Re: [leaf-user] Qmail questions

2003-12-26 Thread Ray Olszewski
Since most of the detail in your latest message is about how you did get 
things working, I'll skip over that to the one problem that remains -- 
reverse lookup of on-LAN IP addresses. The tcpdump output says that the 
mail server is querying a DNS server that does not exist. Edited to 
highlight what matters, the attempt is reflected in several exchanges that 
have this form:

21:25:33.622390 192.168.10.1.59258 > 192.168.10.254.53:  28701+ 
PTR? 1.10.168.192.in-addr.arpa.
21:25:33.622624 192.168.10.254 > 192.168.10.1: icmp: 
192.168.10.254 udp port 53 unreachable

This most likely means that you do not have tinydns listening on that 
interface, just on the other interface (192.168.1.254, I think). You should 
check your configuration of dnscache and tinydns, and make sure that the 
mail server's /etc/resolv.conf lists ONLY addresses that these apps are 
listening on.

Just barely possible -- you could have a firewall rule that blocks the 
access. I don't have your rulesets handy, but my memory of them is that 
this part was OK.

At 09:47 PM 12/26/2003 -0500, Kory Krofft wrote:
Ray,
[details deleted]





---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Qmail questions

2003-12-26 Thread Kory Krofft
Ray,

>[...]
>OK. The problem here is that qmail does not know that mail to
>[EMAIL PROTECTED] is mail for local delivery, so it tries to relay
>it to I
>can't-guess-where (can that host resolve kroffts.com?). This is, no
>doubt,
>a side effect of moving from kroffts.com to kroffts.dmz (or whatever
>you
>changed to) on the LAN.
>
I changed the qmail me file to read mail.kroffts.com and changed the
qmail locals file to  include both kroffts.dmz and kroffts.com.
After doing that. I used a yahoo webmail account to test delivery to [EMAIL PROTECTED] 
and [EMAIL PROTECTED] Low and behold, both mesasages showed up and in the proper 
Maildirs.



>>>First, can the mail server resolve various types of FQNs? Examples
>>>would be
>>>
>>>its own FQN
>>yes, but...
>>
>>>a LAN client's FQN
>>yes, but both names are in the local /etc/hosts file so it probably
>>is not
>>using dns. (Qmail does not use the hosts file)
>
>Good point. Try the "host" command.
>[...]
using the host command, I can get the dmz host to resolve other names and reverse 
lookup other ips but not it's own. I altered the /etc/tinydns-private/root/data file 
to read:

=localhost:127.0.0.1
localhost:127.0.0.1:a
1.0.0.127.in-addr.arpa:127.0.0.1:a
kroffts.home:127.0.0.1:a
1.168.192.in-addr.arpa:127.0.0.1:a
=markii.kroffts.home:192.168.1.254
=coventry.kroffts.home:192.168.1.1
=mail.kroffts.dmz:192.168.10.1
@kroffts.dmz:192.168.10.1:mail.kroffts.dmz
@10.168.192.in-addr.arpa::mail.kroffts.dmz

>I think I asked this last time ... does the config file for tinydns
>have an
>entry for 192.168.10.1? Or for 192.168.1.5? Last time, it didn't (in
>what you posted):
>
>=markii.kroffts.home:192.168.1.254
>=coventry.kroffts.home:192.168.1.1

See above. I edited the file as shown but it still cannot resolve it's own name 
forwards or backwards.
I suspect my syntax is incorrect but I can' see how.
( I did restart both tiny dns and dnscache)

>From the results above, it looks like tinydns is working just fine
>... it
>resolves what it knows about ... now it needs actual entries for the
>other
>hosts you want it to resolve.
>
>>It can resolve other  machines but not itself. Should it be able
>>to? I
>>would think it should and that this is a big part of the problem.
>
>Actually, resolving itself or not should not matter in the immediate
>context ... except insofar as it indicates other, more general DNS
>problems.
I think qmail is working OK now. Which takes us back to the dns issues. I have done my 
best to configure the dns entries thae way I think the documentation says but I still 
have a good 1 to 1.5 minute delay in the response of the mail server to a local mail 
client. I ran another set of tcpdump data for grins but it looks pretty much the same 
as last time to me.

  21:25:30.589106 192.168.1.1.2869 > 192.168.10.1.110: S 2640790750:2640790750(0) win 
65535  (DF)
0x   4500 0030 47b3 4000 7f06 27c2 c0a8 0101[EMAIL PROTECTED]'.
0x0010   c0a8 0a01 0b35 006e 9d67 44de  .5.n.gD.
0x0020   7002  08e4  0204 05b4 0101 0402p...
21:25:30.589457 192.168.10.1.110 > 192.168.1.1.2869: S 370304564:370304564(0) ack 
2640790751 win 5840  (DF)
0x   4500 0030 f20b 4000 4006 bc69 c0a8 0a01[EMAIL PROTECTED]@..i
0x0010   c0a8 0101 006e 0b35 1612 6634 9d67 44df.n.5..f4.gD.
0x0020   7012 16d0 75bc  0204 05b4 0101 0402p...u...
21:25:30.590072 192.168.1.1.2869 > 192.168.10.1.110: . ack 1 win 65535 (DF)
0x   4500 0028 47b5 4000 7f06 27c8 c0a8 0101E..([EMAIL PROTECTED]'.
0x0010   c0a8 0a01 0b35 006e 9d67 44df 1612 6635.5.n.gD...f5
0x0020   5010  b950 PP..
21:25:30.591328 192.168.10.1.64715 > 192.168.1.254.53:  61116+ PTR? 
1.10.168.192.in-addr.arpa. (43) (DF)
0x   4500 0047 f612 4000 4011 b743 c0a8 0a01[EMAIL PROTECTED]@..C
0x0010   c0a8 01fe fccb 0035 0033 398e eebc 0100...5.39.
0x0020   0001    0131 0231 3003 3136.1.10.16
0x0030   3803 3139 3207 696e 2d61 6464 7204 61728.192.in-addr.ar
0x0040   7061  0c00 01  pa.
21:25:33.622390 192.168.10.1.59258 > 192.168.10.254.53:  28701+ PTR? 
1.10.168.192.in-addr.arpa. (43) (DF)
0x   4500 0047 e557 4000 4011 befe c0a8 0a01[EMAIL PROTECTED]@...
0x0010   c0a8 0afe e77a 0035 0033 c47e 701d 0100.z.5.3.~p...
0x0020   0001    0131 0231 3003 3136.1.10.16
0x0030   3803 3139 3207 696e 2d61 6464 7204 61728.192.in-addr.ar
0x0040   7061  0c00 01  pa.
21:25:33.622624 192.168.10.254 > 192.168.10.1: icmp: 192.168.10.254 udp port 53 
unreachable [tos 0xc0]
0x   45c0 0063 dc44  4001 0746 c0a8 0afe[EMAIL PROTECTED]
0x0010   c0a8 0a01 0303 9391   4500 0047E..G
0x0020   e557 4000 4011 befe c0a8 0a01 c0a8 0afe[EMAIL PROTECTED]@...

Re: [leaf-user] Compiling lcdproc for Bering 1.2

2003-12-26 Thread Ray Olszewski
At 01:34 AM 12/27/2003 +0100, Oliver Ertl wrote:
Hi all,

I trie to compile the LCDproc server and client for Bering 1.2.
When I ran compile on the Debian_slink image it runs with out any errors.
I also created a .lrp package wich loads OK on my bootdisk.
The problem now is, When LCDd is started it only shows unreadable characters
on the Matrix Orbital display. The hardware setup and configuration is ok.
What mistake did I made ? How can I fix it ?
How do you know that "The hardware setup and configuration is ok"?

Given these facts, my first guess would be that the serial port is set for 
the wrong speed. MO displays (at least the one I have) are set for 19200 
bps as shipped, but can be jumpered to take many different bps rates. Weird 
characters are the common symptom of mismatched baud rates.

I'm not running LCDproc here, but my notes for it say it requires ncurses5. 
So the next thing I'd suggest checking is that you have a compatible 
ncurses library (either on the LEAF router or, if you did a static compile, 
in your compile environment).

Last thing I'd check is that you have the right flavor of serial cable. I 
believe the MO is DCE, so you want a straight-through cable, not a 
modem-eliminator cable.

That's all I can think of without more in the way of configuration details.





---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Compiling lcdproc for Bering 1.2

2003-12-26 Thread Oliver Ertl
Hi all,

I trie to compile the LCDproc server and client for Bering 1.2.
When I ran compile on the Debian_slink image it runs with out any errors.
I also created a .lrp package wich loads OK on my bootdisk.

The problem now is, When LCDd is started it only shows unreadable characters
on the Matrix Orbital display. The hardware setup and configuration is ok.

What mistake did I made ? How can I fix it ?

Thanks.

Oliver Ertl

-- 
Einfach Leben ist nicht genug, sagte der
Schmetterling. Man braucht Sonnenschein,
Freiheit und kleine Blumen. (Anderson)

+++ GMX - die erste Adresse für Mail, Message, More +++
Neu: Preissenkung für MMS und FreeMMS! http://www.gmx.net




---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] ppp filter problem in uClibc 2.0

2003-12-26 Thread Eric Spakman
Hello Victor
> 
> Sorry - my mistake.  The uClibc docs refer to the Bering docs, so I 
> clicked on a link to download ppp-filter.lrp and did not realize I was 
> using a Bering package and not a uClibc package.  The uClibc version of 
> active-filter, ppp-filter, works just fine.  Sorry for the mixup.  
> Thanks Eric.
> 
No problem, our docs should be more clear in this respect. We will 
fix it.

Eric


---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Qmail questions

2003-12-26 Thread Ray Olszewski
At 06:04 PM 12/26/2003 -0500, Kory Krofft wrote:

>Now, from here, I can conenct to your Web home page. I can also
>connect to
>your SMTP server, but with a long delay:
[...]
>THis is a test of my ability to send a message from an
>offsite
>location to the test user on the mail server. Kory -- see if
>it
>shows up.
The message is not present in ~home/lrpqmail/Maildir/new
[...]
/var/log/qmail/qmail/current contains:
[...]
2003-12-26 09:04:08.402813500 starting delivery 40: msg 10039 to remote 
[EMAIL PROTECTED]
2003-12-26 09:04:08.402826500 status: local 0/10 remote 1/20
2003-12-26 09:04:08.819743500 delivery 40: deferral: 
Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
[...]
OK. The problem here is that qmail does not know that mail to 
[EMAIL PROTECTED] is mail for local delivery, so it tries to relay it to I 
can't-guess-where (can that host resolve kroffts.com?). This is, no doubt, 
a side effect of moving from kroffts.com to kroffts.dmz (or whatever you 
changed to) on the LAN.

I don't know how to fix this in qmail. In exim (the MTA I use), there is a 
config file called "local-host-names" that contains all the variants of the 
FQN that exim should treat as for local (on-host) delivery. qmail probably 
has something similar; you need to add "kroffts.com" to the list.
[...]
he problem down, you need to do some more tests.
>
>First, can the mail server resolve various types of FQNs? Examples
>would be
>
>its own FQN
yes, but...
>a LAN client's FQN
yes, but both names are in the local /etc/hosts file so it probably is not 
using dns. (Qmail does not use the hosts file)
Good point. Try the "host" command.
[...]
I fixed the resolv.conf. I then ran host on the dmz machine with the 
following results.

# host 192.168.1.1
1.1.168.192.IN-ADDR.ARPA domain name pointer coventry.kroffts.home
kroffts_web: -root-
# host 192.168.1.5
Host not found.
kroffts_web: -root-
# host 192.168.1.254
254.1.168.192.IN-ADDR.ARPA domain name pointer markii.kroffts.home
kroffts_web: -root-
# host 192.168.10.1
Host not found, try again.
I think I asked this last time ... does the config file for tinydns have an 
entry for 192.168.10.1? Or for 192.168.1.5? Last time, it didn't (in what 
you posted):

=markii.kroffts.home:192.168.1.254
=coventry.kroffts.home:192.168.1.1
From the results above, it looks like tinydns is working just fine ... it 
resolves what it knows about ... now it needs actual entries for the other 
hosts you want it to resolve.

It can resolve other  machines but not itself. Should it be able to? I 
would think it should and that this is a big part of the problem.
Actually, resolving itself or not should not matter in the immediate 
context ... except insofar as it indicates other, more general DNS problems.

[remainder deleted]





---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Qmail questions

2003-12-26 Thread Kory Krofft

>Now, from here, I can conenct to your Web home page. I can also
>connect to
>your SMTP server, but with a long delay:
>
>[EMAIL PROTECTED]:~$ telnet kroffts.com 25
>Trying [a.b.c.d - address deleted]...
>Connected to dhcp024-210-193-152.woh.rr.com.
>Escape character is '^]'.
>[delay between 2 and 3 minutes here]
>220 kroffts.dmz ESMTP
>HELO comarre.com
>250 kroffts.dmz
>MAIL from: [EMAIL PROTECTED]
>250 ok
>RCPT To: [EMAIL PROTECTED]
>250 ok
>DATA
>354 go ahead
>THis is a test of my ability to send a message from an
>offsite
>location to the test user on the mail server. Kory -- see if
>it
>shows up.

The message is not present in ~home/lrpqmail/Maildir/new
 /var/log/qmail/smtpd/current contains:

2003-12-26 00:16:34.446332500 tcpserver: status: 1/40
2003-12-26 00:16:34.446543500 tcpserver: pid 1004 from 63.198.182.124
2003-12-26 00:18:21.622852500 tcpserver: ok 1004 :192.168.10.1:25 
adsl-63-198-182-124.dsl.snfc21.pacbell.net:63.198.182.124::33141
2003-12-26 00:20:21.448853500 tcpserver: end 1004 status 0
2003-12-26 00:20:21.448865500 tcpserver: status: 0/40
2003-12-26 01:18:33.508520500 tcpserver: status: 1/40
2003-12-26 01:18:33.508731500 tcpserver: pid 27702 from 61.255.155.150
2003-12-26 01:19:56.321580500 tcpserver: ok 27702 :192.168.10.1:25 
:61.255.155.150::1113
2003-12-26 01:19:56.326303500 tcpserver: end 27702 status 256
2003-12-26 01:19:56.326316500 tcpserver: status: 0/40

/var/log/qmail/qmail/current contains:

2003-12-26 09:01:07.062891500 status: local 0/10 remote 1/20
2003-12-26 09:01:07.409834500 delivery 39: deferral: 
Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
2003-12-26 09:01:07.409852500 status: local 0/10 remote 0/20
2003-12-26 09:04:08.402813500 starting delivery 40: msg 10039 to remote [EMAIL 
PROTECTED]
2003-12-26 09:04:08.402826500 status: local 0/10 remote 1/20
2003-12-26 09:04:08.819743500 delivery 40: deferral: 
Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
2003-12-26 09:04:08.819760500 status: local 0/10 remote 0/20


>250 ok 1072398018 qp 4166
>quit
>221 kroffts.dmz
>Connection closed by foreign host.
>
>The length of the delay still points to a DNS problem as the likely
>culprit. ALthough you should check to see if the test message
>reflected in
>the above interaction actually reached lrpqmail's INBOX.
>
>To pin the problem down, you need to do some more tests.
>
>First, can the mail server resolve various types of FQNs? Examples
>would be
>
>its own FQN
yes, but...

>a LAN client's FQN
yes, but both names are in the local /etc/hosts file so it probably is not using dns. 
(Qmail does not use the hosts file)

>an external FQN (try comarre.com)
pinging comarre.com works fine. Oddly, I should not be able to actually ping it since 
there is no rule allowing icmp 8 packets from dmz to net but I was able to ping it. It 
must be included in some other rule.

>The easy way to check this is by trying to ping the various FQNs
>from the
>mail server; ping first requests a lookup to get the relevant IP
>address,
>then does the ping. For example:
>
>[EMAIL PROTECTED]:~$ ping celine.comarre.lan
>PING celine.comarre.lan (192.168.1.23): 56 data bytes
>64 bytes from 192.168.1.23: icmp_seq=0 ttl=254 time=736.0 ms
>[...]
>
>You don't care if the server can actually ping, just if it can do
>the
>name-to- address mapping.
>
>Second, can it do reverse lookups of LAN and external addresses? You
>can't
>use ping for this, and I don't recall what app like host or nslookup
>is
>available for Bering, but you'll need to find one.
>
>Probably you will have some trouble with this, because I see an
>error in
>the mail server's /etc/resolv.conf file --
>
>/etc/resolv.conf
>domain kroffts.dmz
>nameserver 127.0.0.1
>nameserver 192.168.1.254
>nameserver 192.168.10.254
>
>The first "nameserver" line points back to the mail server itself
>(as
>localhost), but your package list for it includes no DNS server. So
>delete
>that line and then try the tests. You probably do NOT need botrh
>other
>lines, and which you do need depends on how you have tinydns
>configured (if
>I remember right, tinydns only listens on one interface, not all
>interfaces
> you probably want it to listen on eth2 and leave in the last
>"nameserver" line above).

I fixed the resolv.conf. I then ran host on the dmz machine with the following results.

# host 192.168.1.1
1.1.168.192.IN-ADDR.ARPA domain name pointer coventry.kroffts.home

kroffts_web: -root-
# host 192.168.1.5
Host not found.

kroffts_web: -root-
# host 192.168.1.254
254.1.168.192.IN-ADDR.ARPA domain name pointer markii.kroffts.home

kroffts_web: -root-
# host 192.168.10.1
Host not found, try again.

It can resolve other  machines but not itself. Should it be able to? I would think it 
should and that this is a big part of the problem.


>
>Now, it looks like you have not provided enough information to
>tinydns in
>the /etc/tinydns-private/root/data file. You have entries for the
>mail
>serve itself and for the router, but not for the

Re: [leaf-user] IPSEC

2003-12-26 Thread K.-P. Kirchdörfer
Am Freitag, 26. Dezember 2003 12:28 schrieb Robert & Sabine von Knobloch:
> Hope everyone had a happy Christmas,
>
> can anyone point me to documentation about the Bering uClib2.0 IPSEC
> package ?
> The links at Freeswan don't seem very relevant to the config in Bering. I'm
> trying to set the RSA keys up but not having any success so far.

"any success so far" isn't precise enough to help you.

What says lrpkg -l?

I'm also intested in  /var/log/auth.log and /var/log/messages...

kp



---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] ppp filter problem in uClibc 2.0

2003-12-26 Thread Victor McAllister
Eric Spakman wrote:

Hello Victor,

Which version of ppp-filter.lrp did you use?

Eric Spakman

 

Just tried uClibc 2.0 for a friend with a serial modem.  Everything 
works fine until I substitute the ppp package with the ppp-filt 
package.   libpcap.lrp is loaded, which is required for the uClibc 
version of ppp-filter.  When ppp tries to come up it always gets a 
segmentation fault.  The ppp version without filter works fine.  Anyone 
else encountered this?  ppp filter is handy for hanging up the modem 
without counting junk packets beating on the door as "modem busy."  I 
have used ppp filter in standard bering without a problem.
   

Sorry - my mistake.  The uClibc docs refer to the Bering docs, so I 
clicked on a link to download ppp-filter.lrp and did not realize I was 
using a Bering package and not a uClibc package.  The uClibc version of 
active-filter, ppp-filter, works just fine.  Sorry for the mixup.  
Thanks Eric.





---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] IPSec WiFi vs. weblet

2003-12-26 Thread Christopher Harewood
I already had a similar entry in my policy file: 

vpn fw  ACCEPT
fw  vpn ACCEPT

to no avail.  Are you using IPSec, Francois?

On Mon, 15 Dec 2003, 
Francois BERGERET wrote:

> Hi all,
> 
> I use two wireless networks simultaneous in a Soekris embeded PC with
> Bering V1.2. + one "normaly wired" LAN. Weblet run fine from all
> subnets. I have not uncomment this in ssh.httpd.conf file :
> 
> #Who can access the server?
> #CLIENT_ADDRS="192.168.1"
> 
> In Shorewall policy file, I have this :
> 
> fwloc ACCEPT
> loc   fw  ACCEPT
> 
> and the same for all invoqued interfaces wlan0 and wlan1 zone aliases.
> 
> I hope this could help. If not, let me know what you want more.
> 
> Good Luck.
> Best Regards,
> Francois BERGERET,
> France.
> 
> > -Message d'origine-
> > De : [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] la part de
> > Christopher
> > Harewood
> > Envoye : lundi 15 decembre 2003 07:10
> > Cc : [EMAIL PROTECTED]
> > Objet : Re: [leaf-user] IPSec WiFi vs. weblet
> >
> >
> > The 192.168.3.0 subnet is my IPSec vpn.  Hence, in
> > /etc/shorewall/rules:
> > ACCEPT  loc fw  tcp 80
> > ACCEPT  vpn fw  tcp 80
> >
> > No weblet over the vpn, and no hits in the firewall log, so I
> > surmise that
> > it's not a Shorewall issue.  But I've been wrong before.
> >
> >
> >
> >
> > ---
> > This SF.net email is sponsored by: IBM Linux Tutorials.
> > Become an expert in LINUX or just sharpen your skills.  Sign
> > up for IBM's
> > Free Linux Tutorials.  Learn everything from the bash shell
> > to sys admin.
> > Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> > --
> > --
> > leaf-user mailing list: [EMAIL PROTECTED]
> > https://lists.sourceforge.net/lists/listinfo/leaf-user
> > SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
> >
> 







---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] ppp filter problem in uClibc 2.0

2003-12-26 Thread Eric Spakman
Hello Victor,

Which version of ppp-filter.lrp did you use?

Eric Spakman

> Just tried uClibc 2.0 for a friend with a serial modem.  Everything 
> works fine until I substitute the ppp package with the ppp-filt 
> package.   libpcap.lrp is loaded, which is required for the uClibc 
> version of ppp-filter.  When ppp tries to come up it always gets a 
> segmentation fault.  The ppp version without filter works fine.  Anyone 
> else encountered this?  ppp filter is handy for hanging up the modem 
> without counting junk packets beating on the door as "modem busy."  I 
> have used ppp filter in standard bering without a problem.
> 
> 
> 
> 
> 
> 
> ---
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> 
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
> 




---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] IPSEC

2003-12-26 Thread Eric Spakman
Robert,

The ipsec package for Bering uClibc is based on the superfreeswan 
code, you can find links to documentation from the homepage: 
http://www.freeswan.ca/code/super-freeswan/
The source also contains extensive documentatoin.

Eric Spakman


> Hope everyone had a happy Christmas,
> 
> can anyone point me to documentation about the Bering uClib2.0 IPSEC package
> ?
> The links at Freeswan don't seem very relevant to the config in Bering. I'm
> trying to set the RSA keys up but not having any success so far.
> 
> Best wishes for the new year,
> 
> robert von Knobloch
> 
> 
> 
> ---
> This SF.net email is sponsored by: IBM Linux Tutorials.
> Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
> Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
> Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
> 
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
> 




---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] IPSEC

2003-12-26 Thread Robert & Sabine von Knobloch
Hope everyone had a happy Christmas,

can anyone point me to documentation about the Bering uClib2.0 IPSEC package
?
The links at Freeswan don't seem very relevant to the config in Bering. I'm
trying to set the RSA keys up but not having any success so far.

Best wishes for the new year,

robert von Knobloch



---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html