[leaf-user] Channel number error starting pppoe on Bering RC1
I'm having trouble setting up Bering RC1 to connect to pacbell DSL using pppoe. The machine I'm using works fine connecting to a cable modem (with Bering configured differently, of course), so I don't think there are any hardware problems. Also, I'm able to connect a Debian Woody system using pppoe, so there's no reason to suspect problems with the connection either. The errors happen when ppp attempts to use pppoe, which I've configured to use the first pty line: pty pppoe -I eth0 -T 80 -m 1452 If I simply type '/etc/init.d/ppp start', these lines show up in /var/log/syslog: # Plugin /usr/lib/pppd/pppoe.so loaded. # PPPoE Plugin Initialized # pppd 2.4.1 started by root, uid 0 # Serial connection established # Couldn't get channel number: Input/output error # ioctl (PPPIOCGFLAGS): Bad file descriptor # Exit. The line in my Debian system analogous to the pty line above looks the same except that instead of pppoe it lists a path to an executable: /usr/sbin/pppoe. But there's no such executable on my Bering system. Does anyone know what I'm doing wrong here? I've searched the archives for discussions of the error messages I'm seeing but have found nothing. Are there other places I should be looking? Thanks, --Eric House -- ** * From the desktop of: Eric House, [EMAIL PROTECTED]* *Crosswords 4.0 for PalmOS is out!: http://www.peak.org/~fixin/xwords * ** --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
AW: [leaf-user] Channel number error starting pppoe on Bering RC1
# Serial connection established # Couldn't get channel number: Input/output error # ioctl (PPPIOCGFLAGS): Bad file descriptor IIRC I got the same errors because I did not have chap_secrets correctly configured. Are you sure you have chap-secrets or pap-secrets correct? Copy the contents of pap-secrets to chap-secrets (/etc/ppp) and try again. Regards Alex --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Bering box spontaneous reboot
Nic's that have WOL (wake on lan) can shutdown your system. But I'll bet for a faulty power supply as Matt said :) -Original Message- From: Matt Schalit [mailto:[EMAIL PROTECTED]] Sent: Sunday, January 19, 2003 7:28 PM To: [EMAIL PROTECTED] Subject: Re: [leaf-user] Bering box spontaneous reboot Spontaneous reboots are caused by hardware. Possibly your power supply or your ram, more rarely your keyboard or vga adapter. Don't think I've heard of a bad nic causing that, but someone may post with that experience. Good luck swapping hardware, Matt H.G. Bekker wrote: Dear LEAF list, I am running Bering 1.0 stable on a Pentium 166 box with 32 Mb memory and two 3com etherlink III cards. Recently I noticed that the machine has spontaneously rebooted --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] IPSec for latest wisp-distibution.
Hi everybody, Thanks for your competent help so far (Special thanks to Vladimir), we really profited of your knowledge. Here rolls in the next question Is there a dedicated ipsec module and package around for wisp? Or will any bering module/package do? All the best Daniel Nicloas --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] NETWORK TRAFFIC
Helo! How can I collect network traffic from my bering router. It is using onely one FD. I want to know how much traffic does one IP from LAN made thrue my bering firewall in a perioed? Thanks for help -- Ales :) --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Re: [leaf-devel] LEAF in SysAdmin
The article and a .pdf copy can be found at wireless.psenicka.ca regards Erich At 22:48 19.01.2003 +0100, you wrote: Saddly, the article is not one of the ones available on-line, but I'm sure everyone here subscribes anyway, right? If not, head over to the sysadmin site, where you can subscribe and check out the current issue: http://www.sysadminmag.com/articles/2003/0302/ Henry was apparently ready to sent me an html version of the paper but I have not received yet. I'll post it as soon I'll get it. Kudos to Jacques Nilo and the rest of the Bering crew! Charles: you Tom and all LEAF developers deserve the credit for this. I have learnt much from this list ! Jacques THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16 --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Token ring bridging.
Does that mean yes. If the support is compiled in the kernel that source routing and error monitor are handled even if not handled by the driver? Or, yes the kernel knows how to act as a mac bridge with two token ring cards? Lynn Avants [EMAIL PROTECTED] on 01/19/2003 01:52:15 PM Please respond to [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc:(bcc: Phillip Watts/austin/Nlynx) Subject: Re: [leaf-user] Token ring bridging. On Friday 17 January 2003 10:47 am, [EMAIL PROTECTED] wrote: Any one know if a linux router can act like a token ring bridge? Will it handle source routing? Error monitoring? replacing tokens? all that token ringish stuff. If the support is compiled in the kernel. Check the config file of the kernel you are using (in the kernel source code). I doubt anyone is compiling this into the leaf kernel nowadays, but you can always roll a new kernel with the support added into it. -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Token ring bridging.
On Monday 20 January 2003 08:40 am, [EMAIL PROTECTED] wrote: Does that mean yes. If the support is compiled in the kernel that source routing and error monitor are handled even if not handled by the driver? I don't specifically know, but Linux has been routing/bridging token ring for years, so I would suspect so. Or, yes the kernel knows how to act as a mac bridge with two token ring cards? That's what bridging isdo not assign ip's (routing) to the interfaces on a bridge. -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Bering web manager
There is webet, but you can only monitor. I manage it remotly, setting up sshd in the Bering box and conecting to it from Windows with Putty.exe. Regards Hi can I manager my bering box with a web browser ? How can do it ? thanks roberto --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html Ahora podés usar Yahoo! Messenger desde tu celular. Aprendé cómo hacerlo en Yahoo! Móvil: http://ar.mobile.yahoo.com/sms.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Editing cram files in WISP
I am currently taking a look at how to guarantee that multple Wireless USB adapters will be recognised with their correct device name, and concluded the easiest method is to read their MAC address and then use the 'ip' command to set the appropriate device name. To start with I have been trying to edit netconfig to add a new menu item for MAC address, but find I cannot save the file after editing. I get 'Error 22', and then the file contents disappear. Is there some trick to editing files within the Cram filesystem? Thanks derek --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Token ring bridging.
Thanks, I'll try it. Lynn Avants [EMAIL PROTECTED] on 01/20/2003 09:17:29 AM Please respond to [EMAIL PROTECTED] To: [EMAIL PROTECTED] cc:(bcc: Phillip Watts/austin/Nlynx) Subject: Re: [leaf-user] Token ring bridging. On Monday 20 January 2003 08:40 am, [EMAIL PROTECTED] wrote: Does that mean yes. If the support is compiled in the kernel that source routing and error monitor are handled even if not handled by the driver? I don't specifically know, but Linux has been routing/bridging token ring for years, so I would suspect so. Or, yes the kernel knows how to act as a mac bridge with two token ring cards? That's what bridging isdo not assign ip's (routing) to the interfaces on a bridge. -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Editing cram files in WISP
CramFS is read-only. You need to edit it somewhere else and then make CFS out of it using mkcramfs. You can find CFS for the lastest image in .tar form in http://leaf.sourceforge.net/devel/hzdrus/files/cfs-src.tar.gz Derek Jennings wrote: I am currently taking a look at how to guarantee that multple Wireless USB adapters will be recognised with their correct device name, and concluded the easiest method is to read their MAC address and then use the 'ip' command to set the appropriate device name. To start with I have been trying to edit netconfig to add a new menu item for MAC address, but find I cannot save the file after editing. I get 'Error 22', and then the file contents disappear. Is there some trick to editing files within the Cram filesystem? Thanks derek --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html -- Best Regards, Vladimir Systems Engineer (RHCE) --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] IPSec for latest wisp-distibution.
Bering packages for 2.4.20 kernels may do. Although I'm not sure if ipsec support is compiled in or it's in modules in Bering. Nicolas Cedraschi wrote: Hi everybody, Thanks for your competent help so far (Special thanks to Vladimir), we really profited of your knowledge. Here rolls in the next question Is there a dedicated ipsec module and package around for wisp? Or will any bering module/package do? All the best Daniel Nicloas --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html -- Best Regards, Vladimir Systems Engineer (RHCE) --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] NETWORK TRAFFIC
Ales, On Mon, 20 Jan 2003 13:15:38 +0100 ales wrote: How can I collect network traffic from my bering router. It is using onely one FD. I want to know how much traffic does one IP from LAN made thrue my bering firewall in a perioed? One way would be to parse the packet and byte counts from the output of iptables -L -v. If you have a zone setup for each host (or set of hosts) you are interested in that approach is easier because you can specify the chain. E.g. to see the counts for traffic from the loc zone to the net zone: iptables -vn -L loc2net | head -n 3 | tail -n 1 I believe the values rollover when they get too high, so you would need to account for that. You can also zero them with the iptables -Z flag. (Certain shorewall operations may zero them as well.) Another approach would be to use software like ntop or iptraf. IIRC, I have seen (old) LRP packages for both floating around, so you might get lucky and find one that is already compiled for glibc 2.0.7 . --Brad --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] IPSEC Gatewwy and Pass-Through
I know historically you could not have a Linux router act as an ipsec gateway endpoint and support ipsec pass through. Is that still the case? Basically, if I have a freswan-freeswan lan to lan VPN in place can a user behind on of those routers with SSH Sentinel or Windoze ipsec masq thru the same router to connect as a road warrior to a completely different freeswan router? If that didn't makes sense let me know and I'll try to rephase. Thanks, Todd --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] IPSEC Gatewwy and Pass-Through
On Monday 20 January 2003 11:30 am, Todd Pearsall wrote: I know historically you could not have a Linux router act as an ipsec gateway endpoint and support ipsec pass through. Is that still the case? The same port is being used and the router cannot answer and forward on the same port, so this is not going to work. You could move your LAN to CIPE instead of IPSec (which uses different a different port) and allow the IPSec to be passed through CIPE is supposed to work better, especially with NetBIOS and touchy applications, but I haven't used it myself. -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] bering/shoreline snat problem
maybe you should be a bit more specific of what you did and what _exactly_ gets dropped. Can do. Here's some more detail on the setup: key: beringfw -- Bering 1.0-stable box fw -- hardware nat/firewall (netgear FR314) hostA-- a host on the network behind beringfw (DSL Connection) | | || | PPPoE interface | || | **fw**| || | 192.168.0.1/24 | || | | || | 192.168.0.4/24 | || |**beringfw**| || | 192.168.1.254/24 | || | | || | 192.168.1.11/24 | || |**hostA** | || I'm using this setup right now while I'm learning about Bering (i.e., that's why Bering is still behind another firewall). The behavior that I'd like to see right now is for hostA to be able to access the internet by going through both beringfw and fw. Here's some more information about beringfw: firewall: -root- # uname -a Linux firewall 2.4.18 #1 Sun Nov 10 17:40:20 UTC 2002 i586 unknown firewall: -root- # ip addr show 1: lo: LOOPBACK,UP mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 brd 127.255.255.255 scope host lo 2: dummy0: BROADCAST,NOARP mtu 1500 qdisc noop link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff 3: eth0: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:a0:24:e4:66:ea brd ff:ff:ff:ff:ff:ff inet 192.168.0.4/24 brd 192.168.0.255 scope global eth0 4: eth1: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:a0:cc:57:e7:a1 brd ff:ff:ff:ff:ff:ff inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1 Here's what the problem is: From the perspective of hostA, I can't connect to the internet. For illustration, I'll show what happens when hostA tries to ssh to 128.8.129.2. * hostA sends a packet to 128.8.129.2. This packet goes through beringfw and is successfully snat'd (i.e., the source address for the packet is now 192.168.0.4). * This packet travels through fw, and I assume that is working properly for the purposes of this discussion. This is a valid assumption because the next thing that I see is a reply from 128.8.129.2 after it goes through fw. This reply is now destined for 192.168.0.4 (aka beingfw). When beringfw receives the packet, it drops it, and logs it with the following message in /var/log/messages: Jan 20 11:40:49 firewall kernel: Shorewall:man1918:DROP:IN=eth0 OUT= MAC=00:a0:24:e4:66:ea:00:30:ab:06:6c:9c:08:00 SRC=128.8.129.2 DST=192.168.0.4 LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=17230 DF PROTO=TCP SPT=22 DPT=39534 WINDOW=25920 RES=0x00 ACK SYN URGP=0 The same thing happens when I try to establish any type of connection from hostA to the internet in this fashion. Based on the behavior I'm seeing, I would think that there is something wrong with the firewall ruleset. And this is where I'm confused. I haven't touched the ruleset since installing bering. It is the default ruleset included with bering 1.0-stable. You can view my ruleset at the following URL (it was too long to post here): http://www.cs.umd.edu/~bdpayne/iptables.rules Thanks for any help you can provide! If you need more information, let me know and I will post it. -bryan --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] bering/shoreline snat problem
Bryan, The devil was in the details, particularly the fact that your external interfac uses an RFC 1918 address... On Mon, 20 Jan 2003 14:32:06 EST Bryan Payne wrote: # ip addr show [..] 3: eth0: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:a0:24:e4:66:ea brd ff:ff:ff:ff:ff:ff inet 192.168.0.4/24 brd 192.168.0.255 scope global eth0 4: eth1: BROADCAST,MULTICAST,UP mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:a0:cc:57:e7:a1 brd ff:ff:ff:ff:ff:ff inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1 Here's what the problem is: Jan 20 11:40:49 firewall kernel: Shorewall:man1918:DROP:IN=eth0 OUT= MAC=00:a0:24:e4:66:ea:00:30:ab:06:6c:9c:08:00 SRC=128.8.129.2 DST=192.168.0.4 LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=17230 DF PROTO=TCP SPT=22 DPT=39534 WINDOW=25920 RES=0x00 ACK SYN URGP=0 Notice the rule that was hit: Shorewall:man1918. Do you have the norfc1918 option set for eth0 in /etc/shorewall/interfaces ? E.g.: net eth0detect dhcp,routefilter,norfc1918 ^ which is the Bering 1.0-stable default I believe. --Brad --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Dachstein 1.02 and PCMCIA
I need to create a LEAF firewall using Dachstein 1.02 on a laptop with 2 PCMCIA NICs. Charles can you help me, or do you know who can? Is it possible to do this and boot from the CD without having to recompile the kernel? I'm running out of time, the machine has to be operational by Jan 31 and it is but a small part of what has to be done. Roger --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] bering/shoreline snat problem
Brad, The devil was in the details, particularly the fact that your external interfac uses an RFC 1918 address... (snip) Notice the rule that was hit: Shorewall:man1918. Do you have the norfc1918 option set for eth0 in /etc/shorewall/interfaces ? E.g.: net eth0detect dhcp,routefilter,norfc1918 ^ which is the Bering 1.0-stable default I believe. Indeed it was the default. Thanks for catching that! -bryan --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Dachstein 1.02 and PCMCIA
Roger, On Mon, 20 Jan 2003 15:10:21 EST Roger E McClurg wrote: I need to create a LEAF firewall using Dachstein 1.02 on a laptop with 2 PCMCIA NICs. Do you need to use Dachstein? Bering has much better PCMCIA support. It should be doable under Dachstein, but you will almost certainly save yourself headaches (WRT the PCMCIA setup) by using Bering. --Brad --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] IPSec for latest wisp-distibution.
Le Lundi 20 Janvier 2003 17:36, Vladimir I. a écrit : Bering packages for 2.4.20 kernels may do. Although I'm not sure if ipsec support is compiled in or it's in modules in Bering. It's available as a module (comes from freeswan 1.99) It's here: http://leaf.sourceforge.net/devel/jnilo/bering/latest/modules/2.4.20/kernel/net/ipsec/ Jacques Nicolas Cedraschi wrote: Hi everybody, Thanks for your competent help so far (Special thanks to Vladimir), we really profited of your knowledge. Here rolls in the next question Is there a dedicated ipsec module and package around for wisp? Or will any bering module/package do? All the best Daniel Nicloas --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Dachstein 1.02 and PCMCIA
I'm willing to go with Bering, if someone can tell me how to get it up and running via PCMCIA quickly. I need a firewall doing DHCP on eth0 for it's IP address, and running DHCPD on eth1. The only gotcha is that I also have to run a squid proxy on eth1. Anyone got squid running on Bering? Roger Todd Pearsall todd @pearsall.us 01/20/2003 03:55 PM To: Roger E McClurg/CEG/CSC@CSC cc: Subject:Re: [leaf-user] Dachstein 1.02 and PCMCIA I haven't done pcmcia with Dachstein, but I have with Bering. If you don't have to Dachstein, try Bering the newer kernel has better support for things like pcmcia and usb. - Todd - Original Message - From: Roger E McClurg [EMAIL PROTECTED] To: Charles Steinkuehler [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Monday, January 20, 2003 3:10 PM Subject: [leaf-user] Dachstein 1.02 and PCMCIA I need to create a LEAF firewall using Dachstein 1.02 on a laptop with 2 PCMCIA NICs. Charles can you help me, or do you know who can? Is it possible to do this and boot from the CD without having to recompile the kernel? I'm running out of time, the machine has to be operational by Jan 31 and it is but a small part of what has to be done. Roger --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Dachstein 1.02 and PCMCIA
Roger, On Mon, 20 Jan 2003 16:26:09 EST Roger E McClurg wrote: I'm willing to go with Bering, if someone can tell me how to get it up and running via PCMCIA quickly. I need a firewall doing DHCP on eth0 for it's IP address, and running DHCPD on eth1. dhcpd is included in the stock Bering images and the default interfaces file uses dhcp (via pump by default) for eth0's address. The best document for setting up PCMCIA is the PCMCIA configuration chapter of the User's Guide at: http://leaf.sourceforge.net/devel/jnilo/bupcmcia.html (There's some ppp stuff in it that you can probably ignore.) Let us know if you have specific questions or run into problems. The only gotcha is that I also have to run a squid proxy on eth1. Anyone got squid running on Bering? I have seen fairly recent squid packages floating around, but I don't remember where. You may want to browse the CVS devel directory at: http://cvs.sf.net/cgi-bin/viewcvs.cgi/leaf/devel/ and check the mailing list archives. And there's always the older packages in the package list: http://leaf-project.org/pub/packages-list.html Hopefully someone with first-hand squid-on-Bering experience will share some pointers. --Brad --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Re: Dachstein 1.02 and PCMCIA
Roger E McClurg wrote: I need to create a LEAF firewall using Dachstein 1.02 on a laptop with 2 PCMCIA NICs. Charles can you help me, or do you know who can? Is it possible to do this and boot from the CD without having to recompile the kernel? I'm running out of time, the machine has to be operational by Jan 31 and it is but a small part of what has to be done. I haven't worked with PCMCIA NICs or laptops in general. I suggest trolling the list archives, as I know folks have done this, but I don't know if you need a new kernel or not. You might also consider Bering and/or using a 2.4 kernel (such as the kernel from Bering), unless there is an absolute requirement for Dachstein. IIRC, the 2.4 kernels support PCMCIA much better than 2.2 kernels, but I could be wrong, since I don't work with portable stuff. -- Charles Steinkuehler [EMAIL PROTECTED] --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] bering/shoreline snat problem
Brian Bryan D. Payne wrote the following at 19:12 20.01.2003: (DSL Connection) | | || | PPPoE interface | || | **fw**| || | 192.168.0.1/24 | || | OK your external interface is a RFC1918 address you have to take care about that in your shorewall set up | || | 192.168.0.4/24 | || |**beringfw**| || | 192.168.1.254/24 | || | . * This packet travels through fw, and I assume that is working properly for the purposes of this discussion. This is a valid assumption because the next thing that I see is a reply from 128.8.129.2 after it goes through fw. This reply is now destined for 192.168.0.4 (aka beingfw). When beringfw receives the packet, it drops it, and logs it with the following message in /var/log/messages: Jan 20 11:40:49 firewall kernel: Shorewall:man1918:DROP:IN=eth0 OUT= MAC=00:a0:24:e4:66:ea:00:30:ab:06:6c:9c:08:00 SRC=128.8.129.2 DST=192.168.0.4 LEN=64 TOS=0x00 PREC=0x00 TTL=56 ID=17230 DF PROTO=TCP SPT=22 DPT=39534 WINDOW=25920 RES=0x00 ACK SYN URGP=0 and here you see the dropped packet in chain man1918 must be address mangling and norfc1918.You can try to see this chain with iptables -L man1918 but be aware that shorewall is a system, not just a collection of iptables rules. I believe you have to adapt the interfaces file to accept incoming rfc1918 addresses. See the shorewall docs. HTH Erich THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954 3BC8 C024 8D8A B7D4 FF9D 05B8 0A16 --- This SF.NET email is sponsored by: FREE SSL Guide from Thawte are you planning your Web Server Security? Click here to get a FREE Thawte SSL guide and find the answers to all your SSL security issues. http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Unresolved Symbols
Hi all. Thanks for all your great work on this list. I have a general question that is more Linux than LEAF but I expect you guys will be able to answer it for me. I tried to add smc-ultra.o to a Bering distro I'm putting together but when I ran insmod /lib/modules/smc-ultra.o I got a list of unresolved symbol messages. I may have other problems with the NIC I am using so I'm not looking for specific answers at the moment but can someone point me in the direction of some instruction of what causes the unresolved symbol messages? Thanks again for your assistance. David Pitts IT Services Manager Reid Library University of Western Australia Telephone: (08) 9380 3492 Fax: (08) 9380 1012 --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Unresolved Symbols
At 10:04 AM 1/21/03 +0800, David Pitts wrote: Hi all. Thanks for all your great work on this list. I have a general question that is more Linux than LEAF but I expect you guys will be able to answer it for me. I tried to add smc-ultra.o to a Bering distro I'm putting together but when I ran insmod /lib/modules/smc-ultra.o I got a list of unresolved symbol messages. I may have other problems with the NIC I am using so I'm not looking for specific answers at the moment but can someone point me in the direction of some instruction of what causes the unresolved symbol messages? There are two common causes. 1. The module being loaded depends on another module that has not been loaded previously (or some kernel feature that has not been compiled in). (Check the appropriate modules.dep file for this, but I don't believe smc-ultra has dependencies in 2.4.x kernels.) 2. There is a version mismatch between the module and the kernel it is being insmod'ed to. (Check where you got the module from to see if it goes with your kernel.) -- ---Never tell me the odds! Ray Olszewski -- Han Solo Palo Alto, California, USA [EMAIL PROTECTED] --- --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Unresolved Symbols
Thanks Ray. I used the module from the Bering website (6k file) so I believe it's the right one. I don't suppose different versions of the Bering software need different versions of the driver?? I will check dependencies. David Pitts IT Services Manager Reid Library University of Western Australia Telephone: (08) 9380 3492 Fax: (08) 9380 1012 -Original Message- From: Ray Olszewski [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 21 January 2003 10:36 AM To: David Pitts; [EMAIL PROTECTED] Subject: Re: [leaf-user] Unresolved Symbols At 10:04 AM 1/21/03 +0800, David Pitts wrote: Hi all. Thanks for all your great work on this list. I have a general question that is more Linux than LEAF but I expect you guys will be able to answer it for me. I tried to add smc-ultra.o to a Bering distro I'm putting together but when I ran insmod /lib/modules/smc-ultra.o I got a list of unresolved symbol messages. I may have other problems with the NIC I am using so I'm not looking for specific answers at the moment but can someone point me in the direction of some instruction of what causes the unresolved symbol messages? There are two common causes. 1. The module being loaded depends on another module that has not been loaded previously (or some kernel feature that has not been compiled in). (Check the appropriate modules.dep file for this, but I don't believe smc-ultra has dependencies in 2.4.x kernels.) 2. There is a version mismatch between the module and the kernel it is being insmod'ed to. (Check where you got the module from to see if it goes with your kernel.) -- ---Never tell me the odds! Ray Olszewski -- Han Solo Palo Alto, California, USA[EMAIL PROTECTED] --- --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Unresolved Symbols
On Monday 20 January 2003 08:04 pm, David Pitts wrote: Hi all. Thanks for all your great work on this list. I have a general question that is more Linux than LEAF but I expect you guys will be able to answer it for me. I tried to add smc-ultra.o to a Bering distro I'm putting together but when I ran insmod /lib/modules/smc-ultra.o I got a list of unresolved symbol messages. I may have other problems with the NIC I am using so I'm not looking for specific answers at the moment but can someone point me in the direction of some instruction of what causes the unresolved symbol messages? Well, Google and the leaf-user list archive (searchable) are always your best friends, but unresolved symbol messages generally indicate that the module you are using is not from the actual kernel you are using. The smc-ultra module doesn't have any dependancies, so that's not a problem. We could likely help you more if we know which version of LEAF you are using (exactly), if you've added a kernel to the image other than stock, and where you got your module (exactly). I hope this helps, -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Unresolved Symbols
On Monday 20 January 2003 08:43 pm, David Pitts wrote: Thanks Ray. I used the module from the Bering website (6k file) so I believe it's the right one. I don't suppose different versions of the Bering software need different versions of the driver?? Wrong! I'll bet your using a module from the 2.4.20 tree with the stock 2.4.18 kernel. Get your module from the 2.4.18 tree instead! -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
RE: [leaf-user] Unresolved Symbols
I am using Bering_1.0-stable_img_bering_1680.exe from http://sourceforge.net/project/showfiles.php?group_id=13751 and smc-ultra.o (20-Oct-2002 09:03 6k) from http://leaf.sourceforge.net/devel/jnilo/bering/rc4/modules/2.4.18/kernel /drivers/net/ I haven't added anything to it other than the smc-ultra.o module. A couple of other things. I tried to insmod another module (ne.o), just for comparison, which came with the distro and had a similar problem. And when I first mounted the Bering floppy to copy smc-ultra.o to /lib/modules from /mnt, the directory listing was corrupted (ie the result of ls /mnt). All sorts of characters all over the place. So I umounted the floppy and rebooted the router PC and everthing looked fine. Thanks for your thoughts. David Pitts IT Services Manager Reid Library University of Western Australia Telephone: (08) 9380 3492 Fax: (08) 9380 1012 -Original Message- From: Lynn Avants [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 21 January 2003 10:51 AM To: [EMAIL PROTECTED] Subject: Re: [leaf-user] Unresolved Symbols On Monday 20 January 2003 08:04 pm, David Pitts wrote: Hi all. Thanks for all your great work on this list. I have a general question that is more Linux than LEAF but I expect you guys will be able to answer it for me. I tried to add smc-ultra.o to a Bering distro I'm putting together but when I ran insmod /lib/modules/smc-ultra.o I got a list of unresolved symbol messages. I may have other problems with the NIC I am using so I'm not looking for specific answers at the moment but can someone point me in the direction of some instruction of what causes the unresolved symbol messages? Well, Google and the leaf-user list archive (searchable) are always your best friends, but unresolved symbol messages generally indicate that the module you are using is not from the actual kernel you are using. The smc-ultra module doesn't have any dependancies, so that's not a problem. We could likely help you more if we know which version of LEAF you are using (exactly), if you've added a kernel to the image other than stock, and where you got your module (exactly). I hope this helps, -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] 2 external ip addresses on lan behind bering
I'm running Bering and 2 computers behind Bering firewall. I'm thinking about getting second ip from ISP. Is there a way to route those ips directly to computers on lan via Bering firewall? Or should I just put switch between modem and both computers and put small firewalls right on them? Andrey Holub --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
