Re: users bypassing shaper limitation

2001-07-01 Thread Sami Haahtinen
On Sat, Jun 30, 2001 at 12:07:28PM +0100, Karl E. Jorgensen wrote: On Sat, Jun 30, 2001 at 06:23:19AM +0200, Maurice Verhagen wrote: This first that pops into mind is use DHCP and give a IP-lease to the machines in your local network based on the NIC's Mac address. I guess the only way out

Re: users bypassing shaper limitation

2001-07-01 Thread Gerard MacNeil
On Sun, 1 Jul 2001 14:30:33 +0300, [EMAIL PROTECTED] (Sami Haahtinen) wrote: On Sat, Jun 30, 2001 at 12:07:28PM +0100, Karl E. Jorgensen wrote: Besides, the bad guys may choose not to use DHCP - this is entirely up to the config on the client machines. but if you make dynamic firewall

Re: MTA - MLM - DNS configuration question

2001-07-01 Thread Haim Dimermanas
RC It is definately possible. It makes sense to me, this is what RC MX records were designed for! I agree but, this is also what name server delegation is designed for! And this is THE way to go in your case. Let's say you put the mailing list software on the web server. The

RE: users bypassing shaper limitation

2001-07-01 Thread Jeff S Wheeler
I have been reading this thread and noticed no one has suggested the MAC address filtering capabilities in Linux 2.4's new ip tables subsystem. I hear there are serious problems with using 2.4.x series kernels as a firewall, though; what are they? - jsw -Original Message- From: Gerard

Re: Apache - SIGSEGV but no core dumps.

2001-07-01 Thread Przemyslaw Wegrzyn
On Sat, 30 Jun 2001, Russell Coker wrote: I use Apache 1.3.19 + php4.0.5 from Woody in chrooted enviroment. My problem is actually I can't force Apache to drop core files. I've added ulimit -c unlimited to /etc/init.d/apache, and set CoreDumpDirectory to some world writeable dir.

Re: users bypassing shaper limitation

2001-07-01 Thread Peter Billson
I have been reading this thread and noticed no one has suggested the MAC address filtering capabilities in Linux 2.4's new ip tables subsystem. I hear there are serious problems with using 2.4.x series kernels as a firewall, though; what are they? I believe the 2.4.x iptable issues were

Re: users bypassing shaper limitation

2001-07-01 Thread Karl E. Jorgensen
On Sat, Jun 30, 2001 at 06:23:19AM +0200, Maurice Verhagen wrote: On Fri, 29 Jun 2001, anon wrote: my problem is that some local users are changing their own local ip numbers (like, 192.168.1.40 to 192.168.1.50) then bypassing the Traffic shaper bandwidth limitation. (that was set on

Re: users bypassing shaper limitation

2001-07-01 Thread Chris Wagner
My first choice is also what the other Chris said, use a large LART on the offending [computer|user]. You can use smart switches to base the ip on pre-authorized MAC addresses. That way you are effectivly shaping based on MAC address. But in true hacker form, even that can be overcome. Some

Re: users bypassing shaper limitation

2001-07-01 Thread Sami Haahtinen
On Sat, Jun 30, 2001 at 12:07:28PM +0100, Karl E. Jorgensen wrote: On Sat, Jun 30, 2001 at 06:23:19AM +0200, Maurice Verhagen wrote: This first that pops into mind is use DHCP and give a IP-lease to the machines in your local network based on the NIC's Mac address. I guess the only way out

Re: users bypassing shaper limitation

2001-07-01 Thread Gerard MacNeil
On Sun, 1 Jul 2001 14:30:33 +0300, [EMAIL PROTECTED] (Sami Haahtinen) wrote: On Sat, Jun 30, 2001 at 12:07:28PM +0100, Karl E. Jorgensen wrote: Besides, the bad guys may choose not to use DHCP - this is entirely up to the config on the client machines. but if you make dynamic firewall

Re: MTA - MLM - DNS configuration question

2001-07-01 Thread Haim Dimermanas
RC It is definately possible. It makes sense to me, this is what RC MX records were designed for! I agree but, this is also what name server delegation is designed for! And this is THE way to go in your case. Let's say you put the mailing list software on the web server. The CPU

Multiple DSL lines + iproute + squid ...

2001-07-01 Thread Scott Kveton
Hello all, I'm working on a problem that seems like it should work and am looking for some help knocking out any obvious problems. We currently have several DSL lines that are used for crawling websites. Bandwidth as it is is pretty cheap via DSL (we have 6 7Mbit lines for much less than an

RE: users bypassing shaper limitation

2001-07-01 Thread Jeff S Wheeler
I have been reading this thread and noticed no one has suggested the MAC address filtering capabilities in Linux 2.4's new ip tables subsystem. I hear there are serious problems with using 2.4.x series kernels as a firewall, though; what are they? - jsw -Original Message- From: Gerard

Re: users bypassing shaper limitation

2001-07-01 Thread Peter Billson
I have been reading this thread and noticed no one has suggested the MAC address filtering capabilities in Linux 2.4's new ip tables subsystem. I hear there are serious problems with using 2.4.x series kernels as a firewall, though; what are they? I believe the 2.4.x iptable issues were