None of the Above - Comments

tom: Stamped or metered?

nospam@example.com (tom) — Mon, 01 Dec 2008 11:08:59 +0000

I've been wondering about that. Gooogled Netflix, stamped, and metered and your's was the first site to answer it! Thanks!

Neal: broken cables, leaky switches

nospam@example.com (Neal) — Mon, 05 May 2008 19:30:03 +0000

Ha -- that is crazy.

Myke: license to route

nospam@example.com (Myke) — Thu, 17 Apr 2008 22:28:20 +0000

Agreed, OpenVPN is hawt... but the logged messages are really silly - like how it'll negotiate a channel, but can't pass data because it's using the wrong cipher at one end... why can't this be passed between the endpoints in the metadata? You can pass IPs, Routes and all that jazz - but not WHICH ciper is in use???

pfSense is good stuff, I know CMB & Scott... they're dedicated to making it awesomesauce... It'll do what you want, and is worth the investigation if you don't have to get more stupid PIXes.

ra: license to route

nospam@example.com (ra) — Thu, 17 Apr 2008 02:01:32 +0000

The remote networks for these particular VPN's require we do NAT over the tunnel, which m0n0wall doesn't currently support, so we went with the Cisco. The m0n0wall will remain the primary router though, for sure. It routes traffic over to the ASA only when necessary.

I tend to go into convulsions when I have to do too much with Sonicwalls. Whenever I come across one I try to get it replaced with a m0n0wall.

I only just downloaded pfSense the other day in order to play around and try it out, but I've stuck with m0n0wall thus far because it's nice and lean and we've had great success with it.

I adore OpenVPN though. I use it extensively for site-to-site and client-server VPN's and it has never let me down.

Myke: license to route

nospam@example.com (Myke) — Thu, 17 Apr 2008 01:26:56 +0000

... Why'd you suggest the Cisco gear if you're already comfortable with m0n0wall/pfSense?

I just went thru a pretty painful migration where one of my clients was acquired by a bunch of SonicWall-using-dolts. Combine a horrible, slow UI with a moron who doesn't understand the difference between firewall, routing and NAT rules... oh - and reminds you frequently he's a CCNA but really doesn't understand this VLAN stuff...

Compare to the pfSense machine I setup for them a year ago, never had to touch since... they had this IPSec and OpenVPN tunnels running, well secured, ~1 year uptime too even!

Megacorp, who have IT policy stating they use SonicWalls for whatever reason, don't pay for support after 5PM...

... Because we all do major network migrations during business hours... don't you?

myXOR: oh neglected blog

nospam@example.com (myXOR) — Wed, 12 Mar 2008 21:52:51 +0000

srsly neglected!

myXOR: fold it up

nospam@example.com (myXOR) — Sat, 02 Jun 2007 18:06:15 +0000

Hackables! It's a Linux based device!

I agree - commercially - it's a bust, but as a platform for doing other things with...!

I think it also has a host-mode USB port, which means you could reload the OS (ala OpenWRT) and do almost anything with it.

ra: cab...es-el

nospam@example.com (ra) — Tue, 22 May 2007 21:01:13 +0000

Yes, I've had some trouble with Netopias before, but only on certain lines it seems. It's better than the "black box" they gave me anyway.

myXOR: cab...es-el

nospam@example.com (myXOR) — Mon, 21 May 2007 23:05:42 +0000

Netopias are pretty crappy, tho they can be pretty stable. Check to see it does G.Lite/G.DMT/ADSL2+, then you'll probably be fine.

IRC is pretty easy, fire up irssi, /server irc.mware.ca, /nick ra, /join #SPORKS (that's our social channel)... you should check it out - I'm pretty sure you'll fit in.

On the switch topic, Linksys has an 8 port GigE Dot1Q switch... That HAS NO FAN! (because if you're like me and have a combined office+bedroom, that is important) It's about $250 USD tho. SRW208 I think.

ra: cab...es-el

nospam@example.com (ra) — Mon, 21 May 2007 22:37:59 +0000

Yeah, but I have my eye on another switch. I actually have a couple sitting here, but they are for a client. I'll post more about that later.

Embarrassingly enough, I know nothing more than the basics about IRC. However, it sounds like fun and it's about time I got my hands dirty with it. We'll talk once I'm sure my link is stable.

They gave me a Westell 6110, which isn't end-user manageable, but I have a Netopia Cayman with a serial port, SNMP support, etc.

myXOR: cab...es-el

nospam@example.com (myXOR) — Mon, 21 May 2007 19:59:05 +0000

You realize 2924s are going for < $80 USD now?

Once yer all stable, wanna host a node for my IRC network? irc.mware.ca (I'm Myke!) I need to (re)establish an American presence.

What kind of modem did they stick you with? A lot of them are manageable these days, so you could see things like your current sync, capacity, and attainable sync (ie: what you'd get if uncapped)

ra: poopconnect

nospam@example.com (ra) — Fri, 11 May 2007 12:33:05 +0000

Yeah, Dell seemed unsurprised at the fact the switch had died. Go figure.

Actually the 2724 does support jumbo frames, up to 10k bytes. However, you have to enable it in the management interface :/

MyX0R: poopconnect

nospam@example.com (MyX0R) — Fri, 11 May 2007 09:26:06 +0000

You're just jealous you couldn't stump 3 layers of Linksys/Cisco support

BTW: You can't call it a decent GigE switch unless it handles Jumbo packets well!

ra: go secure

nospam@example.com (ra) — Tue, 08 May 2007 00:23:16 +0000

Oh, I'm all about sharing the WiFi love-- I have a separate access point which is public I meant that I was upgrading my private AP's. The public one remains open.

Of course now that I have OpenVPN setup I could do SSL VPN tunnels from the public wlan too, if I choose.

myXOR: go secure

nospam@example.com (myXOR) — Mon, 07 May 2007 23:11:01 +0000

Why not leave a WAP open/unencrypted? Then filter that VLAN to only the services you know you'll use on the T|C (ie: Web and PPTP (use MPD or PopTop on your router)) and let your neighbours in on the fun - and now you have plausible deniability if the MPAA/RIAA come knocking.