Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
to follow these few simple tips. http://articles.moneycentral.msn.com/Taxes/ PreparationTips/PreparationTips.aspx?icid=HMFebtagline -- William Bloom [EMAIL PROTECTED]

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
25, 2007, at 14:48, c l wrote: Hello, thanks for the reply, it helped if I'm not mistaken. I think I'm getting closer but still no joy. See below. From: William Bloom [EMAIL PROTECTED] To: c l [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: site-to-site vpn 4.0 to cisco 3000 Date: Sun, 25

Re: site-to-site vpn 4.0 to cisco 3000

2007-02-25 Thread William Bloom
OpenBSD for VPN, yet. Bill On Feb 25, 2007, at 14:48, c l wrote: Hello, thanks for the reply, it helped if I'm not mistaken. I think I'm getting closer but still no joy. See below. From: William Bloom [EMAIL PROTECTED] To: c l [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: site-to-site

Re: site-to-site vpn 4.0 to cisco 3000 SOLVED

2007-02-25 Thread William Bloom
:) From: William Bloom [EMAIL PROTECTED] To: c l [EMAIL PROTECTED] CC: misc@openbsd.org Subject: Re: site-to-site vpn 4.0 to cisco 3000 Date: Sun, 25 Feb 2007 18:53:12 -0700 The man page for isakpd.conf indeed sheds some light, there's an example in that page that show's how to specify lifetimes

Re: Relative Firewall Performance: 3.7 and 4.0

2007-02-24 Thread William Bloom
How 'bout the Commell EMB-564VG then, as an alternative to Soekris? I've seen a few postings that seem to show high regard. Billl On Feb 24, 2007, at 3:49, Stuart Henderson wrote: On 2007/02/23 18:58, William Bloom wrote: Hmm, I'm rereading the product description for the Soekris

Relative Firewall Performance: 3.7 and 4.0

2007-02-23 Thread William Bloom
to 150, but this appears to have had negligible impact. Bill -- William Bloom| Snr Systems Engineer|M P H A S I S Architecting Value | MphasiS Healthcare Solutions 5353 North 16th Street, Suite 400 Phoenix, Az 85016 | Direct: +11-602-604-3100 | Fax: +11-602-604-3115| http://www.eldocomp.com

Re: keep state and PF Queues

2005-10-19 Thread William Bloom
break the traffic can only be queued egress an interface rule... There should be some remarks on this in pf.conf(5) TIA, ~BAS -- William Bloom| Snr Systems Engineer|M P H A S I S Architecting Value | Eldorado Computing 5353 North 16th Street, Suite 400 Phoenix, Az 85016 | Direct

Zero PF Counters

2005-10-10 Thread William Bloom
-zero congestion counter, and what action is PF taking when the congestion counter is incremented? Bill -- William Bloom| Snr Systems Engineer|M P H A S I S Architecting Value | Eldorado Computing 5353 North 16th Street, Suite 400 Phoenix, Az 85016 | Direct: +11-602-604-3100 | Fax: +11-602-604

Re: ssh key question

2005-10-07 Thread William Bloom
weeks. Can I just duplicate the host key from one box onto the other box? And which key file[s] would that be that I need to copy? Or do I need to see about turning off host key checking on our client? --ja -- William Bloom| Snr Systems Engineer|M P H A S I S Architecting Value | Eldorado

Re: CARP interface incorrectly comes up as INIT on boot

2005-10-07 Thread William Bloom
carp: BACKUP carpdev dc0 vhid 6 advbase 1 advskew 100 inet 192.168.0.40 netmask 0xff00 broadcast 192.168.0.255 Tim -- William Bloom| Snr Systems Engineer|M P H A S I S Architecting Value | Eldorado Computing 5353 North 16th Street, Suite 400 Phoenix, Az 85016 | Direct: +11-602

High Interrupt Mode Reported by 'Top' for Soekris 4801

2005-10-06 Thread William Bloom
haven't reported symptoms like the ones I describe). I haven't posted dmesg or other info in this message (I thought it might be rude to do so without being asked). Can anyone offer pointers on how I might go about isolating this problem? Bill -- William Bloom| Systems Engineer|M P H A S I S

Re: High Interrupt Mode Reported by 'Top' for Soekris 4801

2005-10-06 Thread William Bloom
with ethernet chipsets which are just slightly over the bar of rl(4), the wimpy processor in the machine might be able to cope. Throughput is only marginally better using an em in the pci slot of a 4801. I think there's some other problem. Yeah -- the super wimpy processor. -- William Bloom| Snr