Re: [leaf-user] Bering uClibc AS a http load balancer
Have you looked into http://haproxy.1wt.eu/ ? I think the combination of haproxy and keepalived on a LEAF box would be ideal. -Steve More On 8/14/07, Adam Niedzwiedzki wrote: I did some reading and found http://www.linuxvirtualserver.org/ But is it a load balancer I guess when I say load balancer an ip sprayer is what I'm after. I'll check out balancer, see if it will do what I want.. Cheers Ad -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Spakman Sent: Tuesday, 14 August 2007 6:05 PM To: Adam Niedzwiedzki Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] Bering uClibc AS a http load balancer Hi Ad, I think you need some sort of loadbalancing software on the router, something like balancer (http://www.inlab.de/balance.html) or anything simular. Balancer only has a command-line interface and no config file, so better options may exist. An other option which might work is using DNS round-robin by defining multiple addresses to the same host in /etc/hosts. Eric Hi guys, Has anyone setup a bering uClibc box AS a load balancer, I can find a bunch of info on load balancing THE router/firewall, but nothing on actually have a bering machine AS the load balancer for a bunch of web servers behind it. Can anyone give me some advice on what I need (modules wise), will I need a custom kernel? Cheers Ad - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/ - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now http://get.splunk.com/ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Update to User Guide
Section 12.4.4 on http://leaf.sourceforge.net/doc/guide/bucu-openvpn.html needs to be updated. 1. The build-key-server needs a parameter just like the client key. This needs to match the common name. 2. It says to backup ovpn20z.lrp which does not exist, this should be openvpnz.lrp -Steve More --- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Re: [leaf-devel] ANN: Bering-uClibc 2.3 beta4 released
On 7/2/05, KP Kirchdoerfer [EMAIL PROTECTED] wrote: Please send your notes, bug reports, feature requests or whatelse youll like to add to the LEAF mailing-lists. During the install process of Open-vpn you need to: . /etc/easyrsa/vars NOTE: when you run ./clean-all, I will be doing a rm -rf on /etc/openvpn/keys The ./ should be removed from clean-all. -Steve More --- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] iso for Bering uClibc
Here is my problem... I can boot from the floppy generated by Bering-uClibc_2.3-beta4_img_bering-uclibc-1680.exe, and all 15 packages from the floppy are loaded. Therefore I am assuming the leaf.cfg on the floppy is good. Now if I insert the CD-ROM, leave the same floppy in and reboot, all 15 packages should get loaded, but this is not happening only 5 packages are loaded. I have tried this with both 2.3-beta4.iso and 2.2.2.iso. What step am I missing ? On 7/6/05, M Lu [EMAIL PROTECTED] wrote: Assuming you use recent Bering-U, boot from CDROM but use floppy to specify what you want to load, then you can use leaf.cfg on the floppy to specify them (the LRP variable). Here is a sample /root more leaf.cfg # Other variables you might want to set in this file include: # LRP Packages to load # PKGPATH Device(s) to load packages from # syst_size Size of root ramdisk # tmp_size Size of /tmp ramdisk # log_size Size of /var/log ramdisk LRP=root,config,etc,local,modules,iptables,dhcpcd,ulogd,shorwall,dnscache,dropbear,weblet, sh-httpd,dhcpd,libm,libpcap,daemontl,libssl,libcrpto, liblzo,openvpnz PKGPATH=/dev/fd0:msdos,/dev/cdrom:iso9660 - Original Message - From: Stephen More [EMAIL PROTECTED] To: leaf-user@lists.sourceforge.net Sent: Wednesday, July 06, 2005 10:15 PM Subject: [leaf-user] iso for Bering uClibc I am booting off the CD, but I can't seem to get other packages to load. Dachstein used a pkgpath.cfg file on floppy, what do I use for Bering uClibc ? -Thanks Steve More --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=click leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
Re: [leaf-user] iso for Bering uClibc
On 7/7/05, M Lu [EMAIL PROTECTED] wrote: The floppy you used is 1680K and the path pointing to that is '/dev/fd0u1680:msdos'. When you boot from CD, the path is '/dev/fd0:msdos,/dev/cdrom:iso9660' so your leaf.cfg on your floppy is not found and the leaf.cfg on CD (actually from the boot.ima) is used. In this case only 'root,config,etc,local' are loaded. Ahhh, now it make sense. Would it be possible to make the path on the CD ''/dev/fd0u1680:msdos,/dev/fd0:msdos,/dev/cdrom:iso9660' ??? Anyway, take a blank 1.44 floppy and copy the leaf.cfg from your 1680 floppy. Remember to change the PKGPATH=/dev/fd0u1680:msdos to PKGPATH=/dev/fd0:msdos,/dev/cdrom:iso9660 Now I am up and running. Thanks. Steve --- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Re: [leaf-devel] ANN: Bering-uClibc 2.3 beta4 released
On 7/2/05, KP Kirchdoerfer [EMAIL PROTECTED] wrote: The Bering-uClibc team released today Bering-uClibc 2.3 beta4. Please send your notes, bug reports, feature requests or whatelse youll like to add to the LEAF mailing-lists. It looks like webconf is on the floppy image, but got left off the iso. -Steve More --- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Re: [leaf-devel] ANN: Bering-uClibc 2.3 beta4 released
On 7/2/05, KP Kirchdoerfer [EMAIL PROTECTED] wrote: The Bering-uClibc team released today Bering-uClibc 2.3 beta4. Please send your notes, bug reports, feature requests or whatelse youll like to add to the LEAF mailing-lists. I do not see a syslinux.cfg or a leaf.cfg on the iso. I would like to see these on the iso so I can simply copy these files onto a hard drive and edit as needed. I would be using these for nothing other than as templates. -Thanks Steve More --- This SF.Net email is sponsored by the 'Do More With Dual!' webinar happening July 14 at 8am PDT/11am EDT. We invite you to explore the latest in dual core and dual graphics technology at this free one hour event hosted by HP, AMD, and NVIDIA. To register visit http://www.hp.com/go/dualwebinar leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] iso for Bering uClibc
I really like the documentation that is included on the Dachstein iso. The README.txt contains items specific to the CD-ROM. It has detailed configuration based on 1 of 3 setups: - Your system won't boot off a CD-Rom at all - Your system boots off a CD, but not if there's a floppy disk inserted - Your system boots off a CD, even if you've got a floppy disk loaded I have looked for the equivalent documentation for Bering uClibc but have not found it. Is this information available somewhere ? I am booting off the CD, but I can't seem to get other packages to load. Dachstein used a pkgpath.cfg file on floppy, what do I use for Bering uClibc ? -Thanks Steve More --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=click leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] Bering uClib 2.3-beta 4
I am testing out the new beta 4 version of Bering uClib 2.3. I am trying to install it on a HD and trying to follow: http://leaf.sourceforge.net/doc/guide/bucu-ide.html Here are some notes I made: 1. It says to replace initrd.lrp with initrd_ide_cd.lrp.there is not enough room on the floppy...what is safe to delete ? 2. There is a typo lprkg should be lrpkg 3. It talks about floppies alotIsn't there an easier way to copy the iso image onto a HD ? If so, might this feature make it into the final release ? -Thanks Steve More --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=click leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] openvpn and passwords
According to: http://openvpn.net/archive/openvpn-users/2004-10/msg00418.html the openvpn system allows a user/password to be configured. I did not see any mention of passwords on: http://leaf.sourceforge.net/doc/guide/bucu-openvpn.html Is there any LEAF package that allows one to maintain a list of users and passwords and code that can be used as an authentication module for openvpn ? -Thanks Steve More --- SF.Net email is sponsored by: Discover Easy Linux Migration Strategies from IBM. Find simple to follow Roadmaps, straightforward articles, informative Webcasts and more! Get everything you need to get up to speed, fast. http://ads.osdn.com/?ad_idt77alloc_id492op=click leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
[leaf-user] knockd as a leaf package
Just like Matthew Pozzi , I too would like to see knockd ( http://apeiro.zeroflux.org/knock/ ) as a leaf module... http://sourceforge.net/mailarchive/message.php?msg_id=8075438 I am willing to try and get this working for Bering-uClibc. Hopefully I can find everything I need right here: http://leaf.sourceforge.net/doc/guide/buc-buildtool.html Can anyone offer any hints or tricks before I begin on my quest ? -Thanks Steve More --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] knockd as a leaf package
It looks like someone actually started to work on this 2 days ago: http://cvs.sourceforge.net/viewcvs.py/leaf/src/bering-uclibc/apps/knockd/ On Wed, 27 Oct 2004 12:47:38 -0400, Glenn A. Thompson [EMAIL PROTECTED] wrote: Wow, I'd ever heard of knockd but it sounds great! I would love this feature. Glenn Stephen More wrote: Just like Matthew Pozzi , I too would like to see knockd ( http://apeiro.zeroflux.org/knock/ ) as a leaf module... http://sourceforge.net/mailarchive/message.php?msg_id=8075438 I am willing to try and get this working for Bering-uClibc. Hopefully I can find everything I need right here: http://leaf.sourceforge.net/doc/guide/buc-buildtool.html Can anyone offer any hints or tricks before I begin on my quest ? -Thanks Steve More --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html --- This SF.Net email is sponsored by: Sybase ASE Linux Express Edition - download now for FREE LinuxWorld Reader's Choice Award Winner for best database on Linux. http://ads.osdn.com/?ad_id=5588alloc_id=12065op=click leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] Leaf Developers Guide
The leaf developers guide is no longer available: http://leaf.sourceforge.net/pub/doc/guide/developer.rtf Can someone update the Guides page: http://leaf.sourceforge.net/mod.php?mod=userpagemenu=1301page_id=10 -Thanks Steve More __ Do you Yahoo!? Yahoo! Mail Address AutoComplete - You start. We finish. http://promotions.yahoo.com/new_mail --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [leaf-user] Updating DYNDNS - Solution
Here is how zoneedit gets updated with wget: wget -O - --http-user=username --http-passwd=password 'http://dynamic.zoneedit.com/auth/dynamic.html?host=www.mydomain.com' wget is not encrypting the username and password, it is encoding it. If you can figure out how to sniff it, then you can figure out how to decode it ( for perl users see MIME::Base64 ). To be secure, these websites should be using https. -Steve More --- Bruce McNamara [EMAIL PROTECTED] wrote: I use dyndns as my provider. Also I saw a while back someone commenting on if you could sniff the username and password of the dyndns update like my script sends. Looking at things I think wget is encrypting this information before it leaves the box, I tried sniffing and got what looked like an encrypted userdetails. can anyone confirm this? Bruce A while back I posted problems I was having using ezipupdate on Bering uClib V2.2 behind a adsl router and having hassles getting the correct external IP address. In the end I abandoned ezipupdate (nothing wrong with it I just couldn't get it to work for me) and instead rewrote a script to do the job for me. I am seeing similar problems with dyndns.org and ezipupdate. It works fine though with zoneedit. Is your dyndns provider dyndns.org. Have you been able to determine what's wrong with ezipupd. Thanks Erich --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] 2.2 iso and boot floppy
The floppy image that exists on the 2.2 iso image is missing the leaf.cfg. So I created a leaf.cfg with LRP=root config etc local modules iptables dhcpcd keyboard shorwall ulogd dnscache dropbear weblet PKGPATH=/dev/cdrom:iso9660 syst_size=6M log_size=2M The system now boots, but when I try to backup a package there is no floppy option, I have to make it using custom. Then after the system reboots, it does not load the backed up package from disk. What have I done wrong ? -Thanks Steve More ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] module 8390
I have been using Dachstein for a while and have had no probelms with it. I decided to try Bering-uClibc version 2.1 iso. When I insmod 8390 I get unresolved symbol crc32_le. I noticed in the release notes for 2.1.3 it has added a note about crc32 http://sourceforge.net/project/shownotes.php?release_id=249940 What is this note about ? Do I just need to load another module ? Should I just give up now and download 2.2 iso or will I have the same problem ? -Thanks Steve More __ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages! http://promotions.yahoo.com/new_mail --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
[leaf-user] 3.4. Configure dnsmasq dhcpd
On http://leaf.sourceforge.net/doc/guide/bk05ch03.html#id2599715 It says you can turn on dhcpd by adding the following to the config: dhcp-range=192.168.1.1,192.168.1.199,12h When I added it to /etc/dnsmasq.conf and rebooted uClibc 2.1 I got bad option dhcp-range. Is this an option in a latter version of dnsmasq ? -Thanks Steve ___ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com --- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
Re: [Leaf-user] Dachstein dial on demand PPP?
Here is an image you can use: http://leaf.sourceforge.net/devel/khadley/ppp.html I am also working on cooking up instructions for How to make Dachstein Dial, which is not done yet. -Stephen More At 10:59 AM 2/26/02 +, Julian Church wrote: Hi All To save me a headache, has anyone already got a Dachstein-based dial on demand PPP disk image they wouldn't mind letting me have a copy of? I did this once (at home before I got broadband) using a ready-made disk image and information I from a 1999 Trevor Marshall BYTE magazine article, (link was on c0wz) but that was a bit reliable, and must be really old by now, so I'd prefer something more up to date. If not, anyone know of a decent, recent HOWTO for getting this going? I already started trying to do this myself starting with an ordinary dachstein image and I've found useful-sounding files such as ppp.lrp and diald.lrp, but not a lot of information. There is some information out there, but it seems mainly to relate to the old mountain releases, or LRP 2.9.4 etc, and now I'm used to Dachstein, it all seems a bit unfamiliar. Regards Julian -- [EMAIL PROTECTED] www.ljchurch.co.uk ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Open Port For VPN
Brian, Charles Steinkuehler has already answered this. Take a look at: http://www.mail-archive.com/leaf-user@lists.sourceforge.net/msg03844.html -Stephen More At 01:38 PM 2/21/02 -0600, Henning, Brian wrote: Hello- I am running the Dachstein LRP and I want to open up port 500 so I can connect to the vpn at work from home. I noticed that when i tried to connect to the vpn that nothing happens, and i assume the port 500 is blocked. In order to open the port on my router, I assume i must use ipchains. ipchains -I output -i eth0 -s 0.0.0.0/0 500 -d 0.0.0.0/0 500 -j ACCEPT ipchains -I input -i eth0 -s 0.0.0.0/0 500 -d 0.0.0.0/0 500 -j ACCEPT do these lines make sense or am i wrong on the whole idea? thanks for the input, brian ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Help with demand dial on Dachstein
If it is 'A frequently asked question' how come it is not on the FAQ webpage http://leaf.sourceforge.net/content.php?menu=1105page_id=19 ? :-) 'How Do I configure a dial-up ppp line' contains images for: LRP 2.9.4 (File not found) Materhorn (File not found) ( Both Out of Datewhere is the link for Dachstein ? ) The other links under that don't work, server unknown. I have looked through the email list posts, I have not found the answer. I was hoping someone could atleast point me in the right direction like read the HOWTO-for-IPCHAINS, thats your problem. -Thanks Steve More At 07:30 PM 2/18/02 -0800, Matt Schalit wrote: Stephen More wrote: Feb 19 02:37:17 firewall kernel: Packet log: output DENY ppp0 PROTO=1 10.64.64.64:8 129.3.1.1:0 L=60 S=0x00 I=6659 F=0x T=31 (#6) What do I need to do to allow that packet to pass and bring up ppp0 ? -Thanks Steve More Yea, A frequently asked question :) People are always trying to figure out how to get a private address to make it out the external interface. I think it'd be a quick find if you searched the list. I've seen this twice in the last couple of weeks. Ray's answered it a few times for sure :) Matthew ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Help with demand dial on Dachstein
At 08:54 AM 2/19/02 -0800, Mike Noyes wrote: Eigerstein Series LRP will not route with private range IP Address assigned to external NIC http://sourceforge.net/docman/display_doc.php?docid=2869group_id=13751 Thanks Mike, and everyone else who responded. I think it would be helpful to new users to change External NIC to External Interface on the above doc. I see external NIC and I immediately assume that it does not pertain to me, I am using ppp. ( Perhaps some of that is my fault. ) Another assumptionI though the ppp0 interface would be un-numbered until it got one from the other end, I never gave ppp0 an ipaddress. -Steve More At 07:30 PM 2/18/02 -0800, Matt Schalit wrote: Stephen More wrote: Feb 19 02:37:17 firewall kernel: Packet log: output DENY ppp0 PROTO=1 10.64.64.64:8 129.3.1.1:0 L=60 S=0x00 I=6659 F=0x T=31 (#6) What do I need to do to allow that packet to pass and bring up ppp0 -- Mike Noyes [EMAIL PROTECTED] http://sourceforge.net/users/mhnoyes/ http://leaf.sourceforge.net/content.php?menu=1000page_id=4 ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
[Leaf-user] Help with demand dial on Dachstein
How I made Dachstein Dial: Assumptions: 1 Ethernet Router IP will be 192.168.1.1 Configs will be stored on floppy Before booting with CD-ROM 0. rawrite bootdisk.bin to floppy 1. edit lrpkg.cfg on floppy 2. add packages: lncurses( dependant for bash ) lrdline2( dependant for bash ) bash-optional ppp -required libpcap ( dependant for tcpdump ) tcpdump -optional vim -optional ifconfig-optional After booting with floppy and CD-ROM 1. vi /etc/modules add: slhc( needed for ppp ) ppp uncomment: 3c509 ( for my ethernet card ) ip_masq_ipsec ( use of vpn behind router ) 2. vi /etc/network.conf IF_AUTO='eth0 ppp0' comment out all of eth0 change eth1 to eth0 eth0=192.168.1.1 Line 257: EXTERN_IF=ppp0 Line 319: EXTERN_UDP_PORTS=0/0_500 ( use of vpn behind router ) Line 341: EXTERN_PROTO0=50 0/0 ( use of vpn behind router ) Line 348: INTERN_IF=eth0 INTERN_IP=192.168.1.1 3. vi /etc/ppp/peers/provider /dev/ttyS0 57600 4. vi /etc/chatscripts/provider edit: phone-number username password 5. backup etc, modules, ppp using lrcfg So far so good. A dedicated dialup router with VPN behind the router works well. Now here is where I am having trouble: I try to make it on demand dial by: vi /etc/ppp/peers/provider add: demand idle 600 When I ping from a computer on the LAN ( which worked before I added 'demand' ) I get: Feb 19 02:37:17 firewall kernel: Packet log: output DENY ppp0 PROTO=1 10.64.64.64:8 129.3.1.1:0 L=60 S=0x00 I=6659 F=0x T=31 (#6) What do I need to do to allow that packet to pass and bring up ppp0 ? -Thanks Steve More ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] dialup with leaf - how?
Please put a direct link in even if it has not been tested. ( It provides hints for other users ). I spent time trying to find these docs, since there were no docs I spent a lot of time figuring out how to make Dachstein Dial on my own. I have also started writing up my own docs to post on the web. Had a link existed previously, I could have saved alot of time :-) -Steve More At 12:30 PM 2/2/02 -0800, Kenneth Hadley wrote: You can try http://leaf.sourceforge.net/devel/khadley/ppp.html there is right now no direct link on my web pages to it cause I need some testers Let me know if it works for you - Original Message - From: Tim Wegner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, February 02, 2002 12:25 PM Subject: [Leaf-user] dialup with leaf - how? I am sure this question is so obvious that I can't see the answer right in front of my nose! I am a happy user of Dachstein with dhcp DSL, but I have a friend who wants to use Dachstein with dialup. What is needed to use leaf (e.g. Dachstein) with ppp dialup? ppp.lrp? pppd.lrp? Can Kenneth Hadley's instructions for pppoe (which support pppoe over ethernet) be modified for dialup? I have seached the mail archives and a few of the leaf sites and haven't quite figure this out. I'm guessing this is very simple once one knows the answer :-) Tim Wegner ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Submitting documentation... a few questions
Maintenance: - once the document is submitted, how do I go about changing stuff? (I only just recently started toying with html at all, so maybe the doc looks terrible, and I'd like to change something or maybe something is just plain wrong and should be righted) You have to be a developer for our project to modify the document once it is submitted. All of the DocManager documents are modified in our CVS repository. You can always submit a bug report against the FAQ to correct mistakes. Here is a wild idea that I have seen, not sure if it would help here.. SquirrelMail ( http://www.squirrelmail.org ) does their documentation in Wiki ( http://tavi.sourceforge.net/ ). Wiki allows ANYONE to edit webpages. It appears that changes are recorded in a backend ( roll back destructive changes ?? ). It is a new concept in documentation, I think LEAF could benefit by using Wiki. I know I would like to add some documentation or fix some broken links :-) Looking for comments. -Steve More ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Submitting documentation... a few questions
At 07:01 AM 1/24/02 -0800, Mike Noyes wrote: At 2002-01-24 08:59 -0500, Stephen More wrote: Wiki ( http://tavi.sourceforge.net/ ). Wiki allows ANYONE to edit webpages. It appears that changes are recorded in a backend ( roll back destructive changes ?? ). It is a new concept in documentation, I think LEAF could benefit by using Wiki. I know I would like to add some documentation or fix some broken links :-) Stephen, Unfortunately, there is no Wiki module for phpWebSite yet. You can take a look at the modules that are available for us to use at: http://phpwsplugins.sourceforge.net There is a php version of Wiki ( phpwiki.sourceforge.net ) And instructions on How to Install PhpWiki on the SourceForge Projects Web Server ( http://phpwiki.sourceforge.net/phpwiki/PhpWikiOnSourceForge ) -Steve More ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
Re: [Leaf-user] Message log Overflow crashes EigerStein
At 08:13 AM 1/15/02 -0600, Charles Steinkuehler wrote: Do you have an image that is setup to pass IPSEC or do I have to patch in those modules and rules again. You're in luck. The Dachstein kernels come pre-patched for VPN-Masquerade, so all you have to do is load the modules, and open a couple ports to get IPSec masquerading working. Can you provide instructions on which modules to load and which ports to open for IPSec masquerading to work ? -Thanks Stephen More ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
