C1710VPV + PIX501 + Client 3.5.1

Similar Questions

• Two VPN clients remote need to Exchange resources through PIX501

  I would like to have remote VPN clients ping each other and exchange their resiurces directly through pix501.

  Is this possible? If so, how can I make it work?

  With the current code of 6.x, u / shooting VPN traffic between sites or remote access clients is not possible, when this traffic ends on the same interface.

  Pix 7.0 code is provided as a feature, which is scheduled for release in Q3.

  Thank you

  Peter

• Remote administration of a PIX running as a VPN client

  Hello

  I have a setup where a PIX501 works as a VPN client upward against my central VPN3000 concentrator (LAN-2-LAN with NAT - T mode).

  External interface of the pix is behind a firewall managed by ISP to the remote end, and get it via DHCP IP address.

  So far so good. This configuration works hotel.

  The problem is that I can't ssh/telnet to the external interface of the PIX due to this configuration.

  Would it not possible to ssh/telnet to the remote pix _inside_ interface?

  I guess stuff NAT Bennett, but I can't make it work.

  Any ideas?

  (: O) Mikkle

  This is possible by commands:

  management-access inside

  It works very well as I have used both inside interface is included in all the crypto config

  Sam

• IPSec by 837 to a pix501 am

  Scenario: The user has a router 837 for ADSL access with an assigned IP address. The router has been implemented with outgoing dynamic nat overloaded by a static and 25 (ACL) port forwarding for incoming smtp mail.

  We want to put a pix501 within the 837 to provide a sort of demilitarized zone and to provide remote access vpn service. We have implemented the 837 with dynamic NAT overloaded with three static (and ACLs associated) to the smtp port (25), NAT - T (500) and (IKE) 4500. The PIX is set up with the dynamic nat for its external interface also overloaded by a static for port 25.

  This config works great for all outbound traffic and inbound smtp traffic. But we cannot establish a vpn over the Internet, the VPN client connection don't 'touch' the security gateway - which implies failure ISAKMP. If connect us a VPN client directly to the outside of the PIX and use his external IP for the IPSEC peer address we can establish a VPN connection very well, proving the VPN PIX (?) configuration The pix is configured for NAT - T support due to the 837. Also, the VPN client is configured to use NAT - T. ISAKMP is disabled on the 837.

  Is there a reason why it would not work? If AH is still used?

  I see the port udp 50 is typo, ike needs udp 500

• EasyVPN and Pix501-Pix501-problem

  Hello

  I have a problem with my two Pix501.

  I want one of them is the EasyVPN server and the other is the Client remote EasyVPN.

  I configured everything as it is shown at http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008019e6d7.shtml

  I have my 'normal' network 192.168.0.0/24 which is the external interface of the two PIX in my testenvironment. EasyVPN-network 192.168.1.0/24 the otherone servers are 192.168.2.0/24.

  My problem is, that the two PIX do not connect.

  Here are the configs:

  EasyVPN server:

  6.3 (5) PIX version
  interface ethernet0 car
  interface ethernet1 100full
  ethernet0 nameif outside security0
  nameif ethernet1 inside the security100
  activate 8Ry2YjIyt7RRXU24 encrypted password
  2KFQnbNIdI.2KYOU encrypted passwd
  hostname kr01icr02
  fixup protocol dns-length maximum 512
  fixup protocol ftp 21
  fixup protocol h323 h225 1720
  fixup protocol h323 ras 1718-1719
  fixup protocol http 80
  fixup protocol rsh 514
  fixup protocol rtsp 554
  fixup protocol sip 5060
  fixup protocol sip udp 5060
  fixup protocol 2000 skinny
  fixup protocol smtp 25
  fixup protocol sqlnet 1521
  fixup protocol tftp 69
  names of
  access-list 101 permit ip 192.168.1.0 255.255.255.0 192.168.2.0 255.255.255.0
  pager lines 24
  Outside 1500 MTU
  Within 1500 MTU
  192.168.0.220 outside IP address 255.255.255.0
  IP address inside 192.168.1.1 255.255.255.0
  alarm action IP verification of information
  alarm action attack IP audit
  IP local pool ippool 192.168.3.1 - 192.168.3.254
  PDM logging 100 information
  history of PDM activate
  ARP timeout 14400
  Global 1 interface (outside)
  (Inside) NAT 0-list of access 101
  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0
  Route outside 0.0.0.0 0.0.0.0 192.168.0.250 1
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  AAA-server GANYMEDE + 3 max-failed-attempts
  AAA-server GANYMEDE + deadtime 10
  RADIUS Protocol RADIUS AAA server
  AAA-server RADIUS 3 max-failed-attempts
  AAA-RADIUS deadtime 10 Server
  AAA-server local LOCAL Protocol
  Enable http server
  http 192.168.1.0 255.255.255.0 inside
  No snmp server location
  No snmp Server contact
  SNMP-Server Community public
  No trap to activate snmp Server
  enable floodguard
  Permitted connection ipsec sysopt
  Crypto ipsec transform-set RIGHT aes - esp esp-md5-hmac
  Crypto-map dynamic dynmap 10 transform-set RIGHT
  map mymap 10-isakmp ipsec crypto dynamic dynmap
  mymap outside crypto map interface
  ISAKMP allows outside
  ISAKMP identity address
  part of pre authentication ISAKMP policy 10
  ISAKMP policy 10 aes encryption
  ISAKMP policy 10 md5 hash
  10 2 ISAKMP policy group
  ISAKMP life duration strategy 10 86400
  vpngroup address ippool pool mygroup
  vpngroup dns 192.168.1.200 server mygroup
  vpngroup wins 192.168.1.200 mygroup-Server
  vpngroup mygroup by default-field cisco.com
  vpngroup split tunnel 101 mygroup
  vpngroup idle time 1800 mygroup
  mygroup vpngroup password *.
  vpngroup idle-idle time 1800
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  dhcpd address 192.168.1.2 - 192.168.1.33 inside
  dhcpd lease 3600
  dhcpd ping_timeout 750
  dhcpd outside auto_config
  dhcpd allow inside
  Terminal width 80
  Cryptochecksum:4967199c613b5553f9bc5aaa09aa02b3
  : end

  Client:

  6.3 (5) PIX version
  interface ethernet0 car
  interface ethernet1 100full
  ethernet0 nameif outside security0
  nameif ethernet1 inside the security100
  activate 8Ry2YjIyt7RRXU24 encrypted password
  2KFQnbNIdI.2KYOU encrypted passwd
  hostname kr01icr03
  fixup protocol dns-length maximum 512
  fixup protocol ftp 21
  fixup protocol h323 h225 1720
  fixup protocol h323 ras 1718-1719
  fixup protocol http 80
  fixup protocol rsh 514
  fixup protocol rtsp 554
  fixup protocol sip 5060
  fixup protocol sip udp 5060
  fixup protocol 2000 skinny
  fixup protocol smtp 25
  fixup protocol sqlnet 1521
  fixup protocol tftp 69
  names of
  pager lines 24
  Outside 1500 MTU
  Within 1500 MTU
  external IP 192.168.0.221 255.255.255.0
  IP address inside 192.168.2.1 255.255.255.0
  alarm action IP verification of information
  alarm action attack IP audit
  PDM logging 100 information
  history of PDM activate
  ARP timeout 14400
  Global 1 interface (outside)
  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0
  Route outside 0.0.0.0 0.0.0.0 192.168.0.250 1
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  AAA-server GANYMEDE + 3 max-failed-attempts
  AAA-server GANYMEDE + deadtime 10
  RADIUS Protocol RADIUS AAA server
  AAA-server RADIUS 3 max-failed-attempts
  AAA-RADIUS deadtime 10 Server
  AAA-server local LOCAL Protocol
  Enable http server
  No snmp server location
  No snmp Server contact
  SNMP-Server Community public
  No trap to activate snmp Server
  enable floodguard
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  dhcpd address 192.168.2.2 - 192.168.2.33 inside
  dhcpd lease 3600
  dhcpd ping_timeout 750
  dhcpd outside auto_config
  dhcpd allow inside
  vpnclient 192.168.0.220 Server
  vpnclient mode network-extension-mode
  vpnclient mygroup vpngroup password *.
  vpnclient enable
  Terminal width 80
  Cryptochecksum:3caebce68a73c906150eb011e7b18f8a
  : end

  Anyone have an idea why it doesn't work?

  Thank you

  Kriss

  OK, thanks for the tests and the great to hear the client software vpn works great. This eliminates the problem vpn server.

  You will also need to add the following on the client:

  vpnclient nem-st-autoconnect

  connect vpnclient

• PIX501 VPN PPTP: I have to browse the internet side remote via my VPN server

  Hello

  IM using PPTP for remote access to my server VPN, its power remotely connect to LAN, but I did not have Internet access on the remote side is that I need...

  IM using windows PPTP client and he has to select the "use default gateway on remote network": but still does not.

  Could you help me, thanks in advance

  Rolando

  6.3 (5) PIX version
  interface ethernet0 car
  interface ethernet1 100full
  ethernet0 nameif outside security0
  nameif ethernet1 inside the security100
  fixup protocol dns-length maximum 512
  fixup protocol ftp 21
  fixup protocol h323 h225 1720
  fixup protocol h323 ras 1718-1719
  fixup protocol http 80
  fixup protocol rsh 514
  fixup protocol rtsp 554
  fixup protocol sip 5060
  fixup protocol sip udp 5060
  fixup protocol 2000 skinny
  fixup protocol smtp 25
  fixup protocol sqlnet 1521
  fixup protocol tftp 69
  !
  inside_access_in ip access list allow a whole
  Note outside_access_in list of outdoor access
  access-list outside_access_in allow icmp a whole
  inside_outbound_nat0_acl ip access list allow any 192.168.1.200 255.255.255.248
  pager lines 24
  the history of logging alerts
  ICMP allow all outside
  Outside 1500 MTU
  Within 1500 MTU
  IP address outside of *. *. *. * 255.255.255.248
  IP address inside 192.168.1.1 255.255.255.0
  alarm action IP verification of information
  alarm action attack IP audit
  IP pool local remote_users 192.168.1.200 - 192.168.1.205
  !
  PDM logging 100 information
  history of PDM activate
  ARP timeout 14400
  Global 1 interface (outside)
  NAT (inside) 0-list of access inside_outbound_nat0_acl
  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0
  Access-group outside_access_in in interface outside
  inside_access_in access to the interface inside group
  Route outside 0.0.0.0 0.0.0.0 *. *. *. *
  Timeout xlate 0:05:00
  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225
  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00
  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00
  Timeout, uauth 0:05:00 absolute
  GANYMEDE + Protocol Ganymede + AAA-server
  AAA-server GANYMEDE + 3 max-failed-attempts
  AAA-server GANYMEDE + deadtime 10
  RADIUS Protocol RADIUS AAA server
  AAA-server RADIUS 3 max-failed-attempts
  AAA-RADIUS deadtime 10 Server
  AAA-server local LOCAL Protocol
  Enable http server
  enable floodguard
  Sysopt connection permit-pptp
  Telnet timeout 5
  SSH timeout 5
  Console timeout 0
  VPDN PPTP-VPDN-group accept dialin pptp
  VPDN group PPTP-VPDN-GROUP ppp mschap authentication
  VPDN group PPTP-VPDN-GROUP ppp encryption mppe auto
  VPDN group configuration client PPTP-VPDN-GROUP address local remote_users
  VPDN group VPDN GROUP-PPTP client configuration dns 200.57.2.108 200.57.7.61
  VPDN group VPDN GROUP-PPTP pptp echo 60
  VPDN group VPDN GROUP-PPTP client for local authentication
  VPDN username * password *.
  VPDN allow outside
  VPDN allow inside
  dhcpd address 192.168.1.100 - 192.168.1.199 inside
  dhcpd dns 200.57.2.108 200.57.7.61
  dhcpd lease 3600
  dhcpd ping_timeout 750
  dhcpd outside auto_config
  dhcpd allow inside

  The PIX cannot re - route traffic to the Internet because it's a feature supported on version 7.x and higher. You cannot execute code on PIX501 7.x.

  You can send all traffic through the tunnel (for the PIX) and have the PIX route this traffic to a router internal (on the head), then rewritten the PIX to the Internet.

  Federico.

• PIX501 customer VPN - cannot access inside the network with VPN Session

  What follows is based on the config on the attached link:

  http://www.Cisco.com/en/us/Partner/Tech/tk583/TK372/technologies_configuration_example09186a008009442e.shtml

  PIX Ver 6.2 (3) - VPN Client 3.3.6(A) - Windows XP Client PC

  We can establish the VPN to the PIX501 session, but we cannot access the network private behind the pix.

  Here is the config - I can't determine why it does not work, we are desperate to get there as soon as POSSIBLE!

  We have the same problem with the customer 4.0.3(c)

  Thanks in advance for any help!

  =======================================

  AKCPIX00 # sh run

  : Saved

  :

  6.2 (3) version PIX

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  hostname AKCPIX00

  domain.com domain name

  fixup protocol ftp 21

  fixup protocol http 80

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol sip 5060

  fixup protocol 2000 skinny

  fixup protocol sip udp 5060

  names of

  access-list 101 permit ip 192.168.1.0 255.255.255.0 10.0.0.0 255.255.255.0

  pager lines 24

  interface ethernet0 10baset

  interface ethernet1 10full

  Outside 1500 MTU

  Within 1500 MTU

  external IP address #. #. #. # 255.255.240.0

  IP address inside 192.168.1.5 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool akcpool 10.0.0.1 - 10.0.0.10

  history of PDM activate

  ARP timeout 14400

  Global 1 interface (outside)

  (Inside) NAT 0-list of access 101

  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

  Route outside 0.0.0.0 0.0.0.0 #. #. #. # 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0: 10:00 udp 0:02:00 CPP 0: h323 from 10:00 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  the ssh LOCAL console AAA authentication

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  No sysopt route dnat

  Crypto ipsec transform-set esp - esp-md5-hmac RIGHT

  Crypto-map dynamic dynmap 10 transform-set RIGHT

  map mymap 10-isakmp ipsec crypto dynamic dynmap

  mymap outside crypto map interface

  ISAKMP allows outside

  part of pre authentication ISAKMP policy 10

  encryption of ISAKMP policy 10

  ISAKMP policy 10 md5 hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup address akcpool pool akcgroup

  vpngroup dns 192.168.1.10 Server akcgroup

  vpngroup akcgroup by default-domain domain.com

  vpngroup split tunnel 101 akcgroup

  vpngroup idle 1800 akcgroup-time

  vpngroup password akcgroup *.

  vpngroup idle 1800 akc-time

  Telnet timeout 5

  SSH #. #. #. # 255.255.255.255 outside

  SSH timeout 15

  dhcpd address 192.168.1.100 - 192.168.1.130 inside

  dhcpd dns 192.168.1.10

  dhcpd lease 3600

  dhcpd ping_timeout 750

  dhcpd allow inside

  Terminal width 80

  Cryptochecksum:XXXXX

  : end

  AKCPIX00 #.

  Config looks good - just as domestic mine to my local network. The only thing I can think is that you may have entered commands in the wrong order - which means, you could have isakmp or encryption before the config map was complete. Write memory, then reloading the pix is a way to reset everything. If you do not want downtime:

  mymap outside crypto map interface

  ISAKMP allows outside

  Enter these two commands should be enough to reset the ipsec and isakmp.

• With the help of a PIX501 to secure and share an internet connection by cable

  Hi all

  I bought a PIX501 to secure my home cable modem connection and share it around my house. The PIX will act as a DHCP client (my ISP uses dynamic IP addressing) and use nat and DHCP break with my small number of inside customers.

  The default setting (set using the set up of PIX) seems ok - but I did a little "do-it-yourself" after some negative PIX customers I've read here in the United Kingdom.

  Specifically, I: -.

  -A refused requests incoming icmp (to make the "invisible" PIX to the outside world)

  -Created an access list to allow answers to my outgoing ping (something every geek network must be able to do)

  -The value "string fragment 1 outside" to drop incoming fragmented packets

  -Limit the number of connections to 200 and embroyonic at 50

  -Activated floodguard (although I don't think this should be necessary on such a lightly loaded network)

  -Compatible console logging so I have at least a bit of history of all attacks

  -Reduced some of the delays of the connection of their default values

  As I have a relatively new to this kind of thing anyone have specific advice or tips for a pix used this way?

  Thanks in advance,

  Andrew.

  When you work with ICMP, remember that [icmp] command to assign ICMP messages for the pix as the host, while the [access-list] command is used to assign ICMP messages that pass through the Pix.

  If you are using IPSec tunnels through the Pix, you can consider letting in string fragment of 2 sizes. IPSec creates broad enough to cause a lot of packets to be fragmented. Path MTU discovery would prevent, but many networks prevent incoming requests that allow the discovery to work. For this same reason, you can also consider allowing the Pix to get unreachable inside your host name if you the Pix end VPN tunnels. [icmp outside any unreachable towing]

  Floodguard is enabled by default and does not need to be enabled. It should not be necessary on a little loaded network, but it would be necessary at the time of a DoS attack if you are Pix does authentication "uauth" of traffic entering or leaving the network.

  If you are interested, the Pix can authenticate users inside before allowing the traffic leaving using RADIUS. This is useful in situations like a web server inside is attacked from outside. By the application of authentication for other traffic to leave for offending guests options are very limited. A timeout is used to trigger authentication again after some time. The [floodguard] is used to protect this feature "uauth' of the Pix.

  The Pix has signatures VERY BASIC integrated IDS that you can activate by using the set of commands [assessment of intellectual property].

  Enable SSH for authentication and encryption by generating an RSA key and saving it to Flash. [AC product key 1024 rsa] and [ca save all] disable telnet by removing all orders [telnet] and replace them with [ssh]. [http] should also be limited as much as possible for the administration.

• Client VPN PIX a weird question

  Hello

  I have a pix501 that several clients are VPNing in. The problem is that when they open their clients (ver. 4.602.0011), there is a default name in the user name text field. Each time, they try VPN in they must remove the name and put their own name in. I tried this on an asa and I can't reproduce. What Miss me?

  Thanks in advance!

  Hello

  The issue could be with the file .pcf for connection of PIX including the 'User name' populated field. Go to the installation directory of the client VPN on your PC.

  Then go to the folder "Profiles" and select the corresponding to the PIX .pcf file. Once you open that, you will find the 'User name' populated field. Delete the value where theusername and then try to connect.

  Let me know if it helps!

  Kind regards

  Assia

• Airport Express in client mode to serve Airport Extreme

  Hi guys,.

  I am struggling with Setup in our business that is pretty special. Our cash register, the Bank Terminal and the control system are all serviced by an Airport Extreme that was configured with care by a dedicated company. The extreme is powered via an Ethernet based modem. The basic modem is a box any of the internet service provider in our country that has four ethernet ports and a basic WIFI network that we open for customers. As the basic modem is too far from the extreme, a powerline sitecom was initially used to carry the signal to the modem from basic to the extreme.

  But the powerline connection was poor, so they advised me to replace the powerline by an Airport Express in client mode, which converts the client base modem wifi signal ethernet to the WAN port on the extreme. I installed the Express exactly as described by Apple (AirPort Express: how to join an existing client mode - Apple Support Wi - Fi network) and the entire installation ran smooth for about an hour. At a time of seemingly random, all of a sudden the extreme complains that the internet connection is lost. In airport utility, the extreme flashes green, but the internet icon is orange and the notification indicates that the connection is lost. However, the Express flashes green and is always connected to the WIFI which worked again properly, I confirmed. Restart the extreme and Express to solve the problem, but only temporarily. After some time, the extreme complained again that the internet is lost.

  Can someone explain what could cause this problem and how to solve? Thanks in advance.

  From your description, I guess that the WiFi connection between the base modem and the AirPort Express is where you need to solve problems more far. Looks like that the modem is not a simple modem, but a combination modem and the wireless router, also known as the name of a gateway device.

  Nevertheless, the best solution would be to use an Ethernet cable dedicated between the "modem" and the AirPort Extreme. Bypassing the Express all together. The next would be Powerline adapters. I'm a little surprised that those you used works well for you. Unfortunately, the scenario of 'worse' bandwidth performance is what you're doing now is to use the AirPort Express as an Ethernet bridge Wireless Terminal

  However, if you have no other choice in the matter, where you then place the Express can make a difference. You want to Express to be in a db 25 + range of report Signal to noise (SNR) of the modem. This will allow the Express maintain a connection compatible with this modem wireless network. To find out how to measure SNR, discover the next Tip of an airport users for details. Please post back your results.

• Airport Extreme is adjustable upward in client mode?

  I've set up the Express in client mode before, but I'll have set up extreme. During setting up he sees that I am on an existing network, but he doesn't know that and wonder if I would create a new. When I try to connect to an existing network, it indicates that an unexpected error has occurred. I also tried to set up a new network and then in the utility existing Airport to connect to the network. He takes the password and restarts and then never reappears in Airport utility, after I switch back to the existing network.

  AirPort Extreme is adjustable upward in client mode?

  No, do not use any version 6.x of AirPort Utility.

  Maybe, if you have an old 'flat or square' in the form of AirPort Extreme and you can use an older version 5.x of AirPort Utility to maybe put in place.

  But even if you could do that, the extreme doesn't really matter in client mode. The Ethernet ports are not enabled, and the extreme would not "extend" or "repetition" of the network. The only thing that would work would be the USB port, which runs at half the speed of a USB 2.0 standard.

• I just using Thunderbird as my email client and I cannot log into my email

  I just started using mozilla thunderbird as my email client and I was able to sign into my gmail account, but when I tried to connect to my school email I got an error that says "Thunderbird cannot find the value of the email from your account. And now do not know what to do.

  Thank you very much, it worked.

• If you use firefox for linux, I'm unable to open the game client for a called flash browser game darkorbit.

  I'm using Linux Mint 17.2 xfce.
  The Firefox I use is 42.0 Mozilla Firefox for Linux Mint Mint - 1.0.
  Shockwave Flash is 11.2r202.
  The browser Flash game is DarkOrbit ( www.darkorbit.com ).
  The game was working fine until about 2 months ago.

  I log in the game (as before) and get on the last page without any problem.
  When I click on 'Start' to go to the game client, the screen is black. The browser tab written game client will blink twice.
  Please note that everything works fine when I use the chrome Web browser.
  DarkOrbit works very well with Firefox on Windows.

  Is there a way to use the pepper Flash used in Chrome/chrome using the freshplayerplugin wrapper.

  Your Linux distro may have related packages for it.

  Alternatively, you can use Chrome or chrome for that one site and use Firefox for everything else.

• How can I migrate the Juno client files to Thunderbird?

  Years, I have used Juno client applications, dating back perhaps to their debut.

  Of course, they went from "shapefiles" strictly ASCII in this boring BDBish format.

  I have juno5bdb, but don't know what output format they use is compatible with the current "Bird and could not find an import feature in ' bird to complete the process."

  Juno is not a facility to freely transfer things between the client and webmail, so the recent solution you have for someone who wants to migrate its former webmail messages does not apply to me.

  I hesitate to use Thunderbird, until I can look at my Juno-client messages in it, but I'm afraid I'll have to pass each and every message stored, that would take time to helluvalong and where there is no way for me to go back.

  Thunderbird uses the mbox mail storage format.
  You can use this module to import mbox files.
  https://addons.Mozilla.org/en-us/Thunderbird/addon/ImportExportTools/

• Can I use Thunderbird as my main e-mail client? I currently use Fastmail and want to let him down. If I can, how do I configure it?

  I want to drop Fastmail as my e-mail client and would like to, if possible, just use Thunderbird. Is it possible and if yes, how can I configure Thunderbird for this?

  Thank you

  Harvey

  Looks like they are an e-mail provider FastMail. Suppliers to deliver and operate e-mail accounts.
  Thunderbird is a software email client. Client software runs on your computer to help you manage your e-mail.
  They are not interchangeable.
  You can use Thunderbird to manage most of the e-mail accounts that you get from a vendor. Without a provider you have email.