Re: [Leaf-user] Silent_Deny by destination address ???

2001-12-10 Thread guitarlynn
On Monday 10 December 2001 00:51, you wrote: > Depending on the service provider the 10.x.x.x addresses could > simply be the modems (as that is the usual IP scheme for @home > modems - not nics) going through misconifgured ISP routers or > something like that if it seems to be a problem for lots

Re: [Leaf-user] What is This

2001-12-10 Thread Patrick Benson
"Sean E. Covel" wrote: > > Is this what they call FireWalking? This is my welcome to the new ATTBI > network. Got more of these than Nimda or Code Red hits. Goes on for > pages. 1888 today. Any thoughts? Firewalk uses a traceroute method with UDP and ICMP pings, gathering information of the

Re: [Leaf-user] What is This

2001-12-10 Thread Patrick Benson
"Sean E. Covel" wrote: > > Victor, > > I believe you are correct. After reading the banter going back and > forth, and recalling previous posts (about that DAMN X10 popup) I > reviewed my log. The log entries are bursts of hundreds in the same few > seconds. Must have been while I was on MyYa

Re: [Leaf-user] SYN packets

2001-12-10 Thread Matt Schalit
Matt Schalit wrote: > > Is there a way to deny any and all SYN packets altogether? > > ipchains -A input -j DENY -i eth0 -p tcp ! -y -l Very bad. Very bad. Very, very bad. ^^^You wanted to deny packets with SYN, and I posted how to deny packets *without* SYN. The following does wha

Re: [Leaf-user] What is This

2001-12-10 Thread Matt Schalit
Victor McAllisteer wrote: > > Matthew Schalit wrote: > > > Victor McAllisteer wrote: > > > > > > > > This is some crazy method of geographic load balancing. A whole lot of > > > boxes use TCP port 53 simultaneously to find out what part of the world. > > > > Victor, wouldn't the load balancing

[Leaf-user] No masquerade access to private DMZ

2001-12-10 Thread Matt Brennan
Dear List, Using E2B with Extended Scripts, I have an email server sitting in a private address DMZ (172.20.x.x) with two internal networks (192.168.x.y). Connections from the internal network to an SMTP server in the DMZ are masqueraded so they look like connections from the firewall

[Leaf-user] newbie question on ipchains in dachstein cd 1.2

2001-12-10 Thread Jim Van Eeckhoutte
Where do I add, change, or open ports? I see no ipchains.input/.output in /etc. Ive been to the ipchains man an understand the syntax now I need help inputting in to dachstein. Isnt this Exciting

Re: [Leaf-user] newbie question on ipchains in dachstein cd 1.2

2001-12-10 Thread Charles Steinkuehler
> Where do I add, change, or open ports? I see no ipchains.input/.output > in /etc. Ive been to the ipchains man an understand the syntax now I > need help inputting in to dachstein. Isnt this Exciting Start with the settings in /etc/network.conf. You can do most of the 'usually required' things

Re: [Leaf-user] No masquerade access to private DMZ

2001-12-10 Thread Charles Steinkuehler
> Using E2B with Extended Scripts, I have an email server sitting in a > private address DMZ (172.20.x.x) with two internal networks > (192.168.x.y). Connections from the internal network to an SMTP server > in the DMZ are masqueraded so they look like connections from the > firewall address on th

Re: [Leaf-user] Silent_Deny by destination address ???

2001-12-10 Thread Charles Steinkuehler
> 255.255.255.255 is most likely an Class A DHCP request. For some > strange reason, since @HOME has been having random outages, > reports of tons of these requests have been made all over. Funny > thing is the bulk of the ones I've been getting are from a private > class 10.6.1.x address. I just

Re: [Leaf-user] Silent_Deny by destination address ???

2001-12-10 Thread Charles Steinkuehler
> This entry in /etc/ipchains.input appears to do as I need: > > $IPCH -I input -j DENY -p all -s 0/0 -d 255.255.255.255 -i $EXTERN_IF > > One thing that concerns me is this statement from man ipchains: > > ``The mask can be either a network mask or a plain number, specifying > the number of 1's a

[Leaf-user] Very Minor Bug in Eigerstein and Dachstein

2001-12-10 Thread Rodney Barnett
This might properly be a bug in POSIXness, but I use Eigerstein and Dachstein and I don't know who's changed what. Anyway, the minor problem is that the first line of the mount.back() function in /bin/grep in Eigerstein and in /lib/POSIXness/POSIXness.linuxrouter is dev = "" rather than d

Re: [Leaf-user] Very Minor Bug in Eigerstein and Dachstein

2001-12-10 Thread Charles Steinkuehler
> This might properly be a bug in POSIXness, but I use Eigerstein and > Dachstein and I don't know who's changed what. > > Anyway, the minor problem is that the first line of the mount.back() > function in /bin/grep in Eigerstein and in > /lib/POSIXness/POSIXness.linuxrouter is > dev = "" > ra

[Leaf-user] Dachstein CD from a floppy

2001-12-10 Thread Prabhakar Chaganti
All: I am using the Dachstein floppy image based on the 2.4 kernel and the openssh lrp packages created by jacques nilo. I have only one floppy drive and am using a 1680 KB floppyy disk. The openssh packages are installed into the ramdisk. I cannot back them up onto the floppy due to lack of

Re: [Leaf-user] Dachstein CD from a floppy

2001-12-10 Thread Charles Steinkuehler
> I am using the Dachstein floppy image based on the 2.4 kernel and > the openssh lrp packages created by jacques nilo. I have only one > floppy drive and am using a 1680 KB floppyy disk. The openssh > packages are installed into the ramdisk. I cannot back them up onto > the floppy due to lack

[Leaf-user] stealth

2001-12-10 Thread Bartosz Oudekerk
Hi, I've been using LRP 2.9.8 (2.0 kernel) for some time now, and I like it very much. So I'm not a total newbie where LRP is concerned but I am to firewall-scripting (my current one was written by a friend of mine). There's just the little problem that I want my router/firewall to run stealth.

[Leaf-user] compiling apps for E2B - glibc-2.0

2001-12-10 Thread k . semande
Hey All, I am trying to get a program called EZ-Ipupdate running on my router, which will automatically update the dns record pointing to my LAN whenever the external IP address changes. Once finished, this might help those who have concerns about keeping a fixed IP address over an adsl connecti

Re: [Leaf-user] compiling apps for E2B - glibc-2.0

2001-12-10 Thread Etienne Charlier
Hi, Compilation already done but it's not the latest version ... http://leaf.sourceforge.net/devel/sboulter/ Regards Etienne - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 10, 2001 8:34 PM Subject: [Leaf-user] compiling apps for E2B - glib

Re: [Leaf-user] compiling apps for E2B - glibc-2.0

2001-12-10 Thread David Douthitt
[EMAIL PROTECTED] wrote: > Can someone provide advice on accomplishing this? I made the original > floppy from a precompiled image, and added some modules from Oxygen. I > could download the kernel source, or just the proper version of glibc (it > might already be on my machine, but I'm not at

[Leaf-user] eepro100.o module troubles...(HD install)

2001-12-10 Thread Adrian Stovall
Hi all, I've managed to get my linux router to boot from a hard drive in a Dell Powerapp Web 100 (IDE, simpler than SCSI). This machine has dual on-board EtherExpress Pro 100's, which come up just fine using the floppy I made with Coyote. My problem comes into play when changing things to boot fr

[Leaf-user] Still unable to run Dachstein

2001-12-10 Thread Vince Schiller
I've tried to run both Eigerstein and Dachstein unsuccessfully. I have a PII 233 MMX processor on a generic motherboard with 32 Meg of RAM and 2 Linksys LNE 100tx Nics. I must be overlooking something. I first attempted to run Eiger. Apparently the tulip driver wasn't current enough and my NICs

Re: [Leaf-user] Still unable to run Dachstein

2001-12-10 Thread Etienne Charlier
Hi, Did you make sure the module pci-scan was loaded BEFORE the tulip driver ? Regards Etienne - Original Message - From: "Vince Schiller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, December 10, 2001 11:16 PM Subject: [Leaf-user] Still unable to run Dachstein > I've trie

Re: [Leaf-user] Still unable to run Dachstein

2001-12-10 Thread David Douthitt
Vince Schiller wrote: > I then attempted Oxygen. My machine seemed to register some key stroke > input that made it difficult to even get it to boot. Then I did not > understand how to configure my machine (yes I am a Linux newbie), but again > there seemed to be a problem with dhcp and my NICs

Re: [Leaf-user] What is This

2001-12-10 Thread David Douthitt
Patrick Benson wrote: > Firewalk uses a traceroute method with UDP and ICMP pings, gathering > information of the network and hosts(s) with the TTL fields, very > interesting, indeed...: > > http://www.packetfactory.net/Projects/Firewalk/firewalk-final.html Been a package for quite a while: ht

Re: [Leaf-user] eepro100.o module troubles...(HD install)

2001-12-10 Thread Charles Steinkuehler
> I can still boot, but now when the network moduled try to load, I get > > eepro100 - /lib/modules/eepro100.o: unresolved symbol acpi_set_pwr_state > /lib/modules/eepro100.o: unresolved symbol pci_drv_unregister > /lib/modules/eepro100.o: unresolved symbol pci_drv_register > > Anybody have any po

[Leaf-user] bluefx.com mirror of lrp.steinkuehler.net

2001-12-10 Thread Bryan T. Schmidt
Charles, comrades: I am no longer able to maintain sufficient resources for the mirror of lrp.steinkuehler.net found on my web site at lrp.bluefx.com . I have had trouble with my SDSL provider, and can no longer provide a reliable mirror. As such, I would like people to be aware that it has

[Leaf-user] Re: bluefx.com mirror of lrp.steinkuehler.net

2001-12-10 Thread Charles Steinkuehler
> I am no longer able to maintain sufficient resources for the mirror of > lrp.steinkuehler.net found on my web site at > lrp.bluefx.com . > > I have had trouble with my SDSL provider, and can no longer provide a > reliable mirror. As such, I would like people to be aware that it has > gone away

Re: [Leaf-user] What is This

2001-12-10 Thread Patrick Benson
David Douthitt wrote: > Been a package for quite a while: > > http://leaf.sourceforge.net/pub/oxygen/packages/firewalk.lrp > > ...have at it... Hey, thanks for the reminder! :-) Do you need an extra lib* package for that if one is running Dachstein? -- Patrick Benson Stockholm, Sweden _

Re: [Leaf-user] Still unable to run Dachstein

2001-12-10 Thread Dr. Richard W. Tibbs
I had the same problem (t:t:t:t:) at the boot prompt with the latest oxygen release loading on a Gateway 2000 pentium-1 machine. A serial port (actually two) are certainly present on the Gateway -- so no serial port present shouldn't be the issue, unless having two of them causes no serial port to

[Leaf-user] uninstall option for lrpkg

2001-12-10 Thread Mike Branco
Running dachstein RC2 floppy version: I'm try to add an uninstall option into lrpkg.   I've added this code to /lib/POSIXness/POSIXness.linuxrouter in the lrpkg() function. #    uninstall () {    f="$1"    FN_LIST="$(cat $lrpkgpath/$f.list)" 

[Leaf-user] where s that comming from???

2001-12-10 Thread Jim Van Eeckhoutte
This was flooding my logs. Any ideas? My internal is 192.168.6.0/24 and external is 24.x.x.x   Dec 10 21:43:06 LRP kernel: Packet log: input DENY eth0 PROTO=17 192.168.0.1:21157 255.255.255.255:21157 L=126 S=0x00 I= F=0x T=128 (#10)

RE: [Leaf-user] where s that comming from???

2001-12-10 Thread Richard Doyle
http://www.networkice.com/advice/Exploits/Ports/21157/default.ht m says that port 21157 is used by the Activision gaming protocol (UDP). The source IP, 192.168.0.1 is odd; are you connected to a cable modem, or a university or some other large network? -Richard -Original Message- This w

[Leaf-user] 3Com PCI 3c905-tx

2001-12-10 Thread Reginald R. Richardson
Title: 3Com PCI 3c905-tx Does anyone know where I can find driver for a 3Com PCI 3c905-tx, or what compatable driver I can use...for DachStein Thnks reggie

Re: [Leaf-user] uninstall option for lrpkg

2001-12-10 Thread Matt Schalit
> Mike Branco wrote: > > Running dachstein RC2 floppy version: > I'm try to add an uninstall option into lrpkg. Here's what David does with Oxygen. It has the -r option for removing a package that's been installed. remove () { cd $PKGD [ ! -f $1.list ] && err "no package! ($1

Re: [Leaf-user] eepro100.o module troubles...(HD install)

2001-12-10 Thread Matt Schalit
Adrian Stovall wrote: > I can still boot, but now when the network moduled try to load, I get > > eepro100 - /lib/modules/eepro100.o: unresolved symbol acpi_set_pwr_state > /lib/modules/eepro100.o: unresolved symbol pci_drv_unregister > /lib/modules/eepro100.o: unresolved symbol pci_drv_register

Re: [Leaf-user] Still unable to run Dachstein

2001-12-10 Thread Matt Schalit
Etienne Charlier wrote: > > Hi, > > Did you make sure the module pci-scan was loaded BEFORE the tulip driver ? > > Regards > Etienne I agree here with the pci-scan loading before the nic module(s) and that Dachstein is the simplest and most surefire release to get you up an running with little

Re: [Leaf-user] 3Com PCI 3c905-tx

2001-12-10 Thread Robert Chambers
Title: 3Com PCI 3c905-tx Try Charles site http://www.lrp.steinkuehler.net.  If not there then try Donald Beckers site http://www.scyld.com, but if you find it on Donald's site you will need to compile it for your kernel version.  If you find it on Charles site, it may already be compiled for Dac

RE: [Leaf-user] 3Com PCI 3c905-tx

2001-12-10 Thread Kevin Kropf
Try: http://leaf.sourceforge.net/devel/cstein/files/kernels/Dachstein-normal/modu les/net/3c59x.o Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Reginald R. Richardson Sent: Monday, December 10, 2001 10:27 PM To: Mailing List __Leaf ([EMAIL PROTEC

RE: [Leaf-user] newbie question on ipchains in dachstein cd 1.2

2001-12-10 Thread Jim Van Eeckhoutte
Very useful info Charles but I want to open msnmessenger file transfer tcp ports 6891:6900 and open ldap port 389 for dns active integrated zone transfer. (ports in and out and all forwarded to appropriate machines) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On