum amount of

[leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Craig
Hi Cass, Hey, that's a pretty cool idea. Since I'm creating my cd's on CD-RW's and I'm not burning (no pun intended) through oodles of CD's, should I just experiment and incrementally increase the syst_size= comment by, say, 1Mb at a time until it works? Is there anything wrong with doing it that

[leaf-user] IPSec status ??

2002-08-26 Thread Phillip . Watts
I want to turn on an LED if any vpn connection is up. I'd like to minitor every couple seconds, 5 at most. I can:ipsec auto --status and grep for an up connection but that's a lot of overhead every few seconds. Does anyone know if IPSec puts anything in /proc that signifies the status

Re: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread Cass Tolken
Hi Craig, --- Craig [EMAIL PROTECTED] wrote: Hi Cass, Hey, that's a pretty cool idea. Since I'm creating my cd's on CD-RW's and I'm not burning (no pun intended) through oodles of CD's, should I just experiment and incrementally increase the syst_size= comment by, say, 1Mb at a time until

RE: [leaf-user] IPSec-SSH conflict?

2002-08-26 Thread S Mohan
to know if this is reported in the FAQ. Have not checked myself. Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brad Fritz Sent: 26 August 2002 21:00 To: Craig Cc: LEAF Subject: Re: [leaf-user] IPSec-SSH conflict? Craig, On Mon, 26 Aug 2002 07:51:57

RE: [leaf-user] IPSec doesn't found public interface - RESOLVED -

2002-08-19 Thread Francois BERGERET
Hi Chad, Thanks for your corrected /usr/lib/ipsec/_startklips file. It is ok now. But I have another error, may be a bad parameter in my IPSec config files. I have not the time this days to check it more... I will start another request thread whan I will seen what is the problem. Thanks for

Re: [leaf-user] IPSec doesn't found public interface

2002-08-11 Thread Chad Carr
On Sun, 11 Aug 2002 13:47:20 +0200 Francois BERGERET [EMAIL PROTECTED] wrote: Hi Chad, Thanks to spend your time to help me (and others). I have understood that you have trieve a bug in the IPSec package, but I don't know how correct it by myself, due to my lack of competence with

RE: [leaf-user] IPSec doesn't found public interface

2002-08-11 Thread François BERGERET
anything in it. Thanks again. Best Regards, Francois BERGERET, France. -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]De la part de Chad Carr Envoye : dimanche 11 aout 2002 16:47 A : [EMAIL PROTECTED]; [EMAIL PROTECTED] Objet : Re: [leaf-user] IPSec doesn't found public

RE: [leaf-user] IPSec doesn't found public interface

2002-08-09 Thread François BERGERET
2002 23:38 À : [EMAIL PROTECTED] Objet : RE: [leaf-user] IPSec doesn't found public interface Salut François François BERGERET wrote the following at 23:15 05.08.2002: Hi Chad ! Thanks in advance for your wondefull job. Is it possible to modify your actual cd image to increase the capacity

Re: [leaf-user] Ipsec or Ipsec509 ???

2002-08-02 Thread Charles Steinkuehler
I'm using Dachstein 1.0.2. How do I know which Ipsec.lrp (or Ipsec509.lrp) to use to set up my VPN? I will likely be using the Ipsec capabilities built into my Windows clients and not Sentinel. I found what looks to be a good tutorial at

Re: [leaf-user] IPSec VPN loses connection - not stable

2002-07-25 Thread Tom Eastep
--On Thursday, July 25, 2002 11:05:24 -0700 Dragon Wood [EMAIL PROTECTED] wrote: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS+DISABLEARRIVALCHECK to replace #290 Any suggestion what might be the issue here? One of the locations has a T1 connection and the other has a ADSL

Re: [leaf-user] IPSec VPN loses connection - not stable

2002-07-25 Thread Phillip . Watts
I am curious what version of FreeSWAN you are running. I am on 1.97 and haven't seen any drops. thanks --- This sf.net email is sponsored by: Jabber - The world's fastest growing real-time communications platform! Don't just IM. Build it

[leaf-user] Ipsec module

2002-07-16 Thread Godfried Duodu
What is the url for the ipsec.o module? Thanks --- This sf.net email is sponsored by: Jabber - The world's fastest growing real-time communications platform! Don't just IM. Build it in! http://www.jabber.com/osdn/xim

Re: [leaf-user] Ipsec module

2002-07-16 Thread Jacques Nilo
Le Mardi 16 Juillet 2002 22:01, Godfried Duodu a écrit : What is the url for the ipsec.o module? Original (i.e. 1.97 version) for Bering 3: http://leaf.sourceforge.net/devel/jnilo/bering/rc3/modules/net/ipsec/ New beta (1.98b version) for Bering 3:

[leaf-user] Ipsec module

2002-07-16 Thread Godfried Duodu
What is the URL for ipsec.o modules, please? Thanks! --- This sf.net email is sponsored by: Jabber - The world's fastest growing real-time communications platform! Don't just IM. Build it in! http://www.jabber.com/osdn/xim

Re: [leaf-user] Ipsec module

2002-07-16 Thread guitarlynn
On Tuesday 16 July 2002 15:01, Godfried Duodu wrote: What is the url for the ipsec.o module? Thanks What LEAF release and how would you like to setup ipsec? Are you looking to use LEAF as an ipsec gateway or just pass-through the firewall with a computer to use a remote network? ~Lynn Avants

RE: [leaf-user] IPSEC Howto for LRP

2002-07-10 Thread Matthew Pozzi
This is it, thanks to all who answered! Wonderful work guys and girls. Lynn's howto with Chad's windows setup info makes a great combo. IPSEC Its working!! Thanks heaps, Matt I think the doc you are talking about is this ipsec howto, courtesy of Lynn Avants, which describes four different

[leaf-user] IPSEC Howto for LRP

2002-07-09 Thread Matthew Pozzi
A while ago I saw a HOWTO on implementing IPSEC on LRP with 4 different scenario's, may have been on Jacques' web site on sourceforge. Now I cannot find it for the life of me, there is plenty of other documentation around but it was the easiest read. I have IPSEC up and going sort of, but I want

Re: [leaf-user] IPSEC Howto for LRP

2002-07-09 Thread Jacques Nilo
Le Mardi 9 Juillet 2002 14:42, Matthew Pozzi a écrit : A while ago I saw a HOWTO on implementing IPSEC on LRP with 4 different scenario's, may have been on Jacques' web site on sourceforge. Now I cannot find it for the life of me, there is plenty of other documentation around but it was the

[leaf-user] IPSEC Howto for LRP

2002-07-09 Thread Craig
Hi Matt, It's not the source you requested, but I've found what I think is a pretty well described and simple to follow explanation of IPSEC using the FreeS/WAN project in a book called Red Hat Linux Security and Optimization by Mohammed J. Kabir. He describes setting up the road warrior

RE: [leaf-user] IPSEC Howto for LRP

2002-07-09 Thread George Luft
Here's an article I ran across (from a link in this mailing list, I believe). It references duckling and LRP. http://www.linuxjournal.com/article.php?sid=4772 And also another from seawall: http://seawall.sourceforge.net/IPSEC.html or more recently, shorewall:

Re: [leaf-user] IPSEC Howto for LRP

2002-07-09 Thread Chad Carr
On Tue, 9 Jul 2002 22:42:47 +1000 Matthew Pozzi [EMAIL PROTECTED] wrote: A while ago I saw a HOWTO on implementing IPSEC on LRP with 4 different scenario's, may have been on Jacques' web site on sourceforge. Now I cannot find it for the life of me, there is plenty of other documentation

<    1   2   3   >