<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Network Jack &#187; Routers and Firewalls</title>
	<atom:link href="http://www.networkjack.info/blog/category/routers-and-firewalls/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.networkjack.info/blog</link>
	<description>A Jack of All Nets' experience in the world of networked systems.</description>
	<lastBuildDate>Tue, 27 Jul 2010 02:05:24 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Site to Site VPN with Mac OS X Server and a NetScreen</title>
		<link>http://www.networkjack.info/blog/2010/03/11/site-to-site-vpn-with-mac-os-x-server-and-a-netscreen/</link>
		<comments>http://www.networkjack.info/blog/2010/03/11/site-to-site-vpn-with-mac-os-x-server-and-a-netscreen/#comments</comments>
		<pubDate>Thu, 11 Mar 2010 16:22:49 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[OS X Server]]></category>
		<category><![CDATA[Routers and Firewalls]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/?p=200</guid>
		<description><![CDATA[A client needs to have a Site to Site VPN between a server at their office and a NetScreen at their colo.
I did a fresh new install of Leopard Server fully and cleanly updated to 10.5.8 running on a G4 MacMini to make sure I can configure both sides properly.
My test Server is on a [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2010/03/11/site-to-site-vpn-with-mac-os-x-server-and-a-netscreen/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Optimizing a NetScreen 5GT as a Transparent Firewall</title>
		<link>http://www.networkjack.info/blog/2009/02/25/optimizing-a-netscreen-5gt-as-a-transparent-firewall/</link>
		<comments>http://www.networkjack.info/blog/2009/02/25/optimizing-a-netscreen-5gt-as-a-transparent-firewall/#comments</comments>
		<pubDate>Wed, 25 Feb 2009 05:47:38 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Routers and Firewalls]]></category>
		<category><![CDATA[bogons]]></category>
		<category><![CDATA[netscreen]]></category>
		<category><![CDATA[policy]]></category>
		<category><![CDATA[transparent]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/?p=169</guid>
		<description><![CDATA[We have some Windows-based servers that we colocate for some clients.
We&#8217;ve always insisted that those devices sit behind some sort of protection and for a long time, we&#8217;ve used a Cisco 2621 as  a screening router for a smaller subnet of our main address space. Any traffic that wanted to reach the protected IPs was [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2009/02/25/optimizing-a-netscreen-5gt-as-a-transparent-firewall/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Mac Mini VPN Server with internal SSD</title>
		<link>http://www.networkjack.info/blog/2008/12/20/macmini-vpn-server-with-internal-ssd/</link>
		<comments>http://www.networkjack.info/blog/2008/12/20/macmini-vpn-server-with-internal-ssd/#comments</comments>
		<pubDate>Sat, 20 Dec 2008 18:41:08 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Colocation]]></category>
		<category><![CDATA[Hardware]]></category>
		<category><![CDATA[OS X Server]]></category>
		<category><![CDATA[Routers and Firewalls]]></category>
		<category><![CDATA[Servers]]></category>
		<category><![CDATA[macmini]]></category>
		<category><![CDATA[ssd]]></category>
		<category><![CDATA[vpn]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/?p=126</guid>
		<description><![CDATA[In our continuing adventures of putting the highly versatile Apple MacMini to work in all sorts of applications:
A customer of ours has a specialized application that is extremely low bandwidth, but needs to be able to be accessed through a VPN connection to a protected network resource. All the usual suspects for providing this kind [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2008/12/20/macmini-vpn-server-with-internal-ssd/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
<enclosure url="http://www.networkjack.info/blog/wp-content/uploads/2008/12/g4minissd-boot.mov" length="9195828" type="video/quicktime" />
<enclosure url="http://www.networkjack.info/blog/wp-content/uploads/2008/12/g4minissd-login.mov" length="3008908" type="video/quicktime" />
		</item>
		<item>
		<title>YouTube briefly offline due to Pakistani ISP</title>
		<link>http://www.networkjack.info/blog/2008/02/25/youtube-briefly-offline-due-to-pakistani-isp/</link>
		<comments>http://www.networkjack.info/blog/2008/02/25/youtube-briefly-offline-due-to-pakistani-isp/#comments</comments>
		<pubDate>Mon, 25 Feb 2008 16:25:47 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Routers and Firewalls]]></category>
		<category><![CDATA[Soap Box]]></category>
		<category><![CDATA[ASNs]]></category>
		<category><![CDATA[BGP]]></category>
		<category><![CDATA[routing]]></category>
		<category><![CDATA[youtube]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/2008/02/25/youtube-briefly-offline-due-to-pakistani-isp/</guid>
		<description><![CDATA[So apparently YouTube, according to a Pakistani telecommunications authority, carries content that is &#8220;deemed offensive to Islam.
So the ISP either purposefully or accidentally, added custom routing configurations to it&#8217;s routers to block YouTube. The unfortuate side-effect was that these BGP announcements were propagated to a large part of the world&#8217;s routers, taking YouTube offline for [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2008/02/25/youtube-briefly-offline-due-to-pakistani-isp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Basic Guidelines for Internet Connected Systems</title>
		<link>http://www.networkjack.info/blog/2007/11/23/basic-guidelines-for-internet-connected-systems/</link>
		<comments>http://www.networkjack.info/blog/2007/11/23/basic-guidelines-for-internet-connected-systems/#comments</comments>
		<pubDate>Fri, 23 Nov 2007 20:53:11 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[Mail Server]]></category>
		<category><![CDATA[Routers and Firewalls]]></category>
		<category><![CDATA[Servers]]></category>
		<category><![CDATA[Soap Box]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/2007/11/23/basic-guidelines-for-internet-connected-systems/</guid>
		<description><![CDATA[Here is a list of the basics that every system administrator should implement:

Set your Reverse DNS. Don&#8217;t leave it empty.
Have geographically separated DNS servers
MTAs should have properly formed HELO names
rDNS should match the HELO on your MTA
HELO should resolve to your IP address
MX records must point to A records
Filter Bogons at the first opportunity in [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2007/11/23/basic-guidelines-for-internet-connected-systems/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco CSS Content Smart Switch &#8211; Refurbishment</title>
		<link>http://www.networkjack.info/blog/2007/04/30/cisco-css-content-smart-switch-refurbishment/</link>
		<comments>http://www.networkjack.info/blog/2007/04/30/cisco-css-content-smart-switch-refurbishment/#comments</comments>
		<pubDate>Mon, 30 Apr 2007 22:56:14 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Content Networking]]></category>
		<category><![CDATA[Hardware]]></category>
		<category><![CDATA[Routers and Firewalls]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/2007/04/30/cisco-css-content-smart-switch-refurbishment/</guid>
		<description><![CDATA[(or, the device formerly known as the ArrowPoint Content Smart™ Web switch)
Back in the heady days of the dot com boom, one needed to be able to assure you could handle a large amount of traffic for all those visitors that you just knew were coming to your web property. In order to do that, [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2007/04/30/cisco-css-content-smart-switch-refurbishment/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Power Consumption &#8211; Actual amp readings</title>
		<link>http://www.networkjack.info/blog/2007/02/13/power-consumption-actual-amp-readings/</link>
		<comments>http://www.networkjack.info/blog/2007/02/13/power-consumption-actual-amp-readings/#comments</comments>
		<pubDate>Tue, 13 Feb 2007 23:51:37 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Colocation]]></category>
		<category><![CDATA[Routers and Firewalls]]></category>
		<category><![CDATA[Servers]]></category>
		<category><![CDATA[amp]]></category>
		<category><![CDATA[macmini]]></category>
		<category><![CDATA[power]]></category>
		<category><![CDATA[readings]]></category>
		<category><![CDATA[xserve]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/archives/16</guid>
		<description><![CDATA[Datacenter Power. It seems you can never have enough.
We have our colocation inside an Equinix IBX. It is an excellent facility. Unfortunately, about 2 years ago, our cage got a new neighbor. They have added rack after rack of new servers to accommodate their ever increasing traffic. Which means they have effectively used up all [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2007/02/13/power-consumption-actual-amp-readings/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Netopia Ethernet Routers &#8211; R9100 vs 3386-ENT</title>
		<link>http://www.networkjack.info/blog/2006/09/21/netopia-3386/</link>
		<comments>http://www.networkjack.info/blog/2006/09/21/netopia-3386/#comments</comments>
		<pubDate>Thu, 21 Sep 2006 05:38:21 +0000</pubDate>
		<dc:creator>Brian Blood</dc:creator>
				<category><![CDATA[Routers and Firewalls]]></category>

		<guid isPermaLink="false">http://www.networkjack.info/blog/archives/4</guid>
		<description><![CDATA[I&#8217;ve always been a fan of Netopia.
I&#8217;ve used Timbuktu remote control software since forever (1990) and we still use it today on our servers even with the availability of VNC and Apple Remote Desktop (I repeat myself).
Back in the early 90&#8217;s when ISDN connections were all the rage, at a previous employer, we used Netopia [...]]]></description>
		<wfw:commentRss>http://www.networkjack.info/blog/2006/09/21/netopia-3386/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
