RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
Interfaces are 100Mbps, but our internet is about 50Mbps total I believe (still have yet to get hard facts from people here). With our daily traffic, we see always 80GB total daily... but I'll keep hourly accounting in mind. [Mitch says:] With 100Mbps interfaces, you have to be prepared to clear t

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
If I understand this correctly... I'd have to add SNMP to the server and rtg would then poll via SNMP, storing the results in the MySQL server. Seems very good, but I'm a bit hesitant just because I'd like to keep as few software packages as possible running on the firewall. [Mitch says:] y

RE: Network accounting

2005-01-17 Thread Mitch (Bitblock)
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andrew Seguin Sent: January 17, 2005 12:11 PM To: freebsd-net@freebsd.org Subject: Network accounting I've searched Google, I've searched through the FreeBSD-net archives and have gotten a few leads to what I

RE: Load Balancing

2004-12-17 Thread Mitch (Bitblock)
> -Original Message- > Totally true and problem get worse when you already have the equipament > and have to implement a solution over it. > We are also using a script at this moment but it doesn't do load > balance. What it only do is to check if the current provide > are okay, and if not,

RE: Load Balancing

2004-12-16 Thread Mitch (Bitblock)
> > Why dont you all do yourselves a favor and go out and buy one of those > home dsl/cable modems that have 2 ports and provide load balancing > instead. > [Mitch says:] The only ones I've seen were rather expensive and aren't modem's - they are routers... so you have to still have your ADSL mo

RE: Load Balancing

2004-12-16 Thread Mitch (Bitblock)
> NiY wrote: > > >Greetings! I have yet to find a definitive answer on this subject, so > >I was hoping someone would let me know the official way to go about > >this, or if it's even possible. > > > >We have two ADSL services coming into out building. We would like to > >use them both on one netw

RE: gateway for separate networks

2004-09-11 Thread Mitch (bitblock)
Assuming the second nic is used for it's own private subnet, and not a second route to the internet (which would require a much fancier setup ;-) you don't need to do anything except add the interface, configure it, and adjust any firewall rules to allow whatever access you need. Any services you

RE: ipsec packet filtering

2004-07-30 Thread Mitch (bitblock)
> But by adding the following option to the kernel conf file you can get > the processing path I think you are asking for?? > > options IPSEC_FILTERGIF (documented in LINT) > > This then causes the decrypted packet to be passed thru IPFW again. > > Be aware this has significant conseq

RE: ipsec packet filtering

2004-07-29 Thread Mitch (bitblock)
I don't know what the reasons are, but I know the result. After much frustrating reasearch I came to the conclusion that I can: a) use linux (not an option as far as I'm concerned) b) use openvpn I need to create a hub and spoke type of vpn arrangement - one spoke node needs to communicate with

RE: named in sandbox

2004-05-20 Thread Mitch (bitblock)
You need to compile named-xfer as statically linked, or move it's dependant libraries into the chroot. Can't remember the details of how I did that, and I don't use named any more - but that's your problem. hope that helps. m/ > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EM

RE: Routing and VPN troubles...

2004-05-01 Thread Mitch (bitblock)
> May be it is possible to use proxy arp on de "gateway" FBSD4 > machine. So all > machines can talk to each thru FBSD4 box. We use some similair setup to > prevent people to talk to each without us knowning (bigboss is watching). > > All traffic will then be handled by the proxy arp box. > I'll

RE: Routing and VPN troubles...

2004-05-01 Thread Mitch (bitblock)
> -Original Message- > From: Artyom V. Viklenko [mailto:[EMAIL PROTECTED] > Sent: Saturday, May 01, 2004 12:29 AM > To: Mitch (bitblock) > Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: Re: Routing and VPN troubles... > > > Mitch (bitblock) wrote: > >

Routing and VPN troubles...

2004-04-30 Thread Mitch (bitblock)
There are about a 1000 different lists - hope this is the right two - if not, any suggestions welcome! The crux of my problem, is that I need to configure a VPN network in a star - one central node, many outside nodes... easy right? The problem is that I need the individual "rays" or "spokes" to

Routing and VPN troubles...

2004-04-30 Thread Mitch (bitblock)
There are about a 1000 different lists - hope this is the right one - if not, any suggestions welcome! The crux of my problem, is that I need to configure a VPN network in a star - one central node, many outside nodes... easy right? The problem is that I need the individual "rays" or "spokes" to