similar to: Routing between networks

*Problem I want to solve:* We have 3 sites: A, B, and C. Network admins should have access to all three. (this works as-is). Desktop support should only have access to their site. (Tech A to site A, Tech B to site B, Tech C to site C). *How I think I can do it:* Working with keys? Admin's public key will be on all the client machines, and thus, the client machines will always

Definitely considered that. Running different VPNs and even running different instances of the daemon on different ports. But, as you rightly pointed out: *additional complexity*. It basically comes down to: what if you have a bad actor who needs credentials revoked immediately? We have a way of doing this already, but it can take up to 5 minutes to cycle through every machine on the network -

Does anyone have an (overhead) paging system that they like that works with SIP? We've got a client with an old paging system that (supposedly) just takes an rj11 POTS connection, but when we put an SPA Cisco adapter on it, it doesn't auto-answer the call, so paging never happens. [cid:image001.png at 01D4DFF6.9C1F1AA0] Michael J. Munger, dCAP, MCPS, MCNPS, MBSS Microsoft Certified

You need more than an ATA. You need something with an FSO and FXO. I've used Linksys/SPA3102-3.3.6 and been happy with it. From: asterisk-users <asterisk-users-bounces at lists.digium.com> On Behalf Of Sebastian Nielsen Sent: Thursday, March 21, 2019 3:01 PM To: 'Asterisk Users Mailing List - Non-Commercial Discussion' <asterisk-users at lists.digium.com> Subject: Re:

Thanks Michael, I will proceed like this. I think I didn't have UDP 655 forwarded on the remote server, will do that (had it at my client's router). If tinc connects, will both server and client see each other, for example I will be able to access all webui's running on SERVER from CLIENT side? For example, SERVER is running webui of Tvheadend on 192.168.0.4:9981 How can I access that

Get it connected first and able to ping the remote server's IP. Then, you should be able to access stuff on the server network as if you were on that LAN. You should also remove the pet forwarding on the client side. It's unnecessary. Get Outlook for Android<https://aka.ms/ghei36> On Thu, Feb 7, 2019 at 12:49 PM -0500, "Drake Drake" <drakemails at

Local IPs of the client are irrelevant. The client should be configured to look for the host by domain name (/etc/tinc/yournetwork/hosts/EXAMPLESERVER should have the dDNS name in the Address directive) and the tinc.conf file should have that as the host to connect to for the network. (ConnectTo=EXAMPLESERVER) Then, you need port forwarding in your router to forward TCP/UDP 655 from the WAN

I don't believe tinc will support this level of access control. As far as I can tell, it's all or nothing with tinc. How you configure firewalls on the other hand is up to you. On Tue, Oct 2, 2018 at 4:40 PM Michael Munger <mj at hph.io> wrote: > > Problem I want to solve: > > We have 3 sites: A, B, and C. > > Network admins should have access to all three. (this

Hi, We are deciding on to either entirely use HPH code to our OpenSSH or not for systems globally and I come down to a question. If HPH-SSH code is such an improvement to network performance for OpenSSH, then why has it not been incorporated to the OpenSSH code? Is there a reason? Is it because there are problems with the HPH-SSH code? Since the code has been out for a time and still has not

HI, I''ve got a proxy arp setup with iptables and tc. on eth0 i have a route to 172.16.2.0/24 network on eth1 is the LAN of 172.16.1.0/24 network I have enabled proxy arp on both interfaces. Now accordingly, the interface will respond to all ARP requests for which it has a route to. Noy my setup is such, that a user on the LAN, would like to have an ip from the 172.16.2.0/24 network.

I've looked through all the doc and searched the list archives, but I just can't seem to get it to work. I have a Linux box with 5 ethernet interfaces, 3 of which have winboxes I'd like to include in my little Samba network. I'm able to get it far enough for each winbox to see the linbox, but they can't see each other. Here's my setup: Winboxes Linbox Win2k -

There has been numerous threads etc regarding this but all that has left me is more than a little confused :-(. I have setup and environment consisting of two OpenVPN tunnels and wish to load balance at the packet level between them. I am currently running on Linux edm 2.4.21-20.EL.c0custom #2 Tue Oct 12 08:52:23 BST 2004 i686 i686 i386 GNU/Linux And have install Quagga at each end to provide

Hi, I'm new to Tinc and I'm having some hard time to figure out the proper configuration for my use case. In hope you can help me out. A) SERVER running tinc (Ubuntu 16.04 LTS) External IP: 111.111.111.111 (ddns) Behind a router with NAT, local IP of SERVER: 192.168.0.4 B) CLIENT running tinc (Ubuntu 16.04 LTS) External IP: 222.222.222.222 (ddns) Behind a router with NAT, local IP of

Hi all Does anyone know if i can use ethernet aliases like eth0:1 in advanced routing like multipath routing in order to avoid to have nxEthernet interfaces in my Linux box. Thansk in advanced -- Guillermo Gomez <ggomez@neotechgw.net> neotech _______________________________________________ LARTC mailing list / LARTC@mailman.ds9a.nl http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO:

hi, I''ve a dedicated internet link 512k with a cisco router, and now, I want to upgrade bandwidth with 8 ADSLs (512k each) then: - build kernel 2.4.27 with pachs: - patch-o-matic-ng-20040621 : CONNMARK, H323, etc... - http://www.ssi.bg/~ja/#multigw Julian''s patch. - Activate "equal cost multi path" (Advanced Router-Networking Options) and so on -

I have an AGI that can sometimes take time complete. I don't want the dialplan to be held up by the agi. Is there any way to call it and have Asterisk continue with the dialplan? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20190410/4c704231/attachment.html>

Hi, after migrating to shorewall firewall from my own iptables rule set (to utilise freeswan vpn tunnels) I have successfully configured a 3 interface firewall with net2net vpn tunnels, with the help of the shorewall documentation. However I cannot seem to configure my final step which is to masq another subnet attached to my LAN (LANB, via Cisco 1603 router) to get internet access via the

On Tue, Oct 2, 2018 at 2:41 PM, Michael Munger <mj at hph.io> wrote: > It would be nice to just disable the key at some central point and then > authentication / encryption / decryption just *break* for that bad actor. Depending on your specific network topology, 4 separate VPNs might very well give you the single break point you want. If I was going to try to use Tinc to solve your

Hello, I have seen many many pages describing how to set up Samba with pptpd by having pptpd assigning a small range of IP's on an existing physical (eth*) lan. That all makes sense to me. However, I do not have that kind of setup. I am leasing a server, and it is not on a private lan, so I do not have a physical interface to associate with the network I want to use (172.16.0.0/16). I

Hi, I'm moving to Systemd for my network management but I don't see my link name changed when I try to using a .link name. The .network file works right, networkmanager is removed as well to accomplish this. Any idea why the rename is not done ? /etc/systemd/network/0-eth.network [Match] MACAddress=00:1a:4a:a9:0a:17 [Network] Address=172.16.3.141/24 Gateway=172.16.3.254