Re: [leaf-user] Logs being filled

[Jeff Newmiller]

On Fri, 20 Jun 2003, Dennis Stephens wrote:

> My logs are being filled with two tons of lines likes this...
>
>
> Jun 17 15:01:42 ardentpursuit kernel: Packet log: input DENY eth0 PROTO=17
> 10.24.0.1:67 255.255.255.255:68 L=336 S=0x00 I=7199 F=0x T=255 (#27)
> Jun 17 15:01:47 ardentpursuit kernel: Packet log: input DENY eth0 PROTO=17
> 10.24.0.1:67 255.255.255.255:68 L=336 S=0x00 I=7201 F=0x T=255 (#27)
> Jun 17 15:01:51 ardentpursuit kernel: Packet log: input DENY eth0 PROTO=17
> 10.24.0.1:67 255.255.255.255:68 L=328 S=0x00 I=7207 F=0x T=255 (#27)
> Jun 17 15:02:00 ardentpursuit kernel: Packet log: input DENY eth0 PROTO=17
> 10.24.0.1:67 255.255.255.255:68 L=328 S=0x00 I=7219 F=0x T=255 (#27)

[...]

I don't see why you needed 17 lines when 3 or 4 or even 1 would serve as
well.  You don't need to burden us just because you are burdened.

> I know I can just trap the 10.24.0.1:67 and NOT log it.  Will do that soon
> enough, meanwhile can one of you FW types educate me on where this may be
> originating from?  Just wondering.  As always in your deepest debt.

Proto 17 = UDP
Destination IP 255.255.255.255 is broadcast
Destination port 68 is bootpc or dhcp client

These are probably dhcp lease renewals (offers or ACKs) from
your ISP's dhcp server.  It is possible that they are from a rogue server,
but not really so likely.

Assuming they are legitimate, you should probably be letting these into
your firewall so it can renew leases.

Google sez:

  http://www.freesoft.org/CIE/RFC/2131/20.htm

---
Jeff NewmillerThe .   .  Go Live...
DCN:<[EMAIL PROTECTED]>Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---




---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Problems setting a VLAN with vlan.lrp and bridge.lrp

[Jose Luis Abuelo Sebio]

Hi, good morning:

 I am having some problems trying to set a vlan with
the Bering rc4 distribution. I going to explain what I
did it and how, to see if anyone can find the problem
or the mistake, because I think I am following the
documentation pretty good.

  Here, this is a draw of what I am trying to set


  ---
  - PC1 -
  ---
 - eth0 IP 192.168.1.123
 -
 -
 - eth1 IP 192.168.1.1
   eth2 192.168.2.1 ---  
  - Bridge A - -- PC3 -
    ---
 - eth0 IP 10.0.1.1   eth0 IP 192.168.2.3
 -
 -
 - eth0 IP 10.0.1.2
   eth2 192.168.2.2 ---
  - Bridge B  PC4 -
    --- 
 - eth1 IP 192.168.1.2eth0 IP 192.168.2.4
 -
 -
 - eth0 IP 192.168.1.129
  --- 
  - PC2 -
  ---

 BridgeA and BridgeB are running under Bering rc4 V1.2
 with vlan.lrp bridge.lrp and 8021q.o  and bridge.o
  
 First I am gonna describe the situation of the
project. I have to computers, we will call them
BridgeA and BridgeB, which I wanna run as bridges.
Each computer has 3 Ethernet NICs. To apply vlan
support to the bridgeA and bridgeB I install in each
one the package vlan.lrp (wich provides the command
vconfig) and the module 8021q.o. Them to support the
bridge funcionality I install the the bridge.lrp
package and the bridge.o module.

them in each of these computers I do this:

First I assign an IP address to each NIC
BridgeA
eth0 10.0.1.1
eth1 192.168.1.1
eth2 192.168.2.1

and I set them up with the command Ifconfig
Ifconfig eth0 up
Ifconfig eth1 up
Ifconfig eth2 up
(To do this I had to install netutils.lrp because ifup
didn´t seem to work)

so I did the same in bridgeB

eth0 10.0.1.2
eth1 192.168.1.2
eth2 192.168.2.2
and I set them up with ifconfig again.

So now in each of the briges I create the Vlans

vconfig add eth0 10
vconfig add eth0 20
vconfig add eth1 10
vconfig add eth2 20

so now I have the interfaces
eth0.10 eth0.20 eth1.10 and eth2.20
 so I set them up again with ifconfig like
ifconfig eth1.10 up

So now I only have to create the bridge

brctl addbr Orense
brctl addif Orense eth0.10
brctl addif Orense eth0.20
brctl addif Orense eth1.10
brctl addif Orense eth2.20

and I set the bridge up
Ifconfig Orense up

(as you can see I use the interfaces eth0 of each
bridge to connect them in a backbone between the two
machines)

so then conected to the eth1 of the bridgeA I have a
computer with a NIC that has an IP address
192.168.1.123 and conected to the eth1 of the bridgeB
I
have another NIC with 192.168.1.129.

As I see it has to work, doesn´t it? but If I do a
ping from 192.168.1.123 to 192.168.1.129 I can´t see
the other side. I only can reach the machine I am
conected to (because the IP address) but not using the
bridge and VLAN technology.

 It is the same for the PC´s in the VLAN ID 20 PC3 and
PC4.

Can anyone tell me why or what I did wrong?

It works if I do the bridge with the phisical
interfaces eth0,eth1,eth2
Bridge Orense
eth0, eht1 eth2

but the porpuse of this
project is using vlan and a bridge so this:
Bridge Orense
eth0.10, eth0.20, eth1.10, eth2.20
It doesn´t work

I don´t know what is wrong here.

Thank´s for your help, I will be checking my
mail to see if anyone has the answer to this.

Bye

 


___
Yahoo! Sorteos  -  http://loteria.yahoo.es
Juega a la Lotería Primitiva sin salir de casa


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Midnight Commander

[Szűcs Tibor]

Hi!
?
I found one mc.lrp package, they need some lib
libslang ?(that ok) but not found the libgpm package.
?
Can anything send one URL for me?
?
Robit
?





---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] A wisp station stop respond after some time!

[Samuel Abreu de Paula]

Yes, is the station with problem! =(

Samuel Abreu

On Thu, 19 Jun 2003 14:19:58 +0300
Vladimir Ivaschenko <[EMAIL PROTECTED]> wrote:

> Do you know what is the station 00:60:b3:72:e9:1c?
> 


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Long time ago...

[Michelle Konzack]

Hello, 

I was vor some years on the original LRP-Mailinglists and 
now I have joined the leaf-project... 

First I have a problem, because most of older 486 does not 
support othe FD formats as 1440 kBytes... 

Question:   Which Version of FD-Router must/can I use  ?

P.S.:   I am hacking on my 2.4.19 Router image...
And running into trouble because ulibc does not support 
somthing I need and libc6 is tooo big !

My kernel has curently 474 kBytes and I call my distri 
'Debian On Floppy v3.0' (but v2.1 and v2.2 exist too)

Sorry, curently I am very Off-Line and I have no wesite. 

Thanks
Michelle

-- 
Registered Linux-User #280138 with the Linux Counter, http://counter.li.org.
+--+
| Michelle's Internet-ServiceInh.  Michelle Konzack|
| FunkLAN-Providerin   |
+--+



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Bering and 1DES

[Lino Moretto]

Hi everyone,
I found somewhere in the list that Bering 1.2 would have been compiled with
the latest FreeS/WAN patches, but it seems that 1DES is not supported (no
ipsec_1des.o in the modules tree...).
Any ideas? I have to connect to a PIX which only supports 1DES
Thanks

Lino



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Bering and 1DES

[Charles Steinkuehler]

Lino Moretto wrote:
Hi everyone,
I found somewhere in the list that Bering 1.2 would have been compiled with
the latest FreeS/WAN patches, but it seems that 1DES is not supported (no
ipsec_1des.o in the modules tree...).
Any ideas? I have to connect to a PIX which only supports 1DES
Thanks
The FreeS/WAN team does *NOT* support 1DES, or assist others in doing 
so.  This is an intentional policy on their part, discussed in more 
detail on their site:

http://www.freeswan.org/freeswan_trees/freeswan-2.00/doc/faq.html#noDES.faq

http://www.freeswan.org/freeswan_trees/freeswan-2.00/doc/politics.html#weak

I stronlgy suggest you do whatever you have to to implement a stronger 
encryption method if you really want a Virtual *PRIVATE* Network.

--
Charles Steinkuehler
[EMAIL PROTECTED]


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Long time ago...

[Jeff Newmiller]

On Thu, 19 Jun 2003, Michelle Konzack wrote:

> Hello,
>
> I was vor some years on the original LRP-Mailinglists and
> now I have joined the leaf-project...
>
> First I have a problem, because most of older 486 does not
> support othe FD formats as 1440 kBytes...

I dispute your claim of "most"... Windows95 was originally distributed by
Microsoft on 1680k floppies.  Do you really think they would have done
that if any significant number of computers they were targeting (486 was
most common then) would not be able to read them?

> Question:   Which Version of FD-Router must/can I use  ?

I recommend trying a couple.  You will need to read the documenation for
whichever ones you use, because there are significant differences from LRP
in all of them.  Bering, Dachstein and Oxygen are all still somewhat
floppy-oriented, with Bering having most activity here recently.

> P.S.:   I am hacking on my 2.4.19 Router image...
> And running into trouble because ulibc does not support
> somthing I need and libc6 is tooo big !

Yes, constraining yourself to one and only one 1440k floppy is bound to be
challenging.  As for "libc6", that covers at least glibc2.0, glibc2.1, and
glibc2.2, in order of increasing capability and size.  Bering and
Dachstein use glibc2.0, same as LRP.  I haven't seen much activity on
Oxygen recently, though the development version reportedly uses glibc2.1.

> My kernel has curently 474 kBytes and I call my distri
> 'Debian On Floppy v3.0' (but v2.1 and v2.2 exist too)
>
> Sorry, curently I am very Off-Line and I have no wesite.

Welcome back.  I think there are many advantages to using a LEAF distro,
but I also feel I should point out that you may be closer to your goal
using your own distro than you think... once you recognize that one 1440
floppy is just too small. Larger formats, flash disks, and even old hard
disks can all be used to reach your goals, and if you scrounge some newer
computers, CD-R has been used a lot, and even USB flash disks.

>
> Thanks
> Michelle
>
> --
> Registered Linux-User #280138 with the Linux Counter, http://counter.li.org.
> +--+
> | Michelle's Internet-ServiceInh.  Michelle Konzack|
> | FunkLAN-Providerin   |
> +--+

I do think it odd that an internet service provider has no website,
though. ;)

---
Jeff NewmillerThe .   .  Go Live...
DCN:<[EMAIL PROTECTED]>Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Compile Sagem FAST800 USB Modem

[Bibinsa]

Hi !

I would like to use o usb modem with my bering box.
I got the driver's sources
(http://fast800.tuxfamily.org/pub/IMG/gz/eagle-1.0.4.tar.gz)

So as mentionned in JN's guide, I'm using a UML
environment in order to make binaries (module and
tools).

When I use :

-> Debian/slink
I can't compile because of parse error in the
kernel-source (debian 2.4.20). I think of a gcc
trouble but I'm not sure...

-> Debian/woody
I can compile properly but when I insmod the
adiusbadsl.o module, it crashs (unresolved symbol ...)
and tools (adictrl, ...) craches too (segmentation
fault)

So I don't know what to do.
Any help would be appreciated.

Thanks.

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Edit Bering Config files Offline

[Homer Parker]

On Sun, 8 Jun 2003 21:43:31 +0200 "eric wolzak" <[EMAIL PROTECTED]> wrote

> # all steps in one liners ;)
> mkdir /temp
> mount -t msdos /dev/fd0u1680  /mnt
> cp /mnt/etc.lrp  /temp
> cd /temp
> tar -xzf  etc.lrp

Here's what I get trying it with Bering 1.2:

[EMAIL PROTECTED] tmp]$ tar xzf etc.lrp 
tar: etc/multicron-p: Cannot create symlink to `cron.daily/multicron-d':
Operation not permitted
tar: var/lib/lrpkg/etc.version: Cannot create symlink to `root.version':
Operation not permitted
tar: etc/cron.monthly/multicron-m: Cannot create symlink to
`../cron.daily/multicron-d': Operation not permitted
tar: etc/cron.weekly/multicron-w: Cannot create symlink to
`../cron.daily/multicron-d': Operation not permitted
tar: Error exit delayed from previous errors
[EMAIL PROTECTED] tmp]$ 

I tried it as root also, and got even more errors... I'm trying to modify
it for serial port output.. 

--- 
Homer Parker  /"\ ASCII Ribbon Campaign
  \ / No HTML/RTF in email
http://www.homershut.net   x  No Word docs in email
telnet://bbs.homershut.net/ \ Respect for open standards

"Bill Gates reports on security progress made and the challenges ahead."
-- Microsoft's Homepage, on the day an SQL Server bug crippled large
   sections of the Internet.


 


pgp0.pgp
Description: PGP signature

Re: [leaf-user] Long time ago...

[Ray Olszewski]

Hi, Michelle. Nice to hear from you again. Specific comments below.

At 05:00 AM 6/19/2003 +0200, Michelle Konzack wrote:
Hello,

I was vor some years on the original LRP-Mailinglists and
now I have joined the leaf-project...
First I have a problem, because most of older 486 does not
support othe FD formats as 1440 kBytes...
Is this comment based on very much experience? Personally, I've nver run 
into a 486 that did not support the 1680 KB format that LEAF uses ... 
though I have run into particular floppy drives or floppies that could not 
handle the format. I admit I don't have any recent experience with 486s ... 
my junk box now holds old, slow Pentium mobo/CPU combinations ... but I 
think you should give this another look.

Question:   Which Version of FD-Router must/can I use  ?

P.S.:   I am hacking on my 2.4.19 Router image...
And running into trouble because ulibc does not support
somthing I need and libc6 is tooo big !
Do you mean uclibc? What is the "something"?

Coming from LRP, you will probably find Dachstein easiest to adjust to. It 
follows Charles' older versions, derived from Matthew Grant's "mountain" 
series, pretty closely. It and Bering seem to be the most widely used 
variants these days, which means, in practical terms, more people on this 
list able to answer questions about them.

But for any current variant I can think of, you are going to have to 
address the 1680 KB problem. Or, I suppose, you could reverty to a 2-floppy 
boot/init process.

My kernel has curently 474 kBytes and I call my distri
'Debian On Floppy v3.0' (but v2.1 and v2.2 exist too)
If you want to pursue development of this distro as part of LEAF, it might 
be worth uploading it ... and image and probably a kernel config file ... 
to the LEAF site (MIke can get you set up to do this, I'm sure), so some of 
us can take a look at it and comment.


Sorry, curently I am very Off-Line and I have no wesite.
I'm sorry too. I hope we can help with whatever technical advice you need 
to get back online.







---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Compile Sagem FAST800 USB Modem

[Ray Olszewski]

At 05:26 PM 6/20/2003 +0200, Bibinsa wrote:
[...]
When I use :

-> Debian/slink
I can't compile because of parse error in the
kernel-source (debian 2.4.20). I think of a gcc
trouble but I'm not sure...
A plausible guess. gcc has changed a lot since Slink (especially in the 
last 6 months). Since the kernel is compiled statically, it does not need 
to "match" the compilation environment of the rest of the distro, so you 
need not turn to Slink.


-> Debian/woody
I can compile properly but when I insmod the
adiusbadsl.o module, it crashs (unresolved symbol ...)
and tools (adictrl, ...) craches too (segmentation
fault)
Without details of the failure ("unresolved symbol" usually goes with an 
insmod failure to load a module, not a "crash", so I'm really uncertain 
about what you are describing here), it is hard to offer specific help. One 
common source of "unresolved symbol" errors is failure to insmod another 
required module before the one you are currently insmod'ing (this is a 
mistake even quite knowledgeable people make these days, because they are 
used to using modprobe, which checks for and handles dependency issues).

Since we are talking about USB, you might have compiled some other USB 
stuff as modules and need to load that first. That's about as far as I can 
go without a better trouble report.





---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] UML : how to compile the Sagem FAST800 USB modem ?

[Bibinsa]

Hi

I'm trying to compile the eagle sources of USB Sagem
FAST800 modem with User Mode Linux Environment.
I downloaded the source code into the UML
The I want to compile it but it doesn't work very well
:

I tried two modes :

-> debian slink
The "make" command gives me a lot of parse error in
the kernel-source files (2.4.20 debian)

-> debian woody
All works fine but when I insmod the module in LEAF
Bering, "unresolved symbols" and various command
crashed (segmentation fault)

I don't know how to do that. I think there are some
troubles with gcc and the driver source code but I'm
not sure.

Does anyone try it.
Any help would be appreciated.

Thanks

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] Windows VPN newbie

[Jaime Nebrera Herrera]

  Hi all,

  I want to stablish a net to net VPN using Bering as a gateway. On both ends 
will have windows machines :(

  They want to see both nets as a whole, with all computers (remember windows) 
showing in the explorer, so they can access a shared hard disk from both 
sites.

  I want to do this the easiest and cheapest way. Options considering:

  1) If possible use only one "PC" on each end. I dont know if they have a WNT 
or W200 server that could act as a WINS server, but adding a linux (or a 
couple of) just for WINS is not desirable unless there is no other way 
(higher price and complexity).

  2) How bad isfor security adding WINS (samba) in the gateway?

  3) Even better, is really necesary to have a WINS service? I know that for 
IP services (http, ftp) there is no need for it, but the user just want to 
see the whole as if there was no "separation in the middle :)"

  4) What option is better, PPTP or FreeSWAN? Remember, both in the 
gateway/firewall. Do I need WINS if I use PPTP?

  I know this are very basic questions, is there any good online documentation 
about this topics?

  Very thankful in advance. Regards.

-- 
Jaime Nebrera - [EMAIL PROTECTED]



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] A wisp station stop respond after some time!

[Vladimir Ivaschenko]

So may be this is what causing the problem? May be it has a low signal 
level or something?

In general, you should avoid stations with signal levels below 40 (as 
seen in AP Statistics menu).

Samuel Abreu de Paula wrote:
Yes, is the station with problem! =(

Samuel Abreu

On Thu, 19 Jun 2003 14:19:58 +0300
Vladimir Ivaschenko <[EMAIL PROTECTED]> wrote:

Do you know what is the station 00:60:b3:72:e9:1c?



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


--
Best Regards,
Vladimir Ivaschenko
Thunderworx - Senior Systems Engineer (RHCE)


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Compile Sagem FAST800 USB Modem

[Bibinsa]

 --- Ray Olszewski <[EMAIL PROTECTED]> a écrit : > At
05:26 PM 6/20/2003 +0200, Bibinsa wrote:
> A plausible guess. gcc has changed a lot since Slink
> (especially in the 
> last 6 months). Since the kernel is compiled
> statically, it does not need 
> to "match" the compilation environment of the rest
> of the distro, so you 
> need not turn to Slink.

So I shouldn't use the Debian/slink UML to compile the
package ?


 
> Without details of the failure ("unresolved symbol"
> usually goes with an 
> insmod failure to load a module, not a "crash", so
> I'm really uncertain 
> about what you are describing here), it is hard to
> offer specific help. One 
> common source of "unresolved symbol" errors is
> failure to insmod another 
> required module before the one you are currently
> insmod'ing (this is a 
> mistake even quite knowledgeable people make these
> days, because they are 
> used to using modprobe, which checks for and handles
> dependency issues).
> 
> Since we are talking about USB, you might have
> compiled some other USB 
> stuff as modules and need to load that first. That's
> about as far as I can 
> go without a better trouble report.
 

I'm gonna check dependencies with usb modules right
now.
But what's about segmentationn fault of binaries ?

___
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Mail : http://fr.mail.yahoo.com


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Compile Sagem FAST800 USB Modem

[Ray Olszewski]

Responses interspersed.

At 07:45 PM 6/20/2003 +0200, Bibinsa wrote:
 --- Ray Olszewski <[EMAIL PROTECTED]> a écrit : > At
05:26 PM 6/20/2003 +0200, Bibinsa wrote:
> A plausible guess. gcc has changed a lot since Slink
> (especially in the
> last 6 months). Since the kernel is compiled
> statically, it does not need
> to "match" the compilation environment of the rest
> of the distro, so you
> need not turn to Slink.
So I shouldn't use the Debian/slink UML to compile the
package ?
Maybe yes, maybe no. But realistically, if the module source is using 
features that are only supported by newer versions of gcc, noboby is going 
to take the time to fix that. So before I spent any time trying to untangle 
Slink-related messiness, I would certainly first try a distro with a newer 
gcc and related stuff.

As to the specifics of the Slink problem ... well, all you said about it 
was: "parse error in the kernel-source (debian 2.4.20). I think of a gcc 
trouble but I'm not sure..." Do you really expect to get specific advice 
about such a vague description of a problem with a non-standard driver?

 > Without details of the failure ("unresolved symbol"
> usually goes with an
> insmod failure to load a module, not a "crash", so
> I'm really uncertain
> about what you are describing here), it is hard to
> offer specific help. One
> common source of "unresolved symbol" errors is
> failure to insmod another
> required module before the one you are currently
> insmod'ing (this is a
> mistake even quite knowledgeable people make these
> days, because they are
> used to using modprobe, which checks for and handles
> dependency issues).
>
> Since we are talking about USB, you might have
> compiled some other USB
> stuff as modules and need to load that first. That's
> about as far as I can
> go without a better trouble report.
I'm gonna check dependencies with usb modules right
now.
One moe thing: When I read your first message I read it to mean that you 
were recompiling the entire kernel (based on the Slink problem you 
identified). In re-reading it, I now realize that I may have misinterpreted 
what you said. If you are *just* compiling this module, you will need to 
match it to whatever kernel you wish to apply it to. I expect Jacques' docs 
have information about how to do that for his Bering kernels, so you might 
want to verify that you followed his suggested procedure.

But what's about segmentationn fault of binaries ?
What about it? Again, you didn't give us much to go on, only "and tools 
(adictrl, ...) craches too (segmentation fault)".

I assume the "..." part means you aren't even supplying the *names* of all 
the binaries you are having trouble with, let alone the details of how you 
call them, what userid is involved, whether they are compiled against the 
right shared libraries (this does matter for binaries, though not for the 
kernel itself), and anything else that might be helpful.

I suppose they **might** be failing merely because they expect to find a 
working kernel module, but it did not install successfully, so the app has 
problems operating ... but I really do not know. Segfaulting in that case 
would be pretty ugly, but not unheard of.

You should also consider reporting these problems to the mailing list, 
whatever it is, that supports the package you are trying to compile.





---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Compile Sagem FAST800 USB Modem

[Jeff Newmiller]

On Fri, 20 Jun 2003, [iso-8859-1] Bibinsa wrote:

>  --- Ray Olszewski <[EMAIL PROTECTED]> a écrit : > At
> 05:26 PM 6/20/2003 +0200, Bibinsa wrote:
> > A plausible guess. gcc has changed a lot since Slink
> > (especially in the
> > last 6 months). Since the kernel is compiled
> > statically, it does not need
> > to "match" the compilation environment of the rest
> > of the distro, so you
> > need not turn to Slink.
>
> So I shouldn't use the Debian/slink UML to compile the
> package ?

You have set yourself a challenging task.

a) Compiling kernels of any sort can be done in any workstation
environment regardless of its libc environment.  The version of the
compiler itself can be a factor, but isn't usually.  This flexibility
applies to compiling modules as well, but there may be other concerns with
module compilation that depend on how the module was written.  By far, the
safest way to compile modules is to compile them in the context of a
complete kernel/modules configuration and compilation.

b) Compiling applications generally _does_ require compiling against
glibc2.0 headers, and by far the easiest way to do this is in a slink
environment.  However, slink used linux kernel 2.0.36, so the native
headers there don't support USB ioctl calls!  This a significant problem,
because it is important to compile _applications_ using any version of
libc using the same kernel headers that the _libc_ library was compiled
with. (The actual kernel in use can be the same or newer... but the
applicaton needs to assume the kernel is no newer than the one glibc
assumes.)

It looks to me like you need a custom "cross-compiled" version of glibc2.0
that is compiled to use kernel 2.4.20 kernel headers, and you need to
compile your application against the same headers.  This amounts to a
cross-compiling environment, so using slink is no longer buying you any
simplification.  You would then need to use both your version of the glibc
.so file in your router, and then your application should work.  Fair
warning:  I have not done this myself... this is just based on my
understanding of the dependencies.

> > Without details of the failure ("unresolved symbol"
> > usually goes with an
> > insmod failure to load a module, not a "crash", so
> > I'm really uncertain
> > about what you are describing here), it is hard to
> > offer specific help. One
> > common source of "unresolved symbol" errors is
> > failure to insmod another
> > required module before the one you are currently
> > insmod'ing (this is a
> > mistake even quite knowledgeable people make these
> > days, because they are
> > used to using modprobe, which checks for and handles
> > dependency issues).
> >
> > Since we are talking about USB, you might have
> > compiled some other USB
> > stuff as modules and need to load that first. That's
> > about as far as I can
> > go without a better trouble report.
>
>
> I'm gonna check dependencies with usb modules right
> now.
> But what's about segmentationn fault of binaries ?

That is a classic symptom of a binary compiled against a newer glibc
being executed on an older glibc system.  There are other possible
explanations, but until you resolve your library problems I wouldn't
consider them.

---
Jeff NewmillerThe .   .  Go Live...
DCN:<[EMAIL PROTECTED]>Basics: ##.#.   ##.#.  Live Go...
  Live:   OO#.. Dead: OO#..  Playing
Research Engineer (Solar/BatteriesO.O#.   #.O#.  with
/Software/Embedded Controllers)   .OO#.   .OO#.  rocks...2k
---




---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] ipsec tunnel pings OK; but *NO* app traffic ?!?!

[Michael D. Schleif]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

We thought that we had a successful tunnel between our side, with DCD
gateway and freeswan v1.91, and a client with a cisco router.  Both
sides successfully ping each other; but, the application on our side
cannot establish a tcp connection to the other side.

The only unusual thing we know about this vpn is that the _other_ side
will *not* allow private ip address traffic (RFC 1918/1627/1597); so, we
elected to go with a gateway<->subnet vpn setup.

Debugging this problem is complicated by the fact that our side must use
this application connection _outside_of_the_vpn_ several times per day,
until the vpn is working ;<

Furthermore, that information that you need to see is voluminous, and
somewhat private.  To that end, we shall post the greatest bulk of data
to this url:



What do you think?


# rough network diagram

+-++-+
| || |
| 204.235.101.128/28  |<==>|  204.235.103.2  |
| || gateway |
+-++-+
D   C   ^
|
v
 INTERNET
 
^
  A |
+---+   B   v
|   |  +--+
|  MASQ'd   |  |  |
|  private  |->|  144.228.51.210  |
|  network  |  | gateway  |
|   |  +--+
+---+


- -- 
Best Regards,

mds
mds resource
877.596.8237
- -
Dare to fix things before they break . . .
- -
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
- --
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE+82OoLUOEaCtUQpwRAtzjAJwMkdeo5sPaK8aqSVQAxYyPeZzmwgCfco3X
hlidzdasq+yKOZkzWlG8bjc=
=RzMu
-END PGP SIGNATURE-


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] wisp-disp wrong root.dev.mk entry?!

[Marc E. Fiuczynski]

For the DoC /dev entry created by makedevs in the root.dev.mk file, should
it be "ntfla" or "nftla"? Right now it is the former, as shown below.

makedevs ntfla b 93 0 0 4 s >null 2>&1



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

[leaf-user] help: getting PPPOE to work on wisp-dist

[Marc E. Fiuczynski]

I tried getting PPPOE to work on wisp-dist, but since I am rather new to
this I couldn't figure out why it didn't work.

Unfortunately, wisp-dist does not have the GUI interface support so that
newbies like me can just follow some instructions to set things up
correctly. So I followed the bering PPPOE instructions and edited the
/etc/ppp/peers/dsl-provider and /etc/ppp/pap-secrets file by hand. I also
made sure that the various PPPOE related modules in /etc/modules were
uncommented.

At this point, I was under the impression that a simple reboot would kick
start the ppp0 device connected via eth0 to my DSL modem. It seems that
wisp-dist does not generate a syslog file, and so I cannot peek there to
find out why it is not working.

Any hints on what I should do next?

Thanks,
Marc



---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Re: [leaf-user] Windows VPN newbie

[Charles Steinkuehler]

Jaime Nebrera Herrera wrote:
  Hi all,

  I want to stablish a net to net VPN using Bering as a gateway. On both ends 
will have windows machines :(

  They want to see both nets as a whole, with all computers (remember windows) 
showing in the explorer, so they can access a shared hard disk from both 
sites.

  I want to do this the easiest and cheapest way. Options considering:

  1) If possible use only one "PC" on each end. I dont know if they have a WNT 
or W200 server that could act as a WINS server, but adding a linux (or a 
couple of) just for WINS is not desirable unless there is no other way 
(higher price and complexity).

  2) How bad isfor security adding WINS (samba) in the gateway?

  3) Even better, is really necesary to have a WINS service? I know that for 
IP services (http, ftp) there is no need for it, but the user just want to 
see the whole as if there was no "separation in the middle :)"
A WINS server gets you name resolution, but it does *NOT* provide 
cross-subnet browsing (the "official" term for what you describe you're 
wanting), although it's typically a required piece of most cross-subnet 
browsing setups.

  4) What option is better, PPTP or FreeSWAN? Remember, both in the 
gateway/firewall. Do I need WINS if I use PPTP?
FreeS/WAN is better (from a security standpoint).  Using PPTP may work 
easier for browsing, but I've never tried to set this up, so I'm not 
sure what features/limitations PPTP provides (other than a pretty much 
guaranteed lack of security from anyone actually interested in reading 
your data...PPTP will secure you from the idly curious, but not anyone 
actually wanting to break into your VPN).

  I know this are very basic questions, is there any good online documentation 
about this topics?

  Very thankful in advance. Regards.
I'm not a windows networking guru, but have been through enough of 
trying to link remote windows networks to help out with a few issues.

First of all, I suggest trying to setup a subnet-subnet IPSec VPN link 
between your two firewalls.  This reduces the problem to getting windows 
boxes to talk to each other across a router.  There are two aspects of 
the windows portion of the problem:

1) Sharing network resources across subnets

2) Browsing network resources across subnets

Note that these are *VERY* differnet problems.  Browsing on MS networks 
typically works by using broadcast traffic, which won't pass through 
your router/firewall/VPN appliance.  Drive mapping, however, can be done 
directly using IP addresses, DNS names (if you have entries for the 
system(s) in a zone file or in your hosts file), WINS name, etc.

If you can get by with manually mapping drives instead of browsing (ie 
manually typing in an IP or computer name rather than clicking the 
proper computer from a tree view with the mouse), what you want is very 
simple...just get the VPN link running, and type \\192.168.1.44 (or 
whatever the appropriate far-end IP is) when you're trying to map a 
network drive or printer.

If, however, you want to "browse" to the remote resouce, you have a much 
bigger problem.  The official microsoft way to do this is to run 2K 
server (probably .net server by now) on *EACH* subnet.  You eliminate 
the server install on one side of the network if you have all systems 
log into the same domain controller (requires a WINS server for name 
resolution, and proper configuration of the remote systems so they know 
how to find the WINS server on the far subnet...this can be setup via 
dhcp, so it's really not too bad).  The Microsoft site has a lot more 
info on what's required to implement this in the "approved" way...a 
search for "cross subnet browsing" should turn up lots of info.

Samba servers can help mitigate a lot of the problems incurred due to 
the artificial limitations of Microsoft's software (you'd think they 
want to sell tons of copies of their server software or something), but 
I wouldn't suggest running Samba on your firewalls, and it doesn't sound 
like you have extra boxes lying around to turn into server systems.

All of the above reflects what I've picked up trying to get my windows 
box to gracefully talk to the home office network across a subnet-subnet 
VPN, but does not necessarily represent the best, or necessarily even 
appropriate way to do this in the microsoft world...I'm a linux 
networking guy, and know just enough microsoft networking to keep my 
2KPro desktop linked to the internet and the home office.

--
Charles Steinkuehler
[EMAIL PROTECTED]


---
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net