Router with 2 internet connections

2007-03-30 Thread Kevin Glick
I've got a BSD router with two internet connections:
dc0 (DSL) and dc1 (Cable)

I also have an internal nic:
rl0 (192.168.0.1)

I've got PF setup and running nat.  What I need to know is this;
Can I easily route all outbound traffic from 192.168.0.2 - 192.168.0.250 out
the dc1 interface, AND route traffic from 192.168.0.251 - 192.168.0.254 out
the dc0 interface with PF and something else?

Currently, PF redirects the traffic correctly, however, the traffic from the
upper block goes out the default route (gateway of dc1).  So the traffic
never comes back.

I guess the problem is that I'm sending the nat'd packets out as the IP of
dc0, but they're being send out dc1.

Make sense?  Anybody follow this, and have a useful suggestion?

--
Kevin Glick

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: 10-13 laptop. Where to buy?

2004-10-26 Thread Kevin Glick

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-freebsd-
 [EMAIL PROTECTED] On Behalf Of Michael Johnson
 Sent: Monday, October 25, 2004 7:27 PM
 To: [EMAIL PROTECTED]
 Subject: 10-13 laptop. Where to buy?
 
 Hi,
   I'm looking for a x86 laptop with a 10 to 13 screen but its very
 hard
 to find one under 14
 anyone have any ideas of where to look?
 
 Michael
Check out Fujitsu's P-series notebooks.  10.2 screen with a max resolution
of 1280x768.  I've got a 2040 with 5.2.1 running on it.  XFree86 is a
no-brainer to setup.  The new P7000/P7000D are pretty well loaded, compact
and light, even with the long-life battery.

http://webshop.fujitsupc.com/fpc/Ecommerce/buildseriesbean.do?series=P7

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


ODBC

2004-10-25 Thread Kevin Glick
I'm hoping somebody else has done this, and can point me in the right
direction.  The company I work for has an NCR Unix machine that runs some
COBOL applications, and stores the information in a database that they refer
to as vision files (I'm not familiar with that at all).  We have a Windows
PC that is used for shipping, with an ODBC link to the NCR.  The software
used for that connection is AcuODBC.

We're going to be putting a web server together soon, and I'd like to use
FreeBSD instead of Windows Server.  My question is, does anybody know if
there is an ODBC driver for FreeBSD to connect to whatever database type
COBOL/vision uses?  The website will be written in PHP, if that helps.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]





___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Java under Opera 7.54?

2004-10-21 Thread Kevin Glick


 FreeBSD 5.2.1, Opera 7.54, and I did try pointing Opera to my
 existing Java path, /usr/local/linux-sun-jdk1.4.2/jre/lib/i386/

I'm not sure that the FreeBSD version of Opera will work with the
Linux version of the jre (don't hold me to that).  But, since you
have the Linux jre installed, that works with what I was going to
suggest anyway.

I've been using Opera exclusively for a couple years under FreeBSD,
and prefer it to all other browsers.  With that said, I've had more
success running the linux-opera port.  With it and the Linux versions
of java, flash and Acroread, it's the best I've found.  I've never
gotten pdf or flash support working under the FreeBSD native version,
but the Linux version with the Linux counterparts has worked perfectly.

Just another option for you.


Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED] 



___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Aterm cut-and-paste was Re: Rid of those Windows Desktops!

2004-10-21 Thread Kevin Glick
 snip
 
 I'm using a laptop but I do have a wheel mouse I can plug in. I'll
 tinker with it some tonight with both the laptop mouse pad and the
 wheel mouse and see what I come up with. I'll let you know how it
 goes.
Look at the chord option for your X config.  Pressing both
buttons at the same time will act as a third button on a 2-button
mouse, and will work as a paste function in X.

For X.org:
Option ChordMiddle
For XFree86:
Option Emulate3Buttons

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Mounting data CD

2004-10-20 Thread Kevin Glick
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Steven Friedrich
 Sent: Wednesday, October 20, 2004 9:17 AM
 To: [EMAIL PROTECTED]
 Subject: Mounting data CD
 
 I'm trying to mount a data CD as a normal user.  It works 
 fine as root, but I 
 want average users to be able to do it.
 
 Here's the session:
 % mount_cd9660 /dev/acd0c /cdrom
 mount_cd9660: /dev/acd0c: Operation not permitted
 % mount_cd9660 /dev/acd0c /mnt
 mount_cd9660: /dev/acd0c: Operation not permitted

Normal users don't have permissions to mount to /cdrom or /mnt.
They should be able to mount in their home directory.  You might
want to look into sudo in the ports.  It allows users to run
commands as root.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Mounting data CD

2004-10-20 Thread Kevin Glick
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Steven Friedrich
 Sent: Wednesday, October 20, 2004 9:17 AM
 To: [EMAIL PROTECTED]
 Subject: Mounting data CD
 
 I'm trying to mount a data CD as a normal user.  It works 
 fine as root, but I 
 want average users to be able to do it.
 
 Here's the session:
 % mount_cd9660 /dev/acd0c /cdrom
 mount_cd9660: /dev/acd0c: Operation not permitted
 % mount_cd9660 /dev/acd0c /mnt
 mount_cd9660: /dev/acd0c: Operation not permitted
 
And, if I'd read your message better the first time, I would
have noticed that you're getting the error from the mount
command, and not the directory.  You definitely want to look
at sudo.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Two faced FreeBSD - or is that two headed?

2004-10-20 Thread Kevin Glick
  Say bye bye to DRI/GLX if you decide to go multi-head. It 
  wont work, thats the downside I suppose, otherwise its great.

I beg to differ, it works fine.  I used a GeForce MX440, with
dual VGA outputs to two 21 monitors, and ran many GL apps
across both monitors.  Quake 3 at 3200x1200 is pretty cool.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: ifconfig alias: File Exists

2004-10-19 Thread Kevin Glick
 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of 
 Marc G. Fournier
 Sent: Tuesday, October 19, 2004 12:28 PM
 To: [EMAIL PROTECTED]
 Subject: ifconfig alias: File Exists
 
 
 Why would I be getting:
 
 # ifconfig fxp0 alias 200.46.204.9
 ifconfig: ioctl (SIOCAIFADDR): File exists
 
 when I know for a fact that it hasn't been configured?
 
 # ping 200.46.204.9
 PING 200.46.204.9 (200.46.204.9): 56 data bytes
 ^C
 --- 200.46.204.9 ping statistics ---
 1 packets transmitted, 0 packets received, 100% packet loss
 
 there is nothing even in my arp cache:
 
 # arp -a | grep (200.46.204.9)
 # arp -a | grep (200.46.204.91)
 zer01.net (200.46.204.91) at 00:e0:81:21:d7:f6 on fxp0 [ethernet]
 
 
 Marc G. Fournier   Hub.Org Networking Services 
 (http://www.hub.org)
 Email: [EMAIL PROTECTED]   Yahoo!: yscrappy 
  ICQ: 7615664

What does the output of ifconfig fxp0 show before you try the alias?

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: IPFW NATD

2004-10-14 Thread Kevin Glick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian 
Sent: Thursday, October 14, 2004 11:01 AM
To: 'FreeBSD Questions'
Subject: IPFW NATD

Hi

I'm trying to setup natd to port forward to a http,ftp and vnc server behind
the natd box

But I only want a customer from their static ip address to be able to login
and block everything else

Is this possible in an natd enviroment?

Any examples?

Port forwarding works ok, I just can't figure out the rules to stop everyone
and allow this one client

Cheers

Brian

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.773 / Virus Database: 520 - Release Date: 05/10/2004
 

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]



Brian,
If you've got the portforwarding working, then a few IPFW rules will add the
security you're looking for.  If your divert rule is number 100, then add a
few rules above it, like this:

ipfw add 50 skipto 100 tcp from [static.ip.of.customer] to
[public.ip.of.nat.box] 80
ipfw add 51 skipto 100 tcp from [static.ip.of.customer] to
[public.ip.of.nat.box] 21
ipfw add 52 skipto 100 tcp from [static.ip.of.customer] to
[public.ip.of.nat.box] [VNC port]
ipfw add 53 deny tcp from any to [public.ip.of.nat.box] 80
ipfw add 54 deny tcp from any to [public.ip.of.nat.box] 21
ipfw add 55 deny tcp from any to [public.ip.of.nat.box] [VNC port]


The first three rules pass the traffic from the specified IP, to the divert
rule, to natd, and get portforwaded.  Any other traffic on those ports get
blocked, and doesn't get diverted.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: how do I suppress system messages?

2004-10-13 Thread Kevin Glick
Lynette,

System messages print out to the console on tty0 only, by default.  If you
want to use the console, switch to tty1 or above.  Do this by ALT+2(tty1),
ALT+3(tty2), etc.
When you're in Vi, and syslog prints across the screen, using CTRL+L will
re-draw the screen, and remove the syslog messages.
If you want to get rid of the messages altogether, look into disabling
syslogd, via /etc/rc.conf.  (Man syslogd, or check /etc/defaults/rc.conf for
syslogd.

Kevin Glick
ITS Manager
Sterling Business Forms
[EMAIL PROTECTED]


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Lynette Tillner
Sent: Wednesday, October 13, 2004 11:21 AM
To: [EMAIL PROTECTED]
Subject: how do I suppress system messages?

This is something that drives me crazy but I've not been able to find a way
to stop it. 

When I log into my FreeBSD 4.6 Web Server as root, I get messages from
sendmail that I can't suppress with dmesg.  They are a real pain because
they even come across the screen when I'm using VI to edit files and then I
can't figure out the line I was in the middle of editing, and end up doing a
:q! and starting over, very frustrating because we get tons of mail and it
seems like I can't do anything as root because of these messages. 

Is there a command that will suppress the messages?   I remember being able
to do that when I was working on an HP-UX system but haven't figured it out
under FreeBSD.

Thanks for any help!

Lynette
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-newbies
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: Quickie... Hopefully!

2004-10-01 Thread Kevin Glick
Richard,

I've done the same thing a few times.  To get the full description, check
the ifconfig man page and look for alias.  There's two problems with doing
this: first, BSD can't have two default routes.  Windows allows you to set
two default gateways, and it works because of the Route Discovery built
into it (this is why a windows machine can use a gateway that's not on it's
local subnet...but, that's another topic).  Second, if you've got servers
set to listen only on a specific IP (apache, etc) it still won't work, even
with the alias.

Example:
1.1.1.1-1.1.1.255 --from ISP #1 \
/- 1.1.1.2
--hub/switch -- FreeBSD fxp0 
2.2.2.1-2.2.2.255 --from ISP #2 /
\- 2.2.2.2

In the crude diagram above, both ISPs feeds end up coming into a hub/switch
that your BSD machine is plugged into.  The normal ifconfig on the device is
1.1.1.2 netmask 255.255.255.0.  You would then: ifconfig fxp0 inet 2.2.2.2
netmask 255.255.255.0 alias the device.  This will work, as long as routing
is setup correctly.  Any request for 2.2.2.2 from anywhere in the world
would end up at the same machine/interface as a request for 1.1.1.2.  The
problem lies in getting data out with the aliased address.  The default
route on the machine would be 1.1.1.1 and all traffic goes there.  If you
have specific traffic that you want to go out with the 2.2.2.2 address,
you'd have to add routes for each DESTINATION IP:  route add -net 3.3.3.3
-netmask 255.255.255.0 2.2.2.1 and so on.  BSD isn't smart enough to do
source based routing.  So the traffic will come into 2.2.2.2 via ISP #2, but
the replies/ACKs will go out via ISP #1.  Any traffic generated from the
machine, without a specified SOURCE IP will go out as 1.1.1.2, and get sent
via the 1.1.1.1 gateway.

The other problem with the diagram above is that you've got two subnets
running on the same lan, which breaks most rules of networking.  This can be
remedied with a few vlans, but again, that's another topic.

Hope this helps.  I'm sure most of this info is correct, but I'm more than
willing to have somebody set me straight.

Kevin Glick
ITS Manager
[EMAIL PROTECTED]
Sterling Business Forms


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Marriner
Sent: Friday, October 01, 2004 3:25 PM
To: [EMAIL PROTECTED]
Subject: Quickie... Hopefully!

Dear list,

   Just wondering if there is anyway (preferably simple.) to have two ip
addresses on the same NIC that are different networks.  

A little background.  We are in the process of changing ISPs, we now have
two circuits going to two differnet ISPs.  Because of this change we have to
renumber our entire network.  Being an ISP ourselves we have a handful of
servers that run FreeBSD.  While trying to get one of our test servers to
talk to both networks from the internet we fail, I think because even though
your request is on the new numbers FreeBSD still trys routing the response
back through our old gateway.  Another question, I know in Windows XP you
can set two gateways, two ips, etc.  Can you do this in FBSD?   Our windows
boxes are talking fine on both networks.

Any help or suggestions appreciated...

   Richard Dean Marriner II
SYIX.COM  --=--  Network Administrator
530-755-1751x206 - richard at syix.com

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]