Re: [leaf-user] Symantec

2003-01-29 Thread Homer Parker
On Wed, 29 Jan 2003 14:56:01 -0800 Tom Eastep <[EMAIL PROTECTED]> wrote > > > --On Wednesday, January 29, 2003 11:40 PM +0100 Erich Titl > <[EMAIL PROTECTED]> wrote: > > > > > AFAIK LiveUpdate is initiated from the station that requests it, so > > normally you don't need to set up anything

[leaf-user] distribution for flash + 2.4.20 + iptables (no shorewall)

2003-01-29 Thread Chad Carr
On Tue, 28 Jan 2003 20:16:13 -0800 [EMAIL PROTECTED] wrote: > Message: 3 > From: Peter Mueller <[EMAIL PROTECTED]> > To: "'[EMAIL PROTECTED]'" > <[EMAIL PROTECTED]> Date: Tue, 28 Jan 2003 18:35:03 > -0800 Subject: [leaf-user] distribution for flash + 2.4.20 + iptables > (no shorewall) > > Hi gang

Re: [leaf-user] satellite with bering

2003-01-29 Thread Paonia Ezrine
Andrew, Could you outline the steps you took to get this to work. thanks Paonia > I have a Dachstien CD box running Satellite from iHug here in Australia. I > simply downloaded the drivers from the ISPs web site for the Kernel version > and installed them. The system has been up for over a mon

Re: [leaf-user] Couple of General Questions

2003-01-29 Thread Tom Eastep
--On Thursday, January 30, 2003 9:52 AM +0800 David Pitts <[EMAIL PROTECTED]> wrote: 1. Which version of uDHCP is compatible with Bering? I would like to eventually make SSH fit on my floppy so I would like to use uDHCP. Don't know. 2. Is there anything about the Bering/Shorewall three i

[leaf-user] RE: Pop Ups... Stop them with this...

2003-01-29 Thread Dennis Christilaw
Sorry for the lack of Subject Line in first e-mail… Now supports AOL, MSN, Internet Explorer, Netscape, Opera, WMConnect, CompuServe, Juno, NetZero and Yahoo SBC!  BONUS: Blocks Windows Messenger and GAIN pop-ups! This is what I use and it was WELL worth the money… http://www.panicware.com/produ

Re: [leaf-user] Couple of General Questions

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 08:30 pm, you wrote: > Thanks Lynn. I'm not at my computer right now so I will have to get > back to you with this. Regarding uDHCP, you have two packages available > at your site, one for Dachstein and another for the rest. Should I be > using the Dachstein package,

RE: [leaf-user] Couple of General Questions

2003-01-29 Thread David Pitts
Thanks Lynn. I'm not at my computer right now so I will have to get back to you with this. Regarding uDHCP, you have two packages available at your site, one for Dachstein and another for the rest. Should I be using the Dachstein package, given that Bering evolved from Dachstein, or the other on

Re: [leaf-user] Couple of General Questions

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 07:52 pm, you wrote: > First, thanks for your generous support with this 'stuff'. Your welcome. ;-) > 1.Which version of uDHCP is compatible with Bering? I would like > to eventually make SSH fit on my floppy so I would like to use uDHCP. All of them that I kno

[leaf-user] Couple of General Questions

2003-01-29 Thread David Pitts
First, thanks for your generous support with this 'stuff'. I am attempting to setup a Bering/Shorewall firewall with a DMZ (just because I want to!). And I am making (slow) progress. I have just run into a couple of issues that I could do with some advice on. I haven't included logs etc because

Re: [leaf-user] My Dachstein not quite up and running

2003-01-29 Thread Ray Olszewski
Chris -- Your routing table is sufficiently a mess that your problems are probably a by-product of that. You have both interfaces (eth0 and eth1) on the same /24 network (192.168.1.0/24): ip addr show [...] 7: eth0: mtu 1500 qdisc pfifo_fast qlen 100 link/ether 00:90:47:01:98:80 brd ff:ff

Re: [leaf-user] My Dachstein not quite up and running

2003-01-29 Thread Chris Low
I've searched the archives, but the only thing that looked helpful to me was the following: "Dachstein and its predecessors block private ips by default. In Dachstein you can just comment out the line that denies these It is in /etc/ipfilter.conf - under stopmartians procedure # RFC 1918/1627/1

Re: [leaf-user] distribution for flash + 2.4.20 + iptables (no sh orewall)

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 05:14 pm, you wrote: > I read somewhere that Shorewall was not capable of being removed from > Bering. Unfortunately I couldn't locate this post in a quick few minutes. > I checked the Bering documentation and didn't find a reference, therefore > I'm pretty sure this

RE: [leaf-user] distribution for flash + 2.4.20 + iptables (nosh orewall)

2003-01-29 Thread Tom Eastep
Hi Peter, --On Wednesday, January 29, 2003 3:14 PM -0800 Peter Mueller <[EMAIL PROTECTED]> wrote: I read somewhere that Shorewall was not capable of being removed from Bering. Unfortunately I couldn't locate this post in a quick few minutes. I checked the Bering documentation and didn't find a

RE: [leaf-user] Symantec

2003-01-29 Thread Tom Eastep
As Erich says, the workstation initiates the update, not the server. The usual loc->net ACCEPT policy therefore allows the connection. -Tom --On Wednesday, January 29, 2003 5:08 PM -0600 "Henning, Brian" <[EMAIL PROTECTED]> wrote: why isn't that stopped by the firewall? -Original Message-

Re: [leaf-user] Symantec

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 05:08 pm, you wrote: > why isn't that stopped by the firewall? Because your LAN machine(s) initate the connection. -- ~Lynn Avants Linux Embedded Firewall Project developer http://leaf.sourceforge.net --- This SF.N

RE: [leaf-user] distribution for flash + 2.4.20 + iptables (no shorewall)

2003-01-29 Thread Peter Mueller
Hi Tom & list, > If you understand enough to create your own secure firewall > using iptables, > then I'm amazed that you feel the need to post on a mailing > list to learn > how to omit one small package (Shorewall) from a simple > floppy-based Linux > distribution (Bering). Nevertheless, I

RE: [leaf-user] Symantec

2003-01-29 Thread Henning, Brian
why isn't that stopped by the firewall? -Original Message- From: Tom Eastep [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 29, 2003 4:56 PM To: [EMAIL PROTECTED] Subject: Re: [leaf-user] Symantec --On Wednesday, January 29, 2003 11:40 PM +0100 Erich Titl <[EMAIL PROTECTED]> wrote

Re: [leaf-user] Symantec

2003-01-29 Thread Tom Eastep
--On Wednesday, January 29, 2003 11:40 PM +0100 Erich Titl <[EMAIL PROTECTED]> wrote: AFAIK LiveUpdate is initiated from the station that requests it, so normally you don't need to set up anything as this is related traffic. Correct -- I have LiveUpdate running here on two systems without a

Re: [leaf-user] Symantec

2003-01-29 Thread Erich Titl
Homer Homer Parker wrote the following at 18:04 29.01.2003: What would be the best way to handle Symantec's LiveUpdate through a Bering 1.0 firewall? Tom says using domain names is not a goot thing, and I understand the reasoning behind that. liveupdate.symantecliveupdate.com resolves to

[leaf-user] [OT] shorewall on gibraltar (fwd) (fwd)

2003-01-29 Thread Tom Eastep
FYI Forwarded Message Date: Wednesday, January 29, 2003 6:28 AM -0800 From: Tom Eastep <[EMAIL PROTECTED]> To: Shorewall Announcements <[EMAIL PROTECTED]>, Shorewall Users <[EMAIL PROTECTED]> Subject: shorewall on gibraltar (fwd) Forwarded Message ---

[leaf-user] Distributed.net module for Dachstein? (Michael Boughner) ignore ->

2003-01-29 Thread fname lname
Hello All, Short Version: Can someone make a Distributed.net module for Dachstein? Long Version: A long time ago, I submitted the below to the LRP list. Which was basically a request for a distributed.net module to add into LRP. I eventually managed to cobble together something that worked.

[leaf-user] [ leaf-Support Requests-675725 ] IPSEC error messages

2003-01-29 Thread SourceForge.net
Support Requests item #675725, was opened at 2003-01-27 22:05 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=213751&aid=675725&group_id=13751 Category: packages Group: None >Status: Closed Priority: 5 Submitted By: Bob Dushok (bdushok) Assigned to: KP Kirchdörfer (

[leaf-user] [ leaf-Support Requests-675725 ] IPSEC error messages

2003-01-29 Thread SourceForge.net
Support Requests item #675725, was opened at 2003-01-27 16:05 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=213751&aid=675725&group_id=13751 Category: packages Group: None Status: Open Priority: 5 Submitted By: Bob Dushok (bdushok) Assigned to: KP Kirchdörfer (kap

RE: [leaf-user] tracing spoofed IPs?

2003-01-29 Thread Joey Officer
When you referenced the ISP I do recall that when I obtain my IP from Time Warner / Road Runner that it is coming from the RFC1918 space. I apologize for my idiocity. The other reply from fname lname (funny?) mentions this as well coming from Time Warner, although I have never called. It makes si

[leaf-user] [ leaf-Support Requests-675725 ] IPSEC error messages

2003-01-29 Thread SourceForge.net
Support Requests item #675725, was opened at 2003-01-27 15:05 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=213751&aid=675725&group_id=13751 Category: packages Group: None Status: Open Priority: 5 Submitted By: Bob Dushok (bdushok) Assigned to: KP Kirchdörfer (kap

[leaf-user] Re: tracing spoofed IPs? (Michael)

2003-01-29 Thread fname lname
>At 09:51 AM 1/29/03 -0600, Joey Officer wrote: >>I'm not sure if that topic is adequate, but here goes. >>Jan 29 11:23:47 firewall kernel: Packet log: input DENY eth0 PROTO=17 >>10.51.192.1:67 255.255.255.255:68 L=350 S=0x00 I=25217 F=0x T=255 (#8) >> >>I know the 10.x.x.x is for private use,

RE: [leaf-user] Help with BellSouth DSL in Atlanta and PPPoA?

2003-01-29 Thread Jeff Newmiller
On Wed, 29 Jan 2003, Todd Pearsall wrote: > Thanks for the help Chris, but I really wanted Bering/Shorewall as the > router/firewall for the flexibility for DMZ configurations, dynamic DNS > updates, etc. > > Steps to the final solution for the archives: > - The Cayman 3320H cannot be put in brid

[leaf-user] Symantec

2003-01-29 Thread Homer Parker
What would be the best way to handle Symantec's LiveUpdate through a Bering 1.0 firewall? Tom says using domain names is not a goot thing, and I understand the reasoning behind that. liveupdate.symantecliveupdate.com resolves to several IPs on akamai.net, so putting in IPs will be a constan

[leaf-user] [ leaf-Support Requests-675725 ] IPSEC error messages

2003-01-29 Thread SourceForge.net
Support Requests item #675725, was opened at 2003-01-27 22:05 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=213751&aid=675725&group_id=13751 Category: packages Group: None Status: Open Priority: 5 Submitted By: Bob Dushok (bdushok) >Assigned to: KP Kirchdörfer (ka

Re: [leaf-user] How Do I Change Bering Ramdisk size?

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 10:45 am, Todd Pearsall wrote: > Is /tmp for backing up packages? Yes it is. -- ~Lynn Avants Linux Embedded Appliance Firewall developer http://leaf.sourceforge.net --- This SF.NET email is sponsored by: SourceFo

[leaf-user] (no subject)

2003-01-29 Thread Michael Bacon
Joey, My two cents worth: log files are good, the more the better, it just a matter of how to manage them. I have my firewall (and HP Unix box, 2 Red Hat servers and even a couple NT) doing a remote syslog to an internal RedHat box, then logcheck runs every 15 minutes. Logcheck for anything out

Re: [leaf-user] tracing spoofed IPs?

2003-01-29 Thread Lynn Avants
On Wednesday 29 January 2003 09:51 am, Joey Officer wrote: > Is > there a way to trace what appear to be spoofed IP addresses. They're not spoofed addresses just trash from your ISP or a misconfigured router/firewall, M$ boxes spew traffic broadcasts out all interfaces. > Jan 29 11:23:47 f

[leaf-user] How Do I Change Bering Ramdisk size?

2003-01-29 Thread Todd Pearsall
I know I've done it on previous LEAF distros so I'm not sure it was moved or if I'm losing my mind. My routers have 32MB to 48MB so I wanted to bump up / and /var/log a little. Is /tmp for backing up packages? I've never noticed it being used. Filesystem 1k-blocks Used Available

Re: [leaf-user] tracing spoofed IPs?

2003-01-29 Thread Julian Church
At 09:51 29/01/03 -0600, Joey Officer wrote: Jan 29 11:23:47 firewall kernel: Packet log: input DENY eth0 PROTO=17 10.51.192.1:67 255.255.255.255:68 L=350 S=0x00 I=25217 F=0x T=255 (#8) What you have there is just "static" from your ISP, that you can safely put in silent deny. Your ISP's

Re: [leaf-user] tracing spoofed IPs?

2003-01-29 Thread Ray Olszewski
At 09:51 AM 1/29/03 -0600, Joey Officer wrote: I'm not sure if that topic is adequate, but here goes. I'm sick of my logs filling up with various IPs all trying to hit various ports. I know I can put the silent deny up and it won't fill up the log any more, but is there a more defensive approach

[leaf-user] tracing spoofed IPs?

2003-01-29 Thread Joey Officer
I'm not sure if that topic is adequate, but here goes. I'm sick of my logs filling up with various IPs all trying to hit various ports. I know I can put the silent deny up and it won't fill up the log any more, but is there a more defensive approach that can be taken? Is there a way to trace wha

RE: [leaf-user] Help with BellSouth DSL in Atlanta and PPPoA?

2003-01-29 Thread Todd Pearsall
Thanks for the help Chris, but I really wanted Bering/Shorewall as the router/firewall for the flexibility for DMZ configurations, dynamic DNS updates, etc. Steps to the final solution for the archives: - The Cayman 3320H cannot be put in bridge mode if it uses PPPoA. With the early firmware it w

[leaf-user] Noise Level too high in HyperlinkTech Amplifier.

2003-01-29 Thread Gilberto Mendes
Hi all, I'm have problems in a Hyperlinktech, 1W bidirecional amplifier, I'm having Noise level too high, and I'd like, how can I do to decrease a few in a receive gain. Thank's for all! +++ Gilberto de Freitas Mendes Técnico em comunicação Wireless Mananger DNA

Re: [leaf-user] Bell Business Internet service and LEAF

2003-01-29 Thread John Mullan
Since Sympatico High Speed is not dial-up based, the dial-up script probably doesn't apply. === Work: http://www.olgclotteries.com [EMAIL PROTECTED] 888-345-7568 ext. 2205 Personal: http://www.mullan.ca [EMAIL PROTEC

Re: [leaf-user] Bell Business Internet service and LEAF

2003-01-29 Thread John Mullan
No. A phone number was not necessary. Even though I've been using Dachstein (then Bering) for 2-3 years now, I still don't get so deep into the networking/linux thing to know and/or describe things perfectly. With that in mind.. I believe that I left DNS server up to DHCP Client to figure

RE: [leaf-user] satellite with bering

2003-01-29 Thread Andrew G.Gray
Andrew GRAY wrote: > I have a Dachstien CD box running Satellite from iHug here in Australia. Is that a PCI card that interfaces to the satellite dish? Yes What make and model?sm200d What type of cable runs from the dish to the PCI card? coa

RE: [leaf-user] satellite with bering

2003-01-29 Thread Andrew G.Gray
Hi Tony, No the satellite is not 2 way, we have to dial up to establish the link. There is no noticeable lag normally and the connection, for the most part, is quite fast. We do have some problems with the satellite path on occasions but I believe they are mostly caused by the ISP and weathe

Re: [leaf-user] distribution for flash + 2.4.20 + iptables (no shorewall)

2003-01-29 Thread Erich Titl
Peter At 18:35 28.01.2003 -0800, you wrote: Hi gang, What would be the best distribution to use on a flash + 2.4.x system? I like Bering, but I am going to be setting up linux routers with BGP so I don't want to experiment with learning shorewall on these systems. Space is not an issue as I ha