Re: Periodically losing connection

Tommi Kyntola <[email protected]> Tue, 15 Jun 2004 12:56:18 +0300
Newsgroups gmane.comp.encryption.cipe
Message-ID <[email protected]>
Abraham Pearson wrote:
> We are using Cipe through a Pix firewall and a Microsoft ISA server.
 > We can get the connection up, but we are losing the connection periodically.
 > The connection lasts anywhere from three minutes to twenty minutes.  Any ideas?

Probably masquerading nat somewhere in between. I suggest putting
ping=60
or similar line to your cipe configs. That way cipe sends an
internal "ping" packet every 60 seconds keeping the connection
up also for the server. Best part about cipe's internal ping is
that you don't need extra firewall rules for the icmp packets
as you would with ordinary ping.

On the otherhand if you're using a gsm or gprs or similar link
where you want to avoid needless traffic I suggest you put snat
and dnat entries (man iptables) to your firewall making the nat
static. (effectively port forwarding the cipe port from the
server to the firewall)

cheers,
	Kynde 	[email protected]

--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>