TCP and UDP
ports from 1024 to 65535.
Perhaps this statement helps finding the problem.
I don't know if this helps and I can't say more about the EyeBall problem
because I know too less about how p2p tools like kazaa (and EyeBall) etc.
works.
so long
--
Sandro Minola | LEAF
ps, there is a limit of the Kernel or the NIC driver (if all interfaces
are the same type of NIC).
I'm using Shorewall with 21 ethernet interfaces and it works well. (eth0 to
eth20)
--
Sandro Minola
LEAF Developer (http://leaf.sourceforge.net)
--
ot;-router, you
may read:
http://www.mail-archive.com/leaf-user@lists.sourceforge.net/msg12142.html
Thank you for your answers! Now, (I hope), everything is clear. Perhaps,
some more questions will come up, but I think everything should be clear.
so long
--
Sandro Minola | LEAF Developer (
t I don't
want to control traffic from the servers to the clients (or vice-versa). I
want to control traffic coming from the branch offices to the servers and
clients. Especially, I don't want that hosts on remote networks can access
the clients on the LAN.
--
Sandro Minola |
option when there is only one
IP assigned to an interface?
If you need more information, please let me know
Thanks for your answer.
so long
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTE
nough.
I'm running MRTG on a seperate Linux server, not on the firewall itself.
MRTG is perl, so I only had to install perl on my server to get MRTG
running.
> 5. Has anyone tried running perl on a LEAF box?
No, I don't know if this is a good idea...
Hope this helps
--
Sandro
|
|~100 clients|
--
As you see, there are about 100 clients which are using the router only for
internet access and about 100 which are using the router to access our
servers AND the internet.
What do you think?
g enough anyway? Google says that I may increase
this value according to the amount of memory installed in the router. The
router got 512MB RAM...
Any ideas?
Thank you for your answer
So long
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[
> Saw the following in my syslog
>
> Jan 3 15:17:12 ardentpursuit portsentry[1120]: attackalert: External
> command run for host: 218.156.227.172 using command: "/root/add2chain
> 218.156.227.172 12345"
>
> Did that command actually run, or did portsentry prevent it from running?
No, you weren't
w it works with LEAF/Linux. (There are Linux
drivers with sources)
Thank you
so long
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
My PGP
from the Compaq support site.
I'm using it with the integrated gigabit module in the new ML370G3.
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminol
inrease MTU to 1500
and we first thought that THIS is the error, but after searching the net we
found out that this message is normal in connection with ADSL and isn't a
real "error".
Information about the ISP:
Provider: Solnet
Subscription: ADSL Home
Notes: Swiss ADSL
whole config and story about this mega-router, based on
Bering RC4 and a Compaq Proliant ML370G3, when I'm finished. Now, the NIC's
are working...
so long
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:sandro@;minola.ch | mailto:sminola@;swissonline.c
fig.h: MAX_NIC=16
I compiled this driver (again, just for testing, already expecting that it
won't work properly) and now, it loads all my 20 NIC's.
Would it be possible to compile both again? (for rc4)
Thanks
Have a nice evening
--
Sandro Minola | LEAF Developer (http:/
> I'm curious about where you are going to get the weblet with lrpstat for
> bering. Are you going to make this package by hand, or is it already
> out there? I would be interested in using it...
I'm going to make it by hand. I'll send you a copy when I'
stions, questions?
Thank you in advance
--
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
My PGP key is
el! Also the modules (sch_cbq.o, sch_sfq.o and cls_u32.o)
are from the dachstein-normal tree.
http://lrp.steinkuehler.net/files/kernels/2.2.19-3-normal/linux-2.2.19-3-LEA
F-normal.zImage.upx
If you have any questions, please ask to the list and use a new subject.
---
Sandro Minola | LE
7" gives me eepro100
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
My PGP key is at: http://www.minola.ch
files/modules/eepro-013.o
Please rename the file to eepro.o before using it. "-013" stands for version
0.13 while the normal Dachstein contains version 0.12b.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTEC
ould be null'ed. (not the block log, but the block file)
The interval can be set as a parameter in network.conf. I know that for
example Watchguard is flushing all IP's blocked by the portscanner detector
every 30min by default.
Good idea?
---
Sandro Minola | LEAF Developer
help and version files in my package.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
My PGP key is at: http://
ring it too:
http://c0wz.steinkuehler.net/files/kwarchive/
Use smb-2b.lrp. After using this package, cross-subnet-browsing worked
(please be patient, it's buggy, unreliable and slow).
It's also useful if you just want to access your router through Windows
network instead of FTP or if you ha
est wishes
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
ell, I'm not sure if my script runs well with PPP (dial-up) connections
becaus of the different MTU values.
Please tell me more about your setup and what exactly goes wrong, and in
which direction (up- or download)?
I'm sure we can fix your problems.
BTW: I didn't notice ANY prob
end a value between 85 and 90.
If you have any problems or questions, please let me know. You'll be my
first BETA-tester...
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.
d
Fireboxes run on a highly modified kernel 2.0.38)
I don't know in which chain the organize their DMZ stuff.
She told me, that she'll explain the whole DMZ stuff more exactly tomorrow.
Let's see if she knows what she's talking about... ;)
Other opinions than Charles'?
--
hat, referring to my trainer, Watchguard don't use a standard
2.0 kernel at all. They rewrote the whole TCP/IP stack and the firewalling
part. I don't know how far this is true. I'm sure they've still some parts
of the original 2.0 code in their stack.
I'll ask her for mor
logy.
Please note that, referring to my trainer, Watchguard don't use a
standard 2.0 kernel at all. They rewrote the whole TCP/IP stack
and the firewalling part. I don't know how far this is true. I'm
sure they've still some parts of the original 2.0 code in t
staticNAT (passiveFTP, PPTP?)
Discussion is opened
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
__
the newest version does not
support No-IP.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
>
> --
> Mike Noyes <[EMAIL PROTECTED]>
>
com DOT au]
Etienne Charlier [ECharlier AT wanadoo DOT be]
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
> -Original Message-
> From:
n with the
following apps: Napster, Half-Life (Counterstrike), ICQ
If you want to learn more about the -y flag, please read the section
"Specifying TCP SYN Packets Only" on
http://www.linuxdoc.org/HOWTO/IPCHAINS-HOWTO-4.html
---
Sandro Minola | LEAF Developer (http://leaf.sou
on the webpage (http://newname.dyndns.org";>My Server at home)
4. add a entry to your hosts file for this DNS name (in the system32
directory)
This solution is much cooler because you don't have to care about the IP
anymore. It's done automatically.
---
Sandro Minola
ternal clients.
Linux: /etc/hosts
Windows NT: C:\WINNT\SYSTEM32\DRIVERS\ETC
Windows 9x: C:\windows\system32\ (I'm not sure about Win9x, but I think the
hosts file is in system32, use Filesearch)
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL
n
how much the Coyote kernel differs from the dachstein kernel.
I'd suggest to ask one of the Coyote guys to compile CIPE for the Coyote
kernel. I'm sorry, I can't do that because I don't have a Coyote kernel tree
on my devel system.
Please notify me, when you got it
don't hesitate to
ask.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Hi Christopher
I tried the ShieldsUp Portscan.
It shows my Firewall's TCP Port 5000 as "closed" too. It seems that this is
a problem of the ShieldsUp Scan Engine/Homepage. I definitely DENY TCP Port
5000.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net
p_id=13751 for
instructions) and what exactly you're doing when you "added straight rules
which allowing ip proto=94 to pass/forward through
LRP".
Thank you
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
h
nfig *should* work. No, I'd say it the other way arround: His config
*will* work if his webserver is properly configured.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourcefor
Hi Reginald, hi all
There is a dhcrelay.lrp package on Koon Wong's package archive. But Koon
Wong's archive seems to be offline. But Rick is mirroring it:
http://c0wz.steinkuehler.net/files/kwarchive/dhcrelay.lrp
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.n
oblems.
As Lee said, name-based vhosting does not directly work via DNS, it reads
the URL from the browser.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
u
don't get a faster cable link in Switzerland for reasonable prices :( ).
The slowest is a 486DX2/33Mhz with 16MB RAM connected to a bridging cable
modem. I can't measure a speed decrease.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTEC
> Minimum set of modules for ppp seems to be:
>
> slhc
> ppp
Yes, i can validate that.
I think Jim is asking because of his PPTP setup. I'm running PPTPD with only
these two modules and it's working great.
___
Leaf-user mailing list
[EMAIL PROTECTED]
h
t; and a "advanced setup". The easy setup is very very
easy. it's a wizard and you just have to tell the wizard if you're using
DHCP, PPPoE or static IP and you're done.
The advanced setup allows you to define ipfilter rules, NAT, syslog and
so on.
---
Sandro Mino
".
Homepage:
http://www.lightning.ch
Prices:
The company I work for is a reseller. We get the Ethernet II for about
US$375 (CHF 600) and the Ethernet III for about US$940 (CHF 1500).
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAI
Hi Jim
Sorry for the long delay.
I'm confused now. Do you need a PPTP client or server?
Do you want to be a PPTP RAS server where clients "dial"-in or do you want
to build a static tunnel to another firewall?
There is a difference.
---
Sandro Minola | LEAF
uestions. My old
one (which I'm sure some of you know) was ugly and outdated.
Have a nice week
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
ame subnet.
$IPCH -I forward -j ACCEPT -b -s [pptp client IP] -d [your subnet]
in /etc/ipchains.forward
If you don't find the things I mentioned (sorry, I don't have the links
ready, I'm not at my computer), please let me know.
---
Sandro Minola | LEAF Developer (http://lea
ernal network there).
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
worldcontrol:~ # rm -rf /bin/laden
> -Original Message-
> F
.sourceforge.net/devel/sminola/files/devel/cipe-146-IDE/
If you have more questions, feel free to ask, but please CC your mail to the
list. I'll CC this too.
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://w
start the
SSH daemon STAND-ALONE, it's VERY fast, even on a 486.
Perhaps you uncommented the ssh entry in /etc/inetd.conf and SSH is now
running via inetd?
If yes, the only thing you have to do is to comment it out again.
Hope this helps
---
Sandro Minola | LEAF Developer (http://lea
value itself?
One must be wrong. I entered 192.168.0.254 instead of 0.0.0.0 (my subnet is
192.168.0. not 192.168.1.)
Have a nice sunday
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http:/
k. or am i wrong?
thank you for your example. do you have experiences with turning QoS on on
the internal interface to queue incoming traffic?
Have a nice weekend
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
ht
o "$HOSTNAME > /etc/hostname
I'm NOT using Dachstein RC5 but it can probably be the same kind of problem.
I hope this help, but I'm pretty sure that it can't be a general problem
because Charles would noticed it.
Have a nice weekend
---
Sandro Minola
nice and useful but
there are still a lot of open questions. can anyone post a working example
and explain what it does? i mean, how the posted parameters affect and what
experiences you made with QoS. (the QoS part of network.conf would be nice)
thank you
---
Sandro Minola | LEAF Deve
> That could be the problem I guess I am running a 2.16 kernel from
> harddisk well basicly a Disk On Chip that doesn't need an extra
> driver and is
> recognized as /dev/hda
It seems that you're running an IDE enabled Kernel. We had the same problem
after I realeased a CIPE LRP package for 2.2.1
e cipe for you.
Have a nice weekend
---
Sandro Minola | LEAF Developer (http://leaf.sourceforge.net)
mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED]
http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola
-
worldcontrol:~ # rm
ECTED]]On Behalf Of Victor
McAllister
Sent: Sunday, October 28, 2001 4:28 PM
To: Sandro Minola
Cc: Leaf-User
Subject: Re: [Leaf-user] Extended Scripts V1.1 - Hostname not set!
Sandro Minola wrote:
> Hi Charles
> Hi all
>
> I've solved the hostname problem by myself. It seems tha
;)
greetings
Sandro
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Sandro Minola
Sent: Sunday, October 28, 2001 3:44 PM
To: Leaf-User
Subject: [Leaf-user] Extended Scripts V1.1 - Hostname not set!
Hi Charles
Hi all
I'm using Extended Scripts V1.1 (Pr
e I want to finish my new
DMZ setup today.
Thanks
Sandro Minola
___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
#x27;t get
any useful information from our ISP)
I now think that we should trash this NIC and install a new one.
What do you think? other ideas?
greetings
Sandro Minola
> -Ursprungliche Nachricht-----
> Von: Johdomi [mailto:[EMAIL PROTECTED]]
> Gesendet: Freitag, 28. September 200
2.19 Kernel
SMC Ultra ISA NIC (external, the strange one)
DEC EtherWorks (internal, don't makes any problems)
DOCSIS CableModem connection 256Kbit
there are no kernel messages about the NIC (from the driver or so).
any ideas?
is this nic damaged? should i trash it?
gre
.minola.ch/files/devel/cipe-146-IDE
I forgot to compress the executable "ciped-cb" with UPX. Please let me know
if it works with the IDE kernel, I'll compress it then.
greetings
Sandro Minola
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
, if you need it or not. But don't expect it before saturday...
greetings
Sandro Minola
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of John Hamill
Sent: Tuesday, September 18, 2001 1:36 AM
To: [EMAIL PROTECTED]
Subject: RE: [Leaf-user] Problem with
better if you ask because you have more expierence
with it.
(I'm just the compiler, not the user.. ;) )
Sandro Minola
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of John Hamill
Sent: Monday, September 17, 2001 1:37 AM
To: [EMAIL PROTECTED]
Subject: RE:
it won't run.
It seems that it runs with weblet...
I'll try out my script with weblet.
Have a nice weekend
Sandro Minola
-Original Message-
From: Eric Wolzak [mailto:[EMAIL PROTECTED]]
Sent: Saturday, September 15, 2001 10:00 PM
To: Sandro Minola; [EMAIL PROTECTED]
Subject:
(.htaccess !?)
greetings
Sandro Minola
(Script at the bottom)
Example Script:
#!/bin/sh
STRINGS=`echo $QUERY_STRING|cut -d'&' -f*`
for STRING in $STRINGS ; do
echo $STRING >> /var/tmp/wwwget.tmp
done ; unset STRING ; unset STRINGS
. /var/tmp/wwwget.tmp
cat <<
Hi Etienne
I didn't saw any insmod commands in your scripts. Do you load the kernel
module "cipcb.o" somewhere?
if not loaded, tunnel won't run.
greetings
Sandro Minola
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Etienne
Char
ez-ip(nf!)"
but i typed "ez-ipupd" into syslinux.cfg.
then i tried to put another package at the end:
" - ftpd - tcpdump - bwidt(nf!)"
but i typed "bwidth22"
the ramdisk is 12MB...
very strange!
do someo
hi all
my next question to seawall...
if I want to use the IPIP tunneling function of seawall, I guess I should
have to copy the ipip.o module on my disk and add it to /etc/modules? there
is also a gre.o module, when do I need which of them?
Thanks
greetings
Sandro Minola
which aren't set in
this variable.
Now my question:
If I DON'T use seawall, will the clients be able to connect to any PPTP
server? and with seawall only to these which are listed in the config file?
Thank you a lot
Greetings
Sandro Minola
_
71 matches
Mail list logo
