ipcop-devel Mailing List for IPCop Firewall

On Tue, Dec 31, 2002 at 02:06:51PM +1100, Guy Ellis wrote:
> Hi all,
> 
> I have recompiled the PCI ADSL driver for IPCop Version 1.2.0
> 
> You can download this from
> 
> http://www.traverse.com.au/downloads/drivers/default.asp?r=92
> 
> Cheers,
> 
>   - Guy.

Due to a cold, I've only just managed to tested it throughly and it 
seems to work fine - very little change from the old one I suspect.

Thanks for the swift response, especially during the holidays. I hope 
you guys have a happy New Year (it being already 2003 down there).


-- 
#------------------------------------------------------------#
|      John Edwards    Email: Joh...@uk...            |
|                                                            |
|     "Security vulnerabilities are here to stay."           |
|   Scott Culp, Manager, Microsoft Security Response Center  |
#------------------------------------------------------------#

on 31/12/02 3:22 am, Guy Ellis at gu...@tr... wrote:

> Hi,
> 
> I'm not too sure who now maintains ipcop.org but I've noticed that the ISDN
> DOV feature in 1.2.0 is not listed in the feature set.
> 
> This feature is quite popular in some parts of the world. I have tested it
> and it works fine - is there any particular reason it was omitted from the
> feature list?
> 
> Cheers,
> 
> - Guy.

Hi Guy

I've added the DOV ISDN feature to the list on the WebHome page, it was
probably just an oversight in the excitement of the final release.

Maintaining the ipcop.org Twiki is a communal effort. Anyone can edit pages
once they've registered. If you see anything that needs fixed, feel free to
jump in :) It was an easy way for me to get involved in the IPCop project.

Cheers.

Eric

Hi,

I'm not too sure who now maintains ipcop.org but I've noticed that the ISDN 
DOV feature in 1.2.0 is not listed in the feature set.

This feature is quite popular in some parts of the world. I have tested it 
and it works fine - is there any particular reason it was omitted from the 
feature list?

Cheers,

  - Guy.

------------------------------------------------------------------
Guy Ellis
gu...@tr...

Traverse Technologies
ABN 98 078 657 324
652 Smith St.,
Clifton Hill, Victoria, 3068
AUSTRALIA
http://www.traverse.com.au
Tel (+613) 9486 7775
Fax (+613) 9482 7754
Mobile 0419 398 234
------------------------------------------------------------------

Hi all,

I have recompiled the PCI ADSL driver for IPCop Version 1.2.0

You can download this from

http://www.traverse.com.au/downloads/drivers/default.asp?r=92

Cheers,

  - Guy.
------------------------------------------------------------------
Guy Ellis
gu...@tr...

Traverse Technologies
ABN 98 078 657 324
652 Smith St.,
Clifton Hill, Victoria, 3068
AUSTRALIA
http://www.traverse.com.au
Tel (+613) 9486 7775
Fax (+613) 9482 7754
Mobile 0419 398 234
------------------------------------------------------------------

Andrew McGlashan wrote:
> I have adjusted the following file:
>   /etc/ssh/sshd_config
> So I needed to include it into the file:
>   /var/ipcop/backup/include.system

you should have added it to include.backup.  That way when we update 
include.system, you'll get the new changes.

> But, why not include the entire /etc/ssh/ directory?

because if the system updates sshd_config with a future revision of OpenSSH, 
or adds additional files, you might not get the updates.  And yes, we do see 
this as a failing with the current backup/restore method.  We need to be 
able to highlight conflicts between saved files and updated files.

---eric

On Sáb 28 Dic 2002 20:04, Thomas Johnson wrote:
> Yea, I know that already.  I am talking about administering systems BEHIND
> the IPCop machine.  If I can't connect to it what good is it?

If the machines are Linux, use ssh and configure port forwarding to that 
machine. I do this all the time.

-- 
Porqué usar una base de datos relacional cualquiera,
si podés usar PostgreSQL?
-----------------------------------------------------------------
Martín Marqués                  |        mma...@un...
Programador, Administrador, DBA |       Centro de Telematica
                       Universidad Nacional
                            del Litoral
-----------------------------------------------------------------

On Sáb 28 Dic 2002 19:49, Tim Dobbelaere wrote:
> Thomas Johnson wrote:
> > Yep, been there done that.  I just want to connect to the box from the
> > outside with a windows machine.  I didn't think it was going to take
> > an act of God to do it.  Why the heck didn't someone include PPTP into
> > this thing?  It's a heck of a lot easier for us users who administer
> > linux networks with windows boxes.
>
> You can administer the IPCop Firewall using a web interface. By default
> access to this interface is blocked from the RED network, but you can
> allow access to port 445 if you want to administer the IPCop externally.
> Adding a PPTP server wouldn't increase your security level over opening
> that port. However be sure to choose good passwords when you do this.

I think I saw PPtP support in IPCop 1.2, or did I see wrong?
Any way, I do administration tasks from a Solaris WS with Mozilla. All I had 
to do is, from the inside (GREEN net) open port 445 only from the WS I work 
on in the RED net.
Exactly what Tim told you to do.

Happy new year!!

-- 
Porqué usar una base de datos relacional cualquiera,
si podés usar PostgreSQL?
-----------------------------------------------------------------
Martín Marqués                  |        mma...@un...
Programador, Administrador, DBA |       Centro de Telematica
                       Universidad Nacional
                            del Litoral
-----------------------------------------------------------------

Yep, 224.0.0.1 is used for a network version of Plug and Play called
Universal Plug and Play, or UPnP. A lot of routers / cable modems have it
enabled by default to allow the autoconfiguration software that ships with
it to set itself up.

When I found this in my SpeedTouch 510, Alcatel first level tech support
told me no such option existed in the software, and I managed to get the
issue escalated until I got an answer, which was deep in the system config
command line options of "upnp discovery = on|off" and "mdap discovery =
on|off", which you then had to save in order to keep it after a reboot.

Regards,

Marco van Beek

----- Original Message -----
From: "Christopher Sawtell" <csa...@pa...>
To: <ipc...@li...>
Sent: Sunday, December 29, 2002 9:55 AM
Subject: [IPCop-devel] Thrilled with IPCop-1.2.0


Greetings, I'd just like you guys to know that IPCop-1.2.0 installed onto my
little old '486 with 16megs RAM and 125 Meg disk slowly, but surely and
completely faultlessly.

An interesting feature I discovered in the process was that The HTTP
download
took and aweful long time to download, I'm talking about many minutes
whereas
the 'other system' took just a few tens of seconds. I don't know the reason
for this.

The other thing is that my Surfboard Cable modem emits a packet every 3
mins,
thus:

Dec 29 22:47:34 rafferty kernel: Packet log: input - eth1 PROTO=2
192.168.100.1:65535 224.0.0.1:65535 L=28 S=0xC0 I=0 F=0x0000 T=1 (#8)
Dec 29 22:50:34 rafferty kernel: Packet log: input - eth1 PROTO=2
192.168.100.1:65535 224.0.0.1:65535 L=28 S=0xC0 I=0 F=0x0000 T=1 (#8)

Does anybody know what it's trying to do?

--
Sincerely etc.,
Christopher Sawtell


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

I've noticed lots of discussion on the backup process.

There are two files checked during backup 
/var/ipcop/backup/include.local and /var/ipcop/backup/exclude.local. 
They correspond to the include.system and exclude.system files that 
IPCop provides.  They are shipped as empty files.  It might not be a 
bad idea to keep local mods to backup there.

Harry
At 1:53 PM +1100 12/29/02, Andrew McGlashan wrote:
>I have adjusted the following file:
>   /etc/ssh/sshd_config
>So I needed to include it into the file:
>   /var/ipcop/backup/include.system
>
>But, why not include the entire /etc/ssh/ directory?
>
>Also, as a precaution, I create my own backup hosts.bak file in the 
>/etc/ directory; I included that for backup as well.
>
>All seems to be working Okay with this new setup.

I am attempting to install IpCOP 1.2 on a cox communications network
running with a netmask of 255.255.248.0.  The card links up, network
appears stable, but cannot ping anything outside, but the FW sees the
traffic on the network.  Any Ideas???
=20
Dave

Sorry about that.  I actually got it working.  I've been fliping between =
the two lists and posted to the wrong one.

I do want to thank Rob Campbell for his posting.  That was what got it =
working.

Tom
  ----- Original Message -----=20
  From: Tim Dobbelaere=20
  To: ipc...@li...=20
  Sent: Sunday, December 29, 2002 1:02 PM
  Subject: Re: [IPCop-devel] IPSEC errors


  Thomas Johnson wrote:

    I have somehow managed to connect to my IPCop box with win2k.  Now =
my problem is actually being able to ping it.  When I do a ping from =
win2k, I get:

    Negotiating IP Security  =20

    On the IPCop box in /var/log/secure I get:

    cannot respond to IPsec SA request because no connection is known =
for =
10.2.1.0/24=3D=3D=3Dxxx.xxx.xxx.146...xxx.xxx.xxx.153=3D=3D=3Dxxx.xxx.xxx=
.0/24

    Any ideas as to why this is?

    Thanks,

    Tom
  Please use the ipcop-users list for this thread. This has nothing to =
do with development.

  Thank you,
  Tim


--=20
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=3D=3D=3D --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=3D=3D=3D --- -- -

Thomas Johnson wrote:

> I have somehow managed to connect to my IPCop box with win2k.  Now my 
> problem is actually being able to ping it.  When I do a ping from 
> win2k, I get:
>  
> Negotiating IP Security  
>  
> On the IPCop box in /var/log/secure I get:
>  
> cannot respond to IPsec SA request because no connection is known for 
> 10.2.1.0/24===xxx.xxx.xxx.146...xxx.xxx.xxx.153===xxx.xxx.xxx.0/24
>  
> Any ideas as to why this is?
>  
> Thanks,
>  
> Tom

Please use the ipcop-users list for this thread. This has nothing to do 
with development.

Thank you,
Tim

-- 
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=== --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -

I have somehow managed to connect to my IPCop box with win2k.  Now my =
problem is actually being able to ping it.  When I do a ping from win2k, =
I get:

Negotiating IP Security  =20

On the IPCop box in /var/log/secure I get:

cannot respond to IPsec SA request because no connection is known for =
10.2.1.0/24=3D=3D=3Dxxx.xxx.xxx.146...xxx.xxx.xxx.153=3D=3D=3Dxxx.xxx.xxx=
.0/24

Any ideas as to why this is?

Thanks,

Tom

On 29 Dec 2002 at 22:55, Christopher Sawtell wrote:

> Dec 29 22:47:34 rafferty kernel: Packet log: input - eth1 PROTO=2 
> 192.168.100.1:65535 224.0.0.1:65535 L=28 S=0xC0 I=0 F=0x0000 T=1 (#8)
> Dec 29 22:50:34 rafferty kernel: Packet log: input - eth1 PROTO=2 
> 192.168.100.1:65535 224.0.0.1:65535 L=28 S=0xC0 I=0 F=0x0000 T=1 (#8)

My Surf-board does the same thing.  224.0.0.1 is a multi-cast class E 
IP.   It would be used for a movie or other single source multi-
delivery system.  I think of it as a heart beat letting me know it is 
working.  But it does chew up space in the logs.  You should find in 
the FAQ how to install a ipchain that will make it disappear.

jackb

Greetings, I'd just like you guys to know that IPCop-1.2.0 installed 
little old '486 with 16megs RAM and 125 Meg disk slowly, but surely and=20
completely faultlessly.

An interesting feature I discovered in the process was that The HTTP down=
load=20
took and aweful long time to download, I'm talking about many minutes whe=
reas=20
the 'other system' took just a few tens of seconds. I don't know the reas=
on=20
for this.

The other thing is that my Surfboard Cable modem emits a packet every 3 m=
ins,=20
thus:

Dec 29 22:47:34 rafferty kernel: Packet log: input - eth1 PROTO=3D2=20
192.168.100.1:65535 224.0.0.1:65535 L=3D28 S=3D0xC0 I=3D0 F=3D0x0000 T=3D=
1 (#8)
Dec 29 22:50:34 rafferty kernel: Packet log: input - eth1 PROTO=3D2=20
192.168.100.1:65535 224.0.0.1:65535 L=3D28 S=3D0xC0 I=3D0 F=3D0x0000 T=3D=
1 (#8)

Does anybody know what it's trying to do?

--=20
Sincerely etc.,
Christopher Sawtell

..ok, to get my own nice copy of the ipcop cvs put nicely into 
'~/ipcop/cvs', I first type 'cvs \
-d:pserver:ano...@cv...:/cvsroot/ipcop \
login ' and get a nice prompt where I hit enter to log in, 
so far so good.  Then I do ' for m in Attic CVSROOT IPCopDoc \
IPCopJ IPCopPHP ipcop ; do cvs \
-z3-d:pserver:ano...@cv...:/cvsroot/ipcop \
co $m ; done 'for an exact local cvs copy of our cvs at sf.net???

...and 2.4 and LFS in the make.sh is gone???

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

Hi all.

My upgrade to 1.2.0 went along very well indeed. Restore of config worked
flawlessly, and as others have said, a 10 minute job! Exceptional.

Now that we've got 1.2.0 underway (many thanx to Eric and co.), maybe some
time spent on the FAQ's wouldn't be amiss... I'd like to think that there
will be plenty of volunteers to start off with, so I'll put my name forward
first up.

* I know that recent changes have been made to the pptp stuff, and I can
update that part of the FAQ.
* The Dynamic DNS section is now obsolete.
* Presumeably there are updates required around the sections that indicate
people should download ip_masq_ipsec.o should be removed.

Do we have a process in place to update the html on twiki?

There's a heap of information in there, and I'm sure some of it needs to
change, but I only know/work with a small subset of what's there, so can't
comment on much of the content.

Do we have any more vounteers?

Cheers -

Hi John,

I've been away for a few days and I've missed all of the action.

I'll be back at work tomorrow and will compile a new PCI ADSL driver for 
2.2.23.

I will post as soon as this is available.

Cheers,

  - Guy.

At 18:32 28/12/02 +0000, you wrote:
>Hi
>I've setup an IPCop machine with v1.2 and the Pulsar PCI ADSL card,
>and came across one minor issue. When the insmod commands in the
>rc.pciadsl script run they refuse to load the driver because it was
>compiled for verson 2.2.21 instead of 2.2.23 that v1.2 now uses.
>The driver was the last as of 27th Dec downloaded from:
>         http://www.traverse.com.au/downloads/drivers/
>
>
>A workaround is to force the driver to load without the version
>checking using "insmod -f". Hand editing the version number stored
>in the driver file to 2.2.23 also works, but is not easy.
>
>A simple patch to rc.pciadsl produced by "diff -u" is attached.
>
>This is the first time I've tried a PCI ADSL card, so can anyone
>with a Pulsar card on IPCop v1.2 let me know if they are having a
>similar problem.
>
>
>--
>John Edwards
>sh...@co...

I have adjusted the following file:
  /etc/ssh/sshd_config
So I needed to include it into the file:
  /var/ipcop/backup/include.system

But, why not include the entire /etc/ssh/ directory?

Also, as a precaution, I create my own backup hosts.bak file in the =
/etc/ directory; I included that for backup as well.

All seems to be working Okay with this new setup.

Thanks very much to the developers (and other contributors) for =
completing these works.

btw
My new IPC box is a Compaq Deskpro 4000 (4 GB disk and 64 MB RAM).
I ran the no_f1.com against it so that I don't need to have a keyboard =
or monitor attached.

Using RED + ORANGE + GREEN as follows:
    RED -- rtl8139 card attached via UTP cable to DSL-500 ADSL =
Modem/Router;
    ORANGE -- rtl8139 card attached to web server machine with crossover =
cable;
    GREEN -- using onboard LAN controller (tlan based);

Regards

AndrewM

Andrew McGlashan
Mobile: 04 2574 1827 Fax: 03 8790 1224

Affinity Vision Australia Pty Ltd ABN 91 099 273 855
www.affinityvision.com.au -- Retail discounts for existing and new =
consultancy clients!

On 28 Dec 2002 at 16:45, Thomas Johnson wrote:

> 
> I guess it's a waste of time posting to this site as no one seems to 
> participate. Too bad for the guys at IPCop, looks like it could've 
> been a good product...guess they should of thought of windoze 
> users....
> 
> Tom Johnson

It is a holiday weekend. Not all are looking at this list.  

Now, in the last 24 hours you posted about Wireless and PGPNet 
issues. 

About wireless.  Currently IPCop does not support wireless.  There is 
subgroup working on it and should be seen in the future releases. 

About WEP.  I agree with you.  Most likely our version will be using 
MAC Address with VPN tunnels.  Win2K will support VPN.  So you can 
use that instead of PPTP today.

PPTP.  IPCop most likely will not be PPTP server.  But that does not 
stop you forwarding that traffic to a MS box that handles it.  There 
is MSQ module to load allow the redirection.

About your issue PGPNet. I do not know what is happening by what you 
have posted.  Please give little more information - like PPoE, PPoA, 
USB, PCI, MODEM, FROG, Version of IPCop, etc... 

Please help us help you.  

Jack Beglinger  

Terry Harris said:
> Hi,
> What the easiest way to clear the proxy cache on an IpCop box?
>
> Also - the Ipcop project is by far one of the best FW Distros still in
> GPL - we have been installing them at 1.1 with little or no problems.
> This includes external access, VPN,s Windows connections and more.
> Windows users can integrate very easily with IpCop Inc VPN connections.
>

See http://www.squid-cache.org/Doc/FAQ/FAQ-7.html#ss7.3 -- which says:

7.3 I want to restart Squid with a clean cache
Note: The information here is current for version 2.2.

First of all, you must stop Squid of course. You can use the command:

        % squid -k shutdown


The fastest way to restart with an entirely clean cache is to over write
the swap.state files for each cache_dir in your config file. Note, you can
not just remove the swap.state file, or truncate it to zero size. Instead,
you should put just one byte of garbage there. For example:

        % echo "" > /cache1/swap.state

Repeat that for every cache_dir, then restart Squid. Be sure to leave the
swap.state file with the same owner and permissions that it had before!


---

I've got to run, but we really should add this tidbit to the IPCOP FAQs.

Sam

Hi,
What the easiest way to clear the proxy cache on an IpCop box?

Also - the Ipcop project is by far one of the best FW Distros still in
GPL - we have been installing them at 1.1 with little or no problems.
This includes external access, VPN,s Windows connections and more.
Windows users can integrate very easily with IpCop Inc VPN connections. 

-----Original Message-----
From: ipc...@li...
[mailto:ipc...@li...] On Behalf Of
ipc...@li...
Sent: 28 December 2002 22:47
To: ipc...@li...
Subject: IPCop-devel digest, Vol 1 #376 - 6 msgs

Send IPCop-devel mailing list submissions to
	ipc...@li...

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.sourceforge.net/lists/listinfo/ipcop-devel
or, via email, send a message with subject or body 'help' to
	ipc...@li...

You can reach the person managing the list at
	ipc...@li...

When replying, please edit your Subject line so it is more specific
than "Re: Contents of IPCop-devel digest..."


Today's Topics:

   1. IPCop win2k (Thomas Johnson)
   2. Re: IPCop win2k (Tim Dobbelaere)
   3. Re: IPCop win2k (Thomas Johnson)
   4. Re: PGPNet IPCop (Tim Dobbelaere)
   5. Re: IPCop win2k (jeremy)
   6. Re: IPCop win2k (Tim Dobbelaere)

--__--__--

Message: 1
From: "Thomas Johnson" <to...@in...>
To: <ipc...@li...>
Date: Sat, 28 Dec 2002 16:45:24 -0500
Subject: [IPCop-devel] IPCop win2k

This is a multi-part message in MIME format.

------=_NextPart_000_002F_01C2AE90.846FAC70
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I guess it's a waste of time posting to this site as no one seems to =
participate.  Too bad for the guys at IPCop, looks like it could've been
=
a good product...guess they should of thought of windoze users....

Tom Johnson

------=_NextPart_000_002F_01C2AE90.846FAC70
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.3502.5390" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>I guess it's a waste of time posting to
=
this site=20
as no one seems to participate.&nbsp; Too bad for the guys at IPCop, =
looks like=20
it could've been a good product...guess they should of thought of =
windoze=20
users....</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Tom Johnson</FONT></DIV></BODY></HTML>

------=_NextPart_000_002F_01C2AE90.846FAC70--



--__--__--

Message: 2
Date: Sat, 28 Dec 2002 23:26:39 +0100
From: Tim Dobbelaere <ti...@do...>
To: Thomas Johnson <to...@in...>
Cc: ipc...@li...
Subject: Re: [IPCop-devel] IPCop win2k

This is a cryptographically signed message in MIME format.

--------------ms090703020504040409050701
Content-Type: multipart/alternative;
 boundary="------------080900010908080906090207"


--------------080900010908080906090207
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Thomas Johnson wrote:

> I guess it's a waste of time posting to this site as no one seems to 
> participate.  Too bad for the guys at IPCop, looks like it could've 
> been a good product...guess they should of thought of windoze
users.... 

Tom,

This is the development mailing list. Have you visited the IPCop Support

Web with your question?
http://ipcop.no-ip.com/ipcsupport/modules.php?op=modload&name=XForum&fil
e=forumdisplay&fid=1

Happy New Year,
Tim

-- 
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=== --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -


--------------080900010908080906090207
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta http-equiv="Content-Type"
content="text/html;charset=ISO-8859-1">
  <title></title>
</head>
<body>
Thomas Johnson wrote:<br>
<blockquote type="cite" cite="mid003201c2aeba$6d6d60b0$01000001@tommyj">
  <meta content="text/html; charset=iso-8859-1"
 http-equiv="Content-Type">
  <meta content="MSHTML 5.00.3502.5390" name="GENERATOR">
  <style></style>
  <div><font face="Arial" size="2">I guess it's a waste of time posting
to this site as no one seems to participate.&nbsp; Too bad for the guys
at
IPCop, looks like it could've been a good product...guess they should
of thought of windoze users....</font>&nbsp;</div>
</blockquote>
Tom,<br>
<br>
This is the development mailing list. Have you visited the IPCop
Support Web with your question?<br>
<a class="moz-txt-link-freetext"
href="http://ipcop.no-ip.com/ipcsupport/modules.php?op=modload&name=XFor
um&file=forumdisplay&fid=1">http://ipcop.no-ip.com/ipcsupport/modules.ph
p?op=modload&amp;name=XForum&amp;file=forumdisplay&amp;fid=1</a><br>
<br>
Happy New Year,<br>
Tim<br>
<pre class="moz-signature" cols="72">-- 
Tim Dobbelaere <a class="moz-txt-link-rfc2396E"
href="mailto:ti...@do...">&lt;ti...@do...&gt;</a> - <a
class="moz-txt-link-freetext"
href="http://tim.dobbelaere.com">http://tim.dobbelaere.com</a>
[=== --- -- -
  Thawte Web of Trust Notary - <a class="moz-txt-link-freetext"
href="http://www.thawte.com">http://www.thawte.com</a>
  Linux Counter Country Manager for Belgium - <a
class="moz-txt-link-freetext"
href="http://counter.li.org">http://counter.li.org</a>
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -
</pre>
</body>
</html>

--------------080900010908080906090207--

--------------ms090703020504040409050701
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms090703020504040409050701--



--__--__--

Message: 3
From: "Thomas Johnson" <to...@in...>
To: "Tim Dobbelaere" <ti...@do...>
Cc: <ipc...@li...>
Subject: Re: [IPCop-devel] IPCop win2k
Date: Sat, 28 Dec 2002 17:28:04 -0500

This is a multi-part message in MIME format.

------=_NextPart_000_0056_01C2AE96.7ACE19D0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Yep, been there done that.  I just want to connect to the box from the =
outside with a windows machine.  I didn't think it was going to take an
=
act of God to do it.  Why the heck didn't someone include PPTP into this
=
thing?  It's a heck of a lot easier for us users who administer linux =
networks with windows boxes.

Tom Johnson
  ----- Original Message -----=20
  From: Tim Dobbelaere=20
  To: Thomas Johnson=20
  Cc: ipc...@li...=20
  Sent: Saturday, December 28, 2002 5:26 PM
  Subject: Re: [IPCop-devel] IPCop win2k


  Thomas Johnson wrote:

    I guess it's a waste of time posting to this site as no one seems to
=
participate.  Too bad for the guys at IPCop, looks like it could've been
=
a good product...guess they should of thought of windoze users....=20
  Tom,

  This is the development mailing list. Have you visited the IPCop =
Support Web with your question?
  =
http://ipcop.no-ip.com/ipcsupport/modules.php?op=3Dmodload&name=3DXForum
&=
file=3Dforumdisplay&fid=3D1

  Happy New Year,
  Tim

--=20
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=3D=3D=3D --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=3D=3D=3D --- -- -



------=_NextPart_000_0056_01C2AE96.7ACE19D0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META content=3Dtext/html;charset=3DISO-8859-1 =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.3502.5390" name=3DGENERATOR></HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Yep, been there done that.&nbsp; I just
=
want to=20
connect to the box from the outside with a windows machine.&nbsp; I =
didn't think=20
it was going to take an act of God to do it.&nbsp; Why the heck didn't =
someone=20
include PPTP into this thing?&nbsp; It's a heck of a lot easier for us =
users who=20
administer linux networks with windows boxes.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Tom Johnson</FONT></DIV>
<BLOCKQUOTE=20
style=3D"BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT:
=
0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A href=3D"mailto:ti...@do..."
tit...@do...>Tim=20
  Dobbelaere</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
href=3D"mailto:to...@in..."=20
  tit...@in...>Thomas Johnson</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Cc:</B> <A=20
  href=3D"mailto:ipc...@li..."=20
  =
tit...@li...>ipc...@li....
n=
et</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Saturday, December 28, =
2002 5:26=20
  PM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [IPCop-devel] =
IPCop=20
  win2k</DIV>
  <DIV><BR></DIV>Thomas Johnson wrote:<BR>
  <BLOCKQUOTE cite=3D"mid003201c2aeba$6d6d60b0$01000001@tommyj" =
type=3D"cite">
    <META content=3D"MSHTML 5.00.3502.5390" name=3DGENERATOR>
    <STYLE></STYLE>

    <DIV><FONT face=3DArial size=3D2>I guess it's a waste of time =
posting to this=20
    site as no one seems to participate.&nbsp; Too bad for the guys at =
IPCop,=20
    looks like it could've been a good product...guess they should of =
thought of=20
    windoze users....</FONT>&nbsp;</DIV></BLOCKQUOTE>Tom,<BR><BR>This is
=
the=20
  development mailing list. Have you visited the IPCop Support Web with
=
your=20
  question?<BR><A class=3Dmoz-txt-link-freetext=20
  =
href=3D"http://ipcop.no-ip.com/ipcsupport/modules.php?op=3Dmodload&amp;n
a=
me=3DXForum&amp;file=3Dforumdisplay&amp;fid=3D1">http://ipcop.no-ip.com/
i=
pcsupport/modules.php?op=3Dmodload&amp;name=3DXForum&amp;file=3Dforumdis
p=
lay&amp;fid=3D1</A><BR><BR>Happy=20
  New Year,<BR>Tim<BR><PRE class=3Dmoz-signature cols=3D"72">--=20
Tim Dobbelaere <A class=3Dmoz-txt-link-rfc2396E =
href=3D"mailto:ti...@do...">&lt;ti...@do...&gt;</A> - <A =
class=3Dmoz-txt-link-freetext =
href=3D"http://tim.dobbelaere.com">http://tim.dobbelaere.com</A>
[=3D=3D=3D --- -- -
  Thawte Web of Trust Notary - <A class=3Dmoz-txt-link-freetext =
href=3D"http://www.thawte.com">http://www.thawte.com</A>
  Linux Counter Country Manager for Belgium - <A =
class=3Dmoz-txt-link-freetext =
href=3D"http://counter.li.org">http://counter.li.org</A>
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=3D=3D=3D --- -- -
</PRE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0056_01C2AE96.7ACE19D0--



--__--__--

Message: 4
Date: Sat, 28 Dec 2002 23:33:50 +0100
From: Tim Dobbelaere <ti...@do...>
To: Thomas Johnson <to...@in...>
Cc: ipc...@li...
Subject: Re: [IPCop-devel] PGPNet IPCop

This is a cryptographically signed message in MIME format.

--------------ms090704060901020106020108
Content-Type: multipart/alternative;
 boundary="------------080500030304070108010405"


--------------080500030304070108010405
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Thomas Johnson wrote:

> I'm not sure what I'm doing wrong here.  I have searched every list I 
> can find, but no answer to my problem.  I am using PGPNet to try and 
> establish a connection to my IPCop box.  When I look at the log file, 
> here is what I get:
>  
> Dec 28 16:42:47 pepe Pluto[2171]: "pepe" #1: max number of 
> retransmissions (20) re
> ached STATE_MAIN_I1.  No acceptable response to our first IKE message
> Dec 28 16:42:47 pepe Pluto[2171]: "pepe" #1: starting keying attempt 2

> of an unlim
> ited number
> Dec 28 16:42:47 pepe Pluto[2171]: "pepe" #2: initiating Main Mode
> Dec 28 16:42:47 pepe Pluto[2171]: some IKE message we sent has been 
> rejected with
> ECONNREFUSED (kernel supplied no details)
> Dec 28 16:42:47 pepe Pluto[2171]: extended network error info for 
> message to unkno
> wn: compainant 10.1.1.1, errno 111 Connection refused, origin ICMP 
> (not authentica
> ted) 2, type 3, code 3
>  
> Any idea of what my problem is?
>  
> Thanks,
>  
> Tom

I would say your ISP does some filtering.

Generally speaking, ECONNREFUSED signifies the active rejection of 
a packet. If that doesn't sound like filtering, I don't know WHAT does.
:)

Sincerely,
Tim

-- 
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=== --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -


--------------080500030304070108010405
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta http-equiv="Content-Type"
content="text/html;charset=ISO-8859-1">
  <title></title>
</head>
<body>
Thomas Johnson wrote:<br>
<blockquote type="cite" cite="mid001801c2ae90$6a5f9d90$01000001@tommyj">
  <meta content="text/html; charset=iso-8859-1"
 http-equiv="Content-Type">
  <meta content="MSHTML 5.00.3502.5390" name="GENERATOR">
  <style></style>
  <div><font face="Arial" size="2">I'm not sure what I'm doing wrong
here.&nbsp; I have searched every list I can find, but no answer to my
problem.&nbsp; I am using PGPNet to try and establish a connection to my
IPCop box.&nbsp; When I look at the log file, here is what I
get:</font></div>
  <div>&nbsp;</div>
  <div><font face="Arial" size="2">Dec 28 16:42:47 pepe Pluto[2171]:
"pepe" #1: max number of retransmissions (20) re<br>
ached STATE_MAIN_I1.&nbsp; No acceptable response to our first IKE
message<br>
Dec 28 16:42:47 pepe Pluto[2171]: "pepe" #1: starting keying attempt 2
of an unlim<br>
ited number<br>
Dec 28 16:42:47 pepe Pluto[2171]: "pepe" #2: initiating Main Mode<br>
Dec 28 16:42:47 pepe Pluto[2171]: some IKE message we sent has been
rejected with<br>
ECONNREFUSED (kernel supplied no details)<br>
Dec 28 16:42:47 pepe Pluto[2171]: extended network error info for
message to unkno<br>
wn: compainant 10.1.1.1, errno 111 Connection refused, origin ICMP
(not authentica<br>
ted) 2, type 3, code 3</font></div>
  <div>&nbsp;</div>
  <div><font face="Arial" size="2">Any idea of what my problem
is?</font></div>
  <div>&nbsp;</div>
  <div><font face="Arial" size="2">Thanks,</font></div>
  <div>&nbsp;</div>
  <div><font face="Arial" size="2">Tom</font></div>
</blockquote>
<pre>
I would say your ISP does some filtering.

Generally speaking, ECONNREFUSED signifies the active rejection of 
a packet. If that doesn't sound like filtering, I don't know WHAT does.
:)</pre>
Sincerely,<br>
Tim<br>
<br>
<pre class="moz-signature" cols="72">-- 
Tim Dobbelaere <a class="moz-txt-link-rfc2396E"
href="mailto:ti...@do...">&lt;ti...@do...&gt;</a> - <a
class="moz-txt-link-freetext"
href="http://tim.dobbelaere.com">http://tim.dobbelaere.com</a>
[=== --- -- -
  Thawte Web of Trust Notary - <a class="moz-txt-link-freetext"
href="http://www.thawte.com">http://www.thawte.com</a>
  Linux Counter Country Manager for Belgium - <a
class="moz-txt-link-freetext"
href="http://counter.li.org">http://counter.li.org</a>
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -
</pre>
</body>
</html>

--------------080500030304070108010405--

--------------ms090704060901020106020108
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms090704060901020106020108--



--__--__--

Message: 5
Subject: Re: [IPCop-devel] IPCop win2k
From: jeremy <je...@li...>
To: Thomas Johnson <to...@in...>
Cc: ipc...@li...
Date: 28 Dec 2002 14:31:59 -0800

what are you talking about? why would you post something like this?
Do you not know how hard the people that make ipcop work? Its a hobby to
make this project not a job.

If you asked a question and no one answered maybe you should ask again.

jeremy


On Sat, 2002-12-28 at 13:45, Thomas Johnson wrote:
> I guess it's a waste of time posting to this site as no one seems to
participate.  Too bad for the guys at IPCop, looks like it could've been
a good product...guess they should of thought of windoze users....
> 
> Tom Johnson




--__--__--

Message: 6
Date: Sat, 28 Dec 2002 23:49:02 +0100
From: Tim Dobbelaere <ti...@do...>
To: Thomas Johnson <to...@in...>
Cc: ipc...@li...
Subject: Re: [IPCop-devel] IPCop win2k

This is a cryptographically signed message in MIME format.

--------------ms080200070608060808060402
Content-Type: multipart/alternative;
 boundary="------------040807000700040809080704"


--------------040807000700040809080704
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Thomas Johnson wrote:

> Yep, been there done that.  I just want to connect to the box from the

> outside with a windows machine.  I didn't think it was going to take 
> an act of God to do it.  Why the heck didn't someone include PPTP into

> this thing?  It's a heck of a lot easier for us users who administer 
> linux networks with windows boxes. 

You can administer the IPCop Firewall using a web interface. By default 
access to this interface is blocked from the RED network, but you can 
allow access to port 445 if you want to administer the IPCop externally.

Adding a PPTP server wouldn't increase your security level over opening 
that port. However be sure to choose good passwords when you do this.

Tim

-- 
Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
[=== --- -- -
  Thawte Web of Trust Notary - http://www.thawte.com
  Linux Counter Country Manager for Belgium - http://counter.li.org
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -


--------------040807000700040809080704
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta http-equiv="Content-Type"
content="text/html;charset=ISO-8859-1">
  <title></title>
</head>
<body>
Thomas Johnson wrote:<br>
<blockquote type="cite" cite="mid005901c2aec0$63bf9910$01000001@tommyj">
  <title></title>
  <meta content="text/html;charset=ISO-8859-1"
http-equiv="Content-Type">
  <meta content="MSHTML 5.00.3502.5390" name="GENERATOR">
  <div><font face="Arial" size="2">Yep, been there done that.&nbsp; I
just
want to connect to the box from the outside with a windows
machine.&nbsp; I
didn't think it was going to take an act of God to do it.&nbsp; Why the
heck didn't someone include PPTP into this thing?&nbsp; It's a heck of a
lot easier for us users who administer linux networks with windows
boxes.</font>&nbsp;</div>
</blockquote>
You can administer the IPCop Firewall using a web interface. By default
access to this interface is blocked from the RED network, but you can
allow access to port 445 if you want to administer the IPCop
externally. Adding a PPTP server wouldn't increase your security level
over opening that port. However be sure to choose good passwords when
you do this.<br>
<br>
Tim<br>
<br>
<pre class="moz-signature" cols="72">-- 
Tim Dobbelaere <a class="moz-txt-link-rfc2396E"
href="mailto:ti...@do...">&lt;ti...@do...&gt;</a> - <a
class="moz-txt-link-freetext"
href="http://tim.dobbelaere.com">http://tim.dobbelaere.com</a>
[=== --- -- -
  Thawte Web of Trust Notary - <a class="moz-txt-link-freetext"
href="http://www.thawte.com">http://www.thawte.com</a>
  Linux Counter Country Manager for Belgium - <a
class="moz-txt-link-freetext"
href="http://counter.li.org">http://counter.li.org</a>
  PGP: 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
[=== --- -- -
</pre>
</body>
</html>

--------------040807000700040809080704--

--------------ms080200070608060808060402
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms080200070608060808060402--




--__--__--

_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel


End of IPCop-devel Digest

Well.. i can honestly say that i have done this, but in a different
sense, i have IPCOP at home and at work.. so i can connect via vpn no
problem and administer.

You however want to connect to the ipcop vpn without the use of another
ipcop machine. This i do not know how to do, but am trying to find the
answer for you.

jeremy


On Sat, 2002-12-28 at 16:01, Thomas Johnson wrote:
> I don't want to make a connection through it, but to it.
> 
> Frustration doesn't begin to describe it.  I have used Linux for 5 years
> now.  One thing that ticks me off more than anything is to see a feature but
> no one bothers to document how to actually use it in the real world.  They
> seem to want to use someone else's how-to.  Well, it has been my experience
> that other people's how-to's don't usually work.  I have looked at every
> list I can pertaining to IPCop and windows machines, and have yet to find
> anyone who has successfully connected to an IPCop machine using IPSEC.
> 
> I have spent the last 6 hours trying to decipher all the crap out there but
> still can't connect.  I even found a post (on this list by the way) of
> someone who actually had the same error messages I did, and yet there was no
> response to his question.  I'm not saying IPCop is a bad product, but if you
> are going to use something like Frees/Wan, then maybe there should be
> concise documentation on how to use it with your project.  The Frees/Wan
> FAQ's don't cover it being installed on IPCop, and therefore the files you
> look for aren't there.
> 
> Tom
> 
> ----- Original Message -----
> From: "Dr Dominique Jacquel" <do...@dc...>
> To: <to...@in...>
> Cc: <ti...@do...>; <ipc...@li...>
> Sent: Saturday, December 28, 2002 6:53 PM
> Subject: Re: [IPCop-devel] IPCop win2k
> 
> 
> > Frustration seem to have taken you over. Your attitude towards the IPCOP
> > project is quite astonishing to say the least!
> >
> > If you really want to make pptp connection through an IPCOP box then you
> > should read the FAQ more closely. I've been doing (reluctantly) pptp vpn
> > through IPCOP without problem for a while now.
> >
> > Dom.
> >
> > Thomas Johnson said:
> > > Yea, I know that already.  I am talking about administering systems
> BEHIND
> > > the IPCop machine.  If I can't connect to it what good is it?
> > >
> > > Tom
> > >   ----- Original Message -----
> > >   From: Tim Dobbelaere
> > >   To: Thomas Johnson
> > >   Cc: ipc...@li...
> > >   Sent: Saturday, December 28, 2002 5:49 PM
> > >   Subject: Re: [IPCop-devel] IPCop win2k
> > >
> > >
> > >   Thomas Johnson wrote:
> > >
> > >     Yep, been there done that.  I just want to connect to the box from
> the
> > > outside with a windows machine.  I didn't think it was going to take
> > > an act of God to do it.  Why the heck didn't someone include PPTP into
> > > this thing?  It's a heck of a lot easier for us users who administer
> > > linux networks with windows boxes.
> > >   You can administer the IPCop Firewall using a web interface. By
> default
> > > access to this interface is blocked from the RED network, but you can
> > > allow access to port 445 if you want to administer the IPCop externally.
> > > Adding a PPTP server wouldn't increase your security level over opening
> > > that port. However be sure to choose good passwords when you do this.
> > >
> > >   Tim
> > >
> > >
> > > --
> > > Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
> > > [=== --- -- -
> > >   Thawte Web of Trust Notary - http://www.thawte.com
> > >   Linux Counter Country Manager for Belgium - http://counter.li.org PGP:
> > > 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
> > > [=== --- -- -
> >
> >
> > --
> > Dr Dominique Jacquel
> > DCoded Limited
> > www.dcoded.co.uk
> >
> >
> >
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel

I don't want to make a connection through it, but to it.

Frustration doesn't begin to describe it.  I have used Linux for 5 years
now.  One thing that ticks me off more than anything is to see a feature but
no one bothers to document how to actually use it in the real world.  They
seem to want to use someone else's how-to.  Well, it has been my experience
that other people's how-to's don't usually work.  I have looked at every
list I can pertaining to IPCop and windows machines, and have yet to find
anyone who has successfully connected to an IPCop machine using IPSEC.

I have spent the last 6 hours trying to decipher all the crap out there but
still can't connect.  I even found a post (on this list by the way) of
someone who actually had the same error messages I did, and yet there was no
response to his question.  I'm not saying IPCop is a bad product, but if you
are going to use something like Frees/Wan, then maybe there should be
concise documentation on how to use it with your project.  The Frees/Wan
FAQ's don't cover it being installed on IPCop, and therefore the files you
look for aren't there.

Tom

----- Original Message -----
From: "Dr Dominique Jacquel" <do...@dc...>
To: <to...@in...>
Cc: <ti...@do...>; <ipc...@li...>
Sent: Saturday, December 28, 2002 6:53 PM
Subject: Re: [IPCop-devel] IPCop win2k


> Frustration seem to have taken you over. Your attitude towards the IPCOP
> project is quite astonishing to say the least!
>
> If you really want to make pptp connection through an IPCOP box then you
> should read the FAQ more closely. I've been doing (reluctantly) pptp vpn
> through IPCOP without problem for a while now.
>
> Dom.
>
> Thomas Johnson said:
> > Yea, I know that already.  I am talking about administering systems
BEHIND
> > the IPCop machine.  If I can't connect to it what good is it?
> >
> > Tom
> >   ----- Original Message -----
> >   From: Tim Dobbelaere
> >   To: Thomas Johnson
> >   Cc: ipc...@li...
> >   Sent: Saturday, December 28, 2002 5:49 PM
> >   Subject: Re: [IPCop-devel] IPCop win2k
> >
> >
> >   Thomas Johnson wrote:
> >
> >     Yep, been there done that.  I just want to connect to the box from
the
> > outside with a windows machine.  I didn't think it was going to take
> > an act of God to do it.  Why the heck didn't someone include PPTP into
> > this thing?  It's a heck of a lot easier for us users who administer
> > linux networks with windows boxes.
> >   You can administer the IPCop Firewall using a web interface. By
default
> > access to this interface is blocked from the RED network, but you can
> > allow access to port 445 if you want to administer the IPCop externally.
> > Adding a PPTP server wouldn't increase your security level over opening
> > that port. However be sure to choose good passwords when you do this.
> >
> >   Tim
> >
> >
> > --
> > Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
> > [=== --- -- -
> >   Thawte Web of Trust Notary - http://www.thawte.com
> >   Linux Counter Country Manager for Belgium - http://counter.li.org PGP:
> > 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
> > [=== --- -- -
>
>
> --
> Dr Dominique Jacquel
> DCoded Limited
> www.dcoded.co.uk
>
>
>

Frustration seem to have taken you over. Your attitude towards the IPCOP
project is quite astonishing to say the least!

If you really want to make pptp connection through an IPCOP box then you
should read the FAQ more closely. I've been doing (reluctantly) pptp vpn
through IPCOP without problem for a while now.

Dom.

Thomas Johnson said:
> Yea, I know that already.  I am talking about administering systems BEHIND
> the IPCop machine.  If I can't connect to it what good is it?
>
> Tom
>   ----- Original Message -----
>   From: Tim Dobbelaere
>   To: Thomas Johnson
>   Cc: ipc...@li...
>   Sent: Saturday, December 28, 2002 5:49 PM
>   Subject: Re: [IPCop-devel] IPCop win2k
>
>
>   Thomas Johnson wrote:
>
>     Yep, been there done that.  I just want to connect to the box from the
> outside with a windows machine.  I didn't think it was going to take
> an act of God to do it.  Why the heck didn't someone include PPTP into
> this thing?  It's a heck of a lot easier for us users who administer
> linux networks with windows boxes.
>   You can administer the IPCop Firewall using a web interface. By default
> access to this interface is blocked from the RED network, but you can
> allow access to port 445 if you want to administer the IPCop externally.
> Adding a PPTP server wouldn't increase your security level over opening
> that port. However be sure to choose good passwords when you do this.
>
>   Tim
>
>
> --
> Tim Dobbelaere <ti...@do...> - http://tim.dobbelaere.com
> [=== --- -- -
>   Thawte Web of Trust Notary - http://www.thawte.com
>   Linux Counter Country Manager for Belgium - http://counter.li.org PGP:
> 54E5 5C6B D369 4EAD 0FE2  7673 0F91 3095 069D 7943
> [=== --- -- -


-- 
Dr Dominique Jacquel
DCoded Limited
www.dcoded.co.uk