Re: two ethernet without routing

2002-03-13 Thread Stephane Bortzmeyer
On Wed, Mar 13, 2002 at 11:27:31AM +0100, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote a message of 18 lines which said: How can I deactivate the routing option betwen cards? /etc/network/options: ip_forward=no Check with 'cat /proc/sys/net/ipv4/ip_forward'. There have to be some kind of

Re: two ethernet without routing

2002-03-13 Thread jsalord
Well, there some kind of routing even: /etc/network/options: ip_forward=no was already done. cat /proc/sys/net/ipv4/ip_forward returns 0 My inerfaces file: iface eth0 inet static address 192.168.1.27 netmask 255.255.255.0 network 192.168.1.0 broadcast

Re: two ethernet without routing

2002-03-13 Thread Jean-Marc V. Liotier
On Wed, 2002-03-13 at 11:27, [EMAIL PROTECTED] wrote: There have to be some kind of routing now because I can connect to my apache typing the two IPs even I've just one cable connected to eth0. You have to explicitely block and log spoof attempts. For example, if you have eth0 on

Re: two ethernet without routing

2002-03-13 Thread Russell Coker
On Wed, 13 Mar 2002 12:56, Bart-Jan Vrielink wrote: This behaviour is not routing. The server is not 'moving' a packet from one subnet to the other subnet. It is only just listening for every ip it knows on every interface. Use a firewall on the server to block unwanted connections (or

Re: Debian testing suitable for productive?

2002-03-13 Thread Patrick Hsieh
Hello Martin WHEELER [EMAIL PROTECTED], Sometimes, you know, there'll be security advisory or update packages available, say openssh or libzip, and you need to immediately update your production machines to aviod known vulnerability. However, you can't just apt-get upgrade if you do not run the

Re: Debian testing suitable for productive?

2002-03-13 Thread Martin WHEELER
On Wed, 13 Mar 2002, Patrick Hsieh wrote: Sometimes, you know, there'll be security advisory or update packages available, say openssh or libzip, and you need to immediately update your production machines to aviod known vulnerability. However, you can't just apt-get upgrade if you do not

Cistron-Radius Users

2002-03-13 Thread Alex Borges
Hi, Ive a client that wants to choos his radius platform. Despite my say that its not that important and that a cistron/debian/Big Baad carrier class hardware radius would more than take care of him (c'mon...its like 2000 users tops!), he still wants the lucent navis thingie. cant blame him,

ISP Standard.

2002-03-13 Thread Andres Junge Mac-Evoy
Hello: Is there any standard, for hosting domains? For example i´m using this sort of configuration: Every domain has his own home dir (/home/dominio/example.com). So every domain have a username (example.com) with the above home dir. In each domain-dir there is also a data dir where i put the

Re: Securing MySQL

2002-03-13 Thread Fabrizio Tivano
On Tuesday 12 March 2002 09:49, Craigsc wrote: Hi Guys Does anyone know where I can get some good comprehensive documentation on how to secure MySQL running on a Web server. Might be something worthwhile to add to the Securing Debian Howto. Thanks Craig :) Hi Craig, ...there is

Re: best way to keep web servers in sync

2002-03-13 Thread Lance Levsen
We use ssh - cvs - perl - ssh - perl for this. User commits a change to cvs, the loginfo process execs a perl script that itself ssh exec's a remote program to cd to the appropriate dir and cvs update the module. The advantage is that the live web tree only needs one user with write access

Re: ISP Standard.

2002-03-13 Thread Jeremy C. Reed
On Thu, 14 Mar 2002, Andres Junge Mac-Evoy wrote: Maybe we can discuss some configuration for domain hosting and propose a standard, so we can build isp-software (billing, provisioning, etc) based on this. What do you think? I think that the various software should allow customizations so

Re: two ethernet without routing

2002-03-13 Thread Jeremy C. Reed
On Wed, 13 Mar 2002, Russell Coker wrote: On Wed, 13 Mar 2002 12:56, Bart-Jan Vrielink wrote: This behaviour is not routing. The server is not 'moving' a packet from one subnet to the other subnet. It is only just listening for every ip it knows on every interface. Use a firewall on

Re: Bandwidth control on FTP

2002-03-13 Thread A . Ramos
Hello, Try to install glftpd (www.glftpd.com) it's very configurable for your bandwith usage -- A. Ramos: [EMAIL PROTECTED] Admin Sistemas, PrisaCOM Telf: 91.353.7930 Edificio Apot, 5a planta 28042 Madrid. -- -- To UNSUBSCRIBE, email to

Re: two ethernet without routing

2002-03-13 Thread Jeremy C. Reed
On Wed, 13 Mar 2002, Stephane Bortzmeyer wrote: On Wed, Mar 13, 2002 at 10:38:53AM -0800, Jeremy C. Reed [EMAIL PROTECTED] wrote a message of 37 lines which said: You shouldn't have to setup a firewall as a workaround either. If your NIC card is configured for a particular IP and you