RE: [fw-wiz] VPN and new ISP

From: Richard Snow (rsnow_at_mountauburn.org)
Date: 11/12/03

  • Next message: Damian Gerow: "Re: [fw-wiz] VPN and new ISP" 
    To: firewall-wizards@honor.icsalabs.com
Date: Wed, 12 Nov 2003 09:02:42 -0500

    Hi all,

    I was able to get the trouble escalated to second tier
    support at my ISP, and we watched the tunnel flup for a bit.

    Traceroutes show very different paths in each direction, odd
    but not too unusual. That lead the engineer to check open tickets
    for the peering arrangement with Comcast. Evidently
    there is already an order in to upgrade the peering arrangement.
    Dropped packets = dropped tunnel

    One thing I learned from this is that if the tunnel is established
    but subsequently drops -- then that means the basic VPN configuration
    is likely to be OK -- and it means there is no filtering in place.
    Access Lists are not 'intermittent'.

    Thanks for your suggestions...

    Rich

    -----Original Message-----
    From: Andy Lyakhovetskiy [mailto:andy@net4bay.com]
    Sent: Tuesday, November 11, 2003 3:00 AM
    To: Richard Snow; firewall-wizards@honor.icsalabs.com
    Subject: RE: [fw-wiz] VPN and new ISP [faked-from][mx]
    Importance: Low

    In some locations Comcast is blocking IPSEC and PPTP traffic by default, you
    have to pay some extra fee for the "clean" connection.

    Andy
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Damian Gerow: "Re: [fw-wiz] VPN and new ISP"