[leaf-user] Re: creating bering CDROM automatically

2002-05-23 Thread Heinz Bruederlin

Hello,

Jacques put the first version of my script which creates bering-CDs automatically 
into contrib directory. It can be found here:

http://leaf.sourceforge.net/devel/jnilo/bering/latest/contrib/create_iso.sh

As mentioned it does all the steps from the user's guide to configure/create a
bering cdrom.

Are there any comments ?

Thanks Heinz




___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Broadcast traffic and dnscache

2002-05-23 Thread Greg Ford

Hi 

Questions:
1) How do I disable dnscache? I tried editing 
/etc/init.d/dnscache to turn it off, but which 
package do I need to back up to save this change?

2) We get a lot of broadcast traffic on the external interface 
(eth1) particularly on port 520 and port 69 
- where are the rules that 
log this traffic? How do I turn it off?

I'm running Dachstein 1.02 connecting to a fibre-optic 
ethernet connection to the Internet (on eth1). 
The fibre-optic connection is a switched network 
with a large number of machines on it - rather than 
point-to-point. 

Our ISP's router is one of those machines. 
Quite a few machines on the fibre-optic connection
are running private IP addresses (192.168.* and 10.*).

I modified ipfilter.conf to prevent log_martians 
from logging traffic on the private ranges, but 
I'm not sure about the port 520 and 69 traffic. 
 
Sample /var/log/messages logs:
May 23 22:34:59 firewall kernel: Packet log: input DENY eth1 PROTO=17
203.97.144.54:520 255.255.255.255:520 L=52 S=0xC0 I=0 F=0x T=2 (#32)
May 23 22:35:02 firewall kernel: Packet log: input DENY eth1 PROTO=17
192.168.1.128:9564 255.255.255.255:69 L=49 S=0x00 I=2 F=0x T=255 (#7)
May 23 22:35:02 firewall kernel: Packet log: input DENY eth1 PROTO=17
192.168.1.128:6524 255.255.255.255:69 L=49 S=0x00 I=2 F=0x T=255 (#7)

We run BIND on an internal server, so I've set 
the Dachstein machine to use that - I assume 
we don't need the dnscache, so I've turned it off
to ensure it doesn't generate additional network traffic.
But it keeps reappearing after reboots!


Greg Ford
ReddFish intergalactic 


-Original Message-
From: Heinz Bruederlin [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 23 May 2002 19:08
To: [EMAIL PROTECTED]
Subject: [leaf-user] Re: creating bering CDROM automatically


Hello,

Jacques put the first version of my script which creates bering-CDs
automatically 
into contrib directory. It can be found here:

http://leaf.sourceforge.net/devel/jnilo/bering/latest/contrib/create_iso.sh

As mentioned it does all the steps from the user's guide to configure/create
a
bering cdrom.

Are there any comments ?

Thanks Heinz




___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] duplicate mail from lists

2002-05-23 Thread Roberto Pereyra

Hi all

I am receiving duplicate mail of the list, almost all the traffic of mail
arrives twice. Can be that something function badly in the server of the
list or is my postfix?

bye

Roberto Pereyra
Gualeguaychu
Argentina
http://www.linux-net.com.ar
GnuPG keyID: BB43E337
http://pgp.mit.edu



___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] RE:IPsec client for windows (free)

2002-05-23 Thread Roberto Pereyra


Hi !

I did not know that w2000 had IPsec support buit in. 
I am going to test it. 
Thanks to all

Roberto Pereyra
Gualeguaychu
Argentina
http://www.linux-net.com.ar
GnuPG keyID: BB43E337
http://pgp.mit.edu

On Wed, 22 May 2002, David Goodrich wrote:

 Just as a warning, i installed PGP Freeware 7.01's VPN software on my
 windows XP box and it renedered my network connection totally nonfunctional,
 i had to reinstall the OS.
  -david
 __
 http://complex.wox.org
 
 -Original Message-
 From: Brock Nanson [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, May 22, 2002 9:51 AM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: [leaf-user] RE: IPsec client for windows (free)
 
 
 I played with PGPnet about a year ago.  At that time, the 'free' version
 would NOT support access to a LAN behind the firewall.  In other words,
 you could use it to build a tunnel between two machines only.  The
 useful functionality came in the more costly version.  As a matter of
 interest, the install at that time was rather fearsome... I spent a few
 days cleaning up the mess it left before I could boot cleanly!
 
 I don't think there is a completely 'free' ipsec windows client in
 existence.  The closest are Sentinel and PGPNet.  Both are know to work
 with FreeS/WAN.
 
 You haven't said what windows version you are running.  As others have
 mentioned, 2K and XP both have IPSec built in and can work with
 FreeS/WAN without any additional software.
 
 Brock
 
  Date: Wed, 22 May 2002 09:55:47 -0400 (ART)
  From: Roberto Pereyra [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: [leaf-user] Re: IPsec client for windows (free)
  
  
  
  Hello I have listened that with the last version of PGP 
  (PGPnet) can be installed a VPN with IPSec. 
  
  Someone has done this?
  
  
  Roberto Pereyra
  Gualeguaychu
  Argentina
  http://www.linux-net.com.ar
  GnuPG keyID: BB43E337
  http://pgp.mit.edu
 
 
 ___
 
 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
 
 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
 
 ___
 
 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm
 
 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
 
 



___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] RE:IPsec client for windows (free)

2002-05-23 Thread Phillip . Watts



After days of trying we gave up on ipsec in Win2000.
XP is better but very frustrating to configure.
( We are fairly experienced with FreeSWAN )
SSH sentinel is a dream if your time is valuable.






Roberto Pereyra [EMAIL PROTECTED] on 05/23/2002 08:06:41 AM

To:   [EMAIL PROTECTED]
cc:(bcc: Phillip Watts/austin/Nlynx)

Subject:  [leaf-user] RE:IPsec client for windows (free)




Hi !

I did not know that w2000 had IPsec support buit in.
I am going to test it.
Thanks to all

Roberto Pereyra
Gualeguaychu
Argentina
http://www.linux-net.com.ar
GnuPG keyID: BB43E337
http://pgp.mit.edu

On Wed, 22 May 2002, David Goodrich wrote:

 Just as a warning, i installed PGP Freeware 7.01's VPN software on my
 windows XP box and it renedered my network connection totally nonfunctional,
 i had to reinstall the OS.
  -david
 __
 http://complex.wox.org

 -Original Message-
 From: Brock Nanson [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, May 22, 2002 9:51 AM
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: [leaf-user] RE: IPsec client for windows (free)


 I played with PGPnet about a year ago.  At that time, the 'free' version
 would NOT support access to a LAN behind the firewall.  In other words,
 you could use it to build a tunnel between two machines only.  The
 useful functionality came in the more costly version.  As a matter of
 interest, the install at that time was rather fearsome... I spent a few
 days cleaning up the mess it left before I could boot cleanly!

 I don't think there is a completely 'free' ipsec windows client in
 existence.  The closest are Sentinel and PGPNet.  Both are know to work
 with FreeS/WAN.

 You haven't said what windows version you are running.  As others have
 mentioned, 2K and XP both have IPSec built in and can work with
 FreeS/WAN without any additional software.

 Brock

  Date: Wed, 22 May 2002 09:55:47 -0400 (ART)
  From: Roberto Pereyra [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: [leaf-user] Re: IPsec client for windows (free)
 
 
 
  Hello I have listened that with the last version of PGP
  (PGPnet) can be installed a VPN with IPSec.
 
  Someone has done this?
 
 
  Roberto Pereyra
  Gualeguaychu
  Argentina
  http://www.linux-net.com.ar
  GnuPG keyID: BB43E337
  http://pgp.mit.edu


 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html





___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html





___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Bering and pptpd

2002-05-23 Thread Geir Austad


We're trying to configure a Bering router for running pptp tunnels. The 
router itself is the server, with Windows clients connecting to it over 
a broadband radio network ( and then going out to the Internet).

We've used Bering for IPSEC in a similar setup, and that works
fine. The Bering version is 1.0-rc2.

I've tested the pptp setup with a Red Hat pptpd server and a windows
client, and that works OK. Then I've tried to run the pptpd 
on a Bering box, and this doesn't work.

I installed ppp.lrp and pptpd.lrp for Bering, put in the same
configuration as on the Red Hat box, and started pptpd.

The Windows client return error 651, and basically says that
something went wrong ( stopping the pptpd results in a different
error, so it makes a difference whether it runs or not).
Tcpdump on the Bering box's interface shows that 'ack' packets are 
exchanged between LRP and Windows boxes, but  there's nothing
at all in the system logs, so it looks like the communication never gets as 
far as trying any authentication. Iptables let's everything through, and
the two systems can ping each other, so the basic setup is OK.

Has anyone managed to get this working on a Bering distribution ?
Most of the documentation I've come across is about  is using
ppp/pptp to get out from an LRP box.


Best regards

Geir Austad

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Secure browsing...

2002-05-23 Thread Michael McClure

Hello all --

I'm an older leaf user -- haven't really bothered to upgrade because 
there was no reason to -- I'm using Eigerstein 1680k.  However, if I 
can't do this with eigerstein, then maybe this will be a motivation to 
move up if I can do it with something else.

Anonymizer.com offers a pay service for ssh tunnelled secure browsing -- 
so you can browse at work kind of stuff.  SSH to their server, and 
tunnel your browser through it.  They, in turn, push that out onto the 
internet --  So your boss doesn't know you're searching monster, or a 
competitor's site, or reading your browser-based email for that matter. 
 I know I can tunnel my browser through ssh to my LRP at home to view a 
webserver on my internal network at home, but how about redirecting that 
browser outside onto the internet?  I'd localhost:8080 my browser from 
work, which would go to my lrp, which would, in turn go out onto the 
internet.  I know I'm missing some piece here because port forwarding 
only works to a specific machine - there has to be another piece, but I 
don't know what it is

Anybody have any thougths?

thanks.
mike.



___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Bering RC2 and bridge

2002-05-23 Thread Darren Wright

I have Bering RC2 up and running just fine.  I have 2 interfaces that
are working perfectly.

I added bridge.lrp and bridge.o to the modules directory.

When I try to do a 

brctl addbr br0

I get

Br_add_bridge: package not installed


It looks like bridge.o is not getting loaded, even though it is in the
modules file.

Any ideas?

-Darren

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Secure browsing...

2002-05-23 Thread Brad Fritz


On Thu, 23 May 2002 08:25:30 PDT Michael McClure wrote:

 Anonymizer.com offers a pay service for ssh tunnelled secure browsing --
 so you can browse at work kind of stuff.  SSH to their server, and
 tunnel your browser through it.  They, in turn, push that out onto the
 internet --  So your boss doesn't know you're searching monster, or a
 competitor's site, or reading your browser-based email for that  matter.
  I know I can tunnel my browser through ssh to my LRP at home to view a 
 webserver on my internal network at home, but how about redirecting that 
 browser outside onto the internet?

If you setup a proxy server on your firewall or internal network
at home, you can setup an ssh tunnel to your proxy server and then
use the proxy over the tunnel.  Apache is pretty easy to setup as
a proxy server and I have used it exactly as you described above.
There many other proxy servers that would work too, including squid
and junkbuster.

Technically, the proxy doesn't need to be on your network at all.
You could setup a tunnel like so:

  ssh myhost -L 8080:public.proxyserver:proxyport

The traffic between myhost and public.proxyserver would not be
encrypted, but you'd still be encrypted from the the ssh client
host to myhost.

--Brad

 I'd localhost:8080 my browser from 
 work, which would go to my lrp, which would, in turn go out onto the 
 internet.  I know I'm missing some piece here because port forwarding 
 only works to a specific machine - there has to be another piece, but I 
 don't know what it is
 
 Anybody have any thougths?
 
 thanks.
 mike.

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] duplicate mail from lists

2002-05-23 Thread Jeff Newmiller

On Thu, 23 May 2002, Roberto Pereyra wrote:

 Hi all
 
 I am receiving duplicate mail of the list, almost all the traffic of mail
 arrives twice. Can be that something function badly in the server of the
 list or is my postfix?

You need to examine the headers of these messages to determine
that.  However, the only doubled messages I get are ones replied to me on
list, where the reply goes to me directly, and the list is cc'd.

---
Jeff NewmillerThe .   .  Go Live...
DCN:[EMAIL PROTECTED]Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Bering RC2 and bridge

2002-05-23 Thread Larry Platzek

You will have to obtain dridge.o it is on the Bering site and use the
instructions how to add the module to your disk and uncomment in the
modules list like ethernet cards, check the Bering installation guide.
Hope this help you.


Larry Platzek  [EMAIL PROTECTED]


On Thu, 23 May 2002, Darren Wright wrote:

 Date: Thu, 23 May 2002 11:48:19 -0400
 From: Darren Wright [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: [leaf-user] Bering RC2 and bridge

 I have Bering RC2 up and running just fine.  I have 2 interfaces that
 are working perfectly.

 I added bridge.lrp and bridge.o to the modules directory.

 When I try to do a

   brctl addbr br0

 I get

 Br_add_bridge: package not installed


 It looks like bridge.o is not getting loaded, even though it is in the
 modules file.

 Any ideas?

 -Darren

 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] Bering RC2 and bridge

2002-05-23 Thread Darren Wright

Yup done that.I'm playing around with different versions of bridge.o

That may make a difference...

-Darren


 -Original Message-
 From: Larry Platzek [mailto:[EMAIL PROTECTED]] 
 Sent: Thursday, May 23, 2002 12:38 PM
 To: Darren Wright
 Cc: [EMAIL PROTECTED]
 Subject: Re: [leaf-user] Bering RC2 and bridge
 
 
 You will have to obtain dridge.o it is on the Bering site and 
 use the instructions how to add the module to your disk and 
 uncomment in the modules list like ethernet cards, check the 
 Bering installation guide. Hope this help you.
 
 
 Larry Platzek  [EMAIL PROTECTED]
 
 
 On Thu, 23 May 2002, Darren Wright wrote:
 
  Date: Thu, 23 May 2002 11:48:19 -0400
  From: Darren Wright [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Subject: [leaf-user] Bering RC2 and bridge
 
  I have Bering RC2 up and running just fine.  I have 2 
 interfaces that 
  are working perfectly.
 
  I added bridge.lrp and bridge.o to the modules directory.
 
  When I try to do a
 
  brctl addbr br0
 
  I get
 
  Br_add_bridge: package not installed
 
 
  It looks like bridge.o is not getting loaded, even though 
 it is in the 
  modules file.
 
  Any ideas?
 
  -Darren
 
  ___
 
  Don't miss the 2002 Sprint PCS Application Developer's Conference 
  August 25-28 in Las Vegas -- 
 http://devcon.sprintpcs.com/adp/index.cfm
 
  
 --
  --
  leaf-user mailing list: [EMAIL PROTECTED]
  https://lists.sourceforge.net/lists/listinfo/leaf-user
  SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
 
 
 

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] duplicate mail from lists

2002-05-23 Thread Mike Noyes

On Thu, 2002-05-23 at 06:03, Roberto Pereyra wrote:
 I am receiving duplicate mail of the list, almost all the traffic of mail
 arrives twice. Can be that something function badly in the server of the
 list or is my postfix?

Roberto,
Please send me the header information from a post that you received
twice. I'll need the full headers from both copies. Thanks.

In the future please send list admin requests to:
[EMAIL PROTECTED]

-- 
Mike Noyes [EMAIL PROTECTED]
http://sourceforge.net/users/mhnoyes/
http://leaf-project.org/


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Mike Noyes

On Thu, 2002-05-23 at 09:23, Richard Doyle wrote:
 If you like, I can send you a copy of the dhcrelay.lrp I used to use
 with an LRP 2.9.8 firewall, which should work on any glibc 2.0 system,
 including dachstein or bering.

Richard,
Is the package you have different than the ones we have in cvs?

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/dhcrelay.lrp

-- 
Mike Noyes [EMAIL PROTECTED]
http://sourceforge.net/users/mhnoyes/
http://leaf-project.org/


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Ed Tetz

Hi Troy,

Version 2.0-1 can be found in a mirror of Ken Wongs old LRP archive. Here is
a link for it. http://c0wz.steinkuehler.net/files/kwarchive/dhcrelay.lrp

I have used this version in the past with LRP 2.9.8, and it should work find
with whatever you are using. It was dead easy to setup, I think there is
just one config file in lrcfg packages menu. This package is 23K, so it is
nice and small.

Cheers
edt

- Original Message -
From: Troy Aden [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, May 22, 2002 9:34 PM
Subject: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS



 Hi I am working with Dachstein in a basic router setup. I would like
 to know how to set up DHCP request forwarding between subnets so that we
can
 administer all of our subnets with one DHCP server. I will do my best to
 draw this out.


   -ROUTER-
 Subnet 1 - 192.168.141.1
 Subnet 2 - 192.168.142.1
 Subnet 3 - 192.168.143.1

 DHCP SERVER IS ON SUBNET 1. (192.168.141.252)
 I want computers that are on the .142 and 143 subnets to (Obtain Ips from
 the DHCP server on subnet 1) have their DHCP REQUESTS forwarded to the
DHCP
 SERVER ON SUBNET 1 (.141)

 How is this done? Can someone please help me out.

 Thanks in advance.

 Troy

 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Mike Noyes

On Thu, 2002-05-23 at 09:57, Ed Tetz wrote:
 Version 2.0-1 can be found in a mirror of Ken Wongs old LRP archive. Here is
 a link for it. http://c0wz.steinkuehler.net/files/kwarchive/dhcrelay.lrp
 
 I have used this version in the past with LRP 2.9.8, and it should work find
 with whatever you are using. It was dead easy to setup, I think there is
 just one config file in lrcfg packages menu. This package is 23K, so it is
 nice and small.

Ed,
Actually, Koon Wong created four versions of this package. Two kernel
2.0x versions and two 2.2x versions. All of these are in our cvs
repository.

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/

-- 
Mike Noyes [EMAIL PROTECTED]
http://sourceforge.net/users/mhnoyes/
http://leaf-project.org/


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] smtp whoes

2002-05-23 Thread Jim Van Eeckhoutte

what does this mean, i did a telnet mail.server.com 25 twice and 

tcp  6 67 SYN_SENT src=192.168.20.5 dst=208.57.74.68 sport=2375 dport=25 
[UNREPLIED] src=208.57.74.68 dst=63.27.24.209 sport=25 dport=2375 use=1
tcp  6 117 SYN_SENT src=192.168.20.5 dst=24.130.14.117 sport=2376 dport=25 
[UNREPLIED] src=24.130.14.117 dst=63.27.24.209 sport=25 dport=2376 use=1

is in shorewall status.

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Re: Order of PCI ethernet cards:

2002-05-23 Thread Phillip . Watts




-- Forwarded by Phillip Watts/austin/Nlynx on 05/23/2002
01:09 PM ---


Phillip Watts
05/23/2002 01:17 PM

To:   Matthew Schalit [EMAIL PROTECTED]
cc:   [EMAIL PROTECTED]

Subject:  Re: Order of PCI ethernet cards:  (Document link: Phillip Watts)

Well, I lied.  Or rather fooled myself.

Changing the mac address did not correct the order of selection.

The cards are ordered, eth0, eth1 in the same order the bios assigns
interrupts to them, regardless.

I suspect Linux could care less about the interrupts and does its own
pci scan.

I'm using 2.4.18 ( in the process of intergrating into Bering) from kernel.org
It comes with   8139too.o which depends on  mii.o.

DO YOU KNOW if mii.o is a pci-scan or if that is built into 8139too.o ?
Do you know where is source to mii.o if so?

Do you know if   'setpci' is of any value in this problem?

Thanx.




___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Re: [Shorewall-users] smtp whoes

2002-05-23 Thread Tom Eastep

On Thu, 23 May 2002, Jim Van Eeckhoutte wrote:

 what does this mean, i did a telnet mail.server.com 25 twice and 
 
 tcp  6 67 SYN_SENT src=192.168.20.5 dst=208.57.74.68 sport=2375 dport=25 
[UNREPLIED] src=208.57.74.68 dst=63.27.24.209 sport=25 dport=2375 use=1
 tcp  6 117 SYN_SENT src=192.168.20.5 dst=24.130.14.117 sport=2376 dport=25 
[UNREPLIED] src=24.130.14.117 dst=63.27.24.209 sport=25 dport=2376 use=1
 

It means that the first step of the 3-way TCP handshake was complete (at 
least from what the firewall can tell). The SYN packet was sent from your 
client (192.168.20.5) to two different SMTP servers but no SYN-ACK was 
received back.

-Tom
-- 
Tom Eastep\ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ [EMAIL PROTECTED]


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] Bering RC2 and bridge / wireless

2002-05-23 Thread Darren Wright

Ok I have the bridge software working now.I found the right bridge.o
file.

HOWEVER.

I've got both ethernet interfaces to work properly..Prism II wireless is
ETH0 and the 3c589 is ETH1.

When I get the bridge going and assign it an IP address, it is not
pingable, and no traffic is passing.

Is this a problem with having wireless on one side?

-Darren

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] PUMP

2002-05-23 Thread J

Quick question/problem about pump.

I had my Bering system setup working smoothly just yesterday.
Today I found that the internet gateway wasn't functioning.
It seems that Bering (pump) was unable to renegotiate a DHCP
lease with my cable provider. And now, it remains unable to
do so, even after reboot, etc.

I can ping other hosts on the internal network, but nothing gets
out. I backed up all my settings, and had rebooted several times,
so it's not that.

What confuses me is that WinXP is able to get a DHCP lease whenever
it wants, and pump isn't able to. What's the difference? Is my
provider blocking access? I don't think Cogeco Cable forces the
MAC address to remain constant (in fact, it worked on this very
same setup yesterday!).

So what the heck is wrong? heh.

Thanks,
--
JCA

__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Richard Doyle

Hmm, the package in CVS seems to contain dhcpd not dhcrelay.

-Richard

On Thu, 2002-05-23 at 09:51, Mike Noyes wrote:
 On Thu, 2002-05-23 at 09:23, Richard Doyle wrote:
  If you like, I can send you a copy of the dhcrelay.lrp I used to use
  with an LRP 2.9.8 firewall, which should work on any glibc 2.0 system,
  including dachstein or bering.
 
 Richard,
 Is the package you have different than the ones we have in cvs?
 
 
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/dhcrelay.lrp



___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] PUMP

2002-05-23 Thread JamesSturdevant

Are you trying to use pump on eth1? I recently discovered that it is not
reliable except on eth0. For instance, I have one unit with three 3c509
cards. In that machine, it works on eth1. I have another with a 3c509 for
eth0 and an SMC Ultra for eth1. Pump sends the request out on eth1 and
listens for the reply on eth0. I was able to determine this by plugging
both cards into the same hub and watching the lights and watching the logs
on my dhcp server. When I switched the modules so the SMC loaded first and
became eth0, it was able to receive the address so I knew it wasn't the
card. I did some searching and found similar reports on the redhat site. I
don't know if dhclient has this problem or not.

JamesS
At 11:29 AM 5/23/02 -0700, J wrote:
Quick question/problem about pump.

I had my Bering system setup working smoothly just yesterday.
Today I found that the internet gateway wasn't functioning.
It seems that Bering (pump) was unable to renegotiate a DHCP
lease with my cable provider. And now, it remains unable to
do so, even after reboot, etc.

I can ping other hosts on the internal network, but nothing gets
out. I backed up all my settings, and had rebooted several times,
so it's not that.

What confuses me is that WinXP is able to get a DHCP lease whenever
it wants, and pump isn't able to. What's the difference? Is my
provider blocking access? I don't think Cogeco Cable forces the
MAC address to remain constant (in fact, it worked on this very
same setup yesterday!).

So what the heck is wrong? heh.

Thanks,
--
JCA

__
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html





___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Mike Noyes

On Thu, 2002-05-23 at 11:47, Richard Doyle wrote:
 Hmm, the package in CVS seems to contain dhcpd not dhcrelay.

Richard,
That's strange. I just did a diff of the current cvs version to the last
Koon Wong release, and they're the same.

mhnoyes@usw-pr-shell2:~/leaf/bin/packages/glibc-2.0$ diff dhcrelay.lrp
leaf/devel/thc/files/kwarchive/linux-2.2/beta/dhcrelay.lrp

The tar tvzf results verify your statement though. This file was
misnamed in Koon Wong's archive. Did you check the other versions in
cvs?

I'm sure this is not the last mistake will find in the new packages
tree. :-(

 On Thu, 2002-05-23 at 09:51, Mike Noyes wrote:
  On Thu, 2002-05-23 at 09:23, Richard Doyle wrote:
   If you like, I can send you a copy of the dhcrelay.lrp I used to use
   with an LRP 2.9.8 firewall, which should work on any glibc 2.0 system,
   including dachstein or bering.
  
  Richard,
  Is the package you have different than the ones we have in cvs?
  
  
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/dhcrelay.lrp

-- 
Mike Noyes [EMAIL PROTECTED]
http://sourceforge.net/users/mhnoyes/
http://leaf-project.org/


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Ed Tetz

Mike,

That is the file I referred to in my email to Troy (version 2.0-1). I am a
little confused by the version information that is listed on that page
though. It lists the following:

Revision  Package Version
1.4?
1.32.0-1
1.23.0b1p10-1
1.12.0-1

All with the same creation date. Since I am new to CVS, I would be (and am
:-)  ) confused by which version I should want to download. I downloaded
them all and took a look at them. It appears that the package version are
correct, so 1.1 is updated by 1.3 for version 2.0-1, 1.2 is alone as a build
of 3.0, but 1.4 actually appears to be DHCPD, and not the relay agent - now
more confused :-).

Please let me know if I am on the right track for working with the CVS
files.

BTW, I didn't realize that apparently all of the LRP files for LEAF were
available here on the site. Kudos.

Cheers
edt
- Original Message -
From: Mike Noyes [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, May 23, 2002 1:51 PM
Subject: RE: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS


 On Thu, 2002-05-23 at 09:23, Richard Doyle wrote:
  If you like, I can send you a copy of the dhcrelay.lrp I used to use
  with an LRP 2.9.8 firewall, which should work on any glibc 2.0 system,
  including dachstein or bering.

 Richard,
 Is the package you have different than the ones we have in cvs?


http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/d
hcrelay.lrp

 --
 Mike Noyes [EMAIL PROTECTED]
 http://sourceforge.net/users/mhnoyes/
 http://leaf-project.org/


 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Bering RC2 and bridge / wireless

2002-05-23 Thread Jacques Nilo

Le Jeudi 23 Mai 2002 20:21, Darren Wright a écrit :
 Ok I have the bridge software working now.I found the right bridge.o
 file.

 HOWEVER.

 I've got both ethernet interfaces to work properly..Prism II wireless is
 ETH0 and the 3c589 is ETH1.

 When I get the bridge going and assign it an IP address, it is not
 pingable, and no traffic is passing.

 Is this a problem with having wireless on one side?

How do you activate the bridge ? Through the /etc/network/interfaces file or 
through a dedicated script ?
Are you using Shorewall ?
Jacques

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS

2002-05-23 Thread Mike Noyes

On Thu, 2002-05-23 at 13:01, Ed Tetz wrote:
 Mike,
 
 That is the file I referred to in my email to Troy (version 2.0-1). I am a
 little confused by the version information that is listed on that page
 though. It lists the following:
 
 Revision  Package Version
 1.4?

This file is incorrectly named, and was committed by mistake. Sorry.

 1.32.0-1

kernel 2.2x version of dhcrelay

 1.23.0b1p10-1
 1.12.0-1

These are kernel 2.0x versions of dhcrelay

 All with the same creation date. Since I am new to CVS, I would be (and am
 :-)  ) confused by which version I should want to download. I downloaded
 them all and took a look at them. It appears that the package version are
 correct, so 1.1 is updated by 1.3 for version 2.0-1, 1.2 is alone as a build
 of 3.0, but 1.4 actually appears to be DHCPD, and not the relay agent - now
 more confused :-).

Ed,
Sorry for the confusion. The current version should be the last added to
cvs. Unfortunately, the last package I added from Koon Wong's archive
wasn't actually dhcrelay. Try the 1.3 cvs version.

 Please let me know if I am on the right track for working with the CVS
 files.
 
 BTW, I didn't realize that apparently all of the LRP files for LEAF were
 available here on the site. Kudos.

Thanks, but I'm not done yet. All of the glibc-2.0 packages through the
letter o are in cvs, but the rest aren't yet. I'm working on it
though.

 - Original Message -
 From: Mike Noyes [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Thursday, May 23, 2002 1:51 PM
 Subject: RE: [leaf-user] DHCP REQUESTS FORWARDED BETWEEN SUBNETS
 
 
  On Thu, 2002-05-23 at 09:23, Richard Doyle wrote:
   If you like, I can send you a copy of the dhcrelay.lrp I used to use
   with an LRP 2.9.8 firewall, which should work on any glibc 2.0 system,
   including dachstein or bering.
 
  Richard,
  Is the package you have different than the ones we have in cvs?
 
 
 http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/bin/packages/glibc-2.0/d
 hcrelay.lrp

-- 
Mike Noyes [EMAIL PROTECTED]
http://sourceforge.net/users/mhnoyes/
http://leaf-project.org/


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Bering and pptpd

2002-05-23 Thread Jacques Nilo

Geir:
I have never tried pptp tunnels with Bering but I am very much interested in 
the results of your test if some fixes are needed and also to document that a 
bit.
Bering pptp was built following exactly the descriptions given on Tom's site
http://www.shorewall.net/PPTP.htm

Are you  sure you are using the good patched version of pppd ?

You cannot use the ppp.lrp package provided with Bering directly. You need to 
replace the pppd program in ppp.lrp by it's patched version.
Check here:
http://leaf.sourceforge.net/devel/jnilo/bipackages.html#AEN700

I hope that will fix your pb

Jacques

 We're trying to configure a Bering router for running pptp tunnels. The
 router itself is the server, with Windows clients connecting to it over
 a broadband radio network ( and then going out to the Internet).

 We've used Bering for IPSEC in a similar setup, and that works
 fine. The Bering version is 1.0-rc2.

 I've tested the pptp setup with a Red Hat pptpd server and a windows
 client, and that works OK. Then I've tried to run the pptpd
 on a Bering box, and this doesn't work.

 I installed ppp.lrp and pptpd.lrp for Bering, put in the same
 configuration as on the Red Hat box, and started pptpd.

 The Windows client return error 651, and basically says that
 something went wrong ( stopping the pptpd results in a different
 error, so it makes a difference whether it runs or not).
 Tcpdump on the Bering box's interface shows that 'ack' packets are
 exchanged between LRP and Windows boxes, but  there's nothing
 at all in the system logs, so it looks like the communication never gets as
 far as trying any authentication. Iptables let's everything through, and
 the two systems can ping each other, so the basic setup is OK.

 Has anyone managed to get this working on a Bering distribution ?
 Most of the documentation I've come across is about  is using
 ppp/pptp to get out from an LRP box.


 Best regards

 Geir Austad

 ___

 Don't miss the 2002 Sprint PCS Application Developer's Conference
 August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] PUMP

2002-05-23 Thread Brock Nanson

I think I'd be tempted to look at dhclient instead.  I've had similar
problems with pump on the Shaw network.  It may even be related to the
3c509 NIC's I have, but in previous LEAF versions (eiger, eigerstein)
things worked properly (with the newer version of dhclient).  

My symptom was that 3 times out of 4 (or so) I couldn't get a lease on
boot.  After boot I could run pump and get the lease, although not
always.  I did have an occasion when I couldn't get one for a couple of
days after some initial success.  I changed to another 3c509 and haven't
had this happen since.

Looking back at it, out of 3 3c509's, all have managed to obtain leases.
One was unlikely to get one at boot but could when pump was run manually
after.  Another worked for a few days, then refused to get a lease by
any method.  The third has run flawlessly.  The questionable NIC's have
found homes in other projects and have worked just fine (where no Shaw
dhcp is required!), so they appear to be sound.

So, while I have trouble believing the characteristics of the particular
NIC can be the problem, I'm starting to wonder... Until I installed the
last NIC I was convinced I'd be going to dhclient.  If you do try it,
let me know if this solved the problem - I'm curious now!  I may go to
dhclient just for peace of mind...

Brock

 Date: Thu, 23 May 2002 13:49:49 -0500
 To: J [EMAIL PROTECTED],[EMAIL PROTECTED]
 From: JamesSturdevant [EMAIL PROTECTED]
 Subject: Re: [leaf-user] PUMP
 
 Are you trying to use pump on eth1? I recently discovered 
 that it is not reliable except on eth0. For instance, I have 
 one unit with three 3c509 cards. In that machine, it works on 
 eth1. I have another with a 3c509 for eth0 and an SMC Ultra 
 for eth1. Pump sends the request out on eth1 and listens for 
 the reply on eth0. I was able to determine this by plugging 
 both cards into the same hub and watching the lights and 
 watching the logs on my dhcp server. When I switched the 
 modules so the SMC loaded first and became eth0, it was able 
 to receive the address so I knew it wasn't the card. I did 
 some searching and found similar reports on the redhat site. 
 I don't know if dhclient has this problem or not.
 
 JamesS
 At 11:29 AM 5/23/02 -0700, J wrote:
 Quick question/problem about pump.
 
 I had my Bering system setup working smoothly just 
 yesterday. Today I 
 found that the internet gateway wasn't functioning. It seems that 
 Bering (pump) was unable to renegotiate a DHCP lease with my cable 
 provider. And now, it remains unable to do so, even after 
 reboot, etc.
 
 I can ping other hosts on the internal network, but nothing 
 gets out. I 
 backed up all my settings, and had rebooted several times, 
 so it's not 
 that.
 
 What confuses me is that WinXP is able to get a DHCP lease 
 whenever it 
 wants, and pump isn't able to. What's the difference? Is my provider 
 blocking access? I don't think Cogeco Cable forces the MAC 
 address to 
 remain constant (in fact, it worked on this very same setup 
 yesterday!).
 
 So what the heck is wrong? heh.
 
 Thanks,
 --
 JCA


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] ssh to host behind firewall: connect direct or through router?

2002-05-23 Thread Eric House

There seem to be two ways to allow ssh access from outside the
firewall to a host inside: 1. forward some port on the fw to the host;
2. connect directly to sshd on the fw and use the -Lport:host:port
flag to forward an additional connection to the host.

Is there agreement on which method is better (where better means
more secure, I guess)?

The fw and host are at home.  Most of the time I'm connecting from
outside I'm either at work and want to xhost some app, or I want to
transfer a bunch of files.  Occasionally I need to tweak the router,
so picking #1 above wouldn't remove the need to have sshd on the
router's floppy.

Connections are always from machines that have keys in the router's
(and inside host's) .ssh/authorized_keys files.  Password login is
disabled.

I'm running Bering RC2.

Thanks,

--Eric

**
* From the desktop of: Eric House, [EMAIL PROTECTED]*
*Crosswords 4.0 for PalmOS is out!: http://www.peak.org/~fixin/xwords  *
**


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Re: Virtual environment for developing lpr packages

2002-05-23 Thread Jacques Nilo

Le Jeudi 23 Mai 2002 21:44, vous avez écrit :
 I have question about howto make a lrp package: I want to use cipe with
 the linux router project and I want to use leaf, so I have to make a lrp
 package.
 According to the documentation, packages should be compiled with
 glibc-2.0. I've installed Redhat 5.2 (has glibc2.0.x) in a virtual
 machine (VMware). RedHat5.2 has the 2.7 version of gcc. I compiled a
 newer version of gcc with version 2.95.3 from the sources (needed for
 compiling cipe).
 The kernel 2.4.18 I compiled on my Redhat 7.3 machine and transferred it
 to my virtual machine.
 My general question is: Is this environment correct to develop a lpr
 package?
1/ Your kernel can be compiled on any machine with a GCC 2.95.3 /4 compiler 
or better. Check linux/Documentation/Changes. You do not need glibc for 
compiling the kernel or the kernel modules
2/ If you have user space programs, then you need to compile those in a glibc 
2.0 environnement. Redhat 5.2 should be OK (I have no experience with that). 
Original LEAF development system is Debian/slink. Check:
ftp://ftp.debian.org/debian-archive/dists/slink
Or use a virtual slink machine on any recent linux box:
http://leaf.sourceforge.net/devel/jnilo/uml03.html
Two files to download and you will be ready to go.
Jacques


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



RE: [leaf-user] Bering RC2 and bridge / wireless

2002-05-23 Thread Ray Olszewski

I waited to reply in case someone else saw an obvious answer to your problem.

If you can't ping and can't pass traffic, by what definition of working 
is the bridge software working now? And how do you know that you've got 
both ethernet interfaces to work properly?

What *does* work? Does the LEAF system *route* successfully, for *example*?

What are the usual diagnostics for this system?

At 02:21 PM 5/23/02 -0400, Darren Wright wrote:
Ok I have the bridge software working now.I found the right bridge.o
file.

HOWEVER.

I've got both ethernet interfaces to work properly..Prism II wireless is
ETH0 and the 3c589 is ETH1.

When I get the bridge going and assign it an IP address, it is not
pingable, and no traffic is passing.

Is this a problem with having wireless on one side?


--
---Never tell me the 
odds!--
Ray Olszewski-- Han Solo
Palo Alto, California, USA  [EMAIL PROTECTED]
---


___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Ez-ipupdate

2002-05-23 Thread Jim Van Eeckhoutte

Whats the procedure for gettin ez-ipupdate to run automatically (daemon) from dhclient 
to dialup ppp0? And why does my bering rc1 always start with 2 ppp's ppp0,ppp1?

___

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm


leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html