For those of you who say "freeswan was so hard to configure so kame's better freeswan sucks bla bla" or even "kame sucks freeswan is king because kame tools are hard to understand" I have this to say: IPSEC in general is hard to configure... you've got tons of different parameters, hash algs, enc algs, id's, tunnels, ah, esp bla bla bla and if you don't understand the protocol in general then you have no business saying either is hard to configure because you got lucky with one of them and it just worked and now you're married to it and consider it superior. I have used both kame and freeswan and can say with authority, hacking for weeks at a time on custom patchs for freeswan, that they are both good products. I LIKE freeswan more because of it's overall feel of higher quality for managing large numbers of connections and it's general tollerance of other devices that have slightly broken behaiour. For instance, you can turn off rekeying on a connection and let the other side always initiate keying. That is handy. Now I don't agree with their politics and I really could do without them -- I can't say that I much care. Freeswan, in the spirit of open source allowed others to modify it as they see fit. I DID, others did, it worked. Saying the project was worthless without really looking at what it's existance has done and only looking at the fact that some of the politics were bad is most disturbing. I would hate to hear even one of you say BSD sucks because of some configuration issue you had on 386 bsd back in the day.
And just for the record, tail -f/var/log/auth.log is your friend, as is ipsec auto --status | grep connectionname | grep esp (shows active tunnels)... OH one other thing... if you cant figure out what the other side is configured to when it does phase 1 and phase 2 negotiation, ipsec whack --name connectionname --debug-parsing ; tail -f/var/log/auth.log to tell you EVERY SINGLE ipsec parameter the other side sends you.
For those who hated freeswan because error messages sucked, try the above. For those who say it sucked because of politics, welcome to open source!
To me it seems obvious that freeswan will still deployed and maintained -- it's just too good of a thing to let go. Try to think of this as a releasing -- openswan and the rest are not going anywhere. Freeswan's active development is done... since their main goal was OE. Since I didn't want OE, I don't care. It's not like freeswan doesn't support some IPSEC feature or that its behind the times. What else needs to be done? Maintenance I would gather.. for a plain old ipsec implementation, it's pretty much done so who can blame em!?
Considering the responses i've seen here, it's going to be maintained. I'm glad we're in opensource land and I don't HAVE to use kame if I don't want to or have some reason where freeswan is slightly better for my situation.
I built a Tbird 1 ghz box a while back for a game machine... from day one it was flaky. After a year now it finally just quit booting windows or linux (I tried linux to rule out a bad windows install with a good old 'build the kernel and watch for sig11' test). All the big caps on this board are all bloated at the top and have a nasty build up of junk where the caps appear to have 'vented'. Sun boxes may be slow compared to the mhz mofos of intel and amd today... but I'm back to using my dual 300mhz ultra 60 for just about everything outside of my work laptop. My 400mhz p2 server is still running fine too. Same with that 350 mhz k6-2 box.. hey.. wait.. is there a pattern.. yes there is!!!.. it's what happens to all goods markets when the general public gets into it.. it's flooded with cheap shit and nobody knows for sure what is good anymore.
Re:ViewSonic's the way to go if gaming
on
LCD Round-up
·
· Score: 1
You mention the faults of some CRT monitors yet forget to mention the faults of many LCD monitors. A lot of LCDs have multiple dead pixels, which also cannot be fixed, and many vendors won't even let you return the monitor if it has 4 or less dead pixels.
You're right, the artical mentioned those. I didn't feel the need to repeat.
While it is true that LCDs are much lighter than CRTs, they are also more fragile, so you have to be careful when you carry them around.
Yes.. I have become very skilled at this art. It's a true con of the LCD. On the other hand, lugging mine on a mile hike would be easy, lugging a 21 inch monitor a mile would be like some of the physical performance requirements for entry into the special forces. I'll be careful;)
LCDs also cost a lot more than CRTs, so while you save some money since they use less power, you aren't really gaining anything, unless of course you are concerned with saving electricity in case we run out of flowing water.
Actually I was thinking more along the lines of a lan party where power sucking 19 and 20 inch monitors with the viewable area of a 17-18 inch lcd make the lights go out and everyone re-join the game servers;).
What is the point of this? If you needed to connect two keyboards and mice to two different computers, then you could have just used a splitter. If you just wanted 2 keyboards, then I don't know what to say.
Not sure about this.. I will work on the premis that you are talking about a VGA splitter. Most vga splitters are quite expensive (kvm switch?) and produce some signal loss (distortion / lines) and most except the very recent don't even support resolutions over 1280x1024 going through them. For the kind of cash it takes to get 1280-1600 at high resolution and no distortion through a vga box, one can get an LCD with multiple inputs have both sources come through on the one display at max resolution and refresh rate (refresh which really isn't visable (even at 60hz) on LCD anyways due to the nature of the display, but which would drive the average joe insane with a crt if it was at 60 hz on a white background) (and yes that was a run on sentence)
ViewSonic's the way to go if gaming
on
LCD Round-up
·
· Score: 5, Informative
I have to say that my viewsonic va800 (17.4") is quite the awesome peice of eq. I'm a software eng by day and a gamer by night... As for the programming side of the coin, any monitor will do, bug screen space is king... that paired with crisp fonts makes the code flow. As for the game side, the lcd I have is very good for games. I have owned 2 other LCD flat panels that were just plain too slow (disposal of pixels) to play games on, but the va800 has it down. Scrolling, full motion, no bluring in the least. Don't get me wrong, not all viewsonics are great for games.. their 15 inch one was just terrible, and a friend of mine claims his 19 inch black viewsonic was too slow for him. Something about the va800 made me keep it for gaming where the others went back to the store. Just my 2 cents for the gamers.
Oh and some of the other PRO's of LCD that make it totally worth it if you have the extra cash and have found one with a quick pixel disposal rate that you are comfortable playing games on:
1) one touch auto sync / setup. Match the res and contrast with a click of a button. No black boxes around your viewing area. BTW 17.4 means 17.4 VIEWABLE.. unlike in the CRT world.
2) no more areas of the screen that you just have to deal with distortion on... Cant count how many monitors are just slighly curved or crooked in the corners or discolored in a fashion that even a degaus coil won't fix.
3) LIGHT and small. This one is under rated. I had a 21 inch monitor at work that was soo big, I couldn't get it all the way in the corner section of the cube where the computer should go and still have a keyboard on the desk. What a joke.. I don't need a big set top TV thank you. LCD's pivot, twist.. all that... turn the screen show a friend. Move the screen to a new location, don't break your back.
4) low power consumtion... quit dimming the lights when you power on your RAY GUN.
5) multiple input and or tuners built in. Some of the lcds have multiple inputs (svideo, multiple analogs..), some even have tv and radio turners with PIP built in (I had a samsung that did that.. TITS!). I can have my ultra 60 and my game PC plugged into mine and hit the 'switch input' button and boom.. there's the other machine. And with all that space i saved for having an LCD, I can have 2 keyboard and mice! JOY!
Thats's about it. I like mine overall... it was 1600 bucks back in the day, now it's like 700 retail. I'm very happy with it... the moral is 'try em all' cause loads of them just do plain suck for disposal rates. I made the guy at the computer store play a DVD on all of them before I considered purchasing one;)
To much trouble. Commercial companies like the one I work for rely on hardware that we can swap and mix and match like mad. Dead raid5 drive?... pop another in... if we get hungup over copy protection with mission critical data... we sue the fuck outa the drive maker--that should be enough of a reason for them to NOT do it.
ANOTHER thing: there will always be software countermeasures that can avoid the hardware protection. I mean come on. gee lets place a.doc file on the desktop.. and say.. the data is a blowfish encrypted tar.bz2.gz.bz2.zip full of warez. What keeps this from happening?
IF it happens... there had better be commercial counterparts wihthout the copy protection.
hell... ORACLE can use drives / partitions / slices without FS's.. I don't want any HDD BS screwing with my database!
Slashdot Mirror
The local pc shop in my area sells that case for $6 bucks. I wonder if it's NEBS level 3 certified?
For those of you who say "freeswan was so hard to configure so kame's better freeswan sucks bla bla" or even "kame sucks freeswan is king because kame tools are hard to understand" I have this to say: IPSEC in general is hard to configure... you've got tons of different parameters, hash algs, enc algs, id's, tunnels, ah, esp bla bla bla and if you don't understand the protocol in general then you have no business saying either is hard to configure because you got lucky with one of them and it just worked and now you're married to it and consider it superior. I have used both kame and freeswan and can say with authority, hacking for weeks at a time on custom patchs for freeswan, that they are both good products. I LIKE freeswan more because of it's overall feel of higher quality for managing large numbers of connections and it's general tollerance of other devices that have slightly broken behaiour. For instance, you can turn off rekeying on a connection and let the other side always initiate keying. That is handy. Now I don't agree with their politics and I really could do without them -- I can't say that I much care. Freeswan, in the spirit of open source allowed others to modify it as they see fit. I DID, others did, it worked. Saying the project was worthless without really looking at what it's existance has done and only looking at the fact that some of the politics were bad is most disturbing. I would hate to hear even one of you say BSD sucks because of some configuration issue you had on 386 bsd back in the day.
/var/log/auth.log is your friend, as is ipsec auto --status | grep connectionname | grep esp (shows active tunnels)... OH one other thing... if you cant figure out what the other side is configured to when it does phase 1 and phase 2 negotiation, ipsec whack --name connectionname --debug-parsing ; tail -f /var/log/auth.log to tell you EVERY SINGLE ipsec parameter the other side sends you.
.. for a plain old ipsec implementation, it's pretty much done so who can blame em!?
And just for the record, tail -f
For those who hated freeswan because error messages sucked, try the above. For those who say it sucked because of politics, welcome to open source!
To me it seems obvious that freeswan will still deployed and maintained -- it's just too good of a thing to let go. Try to think of this as a releasing -- openswan and the rest are not going anywhere. Freeswan's active development is done... since their main goal was OE. Since I didn't want OE, I don't care. It's not like freeswan doesn't support some IPSEC feature or that its behind the times. What else needs to be done? Maintenance I would gather
Considering the responses i've seen here, it's going to be maintained. I'm glad we're in opensource land and I don't HAVE to use kame if I don't want to or have some reason where freeswan is slightly better for my situation.
I built a Tbird 1 ghz box a while back for a game machine... from day one it was flaky. After a year now it finally just quit booting windows or linux (I tried linux to rule out a bad windows install with a good old 'build the kernel and watch for sig11' test). All the big caps on this board are all bloated at the top and have a nasty build up of junk where the caps appear to have 'vented'. Sun boxes may be slow compared to the mhz mofos of intel and amd today... but I'm back to using my dual 300mhz ultra 60 for just about everything outside of my work laptop. My 400mhz p2 server is still running fine too. Same with that 350 mhz k6-2 box.. hey.. wait.. is there a pattern.. yes there is!!! .. it's what happens to all goods markets when the general public gets into it.. it's flooded with cheap shit and nobody knows for sure what is good anymore.
You mention the faults of some CRT monitors yet forget to mention the faults of many LCD monitors. A lot of LCDs have multiple dead pixels, which also cannot be fixed, and many vendors won't even let you return the monitor if it has 4 or less dead pixels.
;)
;).
You're right, the artical mentioned those. I didn't feel the need to repeat.
While it is true that LCDs are much lighter than CRTs, they are also more fragile, so you have to be careful when you carry them around.
Yes.. I have become very skilled at this art. It's a true con of the LCD. On the other hand, lugging mine on a mile hike would be easy, lugging a 21 inch monitor a mile would be like some of the physical performance requirements for entry into the special forces. I'll be careful
LCDs also cost a lot more than CRTs, so while you save some money since they use less power, you aren't really gaining anything, unless of course you are concerned with saving electricity in case we run out of flowing water.
Actually I was thinking more along the lines of a lan party where power sucking 19 and 20 inch monitors with the viewable area of a 17-18 inch lcd make the lights go out and everyone re-join the game servers
What is the point of this? If you needed to connect two keyboards and mice to two different computers, then you could have just used a splitter. If you just wanted 2 keyboards, then I don't know what to say.
Not sure about this.. I will work on the premis that you are talking about a VGA splitter. Most vga splitters are quite expensive (kvm switch?)
and produce some signal loss (distortion / lines) and most except the very recent don't even support resolutions over 1280x1024 going through them. For the kind of cash it takes to get 1280-1600 at high resolution and no distortion through a vga box, one can get an LCD with multiple inputs have both sources come through on the one display at max resolution and refresh rate (refresh which really isn't visable (even at 60hz) on LCD anyways due to the nature of the display, but which would drive the average joe insane with a crt if it was at 60 hz on a white background) (and yes that was a run on sentence)
I have to say that my viewsonic va800 (17.4") is quite the awesome peice of eq. I'm a software eng by day and a gamer by night... As for the programming side of the coin, any monitor will do, bug screen space is king... that paired with crisp fonts makes the code flow. As for the game side, the lcd I have is very good for games. I have owned 2 other LCD flat panels that were just plain too slow (disposal of pixels) to play games on, but the va800 has it down. Scrolling, full motion, no bluring in the least. Don't get me wrong, not all viewsonics are great for games.. their 15 inch one was just terrible, and a friend of mine claims his 19 inch black viewsonic was too slow for him. Something about the va800 made me keep it for gaming where the others went back to the store. Just my 2 cents for the gamers.
;)
Oh and some of the other PRO's of LCD that make it totally worth it if you have the extra cash and have found one with a quick pixel disposal rate that you are comfortable playing games on:
1) one touch auto sync / setup. Match the res and contrast with a click of a button. No black boxes around your viewing area. BTW 17.4 means 17.4 VIEWABLE.. unlike in the CRT world.
2) no more areas of the screen that you just have to deal with distortion on... Cant count how many monitors are just slighly curved or crooked in the corners or discolored in a fashion that even a degaus coil won't fix.
3) LIGHT and small. This one is under rated. I had a 21 inch monitor at work that was soo big, I couldn't get it all the way in the corner section of the cube where the computer should go and still have a keyboard on the desk. What a joke.. I don't need a big set top TV thank you. LCD's pivot, twist.. all that... turn the screen show a friend. Move the screen to a new location, don't break your back.
4) low power consumtion... quit dimming the lights when you power on your RAY GUN.
5) multiple input and or tuners built in. Some of the lcds have multiple inputs (svideo, multiple analogs..), some even have tv and radio turners with PIP built in (I had a samsung that did that.. TITS!). I can have my ultra 60 and my game PC plugged into mine and hit the 'switch input' button and boom.. there's the other machine. And with all that space i saved for having an LCD, I can have 2 keyboard and mice! JOY!
Thats's about it. I like mine overall... it was 1600 bucks back in the day, now it's like 700 retail. I'm very happy with it... the moral is 'try em all' cause loads of them just do plain suck for disposal rates. I made the guy at the computer store play a DVD on all of them before I considered purchasing one
To much trouble. Commercial companies like the one I work for rely on hardware that we can swap and mix and match like mad. Dead raid5 drive? ... pop another in... if we get hungup over copy protection with mission critical data... we sue the fuck outa the drive maker--that should be enough of a reason for them to NOT do it.
.doc file on the desktop.. and say.. the data is a blowfish encrypted tar.bz2.gz.bz2.zip full of warez. What keeps this from happening?
.. I don't want any HDD BS screwing with my database!
ANOTHER thing: there will always be software countermeasures that can avoid the hardware protection. I mean come on. gee lets place a
IF it happens... there had better be commercial counterparts wihthout the copy protection.
hell... ORACLE can use drives / partitions / slices without FS's