Re: smallest redhat install

2003-03-26 Thread Mark Olliver
Yes, my mistake i did mean 256M

On Wed, 2003-03-26 at 10:27, Nick Lindsell wrote:
> On Wed, 2003-03-26 at 09:48, Mark Olliver wrote:
> > Hi
> > 
> > I would like to create a really small install of redhat (may be 9) :),
> > It is to work as a firewall. I also want it to fit on a 256k compact
> > flash disk.
> 
> I'm pretty sure you have no chance of getting a kernel down
> to 256k. Do you mean 256M ?
> 
> 
> > 
> > Services required.
> > 
> > nisplus,
> > cipe
> > drdb
> > iptables
> > iproute2
> > dns
> > nagios/mrtg
> > 
> > Any ideas?
> > 
> > Thanks
> > 
> > Mark
> 
> 
> 


signature.asc
Description: This is a digitally signed message part


smallest redhat install

2003-03-26 Thread Mark Olliver
Hi

I would like to create a really small install of redhat (may be 9) :),
It is to work as a firewall. I also want it to fit on a 256k compact
flash disk.

Services required.

nisplus,
cipe
drdb
iptables
iproute2
dns
nagios/mrtg

Any ideas?

Thanks

Mark


signature.asc
Description: This is a digitally signed message part


RE: setting dial-in server

2003-03-25 Thread Mark Olliver
Hi

I'm looking to do console redirection via modem, from all the way from
boot to a fully running system, to allow for better remote management
control. (ie. to allow me to take the machine to single user mode from
home)

Thanks

Mark

On Mon, 2003-03-24 at 11:53, christopher cuse wrote:
> Hi Mark,
> 
> Could you more fully explain what is it is that you would like to do -- I am
> not sure I understand what your looking for ...
> 
> Cheers
> 
> Christopher CUSE
> RHCE/CCNA
> [EMAIL PROTECTED]
> 
> --nothing is too difficult once you completely understand it.
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Mark Olliver
> Sent: Monday, March 24, 2003 12:11 PM
> To: [EMAIL PROTECTED]
> Subject: RE: setting dial-in server
> 
> 
> Hi
> 
> I saw this post, and I am wondering, what would i do different to get
> full console redirection via modem, preferably from boot up. Again using
> redhat 8.
> 
> Thanks
> 
> Mark
> 
> On Mon, 2003-03-24 at 10:10, christopher cuse wrote:
> > Hi Jhun,
> >
> > Yes, Red Hat supports ppp very well, similar to that offered by Windows
> RAS,
> > but with many more granular options.
> >
> > 1) install mgetty and ppp from your linux distribition
> >
> > 2) add the following entries in /etc/inittab (this assumes two modems - on
> > ttyS0 (com1) and ttyS1 (com2)
> >
> > d1:345:respawn:/sbin/mgetty ttyS0 > /dev/nul
> > d2:345:respawn:/sbin/mgetty ttyS1 > /dev/nul
> >
> > this will respawn mgetty if it dies.
> >
> > 3) edit /etc/mgetty+sendfax/login.config -- this should be the only line
> > concerning AutoPPP (remember it is case sensitive -- AutoPPP)
> > /AutoPPP/ - dialin /usr/sbin/pppd file /etc/ppp/dialin-options
> >
> > this line tells mgetty to execute the ppp daemon with options cotained in
> > /etc/ppp/dialin-options
> >
> > 4) create /etc/ppp/dialin-options
> > +chap
> > asyncmap 0
> > 10.1.1.254:10.1.1.1
> > ipcp-accept-remote
> > #ipcp-accept-local
> > ipparam dialin
> > linkname dialin
> > #kdebug 7
> > #debug
> > logfile /var/log/ppp.dialin
> > ms-dns 172.16.3.9
> > ms-wins 172.16.3.9
> >
> > these are my options, some are remarked out, and you'll need to decide
> which
> > ones you want and change ip addresses accordingly. check out the man page
> > for pppd, it has all the options listed with their various meanings.
> >
> > 5) edit /etc/modules.conf and add the lines
> > alias /dev/ppp ppp_generic
> > alias char-major-108 ppp_generic
> > alias tty-ldisc-3 ppp_async
> > alias tty-ldisc-14 ppp_synctty
> > alias ppp-compress-21 bsd_comp
> > alias ppp-compress-24 ppp_deflate
> > alias ppp-compress-26 ppp_deflate
> >
> > this should get the compression scheme right with the kernel screaming.
> >
> > 6) edit /etc/ppp/chap-secrets to include the usernames and passwords of
> > dialin users. note that chap is more secure than pap -- my configuration
> > includes only support for chap (the chap+) in dialin options.
> >
> >
> > Reboot and give it a try.
> >
> > Voila!
> >
> > Cheers
> >
> > Christopher CUSE
> > RHCE/CCNA
> > [EMAIL PROTECTED]
> >
> > --nothing is too difficult once you completely understand it.
> >
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] Behalf Of Jhun Bacala
> > Sent: Monday, March 24, 2003 10:05 AM
> > To: [EMAIL PROTECTED]
> > Subject: setting dial-in server
> >
> >
> > Hi,
> >
> > I'm planning of putting up a dial-in server in our office. My purpose for
> > this is for me to be able to dial-up to that server and be
> > connected to our server. Just like RAS. Anybody here that guide me on how
> > to set it up? I was planning of using Redhat 8.0.
> >
> > TIA
> >
> > Jhun Bacala
> >
> >
> >
> > --
> > redhat-list mailing list
> > unsubscribe mailto:[EMAIL PROTECTED]
> > https://listman.redhat.com/mailman/listinfo/redhat-list
> >
> >
> 
> 


signature.asc
Description: This is a digitally signed message part


RE: setting dial-in server

2003-03-24 Thread Mark Olliver
Hi 

I saw this post, and I am wondering, what would i do different to get
full console redirection via modem, preferably from boot up. Again using
redhat 8.

Thanks

Mark

On Mon, 2003-03-24 at 10:10, christopher cuse wrote:
> Hi Jhun,
> 
> Yes, Red Hat supports ppp very well, similar to that offered by Windows RAS,
> but with many more granular options.
> 
> 1) install mgetty and ppp from your linux distribition
> 
> 2) add the following entries in /etc/inittab (this assumes two modems - on
> ttyS0 (com1) and ttyS1 (com2)
> 
>   d1:345:respawn:/sbin/mgetty ttyS0 > /dev/nul
>   d2:345:respawn:/sbin/mgetty ttyS1 > /dev/nul
> 
> this will respawn mgetty if it dies.
> 
> 3) edit /etc/mgetty+sendfax/login.config -- this should be the only line
> concerning AutoPPP (remember it is case sensitive -- AutoPPP)
>   /AutoPPP/ - dialin /usr/sbin/pppd file /etc/ppp/dialin-options
> 
> this line tells mgetty to execute the ppp daemon with options cotained in
> /etc/ppp/dialin-options
> 
> 4) create /etc/ppp/dialin-options
>   +chap
>   asyncmap 0
>   10.1.1.254:10.1.1.1
>   ipcp-accept-remote
>   #ipcp-accept-local
>   ipparam dialin
>   linkname dialin
>   #kdebug 7
>   #debug
>   logfile /var/log/ppp.dialin
>   ms-dns 172.16.3.9
>   ms-wins 172.16.3.9
> 
> these are my options, some are remarked out, and you'll need to decide which
> ones you want and change ip addresses accordingly. check out the man page
> for pppd, it has all the options listed with their various meanings.
> 
> 5) edit /etc/modules.conf and add the lines
>   alias /dev/ppp ppp_generic
>   alias char-major-108 ppp_generic
>   alias tty-ldisc-3 ppp_async
>   alias tty-ldisc-14 ppp_synctty
>   alias ppp-compress-21 bsd_comp
>   alias ppp-compress-24 ppp_deflate
>   alias ppp-compress-26 ppp_deflate
> 
> this should get the compression scheme right with the kernel screaming.
> 
> 6) edit /etc/ppp/chap-secrets to include the usernames and passwords of
> dialin users. note that chap is more secure than pap -- my configuration
> includes only support for chap (the chap+) in dialin options.
> 
> 
> Reboot and give it a try.
> 
> Voila!
> 
> Cheers
> 
> Christopher CUSE
> RHCE/CCNA
> [EMAIL PROTECTED]
> 
> --nothing is too difficult once you completely understand it.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Jhun Bacala
> Sent: Monday, March 24, 2003 10:05 AM
> To: [EMAIL PROTECTED]
> Subject: setting dial-in server
> 
> 
> Hi,
> 
> I'm planning of putting up a dial-in server in our office. My purpose for
> this is for me to be able to dial-up to that server and be
> connected to our server. Just like RAS. Anybody here that guide me on how
> to set it up? I was planning of using Redhat 8.0.
> 
> TIA
> 
> Jhun Bacala
> 
> 
> 
> --
> redhat-list mailing list
> unsubscribe mailto:[EMAIL PROTECTED]
> https://listman.redhat.com/mailman/listinfo/redhat-list
> 
> 


signature.asc
Description: This is a digitally signed message part


snmp

2003-03-11 Thread Mark Olliver
Hi

I am trying to setup monitoring via snmp and mrtg. I have managed the
mrtg bit but currently can only monitor network usage. I would like to
get much more information out of snmp. I have installed lm_sensors to
try and do this however, I cant understand the snmp config file.

Has anybody got any examples that I can borrow that might help me make
it work well.

Thanks

Mark


signature.asc
Description: This is a digitally signed message part


Re: iptables firewall configuration - getting the 2 nics tocommunicate

2003-02-13 Thread Mark Olliver
Does it work with out the firewall?

also is IP Forwarding enabled?

Mark

On Thu, 2003-02-13 at 11:58, Paul Lee wrote:
> I have a question regarding a firewall configuration I am attemping. I am
> using RH8 on a machine with 2 nics to create a packet filtering firewall
> using IPTABLES. I have configured the machine so that the external nic has a
> valid, internet-routable IP and the internal nic has a private IP
> (192.168.*.*) so that I can use network address translation. I have set up
> the rules and I can ping outside servers from the firewall (using the
> external nic) and I can ping the firewall from within the private network
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list



PAM / SSH problem

2003-02-13 Thread Mark Olliver
Hi

I have a problem that i think is pam related,

If i log in and get the password correct on the first attempt it lets me
in. however, if i get the password wrong, even if i get it correct on
the next two attempts it still fails to let me in. (If i enter no
password the first time and then enter the correct password it is ok.)

I think it is pam related as it also occors with sudo

any help would be appreciated

Thanks

Mark



signature.asc
Description: This is a digitally signed message part


2 Problems, 1 login & 1 on logout

2003-01-29 Thread Mark Olliver
Hi

I have two problems, which I think are related to pam.

The first is to do with login. If you attempt to login and type the
wrong password the first time it doesnt let you in after that if you
type it correctly the next time, unless you typed nothing the first
time. (under ssh) (under telnet it doesnt let you attempt to enter it
more than once).


The Second problem is related only to telnet. It seams that when users
logout their session is not correctly closed off and odd processes are
still left hanging.

Thanks for any help.

Mark
-- 

Mark Olliver

Thermeon Europe Ltd
Russ Hill Farm
Russ Hill
Charlwood
Surrey
UK
+44 1293 864300

[EMAIL PROTECTED]
www.thermeoneurope.com

UK Support 0906 515908
INT Support +44 1293 864341
Fax +44 20 7681 3907

-BEGIN PGP PUBLIC KEY BLOCK-
Version: GnuPG v1.0.7 (GNU/Linux)
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=j/HS
-END PGP PUBLIC KEY BLOCK-



signature.asc
Description: This is a digitally signed message part