Re: Tunnel Server Forwarding problem.

2001-11-15 Thread Shoichi Sakane
> The problem is: > when i setup an gif tunnel between FreeBSD Tunnel server and FreeBSD > client. Client can only ping to FreeBSD TS . nothing else. > i run following command on FreeBSD Client > and on FreeBSD Tunnel Server: > what is problem ? > whan should i do ? tap all of interfaces of your

Re: Re[2]: IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread Shoichi Sakane
> What about info in regards to running a FreeBSD IPSEC server (racoon) > with DHCP clients (road warriors)? I haven't seen anything about that...is it > possible? If so...any links to info? Thanks in advance. racoon can exchange SAs in such a scenario by using "generate_policy" directive. but

Re[2]: IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread icb-bsd
Hello Shoichi, >> I'm troubled by the fact that racoon seems to be the ONLY tool for this, >> and yet there's an extreme lack of documentation that exists for racoon >> configuration. SS> how about http://www.daemonnews.org/200101/ipsec-howto.html What about info in regards to running a FreeBSD

RE: IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread Shoichi Sakane
> What's the difference between tunnel and transport mode configs in > racoon ? > I'm troubled by the fact that racoon seems to be the ONLY tool for this, > and yet there's an extreme lack of documentation that exists for racoon > configuration. how about http://www.daemonnews.org/200101/ipsec-h

RE: IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread Smith, Rick
What's the difference between tunnel and transport mode configs in racoon ? I'm troubled by the fact that racoon seems to be the ONLY tool for this, and yet there's an extreme lack of documentation that exists for racoon configuration. Anyone have a transport mode config from racoon they could

Re: tunneling with ipsec

2001-11-15 Thread Shoichi Sakane
> how can I setup tunneling firewall using ipsec or something alike? > (need to use some ports which are prohibited). > Do I have to have some computer behind firewall (unfirewalled) and > some programs running on it also? it may help you. http://www.daemonnews.org/200101/ipsec-howto.html To Uns

Re: IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread Shoichi Sakane
> I'm attempting to figure out how to setup an IPv4 IPSEC tunnel between > two of our other offices (running Symantec Raptor 6.50 for Windows NT) > and my FreeBSD firewall here in my office (4.2-RELEASE) > > Here's a little network diagram of the situation: > > x.x.51.24 (my inside) <--> x.x.5

Re: ti driver, vlan and tcpdump

2001-11-15 Thread Brooks Davis
On Thu, Nov 15, 2001 at 02:04:07PM -0800, CJTT wrote: > I see what you're talking about in the driver (if_ti.c). > But I'm not sure if I understand you correctly > (I can't seem to find where the VLAN_INPUT_TAG macro > is located). Would a temporary fix in if_ti.c > be to just remove the vlan_inp

IPSEC / RAPTOR Firewall Interaction

2001-11-15 Thread Smith, Rick
Hi all; I'm attempting to figure out how to setup an IPv4 IPSEC tunnel between two of our other offices (running Symantec Raptor 6.50 for Windows NT) and my FreeBSD firewall here in my office (4.2-RELEASE) Here's a little network diagram of the situation: x.x.51.24 (my inside) <--> x.x.5.254

Re: ti driver, vlan and tcpdump

2001-11-15 Thread CJTT
On Thu, 15 Nov 2001, Brooks Davis wrote: > On Thu, Nov 15, 2001 at 03:41:21PM -0600, Shaun Marko wrote: > > Could you also get the desired result by using a kernel without VLAN support? > > The original poster said he didn't want to configure VLAN interfaces anyway. > > For the moment, on stable

Re: ti driver, vlan and tcpdump

2001-11-15 Thread Brooks Davis
On Thu, Nov 15, 2001 at 03:41:21PM -0600, Shaun Marko wrote: > Could you also get the desired result by using a kernel without VLAN support? > The original poster said he didn't want to configure VLAN interfaces anyway. For the moment, on stable hosts, that will work. Driver vlan support is no

Re: ti driver, vlan and tcpdump

2001-11-15 Thread Shaun Marko
Could you also get the desired result by using a kernel without VLAN support? The original poster said he didn't want to configure VLAN interfaces anyway. -Shaun On Thursday 15 November 2001 03:22, Brooks Davis wrote: > On Thu, Nov 15, 2001 at 12:53:35PM -0800, CJTT wrote: > > While sending some

ti driver, vlan and tcpdump

2001-11-15 Thread CJTT
While sending some test traffic to a FreeBSD 4.4 (cvsupped yesterday), I noticed that tcpdump doesn't seem to see VLAN traffic received on the ti card as it does on the fxp card. (however, tcpdump on the sending ti card sees the traffic leave). tcpdump with non-VLAN traffic on receive side:

MPD-NETGRAPH PPTP server with IPX?

2001-11-15 Thread Dan Larsson
I've got a FreeBSD-4.4 STABLE box running mpd-netgraph as a PPTP server, which works just fine. Is it by any chance possible to support IPX (the Novell protocol) with MPD in this configuration? Pointers most welcome. Regards +-- Dan Larsson -+- Tyfon Svenska AB -+- DL1999-RIPE 2AA5 90AE

Help

2001-11-15 Thread Dmitry Zhukovski
Hi all! I have 3 pc - two FreeBSDs and 1 W2K like this: FreeBSD1(10.0.1.1) -- Link1 -- (10.0.1.2)FreeBSD2(10.0.2.1) -- Link2 -- (10.0.2.2)WIN Both of the links are PPP via TCP. FreeBSD has static route to WIN via FreeBSD2 and WIN has the same to FreeBSD1. Normaly, I can ping from FreeBSD1