Router with 2 internet connections
I've got a BSD router with two internet connections: dc0 (DSL) and dc1 (Cable) I also have an internal nic: rl0 (192.168.0.1) I've got PF setup and running nat. What I need to know is this; Can I easily route all outbound traffic from 192.168.0.2 - 192.168.0.250 out the dc1 interface, AND route traffic from 192.168.0.251 - 192.168.0.254 out the dc0 interface with PF and something else? Currently, PF redirects the traffic correctly, however, the traffic from the upper block goes out the default route (gateway of dc1). So the traffic never comes back. I guess the problem is that I'm sending the nat'd packets out as the IP of dc0, but they're being send out dc1. Make sense? Anybody follow this, and have a useful suggestion? -- Kevin Glick ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: 10-13 laptop. Where to buy?
-Original Message- From: [EMAIL PROTECTED] [mailto:owner-freebsd- [EMAIL PROTECTED] On Behalf Of Michael Johnson Sent: Monday, October 25, 2004 7:27 PM To: [EMAIL PROTECTED] Subject: 10-13 laptop. Where to buy? Hi, I'm looking for a x86 laptop with a 10 to 13 screen but its very hard to find one under 14 anyone have any ideas of where to look? Michael Check out Fujitsu's P-series notebooks. 10.2 screen with a max resolution of 1280x768. I've got a 2040 with 5.2.1 running on it. XFree86 is a no-brainer to setup. The new P7000/P7000D are pretty well loaded, compact and light, even with the long-life battery. http://webshop.fujitsupc.com/fpc/Ecommerce/buildseriesbean.do?series=P7 Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
ODBC
I'm hoping somebody else has done this, and can point me in the right direction. The company I work for has an NCR Unix machine that runs some COBOL applications, and stores the information in a database that they refer to as vision files (I'm not familiar with that at all). We have a Windows PC that is used for shipping, with an ODBC link to the NCR. The software used for that connection is AcuODBC. We're going to be putting a web server together soon, and I'd like to use FreeBSD instead of Windows Server. My question is, does anybody know if there is an ODBC driver for FreeBSD to connect to whatever database type COBOL/vision uses? The website will be written in PHP, if that helps. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Java under Opera 7.54?
FreeBSD 5.2.1, Opera 7.54, and I did try pointing Opera to my existing Java path, /usr/local/linux-sun-jdk1.4.2/jre/lib/i386/ I'm not sure that the FreeBSD version of Opera will work with the Linux version of the jre (don't hold me to that). But, since you have the Linux jre installed, that works with what I was going to suggest anyway. I've been using Opera exclusively for a couple years under FreeBSD, and prefer it to all other browsers. With that said, I've had more success running the linux-opera port. With it and the Linux versions of java, flash and Acroread, it's the best I've found. I've never gotten pdf or flash support working under the FreeBSD native version, but the Linux version with the Linux counterparts has worked perfectly. Just another option for you. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Aterm cut-and-paste was Re: Rid of those Windows Desktops!
snip I'm using a laptop but I do have a wheel mouse I can plug in. I'll tinker with it some tonight with both the laptop mouse pad and the wheel mouse and see what I come up with. I'll let you know how it goes. Look at the chord option for your X config. Pressing both buttons at the same time will act as a third button on a 2-button mouse, and will work as a paste function in X. For X.org: Option ChordMiddle For XFree86: Option Emulate3Buttons Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Mounting data CD
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Friedrich Sent: Wednesday, October 20, 2004 9:17 AM To: [EMAIL PROTECTED] Subject: Mounting data CD I'm trying to mount a data CD as a normal user. It works fine as root, but I want average users to be able to do it. Here's the session: % mount_cd9660 /dev/acd0c /cdrom mount_cd9660: /dev/acd0c: Operation not permitted % mount_cd9660 /dev/acd0c /mnt mount_cd9660: /dev/acd0c: Operation not permitted Normal users don't have permissions to mount to /cdrom or /mnt. They should be able to mount in their home directory. You might want to look into sudo in the ports. It allows users to run commands as root. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Mounting data CD
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven Friedrich Sent: Wednesday, October 20, 2004 9:17 AM To: [EMAIL PROTECTED] Subject: Mounting data CD I'm trying to mount a data CD as a normal user. It works fine as root, but I want average users to be able to do it. Here's the session: % mount_cd9660 /dev/acd0c /cdrom mount_cd9660: /dev/acd0c: Operation not permitted % mount_cd9660 /dev/acd0c /mnt mount_cd9660: /dev/acd0c: Operation not permitted And, if I'd read your message better the first time, I would have noticed that you're getting the error from the mount command, and not the directory. You definitely want to look at sudo. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Two faced FreeBSD - or is that two headed?
Say bye bye to DRI/GLX if you decide to go multi-head. It wont work, thats the downside I suppose, otherwise its great. I beg to differ, it works fine. I used a GeForce MX440, with dual VGA outputs to two 21 monitors, and ran many GL apps across both monitors. Quake 3 at 3200x1200 is pretty cool. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: ifconfig alias: File Exists
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc G. Fournier Sent: Tuesday, October 19, 2004 12:28 PM To: [EMAIL PROTECTED] Subject: ifconfig alias: File Exists Why would I be getting: # ifconfig fxp0 alias 200.46.204.9 ifconfig: ioctl (SIOCAIFADDR): File exists when I know for a fact that it hasn't been configured? # ping 200.46.204.9 PING 200.46.204.9 (200.46.204.9): 56 data bytes ^C --- 200.46.204.9 ping statistics --- 1 packets transmitted, 0 packets received, 100% packet loss there is nothing even in my arp cache: # arp -a | grep (200.46.204.9) # arp -a | grep (200.46.204.91) zer01.net (200.46.204.91) at 00:e0:81:21:d7:f6 on fxp0 [ethernet] Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy ICQ: 7615664 What does the output of ifconfig fxp0 show before you try the alias? Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: IPFW NATD
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Sent: Thursday, October 14, 2004 11:01 AM To: 'FreeBSD Questions' Subject: IPFW NATD Hi I'm trying to setup natd to port forward to a http,ftp and vnc server behind the natd box But I only want a customer from their static ip address to be able to login and block everything else Is this possible in an natd enviroment? Any examples? Port forwarding works ok, I just can't figure out the rules to stop everyone and allow this one client Cheers Brian --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.773 / Virus Database: 520 - Release Date: 05/10/2004 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Brian, If you've got the portforwarding working, then a few IPFW rules will add the security you're looking for. If your divert rule is number 100, then add a few rules above it, like this: ipfw add 50 skipto 100 tcp from [static.ip.of.customer] to [public.ip.of.nat.box] 80 ipfw add 51 skipto 100 tcp from [static.ip.of.customer] to [public.ip.of.nat.box] 21 ipfw add 52 skipto 100 tcp from [static.ip.of.customer] to [public.ip.of.nat.box] [VNC port] ipfw add 53 deny tcp from any to [public.ip.of.nat.box] 80 ipfw add 54 deny tcp from any to [public.ip.of.nat.box] 21 ipfw add 55 deny tcp from any to [public.ip.of.nat.box] [VNC port] The first three rules pass the traffic from the specified IP, to the divert rule, to natd, and get portforwaded. Any other traffic on those ports get blocked, and doesn't get diverted. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: how do I suppress system messages?
Lynette, System messages print out to the console on tty0 only, by default. If you want to use the console, switch to tty1 or above. Do this by ALT+2(tty1), ALT+3(tty2), etc. When you're in Vi, and syslog prints across the screen, using CTRL+L will re-draw the screen, and remove the syslog messages. If you want to get rid of the messages altogether, look into disabling syslogd, via /etc/rc.conf. (Man syslogd, or check /etc/defaults/rc.conf for syslogd. Kevin Glick ITS Manager Sterling Business Forms [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lynette Tillner Sent: Wednesday, October 13, 2004 11:21 AM To: [EMAIL PROTECTED] Subject: how do I suppress system messages? This is something that drives me crazy but I've not been able to find a way to stop it. When I log into my FreeBSD 4.6 Web Server as root, I get messages from sendmail that I can't suppress with dmesg. They are a real pain because they even come across the screen when I'm using VI to edit files and then I can't figure out the line I was in the middle of editing, and end up doing a :q! and starting over, very frustrating because we get tons of mail and it seems like I can't do anything as root because of these messages. Is there a command that will suppress the messages? I remember being able to do that when I was working on an HP-UX system but haven't figured it out under FreeBSD. Thanks for any help! Lynette ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-newbies To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Quickie... Hopefully!
Richard, I've done the same thing a few times. To get the full description, check the ifconfig man page and look for alias. There's two problems with doing this: first, BSD can't have two default routes. Windows allows you to set two default gateways, and it works because of the Route Discovery built into it (this is why a windows machine can use a gateway that's not on it's local subnet...but, that's another topic). Second, if you've got servers set to listen only on a specific IP (apache, etc) it still won't work, even with the alias. Example: 1.1.1.1-1.1.1.255 --from ISP #1 \ /- 1.1.1.2 --hub/switch -- FreeBSD fxp0 2.2.2.1-2.2.2.255 --from ISP #2 / \- 2.2.2.2 In the crude diagram above, both ISPs feeds end up coming into a hub/switch that your BSD machine is plugged into. The normal ifconfig on the device is 1.1.1.2 netmask 255.255.255.0. You would then: ifconfig fxp0 inet 2.2.2.2 netmask 255.255.255.0 alias the device. This will work, as long as routing is setup correctly. Any request for 2.2.2.2 from anywhere in the world would end up at the same machine/interface as a request for 1.1.1.2. The problem lies in getting data out with the aliased address. The default route on the machine would be 1.1.1.1 and all traffic goes there. If you have specific traffic that you want to go out with the 2.2.2.2 address, you'd have to add routes for each DESTINATION IP: route add -net 3.3.3.3 -netmask 255.255.255.0 2.2.2.1 and so on. BSD isn't smart enough to do source based routing. So the traffic will come into 2.2.2.2 via ISP #2, but the replies/ACKs will go out via ISP #1. Any traffic generated from the machine, without a specified SOURCE IP will go out as 1.1.1.2, and get sent via the 1.1.1.1 gateway. The other problem with the diagram above is that you've got two subnets running on the same lan, which breaks most rules of networking. This can be remedied with a few vlans, but again, that's another topic. Hope this helps. I'm sure most of this info is correct, but I'm more than willing to have somebody set me straight. Kevin Glick ITS Manager [EMAIL PROTECTED] Sterling Business Forms -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Marriner Sent: Friday, October 01, 2004 3:25 PM To: [EMAIL PROTECTED] Subject: Quickie... Hopefully! Dear list, Just wondering if there is anyway (preferably simple.) to have two ip addresses on the same NIC that are different networks. A little background. We are in the process of changing ISPs, we now have two circuits going to two differnet ISPs. Because of this change we have to renumber our entire network. Being an ISP ourselves we have a handful of servers that run FreeBSD. While trying to get one of our test servers to talk to both networks from the internet we fail, I think because even though your request is on the new numbers FreeBSD still trys routing the response back through our old gateway. Another question, I know in Windows XP you can set two gateways, two ips, etc. Can you do this in FBSD? Our windows boxes are talking fine on both networks. Any help or suggestions appreciated... Richard Dean Marriner II SYIX.COM --=-- Network Administrator 530-755-1751x206 - richard at syix.com ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]