I got tired of people trying to solve the same problem over and over, so I wrote up how to do some firewall tricks using Proxy ARP and stored them over here.

After approximately a 10-14 hour downtime at the hands of our Nokia boxes, they have been replaced with a P-100 running linux 2.4.0. Our site sure seems faster, but everyone thinks I'm just making that up. :-) I don't know when we'll try to get the Nokia's working again, but I fear we will at some point.

Let me tell you about Nokia IP440 firewalls. They aren't as much fun as they would appear to be. Luckily for my sense of thriftyness, some one else purchased them before I started. Their web based config is nice until you realized that you can't do anything more exciting than set IP addresses and make VRRP links without using the Checkpoint Windows GUI. Ugh. I think I'll play a bit with VRRP today and see how well the stuff works. It almost smells like it should be a kernel level protocol with a user-space helper, instead of the completely userspace device they have now.

Switched jobs, luckily I'm getting smart enough to use my personal address so there are fewer things to switch.

Fighting iptables is no fun. It is getting to the point where it would be easier to yank the network and start over than to make it work like it should...

I now have my account set up. Some of the stuff I've worked on is at http://www.sjdjweis.com/linux/.