All software must be approved and installed by the IT department. This includes browser plugins, screen savers and wallpapers. Non-compliance = grounds for termination.
Then, all you need is a management team with enough balls to actually backup their policy.
No inconvenience for people using a "REAL" browser. In Moz, you just highlight the URL, and drag the text to an empty space on your tab bar. Voila a new tab with the link loading.
That's a shame. I had the exact same thing happen (small holes in a t-shirt I ordered), and they sent me a replacement immediately. Told me to just keep the other one and wear it while working on the car or something.
On your eth0 interface of the firewall, you need to allow 500 udp, and 50 tcp (if you're using ESP which is default). This allows the IPSEC peers to setup the tunnel. http://www.freeswan.org/freeswan_trees/freeswan-1. 95/doc/firewall.html
According to the FreeSwan folks, no firewalling NEEDS to be done on the ipsec0 interfaces, as all packets coming through this tunnel are already being disassembled and "cleaned-up" by freeswan itself.
Slashdot Mirror
Easy enough to do:
All software must be approved and installed by the IT department. This includes browser plugins, screen savers and wallpapers. Non-compliance = grounds for termination.
Then, all you need is a management team with enough balls to actually backup their policy.
BAFH (Bastard Admin from Hell)
No inconvenience for people using a "REAL" browser. In Moz, you just highlight the URL, and drag the text to an empty space on your tab bar. Voila a new tab with the link loading.
That's a shame. I had the exact same thing happen (small holes in a t-shirt I ordered), and they sent me a replacement immediately. Told me to just keep the other one and wear it while working on the car or something.
Seemed like descent folks to me.
On your eth0 interface of the firewall, you need to allow 500 udp, and 50 tcp (if you're using ESP which is default). This allows the IPSEC peers to setup the tunnel. http://www.freeswan.org/freeswan_trees/freeswan-1. 95/doc/firewall.html
According to the FreeSwan folks, no firewalling NEEDS to be done on the ipsec0 interfaces, as all packets coming through this tunnel are already being disassembled and "cleaned-up" by freeswan itself.