RE: VPN and new ISP

[Richard Snow <rsnow () mountauburn org>]

Hi all,

I was able to get the trouble escalated to second tier
support at my ISP, and we watched the tunnel flup for a bit.

Traceroutes show very different paths in each direction, odd
but not too unusual. That lead the engineer to check open tickets
for the peering arrangement with Comcast. Evidently
there is already an order in to upgrade the peering arrangement.
Dropped packets = dropped tunnel

One thing I learned from this is that if the tunnel is established
but subsequently drops -- then that means the basic VPN configuration
is likely to be OK -- and it means there is no filtering in place.
Access Lists are not 'intermittent'.

Thanks for your suggestions...

Rich

-----Original Message-----
From: Andy Lyakhovetskiy [mailto:andy () net4bay com] 
Sent: Tuesday, November 11, 2003 3:00 AM
To: Richard Snow; firewall-wizards () honor icsalabs com
Subject: RE: [fw-wiz] VPN and new ISP [faked-from][mx]
Importance: Low


In some locations Comcast is blocking IPSEC and PPTP traffic by default, you
have to pay some extra fee for the "clean" connection.

Andy
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards