[Leaf-user] Re: multi ip port forwarding (to:bela)

2002-01-21 Thread GREGOR
hi all, >Ray Olszewski writes: > they both resolve, as follows: > > inf.uajy.ac.id = 202.149.81.61 > mail.uajy.ac.id = 202.149.81.55 yes it's true. > collier:/usr/src/linux# host 202.149.81.61 > 202.149.81.61 does not exist, try again > collier:/usr/src/linux# host 202.149.

RE: [Leaf-user] @home to Cox conversion problems

2002-01-21 Thread Jon Pike
"boot up again in Win98 and run "winipcfg" as Michael suggested. Make not of the default gateway on you NIC. Before closing "winipcfg", you _must_ "Release all" then shutdown Win98. Boot up Dachstein and enter the default gateway you found in "winipcfg" to the line in network.conf that reads "DEF

Re: [Leaf-user] PPP(oE) standards/Updating port forwarding with dynamic IP CORRECTION

2002-01-21 Thread Tom Atwater
--- Tom Atwater <[EMAIL PROTECTED]> wrote: > then check 'ipmasq portfw -nl` to see if the port fw IP That should be ipmasqadm portfw -nl = Tom Atwater tomath2o.yahoo.com __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! http://promo.

Re: [Leaf-user] PPP(oE) standards/Updating port forwarding with dynamic IP **SUCCESS**

2002-01-21 Thread Tom Atwater
--- "David B. Cook" <[EMAIL PROTECTED]> wrote: > Well, to test the theory, I modified one of my port forwards and ran the > "svi network ipfilter reload" and it indeed reloaded the filters > correctly as viewed from the web applet. Thanks Eric/Ewald. > (Backup /etc for this). > > So, I put the

Re: [Leaf-user] PPP(oE) standards

2002-01-21 Thread David B. Cook
Well, to test the theory, I modified one of my port forwards and ran the "svi network ipfileter reload" and it indeed reloaded the filters correctly as viewed from the web applet. Thanks Eric/Ewald. (Backup /etc for this). So, I put the "svi network ipfilter reload" into the /etc/ppp/ip-up file

Re: [Leaf-user] PPP(oE) standards

2002-01-21 Thread David B. Cook
Sorry ... brain fade ... I'm running Dachstein. On Mon, 21 Jan 2002, Eric Wolzak wrote: > > David B. Cook wrote: > > > > >Does PPP have it in its specs to renegotiate an IP like DHCP does? Or are > > >they forcing a renegotiation by dropping your connection? > > > > > >Does this mean that so

[Leaf-user] Dachstein (floppy) passing IPSec ...

2002-01-21 Thread Michael Leone
I'm using Dachstein (floppy). I'd like to use the Cisco Secure client, on a Win98 station on my LAN, to connect to my Pix at work. I do NOT want the Dachstein to be one end of the IPSec tunnel; only to pass the IPSec traffic to my (NATed) workstation. (eventually, when I get the 3DES license for m

Re: [Leaf-user] glibc & pppoe...

2002-01-21 Thread KP Kirchdörfer
Am Sonntag, 20. Januar 2002 20:11 schrieb Nicolas Riendeau: > Kim Oppalfens wrote: > > Yups on http://leaf.sourceforge.net somebody is distributing an > > image as "proof-of-concept" > > I just downloaded it... It SEEMS (s)he got rid libnss_dns.so.1 & > libnss_files.so.1 (which I guess are not us

Re: [Leaf-user] Keeping system date upto date

2002-01-21 Thread Patrick Benson
[EMAIL PROTECTED] wrote: > The trouble is that the routers time gets screwed up, as it doesnt seem > to get updated when it is 'sleeping'. hence the uptime command is way, > way off, and worse yet, timestamps on the logs are not accurate either! > Looking through /etc/lrp.conf, I have seen a sett

Re: [Leaf-user] IP RULE LIST

2002-01-21 Thread Charles Steinkuehler
The problem is likely the kernel options. The diskette version by default comes with a much smaller kernel, with many advanced features disabled to save space for the average user. From the kernel-source REAMDE file: The "small" kernels are missing the following features of the "normal" ker

[Leaf-user] IP RULE LIST

2002-01-21 Thread Reginald R. Richardson
Charles.. I'm playing around with the Dachstein CD version and the Diskette Version, when i issue the following commmand: ip rule list on the Diskette version, i get the following error message: RTNETLINK answers: Invalid argument Dump terminated when issued on the Cd version, i get the corre

[Leaf-user] ICQ 2001 / Sock5

2002-01-21 Thread Reginald R. Richardson
Hello all, Can someone guide to where i can find a HOW-TO, on how to configure SoCKS5 Package on Dachstein r1.02. Seems like if i use ICQ with the icq_masq, i can't do file transfer and those fancy things, i would like to try the socks package, i read somewhere in the forum that it works great, b

Re: [Leaf-user] PPP(oE) standards

2002-01-21 Thread Tom Atwater
--- Eric Wolzak <[EMAIL PROTECTED]> wrote: > > David B. Cook wrote: > > >Does this mean that something placed in /etc/ppp/ip-up.d will > > >automatically get run at that time to "fix" it? > Yes. > with rp-pppoe and with the 2.4 kernel pppoe it is both possible in > /etc/ppp/ip-up or in the /

Re: [Leaf-user] Updating port forwarding with dynamic IP

2002-01-21 Thread Tom Atwater
Hi Ewald, Thank you for your reply. --- Ewald Wasscher <[EMAIL PROTECTED]> wrote: > > There is a newer Dachstein-PPPoE package available here: > > http://leaf.sourceforge.net/devel/khadley/ I will check this out if I can't get my existing distro to work. > If you use the Eigerstein builtin

[Leaf-user] About Proftpd

2002-01-21 Thread sylvain pelletier
hi,   I want to set up proftpd but i can't found good documentation. All examples i saw are anonymous access and i don't want it. Somebody know a good link??   Thanks   Sylvain  

Re: [Leaf-user] Message log Overflow crashes EigerStein

2002-01-21 Thread Scott C. Best
Stephen: Heya. Presuming that you're using one of the Dachstein versions, you need to do 3 things to get "passthru" IPSec masquerading to work: 1. As Charles said, you need to open UDP-500 and protocol (not port) 50. 2. You need to uncomment the "ip_masq_ipsec" line in /etc/modules,

Re: [Leaf-user] many packets, different T

2002-01-21 Thread Scott C. Best
Mike: Heya. Nope, nothing's wrong with your setup; you're not seeing a bug. You really are seeing all of these deny'd packets. Someone on your cable subnet may be trying to crush you with noise, or someone from anywhere on the planet may have taken interest in your ISP's cable system. No r

Re: [Leaf-user] /devttyS0 error...

2002-01-21 Thread Brad Fritz
On Mon, 21 Jan 2002 12:19:35 CST David Goodrich wrote: > i'm attempting to run a null-modem cable from my router to my main pc to > manage my router w/o a monitor & keyboard permanently attached... so as > instructed in the serial-howto, i typed > echo "hello world" > /dev/ttyS0 > to test th

RE: [Leaf-user] /devttyS0 error...

2002-01-21 Thread Luis.F.Correia
What is the version you are using? EigerStein, DachStein, Oxygen? Please be a little more explicit. -Original Message- From: David Goodrich [mailto:[EMAIL PROTECTED]] Sent: Monday, January 21, 2002 6:20 PM To: '[EMAIL PROTECTED]' Subject: [Leaf-user] /devttyS0 error... i'm attempting

Re: [Leaf-user] PPP(oE) standards

2002-01-21 Thread Eric Wolzak
> David B. Cook wrote: > > >Does PPP have it in its specs to renegotiate an IP like DHCP does? Or are > >they forcing a renegotiation by dropping your connection? > > > >Does this mean that something placed in /etc/ppp/ip-up.d will > >automatically get run at that time to "fix" it? Yes. > The

Re: [Leaf-user] Keeping system date upto date

2002-01-21 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > sadly, my eigerBeta2 based router must operate under some Draconian > operating perameters (due to it being in the same room as where my wife > studies for exams) .. hence it must be ultra quiet. I have implemented > this by using a friends old (5+ years old!) laptop

[Leaf-user] /devttyS0 error...

2002-01-21 Thread David Goodrich
i'm attempting to run a null-modem cable from my router to my main pc to manage my router w/o a monitor & keyboard permanently attached... so as instructed in the serial-howto, i typed echo "hello world" > /dev/ttyS0 to test the serial link...it returned cannot create /dev/ttyS0: error 19

Re: [Leaf-user] Keeping system date upto date

2002-01-21 Thread Eric Wolzak
hello ssbiring > happened)... I found a setting in the BIOS to drop the laptop into > a low power state when no activity was detected. ( Yes, I know that a > router that enters sleep mode after a few minutes is indeed a sad > beast, but such is my predicament!) Lucky you , I'm using a co

Re: [Leaf-user] IPsec error in logs

2002-01-21 Thread Alec Miller
ack that was it, I was loading the masq_ipsec module when I don't need it. I am using IPSec as a gateway on the router, not a client. Thanks - Original Message - From: Charles Steinkuehler <[EMAIL PROTECTED]> To: Alec Miller <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Monday, Januar

Re: [Leaf-user] IPsec error in logs

2002-01-21 Thread Netcom
At 09:32 AM 1/21/02 -0600, Charles Steinkuehler wrote: > > Anyone know how to get rid of this error in the logs? Running IPSec 1.91 > > from Charles site on Dachstien CD 1.02. > > > > router kernel: ip_demasq_esp(): Inbound from 65.xx.xx.xx SPI EBC4FE83 has >no > > masq table entry > >Hmm...it so

RE: [Leaf-user] Keeping system date upto date

2002-01-21 Thread Sergio Morilla
Hi, This is what I have used. I could not find the url but it works on my Dachstein Floppy and CD routers About time servers, I got mine from a search for "time server" on the net Sergio From: Charles Steinkuehler <[EMAIL PROTECTED]>

[Leaf-user] Keeping system date upto date

2002-01-21 Thread ssbiring
sadly, my eigerBeta2 based router must operate under some Draconian operating perameters (due to it being in the same room as where my wife studies for exams) .. hence it must be ultra quiet. I have implemented this by using a friends old (5+ years old!) laptop with the Hard disk removed. It d

Re: [Leaf-user] VPN software

2002-01-21 Thread Charles Baker
--- Charles Steinkuehler <[EMAIL PROTECTED]> wrote: > > Does any one have recommendations for VPN software > > that works w/ Linux and Windows? > > Depends on exactly what you want to do. If you want > to use Dachstein as a > VPN gateway, you can easily setup another Dachstein > box on the far

Re: [Leaf-user] 2.2.16/tulip/build How?

2002-01-21 Thread Charles Steinkuehler
> The Dachstein tulip driver doesn't appear to support this. > I got the most recent tulip driver from the Becker website (above). > > I will attempt to build the tulip module I need from this. > Then send it to you, if you're interested. > > I would appreciate a little advice, if you have a mome

Re: [Leaf-user] IPsec error in logs

2002-01-21 Thread Charles Steinkuehler
> Anyone know how to get rid of this error in the logs? Running IPSec 1.91 > from Charles site on Dachstien CD 1.02. > > router kernel: ip_demasq_esp(): Inbound from 65.xx.xx.xx SPI EBC4FE83 has no > masq table entry Hmm...it sounds like a masquerade problem, but you indicate you're running IPSe

Re: [Leaf-user] Message log Overflow crashes EigerStein

2002-01-21 Thread Charles Steinkuehler
> At 08:13 AM 1/15/02 -0600, Charles Steinkuehler wrote: > >> Do you have an image that is setup to pass IPSEC or do I have to patch in > >> those modules and rules again. > > > >You're in luck. The Dachstein kernels come pre-patched for VPN-Masquerade, > >so all you have to do is load the module

Re: [Leaf-user] VPN software

2002-01-21 Thread Charles Steinkuehler
> Does any one have recommendations for VPN software > that works w/ Linux and Windows? Depends on exactly what you want to do. If you want to use Dachstein as a VPN gateway, you can easily setup another Dachstein box on the far end, and none of the workstation systems (linux or windows) need an

Re: [Leaf-user] Dachstein - Allowing access from DMZ to Internal network?

2002-01-21 Thread Charles Steinkuehler
Use the standard port-forwarding features: INTERN_SERVERS="tcp__ftp_192.168.1.1_ftp" Where is the IP address of your DMZ interface. DMZ systems can now connect to this IP/port, and the traffic will be port-forwarded to your internal net server. Charles Steinkuehler http://lrp.steinkuehler.net

Re: [Leaf-user] 2.2.16/tulip/build How?

2002-01-21 Thread Phillip . Watts
Charles, this from Donald Becker >That's an ADMtek Comet chip. Here is the entry in tulip.c > { "Accton EN1217/EN2242 (ADMtek Comet)", { 0x12161113, 0x }, > TULIP_IOTYPE, TULIP_SIZE1, COMET }, > You should use >http://www.scyld.com/network/tulip.html > ftp://www.scyl

RE: [Leaf-user] VPN software

2002-01-21 Thread Ryan P. Matijcio
I'd be interested to know this as well. Espically software that can connect to an Dachstein as a VPN gateway. Ideas anyone? Cheers. R. -Original Message- From: Charles Baker [mailto:[EMAIL PROTECTED]] Sent: Monday, January 21, 2002 9:42 AM To: leaf-user Subject: [Leaf-user] VPN sof

[Leaf-user] VPN software

2002-01-21 Thread Charles Baker
Does any one have recommendations for VPN software that works w/ Linux and Windows? = [EMAIL PROTECTED] Hacking is a "Good Thing!" See http://www.tuxedo.org/~esr/faqs/hacker-howto.html __ Do You Yahoo!? Send FREE video emails in Yahoo! Mail! ht

[Leaf-user] Dachstein - Allowing access from DMZ to Internal network?

2002-01-21 Thread Ryan P. Matijcio
  This may be a silly question, but I can’t find a way to easily do this within Dachstein’s network.conf .  I would like to allow a host on the DMZ to communicate with a host on the internal network on certain ports.   Is this possible using any of the built in network.conf directives?  Af

Re: [Leaf-user] Message log Overflow crashes EigerStein

2002-01-21 Thread Stephen More
At 08:13 AM 1/15/02 -0600, Charles Steinkuehler wrote: >> Do you have an image that is setup to pass IPSEC or do I have to patch in >> those modules and rules again. > >You're in luck. The Dachstein kernels come pre-patched for VPN-Masquerade, >so all you have to do is load the modules, and open

RE: [Leaf-user] Junkbuster

2002-01-21 Thread Kevin
I was using Junkbuster from the Junkbuster web site (http://www.mwheldon.freeserve.co.uk/documents/Jbuster.htm ) with one problem, it would not load on a reboot. I built another set of (2) floppy disks, added the version found below and rebooted. Well Junkbuster loaded the first boot, however I co

Re: [Leaf-user] PPP(oE) standards

2002-01-21 Thread Ewald Wasscher
David B. Cook wrote: >I'm on Sympatico in Ontario and notice that my ip changes quite >frequently. It is stable for a week, then I get bumped twice in a single >day. Now, the system renegotiates just fine, however, because network.conf >has not been re-run, all my port forwards are "broken" un