similar to: Best VPN server for * and woad warriors using windows?

> -----Original Message----- > From: Remco Barende [mailto:asterisk@barendse.to] > Why is it bad to put a vpn server on the * box? CPU load. IPSec can be quite CPU intensive. So can asterisk. Putting two CPU-intensive, time-sensitive applications on one machine is asking for trouble. It may work, though, if you don't have too many simultaneous users. > I was considering

I am have a shorewall firewall and freeswan ipsec running on a redhat 8.0 Linux gateway machine. I have one working tunnel defined, all works well. I am not clear how to define mutiple concurrent tunnels. I can not add further interface entries as all the tunnels come in on ipsec0, do I still have mutiple zone definitions? some of the tunnels will be dynamic roadwarriors and as such would need a

Hi all, I''ve been using Shorewall 1.42 for a month on two firewalls at work and my own personal colocated server and love it. While pretty familiar with iptables, I don''t like dealing with it on a daily basis, and Shorewall certainly makes life easier. I''ve deployed Shorewall on both our Toronto and Ottawa office firewalls, and have configured a FreeS/WAN IPSEC

Tuomo Soini wrote: > You don''t happen to read shorewall-devel mailinglist ? I read it -- I just didn''t know what to make of your post and it arrived while I was on vacation. What exactly are you trying to accomplish that Shorewall isn''t doing for you now? e.g. /etc/shorewall/zones rw Roadwarriors Road Warriors /etc/shorewall/interfraces rw ipsec+

Is it possible to rewrite caller id's? I would like to have sip phones appear by their local cid (like Henk <208>) but when they call out using the PRI I would like their full DID (MSN) to appear (like 0031201234567) I could ofcourse set callerid to the main phonenumber but surely there must be a better solution? Thanks!! Remco

Is there a "cookbook" for setting this up? There are examples for setting up a tunnel between two fixed-address networks (e.g. a remote LAN that needs to be "integrated" with a central LAN over IPSec but I can't find anything addressing the other situation -- remote user(s) where the connecting IPs are not known in advance, such as a person with a laptop or smartphone in a

While I have concentrated on support for 2.6 native IPSEC in release 2.2.0, I am still of the opinion that unless you absolutely need IPSEC compatibility that OpenVPN is a much easier (and in the case of roadwarriors, a much better) solution. Having already generated all of the required X.509 certificates, it took me less than 1/2 hr to replace my IPSEC testbed with an OpenVPN one using the new

Hi! I'm trying to setup a Wildcard TE110P with a PRI in The Netherlands. I get a Red Alarm on the line. Is there any way of debugging this? I've tried some configs that should work but without success. Is there any way of telling if the cabling is correct or what else the problem could be? Thanks!! Remco

I installed bristuff0.20-RC3 (which includes * 1.0.3 stable) It works fine until I disconnect the phone jack for the ISDN line. Even after plug it back in asterisk still reports that it could not create a zap channel when I try to dial out and the line gives an engaged tone when I try to dial. Re-starting asterisk doesn't solve this, I have to stop asterisk, unload the modules, reload

I have problems connecting IPSEC VPN clients on the masqueraded network to outside VPN servers. It looks like this: ipsec-user | 192.168.1.10 (DHCP assigned) | | 192.168.1.1 fw-1 (shorewall, Linux 2.6) | 20.20.20.20 (internet) | 30.30.30.30 fw-2 (IPSEC VPN endpoint) | 192.168.100.1 | | 192.168.100.2 server ipsec-user (a road warrior) is supposed to create an IPSEC tunnel to his home

Hi list! While looking for the Snom 190 I found another phone, the Elmeg IP 290 (www.elmeg.de). Looking at the pictures & the specs they seem to be very similar beasts but the firmware is supposedly not interchangeable. Does anyone know the difference between the 2, do they work with Asterisk? The weird thing is that Elmeg has similar phones with the Snom look but they are ISDN only (no

Most people seem quite positive about Snom phones, I cannot share this opinion. The displays are dying quite often, and firmware is buggy. I have tried every firmware from 4.5 up to 5.x and 6.04 but keep having problems with phones locking up or rebooting during an ongoing conversation. REALLY annoying for a phone that is advertised / targeted as a business class phone

Hi list! Sorry for this slightly off-topic message but does anybody know if the standard for ISDN BRI is the same in Spain as it is in the rest of Europe (or the Netherlands). Will a standard HFC-S card work?

Hi list! I have some strange problems with Asterisk 1.0.5-BRIstuffed-0.2.0-RC5. Very regularly asterisk seems to lose connectivity with the ISDN line. If you try to call in you get the information tone that the number is not in use. Outbound calls do stil work however. Unloading the modules and reloading them and start/stop asterisk will solve the problem. Another problem that occurs

Hi list! I have some sip phones and Sipura ATA 2000's. However after dialling a number I need to dial a # to control a device. When I dial # Asterisk kicks in and puts the call on hold. How can I change this? Thx!! Remco

I tried to get callerid working the normal way but the cid is never passed to the phone. It doesn't work untill I set SetCIDNum(0${PRI_NETWORK_CID}) in extensions.conf which I found in the wiki: http://www.voip-info.org/tiki-print.php?page=Asterisk+zaphfc Is this intended behaviour, or still a bug? It does work but it only shows one zero even though I have nationalprefix = 0

Hi, I had a look at this page which describes a single VPN zone called "vpn": http://www.shorewall.net/IPSEC-2.6.html Is this the most current information? It is the top page found by Google for "shorewall ipsec" Is there any information about setting up multiple VPN zones for different classes of road warrior? E.g. lets say there are two classes of road warrior:

Hi list! I'm using Asterisk 1.2.7.1. with FreePBX 2.0.1 on a CentOS 3.7 box. On the * box I also have a samba share where our CRM app can dump call files and a cron script is moving the call files every second to the asterisk directory. Everything goes really quickly, the call file is placed on the samba share and very quickly moved to the asterisk dir, so far so good. But then the call

Hi list! I'm currently using a HFC-S card for my ISDN BRI line with bristuff. The instability is driving me crazy however. I'm having continuous problems where inbound calls will not work after some time of operation (the number then appears as not in use to the caller) or also outbound calls do not work. The solution is to unload the modules, stop asterisk, re-load the modules and

Hi list! I am installing an * box that will be installed on a site with KPN BRI ISDN in The Netherlands. I am using bristuff fron Junghanns. Does anybody know the correct settings for this? I will not have internet access there which makes it harder to google around on location. switchtype = euroisdn is pretty obvious but what about these settings: signalling = bri_cpe_ptmp ; p2p TE mode