similar to: Re: [strongSwan] Interop problem Linksys WRV200 with Strongswan 4.1.3 / PSK

I see support in shorewall for the KAME-tools, how about strongswan ? I have setup shorewall 3.4.4 and strongswan 4.1.3, making this my vpn-gateway for the subnet behind it. # Shorewall version 3.4 - Zones File #ZONE TYPE OPTIONS IN OUT # OPTIONS OPTIONS fw firewall fil ipsec mode=tunnel mss=1400 net ipv4

On 2015-04-14 11:25, Gordon Messmer wrote: > On 04/14/2015 11:07 AM, Florin Andrei wrote: >> I looked in the yum repositories for CentOS 7 and I noticed that there >> are no packages for any of the major open source IPSec VPN apps - >> Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan >> packages. > > libreswan replaced openswan, and is

2015-04-14 21:40 GMT+03:00 Florin Andrei <florin at andrei.myip.org>: > On 2015-04-14 11:25, Gordon Messmer wrote: > >> On 04/14/2015 11:07 AM, Florin Andrei wrote: >> >>> I looked in the yum repositories for CentOS 7 and I noticed that there >>> are no packages for any of the major open source IPSec VPN apps - >>> Openswan, strongSwan, etc.

On 2015-04-14 11:44, Eero Volotinen wrote: > 2015-04-14 21:40 GMT+03:00 Florin Andrei <florin at andrei.myip.org>: >> >> http://serverfault.com/a/655752/24406 >> >> If that is accurate, the documentation, and the clustering / load >> balancing might tilt the balance in the direction of strongSwan. >> >> > Well, both packages can do ipsec to

I looked in the yum repositories for CentOS 7 and I noticed that there are no packages for any of the major open source IPSec VPN apps - Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan packages. What is the current consensus w.r.t. building an IPSec VPN "server" (concentrator, whatever) on CentOS 7, that will do site-to-site connections with Cisco hardware at

On 04/14/2015 11:07 AM, Florin Andrei wrote: > I looked in the yum repositories for CentOS 7 and I noticed that there > are no packages for any of the major open source IPSec VPN apps - > Openswan, strongSwan, etc. I'm pretty sure CentOS 6 had Openswan packages. libreswan replaced openswan, and is available in the CentOS 7 repo.

Hi Tom, Thanks for the feedback about my Shorewall evaluation I''ve published a blog today covering general things I''ve observed about the way to combine Shorewall with strongSwan: http://danielpocock.com/practical-linux-vpns-with-strongswan-shorewall-and-openwrt Please let me know if anything is inaccurate or if there is anything substantial that I missed and I''ll

Hello Tom, now here''s my dump file as .zip attachment, but named .txt, because the list-server rejected the .zip, then my second try (uncompressed) was rejected because of the size. What I was doing is connecting from remote side of an ipsec tunnel (behind gw 212.168.178.226), from a windows machine with 192.168.246.20 to the firewall-system (remote ip 217.19.188.182 / internal ip is

Hi ! Sorry if this is a long post... I had this setup for about a year without problems : Network A <-> wrv200 <-> internet <-> wrv200 <-> net b The 2 networks are linked with an ipsec vpn. The 2 internet connections are with the same cable company to minimize latency, both separates /24 subnets. On network A, I got 2 computers, a single sip phone (aastra

Shorewall 3.4.6 running on SuSE Linux 10.2 Compiling Rule Activation... Shorewall configuration compiled to /var/lib/shorewall/.restart Processing /etc/shorewall/params ... Restarting Shorewall.... /sbin/shorewall: line 665: 6782 Segmentation fault $SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart got this with V3.4.4, updated to 3.4.6 this morning, but that didn''t help.

Hello all, I have a problem with external access to a postfix mailserver running on my firewall as a mail-gateway. My setup with shorewall 2.2.0 rc4 is as follows: eth0 is zone isf - this is an intranet to other companies eth1 is zone loc - local network eth2 is zone net - internet, fix ip adress eth0 and eth1 are bridged shorewall version 2.2.0-RC4 ip addr show 1: lo: <LOOPBACK,UP> mtu

Hi, We have a shorewall firewall running on SUSE 10. We have three nic''s, Lan, DMZ and Internet. We also have a Cisco Pix 506e. We moved from sending all our traffic through the pix to using the Suse box yesterday. The PIX is in the DMZ, with a connection to the LAN switch, the idea being that VPN users can connect to the pix to the lan. The Pix is on the 10.0.1.x subnet, the lan is

Guten Tag Im Rahmen einer Studienarbeit an der Hochschule fuer Technik in Rapperswil (HSR), zum Thema SPAM, haben wir Ihre E-Mail Adresse auf einer CD-ROM gefunden welche bei EBay gehandelt wird (Adresshandel). Wir haben insbesondere alle E-Mail Adressen von Schweizer Unis und ETHs herausgesucht. Nun ist es fuer unsere Statistik wichtig, dass wir wissen welche der gefundenen Adressen noch aktiv

Guten Tag Im Rahmen einer Studienarbeit an der Hochschule fuer Technik in Rapperswil (HSR), zum Thema SPAM, haben wir Ihre E-Mail Adresse auf einer CD-ROM gefunden welche bei EBay gehandelt wird (Adresshandel). Wir haben insbesondere alle E-Mail Adressen von Schweizer Unis und ETHs herausgesucht. Nun ist es fuer unsere Statistik wichtig, dass wir wissen welche der gefundenen Adressen noch aktiv

Hello all, I have are problem in a setup with two different routers, one goes to the Internet line (fix ip) the other goes to a company-intranet with "real" network addresses. Setup looks like: to intranet ------ . LAN 192.168.1.0/24 (central site) | | | ----|Cisco |--------------------| | |\ |

Hai Peter, Chipping in here. > > > Hi Rowland, > > You are right about firewall boxes. At least Cisco ASA is a terribly > (over) complicated device. People who are not Cisco pros should be > warned. Stay away, you will just waste your time, get frustrated, and > get sleepless nights. > > I don't blame the Cisco ASA here. In my case, I hadn't much

Processing commands for control at bugs.debian.org: > user debian-qa at lists.debian.org Setting user to debian-qa at lists.debian.org (was anbe at debian.org). > affects 774889 + xfswitch-plugin Bug #774889 [gdm3] gdm3: fails to upgrade squeeze -> wheezy -> jessie - trying to overwrite /usr/share/gdm/BuiltInSessions/default.desktop Added indication that 774889 affects xfswitch-plugin

Ok, after that reboot ! Note, atm dont care about secrets.keytab (yet) .. I was a bit ahead with things... One thing at a time, for the keytab to be corrected, you need a perfect correct working A PTR CNAME GUIDs for the DC(3) first then we start thinking in kerberos corrections. Run samba_dnsupdate --verbose ( on both DC's ) Post that output, ill have a look, and im getting a choco.

Hi, Is it true that Samba 2.2.x PDC does not support trust relationships to other Windoze NT PDCs? Thanks in advance for your reply. Regards, Bernd Nies -- _ _ ___ ___ | || / __| _ \ Bernd Nies, System Engineer | __ \__ \ / HSR Hochschule, Oberseestr.10, CH-8640 Rapperswil |_||_|___/_|_\ +41-55-2224984, http://www.id.hsr.ch/ bnies@hsr.ch

We have encountered a number of problems with our firewall recently, and the past 24 hours have left me quite concerned. Here is what we are seeing: 1. Original firewall, a PentiumPro/200 with 96Mb RAM, serving approx 500 client PCs for a 10Mb internet connection. Running Mandrake 9.2, we began seeing severe swapping a few weeks, with kernel mem usage exceeding 200Mb. Given an ip_conntrack