Re: [ilugd] pop on public network

2003-08-19 Thread Robins Tharakan
hi,

 There are many methods of achieving secure authentication already, such
 as APOP, KPOP, and IMAP. 
 You can also do Secure POP via SSH. there is a mini HOWTO available on
 the subject.
 But Your mail provider may be unable or unwilling to use a more secure
 protocol. 
exactly!

i have two email servers...
net4india.com and vsnl.com

i tried with evolution and both don't (seemingly) support
IMAP/SSL/APOP/etc... only POP3 on both...

this basically leaves out only the ssh tunneling option.

i have managed a system based in US which is although slow, atleast can
provide a ssh login!
the only problem is that when i do a 

ssh -L 56110:pop.net4india.com:110 somebody.us.net
-L56025:smtp.net4india.com:25 -C

a few questions:

1. now this always asks for a password. Cant i make this automatic? i
mean i give a script in /etc/rc.local (with a password) for once when
the system boots, and this connection stays on?

2. is that advisable? because my system stays on for 10-12 hours, does
the ssh connection die out due to no transmission?? 

affly
rbs


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] pop on public network

2003-08-19 Thread Raj Mathur
 Robins == Robins Tharakan [EMAIL PROTECTED] writes:

Robins [snip]

Robins ssh -L 56110:pop.net4india.com:110 somebody.us.net
Robins -L56025:smtp.net4india.com:25 -C

Ah!  You' have managed to defer snooping of the password from your
local LAN to the LAN the US server is on.  Don't forget, the password
will still be sent in clear-text from the SSH server to the POP3
server.

-- Raju
-- 
Raj Mathur[EMAIL PROTECTED]  http://kandalaya.org/
   GPG: 78D4 FC67 367F 40E2 0DD5  0FEF C968 D0EF CC68 D17F
  It is the mind that moves

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


[ilugd] Client Machine's IP in PHP

2003-08-19 Thread HASH BABA
Hii All ,

  I Think My problem is  so simple ,though i can't solve it , 
becoz i don't know how to program in PHP.

well , Problem is that , My PHP script installed  in  a webserver 
,I just want that whenever client request for that script,Script 
should return the IP address of client machine.In other word we 
can say that PHP Script should return the IP address of evey 
machine , where it runs.

I use getenv('REMOTE_ADDR'); function , but it returns the IP 
address of server instaed of Client .

well if all of you have understand my problem then help me
Thanks in advance.
Ritesh
___
Meet your old school or college friends from
1 Million + database...
Click here to reunite www.batchmates.com/rediff.asp


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Client Machine's IP in PHP

2003-08-19 Thread Spoonman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, Aug 19, 2003 at 07:04:33AM -, HASH  BABA wrote:
HASHwell , Problem is that , My PHP script installed  in  a webserver 
HASH,I just want that whenever client request for that script,Script 
HASHshould return the IP address of client machine.In other word we 
HASHcan say that PHP Script should return the IP address of evey 
HASHmachine , where it runs.
Where it runs? or IP of the person who visits your script?

$ip = getenv (REMOTE_ADDR); // get the ip number of the user

uf this dsnt work probably you have an old version of PHP
installed. try this instead

function getIP() 
{
$ip;

if (getenv(HTTP_CLIENT_IP))
$ip = getenv(HTTP_CLIENT_IP);
else if(getenv(HTTP_X_FORWARDED_FOR))
$ip = getenv(HTTP_X_FORWARDED_FOR);
else if(getenv(REMOTE_ADDR))
$ip = getenv(REMOTE_ADDR);
else
$ip = UNKNOWN;
return $ip;

}

$ip=getIP(); //will call the function to get the ip of the user

hope it helps.

- -- 
all the things we keep inside,
are the things that really matter,
the face puts on its best disguise,
and all is well, until the heart betrays.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/QdM17v3NbZTFJeIRAvcPAKDZ0fU+D17FSnfQvv4h1ZYtj8jGvQCgnE+g
C/hWid/Gtd68exnpDwC9cxs=
=c1Xx
-END PGP SIGNATURE-

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Query Linux Users Meeting

2003-08-19 Thread Spoonman
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Aug 18, 2003 at 11:10:07PM -0700, shyam kapoor wrote:
shyam 
shyamPlease DELETE me from the mailing list.
you have been erased.

you have been subscribed to alt.animal-husbandry insteead.
mails that you start getting from now will probably suit your taste
and intrests.
Thanks

Dumbo click here- http://frodo.hserus.net/mailman/listinfo/ilugd
- -- 
all the things we keep inside,
are the things that really matter,
the face puts on its best disguise,
and all is well, until the heart betrays.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/QdSu7v3NbZTFJeIRAgULAKC3exAzWcT3m7JC/HtwRfn1Dlw8OACg6cMY
C83AV+HFy/ZyIxe5eVS0S2M=
=sMkc
-END PGP SIGNATURE-

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Re: microsoft uses linux

2003-08-19 Thread Arindam Dey
On Tue, 2003-08-19 at 15:33, Sandip Bhattacharya wrote:
 +++ Spoonman [19/08/03 02:38 +0530]:
  -BEGIN PGP SIGNED MESSAGE-
   On Friday Microsoft changed its DNS so that requests for
   www.microsoft.com no longer resolve to machines on Microsofts own
   network, but instead are handled by  the Akamai caching system, which
   runs Linux.
   
   
  http://news.netcraft.com/archives/2003/08/17/wwwmicrosoftcom_runs_linux_up_to_a_point_.html
 
 As the site points out:
 
 http://uptime.netcraft.com/up/graph?site=www.microsoft.com
 
 Reports:
 
 The site www.microsoft.com  is running Microsoft-IIS/6.0 on Linux.
 
 :
 
 
 - Sandip
In light of the above discussion...

http://www.theregister.co.uk/content/4/32385.html

-- 
Arindam Dey

The mind is not a vessel to be filled
but a fire to be kindled.

GPG FPR: B8E3 219E F129 F970 F4A7  BC50 9636 504A BEDF 5739


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Re: Time Lag in Linux...

2003-08-19 Thread Shuvam Misra
 My machine is a stand alone one and is not connected to LAN or internet..
 SO i  cannot use a time server to sync the time
 Also i changed the CMOS battery only recently

Well, worst-case, I've seen faulty motherboards which have a
malfunctioning clock. On one or two occasions, the only way we could fix
it was by replacing the motherboard.

Shuvam


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Re: Time Lag in Linux...

2003-08-19 Thread J.Mohamed Zahoor


LinuxLingam wrote:

it is also not necessary for the pc to be 'old' for the CMOS battery to fail. 
other possible reasons;

1) CMOS battery drained if its a recycled/recharged type peddled by some 
shady guy.

2) drained due to a shortage or leakage.

I changed the CMOS battery recently!!!

3) if you have those horrendous PCs that never really poweroff, as in HARD 
OFF. they tend to look like they've all shut down, but one press on the 
keyboard and they can powerup again, called a soft on. well, if you have the 
sense of physically pulling out the power cable from the socket so the PC 
won't fry while its offically switched off (happens far more frequently than 
you can imagine) the CMOS battery gets drained more rapidly.

nevertheless, i never expect any CMOS-based timing system to be 'mission 
critical' on the usual i386-type architecture. as ghane rightly points out, 
you need serious hardware for that kind of thing, or an always on, high-speed 

OK... some background about my application
We develop s/w and hardware for a small, indegeneously developed telephone
exchange . The main call processing s/w runs on a i386 PC which
is connected to the exchange through some properitary h/w to the main 
exchange.
All the events are controlled and triggered through our s/w. We selected 
linux as OS
long time back when linux was in its infancy..  This PC is not connected 
to external world
by any means.. As this call processing s/w does all the main 
functinalities.. it is absolutely
necessary to sync the time to real time. And also the application is 
expected to run
for days along continusoly

So i cannot use any other time server to sync the time

Any other input...!!!

./zahoor



___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] shell command in linux

2003-08-19 Thread MALKIAT BENIPAL
Is ILUGD meant only for the purpose of  baat ka batangar . Are bhai raat gayi 
baat gayi. If you have a solution for my problem then pl. let me know why wasting 
yours and mine precious time.
 
malkiat

Robins Tharakan [EMAIL PROTECTED] wrote:
:D 
LOL

rbs

On Mon, 2003-08-18 at 18:32, LinuxLingam wrote:
  Dear all,
  malkiat

 hey malkiat, you sharing your email account with someone else again, eh?
 ?
 LL



___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


MALKIAT S. BENIPAL


-
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


RE: [ilugd] NAT DNS on 7.2 ? URGENT !

2003-08-19 Thread Shailesh J. Kumar
Hi,

I am a little new to Linux and don't know much of it in details, so I am doing as 
instructed.

I have tried the same with Red Hat 9.0 and installed all the packages and everything. 
But it seems that the problem does not get resolved easily, as I am getting the same 
problem of the 1. Ipchains: Incompatible with this Kernel and 2. Ipchains: Protocol is 
not available

I have installed the Red Hat 9 version, which I got it in the DIGIT Aug 2003 magazine.

I did exactly as under.

Please go through it and tell me where did I go wrong.

Start of Message

Shailesh,

Try this.

1. Take two Ethernet cards (though u can do with one also, but for security purposes)

2. Put on eth0 your local network - lets say 192.168.1.* lets say - 192.168.1.1 (rest 
of your windoze cud be on 192.168.1.*)

3. Put on your eth1 for isp. Now if the isp gives permanent ip address, great, 
configure your eth1 for the same, if not, configure your eth1 to pick address 
dynamically. route add gw yr isp gw eth1

   3.a. If your eth1 is dynamic, then you will need to execute a script that 
automatically runs the route add command everytime it is brought up


4. to run name server, simply install bind, bindutils, caching-name server rpms (i 
would strongly recommend to upgrade to rh 9.0 since the original 7.2 has security 
punctured bind).

5. I assume you will need to run proxy, Install all rpms of squid on the server.For 
access control use squidguard.

6.In addition to this, if you would want internal systems to connect directly to the 
net, using your linux box as gw.
   6.a - to all machines on your lan make add the gateway as 192.168.1.1(ip of yr 
linux box)

   6.b - in all your machines on your lan, make the dns as 192.168.1.1(ip of yr linux 
box)

   6.c A simple and correct method would be to run the linux box as dhcp server (on 
eth0) and boot all windoze from this - so that the above config is not required on 
client side.
  6.d. execute -  echo 1  /proc/sys/net/ipv4/ip_forward  (this will allow your 
linux box to masq)

  6.e. Now you need to add rules so that your internal users can go outside ( i am 
assuming u r going to use ipchains in 7.2)
ipchains -F (flush)
ipchains -X (remove rules)
ipchains -A forward -s 192.168.1.0/255.255.255.0 -d 0.0.0.0/0.0.0.0 -j MASQ  (Allow 
all source 192.168.1.0 to talk to any outside 0.0.0.0/0.0.0.0)

You can ofcourse add more filters as you go along.

Thats it - you are on.

7. If you need people from outside to come into your network (gosh! Cant be dumber 
than this) u will need to add rules in reverse direction.

8. Use webmin, to configure above, it will make your life so much more simpler.


regards,
alok sinha

End of Messege
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Lokesh Bhog
Sent: Monday, August 18, 2003 10:15 PM
To: The Linux-Delhi mailing list
Subject: Re: [ilugd] NAT  DNS on 7.2 ?

Try using similar commands using iptables.


The error message seems to indicate that the settings
in kernel are not done
to support ipchains. Either.
a) Use redhat linux 9.0 or 7.3 or 8.0 with iptables
b) Use iptables instead of ipchains
c) Recompile the kernel and use ipchains.
d) It may be a problem on how you have installed linux
or are giving the
commands therefore, such error messages are appearing.
Please share what
commands you are giving.
e) Use redhat linux 7.1 - I had tested these things on
that version and it
used to work without any problem.

Lokesh
- Original Message -
From: Shailesh J. Kumar [EMAIL PROTECTED]
To: The Linux-Delhi mailing list
[EMAIL PROTECTED]
Sent: Monday, August 18, 2003 7:20 AM
Subject: RE: [ilugd] NAT  DNS on 7.2 ?


 Hi,

 I did the needful but was unable to do so coz of the
following error.

 When I flush the ipchains its giving an error
ipchains: Incompatible with
this Kernel

 And when I make an entry to the existing ipchains it
gives ipchains:
Protocol is not available

 I am using Red Hat 7.2 (Enigma) 2.4.7-10 #1 Thu Sep6
17:27:27 EDT 2001
i686

 How do I resolve the problem? I need to setup the
gateway system ASAP as
there is no backup and the Main router IOS got
Corrupt.

 Shailesh

 -Original Message-
 From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of
Alok Sinha
 Sent: Tuesday, August 12, 2003 5:35 PM
 To: The Linux-Delhi mailing list
 Subject: Re: [ilugd] NAT  DNS on 7.2 ?

 Shailesh,

 Try this.

 1. Take two ethernet cards (though u can do with one
also, but for
 security purposes)

 2. Put on eth0 your local network - lets say
192.168.1.* lets say -
 192.168.1.1 (rest of your windoze cud be on
192.168.1.*)

 3. Put on your eth1 for isp. Now if the isp gives
permanent ip address,
 great, configure your eth1 for the same, if not,
configure your eth1 to
 pick address dynamically.
 route add gw yr isp gw eth1

3.a. If your eth1 is dynamic, then you will need
to execute a script
 that automatically runs the route add command
everytime it is brought up



 4. to run name server, 

[ilugd] Chinese Govt to only use local software in theirapplications..

2003-08-19 Thread Viksit Gaur
Good News,

Maybe India can follow suit? How about creating
something about Indian OS software?

http://asia.cnet.com/newstech/applications/0,39001094,39146335,00.htm

--
vik

=
viksit gaur   http://viksit.tripod.com
[EMAIL PROTECTED]
[EMAIL PROTECTED]

Linux. The choice of a GNU generation. 
New eh?
I tried sniffing coke once, but the ice cubes seemed to get in the way...

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


RE: [ilugd] Time Lag in Linux...

2003-08-19 Thread Subrata

Hi,
Do you try to sync the date of this mac with any other mac as well ?

Subrat

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of J.Mohamed Zahoor
Sent: Monday, August 18, 2003 4:06 PM
To: Ilug-Delhi
Subject: [ilugd] Time Lag in Linux...


Hi all,

I am using RH linux 7.2 (kernel version 2.4.7-10). I am facing a problem
with time drift w.r.to real time.

Let me explaing this in detail
--

I set time using date command and then /sbin/clock -w to set
the RTC time as system time. I also run /sbin/clock -s to sync
system time with RTC using cron for every 1 hour.


RTC(cmos) SystemTime(linux)  Real Time(accurate digital watch)

11/08/2003  10:10:10 10:10:10   10:10:10
18/08/2003  10:10:24 10:10:24   10:10:10

After 7 days (system is continuously running), i find the difference
14 seconds over the real time.

This time lag cannot be accepted in if we have to use real time
applications which depends heavily on time.


Can someone tell me why there is a time lag...
If it cannot be compensated... is there a way to synchronize RTC/system time
with real timein Linux...!!!

I shall appreciate any help in this regard...

./zahoor



___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd



___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


[ilugd] 7 steps to software samadhi

2003-08-19 Thread LinuxLingam
hi bharat,

read your email with interest. especially the part on why you wish to migrate 
to gnuLinux.

i have discovered an insightful trend over the past few years:

1) those who *react* to the problems they face in the M$ soup of OS and 
applications, *rush* to gnuLinux, are totally dazzled and bewildered by the 
completely different paradigm, and sobered, crawl back to their M$, with a 
'been there, done that' attitude towards gnuLinux

2) those who *respond* to the problems they face in the claustrophobic and 
constrained world of M$ OS and applications, also realize M$ is really a 
small fraction, the visible aspect of the looming iceberg ahead, into which 
they crash. some aspects of the problems extend to almost all proprietory, 
non-freedom based software, on *any* platform.

those who *respond* to the problem, always migrate successfully.

so don't react, just respond. 

don't blame M$ or any other proprietory software company. Make your thirst 
for freedom, choices, of being responsible and in control of your computing, 
your real fuel.
the desire for 'muft' and 'mukt' software should be your fuel.


so how do you respond?
i call it the seven steps to software samadhi by linuxlingam.

step 1) get hold of a cd of gnuWin2
this cd contains freedom-based software for windoze.
install openoffice, mozilla(web browser), chat software, and other stuff for 
windows. start using them, taking files back and forth between these and your 
other software, until you feel quite familiar with these software.

step 2) get hold of a cd of knoppix.
this is a 'live' cd of gnulinux. pop it in your cdrom, boot the machine, and 
presto! your pc boots into gnuLinux, forgetting the windoze in your 'c:' 
drive. the entire operating system and soup sits in the ram of your machine, 
and works off the cd. explore knoppix, reding the helpful articles provided 
in the browser window. explore the applications, softare, and other stuff 
available on the cd.
you will find your openoffice, mozilla, and all other software, right there 
under knoppix, running under gnuLinux. so you have conquered half the 
battlefield already.
log off from knoppix, remove the cd from the hard drive, and reboot the 
machine, and you are back into the world of win doze. as if nothing happened.

step 3) at this point, if you feel you must migrate, buy a very good book on 
gnuLinux. i recommend peter norton, but you can go pick up a collection of 
books if you want,. this is always helpful. start reading the book, and 
playing with knoppix to understand the initial topics.

step 4) get hold of monkeyLinux, or dragonLinux, and install them into 
windoze! these are special versions of gnulinux that install in the start 
menu of windoze, but on running them, they actually give you a complete 
gnulinux os! so from within windows, you can use gnuLinux.

step 5) reading the book, and with help from mailing lists and friends, and 
tldp.org, yolinux.org, etc., learn how to partition your hard disk, and 
dual-boot it into windows and gnulinux. so you can use gnuLinux, and when you 
find you have to get back to windoze, or have to use that application not 
with an equivalent yet on gnulinux, use windoze.

step 6) configure your gnuLinux, to network with other win based machine on 
the network, to access your legacy win data over partitions, etc. make sure 
you do all your work more and more in gnuLinux alone.

step 7) my favourite one: the day you discover you don't boot into win for 
weeks, reformat the win partition, and free up space for more space for your 
data files, or install a second distribution of gnuLinux, or yet another 
alternative operating system, on your pc. and do go and distribute the cds of 
gnuWin and knoppix to your other colleagues as well.


so the essence:
migration is never instant. it happens in stages, and takes time, in days, 
weeks, or about 1 to 3 months to the outer-limit. 

enjoy the migration, it is a beautiful adventure in itself, and quite 
rewarding. it will teach you many new things.

happy gnulinux software samadhi.

:-)
LL

***
copyright 2003: LinuxLIngam. verbatim copying, distribution, and sharing of 
the above text is allowed in any media, so long as this notice is preserved.

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Re: Time Lag in Linux...

2003-08-19 Thread LinuxLingam
On Tuesday 19 August 2003 02:50 pm, you wrote:

 I changed the CMOS battery recently!!!

 OK... some background about my application
[snip]
 by any means.. As this call processing s/w does all the main
 functinalities.. it is absolutely
 necessary to sync the time to real time. And also the application is
 expected to run
 for days along continusoly

 So i cannot use any other time server to sync the time

 Any other input...!!!

 ./zahoor


must confess i am way out of my depth here. apart from the usual suggestions 
given by everybody else (1) use the latest hardware, (2) use the latest 
version of the kernel, optimized for your requirements.

strange, i have never really seen a test or a diagnostic tool that tests to 
see *if* the time-clock circuits on a motherboard are accurate, and how 
accurate. so use the idential software soup but on a different motherboard, 
all else equal, and see if it is a peculiar motherboard-related problem only.

anybody else has a solution to this problem?

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


RE: [ilugd] NAT DNS on 7.2 ? URGENT !

2003-08-19 Thread amit sharma
use the following at linux server :

--
echo 1  /proc/sys/net/ipv4/ip_forward
echo  Moved 1 to ip_forward  
iptables -t nat  -A POSTROUTING -o ppp0 -j MASQUERADE
iptables -t nat  -A POSTROUTING -o eth1 -j MASQUERADE
---

and set linux server ipaddress as gateway to your
windows machine.


this works 101%, i am using it from last 6 months.

amit


--- Shailesh J. Kumar [EMAIL PROTECTED] wrote:
 
 If anyone can give me a solution on fro using the
 Red Hat 9.0 as a gateway, using IPTABLES or
 IPCHAINS.
 
 
 -Original Message-
 From:

[EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED]
 Behalf Of Shailesh J. Kumar
 Sent: Tuesday, August 19, 2003 3:23 PM
 To: The Linux-Delhi mailing list
 Subject: RE: [ilugd] NAT  DNS on 7.2 ? URGENT !
 
 Hi,
 
 I am a little new to Linux and don't know much of it
 in details, so I am doing as instructed.
 
 I have tried the same with Red Hat 9.0 and installed
 all the packages and everything. But it seems that
 the problem does not get resolved easily, as I am
 getting the same problem of the 1. Ipchains:
 Incompatible with this Kernel and 2. Ipchains:
 Protocol is not available
 
 I have installed the Red Hat 9 version, which I got
 it in the DIGIT Aug 2003 magazine.
 
 I did exactly as under.
 
 Please go through it and tell me where did I go
 wrong.
 
 Start of Message
 
 Shailesh,
 
 Try this.
 
 1. Take two Ethernet cards (though u can do with one
 also, but for security purposes)
 
 2. Put on eth0 your local network - lets say
 192.168.1.* lets say - 192.168.1.1 (rest of your
 windoze cud be on 192.168.1.*)
 
 3. Put on your eth1 for isp. Now if the isp gives
 permanent ip address, great, configure your eth1 for
 the same, if not, configure your eth1 to pick
 address dynamically. route add gw yr isp gw eth1
 
3.a. If your eth1 is dynamic, then you will need
 to execute a script that automatically runs the
 route add command everytime it is brought up
 
 
 4. to run name server, simply install bind,
 bindutils, caching-name server rpms (i would
 strongly recommend to upgrade to rh 9.0 since the
 original 7.2 has security punctured bind).
 
 5. I assume you will need to run proxy, Install all
 rpms of squid on the server.For access control use
 squidguard.
 
 6.In addition to this, if you would want internal
 systems to connect directly to the net, using your
 linux box as gw.
6.a - to all machines on your lan make add the
 gateway as 192.168.1.1(ip of yr linux box)
 
6.b - in all your machines on your lan, make the
 dns as 192.168.1.1(ip of yr linux box)
 
6.c A simple and correct method would be to run
 the linux box as dhcp server (on eth0) and boot all
 windoze from this - so that the above config is not
 required on client side.
   6.d. execute -  echo 1 
 /proc/sys/net/ipv4/ip_forward  (this will allow your
 linux box to masq)
 
   6.e. Now you need to add rules so that your
 internal users can go outside ( i am assuming u r
 going to use ipchains in 7.2)
 ipchains -F (flush)
 ipchains -X (remove rules)
 ipchains -A forward -s 192.168.1.0/255.255.255.0 -d
 0.0.0.0/0.0.0.0 -j MASQ  (Allow all source
 192.168.1.0 to talk to any outside 0.0.0.0/0.0.0.0)
 
 You can ofcourse add more filters as you go along.
 
 Thats it - you are on.
 
 7. If you need people from outside to come into your
 network (gosh! Cant be dumber than this) u will need
 to add rules in reverse direction.
 
 8. Use webmin, to configure above, it will make your
 life so much more simpler.
 
 
 regards,
 alok sinha
 
 End of Messege
 -Original Message-
 From:

[EMAIL PROTECTED]

[mailto:[EMAIL PROTECTED]
 Behalf Of Lokesh Bhog
 Sent: Monday, August 18, 2003 10:15 PM
 To: The Linux-Delhi mailing list
 Subject: Re: [ilugd] NAT  DNS on 7.2 ?
 
 Try using similar commands using iptables.
 
 
 The error message seems to indicate that the
 settings
 in kernel are not done
 to support ipchains. Either.
 a) Use redhat linux 9.0 or 7.3 or 8.0 with iptables
 b) Use iptables instead of ipchains
 c) Recompile the kernel and use ipchains.
 d) It may be a problem on how you have installed
 linux
 or are giving the
 commands therefore, such error messages are
 appearing.
 Please share what
 commands you are giving.
 e) Use redhat linux 7.1 - I had tested these things
 on
 that version and it
 used to work without any problem.
 
 Lokesh
 - Original Message -
 From: Shailesh J. Kumar [EMAIL PROTECTED]
 To: The Linux-Delhi mailing list
 [EMAIL PROTECTED]
 Sent: Monday, August 18, 2003 7:20 AM
 Subject: RE: [ilugd] NAT  DNS on 7.2 ?
 
 
  Hi,
 
  I did the needful but was unable to do so coz of
 the
 following error.
 
  When I flush the ipchains its giving an error
 ipchains: Incompatible with
 this Kernel
 
  And when I make an entry to the existing ipchains
 it
 gives ipchains:
 Protocol is not available
 
  I am using Red Hat 7.2 (Enigma) 2.4.7-10 #1 Thu
 Sep6
 17:27:27 EDT 2001
 i686
 

Re: [ilugd] Re: Time Lag in Linux...

2003-08-19 Thread Achal Prabhakar
Why don't you just get yourself a RTC card and use that instead of relying 
on the builtin clock!!

On Tue, 19 Aug 2003 14:50:52 +0530, J.Mohamed Zahoor [EMAIL PROTECTED] 
wrote:



LinuxLingam wrote:

it is also not necessary for the pc to be 'old' for the CMOS battery to 
fail. other possible reasons;

1) CMOS battery drained if its a recycled/recharged type peddled by some 
shady guy.

2) drained due to a shortage or leakage.

I changed the CMOS battery recently!!!

3) if you have those horrendous PCs that never really poweroff, as in 
HARD OFF. they tend to look like they've all shut down, but one press on 
the keyboard and they can powerup again, called a soft on. well, if you 
have the sense of physically pulling out the power cable from the socket 
so the PC won't fry while its offically switched off (happens far more 
frequently than you can imagine) the CMOS battery gets drained more 
rapidly.

nevertheless, i never expect any CMOS-based timing system to be 'mission 
critical' on the usual i386-type architecture. as ghane rightly points 
out, you need serious hardware for that kind of thing, or an always on, 
high-speed

OK... some background about my application
We develop s/w and hardware for a small, indegeneously developed 
telephone
exchange . The main call processing s/w runs on a i386 PC which
is connected to the exchange through some properitary h/w to the main 
exchange.
All the events are controlled and triggered through our s/w. We selected 
linux as OS
long time back when linux was in its infancy..  This PC is not connected 
to external world
by any means.. As this call processing s/w does all the main 
functinalities.. it is absolutely
necessary to sync the time to real time. And also the application is 
expected to run
for days along continusoly

So i cannot use any other time server to sync the time

Any other input...!!!

./zahoor



___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/
___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Please help me

2003-08-19 Thread Arjun Asthana
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tuesday 19 August 2003 00:20, Process, QC(indsys contractor) wrote:
 [Forwarding without prejudice -- Raju]

 sir,
 i am fed up using windows,every time it gets hang,gets affected with virus,
 nearly after every 2-3 months i have to format my hard disk,so i am now
 making my mind for using linux,but i am afraid of the commands in linux so
 i want to go for GUI linux,and i dont have much info on installing and
 using linux,i live in faridabad,and dont know any one who is member of
 linux club, as i want to use linux i am in search of a good person who can
 provide me full guidance in this field.my details are as below:plz do not
 reply back on this mail id,use below mentioned e mail id.[ie
 [EMAIL PROTECTED]

  ELX is your answer. You can buy LFY May or ask Mr. Abishek or me (I've got
13 and can give you free)

 Bharat Gautam
 [EMAIL PROTECTED]
 H.no-1168,sector-16,
 faridabad-121002
 haryana
 9810277031


 ___
 ilugd mailing list
 [EMAIL PROTECTED]
 http://frodo.hserus.net/mailman/listinfo/ilugd

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE/QgTg9mAtgws7e1wRAgrQAJ4mlC5OVcXkk/Mdcy6d/wgURwf1ZgCeJilm
sxzYGVKkQ1V3gR58SSR5Ab8=
=mzN+
-END PGP SIGNATURE-


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] pop on public network

2003-08-19 Thread Robins Tharakan
 Ah!  You' have managed to defer snooping of the password from your
 local LAN to the LAN the US server is on.  Don't forget, the password
 will still be sent in clear-text from the SSH server to the POP3
 server.

quite true.

but that seems a slightly more acceptable idea, rather than people on
the cable network here (who know that the data is easily accessible)
snooping in... (i mean for that matter 99% of people on vsnl networks
use pop3. and i repeat vsnl network is zillion times bigger than
people on their own pop servers!! so then i guess life's not as bad as
it sounds then!!! :-) 

but yes, i guess i need to find a better option soon!!

although the password entering problem is still a bone in the neck type
issue.entering a password for two such ssh logins on every boot is
sounding like not a best fit solution.

affly
robins


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Re: Time Lag in Linux...

2003-08-19 Thread Shuvam Misra
 OK... some background about my application
 We develop s/w and hardware for a small, indegeneously developed telephone
 exchange . The main call processing s/w runs on a i386 PC which
 is connected to the exchange through some properitary h/w to the main
 exchange.
 All the events are controlled and triggered through our s/w. We selected
 linux as OS
 long time back when linux was in its infancy..  This PC is not connected
 to external world
 by any means.. As this call processing s/w does all the main
 functinalities.. it is absolutely
 necessary to sync the time to real time. And also the application is
 expected to run
 for days along continusoly

Now that it is clear that real-time clocking is a mission-critical
business necessity, without which your actual business data would go
haywire, it seems to me that someone somewhere goofed _badly_ by
choosing an off-the-shelf Intel base for this project. Sorry if it
sounds blunt, but that's the way I see it.

At the very _least_ this project should have been on SPARC or some such
better-quality hardware. All of a sudden, Ghane's SPARC suggestion does
not seem like a joke at all.

Now that you can't undo what has been done, I suggest that you evaluate
external time clock hardware (which have Linux and NTP support) and plug
some such hardware to the serial port of the PC. Such hardware is
described in NTP related literature. Many options exist, including radio
receivers which receive time signals from super-accurate clocks, and
plain super-accurate, industrial strength external RTC hardware.

And if none of that works, get a second PC, connect it to the Internet
using a modem (I'd suggest a Reliance mobile phone), and run an NTP client
on it. Make it connect to the Net for, say, 10 minutes every two hours,
and sync its clock with NTP servers elsewhere. And get your existing
telephone exchange to talk to this second PC and get its clock in sync.
This is inelegant, but may be easiest to strap together with string and
bandage if nothing else works.

Shuvam


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


[ilugd] upgrading kernel and installing security patches

2003-08-19 Thread Puneet
Hi all !! I am just a beginner in Linux environment.Pleas tell me how can i 
upgrade my kernel and install patches that are released by redhat and others.Currently 
I am using RHL 9.0and please tell me does netbsd has any advantages over it as 
I have heard that netbsd is 'Unix-Type' and is quite secure.

One more thinghow can I disable the ping and ICMP requests to my system as I 
am working in a LAN environment and my PC has to face a lot of scanning related to 
open ports and security holes.
___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] upgrading kernel and installing security patches

2003-08-19 Thread Arindam Dey
On Wed, 2003-08-20 at 07:04, Puneet thus hollered from the rooftop:

 Hi all !! I am just a beginner in Linux environment.Pleas tell me how can
 i upgrade my kernel and install patches that are released by redhat and others.
 Currently I am using RHL 9.0

If you are using RedHat and you have an available internet connection to
the PC the easiest way to upgrade is to use up2date. man up2date will
give you much more help on this. The relevant website is
http://rhn.redhat.com

I usually use up2date for upgrading everything from the RedHat site
except the kernel RPM's which I prefer to download manually and install.
Although up2date does a good job of upgrading the kernel RPM's also if
you want it to take care of it.

 and please tell me does netbsd has any advantages over it as I have 
 heard that netbsd is 'Unix-Type' and is quite secure.

No flames please but IMHO OpenBSD is the more secure of the two. As to
the advantages I will let someone else take up on that have not used
NetBSD that much.

 One more thinghow can I disable the ping and ICMP requests to
 my system as I am working in a LAN environment and my PC has to face a lot of
 scanning related to open ports and security holes.

Try this 
echo 1  /proc/sys/net/ipv4/icmp_echo_ignore_all

Alternatively

sysctl -w net.ipv4.icmp_echo_ignore_all=1

The above 2 methods are temporary. That is on reboot the setting will be
removed. So to make this permanent either you can put any one of the
above 2 lines in one of your rc files e.g /etc/rc.d/rc.local or
/etc/rc.d/rc.sysinit just be careful that you put this line after the
proc file system has been mounted.

Or the best way is to add the following line in /etc/sysctl.conf

#Stops ICMP replies from this PC.

net.ipv4.icmp_echo_ignore_all = 1   

To undo the above setting just substitute 0 in place of 1 in the above
places.

-- 
Arindam Dey

The mind is not a vessel to be filled
but a fire to be kindled.

GPG FPR: B8E3 219E F129 F970 F4A7  BC50 9636 504A BEDF 5739


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


[ilugd] SCO claims appear to be bogus

2003-08-19 Thread Raj Mathur
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

[Cross-posted]

Evidence seems to indicate that the Linux code that SCO is claiming
came from SVR4 may actually be from a much earlier, public domain
version of Unix.

[Quote]
So...SCO's code demonstration, the one that it put up to convince its
resellers of its case, comes from a version of Unix which first came
out in 1979. The code was publicly circulated in the 1980's, and
explicitly released under the BSD license by [the company now known
as] SCO at the beginning of 2002. SCO might well have a complaint that
SGI did not properly give credit for the code it used. But there is no
possible way the company can argue that this code's presence in Linux
is an infringement of its copyrights.

Full story at: http://lwn.net/Articles/45019/

- -- Raju
- -- 
Raj Mathur[EMAIL PROTECTED]  http://kandalaya.org/
   GPG: 78D4 FC67 367F 40E2 0DD5  0FEF C968 D0EF CC68 D17F
  It is the mind that moves
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.6 and Gnu Privacy Guard http://www.gnupg.org/

iD8DBQE/QuMNyWjQ78xo0X8RAvikAJ99hbXvlbWR1iqGSwZmvuczs42PQgCeM3gm
6AH+gl8SerMQX0oCRlxUK7Q=
=iEUj
-END PGP SIGNATURE-

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] upgrading kernel and installing security patches

2003-08-19 Thread Robins Tharakan
 One more thinghow can I disable the ping
 face a lot of scanning related to open ports and security holes.
Oh!! you need a good secure system!! 
good you came into unix'es
;)

i mean the way you put it, what are you on a .mil site ? 
;)

lol
affly
robins
 ___
 ilugd mailing list
 [EMAIL PROTECTED]
 http://frodo.hserus.net/mailman/listinfo/ilugd
 


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Query Linux Users Meeting

2003-08-19 Thread Modular Infotech
Please remove from your mailing list

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Please help me

2003-08-19 Thread MALKIAT BENIPAL
what is this ELX and LFY stands for ? pl. give the full initials of the same.
 

Arjun Asthana [EMAIL PROTECTED] wrote:

ELX is your answer. You can buy LFY May or ask Mr. Abishek or me (I've got
13 and can give you free)

 Bharat Gautam
 [EMAIL PROTECTED]
 H.no-1168,sector-16,
 faridabad-121002
 haryana



MALKIAT
 
[EMAIL PROTECTED] 



-
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Please help me

2003-08-19 Thread Sharninder


 what is this ELX and LFY stands for ? pl. give the full initials of the
same.


ELX is a linux distribution a version of which was distributed by LFY (linux
for you) in their may issue.

HTH
Sharninder


___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd


Re: [ilugd] Please help me

2003-08-19 Thread R Gowri
might be everyone's linux and linux for u

Gowri.

MALKIAT BENIPAL wrote:

what is this ELX and LFY stands for ? pl. give the full initials of the same.

Arjun Asthana [EMAIL PROTECTED] wrote:

ELX is your answer. You can buy LFY May or ask Mr. Abishek or me (I've got
13 and can give you free)
 

Bharat Gautam
[EMAIL PROTECTED]
H.no-1168,sector-16,
faridabad-121002
haryana
   



MALKIAT

[EMAIL PROTECTED] 



-
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd
 

___
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd