Re: [Vyatta-users] VPN

2008-02-13 Thread Nathan McBride
nt revision of the chapter on Remote Access VPN linked from the Communitiy wiki: > http://www.vyatta.com/twiki/bin/view/Community/GlendaleAlpha1 > > > - Steve > > > Nathan McBride wrote: > I see example everywhere on how to setup a site-site vpn. Are there any > docs on set

[Vyatta-users] VPN

2008-02-13 Thread Nathan McBride
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I see example everywhere on how to setup a site-site vpn. Are there any docs on setting up a vpn that users can connect into using a client? Is Vyatta capable? Thanks, Nate -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Usin

Re: [Vyatta-users] ps3

2008-02-05 Thread Nathan McBride
> rc script. > > Justin > > On Feb 5, 2008 4:40 AM, Nathan McBride <[EMAIL PROTECTED]> wrote: > > "Sorry, but no - Debian Linux under the hood :-)" > > > > Ok, and? > > > > http://packages.debian.org/etch/linux-igd > > > > Na

[Vyatta-users] ps3

2008-02-04 Thread Nathan McBride
Hey guys, I finally got my old comp which is running vyatta to now be a wireless vyatta router. So I can connect my Playstation 3 to the router and it goes on the network and most things work. However it only has what playstation calls nat3. This is because it isn't getting all the ports it need

Re: [Vyatta-users] Vyatta box hacked?

2008-02-04 Thread Nathan McBride
2008, at 2:00 PM, Jostein Martinsen-Jones wrote: > > > Yes, i did change the root password asap! > > > > I would much like to see a configuration snippet on how to use > > rsa-keys. > > Can I use several rsa-keys so i can login as different users? > > &g

Re: [Vyatta-users] Vyatta box hacked?

2008-02-04 Thread Nathan McBride
> Can I use several rsa-keys so i can login as different users? > > 2008/2/4, Nathan McBride <[EMAIL PROTECTED]>: > Yup sure is. I have setup my vyatta router to only allow rsa > keys. > Did you change your root password from

Re: [Vyatta-users] Vyatta box hacked?

2008-02-04 Thread Nathan McBride
Yup sure is. I have setup my vyatta router to only allow rsa keys. Did you change your root password from 'vyatta'? Nate On Mon, 2008-02-04 at 18:13 +0100, Jostein Martinsen-Jones wrote: > Hi > I am only using ssh. Is it possible to have rsa-keys for all users, > including vyatta? > Maybe the at

Re: [Vyatta-users] [Fwd: Re: Starting to get really frustrated... GRRR :D]

2008-01-29 Thread Nathan McBride
ls > Senior Engineer > Shelton | Johns Technology Group > A Vyatta Ready Partner > www.sheltonjohns.com > > > > > > On Jan 29, 2008, at 10:21 PM, Nathan McBride wrote: > > > Can't I do another nat rule? > > > > On Tue, 2008-01-29 at 22:25 -

Re: [Vyatta-users] [Fwd: Re: Starting to get really frustrated... GRRR :D]

2008-01-29 Thread Nathan McBride
ton | Johns Technology Group > A Vyatta Ready Partner > www.sheltonjohns.com > > > > > > On Jan 29, 2008, at 10:05 PM, Nathan McBride wrote: > > > John just told me he can get to the page too. > >> From inside the lan I am going to a browser and typing > > www.no

Re: [Vyatta-users] [Fwd: Re: Starting to get really frustrated... GRRR :D]

2008-01-29 Thread Nathan McBride
Hmm, gotcha. I guess that makes sense actually. I'll see if I can't figure it out. Nate On Wed, 2008-01-30 at 08:49 +0530, Go Wow wrote: > Nathan i can even view it, from inside LAN you cannot view it, if i > remember correctly someone said when you try to enter on NAT'ted ip > from inside netwo

Re: [Vyatta-users] [Fwd: Re: Starting to get really frustrated... GRRR :D]

2008-01-29 Thread Nathan McBride
06 PM, John Mason Jr wrote: > > > I just connected and see the Apache 2 test page running on CentOS > > > > John > > > > > > > > Nathan McBride wrote: > >> First off I appreciate help from everyone, this is a nice change to > >> some

[Vyatta-users] [Fwd: Re: Starting to get really frustrated... GRRR :D]

2008-01-29 Thread Nathan McBride
ace: "eth0" > protocols: "tcp" > source { > network: 0.0.0.0/0 > } > destination { > address: 1.2.3.4 > port-name ssh > } > inside-address { >

Re: [Vyatta-users] Starting to get really frustrated... GRRR :D

2008-01-29 Thread Nathan McBride
{ > network: "0.0.0.0/0" > } > } > > Nate > > On Mon, 2008-01-28 at 21:39 -0800, An-Cheng Huang wrote: > > Hi Nate, > > > > The "inside-address" is the internal (private) IP address of your Web > > server, which

Re: [Vyatta-users] Starting to get really frustrated... GRRR :D

2008-01-28 Thread Nathan McBride
Web server, > which in your case is 192.168.0.105. The "destination address" should > actually be the public IP address that outside clients will use to access > your server, so usually this is the public IP address of your router. > > An-Cheng > > Nathan McBrid

Re: [Vyatta-users] Starting to get really frustrated... GRRR :D

2008-01-28 Thread Nathan McBride
internal (private) IP address of your Web server, > which in your case is 192.168.0.105. The "destination address" should > actually be the public IP address that outside clients will use to access > your server, so usually this is the public IP address of your router. >

[Vyatta-users] Starting to get really frustrated... GRRR :D

2008-01-28 Thread Nathan McBride
I went and looked at the old docs. I thought I set them up correctly but aparently I didn't. I'll im trying to do is to get people on the internet to view the website on my comp (192.168.0.105). The only difference that i noticed when I tried to commit the example in the old docs was that vc3 re

Re: [Vyatta-users] just two more questions for today... :D

2008-01-28 Thread Nathan McBride
athan it does load from another computer and as far as I know > masquerading is done when we want to give access of internet to > internal LAN if this makes sense lol. > > On 29/01/2008, Nathan McBride <[EMAIL PROTECTED]> wrote: > Hmm, ok. When is masquarading used?

[Vyatta-users] just two more questions for today... :D

2008-01-28 Thread Nathan McBride
I just made a script to load a firewall with iptables. I know iptables so until the bug gets fixed I'll just do it that way. I do have two more questions though. 1). How do I setup 'port-forwarding'. So when you go through port 80 from the wan it sends it to some ip on the internal network at

Re: [Vyatta-users] Firewall question.

2008-01-28 Thread Nathan McBride
Hmm, ok. Can I just create my full firewall in iptables? Last time I did that, I changed the default rule for INPUT to DROP and then added a rule to allow ssh and it didn't seem to work? Thanks, Nate signature.asc Description: This is a digitally signed message part ___

Re: [Vyatta-users] Firewall question.

2008-01-28 Thread Nathan McBride
can tell, the rule 1 you > describe below should work properly in version 2.3.1. > > - Steve > > > Nathan McBride wrote: > > So then I probably couldn't view a web page or see my pings because > > the response packets I was getting were being blocked? > &

Re: [Vyatta-users] Firewall question.

2008-01-28 Thread Nathan McBride
Nate On Mon, 2008-01-28 at 08:05 -0800, Justin Fletcher wrote: > You shouldn't need the out rule; until a firewall is applied, > everything is accepted. > However, the simple rule is protocol any action accept. That should > do it if you > want to be thorough :-) > >

Re: [Vyatta-users] Firewall question.

2008-01-28 Thread Nathan McBride
n Fletcher wrote: > You shouldn't need the out rule; until a firewall is applied, > everything is accepted. > However, the simple rule is protocol any action accept. That should > do it if you > want to be thorough :-) > > Justin > > On Jan 28, 2008 7:28 AM, Nathan

[Vyatta-users] Firewall question.

2008-01-28 Thread Nathan McBride
Hey guys, I just installed Vyatta and have it working. (big step for me) But I'm having some trouble. I first wanted to know if I should make the firewall using Vyatta's commands or just iptables? I tried iptables and it didn't seem to work. I added a rule to allow ssh but ssh couldn'g go through