I thought the line in /etc/init.d/LaBrea that reads
"ifconfig eth0 promisc"
should have been changed to 
"ifconfig eth0 -promisc"
to disable promisc mode takes care of that?  Or do I have to still load
ifconfig.lrp and change the init script for ifconfig to not put eth0
into promisc mode?

Working so far, however after my ramdisk filled up in a matter of hours
so I added this to my ipfilter.conf,
#Deny and don't log Code Red stuff on port 80
$IPCH -I input 3 -j DENY -p tcp -s 0/0 -d $EXTERN_IP/32 80 -i $EXTERN_IF
and also took the -v option out of /etc/init.d/LaBrea to stop verbose
logging.

After backing up LaBrea (full), /etc & modules (partial) and then
rebooting, I lost some of the entries I made in /etc/init.d/LaBrea
and dhclient-exit-hooks.  I guess I have to do a full backup on /etc

I have some other questions but will keep those at bay for now and post
them in another message later depending on what final configuration
I will run with.

On Sat, 23 Feb 2002 14:59:09 -0600
"Charles Steinkuehler" <[EMAIL PROTECTED]> wrote:

> > One last question, when I ran svi LaBrea start I received the
following
> > msg;
> >
> > Starting LaBrea Tarpitifconfig: not found
> >
> > Is it correct to assume that because this is the first time LaBrea has
> > run, it has no Tarpitifconfig yet to be found?
> 
> Actually, that's two messages:
> Starting LaBrea Tarpit
> 
> followed by:
> ifconfig not found
> 
> The ifconfig binary is being called by the default LaBrea init script to
put
> the interface in promiscuous mode, which LaBrea tries to do itself, but
> doesn't seem to succeed at for some reason (in the LEAF environment). 
You
> actually *DON'T* want the interface to be in promisc mode, so you should
> load the ifconfig.lrp, and change the init script to take the interface
> *OUT* of promiscuous mode.
> 
> Charles Steinkuehler
> http://lrp.steinkuehler.net
> http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)
> 

_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to