Yes, I am definetly referring to using a Dachstein diskette. ;-)
Steve -----Original Message----- From: Joey Officer [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 24, 2002 8:08 AM To: Steve Fink; Eric B Kiser Cc: [EMAIL PROTECTED] Subject: RE: [Leaf-user] ip_masq_ipsec.o for bering Unless you are referring to changing over to using Dachstein, I don't believe the modules will work for the Bering distribution. Surely though someone else here is running a separate IPSec server (non-gateway) that they too would need a Bering version of the ip_xxxxx_ipsec.o module to be compile for Bering. A simple task would be to track down the maintainer of the Bering dist. and ask them if there is already a module compiled, or if we should see compiling a complete set of modules for the Bering kernel base. Joey -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Steve Fink Sent: Wednesday, April 24, 2002 7:56 AM To: Eric B Kiser Cc: [EMAIL PROTECTED] Subject: RE: [Leaf-user] ip_masq_ipsec.o for bering Eric, I'm not a Bering user but the "tasks" you need to accomplish are simple. There are two ways ( in short ) to use IPSEC server and client. The IPSEC server requires the kernel be able to handle the IPSEC packets directly through either compiling IPSEC into the kernel or having IPSEC as a loadable module. The second IPSEC client (which is the one you want to do) is simply passed through your MASQ'd/NAT'd firewall/router/Bering/LEAF boxen. This requires an ip masq module, after perusing the Bering ftp site and the recently updated package list, I do not see where the ip_masq_ipsec.o module is available for Bering, it may be named ip_conntrack_ipsec.o or something of the sort, but it would have to be ip_xxxxxxxxx_ipsec.o the ip_conntrack_ftp.o and ip_conntrack_irc.o allow ftp and irc connections to pass through the box to allow these services for the client PC's. For the purpose you require you might have to drop in a Dachstein disk. The ip_masq_ipsec.o module is included by default. Best, Steve -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eric B Kiser Sent: Tuesday, April 23, 2002 10:27 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [Leaf-user] ip_masq_ipsec.o for bering damn... I have just been sitting here staring at my monitor while the reality of what I am trying to do has dawned on me. When Tom pointed me in the direction of the files ip_conntrack_ipsec.o and ip_nat_ipsec.o I began searching for them under the assumption that I would just load them like any other module. After reading your reply things suddenly came more into focus. If I understand this correctly, then what I am actually looking for is a patch that will make these options available for when I have to recompile the kernel. At which time, I can then select to either compile them as modules or to compile them directly into the kernel. Thanks Joey, for the offer of assistance. Any and all help would be graciously received. I am still a newbie here so if someone would be kind enough to either confirm or deny my assumptions about how to go about this I would appreciate it. Respectfully, Eric -----Original Message----- From: joey officer [mailto:[EMAIL PROTECTED]] Sent: Tuesday, April 23, 2002 10:05 PM To: Eric B Kiser Cc: [EMAIL PROTECTED] Subject: RE: [Leaf-user] ip_masq_ipsec.o for bering ahh.. I think I understand know.. so you need to have the packets passed through on the home machine so that you can make the connection to work. I understand now. There was another post earlier that mentioned the nameing difference for the Bering ipsec.o files. You might look there. I'm not familiar at all w/ Bering, but I'll be glad to assist you by looking as well, and if necessary, maybe I or someone else can compile this for you. joey At Tuesday, 23 April 2002, "Eric B Kiser" <[EMAIL PROTECTED]> wrote: >Joey, > >Thanks for the quick reply. Here is what I am looking at... > >[1] I have to use IPSec client software on an NT4.0 machine from inside my >network to make a connection to the company firewall/IPSec server to be able >to gain remote access into my company. Since we are unable to do both >"pass-through" and "termination" I am forced to set this box up to do >"pass-through" only. > >[2] I am planning on setting up a second box inside my network to act as an >IPSec server so that I can connect to my lab while on the road. > >I hope this helped to explain it a little better. > >Regards, >Eric > >-----Original Message----- >From: Joey Officer [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, April 23, 2002 4:54 PM >To: Eric B Kiser; [EMAIL PROTECTED] >Subject: RE: [Leaf-user] ip_masq_ipsec.o for bering > >Are you sure that you need the ip_masq_ipsec.o file. I think that this is >only needed if you have an internal ipsec server. In my case I run the >ipsec server (I'm sure as does everyone else) on the actual gateway server / >leaf server... > >Joey > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]]On Behalf Of Eric B Kiser >Sent: Tuesday, April 23, 2002 3:27 PM >To: [EMAIL PROTECTED] >Subject: [Leaf-user] ip_masq_ipsec.o for bering > >Hello All, > >I need to be able to make an IPSec connection through my Bering 1.0-rc1 >firewall. If I understand correctly I will need the ip_masq_ipsec. o module >to be able to do this. I have been unable to find the ip_masq_ipsec. o for >Bering. I have already searched through all of the files in the modules >section online and did not come across it. Is it already compiled in to the >kernel or is it somewhere else or have I just missed it? > >Thanks in advance, > >Eric > >_______________________________________________ >Leaf-user mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/leaf-user > >_______________________________________________ >Leaf-user mailing list >[EMAIL PROTECTED] >https://lists.sourceforge.net/lists/listinfo/leaf-user > _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
