<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2600.0" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>I am having problems with two Linux machines (<A
href="http://www.smoothwall.co.uk">www.smoothwall.co.uk</A>) and IPSEC VPN's.
</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>The only is on an
NTL 512K unmanaged</FONT> <FONT face=Arial size=2>leased line and
the other on a Demon 128K isdn dial up</FONT></DIV>
<DIV><FONT face=Arial size=2>This is a little off topic but I am sure there are
some people here that have a much better knowledge of routing and networks than
me. I need help because NTL are being rather useless!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV>The negotiation of the certificates is carried out but no data will pass
between the two machines</DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>root@warehouse /root]# tcpdump -I ippp0<BR>tcpdump:
listening on ippp0<BR>11:54:22.146509 no-dns-yet.demon.co.uk > NTLIPADDRESS:
ESP(spi=0x760f04c9,seq=0x9)<BR>11:54:22.546537 62.252.61.xxx >
no-dns-yet.demon.co.uk: icmp: host NTLIPADDRESS unreachable - admin prohibited
filter</FONT><BR></DIV>
<DIV><FONT face=Arial size=2>Where:- </FONT></DIV>
<DIV><FONT face=Arial size=2>ippp0 is the isdn card on the Demon
end.</FONT></DIV>
<DIV><FONT face=Arial size=2>no-dns-yet.demon.co.uk is the Demon ip
address</FONT></DIV>
<DIV>NTLIPADDRESS is the NTL end ip address</DIV>
<DIV>62.252.61.xxx is the IP Address NTL router on the NTL side of
the leased line</DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Outbound packets transmit with no problem from NTL
-> Demon, but are blocked as they return</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>To eliminate a smoothwall configuration error we
put it on a LAN and it worked perfectly</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Both NTL and the owner of the NTL line are saying
that ports 50 & 51are not filtered. We proved this by setting up an ftp
server on both ports and I could get access to them.</FONT></DIV>
<DIV> </DIV>
<DIV>Does anyone have any ideas how theses ESP packets may be
getting blocked, so that I can push NTL in the correct
direction?</FONT></DIV></DIV>
<DIV>
<DIV align=left><FONT face=Arial size=2></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2>thanks</FONT></DIV>
<DIV align=left>
<HR>
<B><FONT face='"Verdana", Geneva, MS sans-serif' size=2>Hywel
Burris</FONT></B></DIV>
<DIV align=left><B><FONT face='"Verdana", Geneva, MS sans-serif' color=#000000
size=1></FONT></B></DIV>
<DIV align=left><B><FONT face='"Verdana", Geneva, MS sans-serif' size=1>Mobile:
: 07976 621154</FONT></B></DIV>
<DIV align=left><B><FONT face='"Verdana", Geneva, MS sans-serif' size=1>Email:
</FONT><FONT face='"Verdana", Geneva, MS sans-serif' color=#448593 size=1><A
href="mailto:hywel@burris.org.uk">hywel@burris.org.uk</A></FONT><FONT
face='"Verdana", Geneva, MS sans-serif' size=1><BR>ICQ#: <FONT
color=#0000ff>33224989</FONT></FONT></B><FONT
face='"Verdana", Geneva, MS sans-serif' size=1></DIV></FONT><FONT
face='"Verdana", Geneva, MS sans-serif' color=#448593 size=-2>
<TABLE border=0>
<TBODY>
<TR>
<TD vAlign=top><FONT face="Verdana,Geneva, MS sans-serif"
size=-2><B>Current ICQ status:</B> </FONT></TD>
<TD vAlign=bottom><IMG
src="http://web.icq.com/whitepages/online?icq=33224989&img=21">
</TD></TR></TBODY></TABLE><STRONG>
<HR>
</STRONG></FONT></DIV></BODY></HTML>