On Fri, 5 Apr 2002, Ralph Los wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> What you want to do is check the NETMASKS on the encryption domains
> you'er using.  My bet is that the encryption domain for 10.65.1.x or
> 10.65.9.x are NOT /24 or 255.255.255.0.  You probably have a NETMASK
> for one of the networks as 255.255.0.0 or /16....bad.

The natural mask for a 10 net is /8- that's where I'd put my money.

Paul
-----------------------------------------------------------------------------
Paul D. Robertson      "My statements in this message are personal opinions
[EMAIL PROTECTED]      which may have no basis whatsoever in fact."

_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls

Reply via email to