Re: which radius server?

2001-07-10 Thread Charl Matthee

On Tue, Jul 10, 2001 at 08:26:08PM -0600, Vector wrote:

> Just wondering if there are any good open source and free radius servers out 
>there to use that work well on debian and what others are using to do radius with 
>their ISP's.  Thanks,

I can recommend Radiator by Open Systems Consultants
[http://www.open.com.au/radiator/]. It is not a free piece of software but
is well worth spending the $1,000 (AUD).

It is very configurable and extensible 
[http://www.open.com.au/radiator/technical.html] (it is written in perl 
and can be extended using perl modules). You obviously also get the source 
when you buy it.


Ciao

Charl
__

The loon
Left me 
chuckling
In the mist
__

  [ Charl Matthee ] [ +27-11-721-3800 ]
  [ Reality Manufacturing ] [ +27-11-405-6508 ]
__


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: which radius server?

2001-07-10 Thread Craig Sanders
On Tue, Jul 10, 2001 at 08:26:08PM -0600, Vector wrote:
> Just wondering if there are any good open source and free radius
> servers out there to use that work well on debian and what others
> are using to do radius with their ISP's.  Thanks,

cistron-radiusd is pretty good.

it's certainly better than any of the other debian radiusd packages.

craig

-- 
craig sanders <[EMAIL PROTECTED]>

Fabricati Diem, PVNC.
 -- motto of the Ankh-Morpork City Watch




which radius server?

2001-07-10 Thread Vector



    Just wondering if there are any 
good open source and free radius servers out there to use that work well on 
debian and what others are using to do radius with their ISP's.  
Thanks,
 
vector
 


Re: which radius server?

2001-07-10 Thread Craig Sanders

On Tue, Jul 10, 2001 at 08:26:08PM -0600, Vector wrote:
> Just wondering if there are any good open source and free radius
> servers out there to use that work well on debian and what others
> are using to do radius with their ISP's.  Thanks,

cistron-radiusd is pretty good.

it's certainly better than any of the other debian radiusd packages.

craig

-- 
craig sanders <[EMAIL PROTECTED]>

Fabricati Diem, PVNC.
 -- motto of the Ankh-Morpork City Watch


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




which radius server?

2001-07-10 Thread Vector



    Just wondering if there are any 
good open source and free radius servers out there to use that work well on 
debian and what others are using to do radius with their ISP's.  
Thanks,
 
vector
 


Re: Multiple DSL lines + iproute + squid ...

2001-07-10 Thread James Good
[EMAIL PROTECTED] (Scott Kveton) wrote in message news:<[EMAIL PROTECTED]>...
> Hello all,
> 
> I'm working on a problem that seems like it should work and am looking for
> some help knocking out any obvious problems.
> 
> We currently have several DSL lines that are used for crawling websites.
> Bandwidth as it is is pretty cheap via DSL (we have 6 7Mbit lines for much
> less than an ~equivalent T-3).  Right now we use a single RedHat machine
> that has the DSL lines attached to it and we use iproute to direct the
> "networks" of traffic to each DSL line.

Hi Scott, 

So what is this crawler doing then? I noticed you hitting my site the
other day, and didn't like the look of someone downloading everysingle
one of my images. What's it all for?

Thanks,

-James.




Re: zebra and bgp4

2001-07-10 Thread Rob Woodward

Hi,

We use Zebra as a route collector on an alpha box running debian, we
have it peering with a cisco 7206 and one of our Juniper M40's, we get a
full routing table (104 thousand routes at them moment) on it in a couple
of minutes and works with no problem. It's not used to route or pass any
traffic though, purely a route collector.

I'd say it would perform better than a 3600 as it seems accept routes as
quick as any of our 72/7500 cisco routers, although again it doesn't
carry any traffic.

Cheers,

Rob




On 10/07/2001 23:17:54 Fabrice Lorrain (home) wrote:

> Hi all,
> 
> How well does zebra get interfaced with cisco routers (using bgp4) ?
> 
> Any of you've done some bench and/or comparison in performance for
> a debian box + zebra + 2 fast ethernet NIC compared to an equivalent
> config with a cisco (3600 + 2 fast ethernet NIC for ex) ?
> 
> Thank's for the answers.
> 
>   Fab
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

--
Rob Woodward
http://www.upnorth.uk.com




zebra and bgp4

2001-07-10 Thread Fabrice Lorrain \(home\)
Hi all,

How well does zebra get interfaced with cisco routers (using bgp4) ?

Any of you've done some bench and/or comparison in performance for
a debian box + zebra + 2 fast ethernet NIC compared to an equivalent
config with a cisco (3600 + 2 fast ethernet NIC for ex) ?

Thank's for the answers.

Fab




Re: Multiple DSL lines + iproute + squid ...

2001-07-10 Thread James Good

[EMAIL PROTECTED] (Scott Kveton) wrote in message 
news:<[EMAIL PROTECTED]>...
> Hello all,
> 
> I'm working on a problem that seems like it should work and am looking for
> some help knocking out any obvious problems.
> 
> We currently have several DSL lines that are used for crawling websites.
> Bandwidth as it is is pretty cheap via DSL (we have 6 7Mbit lines for much
> less than an ~equivalent T-3).  Right now we use a single RedHat machine
> that has the DSL lines attached to it and we use iproute to direct the
> "networks" of traffic to each DSL line.

Hi Scott, 

So what is this crawler doing then? I noticed you hitting my site the
other day, and didn't like the look of someone downloading everysingle
one of my images. What's it all for?

Thanks,

-James.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: zebra and bgp4

2001-07-10 Thread Rob Woodward


Hi,

We use Zebra as a route collector on an alpha box running debian, we
have it peering with a cisco 7206 and one of our Juniper M40's, we get a
full routing table (104 thousand routes at them moment) on it in a couple
of minutes and works with no problem. It's not used to route or pass any
traffic though, purely a route collector.

I'd say it would perform better than a 3600 as it seems accept routes as
quick as any of our 72/7500 cisco routers, although again it doesn't
carry any traffic.

Cheers,

Rob




On 10/07/2001 23:17:54 Fabrice Lorrain (home) wrote:

> Hi all,
> 
> How well does zebra get interfaced with cisco routers (using bgp4) ?
> 
> Any of you've done some bench and/or comparison in performance for
> a debian box + zebra + 2 fast ethernet NIC compared to an equivalent
> config with a cisco (3600 + 2 fast ethernet NIC for ex) ?
> 
> Thank's for the answers.
> 
>   Fab
> 
> 
> --  
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 

--
Rob Woodward
http://www.upnorth.uk.com


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




zebra and bgp4

2001-07-10 Thread Fabrice Lorrain (home)

Hi all,

How well does zebra get interfaced with cisco routers (using bgp4) ?

Any of you've done some bench and/or comparison in performance for
a debian box + zebra + 2 fast ethernet NIC compared to an equivalent
config with a cisco (3600 + 2 fast ethernet NIC for ex) ?

Thank's for the answers.

Fab


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Theodore Knab
If you want an easy way to setup IPsec, contact a network security consultant 
that understands it. 
I think they are rare.

One organization that I know does understand IPsec is protectix. They offer a 
turn-key solution which is designed around open source. The advantage of using 
protectix is they also develop IPsec devices.

http://www.protectix.com/

Their device is called the Prowall.

If this is not feasible or you want to do it yourself, start reading.

Read all the documents on the IPsec listserve.
http://lists.freeswan.org

Design:
http://lists.freeswan.org/pipermail/design/

Using:
http://lists.freeswan.org/pipermail/users/

Briefs:
http://lists.freeswan.org/pipermail/briefs/

Here is an intro to VPN
http://www.synthcom.com/~val/cs510/termpaper.htm

-Ted Knab
Senior Otaku
Breezy Network Solutions

On Tue, Jul 10, 2001 at 11:25:24AM -0500, Jeremy Gaddis wrote:
> Using an IPSec VPN is probably the "best" way to do it.
> FreeS/WAN (http://www.freeswan.org) is a Linux implementation
> of IPSec, but it's not the easiest thing in the world to
> configure.
> 
> j.
> 
> --
> Jeremy L. Gaddis <[EMAIL PROTECTED]>
> 
> -Original Message-
> From: Stephane Bortzmeyer [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, July 10, 2001 10:36 AM
> To: debian-isp@lists.debian.org
> Subject: Recommended way to setup an encrypted tunnel (a VPN)
> 
> 
> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:
> 
> - I tried pipsecd + userlink. The userlink module seems severely
>   broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
>   wait' forever!
> 
> - ssh + ppp seems interesting because I know both of them. But is
>   there a trick when you combine them?
>   http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
>   maintained.
> 
> - GRE module in the kernel? (I use 2.4 on woody) Anyone has something
>   to say about it?
> 




Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Karl E. Jorgensen
On Tue, Jul 10, 2001 at 05:36:08PM +0200, Stephane Bortzmeyer wrote:
> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:
> 
> - I tried pipsecd + userlink. The userlink module seems severely
>   broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
>   wait' forever!
> 
> - ssh + ppp seems interesting because I know both of them. But is
>   there a trick when you combine them?
>   http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
>   maintained.
> 
> - GRE module in the kernel? (I use 2.4 on woody) Anyone has something
>   to say about it?
> 
tunnelv works great too. Although the docs are a bit ... short ..., it does 
the job.

-- 
Karl E. Jørgensen
[EMAIL PROTECTED]
www.karl.jorgensen.com
 Today's fortune:
Remember Darwin; building a better mousetrap merely results in smarter mice.


pgplrcNsplhdO.pgp
Description: PGP signature


RE: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Jeremy Gaddis
Using an IPSec VPN is probably the "best" way to do it.
FreeS/WAN (http://www.freeswan.org) is a Linux implementation
of IPSec, but it's not the easiest thing in the world to
configure.

j.

--
Jeremy L. Gaddis <[EMAIL PROTECTED]>

-Original Message-
From: Stephane Bortzmeyer [mailto:[EMAIL PROTECTED]
Sent: Tuesday, July 10, 2001 10:36 AM
To: debian-isp@lists.debian.org
Subject: Recommended way to setup an encrypted tunnel (a VPN)


I have to connect two networks together and the virtual link needs to
be safely encrypted (some users know SSH but some will just POP
blindly and LDAP in woody is not SSLized anyway).

I wonder what is the recommended way to setup an encrypted tunnel (to
make a VPN) between two Debian boxes:

- I tried pipsecd + userlink. The userlink module seems severely
  broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
  wait' forever!

- ssh + ppp seems interesting because I know both of them. But is
  there a trick when you combine them?
  http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
  maintained.

- GRE module in the kernel? (I use 2.4 on woody) Anyone has something
  to say about it?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]




Re: Apache load ballancing

2001-07-10 Thread Eric Jennings
I need to build a scalable webserver based on Apache. I'm not sure yet if
the application requires persistent TCP connections. If so, it will
require that after starting session all subsequent HTTP request in this
session will come to the same machine in the cluster. This requires load
ballancing in 7th layer, so LVS doesn't help much.
7th layer for sure?  I'd imagine that would only need to land in the 4th Layer.
7th layer would be custom HTTP requests to test things like an 
application servers, CGI scripts, or PHP scripts (7th layer == 
application layer).


The question is: are there any software level 7 ballancer available ? If
not, which hardware box would you recommend ?
I've not found any software suitable for the load balancing systems 
we run, which must support SSL, persistent connections (cookie, IP, 
etc.), and can handle a huge load.

That said, we use a Foundry Networks ServerIronXL for load balancing, 
and it's an incredible box.  Quite expensive new, but with all of the 
Dot-Bombs, you should be able to find one cheap on eBay or other 
auction houses.

Best Regards-
Eric Jennings
[EMAIL PROTECTED]



Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Charl Matthee
On Tue, Jul 10, 2001 at 05:36:08PM +0200, Stephane Bortzmeyer wrote:

> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:

See Linux FreeS/WAN [http://www.freeswan.org/intro.html].


Ciao

Charl
__

I'm not closed-minded, you're just wrong.
__

  [ Charl Matthee ] [ +27-11-721-3800 ]
  [ Reality Manufacturing ] [ +27-11-405-6508 ]
__




Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Stephane Bortzmeyer
I have to connect two networks together and the virtual link needs to
be safely encrypted (some users know SSH but some will just POP
blindly and LDAP in woody is not SSLized anyway).

I wonder what is the recommended way to setup an encrypted tunnel (to
make a VPN) between two Debian boxes:

- I tried pipsecd + userlink. The userlink module seems severely
  broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
  wait' forever!

- ssh + ppp seems interesting because I know both of them. But is
  there a trick when you combine them?
  http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
  maintained.

- GRE module in the kernel? (I use 2.4 on woody) Anyone has something
  to say about it?




Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Theodore Knab

If you want an easy way to setup IPsec, contact a network security consultant that 
understands it. 
I think they are rare.

One organization that I know does understand IPsec is protectix. They offer a turn-key 
solution which is designed around open source. The advantage of using protectix is 
they also develop IPsec devices.

http://www.protectix.com/

Their device is called the Prowall.

If this is not feasible or you want to do it yourself, start reading.

Read all the documents on the IPsec listserve.
http://lists.freeswan.org

Design:
http://lists.freeswan.org/pipermail/design/

Using:
http://lists.freeswan.org/pipermail/users/

Briefs:
http://lists.freeswan.org/pipermail/briefs/

Here is an intro to VPN
http://www.synthcom.com/~val/cs510/termpaper.htm

-Ted Knab
Senior Otaku
Breezy Network Solutions

On Tue, Jul 10, 2001 at 11:25:24AM -0500, Jeremy Gaddis wrote:
> Using an IPSec VPN is probably the "best" way to do it.
> FreeS/WAN (http://www.freeswan.org) is a Linux implementation
> of IPSec, but it's not the easiest thing in the world to
> configure.
> 
> j.
> 
> --
> Jeremy L. Gaddis <[EMAIL PROTECTED]>
> 
> -Original Message-
> From: Stephane Bortzmeyer [mailto:[EMAIL PROTECTED]]
> Sent: Tuesday, July 10, 2001 10:36 AM
> To: [EMAIL PROTECTED]
> Subject: Recommended way to setup an encrypted tunnel (a VPN)
> 
> 
> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:
> 
> - I tried pipsecd + userlink. The userlink module seems severely
>   broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
>   wait' forever!
> 
> - ssh + ppp seems interesting because I know both of them. But is
>   there a trick when you combine them?
>   http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
>   maintained.
> 
> - GRE module in the kernel? (I use 2.4 on woody) Anyone has something
>   to say about it?
> 


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Karl E. Jorgensen

On Tue, Jul 10, 2001 at 05:36:08PM +0200, Stephane Bortzmeyer wrote:
> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:
> 
> - I tried pipsecd + userlink. The userlink module seems severely
>   broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
>   wait' forever!
> 
> - ssh + ppp seems interesting because I know both of them. But is
>   there a trick when you combine them?
>   http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
>   maintained.
> 
> - GRE module in the kernel? (I use 2.4 on woody) Anyone has something
>   to say about it?
> 
tunnelv works great too. Although the docs are a bit ... short ..., it does 
the job.

-- 
Karl E. Jørgensen
[EMAIL PROTECTED]
www.karl.jorgensen.com
 Today's fortune:
Remember Darwin; building a better mousetrap merely results in smarter mice.

 PGP signature


Re: Apache load ballancing

2001-07-10 Thread staf wagemakers
On Tue, Jul 10, 2001 at 01:25:50PM +0200, Przemyslaw Wegrzyn wrote:
> 
> I need to build a scalable webserver based on Apache. I'm not sure yet if
> the application requires persistent TCP connections. If so, it will
> require that after starting session all subsequent HTTP request in this
> session will come to the same machine in the cluster. This requires load
> ballancing in 7th layer, so LVS doesn't help much. 

LVS supports persistent connections ( see the webpage for more information)
which works well in most cases.
 
> The question is: are there any software level 7 ballancer available ? If
> not, which hardware box would you recommend ?

If it is a java application you could use tomcat/mod_jk which supports 
loabalancing.

--
staf wagemakers 

homepage:   http://www.stafwag.f2s.com
email:  [EMAIL PROTECTED]





Re: server health-load balancers

2001-07-10 Thread staf wagemakers
On Tue, Jul 10, 2001 at 01:34:03AM -0700, avinash naik wrote:

> how does the server monitoring system infoem the load
> balancers about the health of the servers.I wanted to
> know how basically its done.
> please do reply
> bye avinash

LVS ( Linux Virtual Server ) uses ldirectord. ldirector send a request to
a url if the response doesn't contain an expected string it takes the server 
offline.

cisco localdirector check the state of the http port if it gets a server
response it assumes the server is ok. cisco ld doesn't detect 
"Server too Busy" or any other common error messages.

regards,

--
staf wagemakers

homepage:   http://www.stafwag.f2s.com
email:  [EMAIL PROTECTED]




RE: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Jeremy Gaddis

Using an IPSec VPN is probably the "best" way to do it.
FreeS/WAN (http://www.freeswan.org) is a Linux implementation
of IPSec, but it's not the easiest thing in the world to
configure.

j.

--
Jeremy L. Gaddis <[EMAIL PROTECTED]>

-Original Message-
From: Stephane Bortzmeyer [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, July 10, 2001 10:36 AM
To: [EMAIL PROTECTED]
Subject: Recommended way to setup an encrypted tunnel (a VPN)


I have to connect two networks together and the virtual link needs to
be safely encrypted (some users know SSH but some will just POP
blindly and LDAP in woody is not SSLized anyway).

I wonder what is the recommended way to setup an encrypted tunnel (to
make a VPN) between two Debian boxes:

- I tried pipsecd + userlink. The userlink module seems severely
  broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
  wait' forever!

- ssh + ppp seems interesting because I know both of them. But is
  there a trick when you combine them?
  http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
  maintained.

- GRE module in the kernel? (I use 2.4 on woody) Anyone has something
  to say about it?


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Apache load ballancing

2001-07-10 Thread Eric Jennings

>I need to build a scalable webserver based on Apache. I'm not sure yet if
>the application requires persistent TCP connections. If so, it will
>require that after starting session all subsequent HTTP request in this
>session will come to the same machine in the cluster. This requires load
>ballancing in 7th layer, so LVS doesn't help much.

7th layer for sure?  I'd imagine that would only need to land in the 4th Layer.
7th layer would be custom HTTP requests to test things like an 
application servers, CGI scripts, or PHP scripts (7th layer == 
application layer).


>The question is: are there any software level 7 ballancer available ? If
>not, which hardware box would you recommend ?

I've not found any software suitable for the load balancing systems 
we run, which must support SSL, persistent connections (cookie, IP, 
etc.), and can handle a huge load.

That said, we use a Foundry Networks ServerIronXL for load balancing, 
and it's an incredible box.  Quite expensive new, but with all of the 
Dot-Bombs, you should be able to find one cheap on eBay or other 
auction houses.


Best Regards-
Eric Jennings
[EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Apache load ballancing

2001-07-10 Thread ARAKI Yasuhiro
Hello,

> session will come to the same machine in the cluster. This requires load
> ballancing in 7th layer, so LVS doesn't help much. 

check libapache-mod-backhand.

Package: libapache-mod-backhand
Priority: optional
Section: web
Installed-Size: 152
Maintainer: James Bromberger <[EMAIL PROTECTED]>
Architecture: i386
Version: 1.2.0-1
Depends: libc6 (>= 2.2.3-1), libdb2 (>= 2:2.7.7-4), apache (>= 1.3.19-1)
Filename: 
pool/main/liba/libapache-mod-backhand/libapache-mod-backhand_1.2.0-1_i386.deb
Size: 63094
MD5sum: 8bc2c53dfb87c8c04679b3343189e34d
Description: Load balancing module for Apache web server
 mod_backhand is project that allows seamless redirection of HTTP requests
 from one web server to another. This redirection can be used to target
 machines with under-utilized resources, thus providing fine-grained,
 per-request load balancing of web requests.

--
ARAKI Yasuhiro




Re: Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Charl Matthee

On Tue, Jul 10, 2001 at 05:36:08PM +0200, Stephane Bortzmeyer wrote:

> I have to connect two networks together and the virtual link needs to
> be safely encrypted (some users know SSH but some will just POP
> blindly and LDAP in woody is not SSLized anyway).
> 
> I wonder what is the recommended way to setup an encrypted tunnel (to
> make a VPN) between two Debian boxes:

See Linux FreeS/WAN [http://www.freeswan.org/intro.html].


Ciao

Charl
__

I'm not closed-minded, you're just wrong.
__

  [ Charl Matthee ] [ +27-11-721-3800 ]
  [ Reality Manufacturing ] [ +27-11-405-6508 ]
__


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Recommended way to setup an encrypted tunnel (a VPN)

2001-07-10 Thread Stephane Bortzmeyer

I have to connect two networks together and the virtual link needs to
be safely encrypted (some users know SSH but some will just POP
blindly and LDAP in woody is not SSLized anyway).

I wonder what is the recommended way to setup an encrypted tunnel (to
make a VPN) between two Debian boxes:

- I tried pipsecd + userlink. The userlink module seems severely
  broken, at least with kernel 2.4. A simple ifconfig stays in D 'disk
  wait' forever!

- ssh + ppp seems interesting because I know both of them. But is
  there a trick when you combine them?
  http://www.linuxdoc.org/HOWTO/VPN-HOWTO.html does not seem to be
  maintained.

- GRE module in the kernel? (I use 2.4 on woody) Anyone has something
  to say about it?


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Apache load ballancing

2001-07-10 Thread staf wagemakers

On Tue, Jul 10, 2001 at 01:25:50PM +0200, Przemyslaw Wegrzyn wrote:
> 
> I need to build a scalable webserver based on Apache. I'm not sure yet if
> the application requires persistent TCP connections. If so, it will
> require that after starting session all subsequent HTTP request in this
> session will come to the same machine in the cluster. This requires load
> ballancing in 7th layer, so LVS doesn't help much. 

LVS supports persistent connections ( see the webpage for more information)
which works well in most cases.
 
> The question is: are there any software level 7 ballancer available ? If
> not, which hardware box would you recommend ?

If it is a java application you could use tomcat/mod_jk which supports 
loabalancing.

--
staf wagemakers 

homepage:   http://www.stafwag.f2s.com
email:  [EMAIL PROTECTED]



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: server health-load balancers

2001-07-10 Thread staf wagemakers

On Tue, Jul 10, 2001 at 01:34:03AM -0700, avinash naik wrote:

> how does the server monitoring system infoem the load
> balancers about the health of the servers.I wanted to
> know how basically its done.
> please do reply
> bye avinash

LVS ( Linux Virtual Server ) uses ldirectord. ldirector send a request to
a url if the response doesn't contain an expected string it takes the server 
offline.

cisco localdirector check the state of the http port if it gets a server
response it assumes the server is ok. cisco ld doesn't detect 
"Server too Busy" or any other common error messages.

regards,

--
staf wagemakers

homepage:   http://www.stafwag.f2s.com
email:  [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Apache load ballancing

2001-07-10 Thread Przemyslaw Wegrzyn

I need to build a scalable webserver based on Apache. I'm not sure yet if
the application requires persistent TCP connections. If so, it will
require that after starting session all subsequent HTTP request in this
session will come to the same machine in the cluster. This requires load
ballancing in 7th layer, so LVS doesn't help much. 

The question is: are there any software level 7 ballancer available ? If
not, which hardware box would you recommend ?

-=Czaj-nick=-





Re: Apache load ballancing

2001-07-10 Thread ARAKI Yasuhiro

Hello,

> session will come to the same machine in the cluster. This requires load
> ballancing in 7th layer, so LVS doesn't help much. 

check libapache-mod-backhand.

Package: libapache-mod-backhand
Priority: optional
Section: web
Installed-Size: 152
Maintainer: James Bromberger <[EMAIL PROTECTED]>
Architecture: i386
Version: 1.2.0-1
Depends: libc6 (>= 2.2.3-1), libdb2 (>= 2:2.7.7-4), apache (>= 1.3.19-1)
Filename: pool/main/liba/libapache-mod-backhand/libapache-mod-backhand_1.2.0-1_i386.deb
Size: 63094
MD5sum: 8bc2c53dfb87c8c04679b3343189e34d
Description: Load balancing module for Apache web server
 mod_backhand is project that allows seamless redirection of HTTP requests
 from one web server to another. This redirection can be used to target
 machines with under-utilized resources, thus providing fine-grained,
 per-request load balancing of web requests.

--
ARAKI Yasuhiro


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Apache load ballancing

2001-07-10 Thread Przemyslaw Wegrzyn


I need to build a scalable webserver based on Apache. I'm not sure yet if
the application requires persistent TCP connections. If so, it will
require that after starting session all subsequent HTTP request in this
session will come to the same machine in the cluster. This requires load
ballancing in 7th layer, so LVS doesn't help much. 

The question is: are there any software level 7 ballancer available ? If
not, which hardware box would you recommend ?

-=Czaj-nick=-



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




server health-load balancers

2001-07-10 Thread avinash naik
hi!!
 how does the server monitoring system infoem the load
balancers about the health of the servers.I wanted to
know how basically its done.
please do reply
bye avinash

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/




Re: Network Mapping Tool

2001-07-10 Thread Joerg Wendland
Hi,

On Sat, Jul 07, 2001 at 01:47:44AM -0500, Sanjeev Gupta wrote:
> I am trying to "map" the structure of an ISP's network.  A graphical tool
> that I could use to draw the diagrams, after it had done most of the work,
> would be great.
> 
> Any suggestions?  Tool should preferably run on:

Try using scotty (a package named scotty is in potato). This comes with
a tool named tkined (using TK) which can map your network by scanning it.
It makes heavy use of SNMP and brings some special modules for CISCO, Ascend
and other router manufacturers, so you could use it also for management of 
your network.

HTH, Joerg

-- 
  \ Joerg Wendland \ systems / network administrator, ITSec, Scan Plus GmbH
   \  *joergland*   \ Moerikestrasse 5, 89077 Ulm, Germany
\\ fon +49-731-92013-21, fax +49-731-6027146
 \\ PGP-key: finger [EMAIL PROTECTED]
  \ key fingerprint: 79C0 7671 AFC7 315E 657A  F318 57A3 7FBD 51CF 8417


pgpitqnUwD1jU.pgp
Description: PGP signature


Re: Exim and SMS gateways

2001-07-10 Thread Teun Vink
On Tue, 10 Jul 2001, Marcin Sochacki wrote:

> Hi all,
> 
> I have got some problems with users on my server using email-to-SMS gateways.
> They put .procmailrc like this one:
> 
> --
> SENDMAIL=/usr/sbin/sendmail
> :0c
> * [EMAIL PROTECTED]
> | $HOME/email2sms | $SENDMAIL -t
> --
> 
> When the SMS gateway of someone's operator dies, the messages are bounced back
> and processed again by procmail. The error message is sent to SMS gateway,
> which bounces it again...
> 
> So after some time I have thousands of messages in my spool. How can
> I prevent this behavior with Exim configuration options?
> 
> Marcin
> 
> 

You could write a procmail rule which filters the bounces and drop them in
a mailbox (or send them to /dev/null). Of course, you need to place this
rule _before_ the rule which sends the SMS.


Teun

-- 
Teun Vink - [EMAIL PROTECTED] - icq: 15001247 - http://teun.moonblade.net




Exim and SMS gateways

2001-07-10 Thread Marcin Sochacki
Hi all,

I have got some problems with users on my server using email-to-SMS gateways.
They put .procmailrc like this one:

--
SENDMAIL=/usr/sbin/sendmail
:0c
* [EMAIL PROTECTED]
| $HOME/email2sms | $SENDMAIL -t
--

When the SMS gateway of someone's operator dies, the messages are bounced back
and processed again by procmail. The error message is sent to SMS gateway,
which bounces it again...

So after some time I have thousands of messages in my spool. How can
I prevent this behavior with Exim configuration options?

Marcin

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+




server health-load balancers

2001-07-10 Thread avinash naik

hi!!
 how does the server monitoring system infoem the load
balancers about the health of the servers.I wanted to
know how basically its done.
please do reply
bye avinash

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Network Mapping Tool

2001-07-10 Thread Joerg Wendland

Hi,

On Sat, Jul 07, 2001 at 01:47:44AM -0500, Sanjeev Gupta wrote:
> I am trying to "map" the structure of an ISP's network.  A graphical tool
> that I could use to draw the diagrams, after it had done most of the work,
> would be great.
> 
> Any suggestions?  Tool should preferably run on:

Try using scotty (a package named scotty is in potato). This comes with
a tool named tkined (using TK) which can map your network by scanning it.
It makes heavy use of SNMP and brings some special modules for CISCO, Ascend
and other router manufacturers, so you could use it also for management of 
your network.

HTH, Joerg

-- 
  \ Joerg Wendland \ systems / network administrator, ITSec, Scan Plus GmbH
   \  *joergland*   \ Moerikestrasse 5, 89077 Ulm, Germany
\\ fon +49-731-92013-21, fax +49-731-6027146
 \\ PGP-key: finger [EMAIL PROTECTED]
  \ key fingerprint: 79C0 7671 AFC7 315E 657A  F318 57A3 7FBD 51CF 8417

 PGP signature


Re: Exim and SMS gateways

2001-07-10 Thread Teun Vink

On Tue, 10 Jul 2001, Marcin Sochacki wrote:

> Hi all,
> 
> I have got some problems with users on my server using email-to-SMS gateways.
> They put .procmailrc like this one:
> 
> --
> SENDMAIL=/usr/sbin/sendmail
> :0c
> * ^[EMAIL PROTECTED]
> | $HOME/email2sms | $SENDMAIL -t
> --
> 
> When the SMS gateway of someone's operator dies, the messages are bounced back
> and processed again by procmail. The error message is sent to SMS gateway,
> which bounces it again...
> 
> So after some time I have thousands of messages in my spool. How can
> I prevent this behavior with Exim configuration options?
> 
> Marcin
> 
> 

You could write a procmail rule which filters the bounces and drop them in
a mailbox (or send them to /dev/null). Of course, you need to place this
rule _before_ the rule which sends the SMS.


Teun

-- 
Teun Vink - [EMAIL PROTECTED] - icq: 15001247 - http://teun.moonblade.net


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Exim and SMS gateways

2001-07-10 Thread Marcin Sochacki

Hi all,

I have got some problems with users on my server using email-to-SMS gateways.
They put .procmailrc like this one:

--
SENDMAIL=/usr/sbin/sendmail
:0c
* ^[EMAIL PROTECTED]
| $HOME/email2sms | $SENDMAIL -t
--

When the SMS gateway of someone's operator dies, the messages are bounced back
and processed again by procmail. The error message is sent to SMS gateway,
which bounces it again...

So after some time I have thousands of messages in my spool. How can
I prevent this behavior with Exim configuration options?

Marcin

-- 
  +-+
  |  Sekcja Obslugi Informatycznej Biblioteki Glownej !!!  !!! .!!  +
  |  Uniwersytet Gdanski  !!!  !!! !!!  |
  +  tel. (058) 5509436   !!!  !!! !!!  `!! |
  `!!' `!!' |
  +-+


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]