From owner-freebsd-security  Fri Sep 24 16:49:18 1999
Delivered-To: freebsd-security@freebsd.org
Received: from bubba.whistle.com (bubba.whistle.com [207.76.205.7])
	by hub.freebsd.org (Postfix) with ESMTP id 51226151F0
	for <freebsd-security@FreeBSD.ORG>; Fri, 24 Sep 1999 16:49:15 -0700 (PDT)
	(envelope-from archie@whistle.com)
Received: (from archie@localhost)
	by bubba.whistle.com (8.9.2/8.9.2) id QAA55234;
	Fri, 24 Sep 1999 16:48:35 -0700 (PDT)
From: Archie Cobbs <archie@whistle.com>
Message-Id: <199909242348.QAA55234@bubba.whistle.com>
Subject: Re: AW: skip and vpn
In-Reply-To: <01BF06F1.D81FA220@kantoor-1.tepucom.nl> from "Theo Purmer (Tepucom)" at "Sep 25, 1999 01:03:55 am"
To: theo@tepucom.nl (Theo Purmer (Tepucom))
Date: Fri, 24 Sep 1999 16:48:35 -0700 (PDT)
Cc: freebsd-security@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL54 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Theo Purmer (Tepucom) writes:
> one is 192.168.1.0/24
> 
> other is 192.168.2.0/24

OK, so they are disjoint (they don't overlap). Nevermind that idea.
Did you add routes for the rfc1918 networks? I think you should not.
But now my memory is getting hazy...

Clearly machine A shouldn't be ARP'ing for the remote network addresses.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message