Re: [leaf-user] [Fwd: Re: booting from CD-ROM with Bering 3.0]]]]

2006-08-29 Thread Eric Spakman
Hi Pezet Philippe, >you're Merlin the Enchanter ! ;-) >something was wrong (don't know what !) in my root.blk.mk file. I copied >the one I used with 2.4 and now everything works OK ! >now, where do I specify the backup path : in syslinux/isolinux.cfg or in >leaf.cfg ? In leaf.cfg, but it can

Re: [leaf-user] [Fwd: Re: booting from CD-ROM with Bering 3.0]]]]

2006-08-29 Thread Pezet Philippe
you're Merlin the Enchanter ! something was wrong (don't know what !) in my root.blk.mk file. I copied the one I used with 2.4 and now everything works OK ! now, where do I specify the backup path : in syslinux/isolinux.cfg or in leaf.cfg ? --- Begin Message --- >From root Tue Aug 29 18:07:27

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Eric Spakman
Hi Jim, > >>> I did a save >>> config and modules, rebooted and tried another 'ShieldsUp' scan. All >>> that happened is that I got the usual lot of entries in the shorewall >>> log showing the scan. >>> >> >> So they never reach portsentry ;) Or did you open specific ports in >> shorewall? >> > In

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Jim Ford
Eric Spakman wrote: >> I did a save >> config and modules, rebooted and tried another 'ShieldsUp' scan. All that >> happened is that I got the usual lot of entries in the shorewall log >> showing the scan. >> > > So they never reach portsentry ;) Or did you open specific ports in > shorewall?

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Eric Spakman
Hi Jim, >>> >> In the portsentry example "KILL_ROUTE" line logging is set: >> -j LOG --log-level DEBUG --log-prefix 'Portsentry: dropping: ' >> > I've just tried adding the above to the "KILL_ROUTE" line. You need the complete line, there is an example in the portsentry.conf file: KILL_ROUTE

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Jim Ford
Eric Spakman wrote: > Hi Jim, > > >>> Does anything show up in the /var/lib/portsentry/ directory? >>> >>> >> Only 2 empty files - portsentry.blocked.tcp and portsentry.blocked.udp. >> I've got both BLOCK_UDP and BLOCK_TCP set to zero , because I only want >> warnings to start with, and I

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Eric Spakman
Hi Jim, >> >> Does anything show up in the /var/lib/portsentry/ directory? >> > Only 2 empty files - portsentry.blocked.tcp and portsentry.blocked.udp. > I've got both BLOCK_UDP and BLOCK_TCP set to zero , because I only want > warnings to start with, and I've set KILL_ROUTE="/sbin/iptables -I INP

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Jim Ford
Eric Spakman wrote: > Hi Jim, > > Does anything show up in the /var/lib/portsentry/ directory? > > Eric > > >> I've installed Portsentry on my floppy setup, thinking it would give me >> extra security. It appears to be working, but I have 2 questions: >> >> >> 1) Does it do anything that Shorewa

Re: [leaf-user] Portsentry with Bering UlibC3.0

2006-08-29 Thread Eric Spakman
Hi Jim, Does anything show up in the /var/lib/portsentry/ directory? Eric > I've installed Portsentry on my floppy setup, thinking it would give me > extra security. It appears to be working, but I have 2 questions: > > > 1) Does it do anything that Shorewall doesn't (they both use iptables)? >

Re: [leaf-user] [Fwd: Re: [Fwd: Re: [Fwd: Re: booting from CD-ROM with Bering 3.0]]]

2006-08-29 Thread Eric Spakman
Hi Pezet, > I did use the initrd_ide_cd.lrp package (renamed to initrd) and had to > include other modules (scsi_mod, sr_mod, sg .. for the burner and also > others for my ethernet cards). You don't have to include all those modules for scsi (except if you want to boot from your burner) and ethe