similar to: ipip tunnel docs broken

Hello, Looking here http://www.ipsec-howto.org/x299.html I''ve set up a vpn in transport mode with two linux boxes. I''m now trying to set it up in tunnel mode. After using the example keys, trying to ping, it doesn''t work because the route network isn''t routable. This mention is in the howto "If you tunnel is not working, please check your routing.

Hello, I''m trying to put 3 nodes in a vpn in tunnel mode. When I run setkey on the following file, I end up with The result of line 33: File exists. That error isn''t overly helpful, so I was hoping that someone could explain the issue. Here''s the file, with line 33 highlighted. Help appreciated. Mike # Flush the SAD and SPD flush; spdflush; # Add SA for

Hey people, I have the following tcng configuration: #include "fields.tc" #include "ports.tc" dev "eth0" { egress { // Voice traffic class (<$voice>) if udp_dport >= 20000 && udp_dport <= 23000; // SSH connections class (<$interactive>) if tcp_dport == PORT_SSH; //

People, I''m trying to set up the tc filters for a PRIO queue. I''m basing it off of marked traffic via iptables. For example, I''ve marked two classes of traffic with ids "2" and "4", and now I''m filtering those to bands 1 and 2. tc filter add dev eth0 parent 1: prio 0 protocol ip \ handle 2 fw flowid 10:1 tc filter add dev eth0 parent 1:

I am considering creating a web interface for system administration, but it would need a plug-in architecture, adding new UIs as new services are added. I''m thinking about doing this with multiple Rails applications, and I''m curious as to whether mongrel can most multiple apps in a single instance, as opposed to running one for each. Is this possible? Thanks, Mike -- Michael P.

Hey, I''m using mongrel supervised via runit. I''d like to capture mongrel logs with svlogd, which just requires logging to stdout/stderr. But, the Rails app is logging in its own log directory. Is there a way to make both mongrel and Rails log to stdout/stderr? Thanks, Mike -- Michael P. Soulier <msoulier at digitaltorque.ca> "Any intelligent fool can make things

Hello, I am attempting to set an IP-IP tunnel between two PC in a same LAN in order to evaluate the performances of the tunnel (kernel 2.4.26). I read the section of LARTC HowTo about it and it seems simple but i do not succeed in setting it. I don''t find the new_tunnel.o module (cf LARTC HowTo). I found Configure.help a bit confusing : CONFIG_NET_IPIP "Saying Y to this option

I recently got into using RoR, and the only issue that concerned me was the apparently complexity of deployment. Setting up fastcgi can be a bit of a pain, and I was hoping that the Rails community would come up with something simpler. Mongrel was recommended to me from someone on my local Ruby user group. It was trivial to install as a Gem on my Linux desktop and the FreeBSD server that I am

Hi, Does anyone tried to get ipip or gre tunnel behind NAT environments. ? i''m trying to make both side tunneling with ipip or gre with private address just like belows.. A -------------------FIRWWAL -------------------INET ------------------- B PRIVATE PUBLIC PUBLIC (10.100.0.1) (211.xxx.xxx.xxx) (

Hello Gurus, I am a small problem with routing and here are the details. Interfaces on my server: * ipsec0 - 172.19.58.94 * tunl0 - 172.19.58.94 * eth0 - 172.19.58.94 Now, the problem is that there is another host 172.19.58.200. All communication to 172.19.58.200 should be through tunl0, and all the data should be secured using IPSec (tunnel mode - because there are more machines on my

Hi guys, I''m trying to setup an IPIP tunnel between a Cisco router and a firewall running Debian GNU/Linux Sarge with Shorewall 2.0.13. I''ve read and implemented the http://shorewall.net/IPIP.htm document, but I don''t understand why there should be at the same time a "tunnel" and a "tunnels" script. Shorewall still refuses to let the

Hi, I''ve a gateway host (cali), connected to the Internet via ADSL and a PPTP tunnel (ppp0). I also have a IPIP tunnel to another host over the Internet (mytun), nothing fancy. This is working perfectly. But I want to give more priority to the IPIP packets coming OUT of the PPP (PPTP connection) interface. And I can''t get this to work. Class 2:21 is the one with high

Hello, I have mongrel_rails supervised via runit, and it would be helpful if it could log everything to stdout so it can be captured with svlogd. Is it possible to tell mongrel to log everything to stdout? What about rails? Thanks, Mike -- Michael P. Soulier <msoulier at digitaltorque.ca> "Any intelligent fool can make things bigger and more complex... It takes a touch of genius -

Hi, I have a problem with GRE tunneling. I read Advanced-Routing HOWTO about this and I did all as is written in this documentation. Even the same example is here which I need for my project. I want create (by means of GRE tunneling or IP in IP tunneling) virtual private network VPN - in first phase without IPsec in other phase with IPsec. I have two local networks distant apart with two routers.

I''ve tried with iproute and it works now ! commands for A: ip tunnel add mode ipip tunl1 local IP_A remote IP_B ip addr add dev net1 local virtual-IP_A remote virtual-IP_B ip link set net1 up Same on B. And then from A i''m able to ping virtual-IP_B. It seems one can not use tunl0 as a tunnel name, is it true ? I think it will be a good thing to add to the section 5.2 of the

I was trying the following setup with IPIP tunnels, one that used to work through another ISP, but no longer... Internal network | Linux box 1 (kernel 2.2.24) iif=10.0.0.1, extf=a.b.c.d, tunf=172.16.0.1 | |local metropolitan network | Another Linux box 2 (kernel 2.2.17, or 2.4.19, same result) iif=irrelevant, extf=x.y.z.v,

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=98 netfilter@linuxace.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |netfilter@linuxace.com Status|ASSIGNED |RESOLVED Resolution|

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=98 ------- Additional Comments From elacour@easter-eggs.com 2003-06-11 19:32 ------- I forget: If I insert a drop on protocol 4 before "ESTABLISHED" rules, ip in ip is really denied. ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.

Hello, I''m running mongrel behind apache via proxypass. Every now and then, a spammer tries to proxy traffic through apache, and for some reason, apache forwards the request to mongrel, even though it''s not a site being hosted by me. At times this seems to cause mongrel to become unresponsive, and all requests to the site then fail with a proxy error until mongrel is

After carefull reading (LARTC) and experimentation, I am in a dead end... I am using several IPIP tunnels (linux ipip module, IP protocol 4). I''d like to filter packets going through these tunnes to different classes, on the ingress device, based on source and destination IP _INSIDE THE TUNNEL_. First I tried the nexthdr bit. As explained in LARTC, nexthdr jumps to the next header