[leaf-user] NTP not working (webconf)

2005-12-01 Thread Darcy Parker (Home)
Good day all,

Quick question re ntpdate.lrp package.  When monitoring from webconf
I see it is always stopped.  When I hit the start button I get the
following error

Daemon Status
  Running start command ...
Running ntpdate to synchronize clock.

The command failed.  Usually this is due to an
error in the configuration file.

ntpdate is: stopped   

Here is the configurations file. (/etc/default/ntpdate)
# servers to check.   (Separate multiple servers with spaces.)
NTPSERVERS=timelord.uregina.ca
#
# additional options for ntpdate
#NTPOPTIONS=-v
NTPOPTIONS=-u

Here is what I get when I run ntpdate from the command line.
imagerocfw# ntpdate -u timelord.uregina.ca
 1 Dec 20:02:19 ntpdate[30561]: adjust time server 142.3.100.15 offset
-0.069286 sec

Which seems to work.
Am I missing something?

Darcy Parker





---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


[leaf-user] Microtik Routerboard 500

2005-06-09 Thread Darcy Parker (Home)
Good day all,

I am considering replacing a bunch of old dual floppy machines with
the microtik routerboard 500 (http://www.routerboard.com/).  These
boards have a CF card slot and can be configured to boot off of them.  I
believe the units has a MIPS 79RC32434 processor.

I am currently running Leaf Bering uClibC 2.0 but will migrate to
2.2.  I use these for IPSEC connections between several remote offices.

Has anyone ported Leaf bering to the routerboard or can anyone give me
some starting pointers?  My concerns are how to get from my two floppies
to the CF card, and if the existing code will work with the MIPS processor.

Darcy


---
This SF.Net email is sponsored by: NEC IT Guy Games.  How far can you shotput
a projector? How fast can you ride your desk chair down the office luge track?
If you want to score the big prize, get to know the little guy.  
Play to win an NEC 61 plasma display: http://www.necitguy.com/?r=20

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


[leaf-user] Re: dhcp (pump) fails or acquire address

2005-03-07 Thread Darcy Parker (Home)
Good day all,
   I had a similar problem with Leaf bering 1.1 and 1.2.  I have since 
upgraded to uClibC 2.2.2.  I did find a fix for the older system when I 
was using it, I replaced PUMP with DHCPD which solved the problem.

Darcy Parker
Message: 2
Date: Sun, 06 Mar 2005 21:41:17 -0500
From: Gene Smith [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
To: leaf-user@lists.sourceforge.net
Subject: Re: [leaf-user] dhcp (pump) fails or acquire address after network
(cable) outage
Jon Clausen wrote, On 02/13/2005 03:27 AM:
 

On Sat, 12 Feb, 2005 at 18:00:05 -0500, Gene Smith wrote:
   

I am running a bering-leaf system with 2.4.18 kernel that I setup about 
two years ago (not sure of exact version). It has been working fine 
except for one problem. When the cable goes down and eventually comes 
back up the bering-leaf system never recovers (clients can't access 
internet). I tried restarting services (shorewall, networking, 
ifup/down) to no avail. Usually I just reboot. However I discovered that 
if I kill and re-run pump (/sbin/pump -i eth1) it then recovers and 
acquires its IP address. Could I have something configured wrong that 
prevents a automatic recovery?
 

I have been having similar (if not identical) problems lately: Link goes
down, lease expires, link comes up again, pump fails to renew.
AFAICT there's a bug which makes pump exit, when no dhcp-server can be
reached after N retries. I'm not absolutely sure this is what actually
happens, but some googling turned up links to that effect. (Sorry I can't
reproduce the search ATM)
Working on the *assumption* that pump indeed dies, I threw this together:
# cat /sbin/repump
#!/bin/sh
if [ -z `/sbin/pidof pump` ] ;then
   /usr/bin/logger Repump: pump looks dead, attempting resurrection;
   /sbin/pump
#else
#/usr/bin/logger Repump: pump lives, pid `pidof pump`
fi
and added:
# keeping pump alive:
*/10 *  * * *   root/sbin/repump
to /etc/crontab.
Basically a crude workaround.
(Un)fortunately the ISP seems to have gotten their act together, at about
the same time as I did the above. Hence I don't know whether or not it works
as desired... :P
HTH
/Jon
   

On my system I have verified that pump *does not* die. It just seem to
quit doing its thing. I have to kill it and restart it to get my ip addr
back. Also, I see no indication in /var/log/syslog that there was a
problem other than the lack of the typical slew of messages pump
generates when it does a periodic renew. Not even sure ISP was down
since syslog indicated that shorewall was rejecting stuff during the
time my lease was expired and pump did not run (if that is possible?).
Question: How is pump normally started on boot? I am unable to figure
out how it starts up after looking through the various files. I see
indications that it is somehow tied in with ifup or possibly shorewall
startup.
-gene

--__--__--
___
leaf-user mailing list
leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
End of leaf-user Digest
 


---
SF email is sponsored by - The IT Product Guide
Read honest  candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595alloc_id=14396op=click

leaf-user mailing list: leaf-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Connecting to Exchange Server using VPN through Bering 2.0

2004-07-27 Thread Darcy Parker
Good day all,

Our network at work has MS Remote Access Server (RAS) running and I connect
to the network using MS VPN connection from my WinXP box at Home.  I am
going through a Bering uClibC 2.0 LRP box and this works no problem.
However, I can only make a single connection to the VPN.  A connection
attempt from a second machine also behind the FW fails.  Is this because of
masquerading?  Is there anyway to establish a connection from a second
machine behind the same firewall?

Best Regards,
Darcy



---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721alloc_id=10040op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Firewall error on Weblet

2004-07-16 Thread Darcy Parker
Hi Andrew,  If you can send me your log file I can have a look to see what
is being reported.  Some of these may be harmless DNS or traceroute queries
that can be dropped from logging.

Darcy Parker ([EMAIL PROTECTED])

Message: 4
From: [EMAIL PROTECTED] [EMAIL PROTECTED]
Date: Fri, 16 Jul 2004 17:40:27 GMT
To: [EMAIL PROTECTED]
Subject: [leaf-user] Firewall error on Weblet


HI,

I am new to leaf and am running bering_uclibc 2.1.3.  Ihave only just
recently got my firewall up and runnng, protecting my local network using
the default shorewall settings. However,in Weblet, I have a red light for
Firewall under LEAF status and it says error.  When I click on the red
stop light it says, You have 113 denied or rejected packets in your recent
packet logs.  The other two traffic light are green (OK).  When I look
at my logs they have come in the 4 hours.  Should I be
worried about this?  Do others get this many hits on there IP's?  By the
way, I am running 3 public ip's on my LEAF.  Only two of them are getting
the traffic.  Let me know if you want to see the logs.  Let me know which
logs you would want: sorted by IP, Port, pretty log, or the regular
one.


Thank,
Andrew




---
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721alloc_id=10040op=click

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Bering uClibC 2.0 File Permissions Changing

2004-06-30 Thread Darcy Parker
Good day all,

As in my previous posts, I have been having trouble with weblet displaying
the log files.  Charles Steinkuehler has pointed me in the right direction
and I hope someone with more experience with uClibc may be able to help me
close this off.

The problem was discovered when I was viewing my log files in weblet.  It
seemed that sometimes it would work and other times I would get an error
stating that the log files were not readable.  Charles suspected (rightly)
that it had something to do with permissions.  As you can see below, I
checked the log file permissions using ls -l command after booting the
router.  after an hour or so, I checked the logs with weblet and all was
working fine.  Next night, I go to check the logs again with weblet and get
the error file is unreadable.  I again check the permissions using ls -l and
find that most of the permissions have been changed.  I reboot the router
and check again, all are set correctly again.

How do I track down which process is making this change and why??  From the
addition of the extra log files I suspect that this may be happening during
log file rotation but how do I confirm this?


WaveQamFW# ls -l
-rw-r--r--1 root root 2100 Jun 29 00:40 auth.log
-rw-r--r--1 root root 1573 Jun 29 00:45 cron.log
-rw-r--r--1 root root 1487 Jun 29 00:41 daemon.log
-rw-r--r--1 root root 1285 Jun 28 20:33 debug
-rw-r--r--1 root root 5497 Jun 29 00:36 messages
-rw-r--r--1 root root0 Jun 28 20:33 ppp.log
-rw-r--r--1 root root16230 Jun 29 00:37 shorewall.log
-rw-r--r--1 root root 2617 Jun 28 20:33 syslog
-rw-r--r--1 root root  154 Jun 28 20:33 ulogd.log
-rw-r--r--1 root root 3072 Jun 29 00:40 wtmp

WaveQamFW# ls -l
-rw-r--r--1 root root 4704 Jun 30 07:14 auth.log
-rw-r-1 root wheel 236 Jun 30 07:15 cron.log
-rw-r-1 root wheel7649 Jun 30 06:42 cron.log.0
-rw-r-1 root wheel 497 Jun 30 06:42 cron.log.1.gz
-rw-r-1 root wheel 748 Jun 30 07:15 daemon.log
-rw-r-1 root wheel1673 Jun 30 04:25 daemon.log.0
-rw-r-1 root wheel 694 Jun 30 06:42 daemon.log.1.gz
-rw-r-1 root wheel   0 Jun 30 06:42 debug
-rw-r-1 root wheel 978 Jun 30 02:33 debug.0
-rw-r-1 root wheel 355 Jun 30 06:42 debug.1.gz
-rw-r-1 root wheel  50 Jun 30 06:42 messages
-rw-r-1 root wheel   50976 Jun 30 06:42 messages.0
-rw-r-1 root wheel2239 Jun 30 06:42 messages.1.gz
-rw-r-1 root wheel   0 Jun 30 06:42 ppp.log
-rw-r-1 root wheel   0 Jun 29 06:42 ppp.log.0
-rw-r-1 root wheel  20 Jun 30 06:42 ppp.log.1.gz
-rw-r-1 root wheel   0 Jun 30 06:42 shorewall.log
-rw-r-1 root wheel   11331 Jun 30 06:28 shorewall.log.0
-rw-r-1 root wheel1328 Jun 30 06:42 shorewall.log.1.gz
-rw-r-1 root wheel   0 Jun 30 06:42 syslog
-rw-r-1 root wheel   0 Jun 29 06:42 syslog.0
-rw-r-1 root wheel1036 Jun 30 06:42 syslog.1.gz
-rw-r--r--1 root root  472 Jun 30 06:42 ulogd.log
-rw-r--r--1 root root 5376 Jun 30 07:14 wtmp

WaveQamFW# ls -l
-rw-r--r--1 root root 2421 Jun 30 07:23 auth.log
-rw-r--r--1 root root  234 Jun 30 07:20 cron.log
-rw-r--r--1 root root  737 Jun 30 07:20 daemon.log
-rw-r--r--1 root root 1275 Jun 30 07:20 debug
-rw-r--r--1 root root 9032 Jun 30 07:23 messages
-rw-r--r--1 root root0 Jun 30 07:20 ppp.log
-rw-r--r--1 root root0 Jun 30 07:20 shorewall.log
-rw-r--r--1 root root 2617 Jun 30 07:20 syslog
-rw-r--r--1 root root  154 Jun 30 07:20 ulogd.log
-rw-r--r--1 root root 3072 Jun 30 07:23 wtmp



---
This SF.Net email sponsored by Black Hat Briefings  Training.
Attend Black Hat Briefings  Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] weblet problem on Bering uClibc 2.0

2004-06-03 Thread Darcy Parker
Good day all,

 I seem to be having a weblet problem on my leaf bering uClibC ver 2.0.
The web server runs and serves up the pages but I think it can't find the
correct files or information is not being passed correctly.  I created a
CRON-Daily job that emails the shorewall logs to me dailiy and every day I
get the email showing all the logs so I know they are being created.
However, when trying to look at the shorewall logs (or Preaty shorewall
logs) using weblet i get the following where the logs should be : File not
readable: shorewall.log .I checked all Logs and using weblet and find the
following

Shorewall log - Not working
Messages - not working
syslog - not working
auth log - OK
debug log - not working
daemon log - not working
cron log - not working
ppp log - not working
pslave log - Not used
user log - not used
weblet access log - OK


current connections - not working
Network setup - OK
Firewall rules - OK
Systems Details OK (I think)

Any Ideas on how I can fix this?

Darcy Parker





---
This SF.Net email is sponsored by the new InstallShield X.
From Windows to Linux, servers to mobile, InstallShield X is the one
installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] weblet (sh-httpd) bug - How to Patch please

2003-10-28 Thread Darcy Parker
Good day All,

  I have gone to the website and created the patch file as per the
directions below.  How do I apply this patch? (Excuse me for being new to
Linux but you have to start somewhere).

 Message: 6
 Date: Tue, 28 Oct 2003 07:54:00 -0600
 From: Charles Steinkuehler [EMAIL PROTECTED]
 To: [EMAIL PROTECTED] [EMAIL PROTECTED]
 Subject: [leaf-user] weblet (sh-httpd) bug

 Looks like someone found another bug in sh-httpd:
 http://lists.netsys.com/pipermail/full-disclosure/2003-October/012776.html

 The first 2 chunks of the patch supplied looks OK, although I have not
 personally tested them.  The third (and last) chunk of the patch should
 probably be tweaked to the following (again, not actually tested):

 @@ -292,7 +292,7 @@
  fi

 -   DIR=`dname $URL`
 +   DIR=`dname \$URL\`
 -   FILE=`bname $URL`
 +   FILE=`bname \$URL\`

 Note that this bug is not a serious security issue if you have not
 allowed external internet access to the weblet server (blocked by
 default in all LEAF varients, so you'd have to explicitly enable access).

 -- 
 Charles Steinkuehler
 [EMAIL PROTECTED]





---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?   SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Shorewall and XBOX

2003-08-31 Thread Darcy Parker
Good day all,

I am trying to open the ports for an XBOX for XBOX Live.  I got the port
info from the XBOX site stating that is uses UDP Ports 88, UDP/TCP Ports
3074 and UDP Port 53.

I set up a DNAT under shorewall rules  as follows:

# DNAT for XBOX Rules
DNATnet loc:192.168.1.99tcp 3074
DNATnet loc:192.168.1.99udp 3074
DNATloc:192.168.1.99net tcp 3074
DNATloc:192.168.1.99net udp 3074
DNATnet loc:192.168.1.99udp 88
DNATloc:192.168.1.99net udp 88

After I save the rules, backup shorewall and restart shore, I loose all
external connectivity.

Have I done something wrong here?  Anyone else successfully set up XBOX?

Best regards,
Darcy Parker





---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Re: Operation not supported by device // NICs and Modules crossreference.

2003-08-22 Thread Darcy Parker
Thnaks to all who replied.  I have the firewall up and running now with only
3c59x.o for a driver.

I am considering setting up a web page with a table that shows which specfic
drivers are needed for specific NIC's with links to the approrite drivers.
I understand that each driver needs to be complied for the specfic kernel
being used.

If anyone wants to send me a list of the NIC's they have installed, which
drivers are used for each NIC and which kernal the drivers were complied for
I will start on the web page.

To limit bandwidth on the list - please send these to me and not the list
([EMAIL PROTECTED]) and I will post a message on the list when I have the
page up.

Darcy Parker




---
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Operation not supported by device

2003-08-21 Thread Darcy Parker
Good day listers,

I ma trying to set up a leaf-bering (1.2) FW.  I have the following two
NICs

3C905-TXIRQ10  D800
3C905-TXIRQ9D400

I am loading the following modules

3c59x.o
netsemi.o
tulip.o

When it gets to configuing the NICs I get the following errors

insmodinit_module:netsemi:operation not supported by device
tulipinit_module:tulip:operation not supported by device

Does this mean the only driver I need is 3c59x?  Am I missing something else
here?

Best Regards,
Darcy Parker




---
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Re: leaf-user digest, Vol 1 #1825 - 4 msgs

2003-06-12 Thread Darcy Parker
 Message: 1
 Date: Wed, 11 Jun 2003 23:26:16 +0200
 From: Patrick Benson [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: [leaf-user] Shorewall Rules and TightVNC

 I would also suggest the same option Lars proposed, use ssh and
 portforwarding with ssh acting as the tunnel. Some of the advantages are
 disabling passwords and using RSAauthentication which can be configured
 in your sshd_config file, averting the password cracking problem. A
 properly configured sshd_config file is a powerful complement for your
 security setup. Another advantage is that you will only be using the ssh
 port for the connection, instead of opening the standard vnc 5800,5900
 ports..and you can use the compression option as well. There's a pretty
 good tutorial at the realvnc site on how to go about it:

 http://www.uk.research.att.com/vnc/sshvnc.html

 Regards,
 -- 
 Patrick Benson
 Stockholm, Sweden

Good day Patrick and Lars,

As I am fairly new to this, I would appreciate a bit more help.  I did read
the article above and a few others but I am not 100% sure that I am doing
everything correct.

I have sshd 3.4p1 OpenSSH sshd daemon installed and I have created the keys.
I can access the fw using putty from both loc and from net
Something that bothered me was the fact that when I connected from the net
all I had to do was trust the connection to be accepted then I logged on as
root provided my password and I was at the lrcfg screen.

I looked at the sshd server system wide configuration file but did not know
what to change to prevent just anyone from logging on.

Also for rules in shorewall I have

ACCEPTlocfwtcp22
ACCEPTnetfwtcp22

do I add

ACCEPTnetloctcp22

I want to use the web based TightVNC client on the net to connect to the
TightVNC server on loc.  Can this be accomplished using port forwarding ?

I would normally type http://xxx.xxx.xxx.xxx:5800 in a web browser to
connect to the TightVNC server.  Would I specify port 22 here instead of
port 5800?

Any help is appreciated.

Best Regards,
Darcy Parker



---
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Shorewall Rules and TightVNC

2003-06-11 Thread Darcy Parker
 Message: 1
 Date: Wed, 11 Jun 2003 23:26:16 +0200
 From: Patrick Benson [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Re: [leaf-user] Shorewall Rules and TightVNC

 Darcy Parker wrote:
 
  Good day all,
 
   I am using Leaf Bering (latest ver) and currently have my shorewall
  rules to allow a TightVNC connection only from a fixed IP address at
work.
 
  # DNAT to allow TightVNC from Work Only
  #
  DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5800tcphttp
  DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5800tcp5800
  DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5900tcphttp
  DNATnet.xxx.xxx.xxx.xxx192.168.1.100:5900tcp5900
 
  As I am going to be travelling with my laptop, I am woundering if
there
  is a way to configure the rules to allow a TightVNC connection from a
spefic
  MAC address as I will not know what my net IP address will be while I am
  away.
 
  If not from a specific MAC address, then is there another way?
 
  Best Regards,
  Darcy

 Darcy,

 I would also suggest the same option Lars proposed, use ssh and
 portforwarding with ssh acting as the tunnel. Some of the advantages are
 disabling passwords and using RSAauthentication which can be configured
 in your sshd_config file, averting the password cracking problem. A
 properly configured sshd_config file is a powerful complement for your
 security setup. Another advantage is that you will only be using the ssh
 port for the connection, instead of opening the standard vnc 5800,5900
 ports..and you can use the compression option as well. There's a pretty
 good tutorial at the realvnc site on how to go about it:

 http://www.uk.research.att.com/vnc/sshvnc.html

 Regards,
 -- 
 Patrick Benson
 Stockholm, Sweden

Patrick and Lars,

 Thanks for the suggestions and the links.  I only have two days to get
this up and running so I hope I don't run into trouble.

Darcy



---
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Shorewall Rules and TightVNC

2003-06-10 Thread Darcy Parker
Good day all,

 I am using Leaf Bering (latest ver) and currently have my shorewall
rules to allow a TightVNC connection only from a fixed IP address at work.

# DNAT to allow TightVNC from Work Only
#
DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5800tcphttp
DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5800tcp5800
DNATnet:xxx.xxx.xxx.xxx192.168.1.100:5900tcphttp
DNATnet.xxx.xxx.xxx.xxx192.168.1.100:5900tcp5900

As I am going to be travelling with my laptop, I am woundering if there
is a way to configure the rules to allow a TightVNC connection from a spefic
MAC address as I will not know what my net IP address will be while I am
away.

If not from a specific MAC address, then is there another way?

Best Regards,
Darcy



---
This SF.net email is sponsored by:  Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you've never dreamed of, try TotalView 6 free at www.etnus.com.

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] lost root password

2003-04-03 Thread Darcy Parker
I just know that people out there will be laughing!  My root password no
longer works.  I am running leaf bering.  Is there anyway to restore or
change it?

Darcy Parker



---
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Re: lost root password

2003-04-03 Thread Darcy Parker
Never Mind - Bad keyboard
Darcy

- Original Message - 
From: Darcy Parker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 03, 2003 9:55 PM
Subject: lost root password


 I just know that people out there will be laughing!  My root password no
 longer works.  I am running leaf bering.  Is there anyway to restore or
 change it?
 
 Darcy Parker
 


---
This SF.net email is sponsored by: ValueWeb: 
Dedicated Hosting for just $79/mo with 500 GB of bandwidth! 
No other company gives more support or power for your dedicated server
http://click.atdmt.com/AFF/go/sdnxxaff00300020aff/direct/01/

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Leaf-Bering - Renew DCHP lease

2003-03-26 Thread Darcy Parker
Good day all,
 
 in my /etc/network/interfaces file I am using option 1.1

auto eth0
iface eth0 inet dhcp

  in my /etc/pump.conf I have

retries 3
script /etc/pump.shorewall
device eth0 {
nodns
}

in my /etc/shorewall/interfaces I have

neteth0detectdhcp,routefilter,norfc1918
loceth1detectroutestopped

How do I get pump to automaticly renew my lease?

Best Regards, 
Darcy Parker


---
This SF.net email is sponsored by:
The Definitive IT and Networking Event. Be There!
NetWorld+Interop Las Vegas 2003 -- Register today!
http://ads.sourceforge.net/cgi-bin/redirect.pl?keyn0001en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html