Re: [leaf-user] Bering 1.1 and NAT-Traversal

2003-03-18 Thread Alex Rhomberg

> Alex:
> Bering 1.1 kernel is patched with all the patches included here:
> http://leaf.sf.net/devel/jnilo/bering/1.1/development/kernel/
> and here:
> http://leaf.sf.net/devel/jnilo/bering/1.1/development/freeswan-1.99/
>
> Apparently I did something wrong either applying the NAT
> Traversal patches or
> in my kernel config file. Any idea ?

Jacques,
I can't really say. Something you can check for is when you start ipsec
without activating nat_traversal in ipsec.conf, the log file should read
"nat traversal disabled" or something similar.

I use Super FreeS/WAN which seems to work fine. It consists of FreeS/WAN
with a set of patches that were tested together, including the algo patch.
On my page, there is the compiled kernel and a description of the
compilation process. So I recommend either
- using my kernel, modules and ipsec.conf, although I'm not quite happy with
the compilation of the ipsec user space stuff
- compile a new kernel with Super FreeS/WAN, which is now in version
1.99.5.1. My description of the kernel compilation should make this easy.

Cheers
Alex



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] LEAF as an ISP?

2003-03-18 Thread Lance Dunn
As a user of Bering (and happily) I have a pretty simple setup:
Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub <=> 3
Windows computers
What I would like to do is complicate the issue. Is it possible to add an
auto-answer modem (not a WinModem) to the LEAF computer and have a remote
computer dial up the LEAF modem and then have the remote computer be routed
to the INTERNET? This would save me having to pay for another ISP that I can
access from remote locations. Any thoughts...



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] LEAF as an ISP?

2003-03-18 Thread Lars Kneschke(priv.)
Lance Dunn <[EMAIL PROTECTED]> schrieb: 
>As a user of Bering (and happily) I have a pretty simple setup:
>Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub
><=> 3
>Windows computers
>What I would like to do is complicate the issue. Is it possible to add
>an
>auto-answer modem (not a WinModem) to the LEAF computer and have a
>remote
>computer dial up the LEAF modem and then have the remote computer be
>routed
>to the INTERNET? This would save me having to pay for another ISP that
>I can
>access from remote locations. Any thoughts...
This should help:

http://leaf.sourceforge.net/devel/jnilo/bumodem.html

Cu
--
Lars Kneschke
http://www.kneschke.de
written with FeLaMiMail
http://www.saunalahti.fi/sakarit/kerro-lisaa/bart.gif
http://www.disinfopedia.org/





---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] iptraf and ncurses on Bering 1.0/1.1

2003-03-18 Thread Adrian Wooster
Ales,

As I now know, all this requires is the terminfo files to work.

Take the standard "termcap" file from your main Linux system, and remove all
the terminal definitions that you'll never use (and probably never heard
of), leaving just the sections which define the terminals you need, and then
copy the reduced file to /etc on Bering.

Then copy the corresponding files in /usr/share/terminfo/ The default in
Bering is "linux" which should go into /usr/share/terminfo/l/

Some applications apparently need to see them in /etc/terminfo/..., so just
to be sure I've added a link to /usr/share/terminfo.

Hope that helps,
   Adrian

-Original Message-
From: Ales Curk [mailto:[EMAIL PROTECTED]
Sent: 17 March 2003 20:39
To: Adrian Wooster
Cc: [EMAIL PROTECTED]
Subject: Re: [leaf-user] iptraf and ncurses on Bering 1.0/1.1


Helo!

I have also tryed to install iptraf. I also installed sshd but when I try
to run iptraf true ssh client from my bering 1.1 I recieved folowing
warning

Warning: unable to tag this process
Press Enter to continue

Error opening terminal: xterm.

What is wrong?

BTW: While I was working on my bering locally I receaved errors about
opening terminal. Just like you.


--
Ales :)

On Mon, 10 Mar 2003, Adrian Wooster wrote:

> Has anyone had success in using iptraf.lrp and libncurs.lrp on Bering?
>
> When I've loaded as instructed, iptraf returns errors about opening
terminal
> linux which I assume means its having problems with ncurses. The
recommended
> ncurses package certainly appears to have loaded correctly.
>
> I seem to remember ntop.lrp has a similar issue at the console, but works
> okay from the web interface.
>
> Can anyone help?
>
> Adrian
>
>
>
> ---
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> 
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
>




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] LEAF as an ISP?

2003-03-18 Thread James Neave
Hi!

Be advised, this is from a UK perspective.

Cons:

1) Cost of the call as you move further away from your "personal ISP"
2) I am under the impression that the low pass filter at your exchange
is  
   disabled for ISP dial-in lines, which enables the speeds about 33K.
3) If the system goes down, it's not going to come back up until you go
home 
   and fix it, meaning no remote access.

Pros:

1) Very private access to your network with decent authentication.
2) Good if there are no 'free' ISPs available I guess.
3) No wait toll free support line! Just ask the questions in a mirror ;)

James.  

> -Original Message-
> From: Lance Dunn [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, March 18, 2003 9:39 AM
> To: [EMAIL PROTECTED]
> Subject: [leaf-user] LEAF as an ISP?
> 
> As a user of Bering (and happily) I have a pretty simple setup:
> Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub
<=> 3
> Windows computers
> What I would like to do is complicate the issue. Is it possible to add
an
> auto-answer modem (not a WinModem) to the LEAF computer and have a
remote
> computer dial up the LEAF modem and then have the remote computer be
> routed
> to the INTERNET? This would save me having to pay for another ISP that
I
> can
> access from remote locations. Any thoughts...
> 
> 
> 
> ---
> This SF.net email is sponsored by: Does your code think in ink?
> You could win a Tablet PC. Get a free Tablet PC hat just for playing.
> What are you waiting for?
> http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en
>

> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] new WISP-Dist build 2546

2003-03-18 Thread Vladimir Ivaschenko
Unfortunately the hostap driver included in that release does not 
support 802.1x and therefore RADIUS. So we have to wait until hostap 
CVS stabilizes.

However I'm also thinking about putting some kind of authentication 
scheme for use in our network, I'm not sure that I will go with RADIUS 
though.

Marty Buchaus wrote:
This has fixed the lock up's I was getting with Teletronics and the 
Teletronics High power 20db cards..  Goog Catch..  Does this current 
driver allow for radius mac authentication? if so is the patch or 
complile option included in this build?  if not,  This would be an 
excellent additional feature to your WIP compileation.. Great work by 
the way..

Vladimir Ivaschenko wrote:

Hello All,

A new WISP-Dist test build (2546) is available from
http://www.hazard.maks.net/wisp-dist/downloads/. I did stress
testing of Prism and Cisco cards on Soekris and Teletronics
boards and found several stability issues in the drivers. The
good news is it seems that I've been able to overcome them.  Hostap 
driver is reverted to an old version used in 2.4.18-based
WISP-Dist releases, as new one from CVS seems to be very
unstable, at least in slow motherboards. Cisco driver was updated
to the new version Cisco released a couple of days, and looks to
be quite stable as well (the previous Cisco driver could end up
with card being locked up and not able to send anything).

Also trafshow utility is included. This is a quite useful utility to 
look at per-host traffic statistics, especially if your system is not 
powerful enough to run ntop.




--
Best Regards,
Vladimir Ivaschenko
Thunderworx - Systems Engineer (RHCE)


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] rw parameter necessary for bootable CD?

2003-03-18 Thread Craig Caughlin
Hi folks,
I couldn't get my new Bering CD to boot. I remembered from an earlier post
that one Bering user noted he had to modify his isolinux.cfg file to look
like "default linux rw initrd=initrd.lrp ..." by including the rw value.
What puzzles me is that Jacques' documentation doesn't mention this being
necessary, and I personally have never had to include this parameter when
I've made my Bering CD's in the past, and they've seemed to work fine until
now. Comments???

Thank you.
Craig




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] My weblet doesn't work :-(

2003-03-18 Thread Craig Caughlin
Hi folks,
I've made a new Bering CD, made it just like I've always done in the
past...but when I open my browser and try to view the weblet
(http://192.168.1.254/)... I get a Cannot find server message. Suggestions?

Thank you.
Craig




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] LEAF as an ISP?

2003-03-18 Thread Craig Caughlin
Hey Lance,
Why not just VPN to the box behind Bering: If the box is running XP-Pro,
enable remote desktop and surf away. If the box is either Windows 2000
Server or Advanced Server, enable Terminal Services on the box, Terminal
Service into it, and then surf away?

Best Regards,
Craig

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Lance Dunn
Sent: Tuesday, March 18, 2003 1:39 AM
To: [EMAIL PROTECTED]
Subject: [leaf-user] LEAF as an ISP?


As a user of Bering (and happily) I have a pretty simple setup:
Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub <=> 3
Windows computers
What I would like to do is complicate the issue. Is it possible to add an
auto-answer modem (not a WinModem) to the LEAF computer and have a remote
computer dial up the LEAF modem and then have the remote computer be routed
to the INTERNET? This would save me having to pay for another ISP that I can
access from remote locations. Any thoughts...



---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


AW: [leaf-user] LEAF as an ISP?

2003-03-18 Thread Alex Rhomberg
Lance,

> What I would like to do is complicate the issue. Is it possible to add an
> auto-answer modem (not a WinModem) to the LEAF computer and have a remote
> computer dial up the LEAF modem and then have the remote computer
> be routed
> to the INTERNET? This would save me having to pay for another ISP
> that I can
> access from remote locations. Any thoughts...

For this setup, you need a ppp daemon (pppd) to pick up the incoming call
and establish a ppp connection with your remote computer. There are a bunch
of packages in
http://leaf.sourceforge.net/pub/packages-list.html
one of which might be good for you.

The ppp daemon will likely add a new interface, and you'll have to set up
Firewall rules (probably also NAT / Masquerading) on the LEAF box to get the
Internet connection.

In Switzerland, your setup would be more expensive than a direct Internet
connection. We have to pay for all phone calls and the phone call to an ISP
is cheaper than the one to a private modem. But with free local phone calls,
your situation might be different.

Regards
Alex



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


AW: [leaf-user] rw parameter necessary for bootable CD?

2003-03-18 Thread Alex Rhomberg
> Betreff: [leaf-user] rw parameter necessary for bootable CD?

The rw parameter is not needed for the 2.4.18 kernel (Bering 1.0), but it is
needed for newer kernels (2.4.20 of Bering 1.1), starting with 2.4.19 or
2.4.20.

- Alex



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] rw parameter necessary for bootable CD?

2003-03-18 Thread Craig Caughlin
Alex,
O.K., I'm confused. Why does it work without the rw parameter if you're
using a floppy disk...but not a CD?

Craig

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Alex Rhomberg
Sent: Tuesday, March 18, 2003 8:04 AM
To: Craig Caughlin; LEAF
Subject: AW: [leaf-user] rw parameter necessary for bootable CD?


> Betreff: [leaf-user] rw parameter necessary for bootable CD?

The rw parameter is not needed for the 2.4.18 kernel (Bering 1.0), but it is
needed for newer kernels (2.4.20 of Bering 1.1), starting with 2.4.19 or
2.4.20.

- Alex



---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] RE: [leaf-user] rw parameter necessary for bootable CD?

2003-03-18 Thread Jacques Nilo
Graig:
The rw parameter is needed for post 2.4.18 kernel whatever the boot media is (floppy, 
cd-rom, disk...). If you do not put it your initial fs is mounted Read-only and 
therefore you cannot create directories needed at the initial stage of the boot 
process.
By the way my documentation mention this:
http://leaf.sourceforge.net/devel/jnilo/bucdrom.html
See end of paragraph 8.4

Jacques

Alex,
O.K., I'm confused. Why does it work without the rw parameter if you're
using a floppy disk...but not a CD?

Craig

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Alex Rhomberg
Sent: Tuesday, March 18, 2003 8:04 AM
To: Craig Caughlin; LEAF
Subject: AW: [leaf-user] rw parameter necessary for bootable CD?


> Betreff: [leaf-user] rw parameter necessary for bootable CD?

The rw parameter is not needed for the 2.4.18 kernel (Bering 1.0), but it is
needed for newer kernels (2.4.20 of Bering 1.1), starting with 2.4.19 or
2.4.20.

- Alex



---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



http://leaf.sourceforge.net/devel/jnilo
-
SPECIAL ADSL 
L'ADSL à partir de 15,95 EUR/mois et le modem ADSL offert ?  C'est en exclusivité chez 
Tiscali !
Pour profiter de cette offre, cliquez ici: http://register.tiscali.fr/adsl/
Offre soumise à conditions.




---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Shoreall 1.4.0 Released

2003-03-18 Thread Tom Eastep
This is a major release of Shorewall.

Function from 1.3 that has been omitted from this version includes:

1) The MERGE_HOSTS variable in shorewall.conf is no longer
   supported. Shorewall 1.4 behavior is the same as 1.3 with
   MERGE_HOSTS=Yes.

2) Interface names of the form : in
   /etc/shorewall/interfaces now generate an error.

3) Shorewall 1.4 implements behavior consistent with
   OLD_PING_HANDLING=No. OLD_PING_HANDLING=Yes will generate an error
   at startup as will specification of the 'noping' or 'filterping'
   interface options.

4) The 'routestopped' option in the /etc/shorewall/interfaces and
   /etc/shorewall/hosts files is no longer supported and will generate
   an error at startup if specified.

5) The Shorewall 1.2 syntax for DNAT and REDIRECT rules is no longer
   accepted.

6) The ALLOWRELATED variable in shorewall.conf is no longer
   supported. Shorewall 1.4 behavior is the same as 1.3 with
   ALLOWRELATED=Yes.

7) The 'multi' interface option is no longer supported. Shorewall will
   generate rules for sending packets back out the same interface
   that they arrived on in two cases:

   a) There is an _explicit_ policy for the source zone to the
   destination zone. An explicit policy names both zones and does not
   use the 'all' reserved word.

   b) There are one or more rules for traffic for the source zone to
   or from the destination zone including rules that use the 'all'
   reserved word. Exception: If the source and the destination are
   the same zone then the rule must be explicit - it must name the zone
   in both the SOURCE and DESTINATION columns.

Changes for 1.4 include:

1) shorewall.conf has been completely reorganized into logical
   sections.

2) LOG is now a valid action for a rule (/etc/shorewall/rules).

3) The firewall script and version file are now installed in
   /usr/share/shorewall.

4. Late arriving DNS replies are now silently dropped in the common
   chain by default.

5) In addition to behaving like OLD_PING_HANDLING=No, Shorewall 1.4 no
   longer unconditionally accepts outbound ICMP packets. So if you want
   to 'ping' from the firewall, you will need the appropriate rule or
   policy.

6) CONTINUE is now a valid action for a rule (/etc/shorewall/rules).

7) 802.11b devices with names of the form wlan now support the
   'maclist' option.

8) IMPORTANT: Shorewall now REQUIRES the iproute package ('ip'
   utility).

9) Explicit Congestion Notification (ECN - RFC 3168) may now be turned
   off on a host or network basis using the new /etc/shorewall/ecn
   file. To use this facility:

   a) You must be running kernel 2.4.20
   b) You must have applied the patch in
   http://www.shorewall/net/pub/shorewall/ecn/patch.
   c) You must have iptables 1.2.7a installed.

10) The /etc/shorewall/params file is now processed first so that
variables may be used in the /etc/shorewall/shorewall.conf file.

11) Packets with state INVALID are now silently dropped.

12) Shorewall now gives a more helpful diagnostic when the 'ipchains'
compatibility kernel module is loaded and a 'shorewall start'
command is issued.

13) The SHARED_DIR variable has been removed from shorewall.conf. This
variable was for use by package maintainers and was not documented
for general use.

14) Shorewall now ignores 'default' routes when detecting masq'd
networks.

-Tom
-- 
Tom Eastep\ Shorewall - iptables made easy
Shoreline, \ http://shorewall.sf.net
Washington USA  \ [EMAIL PROTECTED]



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] My weblet doesn't work :-(

2003-03-18 Thread Matt Schalit


Craig Caughlin wrote:
Hi folks,
I've made a new Bering CD, made it just like I've always done in the
past...but when I open my browser and try to view the weblet
(http://192.168.1.254/)... I get a Cannot find server message. Suggestions?
Thank you.
Craig




more /var/log/syslog
Look for any messages there about things being denied.


tail /etc/inetd.conf
Look for this line to be there and uncommented (no # sign prefixing it)
  www  stream  tcp  nowait  sh-httpd/usr/sbin/tcpd  /usr/sbin/sh-httpd



cat /etc/hosts.allow
cat /etc/hosts.deny
Try to see if you are allowing your local lan access to
tcpwrapper enabled stuff started via inetd (I don't know
if sh-httpd is).  Matt


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] LEAF as an ISP?

2003-03-18 Thread Lynn Avants
On Tuesday 18 March 2003 03:39 am, Lance Dunn wrote:
> As a user of Bering (and happily) I have a pretty simple setup:
> Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub <=> 3
> Windows computers
> What I would like to do is complicate the issue. Is it possible to add an
> auto-answer modem (not a WinModem) to the LEAF computer and have a remote
> computer dial up the LEAF modem and then have the remote computer be routed
> to the INTERNET? This would save me having to pay for another ISP that I
> can access from remote locations. Any thoughts...

You don't want the modem to "auto-answer", but rather let the 'mgetty.lrp' 
package do all of that. The best documentation I've seen for doing this
with LEAF exists here:

http://leaf.sourceforge.net/devel/thc/dox/pppserv.txt
-- 
~Lynn Avants
Linux Embedded Appliance Firewall Developer
http://leaf.sourceforge.net
http://www.guitarlynn.homelinux.org:81


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] tcpdump for Bear-Uclibc-1.1

2003-03-18 Thread Martin Hejl
Hi Larry,

Does a .lrp for tcpdump exist for Bearing-Uclibc-1.1?
I have looked but not found, but I might be blind.
I could use one to look at some incoming packets.
If not tcpdump something similar, need to look at data from an internal
analog serial modem.
I could use a Bering version if a Bering-Uclibc is not available, just not
as easy. I would expect both version would be good to have available.
Thanks in advance.
no, we haven't been ignoring you - even if it might seem that way. Sorry 
it took so long to respond.

No, there's currently no .lrp for tcpdump, and I've run into a few 
problems while trying to compile it for uClibc (I'm using the buildtool 
environment, and something isn't quite working yet). Be assured we're 
looking into it, and we should be able to provide you with a tcpdump 
package sooner or later (hopefully sooner).

So, I guess I'm asking you for more patience - sorry about that. But I 
wanted to make sure that you didn't think nobody noticed or cared about 
your question.

Martin



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] LEAF as an ISP?

2003-03-18 Thread Sebastiano Scorbati
Please consider that even V.90 modems will only give you 33,6 at most on
both downlink and uplink.

Sincerely,
Sebastiano.

> >As a user of Bering (and happily) I have a pretty simple setup:
> >Internet <=> Cable Modem <=> Eth0 NIC <=> LEAF <=> Eth1 NIC <=> Hub
> ><=> 3
> >Windows computers
> >What I would like to do is complicate the issue. Is it possible to add
> >an
> >auto-answer modem (not a WinModem) to the LEAF computer and have a
> >remote
> >computer dial up the LEAF modem and then have the remote computer be
> >routed
> >to the INTERNET?




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] tcpdump for Bear-Uclibc-1.1

2003-03-18 Thread Larry Platzek
Hi Martin,

On Tue, 18 Mar 2003, Martin Hejl wrote:

> Date: Tue, 18 Mar 2003 21:17:47 +0100
> From: Martin Hejl <[EMAIL PROTECTED]>
> To: Larry Platzek <[EMAIL PROTECTED]>
> Cc: [EMAIL PROTECTED]
> Subject: Re: [leaf-user] tcpdump for Bear-Uclibc-1.1
>
> Hi Larry,
>
> > Does a .lrp for tcpdump exist for Bearing-Uclibc-1.1?
> > I have looked but not found, but I might be blind.
> > I could use one to look at some incoming packets.
> > If not tcpdump something similar, need to look at data from an internal
> > analog serial modem.
> > I could use a Bering version if a Bering-Uclibc is not available, just not
> > as easy. I would expect both version would be good to have available.
> >
> > Thanks in advance.
> no, we haven't been ignoring you - even if it might seem that way. Sorry
> it took so long to respond.
>
> No, there's currently no .lrp for tcpdump, and I've run into a few
> problems while trying to compile it for uClibc (I'm using the buildtool
> environment, and something isn't quite working yet). Be assured we're
> looking into it, and we should be able to provide you with a tcpdump
> package sooner or later (hopefully sooner).
>
> So, I guess I'm asking you for more patience - sorry about that. But I
> wanted to make sure that you didn't think nobody noticed or cared about
> your question.
>
> Martin
>
I have patience, and hope other have too!
Hope others do/will have patience with me!
I want to document "active-filter in pppd" but have had trouble
making it work right and hoped tcpdump would help! I had a private email
telling me where to obtain a non tested static tcpdump, but have run into
trouble.

tcpdump running
 with multicasts only coming in the active-filter idle time out works!
 with multicast and pings and ping replies coming in active-filter
   never idle timeout occurs.
ping   = icmp: echo request
ping reply = icmp: echo reply

I have tried expressions on tcpdump to show only the ping and ping
reply, and have had multicast only work.

tcpdump -i ppp0 'icmp[0] = 8 or icmp[0] = 0 '
does show icmp: echo request and icmp: echo reply packets.

tcpdump -i ppp0 'ether[0] & 1 != 0'
 This shows the multicast packets.
tcpdump -i ppp0 'ether[0] & 1 != 0 or icmp[0] =8 or icmp[0] = 0 '
only shows the ping request and ping reply packets
so what happened to the multicast packets?

I need what ever expression used in tcpdump to see the multicast packets
and ping request and reply to place on an active-filter statement!

For mine own use I can ignore the "ping packets" but think it would be
good to have in place and properly documented!

Does anyone have good suggestions or need some information to help solve
the problem.

Thank You in Advance!


Larry Platzek  [EMAIL PROTECTED]



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] tcpdump for Bear-Uclibc-1.1

2003-03-18 Thread Martin Hejl
Hi Larry,

I need what ever expression used in tcpdump to see the multicast packets
and ping request and reply to place on an active-filter statement!
For mine own use I can ignore the "ping packets" but think it would be
good to have in place and properly documented!
Does anyone have good suggestions or need some information to help solve
the problem.
I'm sorry - I can't help with that. I have no experience with actually 
running tcpdump whatsoever (I've only used ethereal in the past, and 
badly at that - the few times I needed it, it was easier to sort through 
tons of unneeded/irrelevant info rather than spend the time going 
through the docs to find out how to craft the expressions to only catch 
the info one wants).

I hope somebody else can help you out with that - in the mean time, I 
will surely do my best to provide a "native" (i.e. non-static) version 
of tcpdump for Bering uClibc.

I'm not quite sure what you're trying to do, but it surely sounds 
interesting ("active filtering" surely sounds like a nice buzz-word to 
put into some product specs ;-)).

Martin



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] tcpdump for Bear-Uclibc-1.1

2003-03-18 Thread Peter Mueller
Hi,

> tcpdump running
>  with multicasts only coming in the active-filter idle 
> time out works!
>  with multicast and pings and ping replies coming in active-filter
>never idle timeout occurs.
> ping   = icmp: echo request
> ping reply = icmp: echo reply
> 
> I have tried expressions on tcpdump to show only the ping and ping
> reply, and have had multicast only work.
> 
> tcpdump -i ppp0 'icmp[0] = 8 or icmp[0] = 0 '
> does show icmp: echo request and icmp: echo reply packets.
> 
> tcpdump -i ppp0 'ether[0] & 1 != 0'
>  This shows the multicast packets.
> tcpdump -i ppp0 'ether[0] & 1 != 0 or icmp[0] =8 or icmp[0] = 0 '
> only shows the ping request and ping reply packets
> so what happened to the multicast packets?
> 
> I need what ever expression used in tcpdump to see the 
> multicast packets
> and ping request and reply to place on an active-filter statement!

http://www.tcpdump.org/#lists is probably the place you want to go.

P


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Backup

2003-03-18 Thread Doug Sampson
If I modify index.htm in the /var/sh-www directory, which of the packages in
the backup menu do I choose to make a backup? The weblet package? I'm using
DCD 1.0.2.

~Doug


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] My weblet doesn't work :-(

2003-03-18 Thread Craig Caughlin
Hi folks,
That's odd. I tried all of Matts' suggestions, and everything seemed fine.
When I use the weblet from an older version of Bering it works fine. Any
comments? Is there any reason not to use the older version of weblet.lrp if
it works?

Thank you.

Craig

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt Schalit
Sent: Tuesday, March 18, 2003 11:07 AM
To: LEAF
Subject: Re: [leaf-user] My weblet doesn't work :-(




Craig Caughlin wrote:
> Hi folks,
> I've made a new Bering CD, made it just like I've always done in the
> past...but when I open my browser and try to view the weblet
> (http://192.168.1.254/)... I get a Cannot find server message.
Suggestions?
>
> Thank you.
> Craig




more /var/log/syslog
Look for any messages there about things being denied.




tail /etc/inetd.conf
Look for this line to be there and uncommented (no # sign prefixing it)

   www  stream  tcp  nowait  sh-httpd/usr/sbin/tcpd  /usr/sbin/sh-httpd




cat /etc/hosts.allow
cat /etc/hosts.deny

Try to see if you are allowing your local lan access to
tcpwrapper enabled stuff started via inetd (I don't know
if sh-httpd is).  Matt




---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] OpenSSL for Bering uCLibc 1.1

2003-03-18 Thread Guillermo Kunst
Hi all,

do somebody already compiled OpenSSL for the Bering uClibc Version??

If yes, can i get a copy of the lrp file.

Thanks for your help

Guillermo



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] CUSeeMe

2003-03-18 Thread David Pitts
Hi all again!  I am having trouble finding source code for the Bering
kernel.  I thought it would be in here:
http://leaf.sourceforge.net/devel/jnilo/bering/latest/development/kernel
/
But there doesn't seem to be a kernel in there at all let alone the
source code.  Is it available or does it need to be made up from the
basic 2.4.20 kernel (available from Kernel.org?).

Thanks again.

David Pitts
IT Services Manager
Reid Library 
University of Western Australia
 
Telephone:   (08) 9380 3492 Fax:  (08) 9380 1012


-Original Message-
From: David Pitts 
Sent: Tuesday, 18 March 2003 11:32 AM
To: Lynn Avants
Cc: [EMAIL PROTECTED]
Subject: RE: [leaf-user] CUSeeMe


Thanks Lynn.  I will check the conf file.  The other things are all
true.  Ie I use 192.168.1.xxx and eth1.

David Pitts
IT Services Manager
Reid Library 
University of Western Australia
 
Telephone:   (08) 9380 3492 Fax:  (08) 9380 1012


-Original Message-
From: Lynn Avants [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, 18 March 2003 11:16 AM
To: David Pitts
Cc: [EMAIL PROTECTED]
Subject: Re: [leaf-user] CUSeeMe


On Monday 17 March 2003 08:21 pm, David Pitts wrote:

> Thanks Lynn.
>
> The uDHCP package did work better but still not quite right.  The
> client was fine, worked like a charm, first time.  The server appears 
> to load but doesn't serve addresses.  I don't remember if I said that 
> before, but it was doing the same thing before you modified it.  I 
> just copied the package to my floppy and edited syslinux.cfg to add it

> and remove pump and dhcpd.  Is that the right process?

Yes, that is the right order. I haven't had any problems with the server
portion working with Bering-1.0. By chance, are you using "eth1" for an
internal interface, the "192.168.1.0" network addressing for your LAN,
and enabled "dhcp" for the "loc" section of Shorewall?

If any changes are made from the default Bering settings that affect
these things, you must also make the proper changes to /etc/udhcpd.conf
for the program to work. Just a WAG since I haven't had any problems
myself in testing.


> On the other question (cuseeme) I have contacted a fella who has
> developed a couple of patches which are available on patch-o-matic. 
> However, I don't have the resources to make any thing of that.  He is 
> prepared to compile the things for me though if he can.  Can you tell 
> me what flavour of Linux LEAF is based on?  I believe its Debian from 
> memory?  And can you tell me if the kernel 'newnat' support?  Or maybe

> Jaques can?

Debian Slink for the userland stuff and Debain Woody for the kernel.
Jacques has the necessary patches posted in his /devel directory.
"newnat" is something I can't say I have ever heard of.


> What do you know about patch-o-matic?  Can it create modules or must
> it patch the kernel?

It patches the kernel source.


> I'm sorry if this seems too much off the LEAF track but I would
> appreciate any assistance.

NP

-- 
~Lynn Avants
Linux Embedded Appliance Firewall Developer http://leaf.sourceforge.net
http://www.guitarlynn.homelinux.org:81




---
This SF.net email is sponsored by:Crypto Challenge is now open! 
Get cracking and register here for some mind boggling fun and 
the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: Does your code think in ink?
You could win a Tablet PC. Get a free Tablet PC hat just for playing.
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] CUSeeMe

2003-03-18 Thread Jeff Newmiller
On Wed, 19 Mar 2003, David Pitts wrote:

> Hi all again!  I am having trouble finding source code for the Bering
> kernel.  I thought it would be in here:
> http://leaf.sourceforge.net/devel/jnilo/bering/latest/development/kernel
> /
> But there doesn't seem to be a kernel in there at all let alone the
> source code.  Is it available or does it need to be made up from the
> basic 2.4.20 kernel (available from Kernel.org?).

See http://leaf.sourceforge.net/devel/jnilo/bdev.html

In particular, http://leaf.sourceforge.net/devel/jnilo/bdkernel.html#AEN43

The procedure is generally the same, regardless of the specific kernel or
patch versions.

---
Jeff NewmillerThe .   .  Go Live...
DCN:<[EMAIL PROTECTED]>Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] re: Leaf as an ISP

2003-03-18 Thread Lance Dunn
Thank you all for your help. I have been given lots to digest and try and I
appreciate it all gratefully. A hasty implementation is precluded by my
schedule, but I will get started ASAP and probably be bugging you again with
setup problems. I hope you will bear with me...
Again - thanks



---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] smb.lrp smb-2.lrp, smb-2b.lrp

2003-03-18 Thread wing newton
Greetings,

What are the difference amony smb.lrp, smb-2.lrp and
smb-2b.lrp ? 

Thx.

newton

__
Do you Yahoo!?
Yahoo! Platinum - Watch CBS' NCAA March Madness, live on your desktop!
http://platinum.yahoo.com


---
This SF.net email is sponsored by: Does your code think in ink? 
You could win a Tablet PC. Get a free Tablet PC hat just for playing. 
What are you waiting for?
http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html