[Leaf-user] aol/msn Chat

2001-11-18 Thread Danny Carter



This may be slightly off topic, but I 
need to block AOL messaging and MSN chat.
I am running ES2B, and need to know 
what ports to block to make my Boss happy. Too much bandwidth being used up by 
these people.
Any help would be 
appreciated.



[Leaf-user] DachsteinCD, need help getting started

2001-11-18 Thread Scott Ecker

I have been having loads of trouble getting up and running consistently with
the dachstein CD.  I have been practicing making configurations on one
machine in order to hone my knowledge of setting up different types of
firewalls.  However, sometimes I just can't get ip masquerading to work in
the simplest configuration.  I must be missing some tiny switch sometimes
when I set up the box.  Basically I want to allow all machines behind the
firewall to be able to browse,email,ssh,etc.  My hosts.allow is wide open
ALL: 192.168.212.0/255.255.255.0, and my hosts.deny has only ALL:
PARANOID and ALL:ALL.  I can ping internally and externally from the
firewall, just can't masq anything.

Also, I've noticed that the weblet page showing installed modules shows
ip_masq_portfw and ip_masq_autofw and unused.  Are these modules necessary
only if I forward ports to a private ip, or are they necessary for
masquerading?  Or does (unused) mean something else?

Installed Modules:
ip_masq_vdolive 1180   0 (unused)
ip_masq_user3708   0 (unused)
ip_masq_raudio  2980   0 (unused)
ip_masq_quake   1220   0 (unused)
ip_masq_portfw  2416   0 (unused)
ip_masq_mfw 3196   0
ip_masq_irc 1924   0 (unused)
ip_masq_ftp 3576   0 (unused)
ip_masq_cuseeme  964   0 (unused)
ip_masq_autofw  2476   0 (unused)
tulip  32412   2
pci-scan2288   0 [tulip]
isofs  17692   0
ide-cd 22672   0
cdrom  26712   0 [ide-cd]

-Scott


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] Dachstein-CD: dnscache vs. tinydns ???

2001-11-18 Thread Jacques Nilo

- Original Message -
From: Richard Doyle [EMAIL PROTECTED]
 Read http://www.fefe.de/djbdns/ (note to J. Nilo: your link to
 this page on http://leaf.sourceforge.net/devel/jnilo/dnscache6.html
doesn't
 work).
Well spotted. Corrected.
 More non-official djbdns stuff at http://www.lifewithdjbdns.org/
Reference added
Thanks
Jacques


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] FYI on saving CD configs to floppy

2001-11-18 Thread Tony

Bravo on the new CD release!

I love this new release, it was quite easy to setup.  I did however, run into a 
problem saving configs to floppy that I didn't see in any messages.  I thought an FYI 
for the archives would be good idea.  

I have a Packard Hell computer, Packmate 6200 (stop laughing), and surprisingly, it 
boots from the CD, even though there is no setting for that in the BIOS.  Anyway, if I 
had the BIOS set to try A then C, when I used the backup command in lrcfg to set a new 
destination for config files, it would not show the floppy as a choice.  I had to use 
custom. It would ask for the destination and file system which default to fd0 and 
msdos, so far so good.  Then when I tried to backup that package, it would error with 
could not mount device.  Yet, I could manually mount the floppy no problem.  

I don't know why, but I set the BIOS to boot only from the C drive, and when I tried 
to set a custom destination, the floppy showed up as an option, and everything is 
peachy.  I looked at the lrcfg.back code and tried to see why it would give me gas 
about not finding the device, but I couldn't see why it would error.  It works just 
fine now, with no problems.

Hope that helps someone.

Later

Tony




 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Charles
 Steinkuehler
 Sent: Friday, November 16, 2001 11:07
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: [Leaf-user] Announcing official release of Dachstein-CD
 
 
 The official release (v1.0.1) of Dachstein-CD is now 
 available for download
 from the usual places:
 slow:
 http://lrp.steinkuehler.net/files/diskimages/dachstein-CD/
 fast:
 http://lrp1.steinkuehler.net/files/diskimages/dachstein-CD/
 http://lrp2.steinkuehler.net/files/diskimages/dachstein-CD/
 
 


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] dnscache Dachstein 1.0.1 LRP Box internal IP

2001-11-18 Thread Jacques Nilo

Sandro Minola wrote:

 hi

 Under Package configuration - dnscache there is a menu entry called LRP box
 internal IP (default: 192.168.1.254).
 But if I open menu entry 1) there is not 192.168.1.254, it's 0.0.0.0.

 What's correct now? Is the menu entry description wrong or the value itself?
 One must be wrong. I entered 192.168.0.254 instead of 0.0.0.0 (my subnet is
 192.168.0. not 192.168.1.)

Well in my original LRP package IP is setup by default to 192.168.1.254 which
is the default adress of the internal interface of the LRP box. Apparently
Charles changed that in the Dachstein setup to 0.0.0.0. There must be some
reason but honestly I do not see it at that point.
Charles ?
Jacques


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] DachsteinCD, need help getting started

2001-11-18 Thread Matt Schalit

Scott Ecker wrote:
 
 I have been having loads of trouble getting up and running consistently with
 the dachstein CD.  I have been practicing making configurations on one
 machine in order to hone my knowledge of setting up different types of
 firewalls.  However, sometimes I just can't get ip masquerading to work in
 the simplest configuration.  I must be missing some tiny switch sometimes
 when I set up the box.  Basically I want to allow all machines behind the
 firewall to be able to browse,email,ssh,etc.  My hosts.allow is wide open
 ALL: 192.168.212.0/255.255.255.0, and my hosts.deny has only ALL:
 PARANOID and ALL:ALL.  

host.allow and host.deny are only used to filter traffic
destined for a service on the LEAF box.  Basically none
of your internal LAN traffic is destined for the LEAF box,
rather it goes to the internet (except maybe ssh).  So your 
host.allow and host.deny are not stopping traffic from being 
masq'd, making it out to the net, not making it back in 
through the firewall.



 I can ping internally and externally from the
 firewall, just can't masq anything.

Can you ping from an internal computer to the
two LEAF cards?  To the LEAF's default gateway?

You'd help us debug your problems by posting the details 
described in the LEAF How do I request help document:

 http://sourceforge.net/docman/display_doc.php?docid=1891group_id=13751


 Also, I've noticed that the weblet page showing installed modules shows
 ip_masq_portfw and ip_masq_autofw and unused.  

These have no affect whatsoever on your ability to:

   Have a valid IP address on the propoer network on your internal lan computer
   Have a valid netmask on your internal lan computer
   Have a valid dns on your internal lan computer
   Have a valid default gateway on your internal lan computer

   Have all the same on the LEAF, twice.
   Have all computers on the same network.
   Fill out the network.conf right (that's not easy, you're not being scolded).

I think Charles usually have *very* good documentation, especially 
for the recent releases.

 Are these modules necessary
 only if I forward ports to a private ip, or are they necessary for
 masquerading?  Or does (unused) mean something else?

They are used when you have *incoming* traffic from the internet
into you LAN to a service like a web server you run.  They forward
a single port (like web port 80) on the LEAF into your LAN computer's 
port 80, in the case of portfw.  In the case of autofw, that forwards 
a range of ports like 65300-65500 from the LEAF to the LAN computers same
port range (like what you do when you run an ftp server).


[snip]

Usually, almost all of Dachstein is setup in the network.conf.
If you didn't distill that into the variables and post it, then
there was no significant chance of helping you correctly.

Good Luck,
Matthew

 -Scott

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] seti.lrp

2001-11-18 Thread Jay Monroe

Has anyone gotten the seti@home client (from lrp.gibbsoft.com) to work on 
Dachstein?
I get the message:
firewall kernel: VM: killing process setiathome
in my log less than a minute after everything is up.

JM




_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] dachstein CD v1.0.1 hangs during boot

2001-11-18 Thread Mark T. Kennedy

Mark T. Kennedy wrote:
 
 Charles Steinkuehler wrote:
 
  So what's going on?  Your system is *NOT* hung, it just looks that way.  The
  console is running on your KB/Monitor, which you have disconnected.  The
  default system doesn't have entries in /etc/inittab to bring up a console on
  the serial port, so once your system is actually 'running', and out of the
  init process (which uses the kernels definition of the console device), you
  don't have a way to login.
 
 
 can you tell that i'm old?  weary?  that my in-laws are visiting this weekend?  sigh.
 i completely forgot that i have to start a getty.  double sigh.  and thanks.
 
 /mark

it all works now.  thanks again. one lingering question: is there a way to configure
a serial console when you boot from CD rather than from a floppy?

/mark


begin:vcard 
n:Kennedy;Mark
x-mozilla-html:TRUE
org:The Kennedy Family
adr:;;
version:2.1
email;internet:[EMAIL PROTECTED]
x-mozilla-cpt:;-19168
fn:Mark Kennedy
end:vcard



[Leaf-user] ESB2 to Dachstein-CD v1.0.1 Migration

2001-11-18 Thread Paul Rimmer

Just in case anyone is considering it, I switched over from ESB2 to DSv1.0.1
yesterday.  The system in question is a 486DX266 with 16MB RAM and an old 4x
atapi cdrom.  This PC cannot boot from a CD directly so the following is
tailored as such.  It was VERY easy:

- Used WinISO to extract and add to the DS-CD ISO image.  Added echowall,
portsentry and ez-ipupd lrp packages, extracted bootdisk.bin file.
- Used WinImage to create a new boot disk using the bootdisk.bin image from
the ISO file.  Changed bootdisk format to 1680KB from default size to get
more space.
- Modified syslinux and lrpkg.cfg files with the additional modules I wanted
(libz/sshd, portsentry and echowall).
- Modified default root RAM in syslinux.cfg to 6MB (ramdisk_size=6144) and
boot device to 1680 floppy (boot=/dev/fd0u1680,msdos).
- Dug out an old 4x Atapi CDROM and plugged it into the VESA IDE card.
- Put VESA video card and keyboard back into machine so I can
debug/configure after initial boot up.
- Inserted the new boot floppy and cd into the machine and rebooted.
- After boot up (much faster even with old 4x cdrom) edit the /etc/modules
to reflect the 2 NIC's in my system.
- Modified ramlog package to 2MB (2048)
- Modified /etc/lrp.conf with mail server, email address, date server and
ping hosts.
- Modified /etc/network.conf with machine hostname (default is firewall)
- Generated root password via passwd command from command line.
- Set-up openSSH keys: Mounted CD (mount -t iso9660 -r /dev/hda /mnt),
installed sshkey package (cd /mnt, lrpkg -i sshkey), generated keys
(makekey), unmount CD (cd /, umount /mnt)
- Added sshd: 192.168.1. to hosts.allow so I can ssh into firewall.
- In backup menu, set all packages to partial type and floppy disk
destination.
- Backed up everything except logs.
- Rebooted and voila, all LAN PC's surfing the net again.
- Used putty to ssh into firewall verifying I can remove video card and
keyboard.
- Brought up weblet interface to verify it works (much nicer looking!).
- SCP'd mountain time localtime file into /etc to get system clock squared
away.
- Backup /etc.

Done in a little over an hour.

TBD

- Get a null modem cable and set-up serial console for local
debugging/configuring
(http://lrp.steinkuehler.net/Documentation/LRP-Serial-HOWTO.txt).

- Remove video card and keyboard.

- Get ixplorer or winscp working so I can move files around via gui instead
of pscp command line.  They aren't working because when they log in the
lrcfg gui comes up rather than the shell prompt.  I had this working on
ESB2, not sure why they don't work now.  Anyone figure this out?

- Change SSH to use keys rather than password login.  Can anyone point me to
any resource to set this up?  Guides I've seen just use password login.

- Setup portsentry.

- Change firewall rules to stop logging of port 53 (ads.x10.com etc.) and
port 80 (code red) spewage.

- Portforward port 81 for external web access rather than port 80 to avoid
@home scanning and code red.

- Setup so I can SSH through firewall from work to internal machine.

- Figure out if echowall is easier to use than ipchains to setup the
previous 3 points.

Thank you Charles and all other contributors to this fine product!

Paul Rimmer
Calgary, Alberta


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] errors

2001-11-18 Thread Bill Hults

Hi
I'm using Dachstein RC2 with success at several sites but one of them is giving me an 
error message  then   stopping traffic. It works fine for a while (18 hours)and then 
stops. Rebooting
fixes the problem. I've swapped hardware to no effect
The message is eth1:too much work during an interrupt the Restarted Rx
TIA
Bill Hults


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] seti.lrp

2001-11-18 Thread Jeff Newmiller

On Sun, 18 Nov 2001, Jay Monroe wrote:

 Has anyone gotten the seti@home client (from lrp.gibbsoft.com) to work on 
 Dachstein?
 I get the message:
 firewall kernel: VM: killing process setiathome
 in my log less than a minute after everything is up.

Haven't bothered.  Seti@home requires about 12M RAM for its own
purposes... not worth running on a 16M machine, and I don't have any 32M
machines.

---
Jeff NewmillerThe .   .  Go Live...
DCN:[EMAIL PROTECTED]Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] OT: 3c5x9 nic on Redhat 7.2

2001-11-18 Thread Tim Hicks

First, my apologies for this off-topic post, but I know that this list is
full of very knowledgable people, some of whom have wrestled with a 3com
card and linux before.  It's a tenuous link, but this box I'm talking about
will actually be sitting behind a Dachstein box ;-)... does that almost drag
it on-topic?  It seems likely that this machine will end it's life (at some
point) as a leaf box as well.  But I digress...

I have a Compaq Deskpro 2000 that I am trying to install RH7.2 onto.  It has
no CD drive, so I am attempting to do a network (http) install from my winME
box running Apache (temporarily).  I used the bootnet.img and I booted up
the Deskpro.  Unfortunately, when I'm asked to select the driver for my nic,
no matter what I select, I get 'failed to insert 3c5x9
module' (where 3c5x9 is the choice I made on the previous screen).  The nic
actually is a 3com 3c509b combo ISA card and I know it works as I took it
straight out of a win98 box (working).  I then disabled pnp and set irq=10
io=0x300.  The card passes all of its diagnostics.  So what gives?  Any
clues from the linux gurus out there?  Do I need to make a driver disk?  If
so, which driver to I need... the obvious one doesn't seem to work!

all the best

tim


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] seti.lrp

2001-11-18 Thread Jack Coates

On Sun, 18 Nov 2001, Jeff Newmiller wrote:

 On Sun, 18 Nov 2001, Jay Monroe wrote:

  Has anyone gotten the seti@home client (from lrp.gibbsoft.com) to work on
  Dachstein?
  I get the message:
  firewall kernel: VM: killing process setiathome
  in my log less than a minute after everything is up.

 Haven't bothered.  Seti@home requires about 12M RAM for its own
 purposes... not worth running on a 16M machine, and I don't have any 32M
 machines.


If the VM is killing it, it's using too much memory and threatening to
crash the machine.

-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] Re: NIC errors

2001-11-18 Thread ITCom

Both cards in both computers where on of the various versions of the Netgear
card using the Tulip driver. I matched versions in each machine but the
machines may be different. We have a lot of those cards lying around. I have
some Intel I can try.
Thanks

- Original Message -
From: Jack Coates [EMAIL PROTECTED]
To: Bill Hults [EMAIL PROTECTED]
Cc: leaf [EMAIL PROTECTED]
Sent: Sunday, November 18, 2001 8:17 PM
Subject: Re: [Leaf-user] errors


 On Sun, 18 Nov 2001, Bill Hults wrote:

  Hi
  I'm using Dachstein RC2 with success at several sites but one of them is
giving me an error message  then   stopping traffic. It works fine for a
while (18 hours)and then stops. Rebooting
  fixes the problem. I've swapped hardware to no effect
  The message is eth1:too much work during an interrupt the Restarted
Rx
  TIA
  Bill Hults
 

 This is typically a driver bug -- what kind of NIC is eth1?

 --
 Jack Coates
 Monkeynoodle: A Scientific Venture...




___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] Dachstein-CD: bash help built-in ???

2001-11-18 Thread Michael D. Schleif


Bash includes a built-in ``help'' command, which supercedes any PATH
statement.  Therefore, the LEAF/LRP /etc/profile admonishment *cannot*
work:

``Type in help if you are really lost''

Of course, we could change this to; but, who will remember?

``Type in /usr/bin/help if you are really lost''

Instead, we've added this alias to /etc/profile:

alias help=/usr/bin/help

What do you think?

-- 

Best Regards,

mds
mds resource
888.250.3987

Dare to fix things before they break . . .

Our capacity for understanding is inversely proportional to how much we
think we know.  The more I know, the more I know I don't know . . .

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] OT: 3c5x9 nic on Redhat 7.2

2001-11-18 Thread Jeff Newmiller

On Mon, 19 Nov 2001, Tim Hicks wrote:

 First, my apologies for this off-topic post, but I know that this list is
 full of very knowledgable people, some of whom have wrestled with a 3com
 card and linux before.  It's a tenuous link, but this box I'm talking about
 will actually be sitting behind a Dachstein box ;-)... does that almost drag
 it on-topic?  It seems likely that this machine will end it's life (at some
 point) as a leaf box as well.  But I digress...
 
 I have a Compaq Deskpro 2000 that I am trying to install RH7.2 onto.  It has
 no CD drive, so I am attempting to do a network (http) install from my winME
 box running Apache (temporarily).  I used the bootnet.img and I booted up
 the Deskpro.  Unfortunately, when I'm asked to select the driver for my nic,
 no matter what I select, I get 'failed to insert 3c5x9
 module' (where 3c5x9 is the choice I made on the previous screen).  The nic
 actually is a 3com 3c509b combo ISA card and I know it works as I took it
 straight out of a win98 box (working).  I then disabled pnp and set irq=10
 io=0x300.  The card passes all of its diagnostics.  So what gives?  Any
 clues from the linux gurus out there?  Do I need to make a driver disk?  If
 so, which driver to I need... the obvious one doesn't seem to work!

Never heard of 3c5x9... 3c59x is a compLETEly different nic... You
should have no trouble with 3c509 if you give it NO ARGUMENTS and have
no conflicting hardware in the box (which the diagnostics would indicate
you don't).

---
Jeff NewmillerThe .   .  Go Live...
DCN:[EMAIL PROTECTED]Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] Re: NIC errors

2001-11-18 Thread Robert Chambers



Keep in mind that the Netgear FA310 uses the tulip driver. The FA311/312
uses the National Semiconductor chip set and uses a driver called Natsemi
from Donald Becker. There are also several other drivers avalible for FA311/312
nic's.
Robert Chambers

ITCom wrote:
008201c17098$6588ab40$6401a8c0@ws3">
  Both cards in both computers where on of the various versions of the Netgearcard using the Tulip driver. I matched versions in each machine but themachines may be different. We have a lot of those cards lying around. I havesome Intel I can try.Thanks- Original Message -From: "Jack Coates" [EMAIL PROTECTED]To: "Bill Hults" [EMAIL PROTECTED]Cc: "leaf" [EMAIL PROTECTED]Sent: Sunday, November 18, 2001 8:17 PMSubject: Re: [Leaf-user] errors
  
On Sun, 18 Nov 2001, Bill Hults wrote:

  HiI'm using Dachstein RC2 with success at several sites but one of them is
  
  
  giving me an error message  then   stopping traffic. It works fine for awhile (18 hours)and then stops. Rebooting
  

  fixes the problem. I've swapped hardware to no effectThe message is "eth1:too much work during an interrupt" the "Restarted
  
  
  Rx"
  

  TIABill Hults
  
  This is typically a driver bug -- what kind of NIC is eth1?--Jack CoatesMonkeynoodle: A Scientific Venture...
  
  ___Leaf-user mailing list[EMAIL PROTECTED]https://lists.sourceforge.net/lists/listinfo/leaf-user
  
  
  
  


[Leaf-user] Re: NIC errors

2001-11-18 Thread Jack Coates

I'd try the Intel's -- there've been problems with the Tulip drivers,
and I've seen crashes myself under 2.2 and 2.4.
Jack

On Sun, 18 Nov 2001, ITCom wrote:

 Both cards in both computers where on of the various versions of the Netgear
 card using the Tulip driver. I matched versions in each machine but the
 machines may be different. We have a lot of those cards lying around. I have
 some Intel I can try.
 Thanks

 - Original Message -
 From: Jack Coates [EMAIL PROTECTED]
 To: Bill Hults [EMAIL PROTECTED]
 Cc: leaf [EMAIL PROTECTED]
 Sent: Sunday, November 18, 2001 8:17 PM
 Subject: Re: [Leaf-user] errors


  On Sun, 18 Nov 2001, Bill Hults wrote:
 
   Hi
   I'm using Dachstein RC2 with success at several sites but one of them is
 giving me an error message  then   stopping traffic. It works fine for a
 while (18 hours)and then stops. Rebooting
   fixes the problem. I've swapped hardware to no effect
   The message is eth1:too much work during an interrupt the Restarted
 Rx
   TIA
   Bill Hults
  
 
  This is typically a driver bug -- what kind of NIC is eth1?
 
  --
  Jack Coates
  Monkeynoodle: A Scientific Venture...
 
 


-- 
Jack Coates
Monkeynoodle: A Scientific Venture...


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] Dachstein-CD: dnscache startup anomaly ???

2001-11-18 Thread Jacques Nilo

From: Michael D. Schleif [EMAIL PROTECTED]
 Starting additional networking services:.
 Starting svscan ...
 dnscache queries allowed from 192.168
 dnscache queries allowed from 127.0.0.1
 Starting dnscache with daemontools ...
 Creating cdb fro tinydns-private
 Starting private DNS server listening on 127.0.0.1 with daemontools
 Shutting down dnscache with daemontools ...
 dnscache queries allowed from 192.168
 dnscache queries allowed from 127.0.0.1
 Starting dnscache with daemontools ...

  bootup complete 


 What's with dnscache start|stop|start ???

dnscache is automatically restarted if you launch tinydns. That is to
make sure that if you make any change to your tinydns data they are
accounted for by dnscache.

Jacques


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



RE: [Leaf-user] DachsteinCD, need help getting started

2001-11-18 Thread Scott Ecker

From an internal machine I can ping the internal and external interface on the 
firewall, but nothing beyond that.

I noticed that my syslog is filling up with tons of these:

Nov 18 12:14:33 mail kernel: Packet log: \
output DENY eth0 PROTO=1 10.10.5.2:8 \
216.231.41.22:0 L=60 S=0x00 I=35342 F=0x T=127 (#6)

You can check out a shortened copy of my network.conf here: 
(http://www.troutpocket.org/dachstein.txt).  I'm not using DHCP or DHCLIENT.  I am 
using a private IP on the external interface because I'm setting it up behind another 
router just for testing purposes.  Let me know what other info would be helpfull.

-Scott

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Matt Schalit
Sent: Sunday, November 18, 2001 10:29 AM
To: [EMAIL PROTECTED]
Subject: Re: [Leaf-user] DachsteinCD, need help getting started


Scott Ecker wrote:
 
 I have been having loads of trouble getting up and running consistently with
 the dachstein CD.  I have been practicing making configurations on one
 machine in order to hone my knowledge of setting up different types of
 firewalls.  However, sometimes I just can't get ip masquerading to work in
 the simplest configuration.  I must be missing some tiny switch sometimes
 when I set up the box.  Basically I want to allow all machines behind the
 firewall to be able to browse,email,ssh,etc.  My hosts.allow is wide open
 ALL: 192.168.212.0/255.255.255.0, and my hosts.deny has only ALL:
 PARANOID and ALL:ALL.  

host.allow and host.deny are only used to filter traffic
destined for a service on the LEAF box.  Basically none
of your internal LAN traffic is destined for the LEAF box,
rather it goes to the internet (except maybe ssh).  So your 
host.allow and host.deny are not stopping traffic from being 
masq'd, making it out to the net, not making it back in 
through the firewall.



 I can ping internally and externally from the
 firewall, just can't masq anything.

Can you ping from an internal computer to the
two LEAF cards?  To the LEAF's default gateway?

You'd help us debug your problems by posting the details 
described in the LEAF How do I request help document:

 http://sourceforge.net/docman/display_doc.php?docid=1891group_id=13751


 Also, I've noticed that the weblet page showing installed modules shows
 ip_masq_portfw and ip_masq_autofw and unused.  

These have no affect whatsoever on your ability to:

   Have a valid IP address on the propoer network on your internal lan computer
   Have a valid netmask on your internal lan computer
   Have a valid dns on your internal lan computer
   Have a valid default gateway on your internal lan computer

   Have all the same on the LEAF, twice.
   Have all computers on the same network.
   Fill out the network.conf right (that's not easy, you're not being scolded).

I think Charles usually have *very* good documentation, especially 
for the recent releases.

 Are these modules necessary
 only if I forward ports to a private ip, or are they necessary for
 masquerading?  Or does (unused) mean something else?

They are used when you have *incoming* traffic from the internet
into you LAN to a service like a web server you run.  They forward
a single port (like web port 80) on the LEAF into your LAN computer's 
port 80, in the case of portfw.  In the case of autofw, that forwards 
a range of ports like 65300-65500 from the LEAF to the LAN computers same
port range (like what you do when you run an ftp server).


[snip]

Usually, almost all of Dachstein is setup in the network.conf.
If you didn't distill that into the variables and post it, then
there was no significant chance of helping you correctly.

Good Luck,
Matthew

 -Scott

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] Announcing Dachstein CD RC5

2001-11-18 Thread Michael D. Schleif


Charles Steinkuehler wrote:
 
[ snip ]
 
 Rebuilt log.tgz (part of ramlog.lrp) using busybox tar in hopes of
   eliminating broken pipe messages appering on some systems.

Did I tell you that that fixes the problem?

Of course, in my modified instance, it took me quite sometime to figure
out how to un-archive, modify and re-archive in the same manner.

Thank you . . .

-- 

Best Regards,

mds
mds resource
888.250.3987

Dare to fix things before they break . . .

Our capacity for understanding is inversely proportional to how much we
think we know.  The more I know, the more I know I don't know . . .

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user