Re: [SLUG] Re:Games and Firewal
> Hi All > > iptables -A INPUT -j ACCEPT -p tcp --dport 7787 > iptables -A INPUT -j ACCEPT -p tcp --dport 7788 It's a 2 step process or in this case another set of rules to complete the whole thing. So far those 2 rules will accept the traffic to your linux machine, but then it goes no where. You need to program 2 more rules which forwards the data on those 2 ports to the internal ip. Try something like this # forward 7787-tcp & 7788-tcp iptables -A FORWARD -p tcp --dport 7787 -d 192.168.0.3 -j ACCEPT iptables -A FORWARD -p tcp --dport 7788 -d 192.168.0.3 -j ACCEPT Assuming your Windows PC wishing to play this game is assigned 192.168.0.3, otherwise change this ip to suit the machine on your network running the game. That should do it Thanks -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Re:Games and Firewal
[EMAIL PROTECTED] wrote on 06/04/2004 04:28:03 PM: > Hi All > > sorry if this is a bit of the lists subjects, but am wanting some > help in getting a game going behind a firewall. > > Firewall: Linux 2.4.18-14 with iptables v1.2.6a > > Game: Unreal Tournament 2004 > > I have a windows machine connecting to the net via the linux > machine, using masquerading. > Are you playing UT2004 from the windows or Linux machine? If its from the windows machine, it should be in the FORWARD rule. Although if you are masquerading, with no firewalling on the lan, this should be unnecessary. Perhaps sending the output of "iptables -L -n -v ;iptables -L -n -v -t nat" to us could help. Cheers, Scott > they suggest that you open ports 7787, 7788, which i have done with > the following commands, still i have no luck connecting to the server > > iptables -A INPUT -j ACCEPT -p tcp --dport 7787 > iptables -A INPUT -j ACCEPT -p tcp --dport 7788 > i have even tried:iptables -A INPUT -j ACCEPT -p udp --dport 7787 / 7788 > Any one that can help i would be most appreciated > Thanks > Trevor-- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Re:Games and Firewal
Hi All sorry if this is a bit of the lists subjects, but am wanting some help in getting a game going behind a firewall. Firewall: Linux 2.4.18-14 with iptables v1.2.6a Game: Unreal Tournament 2004 I have a windows machine connecting to the net via the linux machine, using masquerading. they suggest that you open ports 7787, 7788, which i have done with the following commands, still i have no luck connecting to the server iptables -A INPUT -j ACCEPT -p tcp --dport 7787 iptables -A INPUT -j ACCEPT -p tcp --dport 7788 i have even tried: iptables -A INPUT -j ACCEPT -p udp --dport 7787 / 7788 Any one that can help i would be most appreciated Thanks Trevor -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Bigpond and M$
> Jasper Said: > I tried to get Bigpond to mirror Dynebolic (live mulitmedia distro) on > their server (so it don't clock up the megs on cable) and was > astonished to have it rejected- moreso was utterly bewildered for their > response: (and this is a direct quote) > - > Out of respect for Microsoft's wishes, we are not making available any > software that promotes or allows the modification or alteration of > their Xbox console system for anything other than its intended purpose. > - > I wasn't even considering using this live distro on an Xbox- but am > sure as hell feeling spiteful enough to try now. > What a bunch of fools. This is somewhat amusing.. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Bigpond and M$
Jasper Streit wrote: I tried to get Bigpond to mirror Dynebolic (live mulitmedia distro) on their server (so it don't clock up the megs on cable) and was astonished to have it rejected- moreso was utterly bewildered for their response: (and this is a direct quote) - Out of respect for Microsoft's wishes, we are not making available any software that promotes or allows the modification or alteration of their Xbox console system for anything other than its intended purpose. - I wasn't even considering using this live distro on an Xbox- but am sure as hell feeling spiteful enough to try now. Hope they don't find out that Debian works on XBox. What a bunch of fools. Bunch of something else starting with 'F', if you ask me. If you think that's bad though, wait until the free trade agreement goes through and it's actually illegal to use your own hardware 'for anything other than its intended purpose'. Felix -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] [Fwd: LINUX Consultants needed.]
On Sun, 2004-04-04 at 20:22, Pia Smith wrote: > Your name was provided to us as a high calibre Linux professional that By who? > * Must bring local contacts with them Ah... -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Squirrelmail Q
On Tue, Apr 06, 2004 at 09:05:24AM +1000, Grant Parnell wrote: > On Fri, 2 Apr 2004 [EMAIL PROTECTED] wrote: > > - is there a plug in to use Squirrelmail to retrive email from a remote > > pop server ? SM has the mail_fetch plugin which does what you want. > If squirrelmail doesen't have one itself, fetchmail will do the job. Depends. We use mail_fetch on a shared imap server to allow users (who don't have shell access) to pop mail into their imap mailbox from arbitrary pop accounts. That's non-trivial with fetchmail, for instance. Cheers, Gavin -- Open Fusion P/L - Open Source Business Solutions [ Linux - Perl - Apache ] ph: 02 9875 5032fax: 02 9875 4317 web: http://www.openfusion.com.aumob: 0403 171712 - Fashion is a variable, but style is a constant - Programming Perl -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Bigpond and M$
I tried to get Bigpond to mirror Dynebolic (live mulitmedia distro) on their server (so it don't clock up the megs on cable) and was astonished to have it rejected- moreso was utterly bewildered for their response: (and this is a direct quote) - Out of respect for Microsoft's wishes, we are not making available any software that promotes or allows the modification or alteration of their Xbox console system for anything other than its intended purpose. - I wasn't even considering using this live distro on an Xbox- but am sure as hell feeling spiteful enough to try now. What a bunch of fools. Jasper -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Bigpond and M$
I tried to get Bigpond to mirror Dynebolic (live mulitmedia distro) on their server (so it don't clock up the megs on cable) and was astonished to have it rejected- moreso was utterly bewildered for their response: (and this is a direct quote) - Out of respect for Microsoft's wishes, we are not making available any software that promotes or allows the modification or alteration of their Xbox console system for anything other than its intended purpose. - I wasn't even considering using this live distro on an Xbox- but am sure as hell feeling spiteful enough to try now. What a bunch of fools. Jasper -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] add route to ppp0
On Fri, 2 Apr 2004, Amanda wrote: > output of netstat -rn taken earlier today > Kernel IP routing table > Destination Gateway Genmask Flags MSS Window irtt Iface > 10.0.0.150 0.0.0.0 255.255.255.255 UH0 0 0 ppp0 > 10.0.0.104 0.0.0.0 255.255.255.255 UH0 0 0 ppp0 > 10.0.0.00.0.0.0 255.255.255.0 U 0 0 0 ppp0 > 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 > 10.0.0.00.0.0.0 255.0.0.0 U 0 0 0 eth1 > 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo > 0.0.0.0 10.0.0.10.0.0.0 UG0 0 0 eth1 > > output of ifconfig taken just now after a recent reboot. > eth0 Link encap:Ethernet HWaddr 00:E0:29:67:18:1C > inet addr:192.168.0.210 Bcast:192.168.0.255 Mask:255.255.255.0 > EtherTalk Phase 2 addr:65280/31 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:16 errors:0 dropped:0 overruns:0 frame:0 > TX packets:81 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 > RX bytes:2148 (2.0 Kb) TX bytes:8917 (8.7 Kb) > > eth1 Link encap:Ethernet HWaddr 00:00:E8:12:8B:60 > inet addr:10.0.0.3 Bcast:10.255.255.255 Mask:255.0.0.0 > UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 > RX packets:298 errors:0 dropped:0 overruns:0 frame:0 > TX packets:0 errors:466 dropped:0 overruns:0 carrier:932 > collisions:0 > RX bytes:24767 (24.1 Kb) TX bytes:0 (0.0 b) > > loLink encap:Local Loopback > inet addr:127.0.0.1 Mask:255.0.0.0 > EtherTalk Phase 2 addr:0/0 > UP LOOPBACK RUNNING MTU:16436 Metric:1 > RX packets:25 errors:0 dropped:0 overruns:0 frame:0 > TX packets:25 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 > RX bytes:2480 (2.4 Kb) TX bytes:2480 (2.4 Kb) > > ppp0 Link encap:Point-to-Point Protocol > inet addr:10.0.0.87 P-t-P:10.0.0.104 Mask:255.255.255.255 > UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1000 Metric:1 > RX packets:21 errors:0 dropped:0 overruns:0 frame:0 > TX packets:18 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 > RX bytes:1020 (1020.0 b) TX bytes:795 (795.0 b) > > Yes, there's a firewall on it. I didn't configure it, it comes on by default > when you enable the gateway. > > All I want to do is route several specific IP's from eth0 to ppp0. > Is routing tables the wrong approach. Should I be reading the firewall howto > instead? > And, of course, it's > route add -host 10.0.0.150 dev ppp0 > > It's a bit confusing, because eth1 to adsl modem is on 10.0.0.0, and the lan on > the end of ppp0 is also on 10.0.0.0. Yeah I thought that was particularly ugly too. It would only affect LAN users ability to access the ADSL router (eg it's web config interface). You can probably configure the ADSL router to give a different subnet... maybe 192.168.10.0/255.255.255.0 would be better - note the subnet is reduced to 256 addresses so it won't conflict with your 192.168.0.0 subnet and also will eliminate the double route for 10.0.0.0 network. Alternately if you've got time to fiddle without users hassling you, maybe select bridge mode for the ADSL box and have the public IP on eth1 of your e-smith box. This will avoid double-nat for internet bound packets and help if/when you decide to make any SME services publicly accessable. On the possible downside, the responsibility of firewalling now belongs to the SME server and you. -- -- Electronic Hobbyist, Former Arcadia BBS nut, Occasional nudist, Linux Guru, SLUG Secretary, AUUG and Linux Australia member, Sydney Flashmobber, BMX rider, Walker, Raver & rave music lover, Big kid that refuses to grow up. I'd make a good family pet, take me home today! Do people actually read these things? -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] add route to ppp0
On Fri, 2 Apr 2004, Amanda wrote: > I'm setting up an SME server as server & gateway. It has 2 ethernet > cards, eth0 (192.168.0.210)to the local network, eth1 (10.0.0.3)to the > adsl modem (10.0.0.1). > > >From a machine on the Lan, I can access the internet just fine. > > On the SME server, I'm running pptp client to establish a tunnel into the > company's Windows 2000 VPN server. This also works fine. (I'm running rsync & > mysql replication over it). > > How do I add a route so local users on the lan can see machines on the lan at > head office. I can see them just fine from the SME server. > > route add -net 10.0.0.150 netmask 255.255.255.255 dev ppp0 > > 10.0.0.150 being an intranet web server on the company's lan. This is the > machine I'm rsyncing & replicating against. > > I can ping 10.0.0.150 from the SME server, but not from my machine on the Lan. OK sounds like it might be a NAT problem. IE workstation IP's are being NAT'ed for the internet regardless of destination. If that's the case then tightening up the rules to be more specific will help. eg iptables -t nat -A POSTROUTING -o eth1 -d ! 10.0.0.0/24 -j MASQUERADE AND/OR it could be the lack of NAT and therefore the lack of a return path from the corporate LAN. IE packets get from 192.168.0.x to 10.0.0.150 but can't get back. The server works because effectively the pptp server endpoint has proxy-arp'ed it (whatever that translates to in Windows speak). iptables -t nat -A POSTROUTING -o ppp0 -d 10.0.0.0/24 -j MASQUERADE or probably just iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE In each case this stuff should be added to the templates to preserve after reboot. /etc/e-smith/templates-custom/etc/init.d/firewall/ or something like that from memory, then /sbin/e-smith/expand-templates /etc/init.d/firewall (again from memory). -- -- Electronic Hobbyist, Former Arcadia BBS nut, Occasional nudist, Linux Guru, SLUG Secretary, AUUG and Linux Australia member, Sydney Flashmobber, BMX rider, Walker, Raver & rave music lover, Big kid that refuses to grow up. I'd make a good family pet, take me home today! Do people actually read these things? -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Squirrelmail Q
On Fri, 2 Apr 2004 [EMAIL PROTECTED] wrote: > as the squirrelmail.org seems to be down, perhaps someone here can help me > out: > > - is there a plug in to use Squirrelmail to retrive email from a remote > pop server ? If squirrelmail doesen't have one itself, fetchmail will do the job. > > - can SM be used to retrive email from hotmail account ? I did have a client that apparently had a web screen scraping tool to pickup hotmail mail. There's no convenient pop/imap/uucp access method as far as I know. The screen scraping method would be very sensitive to updates of the site's layout and would need to be kept up-to-date. Essentially it's a targeted web robot. -- -- Electronic Hobbyist, Former Arcadia BBS nut, Occasional nudist, Linux Guru, SLUG Secretary, AUUG and Linux Australia member, Sydney Flashmobber, BMX rider, Walker, Raver & rave music lover, Big kid that refuses to grow up. I'd make a good family pet, take me home today! Do people actually read these things? -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Re: [Linux-aus] [Fwd: LINUX Consultants needed.]
...snip...
> Yep, but it wasn't a fake. I rang up about it and it was an actual position.
And you know the name of the company for whom it is for?
These days, until I know the company whom it is for, they are all fake
in my books. Just a tad cynical {:-).
Good luck.
--
Terry Collins {:-)}}} email: terryc at woa.com.au www:
http://www.woa.com.au
Wombat Outdoor Adventures
"People without trees are like fish without clean water"
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Re: [Linux-aus] [Fwd: LINUX Consultants needed.]
On Mon, 05 Apr 2004 23:07:26 +1000 Terry Collins <[EMAIL PROTECTED]> wrote: > Probably the same as the Genesis IT one. Did anyone else receive that? Yep, but it wasn't a fake. I rang up about it and it was an actual position. > Seems like the slug list is being scammed for email addresses if that is > the case. Sounds about right. Lindsay -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Re: [Linux-aus] [Fwd: LINUX Consultants needed.]
Ryan Verner wrote:
>
> On 04/04/2004, at 7:52 PM, Pia Smith wrote:
>
> > Hi all,
> >
> > Please see below :) looks good.
>
> Hmm, I received this same email through several email accounts a few
> weeks ago. I just discounted it as spam.
>
> Is it legitimate?
If that is the case, then it is just spam.
Probably the same as the Genesis IT one. Did anyone else receive that?
The one that Pia forwarded sounded like many other positions that I read
about in the past. Just swap linux for ms server or similar.
Seems like the slug list is being scammed for email addresses if that is
the case.
--
Terry Collins {:-)}}} email: terryc at woa.com.au www:
http://www.woa.com.au
Wombat Outdoor Adventures
"People without trees are like fish without clean water"
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Re: [Linux-aus] [Fwd: LINUX Consultants needed.]
On 04/04/2004, at 7:52 PM, Pia Smith wrote: Hi all, Please see below :) looks good. Hmm, I received this same email through several email accounts a few weeks ago. I just discounted it as spam. Is it legitimate? r -- Signature space for rent. -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
[SLUG] Update - March
Hi all, We have decided to do monthly updates rather than by the meeting. We do a lot that happens outside the meetings and wanted to encapsulate all activities for your reading pleasure :) Linux Australia has been incredibly active this last month. We got a Press statement out about the FTA with some summary papers (http://linux.org.au/press/ and http://linux.org.au/papers/) and have just completed a draft Whitepaper (http://linux.org.au/papers/) on the subject. We are planning on submitting this to the Government Committees looking into the FTA so as to hopefully make a difference. Why? To protect our current freedoms to create and use software in this country, especially Open Source. Read the papers for more. We have a "What you can do" paper coming out in the next few days, and will be having a petition to help support the stance, so keep an eye out! Many thanks to Rusty for all his excellent work on this! I spoke at the Open Source Forum 2004 in Sydney a week ago, which was mainly a government gig. It was quite interesting (apart from some pretty blatant sales push talks), and I spoke about the community, who we are, why we are important, and some of the challenges and opportunities facing opensource at the moment. My slides can be found at http://linux.org.au/papers/200403-osf.sxi and http://linux.org.au/papers/200403-osf.pdf. I also touched on the FTA stuff for interests sake, sparking a good discussion. I was a bit cheeky and put up an Onion article where MS patents the numbers 0 and 1 to protect their business. It got the point across ;) We have had two meeting recently with the OSEG crew. Check out what they are up to at opensource.org.au/oseg/. OSEG is basically working on some policy and FAQ stuff, and on getting itself set up for future advisory roles. We have met with NOIE/AGIMO, AUUG, ACS and OSIA recently. We are trying to help government get information about Open Source. It is possible that we need to set up some sort of group/task force specifically to deal with government. This group should have some representation from the different Open Source groups in Aus, but more importantly, should have people that have interest and expertise in dealing with government at this level. This group would have no other function but to deal with gov, allowing the rest of us to get on with our duty directly to the community :) We need to focus our interactions with the government to a well prepared and groomed team used to their ways, rather than every man and his dog :) Especially if we want to have a lasting _postitive_ effect. The idea of merging has been floated again. We would like to get some idea on what people think about this. We tend to like having a diverse atmosphere, one with choice and different flavours, however this discussion needs to be brought out into public debate for a more thorough appraisal. The Press team has several people now, and we are organising some training for them to assure a kick-ass Press team. We have chatted to several groups for advice on direction and professionalism, and are well on the way. We have been organising the support and delegate run for the LCA2005 team. Opensource.org.au is almost finished. It has a fair bit of information up and is looking pretty good (Thanks Michael D!). Linux.org.au is on the way now. We have a Site structure and a potential new design that everyone loves. We should hopefully have the new site done within 1-2 months, with new look, easier navigation, and more information and references. What else? The March minutes aren't up yet however should be soon, so check them out. Stewart Smith, our VP is speaking at LUV this month. ATO and several other government agencies are looking at Open Source. Mailman will be fixed soon and so will our mail issues :) So much so that we need to ensure that the place of the community is put very firmly in the picture. Cheers, Pia -- Pia Smith <[EMAIL PROTECTED]> Linux Australia -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
Re: [SLUG] Debian Woody + 2.6.4 kernel = lots of broken bits
Hi I have done the same thing but used the testing kernel-2.6.4 and only need the updated hotplug deb. But the other trick is/was that 2.6 doesn't use /etc/modutils but /etc/modprobe.d The only thing I haven't got working is my pctel winmodem Alex On Mon, Apr 05, 2004 at 01:20:33PM +1000, James Gray wrote: > On Mon, 5 Apr 2004 12:20 pm, Billy Kwong wrote: > > James, > > > > > Hi All, > > > > > > Anyone know a good resource for upgrading a woody box to the 2.6.x > > > kernels? > > > > > > I installed a backported 2.6.4 (from backports.org) and now a bunch of > > > stuff is either broken fatally or throwing errors. > > > > > > The /etc/init.d/networking script wont work - ifup and dhclient both > > > complain about the kernel version and refuse to work. "pump" is ok > > > though. > > > > As Steve would have said, check your module names. > > The module is still the same (8139too) but the dhclient complains about > "unrecognized kernel version" and wont get a DHCP lease. But like I said > earlier, "pump eth0" does the tricknow to rewrite the init scripts I > guess (or is there a way to switch to pump without needing to get down and > dirty with the networking subsystem/scripts??) > > > > The nfs stuff complains that "mount" is older than the kernel. > > > > I have that even under unstable. :( > > Grrr - you'd think an updated "mount" could be compiledbut that's > probably over-simplifying it. > > > > There's other weirdness happening with my firewire and USB stuff too. > > > > Check the names of your USB host modules. It's called [enu]hci-hcd in the > > 2.6 kernels. I guess it's similar for Firewire. > > Ah - that explains it :) Fixed that bit now - thanks. > > > I'm now running 2.6 kernels on unstable boxes, couldn't be happier. :) > > Yeh, I'm thinking I might rebuild this machine with Unstable/Sarge - I need > more recent stuff anyway. > > James > -- > Fortune cookies says: > "If I ever get around to writing that language depompisifier, it will change > almost all occurences of the word "paradigm" into "example" or "model." > -- Herbie Blashtfalt > -- > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html > signature.asc Description: Digital signature -- SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/ Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
