[leaf-user] Bering 1.0 rc3: lots of rejected packets coming from firewall?
I just set up Bering 1.0 rc3, and I'm seeing lots (1500 the first day) of rejected packets. A vast majority of these are coming from my firewall. I followed the user guide & installation guide when I set it up, and so I went back to double check that I didn't miss a step. I've also tried doing some searches to figure out what these are and how to stop them, but the only thing I've come up with is that it may have to do with dhcp. Can someone tell me where to look? Or what the problem is? Here is the info from the weblet (by port): hits portService 834 68 bootpc 668 67 bootps Here is the info from the weblet (by ipaddress): Hits IP-Adress Date 834 192.168.1.254 Aug 20 586 192.168.1.4 Aug 20 Here is a sample of the entries from the log: Aug 20 08:26:32 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=38775 DF PROTO=UDP SPT=67 DPT=68 LEN=308 Aug 20 08:27:36 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=7128 DF PROTO=UDP SPT=67 DPT=68 LEN=308 Aug 20 08:28:40 firewall kernel: Shorewall:all2all:REJECT:IN= OUT=eth1 SRC=192.168.1.254 DST=192.168.1.4 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=25531 DF PROTO=UDP SPT=67 DPT=68 LEN=308 Any help is appreciated... -Mark Ivey- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] More bering/ipsec questions
On 8/20/02 10:22 AM, Tom Eastep <[EMAIL PROTECTED]> declared: > I've also updated that page -- it was out of date in the respect that it > talked about a 'gw' zone which was a Shorewall 1.[12] feature that was not > carried forward to Shorewall 1.3. Hopefully it will be clearer now... > > Jeff -- please let me know if you are still having problems... Tom, Thank you for pointing me in the right direction. Thanks to your updated information I can now successfully connect (and disconnect) with both SSH Sentinel and a Linksys VPN appliance without issue. RTFM once again saves the day! -Jeff Lush --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] wisp-dist and additional NIC modules
OK, I'm feeling a little stupid... and I'm not getting any useful hits from the archives. How can I copy a NIC module to /lib/modules in wisp-dist? I keep getting 'unable to open '/lib/modules/3c509.o': Permission denied.' Apparently there is more to this than meets the eye... I saw a mention of read-only file systems but the explanation was a little too sketchy for my abilities. Do I need to use the upgrade script to add a single module? I'm using 2290 (by the way, where is the 2312 I see mentioned on the list - I don't see it at sourceforge...) Brock Nanson Kamloops BC Canada --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Bearing and Lucent cards.
hi, A friend and I have setup a Bearing rc2 router w/ 1 100Mbit NIC and 1 BreezeCOM wireless NIC. They system comes up fine, the BreezeCOM card associates with the AP, but as soon as data enters the BreezeCOM card it causes a Kernel panic. We are using Kernel 2.4.18 and I am compiling the BreezeCOM drivers with PCMCI-CS 3.1.33 (to match Bearing rc2) and Beezecom 1.1 BETA drivers (from the BreezeCOM site). Anyone have some tips on how to stop the panic? Thanks, j. -- .. . Jason C. Leach .. Current PGP/GPG Key ID: 43AD2024 --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Booting from hard disk.
On Wed, 21 Aug 2002, S Mohan wrote: > Solved the problem. Seems like my ide-probe-mod.o was corrupted. I > wonder if it has something to do with downloading in windows and then > transferring to the bering setup. Had gone thro' renaming ide-pr~1.o to > ide-probe-mod.o. I've two suggestions and think this will be useful > given my experiences. > > 1. Can leaf developers stick to 8.3 naming format? No. This is not a "LEAF" issue ... it is a "Linux" issue... and to arbitrarily go changing standard names would make the documentation issue many times more difficult. Besides... 8.3 is a pain. > Alternatively, can > associated drivers/files be compressed into a 8.3 name format file which > can be decompressed on the bering machine. All lrp packages seem to > follow the 8.3 standard. Yes... that is the least "Linux-ish" part of LEAF, and is possible because that view of LEAF has nothing to do with the internal operation once it starts. It is an "archived" form of the system that is not really functional until it gets unarchived, at which point the names can be up to 31 characters long. > 2. Can a bootable ISO image of all LEAF distributions, modules,packages > etc be made available so that one can prepare a boot media on a CD > bootable machine without having to go on to the net everytime a module > or package is needed. There are several ISO images already, but they are each for a different LEAF variant. I cannot argue that having such a "super" CD wouldn't be nice, but it doesn't really efficiently address the problem of "having to go to the net everytime a module or package is needed." Downloading the modules tarfile and the floppy is usually enough to get started, but the packages often need additional documentation that may be found elsewhere on the web or in Linux distributions, or in archived email list messages. In an ideal world, such a CD would contain everything you need, but we aren't there yet. The Bering docs tarball is also a very nice start on sufficient documentation to get going without net access. If you want to start compiling one, you may eventually come up with what you want. [...] --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] 3com Ethernet Config Issue
Problem seems to be resolved with addition on the pci-scan module and removing one of the cards. It seems that the Motherboard utilizes IRQ sharing and it didn't care for the idea of having two nics on one IRQ. So, I now have two 10/100 cards in PCI slots and one 10Mbps card in an ISA slot. Thanks for the assist... -Wil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, August 20, 2002 6:48 AM To: Wil Rotruck Cc: Leaf Mailing List Subject: Re: [leaf-user] 3com Ethernet Config Issue We could really do with the output from dmesg to confirm how the cards are being identified. Also could you do an "ip addr" for the eht0 and eth1 to confirm existence, ip addresses etc. Gavin Wil Rotruck <[EMAIL PROTECTED]> To: Leaf Mailing List <[EMAIL PROTECTED]> Sent by: cc: [EMAIL PROTECTED] Subject: [leaf-user] 3com Ethernet Config Issue eforge.net 20/08/2002 11:08 I am using three 3com 905 Boomerang nics and am trying to run Bearing 1.0-rc3. During start-up the cards are detected, however, later in the start-up, the interface configuration fails. In looking at the nics themselves, when a cable modem in plugged into eth0 (setup as net) it lights up and shows an active connection. I also plugged a laptop into eth1 (setup as loc) and the nic did not show an active connection. To check to see if the nic was bad I swapped the cards between eth0 and eth1 with the same results. I then tired switching the connections hooking eth0 to the laptop and eth1 to the cable modem. This time eth1 showed a connection and eth0 did not. I have edited /etc/modules so that it loads the 3c59x.o as the driver and double checked the configuration files against the install guide and user manuals. In reading FAQ sec3, "How do I make Leaf see my Ethernet Cards," it makes mention of the 3com modules being dependent on a module called pci-scan.o. However, I have been unable to find a place to download it. At this point, I'm not sure that this is actually a driver problem but I can figure out what else it could be. I can find no information in the log files. But, it's also possible I am looking in the wrong place. Any help you can provide would be greatly appreciated... -Wil --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html Visit the Virgin Atlantic website for all the latest news and great special offers - http://www.virgin.com/atlantic This e-mail (and any attachments) may contain privileged and/or confidential information. If you are not the intended recipient please do not disclose, copy, distribute, disseminate or take any action in reliance on it. If you have received this message in error please reply and tell us and then delete all copies on your system. Any opinion on or advice or information contained in this email is not necessarily that of the owners or officers of this company. Should you wish to communicate with us by e-mail, we cannot guarantee the security of any data outside our own computer systems. --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] (no subject)
Okay, trolling here. Anybody know anything (or want to know anything) about mobile ip HA/FA support for LEAF? -- Chad Carr [EMAIL PROTECTED] --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] wisp and dns/dhcp
>> I modified ifup as you suggested and removed the entries in wdistconfig, saveconfig >and rebooted and still can not resolve >> any names.ping is say host lookup named failed. BTW - is there a "script" package >for LEAF ? Any ideas what could be >> wrong ? My windows box, which is also a dhcp client has no problem resolving >hostnames. > >Check contents of /etc/resolv.conf. If pump worked correctly it >should have updated with correct DNS settings. resolv.conf is 8 bytes and contains "search"... Doesn't look like the modification I made to ifup helped. David Ondzes [EMAIL PROTECTED] --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Booting from hard disk.
Solved the problem. Seems like my ide-probe-mod.o was corrupted. I wonder if it has something to do with downloading in windows and then transferring to the bering setup. Had gone thro' renaming ide-pr~1.o to ide-probe-mod.o. I've two suggestions and think this will be useful given my experiences. 1. Can leaf developers stick to 8.3 naming format? Alternatively, can associated drivers/files be compressed into a 8.3 name format file which can be decompressed on the bering machine. All lrp packages seem to follow the 8.3 standard. 2. Can a bootable ISO image of all LEAF distributions, modules,packages etc be made available so that one can prepare a boot media on a CD bootable machine without having to go on to the net everytime a module or package is needed. Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of S Mohan Sent: Tuesday, August 20, 2002 6:56 AM To: [EMAIL PROTECTED] Subject: [leaf-user] Booting from hard disk. Hi all: I guess this is an often asked question. I'm trying to prepare a hdd for bering boot. I booted the system from a floppy, loaded ide-mod.o, ide-disk.o and ide-probe-mod.o into /boot/lib/modules, enumerated them in /boot/etc/modules. I did a manual insmod and then am able to mount the hdd. Did syslinux, xfr of linux and edited syslinux.cfg to point pkgpath and boot to /dev/hda1. I backed up the current config using d l >>c>>hda1:msdos and the package got backed up fully. I edited linuxrc to show verbose messages before backing up. When I boot, the boot device is not recognised. The system hangs after generating /dev directory and trying to load boot. Obviously, the disk is not getting recognised. Since the system is going to linuxrc, ide drivers would have got loaded after initrd. In may earlier attempt I got errors here as I had included the .o extension in the /boot/etc/modules file. Thus I know the drivers are getting loaded now - no error msgs. Maybe /dev/hda1 is not accessible! Why? I can mount and access thro' commandline. Thanks in advance. I guess I'm missing something simple or trivial. I followed bubooting.html in the bering site. Mohan --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] High School Interest in LEAF for Routing
> > I would also like for it not to have a hard drive and boot off a > > super disk or zip disk. > > I did't know that you could boot straight off of zip disk. CDRW seems > fairly popular these days, though older BIOSes can't boot off them either. Booting off a Zip disk is pretty straight-forward, as long as it's supported by your BIOS. There's even a HOWTO: http://leaf.sourceforge.net/pub/doc/howto/LRP-Zip-HOWTO.txt As to routing a 100Mbit network at wire speed, you'll likely need a Pentium class system, or at least a 486 system with PCI slots (rare, but not unheard of). The ISA bus in 486 systems cannot handle the bandwidth of a single saturated 100 MBit link, much less two of them at once. The CPU load for routing between a couple 100 MBit segments is pretty low, however, so most any system with good PCI NIC's should be able to run at near wire speed, espeically if you're mainly dealing with large packets (CPU overhead on routing is mainly dependent on the number of packets, so it's easier to handle a few large packets than a bunch of small packets making up the same bandwidth). You might be able to get the 486 system running wire-speed 100 MBit if you can find a couple good bus-mastering EISA or VLB NIC's, but I think these are even scarcer than PCI enabled 486 systems :) Regardless, you should be able to aproach wire-speed 10 Mbit routing between a several 10 MBit NICs on your 486, using readily available ISA hardware. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Changing time in Bering?
On Tue, 20 Aug 2002, Craig wrote: > Hi folks, How do you change the time zone in Bering? http://www.geocrawler.com/archives/3/7325/2002/5/0/8796675/ Needs to make it into documentation somehow. > I see the weblet log files are time stamped, and not only is the time > incorrect but I'd like to change to 12 hr instead of 24 hr time also > (if that's possible). Thanks. Go into /var/sh-www/cgi-bin and find occurrences of "$(date)" and replace them with the date formatted to your preference, such as "$(date +'%a %b %d %r %Y')" (Look up manpage for "date" for meaning of format strings.) --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] High School Interest in LEAF for Routing
On Tue, 20 Aug 2002, Miguel A. Mota wrote: > Hi all, > I recently constructed a 7 Node (+ 1 Masternode/Terminal & 1 Server) > parallel-processing Linux cluster as a high school science project partially > funded with a few grants from Bell Labs/Lucent Technologies. In terms of > hardware, we are a Star topology single-pool heterogeneous 100 Base-T > switched cluster with speeds ranging from 450MHz to 800MHz, utilizing AMD > and Intel processors. We are using standard TCP/IP utilizing DNS, DHCP, > NFS, NIS, FTP, Apache, and Samba. For the operating system, we are using > Red Hat 7.3 Professional. I'm preparing to ease administration by > separating the network into two networks. Instead of buying a router I > wanted to try make one with a spare system, something between 200-400MHz. > And if possible (to show it off) out of an 486 equivalent pc. I use a 486-100, and it is overkill. Minimum of 16MB though... too much hassle with less. > It would not > have a keyboard, mouse, or video card Some bioses don't like booting without a keyboard. or video card. May be easier to leave them in. I have never heard of using a mouse with a router. > since I would like to administer it > via vnc. No, use ssh... much lower overhead, and very functional. > I would also like for it not to have a hard drive and boot off a > super disk or zip disk. I did't know that you could boot straight off of zip disk. CDRW seems fairly popular these days, though older BIOSes can't boot off them either. > I initially was directed to the LRP, but they > directed me to you. Oh? That is odd. LRP can probably do this as well, though it hasn't been updated in awhile. > Can someone help me and tell me what to do now? Go to http://leaf.sourceforge.net and look at the available options. I think Bering would be a good choice, but almost any of them could probably do it. Bering and Dachstein have very good documentation. The general approach is usually to download a floppy image, write it to a nice new floppy (image writing is not tolerant of dead sectors), and boot up on the destination box equipped with keyboard, video and monitor. The system loads off the floppy and runs entirely out of RAM. There are usually configuration steps you have to take with the RAMdisk, and you have to "back up" the changes to the floppy. After you have things working with ssh and all, then transition to headless operation. Many people dislike the poor reliability of floppies in dusty corners, so Compact Flash disks, CDRW, and hard disks are all alternatives that let you add more functionality and suffer less degradation from dust than floppies do. (Even with hard disks, LEAF routers almost always run entirely out of RAM, only using the disk to load the software from at boot time.) The boot media is usually FAT (msdos) formatted, and syslinux, isolinux, and loadlin can all be used to get Linux going. --- Jeff NewmillerThe . . Go Live... DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go... Live: OO#.. Dead: OO#.. Playing Research Engineer (Solar/BatteriesO.O#. #.O#. with /Software/Embedded Controllers) .OO#. .OO#. rocks...2k --- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] High School Interest in LEAF for Routing
At 07:55 PM 8/20/02 -0400, Miguel A. Mota wrote: >Hi all, > I recently constructed a 7 Node (+ 1 Masternode/Terminal & 1 Server) >parallel-processing Linux cluster as a high school science project partially >funded with a few grants from Bell Labs/Lucent Technologies. In terms of >hardware, we are a Star topology single-pool heterogeneous 100 Base-T >switched cluster with speeds ranging from 450MHz to 800MHz, utilizing AMD >and Intel processors. We are using standard TCP/IP utilizing DNS, DHCP, >NFS, NIS, FTP, Apache, and Samba. For the operating system, we are using >Red Hat 7.3 Professional. I'm preparing to ease administration by >separating the network into two networks. Instead of buying a router I >wanted to try make one with a spare system, something between 200-400MHz. >And if possible (to show it off) out of an 486 equivalent pc. It would not >have a keyboard, mouse, or video card since I would like to administer it >via vnc. I would also like for it not to have a hard drive and boot off a >super disk or zip disk. I initially was directed to the LRP, but they >directed me to you. Can someone help me and tell me what to do now? Have you looked at the LEAF Web site (leaf.sourceforge.net)? If not, that's the first thing to do. Read the descriptions and at least skim the FAQ (it will make more sense later in the process, so just skim it for now). Then download a couple of the images -- floppy or CD, depending on your equipment -- and give them a test drive. I myself don't know offhand what CPU some of the newer variants expect, but Dachstein at least will run nicely on a 486 with 32 megs of RAM (maybe less RAM, depending on how much of the functionality you implement), -IF- you are routing at Internet speeds (under 1.5 Mbps) ... so that may not be the best choice for an E-to-E router of the sort you seem to have in mind. Running on something like a P150 is trivially easy, even all-out at 100 Mbps. As to the details ... LEAF systems are usually remote admined via ssh logins or a "weblet" interface. I haven't heard of anyone using VNC, since LEAF systems do not usually (ever?) run X or X apps. Running without a mouse is straightforward, and most hardware will run without a keyboard attached ... but you may have problems (not with LEAF, but with the BIOS) trying to run without a video card. If the system you set up is too large to fit on a floppy, you may find a CD a better boot option than a ZIP or LS120. In all honesty, LEAF might not be the best way for you to go. You probably already know how easy it is to adapt a standard Red Hat host to serve as a router, and you might well prefer its greater capabilities -- the VNC interface in particular comes to mind -- to the leaner style of LEAF. Good luck. After you've looked things over, please do not hesitate to post more specific questions. -- ---"Never tell me the odds!" Ray Olszewski -- Han Solo Palo Alto, California, USA[EMAIL PROTECTED] --- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
(Fwd) Re: [leaf-user] wisp-dist img / build 2312 --- can't get
I am experiencing this ... When the wisp-dist is in AP mode, both the client and the AP show they are associated. When I ping the AP from the laptop ( client ) The Access Point Statistics for wlan0: show it is receiving the ping pkts, but are not transmitting eg. xx:xx:xx:xx:xx:xx (): silence=13 signal=110 rate=20 flow=0 TX: 0kb RX: 258kb I have confirmed the antenna socket I am plugged into is working and works if I use either the TT v3.xxx firmware or station-server Any ideas? On 20 Aug 2002 at 23:47, Vladimir I. wrote: > [EMAIL PROTECTED] wrote about "[leaf-user] wisp-dist img / build 2312 --- can't >get AP mode to pass traffic over TT 100mW cards": > > > wisp-dist build 2312 > > > > I have loaded the 2312 flash image on the new TT board and also on the Soekris > > board. I am using the new 100mW higher power card. > > > > They pass traffic in infrastructure / client mode but not in AP mode. If I use >station- > > server or TT firmware for AP, the wisp-dist client works but not in AP mode. > > I noticed that only one of the antenna sockets works in TT's high > power cards, at least in Access Point (Master) mode. This may be > your problem as well. Let me know. > > > > > I have seen it mentioned it may have something to do with the new pcmcia >controller > > on these two boards. I am not sure. > > 2312 should support PCMCIA controllers on both new TT and Soekris > out of the box. > > > Also, the RSSI reading in client mode just sits at 100% whether connected or not. >I > > figure this is a problem with the driver talking to the card. > > Well, TT's high power cards are strange in the way they report > values. I never ran TT's high power in client mode (yet), > however, in AP mode I see that TX power level that it reports is > endlessly jumping from high to low. It doesn't affect operation > in any other way, though. > > Nevertheless, client statistics are reported correctly when the > card is in AP mode. > > -- > Best Regards, > Vladimir > Systems Engineer (RHCE) > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- End of forwarded message --- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] High School Interest in LEAF for Routing
Hi all, I recently constructed a 7 Node (+ 1 Masternode/Terminal & 1 Server) parallel-processing Linux cluster as a high school science project partially funded with a few grants from Bell Labs/Lucent Technologies. In terms of hardware, we are a Star topology single-pool heterogeneous 100 Base-T switched cluster with speeds ranging from 450MHz to 800MHz, utilizing AMD and Intel processors. We are using standard TCP/IP utilizing DNS, DHCP, NFS, NIS, FTP, Apache, and Samba. For the operating system, we are using Red Hat 7.3 Professional. I'm preparing to ease administration by separating the network into two networks. Instead of buying a router I wanted to try make one with a spare system, something between 200-400MHz. And if possible (to show it off) out of an 486 equivalent pc. It would not have a keyboard, mouse, or video card since I would like to administer it via vnc. I would also like for it not to have a hard drive and boot off a super disk or zip disk. I initially was directed to the LRP, but they directed me to you. Can someone help me and tell me what to do now? Miguel A. Mota [EMAIL PROTECTED] --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Changing time in Bering?
Hi folks, How do you change the time zone in Bering? I see the weblet log files are time stamped, and not only is the time incorrect but I'd like to change to 12 hr instead of 24 hr time also (if that's possible). Thanks. Craig --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Identifying the "scanning" culprit???
I have similar scripts written for the Dachstein or Eiger dists. Take a look at http://vette66.com Chuck - Original Message - From: "Cass Tolken" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; "LEAF" <[EMAIL PROTECTED]> Sent: Tuesday, August 20, 2002 1:02 PM Subject: RE: [leaf-user] Identifying the "scanning" culprit??? > Hi Joey, > > Ah! You left off the "not" in your original post (BIG difference ;). > Ya, if you followed the thread, it was for weblet in the Bering distro. > I don't know what's different in the Dachstein version, perhaps someone > else on the list can incorporate similar modifications and post. > > --- Joey Officer <[EMAIL PROTECTED]> wrote: > > I looked in cgi-bin/* but did not find a viewhits, under dachstein the file > > (equivalent I assume) is viewlogs. Again I'm not familiar w/ the html and > > all of this, but I'd like to do this to atleast let the offending machines > > be aware of my dissatisfaction... > > > > Joey > > > > > > -Original Message- > > From: Cass Tolken [mailto:[EMAIL PROTECTED]] > > Sent: Tuesday, August 20, 2002 11:41 AM > > To: [EMAIL PROTECTED]; LEAF > > Subject: RE: [leaf-user] Identifying the "scanning" culprit??? > > > > Hi Joey, > > > > I mentioned below in my example that the modification is in > > /var/sh-www/cgi-bin/viewhits specifically under the "hitssort" clause of > > the "case" construct. I also mentioned I do this in the "messages" and "x" > > too... but I figured it was easier to just post the whole scipts (I sent the > > URL in a previous e-mail) > > > > Arin is for American IPs, you can further modify my script modifications to > > include European, Asian, etc. IPs as an exercise ;) > > > > http://www.ripe.net/perl/whois/ > > http://www.apnic.net/apnic-bin/whois2.pl > > etc. > > > > --- Joey Officer <[EMAIL PROTECTED]> wrote: > > > Judging from what it sounds I could click on the link and automagically do > > a > > > search on that hit. I like it. But I'm very familiar with writing any > > kind > > > of html lines. Are the lines you posted below ready for input into a > > > Dachstein weblet config. And specifically which files would I modify... > > > > > > Sorry for being ignorant on the matter... > > > > > > Joey > [snip] > > > __ > Do You Yahoo!? > HotJobs - Search Thousands of New Jobs > http://www.hotjobs.com > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] DHCP Leases - Second Posting
First of all, from the info you described, eth4 is not using pump to get a
DHCP lease; you are assigning it a static address in
/etc/network/interfaces, as follows:
iface eth4 inet static
address 68.116.40.4
masklen 24
broadcast 68.116.40.255
gateway 68.116.40.1
Your pump config line is inconsistent with this, as it does list eth4, but
I *think* the interfaces setting takes precedence.
Second, dhcp clients *can* ask for leases with specific time requirements.
The "max-lease"time" statement in dhcpd.conf, for example, is there to
prevent a DHCP *server* from issuing long licenses even if the client
requests a long one. Since I don't know what DHCP server software your ISP
runs, I can't say what it might be doing with respect to default and
maximum lease values.
To specify a particular lease time in your pump request, you use the -l
command-line argument, providing a value in hours. The man page I have does
not specify an equivalent config-file directive. Nor does it tell me if
pump has a default setting.
dhcpd is a DHCP server, so its config files are relevant only to your LAN,
not the external leases.
I'm sorry that none of this feedback is specific to Bering. I don't run
Bering herw, which is why I didn't reply first time around. Since you asked
a second time, I thought I would at least tell you what I could, in the
hope that you might be able to figure out for yourself how to apply this
info to the specifics of the Berign setup.
I think that if I were you, I'd just find out what the addresses are for
eth0 and eth1, and assign them as static entries in
/etc/network/interfaces. Two years is forever with respect to IP addresses.
At 03:33 PM 8/20/02 -0700, Harold Miller wrote:
>Is there a better place for me to ask this question?
>
>
>I'm running Bering RC3. I have an internal net that my fw is supplying dhcp
>service to on eth3. I also need to get a dhcp lease on my INTERNET access
>connections (eth0, eth1 and eth4). They are supposed to be a 2 year lease
>(sorta static-IP). Eth4 seems to be getting the 2 year lease, eth0 and eth1
>lose their IP# after 12 hours.
>
>Right now I'm running both pump and dhcpd packages.
>
>My ISP is telling me - "Looking at the DHCP log, it appears that a 2 year
>lease is assigned, then quickly changed to 12 hours. They made a couple of
>changes on the scope, but we can't figure out why you are the only one with
>these symptoms. "
>
>Where can I see the information (Lease duration) that I am being given?
>
>Is it possible that the Bering fw is modifying the lease time?
>
>Thanks,
>Harold Miller
>
>--
>/etc/pump.conf contains:
>retries 3
>script "/etc/pump.shorewall"
>device eth0 {
> nodns
>}
>device eth1 {
> nodns
>}
>device eth4 {
> nodns
>}
>-
>/etc/dhcpd.conf contains:
>dynamic-bootp-lease-length 604800;
>max-lease-time 1209600;
>
>subnet 192.168.2.0 netmask 255.255.255.0 {
> option routers 192.168.2.254;
> option domain-name "private.network";
> option domain-name-servers 192.168.2.254,66.169.254.29,66.169.254.30;
> range 192.168.2.1 192.168.2.199;
>}
>---
>/etc/default/pump contains:
>IFACES=eth0,eth1,eth4
>
>/etc/network/interfaces contains:
>auto lo
>iface lo inet loopback
>auto eth0
>iface eth0 inet dhcp
>auto eth1
>iface eth1 inet dhcp
>auto eth2
>iface eth2 inet static
> address 192.168.10.254
> masklen 24
> broadcast 192.168.10.255
>auto eth3
>iface eth3 inet static
> address 192.168.2.254
> masklen 24
> broadcast 192.168.2.255
>auto eth4
>iface eth4 inet static
> address 68.116.40.4
> masklen 24
> broadcast 68.116.40.255
> gateway 68.116.40.1
--
---"Never tell me the odds!"
Ray Olszewski -- Han Solo
Palo Alto, California, USA[EMAIL PROTECTED]
---
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] DHCP Leases - Second Posting
Is there a better place for me to ask this question?
I'm running Bering RC3. I have an internal net that my fw is supplying dhcp
service to on eth3. I also need to get a dhcp lease on my INTERNET access
connections (eth0, eth1 and eth4). They are supposed to be a 2 year lease
(sorta static-IP). Eth4 seems to be getting the 2 year lease, eth0 and eth1
lose their IP# after 12 hours.
Right now I'm running both pump and dhcpd packages.
My ISP is telling me - "Looking at the DHCP log, it appears that a 2 year
lease is assigned, then quickly changed to 12 hours. They made a couple of
changes on the scope, but we can't figure out why you are the only one with
these symptoms. "
Where can I see the information (Lease duration) that I am being given?
Is it possible that the Bering fw is modifying the lease time?
Thanks,
Harold Miller
--
/etc/pump.conf contains:
retries 3
script "/etc/pump.shorewall"
device eth0 {
nodns
}
device eth1 {
nodns
}
device eth4 {
nodns
}
-
/etc/dhcpd.conf contains:
dynamic-bootp-lease-length 604800;
max-lease-time 1209600;
subnet 192.168.2.0 netmask 255.255.255.0 {
option routers 192.168.2.254;
option domain-name "private.network";
option domain-name-servers 192.168.2.254,66.169.254.29,66.169.254.30;
range 192.168.2.1 192.168.2.199;
}
---
/etc/default/pump contains:
IFACES=eth0,eth1,eth4
/etc/network/interfaces contains:
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet dhcp
auto eth1
iface eth1 inet dhcp
auto eth2
iface eth2 inet static
address 192.168.10.254
masklen 24
broadcast 192.168.10.255
auto eth3
iface eth3 inet static
address 192.168.2.254
masklen 24
broadcast 192.168.2.255
auto eth4
iface eth4 inet static
address 68.116.40.4
masklen 24
broadcast 68.116.40.255
gateway 68.116.40.1
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Booting from hard disk.
On Monday 19 August 2002 20:26, S Mohan wrote: > Thanks in advance. I guess I'm missing something simple or trivial. I > followed bubooting.html in the bering site. Is your hd partition set to active and bootable (likely)? How big is the partition (=<25 meg DOS limitation)? -- ~Lynn Avants aka Guitarlynn guitarlynn at users.sourceforge.net http://leaf.sourceforge.net If linux isn't the answer, you've probably got the wrong question! --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] wisp-dist img / build 2312 --- can't get AP mode to pass traffic over TT 100mW cards
[EMAIL PROTECTED] wrote about "[leaf-user] wisp-dist img / build 2312 --- can't get AP mode to pass traffic over TT 100mW cards": > wisp-dist build 2312 > > I have loaded the 2312 flash image on the new TT board and also on the Soekris > board. I am using the new 100mW higher power card. > > They pass traffic in infrastructure / client mode but not in AP mode. If I use >station- > server or TT firmware for AP, the wisp-dist client works but not in AP mode. I noticed that only one of the antenna sockets works in TT's high power cards, at least in Access Point (Master) mode. This may be your problem as well. Let me know. > > I have seen it mentioned it may have something to do with the new pcmcia controller > on these two boards. I am not sure. 2312 should support PCMCIA controllers on both new TT and Soekris out of the box. > Also, the RSSI reading in client mode just sits at 100% whether connected or not. I > figure this is a problem with the driver talking to the card. Well, TT's high power cards are strange in the way they report values. I never ran TT's high power in client mode (yet), however, in AP mode I see that TX power level that it reports is endlessly jumping from high to low. It doesn't affect operation in any other way, though. Nevertheless, client statistics are reported correctly when the card is in AP mode. -- Best Regards, Vladimir Systems Engineer (RHCE) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] wisp-dist img / build 2312 --- can't get AP mode to pass traffic over TT 100mW cards
wisp-dist build 2312 I have loaded the 2312 flash image on the new TT board and also on the Soekris board. I am using the new 100mW higher power card. They pass traffic in infrastructure / client mode but not in AP mode. If I use station- server or TT firmware for AP, the wisp-dist client works but not in AP mode. I have seen it mentioned it may have something to do with the new pcmcia controller on these two boards. I am not sure. Any ideas / help / suggestions? Also, the RSSI reading in client mode just sits at 100% whether connected or not. I figure this is a problem with the driver talking to the card. -- jjee rrhhuuee --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Identifying the "scanning" culprit???
Hi Craig, --- Craig <[EMAIL PROTECTED]> wrote: > Hi folks, > I've copied the files that Cass referred to earlier to my > /var/sh-www/cgi-bin directory, and I've issued the following > commands...but my weblet just shows blank screens when I try to view the > logs-Hmmm, I wonder what I'm doing wrong. After copying the files I- There are a couple of things I can think of. How did you save the files? Was there a Windows editor involved anywhere in this process? I ask because Windows and *nix have different ideas about end of line characters and this has caused scripts NOT to work for me in the past. Can you check the following file sizes to see if you downloaded them correctly? # cd /var/sh-www/cgi-bin # ls -l viewhits viewmasq -rwxr-xr-x1 sh-httpd adm 2807 Aug 9 09:12 viewhits -rwxr-xr-x1 sh-httpd adm 1842 Jul 26 06:38 viewmasq If the file sizes DO NOT match, you should download them again from my URL but this time RIGHT-CLICK the link from your browser and do a "save target as." Hopefully this is what's causing your problem. The only other thing I can think of is the ownership: # chown sh-httpd:adm viewhits viewmasq If it's not either of these things then I don't know what else it could be. Have you checked /var/log/syslog? [snip] > Saved, backed up...and I just get blank weblet screens (but no apparent > error messages) when I view weblet through my browser. Any suggestions? > Thank you. If all else fails you can alway restore the original weblet.lrp package from the original Bering floppy. __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Booting from hard disk.
On Tue, 20 Aug 2002 06:56:04 +0530 S Mohan wrote: > Hi all: > > I guess this is an often asked question. I'm trying to prepare a hdd for > bering boot. I booted the system from a floppy, loaded ide-mod.o, > ide-disk.o and ide-probe-mod.o into /boot/lib/modules, enumerated them > in /boot/etc/modules. I did a manual insmod and then am able to mount > the hdd. Did syslinux, xfr of linux and edited syslinux.cfg to point > pkgpath and boot to /dev/hda1. I backed up the current config using d l > >>c>>hda1:msdos and the package got backed up fully. I edited linuxrc to > show verbose messages before backing up. Sounds good so far, although your abbreviations/summaries in the description of copying the files to the HDD was somewhat hard to follow. > When I boot, the boot device is not recognised. The system hangs after > generating /dev directory and trying to load boot. Obviously, the disk > is not getting recognised. Since the system is going to linuxrc, ide > drivers would have got loaded after initrd. In may earlier attempt I got > errors here as I had included the .o extension in the /boot/etc/modules > file. Thus I know the drivers are getting loaded now - no error msgs. > Maybe /dev/hda1 is not accessible! Why? I can mount and access thro' > commandline. As far as I can tell from my interpretation of your description, the hang isn't the result of the usual suspects like a bad MBR, missing module files, or errors in /boot/etc/modules . I know it can be a pain to transcribe error messages from a non-booting machine, but could you include the console messages from when the ide-* modules are loaded during boot, including the output following those insmods, and any other lines from boot-up that are related to disks and filesystems? The last few lines before the hang are always good to include too. If you have a serial port handy, you might add the syslinux.cfg lines described at http://leaf-project.org/devel/jnilo/buconsole.html to allow you to copy and paste them. --Brad > Thanks in advance. I guess I'm missing something simple or trivial. I > followed bubooting.html in the bering site. > > Mohan --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] icq/SOCKS5 doesn't work when both are behind LRP.
Greetings, Ever since I upgraded my Window-icq client to 2001a I have been trying to get file-transfer/chat working behind LRP. The old icq-masq modules simply doesn't work anymore and I have read messages from LEAF explaining that it was due to change of protocol. So I installed SOCKS5 on my Dachstein and was happy for a while. I can do chat/file-transfer with anyone who isn't behind a firewall/router. However, I just discovered file-transfer/chat will NOT work if both parties are behind LRP/SOCKS5. I have identical Dachstein w. SOCKS5 for both work/home, and I can't establish direct connect for file-transfer/chat. My /etc/socks5.conf is attached below: set SOCKS5_BINDINTFC 192.168.1.254:1080 set SOCKS5_NOIDENT interface 182.168.1. - eth1 auth 192.168.1. - - permit - - 192.168.1. - - - - deny - - - - - - - icq clients are set up using SOCKS5 with SOCKS server at 192.168.1.254 (port 1080), which is my Dachstein. eth1 (192.168.1.254) is for internal network. Has anyone got file-transfer/chat to work when both parties are behind SOCKS5? Is anything missing from my socks5.conf, and if not, how should I configure my windows icq client (I have tried all combination of them). any help is very much appreciated, ECC __ Post your ad for free now! http://personals.yahoo.ca --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Identifying the "scanning" culprit???
Hi Joey, Ah! You left off the "not" in your original post (BIG difference ;). Ya, if you followed the thread, it was for weblet in the Bering distro. I don't know what's different in the Dachstein version, perhaps someone else on the list can incorporate similar modifications and post. --- Joey Officer <[EMAIL PROTECTED]> wrote: > I looked in cgi-bin/* but did not find a viewhits, under dachstein the file > (equivalent I assume) is viewlogs. Again I'm not familiar w/ the html and > all of this, but I'd like to do this to atleast let the offending machines > be aware of my dissatisfaction... > > Joey > > > -Original Message- > From: Cass Tolken [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, August 20, 2002 11:41 AM > To: [EMAIL PROTECTED]; LEAF > Subject: RE: [leaf-user] Identifying the "scanning" culprit??? > > Hi Joey, > > I mentioned below in my example that the modification is in > /var/sh-www/cgi-bin/viewhits specifically under the "hitssort" clause of > the "case" construct. I also mentioned I do this in the "messages" and "x" > too... but I figured it was easier to just post the whole scipts (I sent the > URL in a previous e-mail) > > Arin is for American IPs, you can further modify my script modifications to > include European, Asian, etc. IPs as an exercise ;) > > http://www.ripe.net/perl/whois/ > http://www.apnic.net/apnic-bin/whois2.pl > etc. > > --- Joey Officer <[EMAIL PROTECTED]> wrote: > > Judging from what it sounds I could click on the link and automagically do > a > > search on that hit. I like it. But I'm very familiar with writing any > kind > > of html lines. Are the lines you posted below ready for input into a > > Dachstein weblet config. And specifically which files would I modify... > > > > Sorry for being ignorant on the matter... > > > > Joey [snip] __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Identifying the "scanning" culprit???
I looked in cgi-bin/* but did not find a viewhits, under dachstein the file
(equivalent I assume) is viewlogs. Again I'm not familiar w/ the html and
all of this, but I'd like to do this to atleast let the offending machines
be aware of my dissatisfaction...
Joey
-Original Message-
From: Cass Tolken [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 20, 2002 11:41 AM
To: [EMAIL PROTECTED]; LEAF
Subject: RE: [leaf-user] Identifying the "scanning" culprit???
Hi Joey,
I mentioned below in my example that the modification is in
/var/sh-www/cgi-bin/viewhits specifically under the "hitssort" clause of
the "case" construct. I also mentioned I do this in the "messages" and "x"
too... but I figured it was easier to just post the whole scipts (I sent the
URL in a previous e-mail)
Arin is for American IPs, you can further modify my script modifications to
include European, Asian, etc. IPs as an exercise ;)
http://www.ripe.net/perl/whois/
http://www.apnic.net/apnic-bin/whois2.pl
etc.
--- Joey Officer <[EMAIL PROTECTED]> wrote:
> Judging from what it sounds I could click on the link and automagically do
a
> search on that hit. I like it. But I'm very familiar with writing any
kind
> of html lines. Are the lines you posted below ready for input into a
> Dachstein weblet config. And specifically which files would I modify...
>
> Sorry for being ignorant on the matter...
>
> Joey
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Cass Tolken
> Sent: Tuesday, August 20, 2002 9:40 AM
> To: Craig; LEAF
> Subject: Re: [leaf-user] Identifying the "scanning" culprit???
>
> Hello again Craig,
>
> If you're using weblet (Bering comes with it default) you can so something
> like this:
>
> in /var/sh-www/cgi-bin/viewhits, hitssort)
>
> sed 's/\(.\{6\}\)\(.*SRC=\)\(.*\)\( DST=.*\)/\<\/td\>\\ href=\"http:\/\/ws.arin.net\/cgi-bin\/whois.pl?queryinput=\3\"\>A
> rin\<\/a\> - \ href=\"viewhits?x_\3\"\>\3\<\/a\><\/td\>\\1\<\/td\>\<\/tr\>/'|\
>
> so that I can just click to query arin. I also do this in "messages" and
> "x"
> in the viewhits script. You should be able to figure out how from this
> example (hopefully ;).
[snip]
__
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Copy and paste to/from Bering?
On Tue, 20 Aug 2002 08:38:48 MST Craig wrote: > Hi folks, > How do you copy from some of the newsgroup messages (scripts, etc. that > people have given examples of) and paste in into your firewall files. I > know to just save it as a text file to floppy, but how do I open the > file to then copy and paste at the firewall? Thank you. It's much easier if you're using ssh: on a computer with a full-blown Linux or Windows distribution open the source file in one window and a ssh in another. Copy and paste as you would normally copy and paste between two apps. If you don't have remote terminal access to the firewall, this procedure might work for you: - save the files to an msdos formatted diskette - mount the diskette from the firewall: mount -t msdos /dev/fd0u1440 /mnt # for 1.44 MB floppies mount -t msdos /dev/fd0u1680 /mnt # for 1.68 MB floppies - append the source file to the target file in a temporary file: cat target_file source_file > /tmp/newfile - edit the temporary file with your editor to make it look like you want (exact instructions depend on what editor you're using) - back up the original cp target_file target_file.bak - move the temp file over the original mv /tmp/newfile target_file Again, if you're doing much of this, ssh is *the* way to go. If you need an ssh client for windows, I highly recommend putty[1]. HTH, Brad [1] www.chiark.greenend.org.uk/~sgtatham/putty/ --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] More bering/ipsec questions
On Mon, 19 Aug 2002, Chad Carr wrote: > On Mon, 19 Aug 2002 13:07:45 -0700 (PDT) > "Tom Eastep" <[EMAIL PROTECTED]> wrote: > > > > > http://www.shorewall.net/IPSEC.htm. > > > > PLEASE folks -- at least _try_ to find this kind of thing on the > > Shorewall site before posting. > > > Hey! I have a crazy idea! Why don't Lynn and I point to your site in > our docs? > I've also updated that page -- it was out of date in the respect that it talked about a 'gw' zone which was a Shorewall 1.[12] feature that was not carried forward to Shorewall 1.3. Hopefully it will be clearer now... Jeff -- please let me know if you are still having problems... Thanks, -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Identifying the "scanning" culprit???
Judging from what it sounds I could click on the link and automagically do a
search on that hit. I like it. But I'm very familiar with writing any kind
of html lines. Are the lines you posted below ready for input into a
Dachstein weblet config. And specifically which files would I modify...
Sorry for being ignorant on the matter...
Joey
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Cass Tolken
Sent: Tuesday, August 20, 2002 9:40 AM
To: Craig; LEAF
Subject: Re: [leaf-user] Identifying the "scanning" culprit???
Hello again Craig,
If you're using weblet (Bering comes with it default) you can so something
like this:
in /var/sh-www/cgi-bin/viewhits, hitssort)
sed 's/\(.\{6\}\)\(.*SRC=\)\(.*\)\( DST=.*\)/\<\/td\>\\A
rin\<\/a\> - \\3\<\/a\><\/td\>\\1\<\/td\>\<\/tr\>/'|\
so that I can just click to query arin. I also do this in "messages" and
"x"
in the viewhits script. You should be able to figure out how from this
example (hopefully ;).
--- Craig <[EMAIL PROTECTED]> wrote:
> Hi folks,
> I often see a lot of messages in my Bering logs from the 12.246.x.x
> network, which I suspect is my ISP. Is there any way you can accurately
> identify who a network/subnet belongs to? Thank you.
>
> Craig
__
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Identifying the "scanning" culprit???
Hi Craig, It might be easier to just upload my scripts so that you (or anyone else interested) can download them. Beware ugly geocites page!! ;) http://www.geocities.com/casstolk/index.html Have fun! --- Craig <[EMAIL PROTECTED]> wrote: > Hi Cass, > Wow...that looks pretty cool. Unfortunately, I don't understand how to > use your script. I you could explain it to me (if you have a moment), > that would be great. Do I enter this script in a file somewhere? Which > file do I back-up to save it? Thank you. __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Copy and paste to/from Bering?
Hi folks, How do you copy from some of the newsgroup messages (scripts, etc. that people have given examples of) and paste in into your firewall files. I know to just save it as a text file to floppy, but how do I open the file to then copy and paste at the firewall? Thank you. Craig --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Identifying the "scanning" culprit???
Hi Cass, Wow...that looks pretty cool. Unfortunately, I don't understand how to use your script. I you could explain it to me (if you have a moment), that would be great. Do I enter this script in a file somewhere? Which file do I back-up to save it? Thank you. Craig --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] looking for SMBCLIENT for bering
Anyone has it compiled or can compile it? Thanks --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Identifying the "scanning" culprit???
Hello again Craig,
If you're using weblet (Bering comes with it default) you can so something
like this:
in /var/sh-www/cgi-bin/viewhits, hitssort)
sed 's/\(.\{6\}\)\(.*SRC=\)\(.*\)\( DST=.*\)/\<\/td\>\\A
rin\<\/a\> - \\3\<\/a\><\/td\>\\1\<\/td\>\<\/tr\>/'|\
so that I can just click to query arin. I also do this in "messages" and "x"
in the viewhits script. You should be able to figure out how from this
example (hopefully ;).
--- Craig <[EMAIL PROTECTED]> wrote:
> Hi folks,
> I often see a lot of messages in my Bering logs from the 12.246.x.x
> network, which I suspect is my ISP. Is there any way you can accurately
> identify who a network/subnet belongs to? Thank you.
>
> Craig
__
Do You Yahoo!?
HotJobs - Search Thousands of New Jobs
http://www.hotjobs.com
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Identifying the "scanning" culprit???
Hi Craig, Try: http://ws.arin.net/cgi-bin/whois.pl --- Craig <[EMAIL PROTECTED]> wrote: > Hi folks, > I often see a lot of messages in my Bering logs from the 12.246.x.x > network, which I suspect is my ISP. Is there any way you can accurately > identify who a network/subnet belongs to? Thank you. __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Identifying the "scanning" culprit???
Hi folks, I often see a lot of messages in my Bering logs from the 12.246.x.x network, which I suspect is my ISP. Is there any way you can accurately identify who a network/subnet belongs to? Thank you. Craig --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] More bering/ipsec questions
On Mon, 19 Aug 2002, Chad Carr wrote: > On Mon, 19 Aug 2002 13:07:45 -0700 (PDT) > "Tom Eastep" <[EMAIL PROTECTED]> wrote: > > > > > http://www.shorewall.net/IPSEC.htm. > > > > PLEASE folks -- at least _try_ to find this kind of thing on the > > Shorewall site before posting. > > > Hey! I have a crazy idea! Why don't Lynn and I point to your site in > our docs? > Sounds sensible -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \ [EMAIL PROTECTED] --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] 3com Ethernet Config Issue
Hi Wil, --- Wil Rotruck <[EMAIL PROTECTED]> wrote: [snip] > In looking at the nics > themselves, when a cable modem in plugged into eth0 (setup as net) it > lights up and shows an active connection. I also plugged a laptop into > eth1 (setup as loc) and the nic did not show an active connection. [snip] When you say you "plugged a laptop into eth1," do you mean you plugged the laptop straight into eth1 with a patch cable? I just wanted to make sure you used a crossover cable, a hub or some such. __ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] 3com Ethernet Config Issue
We could really do with the output from dmesg to confirm how the cards are being identified. Also could you do an "ip addr" for the eht0 and eth1 to confirm existence, ip addresses etc. Gavin Wil Rotruck <[EMAIL PROTECTED]> To: Leaf Mailing List <[EMAIL PROTECTED]> Sent by: cc: [EMAIL PROTECTED] Subject: [leaf-user] 3com Ethernet Config Issue eforge.net 20/08/2002 11:08 I am using three 3com 905 Boomerang nics and am trying to run Bearing 1.0-rc3. During start-up the cards are detected, however, later in the start-up, the interface configuration fails. In looking at the nics themselves, when a cable modem in plugged into eth0 (setup as net) it lights up and shows an active connection. I also plugged a laptop into eth1 (setup as loc) and the nic did not show an active connection. To check to see if the nic was bad I swapped the cards between eth0 and eth1 with the same results. I then tired switching the connections hooking eth0 to the laptop and eth1 to the cable modem. This time eth1 showed a connection and eth0 did not. I have edited /etc/modules so that it loads the 3c59x.o as the driver and double checked the configuration files against the install guide and user manuals. In reading FAQ sec3, "How do I make Leaf see my Ethernet Cards," it makes mention of the 3com modules being dependent on a module called pci-scan.o. However, I have been unable to find a place to download it. At this point, I'm not sure that this is actually a driver problem but I can figure out what else it could be. I can find no information in the log files. But, it's also possible I am looking in the wrong place. Any help you can provide would be greatly appreciated... -Wil --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html Visit the Virgin Atlantic website for all the latest news and great special offers - http://www.virgin.com/atlantic This e-mail (and any attachments) may contain privileged and/or confidential information. If you are not the intended recipient please do not disclose, copy, distribute, disseminate or take any action in reliance on it. If you have received this message in error please reply and tell us and then delete all copies on your system. Any opinion on or advice or information contained in this email is not necessarily that of the owners or officers of this company. Should you wish to communicate with us by e-mail, we cannot guarantee the security of any data outside our own computer systems. --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] 3com Ethernet Config Issue
I am using three 3com 905 Boomerang nics and am trying to run Bearing 1.0-rc3. During start-up the cards are detected, however, later in the start-up, the interface configuration fails. In looking at the nics themselves, when a cable modem in plugged into eth0 (setup as net) it lights up and shows an active connection. I also plugged a laptop into eth1 (setup as loc) and the nic did not show an active connection. To check to see if the nic was bad I swapped the cards between eth0 and eth1 with the same results. I then tired switching the connections hooking eth0 to the laptop and eth1 to the cable modem. This time eth1 showed a connection and eth0 did not. I have edited /etc/modules so that it loads the 3c59x.o as the driver and double checked the configuration files against the install guide and user manuals. In reading FAQ sec3, "How do I make Leaf see my Ethernet Cards," it makes mention of the 3com modules being dependent on a module called pci-scan.o. However, I have been unable to find a place to download it. At this point, I'm not sure that this is actually a driver problem but I can figure out what else it could be. I can find no information in the log files. But, it's also possible I am looking in the wrong place. Any help you can provide would be greatly appreciated... -Wil --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] WISP-Dist issues
Thomas Johnson wrote about "Re: [leaf-user] WISP-Dist issues": > I made the sleep change, which worked. However I now have a new problem. > The wireless signal flakes whenever there is a load on it. My SNR jumps > from 13 to 4 and I start dropping packets. I tried using a new card > thinking it was a firmware issue, but get the same results. Does the distro > have a wvlan_cs driver or strickly the orinoco_cs? There is wvlan_cs driver, but you have to replace all "orinoco_cs" entries in /etc/pcmcia/config with "wvlan_cs". However, orinoco_cs is "next generation" wvlan_cs. I would be suprised if it works worse than wvlan_cs. -- Best Regards, Vladimir Systems Engineer (RHCE) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] wisp and dns/dhcp
> I modified ifup as you suggested and removed the entries in wdistconfig, saveconfig >and rebooted and still can not resolve > any names.ping is say host lookup named failed. BTW - is there a "script" package >for LEAF ? Any ideas what could be > wrong ? My windows box, which is also a dhcp client has no problem resolving >hostnames. Check contents of /etc/resolv.conf. If pump worked correctly it should have updated with correct DNS settings. -- Best Regards, Vladimir Systems Engineer (RHCE) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
