Setting up VPN's

2003-05-15 Thread Craig
Hi Guys We have to setup a VPN for a client and was wondering what software packages we could use for this, what works well and is reliable ? And what I need to do to get it working on their firewall ... Thanks Craig

gre tunnel MTU adjustment

2003-05-15 Thread Jeff S Wheeler
Dear List, I have a GRE tunnel setup between a debian linux/zebra router at my co-lo and my home office. This allows me to have a /27 without coughing up $7/IP to the local cable monopoly. There are no other broadband IP options available. My problem is I can't raise the MTU on the intermediate

Re: Setting up VPN's

2003-05-15 Thread aCaB
Your cross posted question has already been discussed in debian-isp ml on 19-20-21 March 2003. Please have a look at the archives: http://lists.debian.org/debian-isp/2003/debian-isp-200303/threads.html Hi Guys We have to setup a VPN for a client and was wondering what software packages we could

RE: Setting up VPN's

2003-05-15 Thread Daniel Hooper
Pptp-linux is about all there is unfortunatly, you'll also need to get a patched version of ppp and do some kernel modifications to support mppe. -Daniel -Original Message- From: Craig [mailto:[EMAIL PROTECTED] Sent: Thursday, 15 May 2003 3:06 PM To: Debian-Security; Debian-ISP Subject:

Re: gre tunnel MTU adjustment

2003-05-15 Thread Teun Vink
On Thu, 2003-05-15 at 09:40, Jeff S Wheeler wrote: > Dear List, > > I have a GRE tunnel setup between a debian linux/zebra router at my > co-lo and my home office. This allows me to have a /27 without coughing > up $7/IP to the local cable monopoly. There are no other broadband IP > options avai

Re: Setting up VPN's

2003-05-15 Thread thing
Craig wrote: Hi Guys We have to setup a VPN for a client and was wondering what software packages we could use for this, what works well and is reliable ? And what I need to do to get it working on their firewall ... Thanks Craig I use freeswan ipsec, I believe win2k and firewall1 are compatible

RE: gre tunnel MTU adjustment

2003-05-15 Thread Christian Storch
Perhaps you want to say: iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu ? Another simple possibility for small networks is to adjust the default MSS of every client to something about 1400. (that value fits for nearly every kind of tunnel) Christian PS: Somethi

RE: gre tunnel MTU adjustment

2003-05-15 Thread Teun Vink
On Thu, 2003-05-15 at 11:51, Christian Storch wrote: > Perhaps you want to say: > > iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j > TCPMSS --clamp-mss-to-pmtu > You're right, that's the correct argument (--clamp-mss-to-pmtu) Incidently, --clamp works as well, iptables obviously does some

Re: reinstall slapd

2003-05-15 Thread Joey Hess
[EMAIL PROTECTED] wrote: > I've discovered a unique bug, I think. I ran dpkg-reconfigure debconf, > and selected readline, instead of dialog, and now it's prompting for > the admin password. Sheesh. All that time wasted... Sorry -- the sad fact is that the version of whiptail in debian unstable dr

Re: Which (simple) Wiki?

2003-05-15 Thread Stuart Krivis
--On Wednesday, May 14, 2003 2:55 PM +0200 Dominik Schulz <[EMAIL PROTECTED]> wrote: Hi, I'm looking for a very simple Wiki. It should be easy to install and have a very clear design. It's meant for a very limited amount of users (less than 10) so I don't need any kind of authtentification. Ever

Content filtering proxie

2003-05-15 Thread Kay-Michael Voit

Content filtering proxy 2

2003-05-15 Thread Kay-Michael Voit
I've no idea why my last message was empty... Sorry... So again... I'm looking for a content filter proxy solution for filtering porn and violence from websites. I don't like filtering, but I'm forced to install it...

Re: Content filtering proxie

2003-05-15 Thread Mark Lijftogt
It worked.. all the content is filterd out.. every last bit. Welldone ! Cheers, Mark On Thu, May 15, 2003 at 11:33:03PM +0200, Kay-Michael Voit wrote: > Old-Return-Path: <[EMAIL PROTECTED]> > From: Kay-Michael Voit <[EMAIL PROTECTED]> > Reply-To: Kay-Michael Voit <[EMAIL PROTECTED]> > To: d

Re[2]: Content filtering proxy 2

2003-05-15 Thread Kay-Michael Voit
thanks, i think this is exactly what i was searching for. though i don't hold with chastity, our lawgiver obviously does :) regards, kay ALB> squid+squidguard+chastity lists+webmin+usermin VERY HIGH LEVEL ALB> solution. It rules and its in debian well, that just figures doesnt ALB> it?

RE: Re[2]: Content filtering proxy 2

2003-05-15 Thread Jeromy Lukenbaugh
You should check out censornet. Debian based and it works great. www.censornet.com -Original Message- From: Kay-Michael Voit [mailto:[EMAIL PROTECTED] Sent: Thursday, May 15, 2003 7:01 PM To: debian-isp@lists.debian.org thanks, i think this is exactly what i was searching for. though