RE: netscreen dip question.

2002-02-27 Thread bob bobing
The vendor that is connected to the dmz doesn't want to add routes to my private ips (172.25.x.x) . The dmz network has a non private addr range ( yes that we own) on it. This way the vendor only needs to add routes to the dmz network, and we handle the rest. 10-4? --- [EMAIL PROTECTED] wrote:

smoothwall

2002-02-27 Thread Marco Zimmermann
Hi all Does anyboby know something about the firewall called smoothwall (www.smoothwall.org)! Some friends of mine are using this pre configured firewall for their home network. I want to use smoothie for a small network in a little company, whit about 20 workstations behind the firewall. and

smoothwall and pptp

2002-02-27 Thread sergione
Hi, i'm trying to choose the right firewall for my organisation and i found it's not an easy task... i'm focusing on smoothwall, but readind the docs i didn't understand if i'll be able to make my pptp vpn connections pass through. Waiting for suggestions, thank you :) bye, sergio - icq uin

Re: smoothwall and pptp

2002-02-27 Thread Alvin Oga
hi ya pptp is not secure enough i tend NOT to allow vpn internally or from outside ( guess just me being nuts-o ) ( ssh-only... from inside or outside... for firewall options... and vpn options... hire an outsider for a day of consulting/installing... - if

Cisco Security Advisory: Data Leak with Cisco Express Forwarding

2002-02-27 Thread Cisco Systems Product Security Incident Response Team
-BEGIN PGP SIGNED MESSAGE- Cisco Security Advisory: Data Leak with Cisco Express Forwarding Enabled Revision 1.0 For Public Release 2002 February 27 08:00 (UTC -0800) - -- Summary === All Cisco devices

RE: netscreen dip question.

2002-02-27 Thread dgillett
On 27 Feb 2002, at 1:39, bob bobing wrote: The vendor that is connected to the dmz doesn't want to add routes to my private ips (172.25.x.x) . The dmz network has a non private addr range ( yes that we own) on it. This way the vendor only needs to add routes to the dmz network, and we

Re: smoothwall

2002-02-27 Thread ezat
Just wondering Joe, What enhancements and security fixes have you seen in IPCOP that you havent seen in smoothwall? regards, Ezat At 08:57 AM 27/02/2002 -0500, Joe Matuscak wrote: On Wed, 27 Feb 2002, Marco Zimmermann wrote: Does anyboby know something about the firewall called

Re: smoothwall

2002-02-27 Thread Joe Matuscak
On Thu, 28 Feb 2002, ezat wrote: What enhancements and security fixes have you seen in IPCOP that you havent seen in smoothwall? From IPcop update 2: Fixed: Squid FTP vulnerability fixed Squid SNMP vulnerability fixed Squid HTCP vulnerability fixed Joe Matuscak Rohrer Corporation 717

Re: smoothwall

2002-02-27 Thread Fredde
Another firewall that are more professional is Astaro, www.astaro.org which i´m using at home atm, if you are going to use it commersialy you got pay for it(fairly small compared to what you get) really nice firewall. /Fredde - Original Message - From: ezat [EMAIL PROTECTED] To: Joe

Re: smoothwall and pptp

2002-02-27 Thread dgillett
On 27 Feb 2002, at 3:42, Alvin Oga wrote: pptp is not secure enough i tend NOT to allow vpn internally or from outside ( guess just me being nuts-o ) ( ssh-only... from inside or outside... Guess what: Any user who runs PPP over their SSH session has got a VPN

sunscreen web problem

2002-02-27 Thread Gary Ferrer
Hi all, I'm not sure how I got here but here it is: I'm unable to access the webserver (which happens to be on the same machine as the firewall) from a client on the internal private netusing the canonical name of the webserver.I can access the webserverinternally usingthe local name. So

Re: smoothwall and pptp

2002-02-27 Thread Alvin Oga
hi ya dg we dont allow any ppp/slip ... :-) we dont allow dhcp either... we dont allow wireless connection either.. we dont allow pop3/imap... ( pop3s ..maybe if they beg ( ie..the ceo types and know that it could be a big problem later dont allow --- no connections to any

Re: smoothwall and pptp

2002-02-27 Thread Ron DuFresne
On Wed, 27 Feb 2002, Alvin Oga wrote: [SNIP] dumb question ... - why is VPN needed ??? ssh seems to do everything i need - if its (VPN) for network neighborhood to go browsing... shoot it/kill it/stomp it (network neighborhood)... Unless ssh is terminated on the

Re: smoothwall and pptp - ssh

2002-02-27 Thread Alvin Oga
hi ya ron got me confused/worried now ... hummm... my understanding is the following... - from home(remote), we ssh into a gateway machine and than from it, ssh into local machines at the company... my understanding is that all traffic is encrypted... from

email address changing

2002-02-27 Thread Allen P. Numerick
Could someone tell where i can change my email address on the list. My address is changing to [EMAIL PROTECTED] and i'm not sure where to change it on the list. thanks, -Allen

RE: email address changing

2002-02-27 Thread Sameer R. Manek
The same place you originally got onto this list. http://lists.gnac.net/firewalls/ -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Allen P. NumerickSent: Wednesday, February 27, 2002 6:51 PMTo: [EMAIL PROTECTED]Subject: email address

VPN connections to FW-1

2002-02-27 Thread simon . kellow
Title: VPN connections to FW-1 I am just trying to spec out a VPN project. We have fw-1, so I know what is going to be at that end. But the clients. Do I Have to use SecuRemote? Can I use PGP? Could I use Win2K? What are the options (no/low cost are eyed somewhat more