Re: [leaf-user] How to make an ip alias?

2002-10-09 Thread Erich Titl
Dmitri I make ip aliases for the internal network like this in an iface stanza in the interfaces file iface eth1 inet static address 194.124.158.99 masklen 24 broadcast 194.124.158.255 up ip addr add 192.168.100.1/24 brd 192.168.100.255 dev eth1 up i

[leaf-user] Recommend GIGABIT NIC's for leaf box?

2002-10-09 Thread K a z
I plan to start out with a 100mbit connection from my provider, but will quickly move to 300mbit over Gigabit Ethernet. Could someone list a few good server class gigabit NIC's that are supported by Leaf/Bering. Thanks, Kaz ___

[leaf-user] handling multiple ISPs

2002-10-09 Thread Vic Berdin
Hi everyone, How do you guys handle simultaneous connections to multiple ISPs in such a way that when the primary ISP buckles, my clients will automatically make use of the secondary ISP without having to change their DNS settings (and restarting <-- WINPC). I've heard of "dnrd", and it looks pro

[leaf-user] pppoe server on leaf ?

2002-10-09 Thread Ronny Aasen
has anyone ever setup a working pppoe server on leaf ? what distribution did you use ? is there a pppoe.lrp package for a server installation ? mvh Ronny Aasen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. htt

Re: [leaf-user] pppoe server on leaf ?

2002-10-09 Thread Jeff Clark
I have used the Dachstein pppoe.lrp package to run a test server for testing client setups - this pppoe.lrp contains pppoe.server. Unfortunately, I threw this system together for a onetime use and didn't take notes. >From what I remember, you must ensure the adsl client is stopped - adsl-stop -

Re: [leaf-user] dnscache vs. dmz ???

2002-10-09 Thread Michael D. Schleif
Erich Titl wrote: > > At 07:57 09.10.2002, you wrote: > > >does anybody have a proxy-arp dmz and also running tinydns & dnscache? > > > >thought that I'd resolved this sometime ago; but, tonight, for life of > >me, I cannot get dmz hosts to resolve addresses for remote internet > >sites solely

Re: [leaf-user] dnscache vs. dmz ???

2002-10-09 Thread Charles Steinkuehler
> > >does anybody have a proxy-arp dmz and also running tinydns & dnscache? > > > > > >thought that I'd resolved this sometime ago; but, tonight, for life of > > >me, I cannot get dmz hosts to resolve addresses for remote internet > > >sites solely via tinydns-public and dnscache ;< tinydns tries

Re: [leaf-user] How to make an ip alias?

2002-10-09 Thread Gavin . Bravery
Dmitri I think you can also do: auto eth1 eth1:1 eth1:2 iface eth1 inet static address 194.124.158.99 masklen 24 broadcast 194.124.158.255 iface eth1:1 inet static address 192.168.100.1 masklen 24 broacast 192.168.100.255 iface eth1:2 inet static addres

[leaf-user] How to increase /dev/root size?

2002-10-09 Thread Alex Ryabtsev
Hello leaf-user@lists, I am using Bering RC 1.3 and since I'm running it from hard drive, I have a lot packages to load and then there is a /dev/root size problem appears. I have not found any hints how I can increase its size. So, the question is pretty obvious - how increase size of /dev/root (

[leaf-user] Best way to control "ppp-on-demand" ?

2002-10-09 Thread Elmar Gerwalin
Hello, I'm using a bering box with an analog modem as router from my internal network to the LAN. Dialing-in is done "on-demand", but in some cases it would be better to do that manually (e.g. WinXP connects to the LAN without user interaction, maybe my dhcp server, (will be investigated ..?)

Re: [leaf-user] How to increase /dev/root size?

2002-10-09 Thread Jeff Newmiller
On Wed, 9 Oct 2002, Alex Ryabtsev wrote: > Hello leaf-user@lists, > > I am using Bering RC 1.3 and since I'm running it from hard drive, I > have a lot packages to load and then there is a /dev/root size > problem appears. I have not found any hints how I can increase its > size. So, the questio

Re: [leaf-user] Best way to control "ppp-on-demand" ?

2002-10-09 Thread Larry Platzek
Why not use pppd to do demand dialing? What are you trying to prevent by having todo pon and poff by ssh? If you are just trying to limit what time of day pppd is online then you can use a cron job for turning ppp on and off (two events in cron table). Larry Platzek [EMAIL PROTECTED] On Wed,

Re: [leaf-user] dnscache vs. dmz ???

2002-10-09 Thread Michael D. Schleif
Charles Steinkuehler wrote: > > > > >does anybody have a proxy-arp dmz and also running tinydns & > dnscache? > > > > > > > >thought that I'd resolved this sometime ago; but, tonight, for life > of > > > >me, I cannot get dmz hosts to resolve addresses for remote internet > > > >sites solely via

Re: [leaf-user] Best way to control "ppp-on-demand" ?

2002-10-09 Thread Elmar Gerwalin
Hello, On Wednesday 09 October 2002 18:03, Larry Platzek wrote: > Why not use pppd to do demand dialing? I already have that, but it starts even when I don't want it E.g. Windows wants to get online without a user action and I want to stop it. What are you trying to prevent by having todo pon

Re: [leaf-user] RE:DMZ configuration problems

2002-10-09 Thread Ray Olszewski
I waited to reply in the hope that someone would offer better advice than I can. Your first message mentioned two problems --- slow ftp transfers between the DMZ server and LAN clients, and inability to do ftp transfers from the Internet. This message mentions only the first problem; have you

Re: [leaf-user] Best way to control "ppp-on-demand" ?

2002-10-09 Thread Larry Platzek
Hello Elmar, I understand better the "why not demand dialing". I would lookup ssh/openssh and findout how to send a command instead of logging into the computer, I think just having to remember a batch or shell name will be easier than having to logon to the computer. Just remember to not allow f

Re: [leaf-user] Best way to control "ppp-on-demand" ?

2002-10-09 Thread Larry Platzek
Hello Elmar, One other way to do the pon/off would be to have a serial link to the firewall. On my Bering machine I can login from a serial port or the keyboard/monitor. From linux I use minicom but a windows/dos program can do the same. This maybe convenient for you. -

[leaf-user] partial backup bug in Bering RC3

2002-10-09 Thread Brad Fritz
I found what looks like a bug in Bering RC3's lrcfg.back.script that affects parial backups. That script calls mk_inc_part() for partial backups which populates the $INCLUDE and $EXCLUDE files based on the contents of the $LRPKG/$PACKAGE.local file for the package being backed up. After mk_inc_

[leaf-user] snort and nmap

2002-10-09 Thread Eric B Kiser
Howdy Folks, I am looking for the most recent versions of nmap.lrp and snort.lrp. I checked the CVS packages repository and the only thing I found was an older version of nmap and no snort. Your guidance is appreciated... Eric --- This sf.n

Re: [leaf-user] partial backup bug in Bering RC3

2002-10-09 Thread Eric Wolzak
Hello Brad , you are right about the error, I would make a different change, to prevent problematic entries in the exclude list change : /^[xXeE]/{ s/^[^ ]*[ ]*// w '"$EXCLUDE"' }' $L

Re: [leaf-user] partial backup bug in Bering RC3

2002-10-09 Thread Brad Fritz
Eric, On Wed, 09 Oct 2002 21:59:33 +0200 Eric wrote: > Hello Brad , > you are right about the error, I would make a different change, to > prevent problematic entries in the exclude list > change : [better bug fix snipped] Yes, that is a better fix. Thank you. I just filed an "official"

Re: [leaf-user] dnscache vs. dmz ???

2002-10-09 Thread Michael D. Schleif
"Michael D. Schleif" wrote: > > does anybody have a proxy-arp dmz and also running tinydns & dnscache? Anybody have such setup that works? -- Best Regards, mds mds resource 888.250.3987 Dare to fix things before they break . . . Our capacity for understanding is inversely proportional to

Re: [leaf-user] dnscache vs. dmz ???

2002-10-09 Thread Stephen Lee
On Wed, 2002-10-09 at 15:07, Michael D. Schleif wrote: > > "Michael D. Schleif" wrote: > > > > does anybody have a proxy-arp dmz and also running tinydns & dnscache? > > Anybody have such setup that works? Yes, on Dachstein 1.0.2CD, BUT tinydns and dnscache only serve the private network. I ha

[leaf-user] ssh

2002-10-09 Thread ArisB
I'm now using bering instead of dachstein and im trying to setup a sshd (internal). So i downloaded ssh,sshd,libz,sshkey from http://leaf.sourceforge.net/devel/jnilo/ I put them on a disk (1440) and configured bering to start from 2 diskettes. I have made a key (with makekey) and it seems to be in

Re: [leaf-user] ssh

2002-10-09 Thread Jeff Newmiller
On Thu, 10 Oct 2002, ArisB wrote: > I'm now using bering instead of dachstein and im trying to setup a sshd > (internal). > So i downloaded ssh,sshd,libz,sshkey from ssh.lrp shouldn't be necessary, and may actually be a bad idea for a firewall. > http://leaf.sourceforge.net/devel/jnilo/ > I put

Re: [leaf-user] ssh

2002-10-09 Thread ArisB
I've followed the install instructions on the website, it still isn't working. but when i install a ssh client on the firewall and then try to connect to the sshd (wich is allso on the firewall) i still can't connect, then i get "exchange_identification : connection closed by remote host" and in t

[leaf-user] Re: [leaf-devel] snort and nmap

2002-10-09 Thread David Douthitt
On Wed, Oct 09, 2002 at 02:05:49PM -0400, Eric B Kiser wrote: > I am looking for the most recent versions of nmap.lrp and snort.lrp. I > checked the CVS packages repository and the only thing I found was an older > version of nmap and no snort. I'm the one who's probably responsible for those pa

Re: [leaf-user] ssh

2002-10-09 Thread David Douthitt
On Thu, Oct 10, 2002 at 03:27:03AM +0200, ArisB wrote: > I've followed the install instructions on the website, it still isn't > working. > but when i install a ssh client on the firewall and then try to connect to > the sshd (wich is allso on the firewall) i still can't connect, then i get > "ex