RE: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread John Mullan
UPDATE: I have found where the changes to resolv.conf are coming from. Dhclient.conf and data coming from my ISP DHCP server. I have managed to overide this behaviour with 'prepend' and 'supersede' and end up with a resolv.conf looking like this: search nimc1.on.cogeco.ca nameserver 192.168.1.25

Re: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread Brad Fritz
Hi, John. Sounds like you're getting close. More inline... On Fri, 07 Jun 2002 20:39:21 EDT John Mullan wrote: > I have made all the required changes. I even changed the network.conf. > The variable you mention seems to be CONFIG_DNS=NO > > Resolv.conf still gets overwritten with 'nameserve

RE: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread John Mullan
Sounds like I started something!! Just to add fuel to the fire (or more hopefully, slow it down), I do know that since 'mullan.dns2go.com' is a smaller 'chunk' of names to resolve that it is possible to have the server understand that DNS2GO.COM domain gets resolved out-of-house but MULLAN.DNS2GO

Re: [leaf-user] Bandwidth Throttling

2002-06-07 Thread Michael D. Schleif
Jonathan Berglund wrote: > > I'm running Dachstein, and I was wondering if there were an packages to > throttle bandwidth. The reason I ask is that at my work we rent out > space to some other people, and they share our T1. Problem is they are > hogging bandwidth and even if institute some rule

[leaf-user] Bandwidth Throttling

2002-06-07 Thread Jonathan Berglund
I'm running Dachstein, and I was wondering if there were an packages to throttle bandwidth. The reason I ask is that at my work we rent out space to some other people, and they share our T1. Problem is they are hogging bandwidth and even if institute some rule or policy, I still want to make sure

[leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread Brad Fritz
Boy, this seems to be the thread that never ends. :) I have to politely disagree on several of your statements, Erich. tinydns and dnscache config files for a working setup are included below as well. Re-quoted slightly for readability... On Fri, Jun 07, 2002 at 10:51:02PM +0200, Erich Titl w

Re: [leaf-user] Re: leaf-user digest, Vol 1 #937 - 14 msgs

2002-06-07 Thread Jeff Newmiller
On Fri, 7 Jun 2002, Erich Titl wrote: > Hi > > [EMAIL PROTECTED] wrote the following at 05:03 > 07.06.2002: > >To recap: The plan is to force internal network to resolve > >MULLAN.DNS2GO.COM to 192.168.1.128. External requests of course will > >already find their way to 192.168.1.128 via the

Re: Re: [leaf-user] 2 networks behind firewall]

2002-06-07 Thread Charles Steinkuehler
> Thanks Charles, worked like a charm. However, I don't see *how* it works. > This notation suggest to me that all internal traffic is going over eth1, > but I know it's not because I have them physically separated on different > switches. > > INTERN_IF="eth1" > INTERN_NET="192.168.1.0/24 192.168

[Fwd: Re: [leaf-user] 2 networks behind firewall]

2002-06-07 Thread Scott
Thanks Charles, worked like a charm. However, I don't see *how* it works. This notation suggest to me that all internal traffic is going over eth1, but I know it's not because I have them physically separated on different switches. INTERN_IF="eth1" INTERN_NET="192.168.1.0/24 192.168.212.0/24" IN

[leaf-user] Re: leaf-user digest, Vol 1 #937 - 14 msgs

2002-06-07 Thread Erich Titl
Hi [EMAIL PROTECTED] wrote the following at 05:03 07.06.2002: >To recap: The plan is to force internal network to resolve >MULLAN.DNS2GO.COM to 192.168.1.128. External requests of course will >already find their way to 192.168.1.128 via the INTERN_SERVERS in >network.conf You are trying to ma

Re: [leaf-user] 2 networks behind firewall

2002-06-07 Thread Charles Steinkuehler
> I'm doing something a little different this time. I have 1 routable IP and > 2 private networks which I want to masquerade from behind the firewall, but > keep separate from each other. The eth1 network works great, masquerades > like it's supposed to, NAT's like it's supposed to. However, my

[leaf-user] 2 networks behind firewall

2002-06-07 Thread Scott
Hi, I'm doing something a little different this time. I have 1 routable IP and 2 private networks which I want to masquerade from behind the firewall, but keep separate from each other. The eth1 network works great, masquerades like it's supposed to, NAT's like it's supposed to. However, my et

Re: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread Jacques Nilo
Le Vendredi 7 Juin 2002 15:12, George Luft a écrit : > Following the instructions in > http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 > B/ The masq file (entry 7). With a dial-up modem setup it should look like: > > (...) > #INTERFACE SUBNET > ppp0eth

[leaf-user] How do I set up static routes with Oxygen?

2002-06-07 Thread lists-nba
Is there a suggested standard way to set up static routes with Oxygen? I'm looking for something similar to /etc/sysconf/static-routes If not, how does Bering or Dachstein do this? Thanks in advance. ___ Don't miss the 2002 Sprin

Re: [leaf-user] PPP/PPPoE problems - continued

2002-06-07 Thread Eric Wolzak
I assume you use pap for pppoe : ? if so then you don't need provider, isp login script > Here are my PPP/PPPoE scripts. Are the settings valid for a dynamically > assigned aDSL connection? > > Provider file: > > # ISP pppd options file > # What follows is OK for Compuserve > # > noauth > d

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Richard Amerman
I appreciate the reply Tom! You have just caught me digging through your Shorewall site in search of hints on this very topic. I have also just downloaded the Shorewall 1.3.1 lrp and was about to send a message to the LEAF list to see if anyone had tried using this version with the most

[leaf-user] puTTY/SSH keepalives?

2002-06-07 Thread George Luft
I am running Bering and connecting to it via SSH using puTTY as my client--from the outside. Everything works fine but in my syslog, exactly every minute, I get a packet dropped and logged on port 20041 from my client IP. I've poked around on the web and found some vague references to SSH, so I'

[leaf-user] PPP/PPPoE problems - continued

2002-06-07 Thread ja_drake
Here are my PPP/PPPoE scripts. Are the settings valid for a dynamically assigned aDSL connection? Provider file: # ISP pppd options file # What follows is OK for Compuserve # noauth debug # log transaction to /var/log/messages /dev/ttyS0 # (ttyS0=com1, ttyS1=com2, ...) 115200

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Tom Eastep
On Fri, 7 Jun 2002, Richard Amerman wrote: > I have been combing the list archive for info and it seems clear the > configuring at least Dachstein or other than Bering with two active > external interfaces is indeed a daunting task. Getting the two > interfaces to work looks fairly easy, it is t

Re: [leaf-user] ppp/pppoe connection troubles

2002-06-07 Thread ja_drake
Eric, Thanks for the swift response. SHOREWALL is fine, and lets everything I want in and out. It's not that the PPPoE connection goes down and comes back up again, I appreciate that is what my ISP does, it's just that the PPP connection accasionally goes down and stays down, requiring a reboo

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Richard Amerman
I have been combing the list archive for info and it seems clear the configuring at least Dachstein or other than Bering with two active external interfaces is indeed a daunting task. Getting the two interfaces to work looks fairly easy, it is then all about the firewall. A fairly in

Re: [leaf-user] Combining NAT with PAT

2002-06-07 Thread Phillip . Watts
You most definitely want a 2.14.18 or later kernel with netfilter. The iptables tool for configuring netfilter can do, probably, anything you want. You can start with Dachstein or Bering and roll your own kernel, though Bering is probably fine as is. If you are a serious experimenter, I would

Re: [leaf-user] ppp/pppoe connection troubles

2002-06-07 Thread Eric Wolzak
Hello Adam comments inline I don't know what your povider is , but most provider do a disconnect after a certain amount of time, or after a certain period of non activity. The problem about the reconnecting could have several causes. You can best increase the debug level in the pppd option scr

Re: [leaf-user] increasing load average

2002-06-07 Thread Brad Fritz
Boris, On Fri, 07 Jun 2002 09:28:43 PDT Ray wrote: > 1. How does CPU utilization change with this change in load? If you have > "top" available, it calculates and reports the numbers I have in mind; if > not, you'll need to get the raw data from /proc/stat and do the arithmetic > yourself.

Re: [leaf-user] modules needed for pppoe?

2002-06-07 Thread Eric Wolzak
Hello Georg > Are these (Bering) modules necessary for pppoe? > > ppp_async.o AFAIK no > ppp_deflate.o could be useful by decompressing AFAIK no > ppp_mppe.o > > They don't show up in lsmod. Correct They are not loaded in the standard setup . > That's nearly 70KB. Ka-ching! uncompressed that

Re: [leaf-user] increasing load average

2002-06-07 Thread Ray Olszewski
Possible? Yeah sure, I suppose it is "possible". But you'd do better to give us a more systematic profile of what the router is doing if you want good opinions. The "load average" numbers that various apps report are sort of odd things. They don't represent a true system "load", at least not t

[leaf-user] increasing load average

2002-06-07 Thread Boris Andratzek
Hej All! Since several Weeks I got the following problem, that doesn't seem to be normal. I use a dachstein 1.02.1 with glibc 2.1.3 on CD and the hardware is a IBM PC 330 (P-166) with 64 MBytes RAM ant two Realtek 8139 NICs. The system is stable and doing everything I want, but: After the (re)

Re: [leaf-user] Combining NAT with PAT

2002-06-07 Thread Charles Steinkuehler
> Another question for the list: can Linux cum Dachstein > a) alias the eth0 > (external) interface to multiple ip numbers (in SCO unix we use 'ifconfig > alias' Yes > b) pass along somehow (to ipchains or whatever) which ip number the > packet arrived with? Of course...this is pretty much *AL

RE: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread Tom Eastep
On Fri, 7 Jun 2002, George Luft wrote: > Tom, I'm with you on all of the points below, except the dial-up. These > instructions are specific to pppoe. There's a separate dial-up page, and > these appear to have been copied and pasted from there and should be > updated. > Ok -- the documentati

[leaf-user] up to date samba package for leaf?

2002-06-07 Thread Fabian Linzberger
Hi everyone! I am looking for a maintained up to date samba package for a bering box, which I would like to share a partition with a win2k computer, but did not find anything in the main package archives (bering/oxygen/dachstein). Is something like that available or will I have to start on my ow

RE: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread George Luft
Tom, I'm with you on all of the points below, except the dial-up. These instructions are specific to pppoe. There's a separate dial-up page, and these appear to have been copied and pasted from there and should be updated. Thanks for all of your work on Shorewall! George PS. I have since pri

Re: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread Tom Eastep
On Fri, 7 Jun 2002, George Luft wrote: > Following the instructions in > http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 > > I added the net/ppp0/- line to the Interfaces file and commented out the > eth0 line. Should I have left eth0 in? No. > Do I need the dhcp, routefilter, > a

Re: [leaf-user] Combining NAT with PAT

2002-06-07 Thread Nachman Yaakov Ziskind
| > In NAT, the router essentially changes the source IP number to some other | > (presumably better :-) one, and makes no other changes. So, your network | > address is hidden, but you still need one public IP address for every host | > on your network. | > In PAT, the router changes the port

[leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread George Luft
Following the instructions in http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 I added the net/ppp0/- line to the Interfaces file and commented out the eth0 line. Should I have left eth0 in? Do I need the dhcp, routefilter, and norfc1918 options added to the ppp0 line? #ZONE INTER

Re: [leaf-user] Using HOSTS file

2002-06-07 Thread Nachman Yaakov Ziskind
Ray Olszewski wrote (on Thu, Jun 06, 2002 at 11:38:09PM -0700): | One low-tech solution that should work, BTW, is to add the hostname/IP | address pair to the hosts file on each workatation (/etc/hosts for Linux | workstations; I don't know the WinXX analog, though I do know there is | one).

[leaf-user] ppp/pppoe connection troubles

2002-06-07 Thread ja_drake
Gentlemen, My BERING box seems to be having some connection problems. I'm on aDSL using PPP & PPPoE to connect. My connection will stay up for a period of time, up to a couple of days, then reconnect, last a few hours and then fail. It then requires a reboot to reconnect. Here's a logfile entr

[leaf-user] Re: leaf-user digest, Vol 1 #937 - 14 msgs

2002-06-07 Thread James K. Wiggs
Oops. Bloody. Forgot to mention that I had that module installed, as well: # lsmod Module PagesUsed by ip_masq_h3236868 0 (unused) ip_masq_mfw 3076 0 (unused) ip_masq_portfw 2296 12 ip_masq_autofw 2356 0 (unused) ip_masq_user