Re: [Leaf-user] dachstein cd 1.0.2: keyboard and cdrom errors

2002-01-03 Thread Matthew Schalit

David B. Cook wrote:
 
 Even if the keyboard is not your specific problem, eliminate it. Your
 firewall is a server that is available by SSH so there is no need for
 keyboards cluttering up you area. 


I need a local keyboard.  Working without a 
keyboard via ssh only is not always an option.  
The firewall that I write has a scram switch that 
completely isolates the firewall.  People would 
want to do that if they think their LEAF security
has been compromised, effectively ending any
remote connections.  Going to the keyboard
then is how they get in.  I have a workaround
in development where I only allow in ssh on a 
random port after a scram.

If a person wants to use a null modem cable
to connect the serial port on their LEAF to
the serial port on another computer on their
LAN, I can see this  eliminating the need for
a keyboard as you describe.

Thanks for the tip.
Matt

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] dachstein cd 1.0.2: keyboard and cdrom errors

2002-01-03 Thread Peter Jay Salzman

begin Matthew Schalit [EMAIL PROTECTED] 
  
  unfortunately, i'm configuring the firewall right now (as in setting up
  the networking parameters) so ssh doesn't work quite yet.  a keyboard
  would be useful.   :-)
 
 Dachstein 1.0.2 is called Dachstein Firewall for
 the good reason that it comes complete.  It is
 well enough written, including QoS, that you
 can get by to start with using it, as long as
 you use 192.168.1.0 for your internal network.
 Want a DMZ too?  Not a problem.  Want a different
 firewall?  There's Shorewall, Echowall, rcf, and pfw.
 The first uses iptables, the last three use ipchains.
 
question -- i'm thinking of going back to seawall.  when using a
different firewall package, i assume dachstein has no way of knowing
a priori you're using another firewalling package?

i assume the firewall packages simply wipe all ipchains, all port
forwards and start fresh?
  
  on the upside, boot time is now cut by a third.  
 
 People rarely reboot the firewall.  So boot speed
 is not that significant, though using a cdrom
 to load all your packages is what's fast.
 
i rebooted between eigerstein and dachstein like crazy, since i needed
to access the internet to get help and read tutorials.

remember -- i'm new at this, and it took me an awful long time and alot
of trial and error to get dachstein working.

yes, i know /afterwards/ the firewall doesn't get booted much.

  and my firewall would be able to accept/reject packets
  VERY QUICKLY.  :)
 
 Yes, but how much quicker than the P66?

well, actually that was a joke that you apparently didn't get.

but now that you mention it, yes.  i'm completely convinced that my net
connectivity is faster.   i know what conventional wisdom says; you
share in that view point.

however, i spend alot of time at the computer, and the difference IS
noticeable.  my girlfriend noticed it too.

 Good luck.  I was sort of wondering what's
 going on, because the latest DF is so slick that
 it comes right up in about 30 mins, if you've set 
 one of these up before

you hit the

 and know your network.conf,

nail on

 and your modules.conf.

the head.

pete

-- 
PGP Fingerprint: B9F1 6CF3 47C4 7CD8 D33E  70A9 A3B9 1945 67EA 951D
PGP Public Key:  finger [EMAIL PROTECTED]

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] dachstein cd 1.0.2: keyboard and cdrom errors

2002-01-02 Thread David B. Cook

Even if the keyboard is not your specific problem, eliminate it. Your 
firewall is a server that is available by SSH so there is no need for 
keyboards cluttering up you area. If your pc does not have BIOS support 
for booting without the keyboard 

Find an old keyboard and rip it open. **If** you find a small circuit 
board with flat ribbon connecting it to the keyboard **PROCEED**. (In 
other words, detachable from the circuit board).

Rip it out and keep just the cable and the circuit board. Wrap it up nice 
with electrical tape and plug it into the pc. It should be happy booting 
without keyboard messages. Access happily from your network.

dbc.

On Tue, 1 Jan 2002, Peter Jay Salzman wrote:

 during kernel bootup, i get the following error:
 
   AT keyboard timed out
   Is keyboard present?
 
 the connection is good, the keyboard works when i go into bios, and it
 also works with a configured eigerstein LRP floppy that i have.  the
 machine in question is a very old pentium 66.
 
 
 pete
 
 

-- 
 
David B. Cook, [EMAIL PROTECTED]
The only thing Windows this software came close to had an X in
front of it.  ... Open Source, we play by the rules.


___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



Re: [Leaf-user] dachstein cd 1.0.2: keyboard and cdrom errors

2002-01-02 Thread Peter Jay Salzman

begin David B. Cook [EMAIL PROTECTED] 
 Even if the keyboard is not your specific problem, eliminate it. Your 
 firewall is a server that is available by SSH so there is no need for 
 keyboards cluttering up you area.

unfortunately, i'm configuring the firewall right now (as in setting up
the networking parameters) so ssh doesn't work quite yet.  a keyboard
would be useful.   :-)

a friend gave me an old pentium II/233.  perhaps my old pentium I/66
outlived its usefulness.  i rebooted dachstein on the new machine with
no problems (and boy was it faster).

it kind of sucks that i had trouble with older hardware; seems like the
very thing that LEAF should thrive on.  on the upside, boot time is now
cut by a third.  and my firewall would be able to accept/reject packets
VERY QUICKLY.  :)

with only 2 days till school starts again, i want this firewall up
asap...

pete

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user



[Leaf-user] dachstein cd 1.0.2: keyboard and cdrom errors

2002-01-01 Thread Peter Jay Salzman

during kernel bootup, i get the following error:

  AT keyboard timed out
  Is keyboard present?

the connection is good, the keyboard works when i go into bios, and it
also works with a configured eigerstein LRP floppy that i have.  the
machine in question is a very old pentium 66.

a few days ago, i tried out 1.0.1 (before i knew about 1.0.2), and it
kind of worked with that.  kind of meaning that sometimes it did,
and sometimes it timed out.  this is pretty consistant.

when i insert the dachstein cd and boot floppy in any other machine in
the house, the keyboard works fine.  i've been configuring it on another
machine in the meantime, but eventually, i'd like to use dachstein on my
firewall.


also, when linuxrc does its stuff (loading the .lrp files), i get many,
many non-fatal errors that look like:

  cdrom_decode_status { DriveReady SeekComplete error }
 
eventually, it works after printing

  ATAPI reset complete

this isn't fatal -- everything eventually gets loaded, but it takes a
very long time.  note that the errors don't appear when the modules are
loading.

any words of wisdom?

pete

-- 
PGP Fingerprint: B9F1 6CF3 47C4 7CD8 D33E  70A9 A3B9 1945 67EA 951D
PGP Public Key:  finger [EMAIL PROTECTED]

___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user