RE: [Leaf-user] newbie question (Bering/2.4/IDE)

2002-02-27 Thread Andy McLeod
First familiarise yourself with the general methods for running from hard disk via the excellent HOWTO on the LEAF site. Bering's kernel has module support for IDE built in (always a good idea to check the kernel config file which most developers provide with the dist so you can check what is in

[Leaf-user] Re: [Shorewall-users] LEAF Bering beta4 available

2002-02-27 Thread Christophe Zwecker
On Fri, 2002-02-22 at 00:49, Jacques Nilo wrote: Changelog for beta4: looks great, are there any plans to make that available on a CD for more space ? It try to access the documentation page, but I get unreachable. Best regards, Christophe -- Christophe Zwecker :Sysctl

Re: [Leaf-user] newbie question (Bering/2.4/IDE)

2002-02-27 Thread Brad Fritz
On Tue, 26 Feb 2002 14:48:09 CST Adrian wrote: Hi all...I had successfully finished a previous install with a 2.2.19-IDE kernel and run from a small IDE HD. Cool. What I would like to do is repeat this with a 2.4 kernel (currently messing around with Bering Beta4...no probs running

[Leaf-user] PPPoE or Ethernet

2002-02-27 Thread seanecovel
I have the opportunity to setup a firewall for a local non-profit organization. They want Internet access for their office. Both Cable and DSL are available in their area. Prices and speed seem comparable. I have been using Eiger and Dach 'steins for years with a cable connection. I

[Leaf-user] shell script problem

2002-02-27 Thread sylvain pelletier
Hi, I would make a little script in sh on my lrp ( dachtein version) and i can't do this : for file in 'ls' ; do echo $file done the echo response is: ls what's wrong, the problem comes from lrp??? Thanks Sylvain ___ Leaf-user mailing list

Re: [Leaf-user] PPPoE or Ethernet

2002-02-27 Thread Ray Olszewski
At 01:27 PM 2/27/02 +, [EMAIL PROTECTED] wrote: I have the opportunity to setup a firewall for a local non-profit organization. They want Internet access for their office. Both Cable and DSL are available in their area. Prices and speed seem comparable. I have been using Eiger and

[Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Craig Caughlin
Hi folks, I'm confused (what else is new :-) ). Will LaBrea work with the default Dachstein CD (which acts as both a DHCP client Server)? or would I need to change DCD for static addresses? I have my generic, Dachstein CD working O.K., and would like to incorporate LaBrea...but I can't seem to

Re: [Leaf-user] shell script problem

2002-02-27 Thread Ray Olszewski
You need to use backticks (`) around ls, not single-quotes ('), to accomplish what you probably want. The script as written below works correctly. At 04:10 PM 2/27/02 +0100, sylvain pelletier wrote: Hi, I would make a little script in sh on my lrp ( dachtein version) and i can't do this : for

Re: [Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread guitarlynn
On Wednesday 27 February 2002 10:14, Simon Bolduc wrote: 2. Create /etc/LaBrea.scr it should contain the following: #!/bin/sh IPADDR=`ip addr list label eth0 | grep inet | \ sed '1!d;s/^[^.0-9]*\([.0-9]*\).*$/\1/'` sed s/IPADDR/$IPADDR/g /etc/LaBrea.in /etc/LaBrea.bpf Nice script.

[Leaf-user] Question of principle: Are ProxyARP DMZ insecure?

2002-02-27 Thread Sandro Minola
Hi all I'm currently in a Watchguard training. I'm going to make the WCP Certificate. The trainer told me, that the Drop-In configuration (ProxyARP DMZ) is less secure than the routed DMZ. I didn't say anything and thought Uh, really? Why?. Is a ProxyARP DMZ less secure than a routed or

[Leaf-user] DCD, proxy dmz, snmp icmp ???

2002-02-27 Thread Michael D. Schleif
We have a DCD setup, including a proxy dmz. SNMP queries work everywhere, excepting systems residing on that dmz. Let me clarify that: snmp queries respond properly from clients inside the private network; but, *not* from the DCD firewall nor internet hosts. Running iptraf on the firewall, we

[Leaf-user] FW: [Leaf-devel] Question of principle: Are ProxyARP DMZ insecure?

2002-02-27 Thread Sandro Minola
Hi Charles, hi all Good for you that you question rather than simply believe... Ahh.. OK :) Unfortunately, you can't define in which chain rules go. (Watchguard Fireboxes run on a highly modified kernel 2.0.38) I don't know in which chain the organize their DMZ stuff. Ah...with a 2.0

Re: [Leaf-user] DCD, proxy dmz, snmp icmp ???

2002-02-27 Thread Charles Steinkuehler
We have a DCD setup, including a proxy dmz. SNMP queries work everywhere, excepting systems residing on that dmz. Let me clarify that: snmp queries respond properly from clients inside the private network; but, *not* from the DCD firewall nor internet hosts. Running iptraf on the

Re: [Leaf-user] DCD, proxy dmz, snmp icmp ???

2002-02-27 Thread Charles Steinkuehler
I was not certain what it is that you want to see -- see below. tcpdump output, run on the local DCD : OK, this helps, but I'm still not sure what I'm looking at. Which interface did you run the tcpdump on? I'm guessing from the packet traffic we're looking at the upstream interface, and

Re: [Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Steve Jeppesen
I have to say - Simon, along with Charles posted on the list about a week ago and this is how I set mine up last week. I did pretty much the same thing Simon posted, except I took out the v (Verbosely log activity to syslog) out of the OPTIONS= and I disabled logging on port 80 - My ramdisk was

[Leaf-user] LRP's firewalling capbility

2002-02-27 Thread Antai Ning
Hi gurus, I just set up a LRP box using Eiger 2.2.16 with pppoe support by Mike Leone. It's working fine with Bell Canada's Symaptico adsl service. Thanks to all who have put efforts on this image and LRP! Here is my question though. How strong is its firewalling capability? Is it just

Re: [Leaf-user] DCD, proxy dmz, snmp icmp ???

2002-02-27 Thread Michael D. Schleif
Charles Steinkuehler wrote: I was not certain what it is that you want to see -- see below. tcpdump output, run on the local DCD : OK, this helps, but I'm still not sure what I'm looking at. Which interface did you run the tcpdump on? I'm guessing from the packet traffic we're

[Leaf-user] No firewall / more networks

2002-02-27 Thread brooksp
Kindest greetings, Can anyone help me out and give me some information on the following two points. I currently run Dachstein CD and it works a treat, fair play to all involved. Firstly,I want to know if it is possible to run as a general router without firewalling. And secondly, if it is

[Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Craig Caughlin
Thank you Simon and Lynn for the responses. Unfortunately, I don't quite understand it all (I've taken a college class on Linux because I really enjoy this stuff, but please bear with my ignorance as I learn :-) ). 1.) First, how do I create the /etc/LaBrea.in that you refer to, and how do I

[Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Craig Caughlin
Thank you Simon and Lynn for the responses. Unfortunately, I don't quite understand it all (I've taken a college class on Linux because I really enjoy this stuff, but please bear with my ignorance as I learn :-) ). 1.) First, how do I create the /etc/LaBrea.in that you refer to, and how do I

[Leaf-user] Re: [Leaf-devel] Question of principle: Are ProxyARP DMZ insecure?

2002-02-27 Thread Charles Steinkuehler
The trainer told me, that the Drop-In configuration (ProxyARP DMZ) is less secure than the routed DMZ. I didn't say anything and thought Uh, really? Why?. Good for you! Good for me that I didn't say anything or good for me that I'm going to make the WCP? :) Good for you that

[Leaf-user] Re: [Leaf-devel] Question of principle: Are ProxyARP DMZ insecure?

2002-02-27 Thread Charles Steinkuehler
I'm currently in a Watchguard training. I'm going to make the WCP Certificate. The trainer told me, that the Drop-In configuration (ProxyARP DMZ) is less secure than the routed DMZ. I didn't say anything and thought Uh, really? Why?. Good for you! Is a ProxyARP DMZ less secure than a

Re: [Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Simon Bolduc
Hey Craig, Well to answer your first question, ae is the editor you use, just type ae at a command prompt and you should be good, then its just CTRL+W to save the file - so you could just type the file name at the prompt /etc/LaBrea.in or whatever the file name is To edit the

Re: [Leaf-user] Will LaBrea work with dynamic IP addresses?

2002-02-27 Thread Simon Bolduc
Steve, I long ago stopped logging hits on port 80, and just have them silently denied - it just made the whole messages file too hard to read - you might want to consider doing this. S _ Chat with friends online, try MSN

Re: [Leaf-user] even more worried

2002-02-27 Thread guitarlynn
By chance you didn't leave IE on when you shut down??? I've seen some banner ads run something similar to a lease type connection. Yahoo and flipside.com leave a lot of residual connections like that tied directly to Win32 clients. On Wednesday 27 February 2002 22:24, Scott C. Best wrote: