[jdeagles]

Followed the instructions above, on a 10.4.5 server (that has since been upped to 10.4.6, but the problem exists on both).

I can get into Avelsieve and create filters no problem.

The problem arises when one of the rules is matched. I created a large message reject rule, an out of office reply test (which I removed pretty quickly) and a reject message if I try to send myself something. If any of the rules matched, instead of sieve creating the expected mail, I get the following in a mail from postfix:

Command time limit exceeded: "/usr/bin/cyrus/bin/deliver"

Any ideas out there?

[jdeagles]

I have managed to get the connection working (though I have just broken it again, hence why I’m looking on here.

We have Mk1 FVS318s so it might be a bit different for you.

What you need to do is set the FVS318 as follows:

connection name: whatever you like
local ipsec identifier: FVS318 public address
remote ipsec identifier: OSX public address

local and remote LAN addresses: as yours are, though you might have to set "single machine" for the remote stuffeven though it isn’t. My setup wouldn’t get past P2 unless you did, until I upgraded to 10.4.2.

remote WAN ip: osx public address

secure association: Aggressive Mode
perfect forward secrecy: disabled
encryption protocol: 3DES
key group: Diffie-Hellman group 2
pre-shared key: whatever you like. Nice and long and random.

the s2svpnadmin side of things should be fairly straightforward from there. make sure both networks are /24 and the osx isn’t /32 even if you set it like that on the FVS318. Seems to be a quirk of the thing.

Well its probably about a month too late for you but it might save some other poor sod pulling their hair out on this one.

[Author]

Posts