206 reputation
13
bio website justnetworked.wordpress.com
location Central Ohio
age
visits member for 1 year, 7 months
seen Feb 10 at 14:48

May
21
awarded  Yearling
Jul
11
comment New VPS unreachable from some points
isup.me/dvdplaza.org shows it as down, as does me trying to connect. I get ping responses and port 80 (normally http) is opened and accepting connections (telnet connected). however, it seems like it's not taking http requests. make sure the process using said port is the web service and not another service.
Jul
11
comment New VPS unreachable from some points
if you're having issues even using just the IP address, you can take DNS out of the equation for the cause.
Jul
3
comment How to securely connect to multiple different LDAPS servers (Debian)
hence the reason for a backup solution :P
Jul
3
comment How to securely connect to multiple different LDAPS servers (Debian)
very interested in why myself. I mean you just put the public version of the cert into the PEM file, so not sure why it's such a big deal.
Jul
3
comment Why might one host be unable to access the Internet, when it can ping the router and when all other hosts can?
have you checked to see if the router has any firewall or access-list configured to block Dot100? That would be my first guess.
Jul
3
comment Firewall to Load Balancer throughput
If the throughput is only 300mbps max and your links are Gigabit, then your throughput will only be 300mpbs max.
Jul
2
answered Firewall to Load Balancer throughput
Jul
1
answered Cisco VPN and .pcf file
Jun
26
awarded  Commentator
Jun
26
comment Freebsd routing doesn't work
concept of broadcast domains is why. your carrier gave you 1.1.1.33 - 48 as a network range. This is one block. Their gear thinks that anything on said block is directly connected to them. Therefore, when a request comes in for something on that block, if their gear doesn't know about it, it sends an ARP request, which your server sees on the 1.1.1.45 interface; server doesn't reply because 1.1.1.42 isn't on that interface. In order for you to put part of this block on the other side of your device (ie: using a different interface) their router will need to know how to route to it.
Jun
26
comment Freebsd routing doesn't work
You can fix two ways: 1) create static route on your providers edge router that to route 1.1.1.42 to 1.1.1.33; 2) plug both interfaces into the same broadcast domain (vlan/dumb switch/etc)
Jun
26
comment Freebsd routing doesn't work
core issue is that you have two interfaces in the same network on the same device
Jun
6
comment Properly configure two eth interfaces on different subnets
@beaconfield After running a tcpdump I can see packets hitting the eth1 interface, so it looks like the packets are having an issue returning? Shouldn't they use the default gateway? And if they are, should they be using a different gateway somehow? This is because you are running tcpdump only on eth1. The packets will go out eth0, as that's where the default gateway is.
Jun
6
comment Properly configure two eth interfaces on different subnets
what are the results of netstat -rn and ifconfig
Jun
6
comment Properly configure two eth interfaces on different subnets
i am specifically talking about from your server. Can your server reach its default gateway?
Jun
6
comment Properly configure two eth interfaces on different subnets
is your eth0 interface up? can you reach anything on the 10.10.5.0/24 network? Can you reach your default gateway 10.10.5.254? if you can't for either these, then you won't be able to get to anything outside of your 10.10.6.0/24 network, as your server doesn't know how to get outside of its local network.
Jun
4
answered Wireshark running on a server seeing lots of `ARP who has` with different tells
Jun
3
answered RDP connection works but actual internet browsing not
Jun
3
comment How do I route a public IP range over an IPSEC VPN?
if you just modify the SRC IP from site B hosts, to Site A IP, the return traffic from the Public IP Range will go to Site A and be dropped. As Site A won't be expecting traffic from the Website. I don't know Sonicwall very much, but the idea I said in my reply will still stand. You'll need to send Site B traffic destined for Public IP Range over the VPN and NAT the SRC IP on Router A. When the return traffic comes back, it will be UNNAT'd, sent over the VPN, and then sent to its dst.