Whose problem?

2001-10-03 Thread Antti Tolamo

Something bit odd happened today with my
humble but small server. I'm not sure what, but I hope
somebody could help, because I hope it doesnt't happen
again.

My connection basically
is a ADL connection. I have private address
in local ISP network to which I connect by Nokia M1122
ADSL router . I have fixed IP but there is NAT before
big bad internet. I have Debian potato 2.2.19 with ipchains
as a firewall. I've enabled with ICMP traceroute and other ICMP's that
are required but not ECHO.

I wasn't doing anything special but I noticed suddenly
that lot of pings were coming at my server as firewall
logs arrived. No matter otherwise, but I also noticed that
connection to internet was not working properly. DNS queries to my
ISP didn't work. Nslookup for example didn't work because
no DNS server couldn't be found.
Looking Ethreal, I could see that traffic was coming to server.

This state of affairs lasted maybe 30-50 minutes or maybe more.
I wasn't counting time, I was wondering was I under attack.

After time, things returned to normal. Not sure why, I did add some specific
rules to firewall concerning the domain where pings came, but
as I was already denying them, so I'm not sure did it help.
There came pings later too but nothing happened because them.
As I contacted the origin of these pings, I was referred here:
http://www.internap.com/measurements/readme.html

Now, what did happen? Unfortunately I didn't know back
then how to look my routers status so I don't have logs about
it. Far as I can tell, traffict came to my server, but
I was unable to send.
Besides those pings, I can't figure anything exceptional
that would have happened.
Certainly I didn't do anything out of ordinary.
Was fault in router, Debinan or somehow
misconfigured firewall ?
I'd add that that I rarely have anykind of
problems with connectivity to internet.


Antti






Antti


My PGP public key:
http://linux.tola.org/~chicken/antti_pgp.txt

--
Sex, rags and rock'n roll!
--






-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Reasons why sending with Exim can be slow?

2001-07-31 Thread Antti Tolamo


What are they? Above apply only while sending from local network.

It's not a hosts, problem and I don't run it from inetd. No other
service has similar problems. I even reinstalled exim again.

It's not fault on OS's on local computer(unless it affects only port 25) as
I have 98/2000 on same computer, and both of them have same problem with mail.

All networking otherwise works perfectly from LAN to email server. Exim.conf
is same as before, I even recopied from backups my old one to be sure.

I'm bit puzzled.

Antti


My PGP public key: 
http://linux.tola.org/~chicken/antti_pgp.txt

--
Sex, rags and rock'n roll!
--






--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Reasons why sending with Exim can be slow?

2001-07-31 Thread Antti Tolamo

At 04:58 1.8.2001, you wrote:
On Wed, Aug 01, 2001 at 12:40:21AM +0300, Antti Tolamo wrote:
 All networking otherwise works perfectly from LAN to email server. Exim.conf
 is same as before, I even recopied from backups my old one to be sure.

Almost sounds like exim is trying to verify hostnames and IPs.  Is this what
you want to happen.  If so, came the machine properly reach a name server?

   bob


Yes it can. And like I said, all other networking(like web browsing) works perfectly
and mail sending works flawessly from server. Curiously, I went to sleep and during
night the whole problem disappereaded!

I rebooted windows computer before I started to ask about problem, tried two diffren
OS's, looked all settings linux server and just got perpexled. Has this something to 
do with conjuction of stars ??? 

But this is not first time similar has happened. By year of experience of stable 
potato, it seems
that about once a year networking connections mysteriously start to crawl and then 
revert back to
normal after a while. This time problem wasn't big. Last time all traffic started to 
crawl big time.

I have suspicion it has something to do with potato networking. First thought would be 
to find problems
in Windows. But somehow I've had some minor problems with from potato elsewhere too. I 
atleast remember
having some curious problems with potato network interface that conneects to 
internet(I use masq). Potato really stable to use, but I've got impression that 
sometimes it has some curious, minor problems with networking that go away after a 
while(or then I just have lot of problematic hardware). Or is it normal with servers?




 

Antti


My PGP public key: 
http://linux.tola.org/~chicken/antti_pgp.txt

--
Sex, rags and rock'n roll!
--






--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: exim and relaying

2001-07-31 Thread Antti Tolamo

At 04:58 1.8.2001, you wrote:
On Tue, Jul 31, 2001 at 09:15:01PM -0400, Peter Billson wrote:

  Is there a way to permit relaying some hosts only if the From:
  line is local?
  I mean, relay *.edu.uy only if From: *@fcien.edu.uy.
 
 Do you mean to accept the mail regardless of where it *actually* comes
 from as long as the From line *says* that it comes from edu.uy? That
 would be bad.

Nope. Relay .edu.uy domain only if the sender claims to be 
any [EMAIL PROTECTED]

It is a mix of Sendmail's relay_local_from .AND. relay_hosts = .edu.uy

-- 
Carlos Barros.

Have you looked at 

http://www.exim.org/exim-html-3.20/doc/html/spec.html

a sender_address_relay option? If understood correclty, if you
combine that hosts_accept_relay_, doesn't it drive the same thing?

Antti



Antti


My PGP public key: 
http://linux.tola.org/~chicken/antti_pgp.txt

--
Sex, rags and rock'n roll!
--






--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Little Exim questions

2001-07-28 Thread Antti Tolamo


I happen to have exim mailer for personal use, and I'm wondering
couple things. First, relaying mails through it seems somewhat slow.
I don't get bundles of mail all a time and I've used sendmail where
sending seemed to be faster. Any reasons why it might be slower or how
to get it faster in this respect?

Another thing, stopping and starting exim doesn't anymore seem to cause anykind
echo when starting from console. I've re-installed it few times, but still 
it doesn't give any report
is it started or off like before it did. Other programs do give. Anybody 
know reason for this
kind of behaviour?




--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Little Exim questions

2001-07-28 Thread Antti Tolamo


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

At 04:04 29.7.2001, you wrote:


Antti Tolamo wrote:


Another thing, stopping and starting exim doesn't anymore seem to cause 
anykind
echo when starting from console. I've re-installed it few times, but 
still it doesn't give any report
is it started or off like before it did. Other programs do give. Anybody 
know reason for this
kind of behaviour?
Just to check, do you mean:
 /etc/init.d/exim start

This may not echo anything if exim is started from inetd.  In this case, 
the script exits silently.  See about 4 lines down in /etc/init.d/exim .  Also
 grep smtp /etc/inetd.conf
to see if smtpd is commented out

HTH

--
Sanjeev Gupta
Brainbench Linux MVP

Thanks. Solved all my problems at once. So far as I've installed exim, it 
never has
been set to use inetd, so I didn't guess to look for that.

Antti

Antti


My PGP public key:
http://linux.tola.org/~chicken/antti_pgp.txt

- --
Sex, rags and rock'n roll!
- --





-BEGIN PGP SIGNATURE-
Version: PGPfreeware 7.0.3 for non-commercial use http://www.pgp.com

iQA/AwUBO2OP+2VO2H2MX1wvEQI88QCeIYmSrywzGIUaGNIJ+0hUe0rYxpQAnRbM
YbzdzOmyq4kR4kyWIl079PY7
=1Hb/
-END PGP SIGNATURE-


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: My ISP Proxy and ipchains

2001-01-27 Thread Antti Tolamo

At 13:00 27.1.2001, you wrote:
Antti

this is not normall ip chains behavior.  You should have full use of
services from your local network if your gateway box is setup correctly.

ipchains on this box should have a forwarding rule along the lines of
ipchains -A forward -i ppp0 -j MASQ


Well, I have following and it works just fine:

IPCHAINS -A forward -s 192.168.1.0/24 -d $Any -i eth0 -j MASQ

I have Nokia M1122 ADSL router.


changing the "ppp0" for the adsl interface name (gateway interface)

The other thing to do is enable ip forwarding in networking setup .

-Matt


Has been done long time. Masq doens't work without it.
Far as I can tell, everything works just fine with Masq, except
problem with Proxy and with some forms that send information.

It is not browser problem because Netscape and IE both have it.
With previous ISP who had transparent proxy, problem didn't exist.

But like I said, proxy it works without Masq just fine, so I'm not
pointing to ISP yet.



Antti


- Original Message -----
From: "Antti Tolamo" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, January 26, 2001 7:24 AM
Subject: My ISP Proxy and ipchains


  Hello,
 
  I have Debian 2.2 potato that works as
  a server for my small Windows homenetwork.
 
  I use with potato ipchains to do IP masquerade and
  a firewall. I have ADSL connection to net.
 
  My problem is this:
 
  My ISP proxy works well - except if I connect
  to it through masquerading from local network.
  Then webmail forms and similar don't work anymore.
  I can't for example send mail.
 
  Otherwise through Squid or directley from Linux
  everything works like it should. Fixing firewall
  rules does not make any diffrence.
 
  Is this normal ipchains masquerade behaviour
  or I'm missing something?
 
  Regards,
 
  ANtti
 
 
  --
  To UNSUBSCRIBE, email to [EMAIL PROTECTED]
  with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]