[leaf-user] [ leaf-Support Requests-566756 ] Off-Topic Slink ISO
Support Requests item #566756, was opened at 2002-06-10 02:15 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 Category: None Group: None Status: Open Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Nobody/Anonymous (nobody) Summary: Off-Topic Slink ISO Initial Comment: If there's anyone who got the old Debian 2.1 "Slink" CDs or ISOs I would be very happy if I could get a copy of them, willing to host them for public download to. Thanks in advance Tosing, [EMAIL PROTECTED] -- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] [ leaf-Support Requests-566756 ] Off-Topic Slink ISO
Support Requests item #566756, was opened at 2002-06-10 09:15 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 Category: None Group: None Status: Open Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Nobody/Anonymous (nobody) Summary: Off-Topic Slink ISO Initial Comment: If there's anyone who got the old Debian 2.1 "Slink" CDs or ISOs I would be very happy if I could get a copy of them, willing to host them for public download to. Thanks in advance Tosing, [EMAIL PROTECTED] -- Comment By: Manfred Schuler (mschuler) Date: 2002-06-10 10:08 Message: Logged In: YES user_id=490757 You can find the images at ftp://debian.uchicago.edu/debian-cd/archive -- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] [ leaf-Support Requests-566756 ] Off-Topic Slink ISO
Support Requests item #566756, was opened at 2002-06-10 02:15 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 Category: None Group: None Status: Open Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Nobody/Anonymous (nobody) Summary: Off-Topic Slink ISO Initial Comment: If there's anyone who got the old Debian 2.1 "Slink" CDs or ISOs I would be very happy if I could get a copy of them, willing to host them for public download to. Thanks in advance Tosing, [EMAIL PROTECTED] -- Comment By: Nobody/Anonymous (nobody) Date: 2002-06-10 05:37 Message: Logged In: NO You can find the files, not an image, at http://archive.debian.org/dists/slink/ I installed from that. -- Comment By: Manfred Schuler (mschuler) Date: 2002-06-10 03:08 Message: Logged In: YES user_id=490757 You can find the images at ftp://debian.uchicago.edu/debian-cd/archive -- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] [ leaf-Support Requests-566756 ] Off-Topic Slink ISO
Support Requests item #566756, was opened at 2002-06-10 02:15 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 Category: None Group: None >Status: Closed Priority: 5 Submitted By: Nobody/Anonymous (nobody) >Assigned to: Mike Noyes (mhnoyes) Summary: Off-Topic Slink ISO Initial Comment: If there's anyone who got the old Debian 2.1 "Slink" CDs or ISOs I would be very happy if I could get a copy of them, willing to host them for public download to. Thanks in advance Tosing, [EMAIL PROTECTED] -- >Comment By: Mike Noyes (mhnoyes) Date: 2002-06-10 06:45 Message: Logged In: YES user_id=39521 Based on the most recent comment on this support request, it is our understanding that this matter has been addressed. Should you require further assistance from the LEAF project members, please submit a new support request. Thank you, leaf-project.org support -- Comment By: Nobody/Anonymous (nobody) Date: 2002-06-10 05:37 Message: Logged In: NO You can find the files, not an image, at http://archive.debian.org/dists/slink/ I installed from that. -- Comment By: Manfred Schuler (mschuler) Date: 2002-06-10 03:08 Message: Logged In: YES user_id=490757 You can find the images at ftp://debian.uchicago.edu/debian-cd/archive -- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=566756&group_id=13751 ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] smbclient
Has anybody come across the smbclient for lrp, working with smb-2b.lrp? Thanks. ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] [ leaf-Support Requests-547477 ] Log messages. Customize
Support Requests item #547477, was opened at 2002-04-23 02:30 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=213751&aid=547477&group_id=13751 Category: Release/Branch: Bering Group: None >Status: Closed Priority: 5 Submitted By: Nobody/Anonymous (nobody) Assigned to: Mike Noyes (mhnoyes) Summary: Log messages. Customize Initial Comment: Hi I am using Bering firewall and I've blocked traffic from my routers port 520. I'm asking what do I have to modify that that 520 port deny's are not logged to messages, cause it only floods that log? Please I've tried to gather that information but not successed. -- >Comment By: Mike Noyes (mhnoyes) Date: 2002-06-10 06:48 Message: Logged In: YES user_id=39521 I'm closing this support request due to a lack of response from the person that opened it. -- Comment By: Eric Wolzak (ericw) Date: 2002-05-17 11:59 Message: Logged In: YES user_id=15026 Hi, perhaps you made an typeing error. In Bering iptables is used. traffic is not denied ( as with ipchains) but dropped (DROP) or rejected (REJECT) You have to insert a line in the shorewall rules file in wicht you DROP or REJECT all traffic to port 520. If you don't give the log options ( :with loglevel) than this package will not be logged. It leaves the "walking tree" before the logging automatically occurs at the end. If the post is not opened by default, and you made a typo by writing this rule ( DENY) than the rest of the rules is checked, nothing aplies and you and up with an net2all:DROP or all2all:DROP logentry. Hope this answers your questions Info at http://shorewall.net/Documentation.htm#Rules Eriw Wolzak member of the Bering Crew. member of the bering crew -- Comment By: Eric Wolzak (ericw) Date: 2002-05-17 11:59 Message: Logged In: YES user_id=15026 Hi, perhaps you made an typeing error. In Bering iptables is used. traffic is not denied ( as with ipchains) but dropped (DROP) or rejected (REJECT) You have to insert a line in the shorewall rules file in wicht you DROP or REJECT all traffic to port 520. If you don't give the log options ( :with loglevel) than this package will not be logged. It leaves the "walking tree" before the logging automatically occurs at the end. If the post is not opened by default, and you made a typo by writing this rule ( DENY) than the rest of the rules is checked, nothing aplies and you and up with an net2all:DROP or all2all:DROP logentry. Hope this answers your questions Info at http://shorewall.net/Documentation.htm#Rules Eriw Wolzak member of the Bering Crew. member of the bering crew -- Comment By: Eric Wolzak (ericw) Date: 2002-05-17 11:58 Message: Logged In: YES user_id=15026 Hi, perhaps you made an typeing error. In Bering iptables is used. traffic is not denied ( as with ipchains) but dropped (DROP) or rejected (REJECT) You have to insert a line in the shorewall rules file in wicht you DROP or REJECT all traffic to port 520. If you don't give the log options ( :with loglevel) than this package will not be logged. It leaves the "walking tree" before the logging automatically occurs at the end. If the post is not opened by default, and you made a typo by writing this rule ( DENY) than the rest of the rules is checked, nothing aplies and you and up with an net2all:DROP or all2all:DROP logentry. Hope this answers your questions Info at http://shorewall.net/Documentation.htm#Rules Eriw Wolzak member of the Bering Crew. member of the bering crew -- Comment By: Eric Wolzak (ericw) Date: 2002-05-17 11:57 Message: Logged In: YES user_id=15026 Hi, perhaps you made an typeing error. In Bering iptables is used. traffic is not denied ( as with ipchains) but dropped (DROP) or rejected (REJECT) You have to insert a line in the shorewall rules file in wicht you DROP or REJECT all traffic to port 520. If you don't give the log options ( :with loglevel) than this package will not be logged. It leaves the "walking tree" before the logging automatically occurs at the end. If the post is not opened by default, and you made a typo by writing this rule ( DENY) than the rest of the rules is checked, nothing aplies and you and up with an net2all:DROP or all2all:DROP logentry. Hope this answers your questions Info at http://shorewall.net/Documentation.htm#Rules Eriw Wolzak member of the Bering Crew. member of the bering crew -- Comment By: Mike Noyes (mhnoyes) Date: 2002-05-17 07:45 Message: Logged In: YES user_id=39521 Have you looked at our FAQs? Specifically: FAQs sec09:
[leaf-user] SSH tty problem
Hi, I'm running Bering 1.0rc2 on CD and am having a tty problem when logging in with ssh. The consequence is that every time I hit cntl-c (running /bin/sh) I get kicked out of the the ssh session. This is especially annoying when stopping ping tests. I would appreciate any suggestions on how to debug this problem. Here's a snippet of my sshd log: Jun 10 08:56:30 cspgate sshd[2136]: debug1: Entering interactive session for SSH2. Jun 10 08:56:30 cspgate sshd[2136]: debug1: fd 3 setting O_NONBLOCK Jun 10 08:56:30 cspgate sshd[2136]: debug1: fd 5 setting O_NONBLOCK Jun 10 08:56:30 cspgate sshd[2136]: debug1: server_init_dispatch_20 Jun 10 08:56:30 cspgate sshd[2136]: debug1: server_input_channel_open: ctype session rchan 0 win 32768 max 16384 Jun 10 08:56:30 cspgate sshd[2136]: debug1: input_session_request Jun 10 08:56:30 cspgate sshd[2136]: debug1: channel 0: new [server-session] Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_new: init Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_new: session 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_open: channel 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_open: session 0: link with channel 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: server_input_channel_open: confirm session Jun 10 08:56:30 cspgate sshd[2136]: debug1: server_input_channel_req: channel 0 request pty-req reply 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_by_channel: session 0 channel 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_input_channel_req: session 0 req pty-req Jun 10 08:56:30 cspgate sshd[2136]: debug1: Allocating pty. Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_pty_req: session 0 alloc /dev/ttyp1 Jun 10 08:56:30 cspgate sshd[2136]: debug1: server_input_channel_req: channel 0 request shell reply 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_by_channel: session 0 channel 0 Jun 10 08:56:30 cspgate sshd[2136]: debug1: session_input_channel_req: session 0 req shell Jun 10 08:56:31 cspgate sshd[2137]: debug1: Setting controlling tty using TIOCSCTTY. Jun 10 08:56:31 cspgate sshd[2137]: error: ioctl(TIOCSCTTY): Operation not permitted Jun 10 08:56:31 cspgate sshd[2137]: error: open /dev/tty failed - could not set controlling tty: Device not configured Jun 10 08:56:30 cspgate sshd[2136]: debug1: fd 4 setting TCP_NODELAY Jun 10 08:56:31 cspgate sshd[2136]: debug1: channel 0: rfd 7 isatty Jun 10 08:56:31 cspgate sshd[2136]: debug1: fd 7 setting O_NONBLOCK Thanks, Stephen ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] RE: wireless gateway howto..?
This works fine with Bering. The real catch is to be sure you've configured shorewall to recognize the wlan zone and forward things properly to the net or loc zones as necessary. Another possible issue would be how you've configured your wireless card. You will need to set the ESSID, channel, and mode (ad-hoc) on both the gateway and your client. So I'd suggest two places to look: 1) Shorewall to ensure all the interfaces are represented properly 2) wireless.opts (?) to be sure the wireless devices can talk I'm not aware of a howto for this, but I recall Pete Dubler gave an explanation of how he got wireless going on the WAN side... May be some useful hints in there, can't recall exactly. His site is dublerfamily.com/leaf. He used Dachstein I believe, but there may be some hints not included in the Bering documentation that you find useful. You may also find it helpful to remove the second NIC, so that you have only the WAN NIC and your wireless card. If you can get that going, you'll be able to transition to a second card more easily perhaps. Otherwise, post some logs and configuration information and we might be able to be more helpful. Brock > Date: Sun, 9 Jun 2002 17:23:27 +0900 (KST) > From: =?EUC-KR?B?sbjFwr/u?= <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Organization: > Subject: [leaf-user] wireless gateway howto..? > > i want to make a dual gateway box. > one for wire lan(subnet) and the other for wireless lan in one box. > how can i do it? > i have two wire nics(rtl8139) and one wireless > nic(wavelan/ieee 11mb). > one rtl8139 is for external internet connection, another > rtl8139 for internal network, and one wireless is for > internal(?) wireless network. > > in fact, i have tried it with BERING, and it works good for > wire lan,but for wireless i didn't know howto.. > i just got two high beep(yeah, i know it means wireless nic > recognized, > but that's all i know) in boot process. > > please, give me any suggestion or advice. > thanks.. ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] A strange masquarading or DNS cache problem
Hello, Recently I setup a bering 1.0 rc2 based router for connecting through a DSL connection. I use dnscache on the router and the router's ip 192.168.1.254 is distributed through dhcp to the computers on the internal network as the dns to use. The firewall is really simple: 1. enable masqurading 2. allow dns to communitcate on the INPUT chain to make dnscache work properly I don't have the iptables script handy but I can get it if needed. The problem is that while masquarading seems to work properly many domains fail to resolve correctly or their content does not load. For example most of the .ca toplevel domains fail to resolve; major sites like www.yahoo.ca. Its not clear at all why this is happening... Has anyone seen a problem like this? Thanks in advance for any assistance, Mike O'Cleirigh ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] OT: stripping path on filename
Hi, I'm just making my first steps in shell programming. I'm sure there must be an easy way to strip the path from a filename (as provided by find for example) in order to use it as a base for fhurther processing. Sed?? Thanks Sergio D. Morilla ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] OT: stripping path on filename
> -Original Message- > From: Sergio Morilla [mailto:[EMAIL PROTECTED]] > Sent: Monday, June 10, 2002 2:39 PM > To: Leaf-user@lists. sourceforge. net (E-mail) > Subject: [leaf-user] OT: stripping path on filename > > I'm sure there must be an easy way to strip the path from > a filename (as provided by find for example) in order > to use it as a base for fhurther processing. dirname will give you the path and basename will give you the file without the path. I checked my Bering box and these commands are available. ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] OT: stripping path on filename
> I'm just making my first steps in shell programming. > I'm sure there must be an easy way to strip the path from > a filename (as provided by find for example) in order > to use it as a base for fhurther processing. You can use sed, but the command to do this is actually "basename": tempest: -root- # basename /bin/sh sh Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Re: Bering Kernel RC2 Config and Patches
Le Lundi 10 Juin 2002 17:54, Hugues Belanger a écrit : > Hi Jaques, > > I need to compile my own kelnel with USB and framebuffer support and > according to the config file in rc1 those features are not enable. > > Can I use the config + patches from rc1 on Kernel 2.4.18 ? > > Or can I can you send me the update patches and config file. > > I would bother you with this, but they are not available from source forge > anymore. > Everything is available on Sourceforge for rc2 Look at README.txt http://leaf.sourceforge.net/devel/jnilo/bering/latest/patches/kernel/ The config file is here: http://leaf.sourceforge.net/devel/jnilo/bering/latest/Bering_1.0-rc2.config (BtW USB support is included with rc2) If you really want to stick to rc1 - which I won't recommend - everything is archived here: http://prdownloads.sourceforge.net/leaf/Bering_1.0-rc1_kernel_2.4.18.bz2?download Jacques ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] 3Com NICs
What driver or modules do I need for the new 3Com 3C905CX-TX-M nic card in my Dachstein LEAF firewall? Thanks Scott. ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] success w/ multiple projects
Would you mind sharing with us some of things you use LTSP for and things you may use it for in the future. Thanks. "Joey Officer" <[EMAIL PROTECTED]> on 06/09/2002 03:09:43 PM Please respond to [EMAIL PROTECTED] To: "LRP Support" <[EMAIL PROTECTED]> cc: "LTSP Support" <[EMAIL PROTECTED]> (bcc: Phillip Watts/austin/Nlynx) Subject: [leaf-user] success w/ multiple projects I have been using the LEAF project for over a year now, and I have found many interesting things that can be done with the project. I have also been very interested in working with the Linux Terminal Server Project (LTSP) and have finally been able to do some things which have been very fruitful in my learning experience. This is a record of my account... I started working first on getting the LRP project up. That proved to be rather simple, and proved just how powerful Linux really was, esp. when working with very limited resources. After having integrated this into 2 of our offices here in the Houston area, and of course one box at home, I began looking at the other packages that were offered as part of this project. Secure Shell was a breeze to get up and running, and with a little more effort was able to get IPSec working. I also (at least I like to think so) was able to help a few people along the way, testing a few of the packages (udhcpd.lrp - thanks guitarlynn) and also working with the Disk-On-Module (truly a way to stop worrying about diskettes). Then as the company I am working for began to grow, and in an effort to become more legal (its so easy to not be sometimes), my thoughts turned to the LTSProject. I had worked with it once long ago, and had decided while being very easy to setup, was not practical at home, and I had no need for it any other place. But with the continuing development of the open source projects like OpenOffice, Mozilla, Ximian, and a few others, I finally found a new project that would not only able to save our company some cash, but also get us legal, and promote Linux in the office. I have gotten the company owner convinced that if we can save money, and if we can still perform the same job without any major changes, then I was free to do what I wanted, boy was I happy. Over the last couple of days I have asked a couple of questions regarding tftp, dhcpd, and some of the inner workings of the linux networking, and today I was able to put my test into action. I had my LTS box at home running, and was able to bring a display up here at the office, now while not being very practical in this manner, it proved just how powerful Linux as a true office solution can be. I will building a more robust server soon, and plan on implementing a combination of the projects at our office over the next couple of weeks. Unfortunately, we will still be required to run a windows based terminal server to serve up a couple of required applications, but on a whole, we will be a Linux based office. I just wanted to share a little of my success story. I know that it is sometimes frowned upon to add these stories to the general list, but I thought I would go ahead and write it, if it can be archived into another depository then so be it. If there is anyone working on anything similar, or would like some more specifics of how I did any of it, then please ask, I'd be glad to contribute back as much as I can to either of the projects. Thanks so much to everyone who assisted me in getting this far! Joey Officer Martin Apparatus, Inc. Linux -Advocate, no longer in training, In Action! ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] No-IP for Linux
I am trying out the NO-IP service (www.no-ip.com). For those unaware of it, it is just like the DNS2Go I have been using. NO-IP uses a client that updates their servers with your current, dynamic IP. There is source code and library available for Linux. However, I am unable to compile. I was hoping someone would be able to make a package (if one does not exist already) that I could use on my Dachstein 2.2.19 system. Many thanks in advance if anyone is able to provide this. John *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* John Mullan http://mullan.dns2go.com/ Personal: mailto:[EMAIL PROTECTED] Business: mailto:[EMAIL PROTECTED] ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Bering Firewall guidance
... I need some basic pointers here. Specifically, I flushed all the rules (iptables -F) and changed the policy of all the builtins to ACCEPT: # iptables -nL|more Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain all2all (0 references) target prot opt source destination Chain common (0 references) target prot opt source destination Chain fw2loc (0 references) target prot opt source destination Chain fw2net (0 references) target prot opt source destination Chain icmpdef (0 references) target prot opt source destination Chain loc2fw (0 references) target prot opt source destination Chain loc2net (0 references) target prot opt source destination Chain logdrop (0 references) target prot opt source destination Chain net2all (0 references) target prot opt source destination Chain net2fw (0 references) target prot opt source destination Chain reject (0 references) target prot opt source destination Chain rfc1918 (0 references) target prot opt source destination Chain shorewall (0 references) target prot opt source destination The box should be wide open now. So, why I can I not ping out eth0? # ping 10.1.2.248 PING 10.1.2.248 (10.1.2.248): 56 data bytes # tail syslog Jun 10 22:50:03 yoreach kernel: Shorewall:rfc1918:DROP:IN=eth0 OUT= MAC=00:10:5a:e1:e3:8b:00:20:6f:05:f9:6d:08:00 SRC=10.1.2.248 DST=10.1.2.203 LEN=44 TOS=0x00 PREC=0x00 TTL=60 ID=5663 PROTO=TCP SPT=23 DPT=1025 WINDOW=4096 RES=0x00 ACK SYN URGP=0 So, what am I missing? # uname -a Linux yoreach 2.4.18 #1 Sun Apr 21 12:50:34 CEST 2002 i686 unknown -- _ Nachman Yaakov Ziskind, EA, LLM [EMAIL PROTECTED] Attorney and Counselor-at-Law http://yankel.com Economic Group Pension Services http://egps.com Actuaries and Employee Benefit Consultants ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Bering Firewall guidance
On Mon, 10 Jun 2002, Nachman Yaakov Ziskind wrote: > ... I need some basic pointers here. Specifically, I flushed all the rules > (iptables -F) and changed the policy of all the builtins to ACCEPT: > > # tail syslog > > Jun 10 22:50:03 yoreach kernel: Shorewall:rfc1918:DROP:IN=eth0 OUT= > MAC=00:10:5a:e1:e3:8b:00:20:6f:05:f9:6d:08:00 SRC=10.1.2.248 DST=10.1.2.203 > LEN=44 TOS=0x00 PREC=0x00 TTL=60 ID=5663 PROTO=TCP SPT=23 DPT=1025 WINDOW=4096 > RES=0x00 ACK SYN URGP=0 > > So, what am I missing? > > # uname -a > Linux yoreach 2.4.18 #1 Sun Apr 21 12:50:34 CEST 2002 i686 unknown > So far, you haven't given us any clue as to what problem you are trying to solve. But if by some wild chance, you are trying to remove all Shorewall rules, the appropriate command is "shorewall clear". -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Bering Firewall guidance
On Mon, 10 Jun 2002 22:53:25 EDT Nachman Yaakov Ziskind wrote: > ... I need some basic pointers here. Specifically, I flushed all the rules > (iptables -F) and changed the policy of all the builtins to ACCEPT: [snip] > So, why I can I not ping out eth0? > > # ping 10.1.2.248 > PING 10.1.2.248 (10.1.2.248): 56 data bytes > > # tail syslog > > Jun 10 22:50:03 yoreach kernel: Shorewall:rfc1918:DROP:IN=eth0 OUT= > MAC=00:10:5a:e1:e3:8b:00:20:6f:05:f9:6d:08:00 SRC=10.1.2.248 DST=10.1.2.203 > LEN=44 TOS=0x00 PREC=0x00 TTL=60 ID=5663 PROTO=TCP SPT=23 DPT=1025 WINDOW=409 >6 > RES=0x00 ACK SYN URGP=0 > > So, what am I missing? The above iptables log entry is not from the ping (it's TCP not ICMP), but it *may* still hold the answer to your question. The rule that dropped the packet above is "Shorewall:rfc1918" which probably means you have a "norfc1918" entry in the eth0 line of your /etc/shorewall/interfaces file. Your ping to 10.1.2.248 *might* be dropped by that rule as well. Not being intimately familiar with iptables and the inner workings of shorewall, I'm a bit confused why a rfc1918 chain would override the default policy. Did you run "shorewall restart" after making your changes? --Brad ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Bering Firewall guidance
On Mon, 10 Jun 2002, Brad Fritz wrote: > > > > # tail syslog > > > > Jun 10 22:50:03 yoreach kernel: Shorewall:rfc1918:DROP:IN=eth0 OUT= > > MAC=00:10:5a:e1:e3:8b:00:20:6f:05:f9:6d:08:00 SRC=10.1.2.248 DST=10.1.2.203 > > LEN=44 TOS=0x00 PREC=0x00 TTL=60 ID=5663 PROTO=TCP SPT=23 DPT=1025 WINDOW=409 > >6 > > RES=0x00 ACK SYN URGP=0 > > > > So, what am I missing? > > The above iptables log entry is not from the ping (it's TCP not > ICMP), but it *may* still hold the answer to your question. The > rule that dropped the packet above is "Shorewall:rfc1918" which > probably means you have a "norfc1918" entry in the eth0 line of > your /etc/shorewall/interfaces file. Your ping to 10.1.2.248 > *might* be dropped by that rule as well. > > Not being intimately familiar with iptables and the inner workings > of shorewall, I'm a bit confused why a rfc1918 chain would override > the default policy. Did you run "shorewall restart" after making > your changes? > He cleared the filter table -- the above message is probably generated by a rule in the mangle table (I can't be sure since both the source and destination IP addresses are reserved under RFC 1918). You are correct that the underlying problem is probably that 'norfc1918' is specified on an interface where it shouldn't be. -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] ifconfig result
Hello everyone, I'm wondering if anyone knows *exactly* what causes TX errors, and none on the RX side. My machine here has two on-board eths, and one wireless pcmcia eth. I'm using eth0 as my external if, and the other two hosts my internal nets. Everything is working fine, ping latency is not erratic, but I'm getting these alarming TX errors displayed by the "ifconfig" command. I've read some archives and it suggests that such errors are caused by "flaky" cards. Everything seems working though. Any insights on this matter? TIA - Vic loLink encap:Local Loopback inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:3924 Metric:1 RX packets:566 errors:0 dropped:0 overruns:0 TX packets:0 errors:43721 dropped:566 overruns:0 eth0 Link encap:Ethernet HWaddr 00:04:A7:02:0A:39 inet addr:192.168.1.200 Bcast:192.168.1.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:585264 errors:0 dropped:0 overruns:0 TX packets:0 errors:41361141 dropped:426663 overruns:0 Interrupt:10 Base address:0xdc00 eth1 Link encap:Ethernet HWaddr 00:04:A7:02:0A:38 inet addr:192.168.2.200 Bcast:192.168.2.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 TX packets:0 errors:458353 dropped:2701 overruns:0 Interrupt:11 Base address:0xd800 wlan0 Link encap:Ethernet HWaddr 00:90:4B:00:5D:A1 inet addr:192.168.4.200 Bcast:192.168.4.255 Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:9309 errors:0 dropped:1 overruns:0 TX packets:0 errors:1995847 dropped:18651 overruns:4 Interrupt:10 Base address:0x100 ___ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas - http://devcon.sprintpcs.com/adp/index.cfm?source=osdntextlink leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
