RE: [leaf-user] Could/should I use LEAF for this application?

2002-09-01 Thread S Mohan
Bering is easy to install. I began about 45 ago and think am fairly adept at creating bering configurations. The docuumentaion is good and I did not have any problems. Start with the documentation given by the bering team. It works as promised - no hitches. Do not worry about PPPoE right now. I do

Re: [leaf-user] Can I use WISP for this?

2002-09-01 Thread Vladimir I.
Carbon Unit wrote about "Re: [leaf-user] Can I use WISP for this?": > How do I do this? > I tried "cp /root.cfs/lib/modules/preferred/pcmcia/airo.o /lib/modules" but it keeps >telling me "permission denied". airo is already there. It's in /lib/modules/pcmcia/preferred. In the next release this

Re: [leaf-user] IPSec509 in production environment?

2002-09-01 Thread Jeff Lush
On 9/1/02 7:55 AM, Claus Johansen <[EMAIL PROTECTED]> declared: > Hi all, > > Has anyone out there been using ipsec509 in a production environment with MS > Windows road warrior clients? Yes, after careful planning and reading. > 1.) > There's no way to tear down a tunnel, it stays active unti

Fw: [leaf-user] Problem with latest shorewall

2002-09-01 Thread Jay Langford
I had similar problems After copying the new shorewall package to your disk (replacing the old shorewall package) Edit /var/lib/lrpkg/root.exclude.list and remove /var/lib/shorewall Copy the new firewall script 'before' configuring your firewall Backup shorewall (reboot) <- you most likely do

RE: [leaf-user] Could/should I use LEAF for this application?

2002-09-01 Thread K a z
>I think Bering/ WISP are good candidates for the following reasons: WISP is for wireless networks no? None of this network would be wireless (its at a datacenter/carrier hotel). I was looking at the bering install/users guide at: http://leaf.sourceforge.net/devel/jnilo/busers.html I'm not rea

Re: [leaf-user] Can I use WISP for this?

2002-09-01 Thread Vladimir I.
Carbon Unit wrote about "[leaf-user] Can I use WISP for this?": > I've tried build 2290 and it seems to look possible but I can't get it to see the >cisco card on bootup, I have to run "insmod airo" to load the module. > I obvoiusly need to get past this before I can config WISP. > Can anyone he

[leaf-user] Can I use WISP for this?

2002-09-01 Thread Carbon Unit
Hi All, Maybe someone here can point me in the right direction. Here is my situation: I get my internet through a fixed wireless service using a cisco pci 350 card. My connection to the local net is with a rtl8139 card. Is it possible to use the cisco card as my connection to the internet and use

Re: [leaf-user] bering: cannot get dhcp lease from ISP [more info]

2002-09-01 Thread Erich Titl
Lynn guitarlynn wrote the following at 18:32 01.09.2002: >On Sunday 01 September 2002 10:19, Erich Titl wrote: > > Hi everybody > > > >I've heard of a couple of NIC's that use/create strange size packets, >but I don't remember which ones did that. I know of the realtek stuff >Having a 100M lin

Re: [leaf-user] Trouble running Shorewall under cron in Bering RC3.

2002-09-01 Thread Tom Eastep
On Sunday 01 September 2002 12:04 am, Mick wrote: > Ok I've done some more tests... > I CAN now make it work from cron. > > When I was running shorewall v1.3.1 and had trouble with it not restarting > because of its lockfile, I moved the restart command into my script where I > could delete the lo

Re: [leaf-user] Webbased configuration

2002-09-01 Thread guitarlynn
On Sunday 01 September 2002 11:05, Mike Noyes wrote: > On Sat, 2002-08-31 at 22:26, guitarlynn wrote: > > I do not see LEAF becoming a commercial project, as it is a > > collection of somewhat similar projects and is not a single > > project. > > Lynn, > LEAF is a single project that uses evoluti

Re: [leaf-user] IPSec509 in production environment?

2002-09-01 Thread guitarlynn
On Sunday 01 September 2002 08:55, Claus Johansen wrote: > Hi all, > > Has anyone out there been using ipsec509 in a production environment > with MS Windows road warrior clients? Yep. > I have succeeded setting it up as an experiment (after a lot of > RTFM), but I miss some functionalities that

Re: [leaf-user] bering: cannot get dhcp lease from ISP [more info]

2002-09-01 Thread guitarlynn
On Sunday 01 September 2002 10:19, Erich Titl wrote: > Hi everybody > > Kiril suspected the ISP not to give a lease, unfortunately it does > not seem to be that easy. > My setup is a laptop with 2 pcmcia cards, one a Xircom card, the > other a D-Link de-660+. > I use dhclient from the dhclient.lrp

RE: [leaf-user] The 'shorewall' command

2002-09-01 Thread Anders Akesson
> > > > should /var/lib/shorewall/firewall be some sort of link? > > > > Yes -- > > [root@mail Bering]# ls -l var/lib/shorewall/ > total 6 > lrwxrwxrwx1 root root 29 Sep 1 09:22 firewall -> > ../../../etc/init.d/shorewall > -rw-r--r--1 root root 4256 Jul 24 08:

Re: [leaf-user] The 'shorewall' command

2002-09-01 Thread Tom Eastep
On Sunday 01 September 2002 10:11 am, Anders Akesson wrote: > > What does "ls -l /var/lib/shorewall" show? What does "ls -ld > > /var/lib/shorewall" show? > > [root@firewall] /var/lib # ls -l /var/lib/shorewall > -rwxrwxrwx1 root root0 Aug 2 13:51 firewall > -rwxrwxrwx1 ro

RE: [leaf-user] The 'shorewall' command

2002-09-01 Thread Anders Akesson
> What does "ls -l /var/lib/shorewall" show? What does "ls -ld > /var/lib/shorewall" show? [root@firewall] /var/lib # ls -l /var/lib/shorewall -rwxrwxrwx1 root root0 Aug 2 13:51 firewall -rwxrwxrwx1 root root 4256 Aug 2 13:51 functions -rw-r--r--1 root

RE: [leaf-user] The 'shorewall' command

2002-09-01 Thread Mike Noyes
Anders, Tom is on vacation, so he wont be responding to your message in a timely manner. Sorry. Anyone else that can address Anders problem, please jump in. Thanks. On Sun, 2002-09-01 at 09:51, Anders Akesson wrote: > > > Nothing happens.. Command isn't executed. > > > Normally (I think) a 'sho

Re: [leaf-user] The 'shorewall' command

2002-09-01 Thread Tom Eastep
On Sunday 01 September 2002 09:51 am, Anders Akesson wrote: > > > Nothing happens.. Command isn't executed. > > > Normally (I think) a 'shorewall restart' should result in an output > > like > > > > the one at startup, but no output is seen, and no error message is > > > presented. A restart takes

RE: [leaf-user] The 'shorewall' command

2002-09-01 Thread Anders Akesson
> > Nothing happens.. Command isn't executed. > > Normally (I think) a 'shorewall restart' should result in an output like > > the one at startup, but no output is seen, and no error message is > > presented. A restart takes a few seconds but 'shorewall restart' behaves > > as if there was nothing

RE: [leaf-user] Webbased configuration

2002-09-01 Thread Mike Noyes
On Sat, 2002-08-31 at 21:07, Peter Robinson wrote: > Jeff and leaf-users > > Firstly I apoligize if I offended anyone, although anyone who has tried to > develope a web front end to IPTables will know that Shorewall is not the > place to start. > It overly complex for what it professes to do and

Re: [leaf-user] Problem with latest shorewall

2002-09-01 Thread Tom Eastep
On Sunday 01 September 2002 09:31 am, Markus Koelle wrote: > Hello, > > I've installed the latest shorwall.lrp (1.37b?) on my bering 1rc3-router. > When booting, shorewall tells me "/var/lib/shorewall/functions" is missing. > What can I do? Follow the Bering upgrade instructions at http://www.sh

Re: [leaf-user] Webbased configuration

2002-09-01 Thread Mike Noyes
On Sat, 2002-08-31 at 22:26, guitarlynn wrote: > On Saturday 31 August 2002 23:07, Peter Robinson wrote: > > Here is a question for the LEAF Project: > > Once there is a web interface to LEAF what is going to stop people > > from packaging it and selling it as a firewall solution? > > It easily ri

Re: [leaf-user] The 'shorewall' command

2002-09-01 Thread Tom Eastep
On Sunday 01 September 2002 07:07 am, Anders Akesson wrote: > > > Some shorewall commands like 'shorewall stop' ,'shorewall restart' > > amog > > > > others are not executed when typed. Instead my must run the more > > > extensive 'svi shorewall restart'.. I've tried looking in the > > shorewall >

[leaf-user] Problem with latest shorewall

2002-09-01 Thread Markus Koelle
Hello, I've installed the latest shorwall.lrp (1.37b?) on my bering 1rc3-router. When booting, shorewall tells me "/var/lib/shorewall/functions" is missing. What can I do? Sincerely Markus --- This sf.net email is sponsored by: OSDN - Tired

Re: [leaf-user] Mailing logs from Bering

2002-09-01 Thread Erich Titl
Michael Leone wrote the following at 16:03 01.09.2002: >Erich Titl said: > > Hi Michael > > > > Michael Leone wrote the following at 17:52 30.08.2002: > > > > > >>I could have them log to my home mail machine. Again, tho - why? > > > > You would need no mail process... > >On where, the home machi

[leaf-user] bering: cannot get dhcp lease from ISP [more info]

2002-09-01 Thread Erich Titl
Hi everybody Kiril suspected the ISP not to give a lease, unfortunately it does not seem to be that easy. My setup is a laptop with 2 pcmcia cards, one a Xircom card, the other a D-Link de-660+. I use dhclient from the dhclient.lrp package. It works correctly with a lease obtained from my inter

Re: [leaf-user] Could/should I use LEAF for this application?

2002-09-01 Thread Jack Coates
On Sun, 2002-09-01 at 00:45, K a z wrote: > > Hello LEAF users, > > We are going to be getting a full 100mbit line dropped to us in a colocation > facility. We plan to resell part of this bandwidth to about about 20 > dedicated and colocated clients. I am trying to come up with a cheap, > eff

RE: [leaf-user] The 'shorewall' command

2002-09-01 Thread Anders Akesson
> > Some shorewall commands like 'shorewall stop' ,'shorewall restart' amog > > others are not executed when typed. Instead my must run the more > > extensive 'svi shorewall restart'.. I've tried looking in the shorewall > > script but I can't see the problem. Maybe Tom or someone else can shed >

Re: [leaf-user] Mailing logs from Bering

2002-09-01 Thread Michael Leone
Erich Titl said: > Hi Michael > > Michael Leone wrote the following at 17:52 30.08.2002: > > >>I could have them log to my home mail machine. Again, tho - why? > > You would need no mail process... On where, the home machine? Sure I do - it's how I (and a couple others) send mail. :-) It's alrea

[leaf-user] IPSec509 in production environment?

2002-09-01 Thread Claus Johansen
Hi all, Has anyone out there been using ipsec509 in a production environment with MS Windows road warrior clients? I have succeeded setting it up as an experiment (after a lot of RTFM), but I miss some functionalities that would be crucial when having "ordinary users": 1.) There's no way to tea

RE: [leaf-user] Could/should I use LEAF for this application?

2002-09-01 Thread S Mohan
>From what you are listing, the issue here is not LEAF but Linux. If Linux can do the job, LEAF can. Yes Linux can. As compared to other solutions, you have much more flexibility in Linux. To cite a few: 1. You can change interface characteristics and ddefine queue lengths for every interface. 2.

[leaf-user] Could/should I use LEAF for this application?

2002-09-01 Thread K a z
Hello LEAF users, We are going to be getting a full 100mbit line dropped to us in a colocation facility. We plan to resell part of this bandwidth to about about 20 dedicated and colocated clients. I am trying to come up with a cheap, effective & easy solution to serve these clients AND manage