Re: Problem with dlink DSL-Router

2002-11-01 Thread Markus Lechner
> I think that your problem is that you have some filter in your output chain
> of you firewall configuration.
> If you use iptable, you can view the filter with the command "iptables -L
> OUTPUT -n -v"

This is the output - seems to be completely open:

iptables -L OUTPUT -n -v
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   
destination
 553K  125M ACCEPT all  --  *  lo  0.0.0.0/00.0.0.0/0

0 0 ACCEPT all  --  *  eth00.0.0.0/0
255.255.255.255
0 0 ACCEPT all  --  *  irda0   0.0.0.0/0
255.255.255.255
0 0 ACCEPT all  --  *  vmnet8  0.0.0.0/0
255.255.255.255
 4757  575K ACCEPT all  --  *  eth00.0.0.0/0
192.168.1.0/24
0 0 ACCEPT all  --  *  irda0   0.0.0.0/0
192.168.1.0/24
 2655  340K ACCEPT all  --  *  vmnet8  0.0.0.0/0
192.168.2.0/24
0 0 ACCEPT!tcp  --  *  eth00.0.0.0/0
224.0.0.0/4

0 0 ACCEPT!tcp  --  *  irda0   0.0.0.0/0
224.0.0.0/4

0 0 ACCEPT!tcp  --  *  vmnet8  0.0.0.0/0
224.0.0.0/4

0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.1.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.1.0/24
0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.1.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.1.0/24
0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.2.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.2.0/24
0 0 ACCEPT all  --  *  ppp00.0.0.0/0
255.255.255.255
1239K 1108M ACCEPT all  --  *  ppp0212.144.221.80.0.0.0/0

0 0 LOGall  --  *  *   0.0.0.0/00.0.0.0/0
   LOG flags 0 level 4
0 0 DROP   all  --  *  *   0.0.0.0/00.0.0.0/0




Re: email account and dns

2002-11-01 Thread Debian User

Thank you for the reply.  The dns zone problem has been fixed by removing
the zone
file, running rndc reload, recreating the zone file (exactly), and then
running rndc reload again.  It worked for some strange reason.  I
normally would use the real domains but the customer wanted to remain
anonymous.  Sorry I was not more descriptive with the other concern.  It
looks like someone completely removed two accounts.  That's the only
way I can explain it.  I think it is an internal problem unless someone
has heard of something like that before.  I appreciate the concern though.

Chet

On Fri, 1 Nov 2002, Jeremy C. Reed wrote:

> On Fri, 1 Nov 2002, Debian User wrote:
>
> >
> > his new domain user3.com.  I changed the entry in his user1.com zone file
> > to point to the new user3.com domain, which is up.  I also up dated the
>
> Show us.
>
> Also what type of record (A, MX)?
>
> And it is helpful to use real hostnames, so we can help.
>
> > I also have had a few email accounts disappear and was wondering if anyone
>
> What does that mean?
>
> Did the users get removed from your passwd file?
>
> Or did the mailbox get removed?
>
> I am sure we can help, but we need more information.
>
>   Jeremy C. Reed
> ...
>  BSD software, documentation, resources, news...
>  http://bsd.reedmedia.net/
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
>




Re: Problem with dlink DSL-Router

2002-11-01 Thread Markus Lechner
> I think that your problem is that you have some filter in your output chain
> of you firewall configuration.
> If you use iptable, you can view the filter with the command "iptables -L
> OUTPUT -n -v"

This is the output - seems to be completely open:

iptables -L OUTPUT -n -v
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
 pkts bytes target prot opt in out source   
destination
 553K  125M ACCEPT all  --  *  lo  0.0.0.0/00.0.0.0/0

0 0 ACCEPT all  --  *  eth00.0.0.0/0
255.255.255.255
0 0 ACCEPT all  --  *  irda0   0.0.0.0/0
255.255.255.255
0 0 ACCEPT all  --  *  vmnet8  0.0.0.0/0
255.255.255.255
 4757  575K ACCEPT all  --  *  eth00.0.0.0/0
192.168.1.0/24
0 0 ACCEPT all  --  *  irda0   0.0.0.0/0
192.168.1.0/24
 2655  340K ACCEPT all  --  *  vmnet8  0.0.0.0/0
192.168.2.0/24
0 0 ACCEPT!tcp  --  *  eth00.0.0.0/0
224.0.0.0/4

0 0 ACCEPT!tcp  --  *  irda0   0.0.0.0/0
224.0.0.0/4

0 0 ACCEPT!tcp  --  *  vmnet8  0.0.0.0/0
224.0.0.0/4

0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.1.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.1.0/24
0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.1.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.1.0/24
0 0 LOGall  --  *  ppp00.0.0.0/0
192.168.2.0/24 LOG flags 0 level 4
0 0 DROP   all  --  *  ppp00.0.0.0/0
192.168.2.0/24
0 0 ACCEPT all  --  *  ppp00.0.0.0/0
255.255.255.255
1239K 1108M ACCEPT all  --  *  ppp0212.144.221.80.0.0.0/0

0 0 LOGall  --  *  *   0.0.0.0/00.0.0.0/0
   LOG flags 0 level 4
0 0 DROP   all  --  *  *   0.0.0.0/00.0.0.0/0


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: email account and dns

2002-11-01 Thread Debian User

Thank you for the reply.  The dns zone problem has been fixed by removing
the zone
file, running rndc reload, recreating the zone file (exactly), and then
running rndc reload again.  It worked for some strange reason.  I
normally would use the real domains but the customer wanted to remain
anonymous.  Sorry I was not more descriptive with the other concern.  It
looks like someone completely removed two accounts.  That's the only
way I can explain it.  I think it is an internal problem unless someone
has heard of something like that before.  I appreciate the concern though.

Chet

On Fri, 1 Nov 2002, Jeremy C. Reed wrote:

> On Fri, 1 Nov 2002, Debian User wrote:
>
> >
> > his new domain user3.com.  I changed the entry in his user1.com zone file
> > to point to the new user3.com domain, which is up.  I also up dated the
>
> Show us.
>
> Also what type of record (A, MX)?
>
> And it is helpful to use real hostnames, so we can help.
>
> > I also have had a few email accounts disappear and was wondering if anyone
>
> What does that mean?
>
> Did the users get removed from your passwd file?
>
> Or did the mailbox get removed?
>
> I am sure we can help, but we need more information.
>
>   Jeremy C. Reed
> ...
>  BSD software, documentation, resources, news...
>  http://bsd.reedmedia.net/
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: debian blog?

2002-11-01 Thread Nate Campi
On Fri, Nov 01, 2002 at 12:50:16PM -0800, Nate Campi wrote:
> Users keep asking for blogs, but I haven't set anything up since I
> didn't see anything for woody (other than zope, and I really don't want
> to learn a whole new app server just for one app).

Er, I meant to name the app (squishdot) not just the app server.
-- 
Nate Campi   http://www.campin.net 

The Imperial Vendor or Contractor probably told them that droid armies
don't need redundant command centers, nor any kind of high availability ...
you're supposed to buy several, and cluster them. 
Redundant Array of Inexpensive Droids? 



pgpEi2ObPKv0E.pgp
Description: PGP signature


debian blog?

2002-11-01 Thread Nate Campi
Users keep asking for blogs, but I haven't set anything up since I
didn't see anything for woody (other than zope, and I really don't want
to learn a whole new app server just for one app).

How are people providing blogs at debian-based ISPs?
-- 
Nate Campi   http://www.campin.net 

ignorami: n: 
The BOFH art of folding problem lusers into representational shapes.



pgppi17ZNKx65.pgp
Description: PGP signature


Re: Correcting permissions on files

2002-11-01 Thread Jeremy C. Reed
Your other messages seemed to indicate that you are renumbering the UIDs
in the passwd files, for example moving from 100 up to 1000.

If you do that, your ownerships will still be wrong (after you copy via
rsync, ssh, rsh whatever and preserve this information).

You can begin to fix it by using find to find files/directories owned by
certain UIDs and have it chown them to new user. Just be sure to not
overlap and have two users with same UID or it will become real confusing.

It may be easy if the users only have files in their own home directories.

  Jeremy C. Reed
...
 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/




Re: email account and dns

2002-11-01 Thread Jeremy C. Reed
On Fri, 1 Nov 2002, Debian User wrote:

> 
> his new domain user3.com.  I changed the entry in his user1.com zone file
> to point to the new user3.com domain, which is up.  I also up dated the

Show us.

Also what type of record (A, MX)?

And it is helpful to use real hostnames, so we can help.

> I also have had a few email accounts disappear and was wondering if anyone

What does that mean?

Did the users get removed from your passwd file?

Or did the mailbox get removed?

I am sure we can help, but we need more information.

  Jeremy C. Reed
...
 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/




Re: Postfix + SASL Authentication failed

2002-11-01 Thread Piotrek Marat
On Wed, Oct 30, 2002 at 05:57:46PM +0100, Davi Leal wrote:
> Hi,
> 
> The problem is I can not get authentication successful in my Postfix + SASL
> server.

I had the same problem on FreeBSD machine. If you use pwcheck method
check whether postfix user has access to /var/pwcheck directory ( I just
added postifx to cyrus group and everything works fine )

Cheers,
PM




Re: Problem with dlink DSL-Router

2002-11-01 Thread Matias Lambert
Hi Markus,
I think that your problem is that you have some filter in your output chain of
you firewall configuration.
If you use iptable, you can view the filter with the command "iptables -L OUTPUT
-n -v"
regards,
Matias Lambert


Markus Lechner wrote:

> Hello,
>
> first, i'm not on this list, so please cc me if you think you know what my
> problem is.
>
> I have a dlink DI-804 switch/DSL-Router and want to use it without it's
> integrated DHCP funktionality.
>
> So i disabled DHCP.
>
> I can ping it, use it's web-interface to configure it or do this via it's
> telnet-interface - no problem so far.
>
> 192.168.1.0 is my net.
> 192.168.1.100 is the IP of my PC.
> 192.168.1.254 is the IP of the dlink.
>
> I have no problem using the DSL-Modem via PPPOE directly - everything works
> fine.
>
> But when i try to use the dlink between my PC and the modem - problems arise.
>
> The dlink immediately opens a DSL-connection - so this is ok. He has the IP
> and an external gateway.
>
> But i just can't reach any websites - no matter what kind of address.
>
> ping www.debian.de
> ping: unknown host www.debian.de
>
> ping 145.253.2.171
> PING 145.253.2.171 (145.253.2.171) from 192.168.1.100 : 56(84) bytes of data.
> ping: sendmsg: Operation not permitted
> ping: sendmsg: Operation not permitted
>
> --- 145.253.2.171 ping statistics ---
> 2 packets transmitted, 0 received, 100% loss, time 1020ms
>
> These are my routes:
> route
> Kernel IP Routentabelle
> ZielRouter  Genmask Flags Metric RefUse Iface
> 192.168.1.254   *   255.255.255.255 UH0  00 eth0
> 192.168.2.0 *   255.255.255.0   U 0  00 vmnet8
> localnet*   255.255.255.0   U 0  00 eth0
> localnet*   255.255.255.0   U 0  00 irda0
> default 192.168.1.254   0.0.0.0 UG0  00 eth0
>
> My resolv.conf:
> cat /etc/resolv.conf
> nameserver 145.253.2.171
> nameserver 145.253.2.203
>
> With resolv.conf, there is another interesting thing. I don't know what it
> means. The nameserver addresses that i got from my provider are different.
> When i insert them again, next time i use pppd they change to the ones i send
> you now. I don't know if the dlink can do this, too. But it seems not to be
> the problem, right?
>
> This is what my dlink says:
> WAN MAC Address : 00-05-5D-DB-9B-32
> Current IP  : 213.23.6.138
> Current IP Mask : 255.255.255.0
> Current Gateway : 145.253.1.223
> Current DNS1: 145.253.2.11
> Current DNS2: 145.253.2.75
>
> LAN MAC Address : 00-05-5D-DB-9B-31
> Current IP  : 192.168.1.254
> Current Subnet Mask : 255.255.255.0
>
> DHCP: Disable
> Starting IP Address : 192.168.0.100
> Number of IP Addresses  : 100
>
> Can you help me?
> What am I doing wrong?
>
> Thanks,
>
> Markus Lechner
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: debian blog?

2002-11-01 Thread Nate Campi
On Fri, Nov 01, 2002 at 12:50:16PM -0800, Nate Campi wrote:
> Users keep asking for blogs, but I haven't set anything up since I
> didn't see anything for woody (other than zope, and I really don't want
> to learn a whole new app server just for one app).

Er, I meant to name the app (squishdot) not just the app server.
-- 
Nate Campi   http://www.campin.net 

The Imperial Vendor or Contractor probably told them that droid armies
don't need redundant command centers, nor any kind of high availability ...
you're supposed to buy several, and cluster them. 
Redundant Array of Inexpensive Droids? 




msg07114/pgp0.pgp
Description: PGP signature


debian blog?

2002-11-01 Thread Nate Campi
Users keep asking for blogs, but I haven't set anything up since I
didn't see anything for woody (other than zope, and I really don't want
to learn a whole new app server just for one app).

How are people providing blogs at debian-based ISPs?
-- 
Nate Campi   http://www.campin.net 

ignorami: n: 
The BOFH art of folding problem lusers into representational shapes.




msg07113/pgp0.pgp
Description: PGP signature


Re: Correcting permissions on files

2002-11-01 Thread Jeremy C. Reed
Your other messages seemed to indicate that you are renumbering the UIDs
in the passwd files, for example moving from 100 up to 1000.

If you do that, your ownerships will still be wrong (after you copy via
rsync, ssh, rsh whatever and preserve this information).

You can begin to fix it by using find to find files/directories owned by
certain UIDs and have it chown them to new user. Just be sure to not
overlap and have two users with same UID or it will become real confusing.

It may be easy if the users only have files in their own home directories.

  Jeremy C. Reed
...
 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: email account and dns

2002-11-01 Thread Jeremy C. Reed
On Fri, 1 Nov 2002, Debian User wrote:

> 
> his new domain user3.com.  I changed the entry in his user1.com zone file
> to point to the new user3.com domain, which is up.  I also up dated the

Show us.

Also what type of record (A, MX)?

And it is helpful to use real hostnames, so we can help.

> I also have had a few email accounts disappear and was wondering if anyone

What does that mean?

Did the users get removed from your passwd file?

Or did the mailbox get removed?

I am sure we can help, but we need more information.

  Jeremy C. Reed
...
 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Problem with dlink DSL-Router

2002-11-01 Thread Jeremy C. Reed

> 192.168.1.0 is my net.

> Starting IP Address   : 192.168.0.100

Should this be the same?

(Or show us your ifconfig.)

  Jeremy C. Reed
...
 BSD software, documentation, resources, news...
 http://bsd.reedmedia.net/




Re: Problem with dlink DSL-Router

2002-11-01 Thread Markus Lechner
> > 192.168.1.0 is my net.
> >
> > Starting IP Address : 192.168.0.100
>
> Should this be the same?
>
> (Or show us your ifconfig.)
>
Ah, this is a relict from the original address of the router - it was 
192.168.0.1. But this should not be a problem - DHCP is disabled, so the 
range is not a parameter of interest anymore.

BTW - i subscribed to the list now.

Anyway, my ifconfig:
ifconfig
eth0  Protokoll:Ethernet  Hardware Adresse 00:20:E0:6B:6A:64
  inet Adresse:192.168.1.100  Bcast:192.168.1.255  Maske:255.255.255.0
  inet6 Adresse: fe80::220:e0ff:fe6b:6a64/10 
Gültigkeitsbereich:Verbindung
  UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
  RX packets:2261036 errors:0 dropped:0 overruns:0 frame:1
  TX packets:1861802 errors:0 dropped:0 overruns:2 carrier:0
  Kollisionen:0 Sendewarteschlangenlänge:100
  RX bytes:1855772469 (1.7 GiB)  TX bytes:1152573277 (1.0 GiB)
  Interrupt:10 Basisadresse:0xd000

irda0 Protokoll:IrLAP  Hardware Adresse 3c:26:43:12
  inet Adresse:192.168.1.101  Maske:255.255.255.0
  UP RUNNING NOARP  MTU:2048  Metric:1
  RX packets:0 errors:0 dropped:0 overruns:0 frame:0
  TX packets:78491 errors:0 dropped:0 overruns:0 carrier:0
  Kollisionen:0 Sendewarteschlangenlänge:8
  RX bytes:0 (0.0 b)  TX bytes:2490293 (2.3 MiB)
  Interrupt:3 Basisadresse:0x2f8

loProtokoll:Lokale Schleife
  inet Adresse:127.0.0.1  Maske:255.0.0.0
  inet6 Adresse: ::1/128 Gültigkeitsbereich:Maschine
  UP LOOPBACK RUNNING  MTU:16436  Metric:1
  RX packets:428468 errors:0 dropped:0 overruns:0 frame:0
  TX packets:428468 errors:0 dropped:0 overruns:0 carrier:0
  Kollisionen:0 Sendewarteschlangenlänge:0
  RX bytes:95725151 (91.2 MiB)  TX bytes:95725151 (91.2 MiB)




Re: Problem with DSL-Router

2002-11-01 Thread Markus Lechner
BTW, i have the impression that the problem is related to routing in itself.

If i use, just like now, the DSL-Modem direct and bring up a ppp connection 
like this...

ppp0  Protokoll:Punkt-zu-Punkt Verbindung
  inet Adresse:212.144.221.8  P-z-P:145.253.1.223 
Maske:255.255.255.255  UP PUNKTZUPUNKT RUNNING NOARP MULTICAST 
MTU:1492  Metric:1
  RX packets:66116 errors:0 dropped:0 overruns:0 frame:0
  TX packets:119159 errors:0 dropped:0 overruns:0 carrier:0
  Kollisionen:0 Sendewarteschlangenlänge:3
  RX bytes:16271781 (15.5 MiB)  TX bytes:97094173 (92.5 MiB)

... everything works fine. Because the different net ranges are routed and 
handled by the ppp0 interface, right?

But when i use the router it's different and i would need to include the 
outside net's net range in my routing table, right?

I tried this, but to no avail.

But then, should not be the dlink be the one deciding what to do with packets 
for the outside net?




CBQ.init

2002-11-01 Thread Craig
Hi Fellows

Where do I put the CBQ.init file in Debian to initialize
on startup ?

..Craig




Re: CBQ.init

2002-11-01 Thread Emile van Bergen
Hi,

On Fri, Nov 01, 2002 at 10:28:12AM +0200, Craig wrote:

> Hi Fellows
> 
> Where do I put the CBQ.init file in Debian to initialize
> on startup ?

No idea what that file is, but I assume a SysV-compatible init script.

In that case, put it in /etc/init.d, and symlink to it from
/etc/rc2.d/SxxCBQ and /etc/rc0.d/KyyCBQ, choosing numbers for xx and yy
to reflect the desired place in the startup and shutdown procedures.

Cheers,


Emile.

-- 
E-Advies / Emile van Bergen   |   [EMAIL PROTECTED]
tel. +31 (0)70 3906153|   http://www.e-advies.info


pgpvJmHRza0bu.pgp
Description: PGP signature


Correcting permissions on files

2002-11-01 Thread Scott St. John
Hi gang,
The Debian box has been a true blessing this week and I am ready to
move our users off BSDi/Sendmail to our new Debian/Postfix box.  I have
the accounts in the system, but am curious if anyone has some tips on
scripting a way to fix permissions on home directories and files once the
accounts are on the new server.
I am using ncftp to bring the user home directories over to the new server
and need to fix the owner/permission on each home directory and then
also do the same when I bring their email over.
Any thoughts?
Thanks,
-Scott



Re: Correcting permissions on files

2002-11-01 Thread Russell Coker
On Fri, 1 Nov 2002 15:52, Scott St. John wrote:
> Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.

ssh1 is a faster protocol than ssh2.  Blowfish is a faster encryption than 
triple DES (the default).  Use ssh1 and Blowfish instead of ssh2 and triple 
DES and you can increase the speed by as much as a factor of 6 (depending on 
hardware).  Also transfer gzip compressed data.  Using the -z option of tar 
takes better advantage of SMP systems than the -C option of scp, and 
compression is a fast operation, if the data compresses reasonably well (EG 
email) then the reduction in size (and therefore encryption work) saves 
time).

I've written cron jobs to transfer multiple gigabyte files every night...

> Heh, I have been sitting here with Perl and Awk books all morning and it's
> really this simple?  You guys are going to have me off my Windows
> desktop completely if this keeps up :)

That's the aim.

Have you tried out kde 3.1?  A KDE system with some expect scripts and 
ssh-agent makes a really good management system for servers.  I used to run 
about 40 Solaris servers in such a fashion.  I had setup scripts to do tasks 
such as run commands or install packages on all servers at once.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page




Re: Correcting permissions on files

2002-11-01 Thread Scott St. John
At 03:38 PM 11/1/2002 +0100, you wrote:
Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.
and the whole tree will be copied, permissions and all, even remapping
uids if the usernames on the new machine use different ones.
You do have to configure your old machine temporarily to trust
newmachine enough to give people on it root access though, but that's
all.
Heh, I have been sitting here with Perl and Awk books all morning and it's
really this simple?  You guys are going to have me off my Windows
desktop completely if this keeps up :)
Thank you!
-Scott



Re: Postfix + SASL Authentication failed

2002-11-01 Thread Piotrek Marat
On Wed, Oct 30, 2002 at 05:57:46PM +0100, Davi Leal wrote:
> Hi,
> 
> The problem is I can not get authentication successful in my Postfix + SASL
> server.

I had the same problem on FreeBSD machine. If you use pwcheck method
check whether postfix user has access to /var/pwcheck directory ( I just
added postifx to cyrus group and everything works fine )

Cheers,
PM


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Problem with dlink DSL-Router

2002-11-01 Thread Matias Lambert
Hi Markus,
I think that your problem is that you have some filter in your output chain of
you firewall configuration.
If you use iptable, you can view the filter with the command "iptables -L OUTPUT
-n -v"
regards,
Matias Lambert


Markus Lechner wrote:

> Hello,
>
> first, i'm not on this list, so please cc me if you think you know what my
> problem is.
>
> I have a dlink DI-804 switch/DSL-Router and want to use it without it's
> integrated DHCP funktionality.
>
> So i disabled DHCP.
>
> I can ping it, use it's web-interface to configure it or do this via it's
> telnet-interface - no problem so far.
>
> 192.168.1.0 is my net.
> 192.168.1.100 is the IP of my PC.
> 192.168.1.254 is the IP of the dlink.
>
> I have no problem using the DSL-Modem via PPPOE directly - everything works
> fine.
>
> But when i try to use the dlink between my PC and the modem - problems arise.
>
> The dlink immediately opens a DSL-connection - so this is ok. He has the IP
> and an external gateway.
>
> But i just can't reach any websites - no matter what kind of address.
>
> ping www.debian.de
> ping: unknown host www.debian.de
>
> ping 145.253.2.171
> PING 145.253.2.171 (145.253.2.171) from 192.168.1.100 : 56(84) bytes of data.
> ping: sendmsg: Operation not permitted
> ping: sendmsg: Operation not permitted
>
> --- 145.253.2.171 ping statistics ---
> 2 packets transmitted, 0 received, 100% loss, time 1020ms
>
> These are my routes:
> route
> Kernel IP Routentabelle
> ZielRouter  Genmask Flags Metric RefUse Iface
> 192.168.1.254   *   255.255.255.255 UH0  00 eth0
> 192.168.2.0 *   255.255.255.0   U 0  00 vmnet8
> localnet*   255.255.255.0   U 0  00 eth0
> localnet*   255.255.255.0   U 0  00 irda0
> default 192.168.1.254   0.0.0.0 UG0  00 eth0
>
> My resolv.conf:
> cat /etc/resolv.conf
> nameserver 145.253.2.171
> nameserver 145.253.2.203
>
> With resolv.conf, there is another interesting thing. I don't know what it
> means. The nameserver addresses that i got from my provider are different.
> When i insert them again, next time i use pppd they change to the ones i send
> you now. I don't know if the dlink can do this, too. But it seems not to be
> the problem, right?
>
> This is what my dlink says:
> WAN MAC Address : 00-05-5D-DB-9B-32
> Current IP  : 213.23.6.138
> Current IP Mask : 255.255.255.0
> Current Gateway : 145.253.1.223
> Current DNS1: 145.253.2.11
> Current DNS2: 145.253.2.75
>
> LAN MAC Address : 00-05-5D-DB-9B-31
> Current IP  : 192.168.1.254
> Current Subnet Mask : 255.255.255.0
>
> DHCP: Disable
> Starting IP Address : 192.168.0.100
> Number of IP Addresses  : 100
>
> Can you help me?
> What am I doing wrong?
>
> Thanks,
>
> Markus Lechner
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: CBQ.init

2002-11-01 Thread Joan Cirer
Craig wrote:
Hi Fellows
Where do I put the CBQ.init file in Debian to initialize
on startup ?
..Craig
 

CBQ.init is included in the shaper package, follow the instructions there
Regards



Re: Correcting permissions on files

2002-11-01 Thread Emile van Bergen
Hi,

On Fri, Nov 01, 2002 at 03:26:14PM +0100, Maarten Vink wrote:

> Scott St. John wrote:
> 
> >I am using ncftp to bring the user home directories over to the new server
> >and need to fix the owner/permission on each home directory and then
> >also do the same when I bring their email over.
> 
> 1) Don't use ftp; mount the drive via NFS. This won't cause permission 
> problems.
> 2) If you need to use FTP, create a big tar(.gz/.bz2) file and copy that 
> file. This will also allow you to preserve permissions. If you don't 
> have enough diskspace to create this file, pipe it through an ssh-tunnel 
> so you won't need any additional diskspace.

Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.

newmachine:/# rsh oldmachine tar cf - home | tar xpf -

and the whole tree will be copied, permissions and all, even remapping
uids if the usernames on the new machine use different ones. 

You do have to configure your old machine temporarily to trust
newmachine enough to give people on it root access though, but that's
all.

Cheers,


Emile.

-- 
E-Advies / Emile van Bergen   |   [EMAIL PROTECTED]
tel. +31 (0)70 3906153|   http://www.e-advies.info



pgpIB3bxglmcW.pgp
Description: PGP signature


Re: Correcting permissions on files

2002-11-01 Thread Maarten Vink
Scott St. John wrote:
Hi gang,
The Debian box has been a true blessing this week and I am ready to
move our users off BSDi/Sendmail to our new Debian/Postfix box.  I have
the accounts in the system, but am curious if anyone has some tips on
scripting a way to fix permissions on home directories and files once the
accounts are on the new server.
I am using ncftp to bring the user home directories over to the new server
and need to fix the owner/permission on each home directory and then
also do the same when I bring their email over.
Any thoughts?
Thanks,
-Scott

1) Don't use ftp; mount the drive via NFS. This won't cause permission 
problems.
2) If you need to use FTP, create a big tar(.gz/.bz2) file and copy that 
file. This will also allow you to preserve permissions. If you don't 
have enough diskspace to create this file, pipe it through an ssh-tunnel 
so you won't need any additional diskspace.

If both are not possible, I'm afraid you'll have to script something 
yourself.

Maarten Vink



email account and dns

2002-11-01 Thread Debian User

Hi,

I have a user that has one of his domains, user1.com, pointing his
other domain, user2.com via the dns zone file.  He asked me to redirect
his user1.com domain to
his new domain user3.com.  I changed the entry in his user1.com zone file
to point to the new user3.com domain, which is up.  I also up dated the
serial and then ran a rndc reload.  I did this to both the primairy and
secondary dns servers and user1.com still point to user2.com.  I did a dig
for the information and the ip address for user1.com still comes up as the
ip of user2.com.  I thought maybe it was cached information so I then ran
a rndc flush and it still comes up wrong.

I also have had a few email accounts disappear and was wondering if anyone
had a similar issue.  I did a search in the archive for dns redirect and
accounts disappearing but could not find anything.  Any input would be
appreciated.




Re: CBQ.init

2002-11-01 Thread Joan Cirer
Craig wrote:


Hi Fellows

Where do I put the CBQ.init file in Debian to initialize
on startup ?

..Craig


 

CBQ.init is included in the shaper package, follow the instructions there

Regards


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




email account and dns

2002-11-01 Thread Debian User

Hi,

I have a user that has one of his domains, user1.com, pointing his
other domain, user2.com via the dns zone file.  He asked me to redirect
his user1.com domain to
his new domain user3.com.  I changed the entry in his user1.com zone file
to point to the new user3.com domain, which is up.  I also up dated the
serial and then ran a rndc reload.  I did this to both the primairy and
secondary dns servers and user1.com still point to user2.com.  I did a dig
for the information and the ip address for user1.com still comes up as the
ip of user2.com.  I thought maybe it was cached information so I then ran
a rndc flush and it still comes up wrong.

I also have had a few email accounts disappear and was wondering if anyone
had a similar issue.  I did a search in the archive for dns redirect and
accounts disappearing but could not find anything.  Any input would be
appreciated.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Correcting permissions on files

2002-11-01 Thread Russell Coker
On Fri, 1 Nov 2002 15:52, Scott St. John wrote:
> Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.

ssh1 is a faster protocol than ssh2.  Blowfish is a faster encryption than 
triple DES (the default).  Use ssh1 and Blowfish instead of ssh2 and triple 
DES and you can increase the speed by as much as a factor of 6 (depending on 
hardware).  Also transfer gzip compressed data.  Using the -z option of tar 
takes better advantage of SMP systems than the -C option of scp, and 
compression is a fast operation, if the data compresses reasonably well (EG 
email) then the reduction in size (and therefore encryption work) saves 
time).

I've written cron jobs to transfer multiple gigabyte files every night...

> Heh, I have been sitting here with Perl and Awk books all morning and it's
> really this simple?  You guys are going to have me off my Windows
> desktop completely if this keeps up :)

That's the aim.

Have you tried out kde 3.1?  A KDE system with some expect scripts and 
ssh-agent makes a really good management system for servers.  I used to run 
about 40 Solaris servers in such a fashion.  I had setup scripts to do tasks 
such as run commands or install packages on all servers at once.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Correcting permissions on files

2002-11-01 Thread Scott St. John
At 03:38 PM 11/1/2002 +0100, you wrote:
Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.
and the whole tree will be copied, permissions and all, even remapping
uids if the usernames on the new machine use different ones.
You do have to configure your old machine temporarily to trust
newmachine enough to give people on it root access though, but that's
all.

Heh, I have been sitting here with Perl and Awk books all morning and it's
really this simple?  You guys are going to have me off my Windows
desktop completely if this keeps up :)

Thank you!

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: Correcting permissions on files

2002-11-01 Thread Emile van Bergen
Hi,

On Fri, Nov 01, 2002 at 03:26:14PM +0100, Maarten Vink wrote:

> Scott St. John wrote:
> 
> >I am using ncftp to bring the user home directories over to the new server
> >and need to fix the owner/permission on each home directory and then
> >also do the same when I bring their email over.
> 
> 1) Don't use ftp; mount the drive via NFS. This won't cause permission 
> problems.
> 2) If you need to use FTP, create a big tar(.gz/.bz2) file and copy that 
> file. This will also allow you to preserve permissions. If you don't 
> have enough diskspace to create this file, pipe it through an ssh-tunnel 
> so you won't need any additional diskspace.

Or tar + plain rsh, no need to encrypt all that with ssh. Takes ages.

newmachine:/# rsh oldmachine tar cf - home | tar xpf -

and the whole tree will be copied, permissions and all, even remapping
uids if the usernames on the new machine use different ones. 

You do have to configure your old machine temporarily to trust
newmachine enough to give people on it root access though, but that's
all.

Cheers,


Emile.

-- 
E-Advies / Emile van Bergen   |   [EMAIL PROTECTED]
tel. +31 (0)70 3906153|   http://www.e-advies.info




msg07104/pgp0.pgp
Description: PGP signature


Re: Correcting permissions on files

2002-11-01 Thread Maarten Vink
Scott St. John wrote:

Hi gang,

The Debian box has been a true blessing this week and I am ready to
move our users off BSDi/Sendmail to our new Debian/Postfix box.  I have
the accounts in the system, but am curious if anyone has some tips on
scripting a way to fix permissions on home directories and files once the
accounts are on the new server.

I am using ncftp to bring the user home directories over to the new server
and need to fix the owner/permission on each home directory and then
also do the same when I bring their email over.

Any thoughts?

Thanks,

-Scott




1) Don't use ftp; mount the drive via NFS. This won't cause permission 
problems.
2) If you need to use FTP, create a big tar(.gz/.bz2) file and copy that 
file. This will also allow you to preserve permissions. If you don't 
have enough diskspace to create this file, pipe it through an ssh-tunnel 
so you won't need any additional diskspace.


If both are not possible, I'm afraid you'll have to script something 
yourself.

Maarten Vink


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Correcting permissions on files

2002-11-01 Thread Scott St. John
Hi gang,

The Debian box has been a true blessing this week and I am ready to
move our users off BSDi/Sendmail to our new Debian/Postfix box.  I have
the accounts in the system, but am curious if anyone has some tips on
scripting a way to fix permissions on home directories and files once the
accounts are on the new server.

I am using ncftp to bring the user home directories over to the new server
and need to fix the owner/permission on each home directory and then
also do the same when I bring their email over.

Any thoughts?

Thanks,

-Scott


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: CBQ.init

2002-11-01 Thread Emile van Bergen
Hi,

On Fri, Nov 01, 2002 at 10:28:12AM +0200, Craig wrote:

> Hi Fellows
> 
> Where do I put the CBQ.init file in Debian to initialize
> on startup ?

No idea what that file is, but I assume a SysV-compatible init script.

In that case, put it in /etc/init.d, and symlink to it from
/etc/rc2.d/SxxCBQ and /etc/rc0.d/KyyCBQ, choosing numbers for xx and yy
to reflect the desired place in the startup and shutdown procedures.

Cheers,


Emile.

-- 
E-Advies / Emile van Bergen   |   [EMAIL PROTECTED]
tel. +31 (0)70 3906153|   http://www.e-advies.info



msg07101/pgp0.pgp
Description: PGP signature


CBQ.init

2002-11-01 Thread Craig
Hi Fellows

Where do I put the CBQ.init file in Debian to initialize
on startup ?

..Craig


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]