Re: [leaf-user] Update: Short term LEAF project goals

2003-02-19 Thread David Howe
 I'm referring to only packaging meaning having within the same lrp.
 Additionally, the package installer should load all modules that are
 tarred within the package as they are deemed necessary for the
 utilities to work. I'm not suggesting that the module be compiled or
 integrated. Can we do away with manual steps when it is obviously
 needed. That is all. Sorry if my earlier posts have conveyed
 otherwise.
It would probably be enough if a lrp package could have a init script
on load that did whatever the module wanted setting on load - that way a
module could insmod anything it wanted to.
The only real danger here would be when modified packages were written
away - does the .o get written twice (wasting space) or not at all
(leaving you with a broken system). For that matter - does a .o need to
be in /lib/modules once it is loaded? could we get away with copying it
from module-specific space to /lib/modules, loading it then deleting it?



---
This SF.net email is sponsored by: SlickEdit Inc. Develop an edge.
The most comprehensive and flexible code editor you can use.
Code faster. C/C++, C#, Java, HTML, XML, many more. FREE 30-Day Trial.
www.slickedit.com/sourceforge

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Update: Short term LEAF project goals

2003-02-18 Thread David Howe
 S Mohan wrote:
  I'd also suggest a change in lrp packaging by which the modules
required
  for a package to run is bundled with the lrp. Installing the lrp
will
  also insmod the module automatically. A depmod kind of facility will
  make it easy to use/ configure LEAF.
 Give me an example please of a package that requires
 you to go out and find a .o module you need.
pppoatm?




---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] PPPoATM request...

2003-02-14 Thread David Howe
Does anyone have a *working* setup of bering, USB Speedtouch modem and
PPPoATM they would be willing to email me the .lrp files for? (stripped
of login info obviously)
I repeated the build, adding 2.4.18/pppoatm.o, the pppatm.lrp and
speedtch.lrp to the 1.0 stable setup, manually ran up modem_run and pppd
and still get the connect (0.38) error. I can't figure out why it isn't
working I must be going wrong someplace, if other people have
working speedtouch+pppoatm setups and I don't.



---
This SF.NET email is sponsored by: FREE  SSL Guide from Thawte
are you planning your Web Server Security? Click here to get a FREE
Thawte SSL guide and find the answers to all your  SSL security issues.
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0026en

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Bering/Shorewall vs. Dachstein

2003-02-12 Thread David Howe
 Tom -- Can you expand on this just a little bit more? (Or Lynn, can
you?)
 This conclusion is kind of where I got to last night, but only for
TCP.
 What is the equivalent of SYN packet detection for UDP? Or, to put
it
 another way, how does iptables (or Shorewall) determine the state
 associated with a UDP packet? I can't figure it out from the iptables
docs
 I have.
That's because it doesn't have one - UDP is connectionless and
stateless. each packet is atomic in itself, and independent of a
handshake or index in a packet stream.




---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] more on speedtouch

2003-02-12 Thread David Howe
Managed to get hold of an original USB speedtouch (will worry about the
330 later :) and got to the point the line is up and happy, but pppd
unfortunately is not. log as follows:

Feb 12 18:50:41 firewall modem_run[28105]: ADSL synchronization has been
obtained
Feb 12 18:50:41 firewall modem_run[28105]: ADSL line is up (576 kbit/s
down | 288 kbit/s up)
Feb 12 18:50:42 firewall pppd[19682]: Plugin /usr/lib/pppd/pppoatm.so
loaded.
Feb 12 18:50:42 firewall pppd[19682]: PPPoATM plugin_init
Feb 12 18:50:42 firewall pppd[19682]: PPPoATM setdevname_pppoatm
Feb 12 18:50:42 firewall pppd[19682]: PPPoATM setdevname_pppoatm -
SUCCESS
Feb 12 18:50:42 firewall pppd[26721]: pppd 2.4.0b1 started by root, uid
0
Feb 12 18:50:42 firewall kernel: atm_connect (TX: cl 1,bw 0-0,sdu 16386;
RX: cl 1,bw 0-0,sdu 1502,AAL 5)
Feb 12 18:50:42 firewall pppd[26721]: connect(0.38): Operation not
supported by device
Feb 12 18:50:42 firewall pppd[26721]: Exit.

pppoatm shows in lsmod, so presumably is ok. I have added 2.4.18 modules
only (from
http://leaf.sourceforge.net/devel/jnilo/bering/1.0-stable/modules/2.4.18
/) and the speedtouch drivers (from
http://leaf.sourceforge.net/devel/jnilo/bering/1.0-stable/drivers/speedt
ouch-usb/)
I notice that we aren't supplying a device to pppd, but I assume that is
normal (and that the plugin takes care of it;at least, that is how I
read the syslog file)
Went over section five of the user guide more times than I can count,
http://www.linux.org/docs/ldp/howto/mini/BTI-PPP/x203.html a few more
times, and am now willing to admit my lack of Clue if it gets me some
hints on where I have messed up this time :)



---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



Re: [leaf-user] Using a wireless router with LEAF (Dachstein, Bering)

2003-02-11 Thread David Howe
at Tuesday, February 11, 2003 5:47 PM, Jeff Newmiller
[EMAIL PROTECTED] was seen to say:
 Since security is a major concern when attached to the Internet, why
 not make use of the three-interface firewall solution within
 Bearing/Shorewall and place the wireless access point on that third
 interface of the firewall within the DMZ?
 Maybe I'm overlooking a barn-door security breach, but it just
 seems logical to use your wireless devices on that interface, and
 routing traffic accordingly.
 Anyone else have any thoughts on this?
 A DMZ is not an appropriate place for a workstation in most cases.
 Machines on a DMZ should be regarded as potential sacrificial lambs,
 and kept isolated from the rest of your local network.  This is not
 normally acceptable for workstation use.
  A dmz is a perfectly acceptable place to put a wireless hub - you
definitely don't want it to have unrestricted access to the main lan,
but you don't want it on the internet either. In fact, if you consider
your lan traffic at all sensitive, I could recommend blocking all but
IPSEC from the wireless hub - the wireless
devices can use a vpn client to connect inwards and you have all the
convenience of wireless networking with the security of a decent
encryption setup (and of course that allows those workstations
(presumably laptops) to be used across the internet too)
  If your lan isn't that sensitive, that is probably overkill though :)



---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



[leaf-user] Hello and has anyone any experience with...

2003-02-10 Thread David Howe
Ok, new to the list. I have been looking to set up a floppy based router
for a vpn connection (bering looks ideal for this) so ditched the Intel
3240 in favour of a speedtouch - only to receive a 330 which appears
only to be supported in the latest beta at speedtouch.sourceforge.net,
and for which the .sys file is over 700k (oops, not that much space left
on the floppy! even gzipped it is 358k)
I assume the solution to the space problem is to place the file (and
anything else that doesn't change) onto a cdr and mount that as part of
the boot - but it seems like an uphill struggle. so on to the obvious
question - has anyone already done all or part of this, and can give me
some pointers and/or configured lrp files? I assume that the
speedtch.lrp from
http://leaf.sourceforge.net/devel/jnilo/bering/latest/drivers/speedtouch
/ is for the the original model I don't have



---
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html