Re: [leaf-user] bering sysklogd
On Tue, 10 Sep 2002 10:05:02 +0300 brosky wrote: > Buna leaf-user, > > Hi, > > > I'm having a little problem with Bering rc.03... > > If I don't have a active link in the net card, it hangs at Starting > sysklogd, but, as soon as i put in the ethernet, it magically > continues the booting... > > I commented all the lines in syslogd.conf, and no change... > > anyone have a clue ? Syslog will hang (typically for ~3 minutes) if it can't resolve the hostname of the host it is running on. When I ran into the problem, it was because I change the hostname of my Bering server but forgot to make the corresponding change in /etc/hosts. That may not be your problem, but it's probably worth mentioning. There was a leaf-user thread about it ~1 month ago and there may be more information in that thread. Good luck. --Brad --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Unable to bring up interfaces
Brad- Good news, I got the NIC's recognized and up. But now I have encountered another problem. I cannot access the internet from my internal network. I can ping the Bering machine from an internal host, and I can ping an internet host from the Bering machine. But I cannot ping an internet host from an internal network host. Thanks again for your help. Kyle --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Unable to bring up interfaces
On Tue, 10 Sep 2002 06:04:38 EST Kyle Fitch wrote: > Brad- > Good news, I got the NIC's recognized and up. But now I have encountered > another problem. I cannot access the internet from my internal network. I > can ping the Bering machine from an internal host, and I can ping an > internet host from the Bering machine. But I cannot ping an internet host > from an internal network host. Thanks again for your help. Sounds like a firewall problem if both NICs can ping their respective zones, but you can't ping _through_ the firewall. Have you run a "tail -f /var/log/syslog" while attempting the ping through the firewall? The output there as well as a better description of how the ping fails[1] might be useful. I thought the default loc -> net policy was ACCEPT, so the failing pings surprises me. You might want to verify that you have locnet ACCEPT in /etc/shorewall/policy. (If you want to allow all traffic from loc -> net, anyhow.) If you don't use that policy, you'll need to add ACCEPT loc net icmp8 to /etc/shorewall/rules to allow echo requests through. Something else to check is that you have /etc/shorewall/interfaces set properly. By default eth0==net and eth1==loc. Use "ip addr" to verify that is the case in your setup. --Brad [1] http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] bering sysklogd
Hi.. The only thing I can come up with is that something that is started with sysklogd uses some sort of nameresolution (ie DNS lookup) and since the network is unplugged, it will hang. When cable is inserted, it will succeed and continue. In the lrp.conf file there are NTP hosts and PING hosts which you could have set to their FQDN instead of their IP address. This COULD be something, but I can't figure out what is has to do with sysklogd? /Anders > Date: Tue, 10 Sep 2002 10:05:02 +0300 > From: brosky <[EMAIL PROTECTED]> > Reply-To: brosky <[EMAIL PROTECTED]> > Organization: SC BroNET SRL > To: [EMAIL PROTECTED] > Subject: [leaf-user] bering sysklogd > > Buna leaf-user, > > Hi, > > > I'm having a little problem with Bering rc.03... > > If I don't have a active link in the net card, it hangs at Starting > sysklogd, but, as soon as i put in the ethernet, it magically > continues the booting... > > I commented all the lines in syslogd.conf, and no change... > > anyone have a clue ? > > =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > Dan Broscoi SC WaveNET SRL > Tel: 0722-821776 Tel: 0264-124101 > @: [EMAIL PROTECTED] @: [EMAIL PROTECTED] > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] query on pubkey format
Hello everyone, Upon initiating the command "ipsec rsasigkey 1024", I get a "pubkey" format that seems different from that of the examples I gather from the docs. For some reason, perhaps due to this "pubkey" value, I can't establish a successful subnet-to-subnet VPN. Below is a snip of my generated "pubkey" value. # RSA 1024 bits SR3K-VPN1 Tue Sep 10 11:53:55 2002 # for signatures only, UNSAFE FOR ENCRYPTION #pubkey=0sAQNnQtCrwTIPX9+lBMZuGzaYulXNzFFlZmAC0HVPO19mqJd2Gbt38OLLp/nBFY PyW+p+CKeoIVuWV7nxIZz/KovwQ4gmh3Ec3SUVFuQtRZY+htOWh28m5iaiIsH+w+TCxT3pdL Jq+ScnrpZCOOQUhFaZVHUJB8B4tDbjEO9LMYt8UQ== #IN KEY 0x4200 4 1 AQNnQtCrwTIPX9+lBMZuGzaYulXNzFFlZmAC0HVPO19mqJd2Gbt38OLLp/nBFYPyW+p+CKeo IVuWV7nxIZz/KovwQ4gmh3Ec3SUVFuQtRZY+htOWh28m5iaiIsH+w+TCxT3pdLJq+ScnrpZC OOQUhFaZVHUJB8B4tDbjEO9LMYt8UQ== # (0x4200 = auth-only host-level, 4 = IPSec, 1 = RSA) .. .. Is there something wrong with my "pubkey" above? I would also like to send out my lengthy "ipsec barf" result if there's nothing wrong with this "pubkey". TIA - Vic --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] query on pubkey format
> Upon initiating the command "ipsec rsasigkey 1024", I get a "pubkey" > format that seems different from that of the examples I gather from the > docs. > For some reason, perhaps due to this "pubkey" value, I can't establish a > successful subnet-to-subnet VPN. Below is a snip of my generated > "pubkey" value. > > # RSA 1024 bits SR3K-VPN1 Tue Sep 10 11:53:55 2002 > # for signatures only, UNSAFE FOR ENCRYPTION > > #pubkey=0sAQNnQtCrwTIPX9+lBMZuGzaYulXNzFFlZmAC0HVPO19mqJd2Gbt38OLLp/nBFY > PyW+p+CKeoIVuWV7nxIZz/KovwQ4gmh3Ec3SUVFuQtRZY+htOWh28m5iaiIsH+w+TCxT3pdL > Jq+ScnrpZCOOQUhFaZVHUJB8B4tDbjEO9LMYt8UQ== > #IN KEY 0x4200 4 1 > AQNnQtCrwTIPX9+lBMZuGzaYulXNzFFlZmAC0HVPO19mqJd2Gbt38OLLp/nBFYPyW+p+CKeo > IVuWV7nxIZz/KovwQ4gmh3Ec3SUVFuQtRZY+htOWh28m5iaiIsH+w+TCxT3pdLJq+ScnrpZC > OOQUhFaZVHUJB8B4tDbjEO9LMYt8UQ== > # (0x4200 = auth-only host-level, 4 = IPSec, 1 = RSA) > .. > .. > > Is there something wrong with my "pubkey" above? I would also like to > send out my lengthy "ipsec barf" result if there's nothing wrong with > this "pubkey". It looks OK to me. Why do you think it's broken? What shows up in your logs (/var/log/auth.log) when trying to initiate your subnet-subnet connection? You probably have a typo or minor error in ipsec.conf or ipsec.secrets on one side or the other...FreeS/WAN is *VERY* unforgiving about configuration errors :) Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] tc not found
Hi I using bering 1.0 r3, and I want to use iproute for manager my bandwith. I have the tc.lrp package in my disk, and I enable the tc options in shorewall conf. When boot shorewall say 'tc not found' then I did whereis tc and I can't found it. I found ip utility and run fine. What happens ?? tc was missing in tc.lrp in bering 1.0 r3 ?? Where I can download it ? Excuse my poor english, I spahish speaker. thanks a lot roberto --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Alcatel USB Speedtouch on Dachstein
As the subject says, I am attempting to get a USB Speedtouch DSL modem on Dachstein, and ignorance is getting in the way. I have usbcore and usb-uhci loading from the speedtch.lrp module that Jacques has on his Bering pages. Having loaded speedtch.lrp I cannot find any binary for the modem, or a module to load for it. USB is working (as always thanks to Charles and the other developers) the modem has its USB lights on. Can anyone shed light on this situation / config? Always something new to learn isn't there! Matt --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Traffic shaping and Bering
I've installed and am happily running Bering 1.0r3 with a set of basic rules but wanted to play with traffic shaping. I've loaded the tc.lrp and read that HTB is configured. However, when I try to issue even basic tc commands I get the following message: "RTNETLINK answers: Invalid argument". This seems to occur regardless of the tc action - filter, qdisc, etc - and regardless of the class or queue being used. The machine has Red Hat 7.1 installed on its hard disk from a prior use, and the same commands work well, so I know its not directly hardware related. The network interfaces are performing well for my simple Baring installation, so I'm quietly confident that its not my initial configuration settings - DHCPd is working and traffic is entering both interfaces and able to exit the other side. The PC is an HP Vectra P-II with 512 Mbyte RAM, and is booting from the floppy disk. It has two 3Com 509 PCI cards. The eth0 is connected to a very dumb hub and eth1 is connected to my desktop via a crossover cable. At the moment, I have the system unconnected from the Internet so no PPPoE or PPP complexities - just plain IP/Ethernet traffic. To double check the disk, I recreated a brand-new disk from the download image and got exactly the same errors. Does Baring require traffic shaping to be done via Shorewall? I've now created a tcstart script for Shorewall which mirrors the tc shell script and am still getting the same errors. Any help is really appreciated. Adrian --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] tc not found
I think tc.lrp is not loaded by default, check syslinux.cfg on your disk and see if tc.lrp is in the list of loaded packages. Lenn' On Tue, 2002-09-10 at 14:42, Roberto Pereyra wrote: > > Hi > > I using bering 1.0 r3, and I want to use iproute for manager my bandwith. > > I have the tc.lrp package in my disk, and I enable the tc options in shorewall > conf. > > When boot shorewall say 'tc not found' then I did > > whereis tc > > and I can't found it. > > I found ip utility and run fine. > > What happens ?? tc was missing in tc.lrp in bering 1.0 r3 ?? > > Where I can download it ? > > Excuse my poor english, I spahish speaker. > > thanks a lot > > roberto > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] ipx gateway/tuneling LRP?
Hi List, I was wondering is any of you had a LRP module to do some IPX tunneling on a LEAF box ( pref. Bering ) I found a few project of interest that might have been LRP'ed :-) [ I have never used any of those though ] SIB : http://members.aon.at/stsz/sib/ TIPXD http://freshmeat.net/projects/tipxd/ ( seems to be a beta) VTUN http://vtun.sourceforge.net/ ipxtunnel ftp://sunsite.unc.edu/pub/Linux/system/network/daemons thanks fabrice. --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] tc not found
thanks, this may be the problem. roberto On Tue, Sep 10, 2002 at 04:02:09PM +0200, Lennard de Hoog wrote: > I think tc.lrp is not loaded by default, check syslinux.cfg on your disk > and see if tc.lrp is in the list of loaded packages. > > Lenn' > > > On Tue, 2002-09-10 at 14:42, Roberto Pereyra wrote: > > > > Hi > > > > I using bering 1.0 r3, and I want to use iproute for manager my bandwith. > > > > I have the tc.lrp package in my disk, and I enable the tc options in shorewall > > conf. > > > > When boot shorewall say 'tc not found' then I did > > > > whereis tc > > > > and I can't found it. > > > > I found ip utility and run fine. > > > > What happens ?? tc was missing in tc.lrp in bering 1.0 r3 ?? > > > > Where I can download it ? > > > > Excuse my poor english, I spahish speaker. > > > > thanks a lot > > > > roberto > > > > > > --- > > This sf.net email is sponsored by: OSDN - Tired of that same old > > cell phone? Get a new here for FREE! > > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > > > leaf-user mailing list: [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/leaf-user > > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html > > > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Traffic shaping and Bering
> I've installed and am happily running Bering 1.0r3 with a set of basic rules > but wanted to play with traffic shaping. > > I've loaded the tc.lrp and read that HTB is configured. However, when I try > to issue even basic tc commands I get the following message: "RTNETLINK > answers: Invalid argument". This seems to occur regardless of the tc > action - filter, qdisc, etc - and regardless of the class or queue being > used. Have you loaded the htb modules ?? I guess not what says lsmod ? Jacques -- EXCEPTIONNEL! Tiscali lance les forfaits Internet Illimités, à partir de 15,95EUR / mois. Pour en profiter,cliquez ici: http://register.tiscali.fr/forfaits/ Offres soumises à conditions. --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Traffic shaping and Bering
I had this problem too and resolved it by adding the appropriate modules. You can find the modules at http://leaf.sourceforge.net/devel/jnilo/bering/latest/modules/net/sched/ Todd Adrian Wooster wrote: > > I've installed and am happily running Bering 1.0r3 with a set of basic rules > but wanted to play with traffic shaping. > > I've loaded the tc.lrp and read that HTB is configured. However, when I try > to issue even basic tc commands I get the following message: "RTNETLINK > answers: Invalid argument". This seems to occur regardless of the tc > action - filter, qdisc, etc - and regardless of the class or queue being > used. > > The machine has Red Hat 7.1 installed on its hard disk from a prior use, and > the same commands work well, so I know its not directly hardware related. > The network interfaces are performing well for my simple Baring > installation, so I'm quietly confident that its not my initial configuration > settings - DHCPd is working and traffic is entering both interfaces and able > to exit the other side. > > The PC is an HP Vectra P-II with 512 Mbyte RAM, and is booting from the > floppy disk. It has two 3Com 509 PCI cards. The eth0 is connected to a very > dumb hub and eth1 is connected to my desktop via a crossover cable. At the > moment, I have the system unconnected from the Internet so no PPPoE or PPP > complexities - just plain IP/Ethernet traffic. To double check the disk, I > recreated a brand-new disk from the download image and got exactly the same > errors. > > Does Baring require traffic shaping to be done via Shorewall? I've now > created a tcstart script for Shorewall which mirrors the tc shell script and > am still getting the same errors. > > Any help is really appreciated. > > Adrian > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html -- Todd MacDougall Technical Project Lead - IKON Image Systems Solutions IKON The Way Business Gets Communicated 10 King Street East Suite 900 Toronto, Ontario M5C 1C3 Phone: 416-363-8945 Ext 209 Fax: 416-363-2195 Email: [EMAIL PROTECTED] Website: http://www.ikon-iss.com --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] TEQL Queue Device
Hi, Don't suppose anyone anyone knows how to get more then one teql device for combining input to interfaces? I'm insmod sch_teql.o and only getting a teql0, but I would really require a teql1 for what I want to try, and can find no information on how to increase this number of devices! Alternatively, has anyone any ideas how to bind two eth interfaces under one ip address, other than using teql?? I've looked at the Linux Advance Routing (http://lartc.org/), but I'm not getting much other than using teql! Thanks in advance, Gavin Visit the Virgin Atlantic website for all the latest news and great special offers - http://www.virgin.com/atlantic This e-mail (and any attachments) may contain privileged and/or confidential information. If you are not the intended recipient please do not disclose, copy, distribute, disseminate or take any action in reliance on it. If you have received this message in error please reply and tell us and then delete all copies on your system. Any opinion on or advice or information contained in this email is not necessarily that of the owners or officers of this company. Should you wish to communicate with us by e-mail, we cannot guarantee the security of any data outside our own computer systems. --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Going to use LEAF Bering as a WAN-backbone Router
Hi all The company I'm working for is currently looking for a WAN-backbone router/firewall. Little ASCII art that everyone know what I mean with "WAN-backbone": --- | LAN | --- | | - |Backbone Switch for LAN| - | | - |LEAF Router| - | | | | | | several WAN Networks connected via 10BaseT Ethernet (normal Twisted Pair Ethernet) We had a look at Nokia IP650 Firewalls, Cisco Routers and several Layer 3 Switches. Because all WAN Networks are connected via Ethernet, there is no need for a Cisco router which provides serial interfaces for WAN modems. We need about 16 Ethernet Ports (1 for LAN, about 15 for all WAN's). We also want some sort of filtering/firewalling. Because a Layer 3 Switch don't provide any firewalling and logging options, the only product left is the Nokia firewall (or similiar products). But these Nokia devices are VERY VERY expensive. I use LEAF for privat usage since two years. I'm also one of the developers and very familiar with LEAF. That's why I suggested LEAF for this job to my boss. I wrote this mail for two reasons: 1. to let you know that LEAF will be used for an enterprise (not SOHO) 2. to hear your comments about this idea The following configuration is planned for the router: Hardware: -Compaq Proliant ML370 G2 Rack (6 PCI Slots, 3 are 66Mhz 64bit), 1.4GHz PIII CPU, 128MB fault tolerant RAM -redundant fans and power supply -hardware RAID-1 (integrated RAID controller) -1x Comapq copper Gigabit Ethernet adapter (66MHz 64bit, to connect the router to the LAN) -5x D-link DFE-580TX 4 Port 10/100 Ethernet adapters (the DFE-580TX is a server card so it's not CPU intensive) This results in a 22Port Ethernet router (1 Gigabit, 20 10/100 d-link, 1 10/100 integrated compaq) Software: -Bering RC3 running latest shorewall -Latest modules for the DFE and Compaq cards (compiled by me) -dhcprelay -sshd -netsnmp (for MRTG statistics) -weblet with LRPStat (for live statistics) Do you have any comments, suggestions, questions? Thank you in advance -- Sandro Minola | LEAF Developer (http://leaf.sourceforge.net) mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED] http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola - My PGP key is at: http://www.minola.ch/pgp/sminola.asc -- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Going to use LEAF Bering as a WAN-backbone Router
I'm curious about where you are going to get the weblet with lrpstat for bering. Are you going to make this package by hand, or is it already out there? I would be interested in using it... -Mark Ivey- On Tue, 2002-09-10 at 11:04, Sandro Minola wrote: > Hi all > > The company I'm working for is currently looking for a WAN-backbone > router/firewall. > Little ASCII art that everyone know what I mean with "WAN-backbone": > > --- > | LAN | > --- >| >| > - > |Backbone Switch for LAN| > - >| >| > - > |LEAF Router| > - > | | | | | | > several WAN Networks connected via 10BaseT Ethernet (normal Twisted Pair > Ethernet) > > > We had a look at Nokia IP650 Firewalls, Cisco Routers and several Layer 3 > Switches. > Because all WAN Networks are connected via Ethernet, there is no need for a > Cisco router which provides serial interfaces for WAN modems. > > We need about 16 Ethernet Ports (1 for LAN, about 15 for all WAN's). We also > want some sort of filtering/firewalling. Because a Layer 3 Switch don't > provide any firewalling and logging options, the only product left is the > Nokia firewall (or similiar products). But these Nokia devices are VERY VERY > expensive. > > I use LEAF for privat usage since two years. I'm also one of the developers > and very familiar with LEAF. That's why I suggested LEAF for this job to my > boss. > > I wrote this mail for two reasons: > 1. to let you know that LEAF will be used for an enterprise (not SOHO) > 2. to hear your comments about this idea > > The following configuration is planned for the router: > > Hardware: > -Compaq Proliant ML370 G2 Rack (6 PCI Slots, 3 are 66Mhz 64bit), 1.4GHz PIII > CPU, 128MB fault tolerant RAM > -redundant fans and power supply > -hardware RAID-1 (integrated RAID controller) > -1x Comapq copper Gigabit Ethernet adapter (66MHz 64bit, to connect the > router to the LAN) > -5x D-link DFE-580TX 4 Port 10/100 Ethernet adapters (the DFE-580TX is a > server card so it's not CPU intensive) > > This results in a 22Port Ethernet router (1 Gigabit, 20 10/100 d-link, 1 > 10/100 integrated compaq) > > Software: > -Bering RC3 running latest shorewall > -Latest modules for the DFE and Compaq cards (compiled by me) > -dhcprelay > -sshd > -netsnmp (for MRTG statistics) > -weblet with LRPStat (for live statistics) > > > Do you have any comments, suggestions, questions? > > Thank you in advance > > -- > Sandro Minola | LEAF Developer (http://leaf.sourceforge.net) > mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED] > http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola > - > My PGP key is at: http://www.minola.ch/pgp/sminola.asc > -- > > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Alcatel USB Speedtouch on Dachstein
On Tuesday 10 September 2002 14:48, Matthew Pozzi wrote: > As the subject says, I am attempting to get a USB Speedtouch DSL modem on > Dachstein, and ignorance is getting in the way. I have usbcore and usb-uhci > loading from the speedtch.lrp module that Jacques has on his Bering pages. > Having loaded speedtch.lrp I cannot find any binary for the modem, or a > module to load for it. > > USB is working (as always thanks to Charles and the other developers) the > modem has its USB lights on. > > Can anyone shed light on this situation / config? Always something new to > learn isn't there! Hi Matt I compiled the (B Papillaut) driver for Linux for some users asking for it but never got any feedback about it. I am unable to test it here. >From the speedtouch web site the modules are supposed to work OK for 2.2.18+ kernel even though a 2.4.8+ kernel is recommended The /etc/init.d/speedtouch script provided in my package is provided "as is" and MUST be adapted to run under LEAF. I'll gladly include any contribution in final package. >From the README.txt in my contrib directory: Alcatel USB Speedtouch modem driver (1.1) from http://speedtouch.sourceforge.net The speedtch.lrp packages provides: /usr/sbin/pppoa2 /usr/sbin/pppoa3 /usr/sbin/modem_run /etc/init.d/speedtouch (to be adapted) and /etc/speedtouch.conf Instruction to setup the modem are on the speedtouch web site. Jacques --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Going to use LEAF Bering as a WAN-backbone Router
> I'm curious about where you are going to get the weblet with lrpstat for > bering. Are you going to make this package by hand, or is it already > out there? I would be interested in using it... I'm going to make it by hand. I'll send you a copy when I'm finished. -- Sandro Minola | LEAF Developer (http://leaf.sourceforge.net) mailto:[EMAIL PROTECTED] | mailto:[EMAIL PROTECTED] http://www.minola.ch| http://leaf.sourceforge.net/devel/sminola - My PGP key is at: http://www.minola.ch/pgp/sminola.asc -- --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Configuring clock in Bering
The following is a suggested addition to the documentation for Bering.
(It has been sitting in my outbox for awhile... I don't know why it got
stuck there.)
---
Configuring timezone in Bering:
a) Obtain the approprate zoneinfo file for your timezone. This binary
file will contain generalized rules for converting between GMT and your
local time. One location where these files are kept is at
http://leaf.sourceforge.net/devel/cstein/files/kernels/zoneinfo/, but
their format has not changed in a long time and is not expected to change
anytime soon so you can pull one from the Linux distribution of your
choice.
b) Copy this file to the Bering ramdisk as /etc/localtime. On most
conventional Linux distributions, /etc/localtime would be a symbolic link
to the appropriate file in /usr/share/zoneinfo/, but that directory is not
contained in etc.lrp and having symbolic links across packages is not
recommended.
c) Use the "date" command to confirm that the zoneinfo file is behaving
as desired.
d) Set the system date/time. There are three common methods:
1) Reboot the machine and set the time in the BIOS. Note that
for a pure linux machine like a router it only makes sense to
set the bios clock to UTC (GMT0).
2) Set the Linux time with the "date [MMDDhhmm[[CC]YY][.ss]]" command
and back it up to the CMOS clock with "hwclock". For example, if
it is 9:05:15 pm on Jan 31, 2002, then you would use
# date 013121052002.15
# hwclock --systohc
hwclock will set the CMOS clock to UTC.
3) Set the Linux time with "rdate {timeserver}" and back it up to
the CMOS clock with "hwclock". For example, if you have a
Linux box at 192.168.1.3 (see step f), you can use
# rdate -s 192.168.1.3
# hwclock --systohc
Note that if you don't have a Linux workstation available, you can
use a program like AboutTime for Windows
(http://www.arachnoid.com/abouttime/) to set the Windows machine
time correctly, and while AboutTime is running and its server
options are enabled you can use "rdate" against that machine.
e) (Optional) Edit the contents of /etc/timezone to describe your
timezone. I am not aware of any packages used with Bering that depend on
this file, but it might as well be consistent.
f) (Optional) Activate daily clock updating via rdate (udp port 37) to a
nearby "time" protocol server. This service is handled internally by the
inetd daemon on a *nix workstation. Before synchronizing to such a
machine, it should probably be configured to maintain time with the sntp
protocol (ntpd or xntpd) against some reliable time source. To activate
rdate updating, edit /etc/lrp.conf to specify the ip number of the desired
time server for lrp_DATE_SERVER, and uncomment this variable.
g) (informational) All lines in /etc/tzvalue should be commented out.
h) Backup etc.lrp (to save the results of steps b, e, and f).
i) Either reboot, or restart logging (svi sysklogd restart) to cause
times recorded by the system logger to use the new timezone information.
Also, Greg Morgan provided the following information that may be useful:
This site may will help you pick US zones http://www.time.gov/. I found
these links illuminating http://www.time.gov/exhibits.html.
If you have Windows clients that you want to sync to your firewall, you
can use http://www.oneguycoding.com/automachron/ in your
systray. External time server lists can be found at
http://www.eecis.udel.edu/~mills/ntp/servers.htm
http://www.eecis.udel.edu/~mills/ntp/clock1.htm
http://www.eecis.udel.edu/~mills/ntp/clock2.htm
---
---
Jeff NewmillerThe . . Go Live...
DCN:<[EMAIL PROTECTED]>Basics: ##.#. ##.#. Live Go...
Live: OO#.. Dead: OO#.. Playing
Research Engineer (Solar/BatteriesO.O#. #.O#. with
/Software/Embedded Controllers) .OO#. .OO#. rocks...2k
---
---
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone? Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Going to use LEAF Bering as a WAN-backbone Router
> This results in a 22Port Ethernet router (1 Gigabit, 20 10/100 d-link, 1 > 10/100 integrated compaq) > > Software: > -Bering RC3 running latest shorewall > -Latest modules for the DFE and Compaq cards (compiled by me) > -dhcprelay > -sshd > -netsnmp (for MRTG statistics) > -weblet with LRPStat (for live statistics) > > Do you have any comments, suggestions, questions? Killer system...I'm jealous! The one suggestion I'd make has to do with weblet. I'd keep (or modify to your liking) the web content, java bandwidth applet, and the small server the java applet connects to, but remove sh-httpd in favor of boa, thttpd, or some other thin web-server. While I like sh-httpd (I wrote most of it!), and it works pretty well, it has a tendency to leave temporary files hanging around, and it's not what I'd consider "ready for production" on a system like this. With lots of RAM and storage for packages, there's no reason to not go with something a bit more tested (and hopefully stable) than sh-httpd. Everything else looks fine, and should make a pretty amazing platform. If you get a chance to do any network "stress tests" or performance profiling, please share the results. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Using Bering w/H323 tracking module (was leaf-user] H323 on Dachstein)
So I gave the ip_masq_h323.o a shot
but none of the UDP packets get through, I don't realy want to use a
proxy/gateway
bcus i'd have to give up my single floppy boot fw so..
I saw on http://shorewall.net/FAQ.htm
3. I want to use Netmeeting with Shorewall. What do I do?
Answer: There is an H.323 connection tracking/NAT module that may help.
Has any one tried the H323 on a 2.4 based LEAF like Bering/Shorewall
-Original Message-
From: Charles Steinkuehler <[EMAIL PROTECTED]>
To: TC <[EMAIL PROTECTED]>; [EMAIL PROTECTED]
<[EMAIL PROTECTED]>
Date: September 6, 2002 7:20 PM
Subject: Re: [leaf-user] H323 on Dachstein
>> I am running the dachstein-v1.0.2-1680.exe
>> LEAF version I have a CreativeLabs VoIP device running with the
>current
>> openh323 stack & can can call from 1 wks station to another on my
>private
>> 192.168 network
>>
>> Does any one have a how to anywhere on how to get h323 from behind the
>NAT
>> to call another h323 client behind an other Dachsteien NAT.
>
>I don't work a lot with h323, but I think you need the following:
>
>1) Make sure you're loading the ip_masq_h323.o module in /etc/modules
>
>2) To be able to recieve calls, you need to port-forward some ports from
>the firewall to the internal system you want to be able to recieve
>calls. With Dachstein, you'll want something like:
>
>INTERN_SERVERS="tcp_${EXTERN_IP}_1720_10.31.32.67_1720
>tcp_${EXTERN_IP}_1503_10.31.32.67_1503"
>
>More information can be found on various linux masquerading pages, and
>the home-page of the h323 masquerading patch:
>http://www.coritel.it/projects/nat/index.html
>
>You might also want to check into running a proxy...either a socks proxy
>(if supported by your h323 client), or a h323 proxy, like openh323proxy:
>http://openh323proxy.sourceforge.net/
>
>Charles Steinkuehler
>http://lrp.steinkuehler.net
>http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)
>
---
In remembrance
www.osdn.com/911/
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Inetd on bering rc3
I've now getting to some deployment scenarios after playing around with bering. I've a few doubts and would appreciate some pointers. 1. In shorewall, the FAQ/doc says that sshd should be commented in inetd for it to work. I thought it was there to make sure controls of host.deny and host.allow could apply. Why is it being commented? 2. I shut down shorewall and changed all policies to accept to first see if my services are going thro'. When I try to login thro' ssh to the bering box, the login takes almost 4 minutes to show up on the screen. My bering box is a P4 1.7Mhz with 512MB RAM! I'm sure something is wrong in the config but do not know what. 3. I tried running weblet using /usr/sbin/sh-httpd& and then did a ps. Ps shows stopped for sh-httpd (tty input). I cannot run sh-httpd as a service using svi as no entry in /etc/init.d exists. Am I wrong? I also configured weblet to accept client logins from a specified network by uncommenting that line. When I invoke sh-httpd& after this, I'm getting Exit 1 status in ps ax. Why would this be? I went back and commented that line, sh-httpd worked as earlier. 4. Will lrps from oxygen or dachenstein work on bering? Some of the lrps I need are not available on bering - wget, vrrpd etc. Mohan --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Going to use LEAF Bering as a WAN-backbone Router
I tried htb.init for tc scripting and it gave an error in line 636 - something about wrong assignments. Does this have to do with busybox bash compatibility? Has anyone ported tcng to bering? Mohan --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] query on pubkey format
On Tuesday 10 September 2002 07:19, Vic Berdin wrote: > Is there something wrong with my "pubkey" above? I would also like to > send out my lengthy "ipsec barf" result if there's nothing wrong with > this "pubkey". The key looks fine, post the "barf"...it should indicate what is going wrong if the packets are making it through the firewall. -- ~Lynn Avants aka Guitarlynn guitarlynn at users.sourceforge.net http://leaf.sourceforge.net If linux isn't the answer, you've probably got the wrong question! --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Unable to bring up interfaces
Shorewall by default disables ping - is it not? But you say you are able to ping from both internal and external networks! Maybe you should first try a masquerade without limiting services. If it works, then try other services. I also think Shorewall disables forwarding by echoing 0 into rp_filter of each device. This is again a security measure. Is that creating problems? Check this out. The way I would go about this is to first stop shorewall, turn on masquerading in iptables by hand and see if what you want works. If it does, then I would start up shorewall and try the same in shorewall. HTH Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Brad Fritz Sent: 10 September 2002 16:49 To: Kyle Fitch Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] Unable to bring up interfaces On Tue, 10 Sep 2002 06:04:38 EST Kyle Fitch wrote: > Brad- > Good news, I got the NIC's recognized and up. But now I have encountered > another problem. I cannot access the internet from my internal network. I > can ping the Bering machine from an internal host, and I can ping an > internet host from the Bering machine. But I cannot ping an internet host > from an internal network host. Thanks again for your help. Sounds like a firewall problem if both NICs can ping their respective zones, but you can't ping _through_ the firewall. Have you run a "tail -f /var/log/syslog" while attempting the ping through the firewall? The output there as well as a better description of how the ping fails[1] might be useful. I thought the default loc -> net policy was ACCEPT, so the failing pings surprises me. You might want to verify that you have locnet ACCEPT in /etc/shorewall/policy. (If you want to allow all traffic from loc -> net, anyhow.) If you don't use that policy, you'll need to add ACCEPT loc net icmp8 to /etc/shorewall/rules to allow echo requests through. Something else to check is that you have /etc/shorewall/interfaces set properly. By default eth0==net and eth1==loc. Use "ip addr" to verify that is the case in your setup. --Brad [1] http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] tc not found
I found tc.lrp by Google search and have found it a good way to get my lrps. Maybe you can follow this in future. Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Roberto Pereyra Sent: 10 September 2002 18:13 To: leaf Subject: [leaf-user] tc not found Hi I using bering 1.0 r3, and I want to use iproute for manager my bandwith. I have the tc.lrp package in my disk, and I enable the tc options in shorewall conf. When boot shorewall say 'tc not found' then I did whereis tc and I can't found it. I found ip utility and run fine. What happens ?? tc was missing in tc.lrp in bering 1.0 r3 ?? Where I can download it ? Excuse my poor english, I spahish speaker. thanks a lot roberto --- This sf.net email is sponsored by: OSDN - Tired of that same old cell phone? Get a new here for FREE! https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] tc not found
tc.lrp - patched for HTB support - is provided on the Bering floppy ! It is not activated by default. To do so declare it in the syslinux.cfg file See: http://leaf.sourceforge.net/devel/jnilo/bipackages.html#AEN833 http://leaf.sourceforge.net/devel/jnilo/biaddrm.html#AEN509 Also do not forget to load the HTB modules (if you are using this QoS) http://leaf.sourceforge.net/devel/jnilo/bering/latest/modules/net/sched/ Jacques > I found tc.lrp by Google search and have found it a good way to get my > lrps. Maybe you can follow this in future. > > Mohan > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Roberto > Pereyra > Sent: 10 September 2002 18:13 > To: leaf > Subject: [leaf-user] tc not found > > > > Hi > > I using bering 1.0 r3, and I want to use iproute for manager my bandwith. > > I have the tc.lrp package in my disk, and I enable the tc options in > shorewall > conf. > > When boot shorewall say 'tc not found' then I did > > whereis tc > > and I can't found it. > > I found ip utility and run fine. > > What happens ?? tc was missing in tc.lrp in bering 1.0 r3 ?? > > Where I can download it ? > > Excuse my poor english, I spahish speaker. > > thanks a lot > > roberto > > > --- > This sf.net email is sponsored by: OSDN - Tired of that same old > cell phone? Get a new here for FREE! > https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390 > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html > > > > --- > In remembrance > www.osdn.com/911/ > > leaf-user mailing list: [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/leaf-user > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- In remembrance www.osdn.com/911/ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
