I remember spotting this Google car on the way to work last fall. Too bad you can’t see my face through the windshield. I’m in the black Honda Civic.
Archive for the '/etc' Category
Page 2 of 3
Okay, I guess I’ll have a blog again, but first I need to do something about this theme. Too bad I can’t just download a good one, because everything out there sucks. I just have to make everything myself, don’t I? The only problem is that last time I tried this, I looked under the hood of WordPress and ran away screaming when I discovered the ugly mess of PHP and HTML. I swear, nobody has any taste. I’ll try not to look too deep this time…
I have recently decided that I am an OB (Original Blogger). I have also decided that in order to call yourself an OB, your first blog has to have been written on your own custom blogging software (i.e., before the days of MovableType, WordPress, and Blogger.com).
I am such an elitist. Hehe…
I’m back online with naked DSL. It took AT&T a month to get me switched over, but at least I’m not paying for an unused land line anymore.
If anyone out there is thinking of making the switch, be aware that you will need to be available for a DSL tech to come on site to finish the installation. Apparently AT&T will disconnect your current phone service and put the new dry loop on a separate twisted pair that gets sent to your house, but is not actually hooked up to anything on the customer end. This information came directly from the tech that helped me. He said I was the 4th or 5th dry loop installation he fixed, and it was the same problem every time. The twisted pair with the DSL service is just hanging there inside the demarc. I had a friend switch to naked DSL a few weeks later, and she had the same problem, so watch out.
If you have a PPTP server, and you just want to allow PPTP traffic to pass through the PIX, all you need is one line:
fixup protocol pptp 1723
But did did you know the PIX has its own built-in PPTP server? Here’s how you configure it:
First you need to permit incoming PPTP traffic:
sysopt connection permit-pptp
Create a new IP pool. PPTP clients will be assigned IP addresses from this pool:
ip local pool <pool name> 192.168.180.100-192.168.180.125
Now you need to create your PPTP users.
vpdn username <username> password <password>
Create a PPTP group. The group is what holds all the PPTP settings that clients need in order to connect:
vpdn group <group name> accept dialin pptp vpdn group <group name> client configuration address local <pool name> vpdn group <group name> ppp authentication mschap vpdn group <group name> ppp encryption mppe 128 required vpdn group <group name> pptp echo 60 vpdn group <group name> client authentication local vpdn group <group name> client configuration dns <dns server address> vpdn enable outside
Finally, ensure that PPTP clients are not NAT’ed:
access-list inside_outbound_nat0_acl permit ip LAN 255.255.255.0 LAN 255.255.255.0 nat (inside) 0 access-list inside_outbound_nat0_acl