Re: Questions about Carp / PF / PFSync

2019-02-22 Thread Charles Amstutz
> On 2019/02/22 20:45, Charles Amstutz wrote: > > > Not sure if it will give any additional clues but can you show dmesg > please? > > > > Sure, however, they are quite lengthy, are you wanting the whole thing? I > apologize not sure of protocol here. > > Yes

Re: Questions about Carp / PF / PFSync

2019-02-22 Thread Charles Amstutz
> Not sure if it will give any additional clues but can you show dmesg please? Sure, however, they are quite lengthy, are you wanting the whole thing? I apologize not sure of protocol here.

Re: Questions about Carp / PF / PFSync

2019-02-21 Thread Charles Amstutz
> Charles Amstutz(charl...@binary.net) on 2019.01.30 23:16:17 +: > > Hello > > > > We are running into an issue with a lot of dropped packets where states > are failing to be created. We have noticed that it coincides with a fair > amount > of congestion, arou

Re: Questions about Carp / PF / PFSync

2019-02-08 Thread Charles Amstutz
Charles Amstutz(charl...@binary.net) on 2019.01.30 23:16:17 +: > Hello > > We are running into an issue with a lot of dropped packets where states are > failing to be created. We have noticed that it coincides with a fair amount > of congestion, around 10-15/s accordin

Re: Questions about Carp / PF / PFSync

2019-02-01 Thread Charles Amstutz
Charles Amstutz(charl...@binary.net) on 2019.01.30 23:16:17 +: > Hello > > We are running into an issue with a lot of dropped packets where states are > failing to be created. We have noticed that it coincides with a fair amount > of congestion, around 10-15/s accordin

Questions about Carp / PF / PFSync

2019-01-31 Thread Charles Amstutz
Hello We are running into an issue with a lot of dropped packets where states are failing to be created. We have noticed that it coincides with a fair amount of congestion, around 10-15/s according to 'pfctl -si'. We finally tried disabling our Carp Interfaces (we are using carp for failover)

Re: l2tp and openbsd 6.1

2017-10-06 Thread Charles Amstutz
to:owner-m...@openbsd.org] On Behalf Of Charles Amstutz Sent: Friday, October 6, 2017 10:04 AM To: 'misc@openbsd.org' Subject: Re: l2tp and openbsd 6.1 Hello Noth, "Try pppx instead of pppx0, it'll work in pf.conf, including as a macro." I did!! I found another article

Re: l2tp and openbsd 6.1

2017-10-06 Thread Charles Amstutz
Hello Noth, "Try pppx instead of pppx0, it'll work in pf.conf, including as a macro." I did!! I found another article that talked about the group. After reading this: http://frankgroeneveld.nl/2015/08/16/configuring-l2tp-over-ipsec-on-openbsd-for-mac-os-x-clients/ However, I still get this

Re: l2tp and openbsd 6.1

2017-10-05 Thread Charles Amstutz
m: owner-m...@openbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of Charles Amstutz Sent: Thursday, October 5, 2017 10:44 AM To: 'misc@openbsd.org' Subject: Re: l2tp and openbsd 6.1 Here is a related but new question, If pppx0 only exists when someone is vpn'ed in. How do peopl

Re: l2tp and openbsd 6.1

2017-10-05 Thread Charles Amstutz
Here is a related but new question, If pppx0 only exists when someone is vpn'ed in. How do people handle this in pf? If you don't define rules, packets get blocked on it. But if there is no connect, pf complains about pppx0 not having a firewall. The only thing that seems to work is set ski

Re: l2tp and openbsd 6.1

2017-10-04 Thread Charles Amstutz
penbsd.org [mailto:owner-m...@openbsd.org] On Behalf Of lilit-aibolit Sent: Wednesday, October 4, 2017 2:46 AM To: misc@openbsd.org Cc: Charles Amstutz ; yasu...@yasuoka.net Subject: Re: l2tp and openbsd 6.1 Hi, with l2tp I have situation when iOSĀ  and Android devices could connect but Windows 7 and

Re: l2tp and openbsd 6.1

2017-10-02 Thread Charles Amstutz
Original Message- From: Sterling Archer [mailto:deb...@gmail.com] Sent: Monday, October 2, 2017 5:35 PM To: Charles Amstutz Cc: misc@openbsd.org Subject: Re: l2tp and openbsd 6.1 On Mon, Oct 2, 2017 at 10:03 PM, Charles Amstutz wrote: > Hello everyone, > > I'm new to this

l2tp and openbsd 6.1

2017-10-02 Thread Charles Amstutz
Hello everyone, I'm new to this list and l2tp/openbsd (but do have working UNIX/Linux knowledge). After searching the previous forum posts (and the internet) I have found a lot of information on l2tp ipsec.conf connection strings. However, I can't get android to connect. I keep getting IKE neg