Re: [leaf-user] Sshd won't start in BeringCD 1.2

2004-08-04 Thread Erich Titl
Rick you probably load the modularized new sshd I posted a few months ago. It is divided into ssh.lrp, sshd.lrp and libcrpto.lrp. It is more modern than the standard ssh stuff, has a modern openssl and takes less space (if you use ssh _and_ sshd) Ah, and by the way libz.lrp is updated too

Re: [leaf-user] Netfilter logs have bad dates in them (apologies to Shorewall)

2004-07-28 Thread Erich Titl
John At 17:05 28.07.2004, John Desmond wrote: I figured out the same thing after finding a routine for changing EST to UTC. The same odd dates show up in logs all over the net as well as some that others have posted to leaf-user, so I thought perhaps this is a well-know thing. Empty dates seem to

Re: [leaf-user] Shorewall logs have bad dates in them

2004-07-27 Thread Erich Titl
John At 20:52 27.07.2004, you wrote: John Desmond wrote: Sorry if this has been covered before. It looks like a real obvious problem, but I'm all Google-eyed from looking for it and couldn't find anything on it. I'm using Shorewall 2.0.2f and the logs always have Dec 31 19:00:00 for the date for

RE: [leaf-user] Road-warrior trouble: was Please Help: How to turn on Nat Traversal in Bering?

2004-07-26 Thread Erich Titl
Rick At 19:56 26.07.2004, you wrote: After long delay getting back to this... Thanks, Erich! Yes, nat_traversal=yes removes the [disabled] portion of the auth.log record. This is on both firewalls below. Mhhh, so nat-traversal is compiled in But, I am having other problems with the home win2k

Re: [leaf-user] Please Help: How to turn on Nat Traversal in Bering?

2004-07-20 Thread Erich Titl
Hi Rick At 18:04 20.07.2004, you wrote: Hello list: (reposting this -- got no replies from last week) In booting up Bering 1.2, one of the messages in auth.log is: Jul 16 13:07:15 firewall pluto[25864]: including NAT-Traversal patch (Version0.5a) [disabled] How does one enable NAT traversal -- I

Re[3]: [leaf-user] Hiding network behind Bering Box

2004-07-19 Thread Erich Titl
Paul At 12:36 19.07.2004 +0200, Paul Tyniec wrote: Hello! TE firewall/router and has no native support for doing so. The OP needs to TE insert the appropriate rules into the mangle table POSTROUTING chain to TE set TTL as required. The iptables commands can be placed in the TE

Re: [leaf-user] multiple port bridging/filtering

2004-07-16 Thread Erich Titl
Tom At 06:36 16.07.2004 -0700, you wrote: Erich Titl wrote: Charles At 06:57 16.07.2004 -0500, Charles Steinkuehler wrote: Erich Titl wrote: Charles interesting approach do you do any mac based filtering? Not at the moment...filtering is strictly based on IP (and on the interface a system

Re: [leaf-user] multiple port bridging/filtering

2004-07-16 Thread Erich Titl
Charles At 23:10 16.07.2004, Charles Steinkuehler wrote: Erich Titl wrote: ... The way I understand proxy arp is that the interface which is the proxy replies to arp requests for the corresponding IP. So I have to enter all addresses of all the other interfaces to each of the interfaces for them

Re: [leaf-user] sshd on uclib 2.1.1 not working

2004-07-15 Thread Erich Titl
Gabriel At 01:59 15.07.2004 +0200, Gabriel Mueller wrote: Hi all Iam having some trouble to get sshd to work on a uclib-bering 2.1.1 . These are the packages Iam using: (Iam giving the full link, so you can check if Iam using the right versions of packages)

Re: [leaf-user] sshd on uclib 2.1.1 not working

2004-07-15 Thread Erich Titl
Gabriel At 13:01 15.07.2004 +0200, Gabriel Mueller wrote: Hi again | Do you allow password authentication or only RSA? | If you allow RSA only then you have to use a valid key. I checked my sshd_conf (or better said, I compared it with another sshd_conf on an bering-machine (Bering, not

[leaf-user] multiple port bridging/filtering

2004-07-15 Thread Erich Titl
Hi Folks I have a requirement to bridge multiple ports on a single network and filtering packets between these ports based on mac and/or Ip addresses. Can I do that using ebtables? Does anyone have any experience with such a situation? Thanks Erich THINK Püntenstrasse 39 8143 Stallikon

Re: [leaf-user] sshd on uclib 2.1.1 not working

2004-07-15 Thread Erich Titl
Gabriel At 17:06 15.07.2004 +0200, Gabriel Mueller wrote: Hi bash-2.05b# telnet IP 22 Trying IP... Connected to IP. Escape character is '^]'. (a few seconds nothing happens) Connection closed by foreign host. You should at least see something like this, possibly you are right sshd seems to not

Re: [leaf-user] Hiding network behind Bering Box

2004-07-15 Thread Erich Titl
Tom At 07:32 15.07.2004 -0700, Tom Eastep wrote: Erich Titl wrote: Paul At 21:23 14.07.2004 +0200, Yazgot wrote: Hello ! Recently i figured out i need to change TTL of all outgoing packets to the same value eg 64. Behind bering box is NATed 3 computers network and i need to make all outgoing

Re: [leaf-user] RFC1918 packets to NET

2004-07-15 Thread Erich Titl
At 16:44 15.07.2004 +0300, [EMAIL PROTECTED] wrote: I 've noticed that when installing the default shorewall configuration of Bering-* there is no block of rfc1918 packets going out to NET That is traceroute from LOC of any address not included in LOCAL LAN but in the RFC1918 range will go

Re: [leaf-user] multiple port bridging/filtering

2004-07-15 Thread Erich Titl
Charles interesting approach do you do any mac based filtering? At 10:22 15.07.2004 -0500, Charles Steinkuehler wrote: Erich Titl wrote: Hi Folks I have a requirement to bridge multiple ports on a single network and filtering packets between these ports based on mac and/or Ip addresses. Can I

Re: [leaf-user] Using LEAF (Bering-uClibc) as a router (no shorewall)

2004-07-15 Thread Erich Titl
Ben At 23:58 15.07.2004, Ben Conrad wrote: Hello, I want to use LEAF as a simple router inside my internal networks. I don't need any firewalling or NAT. What is the best way to turn off all the Shorewall and IPTables configurations so that I can pass all traffic in/out of eth0 and eth1? I tried

Re: [leaf-user] Harddisk: Device not configured

2004-07-13 Thread Erich Titl
Jon At 14:55 13.07.2004 +0200, you wrote: On Wed, 07 Jul, 2004 at 00:41:31 +0200, Erich Titl wrote: I have a 2.4.24 kernel environment which I use for the pcengines kernel, you may want to have a look http://www.think.ch/leaf/styx/2.4.20/ Great! (that would be: http://www.think.ch

[leaf-user] DSL,ppp,ipsec woes

2004-07-13 Thread Erich Titl
Hi Folks This is more a memento for the above mentioned issues than a question. I fell into a few gotchas today, so I might as well share, maybe someone has had similar experience and can advise. I installed an embedded router as a VPN endpoint today using the pcengines Bering 1.2 version. It

Re: [leaf-user] Harddisk: Device not configured

2004-07-13 Thread Erich Titl
Jon At 17:23 13.07.2004 +0200, Jon Clausen wrote: On Tue, 13 Jul, 2004 at 16:16:48 +0200, Erich Titl wrote: Jon snip Next step is to get the 'Bering patches' applied. Look into the Makefile it's easy to extend if you like it. Indeed this looks nice. Sadly I don't fully understand

RE: [leaf-user] Bering 1.2 CD won't load daemontl.lrp

2004-07-13 Thread Erich Titl
Rick At 17:17 13.07.2004, Tibbs, Richard wrote: For sure dnscache is not starting with daemon tools. I can see that at the tail end of the bering load process. Two things. First, I don't have a menu item for daemontools under packages in lrcfg. Mprobably not installed There are no

RE: [leaf-user] Bering 1.2 CD won't load daemontl.lrp

2004-07-13 Thread Erich Titl
Rick At 19:00 13.07.2004, you wrote: Erich, thanks... But.. But... I have daemontl.lrp in the Berign CD already :-) I don't know if using a different one will help (and the one from Charles Steinkuehler's Bering CD site may be identical -- they look like the same sizes). Below is my current

Re: [leaf-user] Bering ipsec question

2004-07-09 Thread Erich Titl
Ted At 02:23 09.07.2004 -0500, Theodore M. Wynnychenko wrote: Hello. I am currently running Bering (not uClibc) LEAF as a firewall (kernel 2.4.26). Everything works fine. I was now thinking of adding ipsec. However (and I think this is the more problematic way of going, but it would be easier for

Re: [leaf-user] Harddisk: Device not configured

2004-07-06 Thread Erich Titl
Jon At 23:38 05.07.2004 +0200, Jon Clausen wrote: On Mon, 05 Jul, 2004 at 07:15:03 +0200, Jon Clausen wrote: snip Right. I'm gonna have to look closer at the actual cpu info, when I get off work. I have none of the above set ATM, so maybe the K6* option is the ticket... Recompiled as K6,

Re: [leaf-user] Harddisk: Device not configured

2004-07-06 Thread Erich Titl
Jon At 19:53 06.07.2004, Jon Clausen wrote: On Tue, 06 Jul, 2004 at 09:03:30 +0200, Erich Titl wrote: I found this http://www.viaarena.com/?PageID=368 and some other sites which look promising. In the end though, I'm beginning to suspect that 2.4.20 may be too 'old'. Main reason being

Re: [leaf-user] Harddisk: Device not configured

2004-07-04 Thread Erich Titl
Jon At 17:51 04.07.2004, you wrote: Hi. I have one of these: http://www.sys-media.it/cv860a.html - which I've succeeded in setting up as a dual WAN router. It boots off a 64MB CF, and runs a self-compiled 2.4.20 kernel with Bering as well as Julian Anastasov's 'dgd' patches applied. Everything

Re: [leaf-user] PPPD and dynamic dns (pppoe)

2004-07-03 Thread Erich Titl
Scott List Thanks everyone, At 06:40 03.07.2004, freeman groups wrote: Via BEEP.LRP my Bering 1.2 box makes lovely, helpful sounds (hint, hint :) Won't help much, as my hardware is an embedded system without a speaker, but thanks when the link goes up down. This happens from within scripts

[leaf-user] PPPD and dynamic dns (pppoe)

2004-07-02 Thread Erich Titl
Hi everybody I am playing with ppp/pppoe and VPN connections on Bering boxes. The nature of VPN requires the ipsec connections to be restarted when the IP address on the gateway changes, Having little experience with pppoe and no inclination to invent the wheel once more I'd like to ask for a

Re: [leaf-user] PPPD and dynamic dns (pppoe)

2004-07-02 Thread Erich Titl
Hi At 17:05 02.07.2004 +0300, [EMAIL PROTECTED] wrote: Have a look in here http://www.openbrick.org/en/Members/seb/doc/reliable_vpn/view Thanks for the info. This might be a last resort. I still think there must be a better way to detect changes in the uplink ip address. PPPD must certainly

RE: [leaf-user] Bering 1.2 Dnscache: Querylog versus Forward Only

2004-07-01 Thread Erich Titl
Rick At 09:06 01.07.2004 -0400, Tibbs, Richard wrote: Erich, Thanks very much! The cr.yp.to site is a gold mine. Thanks for saving me (apparently) from Bind! Well, personally I am a bit reserved to people announcing their merits _that_ way, but then... he may be right. After perusing the site

RE: [leaf-user] Bering 1.2 Dnscache: Querylog versus Forward Only

2004-06-30 Thread Erich Titl
Rick At 15:12 30.06.2004, Tibbs, Richard wrote: Thanks Erich.. What is meant by Dnscache log on exactly? Is this a server-to-server or a client-server transaction? (Also, it seems the default is actually YES rather than NO.) I guess its meaning is _dnscache_log_on_ But... What does dnscache log

Re: [leaf-user] Update: USB on Bering 1.2

2004-06-30 Thread Erich Titl
Rick At 21:04 30.06.2004, Tibbs, Richard wrote: New information: I fiddled around and added usb-uhci.o and got more signs of life, but still no usb0 interface. Dmesg output appended below I am trying a Linksys USB200M on a Dell Optiplex GX150. In modules I am loading usbcore usb-uhci usbnet With

Re: [leaf-user] Bering 1.2 Dnscache: Querylog versus Forward Only

2004-06-29 Thread Erich Titl
Rick this is possibly a shot in the dark... At 14:54 29.06.2004, Tibbs, Richard wrote: Dear List: Recently I had quite a difficult time getting dnscache to work in a campus network environment. In other applications, e.g. a SOHO environment using an ISP, the stock Bering 1.2 setup seems to work,

Re: [leaf-user] BASH UDP Server

2004-06-15 Thread Erich Titl
Bino At 11:19 15.06.2004 +0700, bino_oetomo wrote: Hi All .. is there any clue or url on how to script a very simple UDP server with BASH ? I just need to write any received data (including client ip address) to a simple text file (maybe forwarded to sql in the future). Maybe you should look

Re: [leaf-user] Thinkpad 755C boot problem

2004-06-07 Thread Erich Titl
Roberto look at the options in your /etc/shorewall/interfaces file, if it says something like norfc1918 you will not be able to access your router. shorewall status will show you your current connections and your iptables rules. Please make sure you specify 192.168.0.1 as your default gateway

Re: [leaf-user] trying to get ipsec VPN working

2004-06-05 Thread Erich Titl
Jim I have a number of ipsec boxes running on Bering 1.0 and 1.2. I must admit the complexity of your ascii art puzzled me at first. Basically I understood the following. You have 2 Bering boxes in Network 10.0.0.0/24 serving as IPSEC gateways for the networks 192.168.0.0/24 and 192.168.1.0/24

Re: [leaf-user] Bering 1.2 backup destination problem

2004-05-26 Thread Erich Titl
Hi At 21:01 26.05.2004, Tibbs, Richard wrote: Dear list: I am following the Bering user guide through the process to create a bering CD -- I have a successful Bering 1680k floppy working on the machine. To get the .lrp's onto a 1440 floppy, I am using the backup destination facility, i.e., Take

Re: [leaf-user] Simple IP address retrieval question

2004-05-23 Thread Erich Titl
Brad At 06:12 23.05.2004, Brad Klinghagen wrote: Currently I have an ISP that provides an IP address via DHCP, and the address occasionally changes. What I want to do is to retrieve the IP address of the Internet side interface (eth0) of my firewall without manual intervention, and stuff that

Re: [leaf-user] port redirecting with shorewall

2004-05-23 Thread Erich Titl
Troy At 08:30 23.05.2004, Troy Aden wrote: Hello list. I have a question regarding a rule that used to work but since I have upgraded shorewall it does not work anymore... I am running Bering UCLIBC 2 with shorewall 1.4.5. The rule is as follows: DNATnet loc:192.168.200.150:443

Re: [leaf-user] Thinkpad 755C boot problem

2004-05-23 Thread Erich Titl
Roberto At 11:51 23.05.2004, isandro belli wrote: Erich Looks like it, but do you have an address assigned to eth1 at this very moment. PCMCIA adapters are inhernetly slow on startup, so possibly dhcpd is started _before_ the adapters are up completely. This is the reason for the delay code Yes

Re: [leaf-user] Thinkpad 755C boot problem

2004-05-21 Thread Erich Titl
Roberto At 22:54 10.05.2004, isandro belli wrote: Hello again Erich and the List, sweating through.. My knowledge of this field is very limited. many thanks, if anybody can help me I will appreciate that. I went back to a fresh copy of LEAF It seems ok (LEDs on on the hubs) except I still get:

Re: [leaf-user] Thinkpad 755C boot problem

2004-05-09 Thread Erich Titl
them so that RDCLINKS=S,S20 0,K90 6,K90 and now it's OK. I've put the same RDCLINKS both in /etc/init.d/pcmcia and /etc/init.d/pcmcia_eth Christian - Grenoble and added this /etc/init.d/pcmcia_eth: #!/bin/sh # # Copyleft 2002 Erich Titl ([EMAIL PROTECTED]) # # This program is free software; you can

Re: [leaf-user] Can't mount usb flash drive

2004-05-06 Thread Erich Titl
At 00:34 06.05.2004 -0400, ALParada wrote: Hello Everyone, Trying to mount a usb flash drive with little luck. I have added the usb and scsi files to lib/modules and etc/modules. I see the device under /proc/bus/usb/devices and I see no errors under /var/log/messages. It seems to be picked up and

Re: [leaf-user] Thinkpad 755C boot problem

2004-05-06 Thread Erich Titl
Hi At 21:01 05.05.2004 +, you wrote: Hello again, I managed to get the boot process finishing, ( 1.68MB floppy, Bering 2.4.16, thinkpad 755C, 2 3com589D PCMCIA net cards, 20MB RAM) i found out that I had to put append floppy=thinkpad just after default linux Now I'm trying to finish

Re: [leaf-user] Can't mount usb flash drive

2004-05-06 Thread Erich Titl
At 17:12 06.05.2004, you wrote: Well I managed to mount the device but I am still having some configuration issues. Is there a Howto for this as well as maybe booting of this device (given the bios supports booting from usb) There was a post a while ago. Check the archives cheers Erich THINK

Re: [leaf-user] Thinkpad 755C boot problem

2004-05-06 Thread Erich Titl
Hi Roberto At 20:32 06.05.2004, isandro belli wrote: hi Erich well I did already follow the Bering Installation Guideand the 3.5. Step 4: configure pcmcia (as you were suggesting) but.. once I found: 3.5. Step 4: configure pcmcia Once your package is ready, enter the LEAF Package

Re: [leaf-user] vpn capability router

2004-05-05 Thread Erich Titl
Hi At 12:12 05.05.2004 +0800, chiew yock sang wrote: I'm currently studying, my lecturer asked me to do a router with VPN capability with floppy disk(s). I have tried a for quite long and still haven get the result. I don't know what has gone wrong. Can anyone show me the proper way to start?

Re: [leaf-user] RFE, Details of my hack: Storing different LEAF setups in different h/d folders

2004-05-05 Thread Erich Titl
Hi scott At 05:57 05.05.2004 -0400, freeman wrote: ... b) Adjust the backup script, /usr/sbin/lrcfg.back.script: - Change INCLUDE=/tmp/INCLUDE To INCLUDE=/tmp/$HD_DIR/INCLUDE - Change EXCLUDE=/tmp/EXCLUDE

[leaf-user] Re: [leaf-devel] Fw: Re:bering 1.2 and ebtables

2004-05-03 Thread Erich Titl
Hi Nicolas redirected to leaf-user At 08:40 03.05.2004 -0400, nicolas bussieres wrote: i compiled bering 1.2 from leaf.sourceforge.net (latest) , added package bridge.lrp and ebtables.lrp , but when i run ebtables i get the famous kernel doesnt support th ebtables filter table but here the

[leaf-user] Re:bering 1.2 and ebtables

2004-05-03 Thread Erich Titl
Hi Nicolas this is really a leaf-user issue, so others can profit redirected to leaf-user At 09:22 03.05.2004 -0400, you wrote: ive loaded bridge.o , thats all (and ebtablkes.lrp , of course) What about the ebtables kernel modules? ebtables.o, ebt???.o HTH Erich THINK Püntenstrasse 39

[leaf-user] Re: Re:bering 1.2 and ebtables

2004-05-03 Thread Erich Titl
Nicolas At 10:39 03.05.2004 -0400, nicolas bussieres wrote: ok , i loaded all the ETB modules , and now i got another message For IP filtering the protocol must be specified as IPv4 OK, it gets specific, now I guess you will have to revert to

[leaf-user] ntpstats log in Bering 1.x

2004-04-29 Thread Erich Titl
Hi folks Has anyone ever wondered about the number of logfiles in /var/log/ntpstats. Those are built and cycled by the ntpsimpl package. Unfortunately they don't seem to get removed after a while, although this is suggested by /etc/cron.daily/ntpsimpl. Here is a modified version which appears

Re: [leaf-user] ipsec.lrp, Super FreeS/WAN, X.509 and Wildcards - New Build Needed?

2004-04-29 Thread Erich Titl
Kapeka At 19:35 29.04.2004, K.-P. Kirchdörfer wrote: Am Donnerstag, 29. April 2004 00:51 schrieb Erich Titl: Hi At 23:49 28.04.2004, Muiz Motani wrote: Thanks for the reply Eric. Consider this a push :). Why did you opt to go with OpenSwan rather than Super FreeS/WAN? Does OpenSwan

Re: [leaf-user] Re: leaf-user digest, Vol 1 #2256 - 14 msgs

2004-04-28 Thread Erich Titl
At 18:16 28.04.2004, Paul G Rogers wrote: ... I'll give it a try. I also need to check my Tom's RootBoot diskette and see what size it is. HP/Compaq tells me I have to go to one of their service centers for anything like swapping the CPU with a classic Pentium, they won't tell me what the missing

Re: [leaf-user] ipsec.lrp, Super FreeS/WAN, X.509 and Wildcards - New Build Needed?

2004-04-28 Thread Erich Titl
Hi At 21:07 28.04.2004, Muiz Motani wrote: My posts seem to keep getting rejected by the list server. Hopefully this one will work. I have run into a huge problem with ipsec.lrp which is preventing an enterprise-wide deployment of Bering 1.2 with ipsec. I believe the problem would also exist with

Re: [leaf-user] ipsec.lrp, Super FreeS/WAN, X.509 and Wildcards - New Build Needed?

2004-04-28 Thread Erich Titl
Hi At 23:49 28.04.2004, Muiz Motani wrote: Thanks for the reply Eric. Consider this a push :). Why did you opt to go with OpenSwan rather than Super FreeS/WAN? Does OpenSwan contain all the patches that Super FreeS/WAN does (http://www.freeswan.ca/docs/freeswan-2.05/doc/web.html#patch)? Super

Re: [leaf-user] ipsec.lrp, Super FreeS/WAN, X.509 and Wildcards - New Build Needed?

2004-04-28 Thread Erich Titl
At 00:04 29.04.2004, Muiz Motani wrote: Sorry to reply to my own post, but I think I partially answered my question by looking at http://www.openswan.org/docs/feature_comparison.php. The only things that I need that aren't answered by this comparison are: 1.does OpenSwan support hardware crypto

Re: [leaf-user] dyndns, ez-ipupd (update hostname)

2004-04-21 Thread Erich Titl
Henning At 12:46 21.04.2004 +0200, you wrote: Hi folks ! (using bering 1.0 stable glibc) I am using dyndns for my router with the package ez-ipupd. The problem is: I am regularely forced to update my hostname (manually by hand !). (Every month I get a mail from dyndns to do that :-( ) After

Re: [leaf-user] Bering 1.2 Throughput Test Results

2004-04-17 Thread Erich Titl
Hi At 11:52 15.04.2004 -0300, J.Clark wrote: My question is how does one properly load this module? I've tried loading it from the modules package (/etc/modules) but when I try to restart ipsec it fails becuase it can't unload the ipsec.o module due to the fact that it is in use by the

Re: [leaf-user] trouble accessing firewall

2004-04-08 Thread Erich Titl
Hi At 20:06 07.04.2004 -0400, Dave Rose wrote: I am standing up a bering firewall and have made it through the 3c509 troubleshooting phase, or so I thought. I am unable to ping the internal side of the firewall from my other computers. I am not sure icmp to the firewall is enabled in shorewall

Re: [leaf-user] SCP

2004-04-07 Thread Erich Titl
Roger At 09:03 07.04.2004 -0400, Roger E McClurg wrote: I'm using Bering 1.2 with SSH (OpenSSH_3.5p1,) and SSHD. Problem is that SCP is missing. Does anyone know what happened to SCP in the SSH package? For some unknown reason scp is in sshd.lrp cheers Erich THINK Püntenstrasse 39 8143

Re: [leaf-user] OT: UPX v1.11

2004-04-06 Thread Erich Titl
At 06:29 06.04.2004 -0500, Charles Steinkuehler wrote: Vic Berdin wrote: Hi, I've been searching for a downloadable source of the said upx version. An attemp to log to cvs using: cvs -d:pserver:[EMAIL PROTECTED]:/cvsroot/upx login fails. Any help/link/e-mail attachment with complete (tgz/bz2)

RE: [leaf-user] Bering still active?

2004-03-31 Thread Erich Titl
Everyone At 17:37 31.03.2004, Mike Noyes wrote: On Wed, 2004-03-31 at 06:50, Alex Rhomberg wrote: You raise a good point here. We are missing a central package repository where updates could be uploaded. Alex, We have a central package repository in CVS, and it exports daily to our shell space.

RE: [leaf-user] Updated SSH packages

2004-03-23 Thread Erich Titl
Dave At 10:39 23.03.2004 +, Dave Hunt wrote: http://www.think.ch/leaf/wrap/packages/ look for the packages with a date 22-Mar-2004 Do not forget to modify your lrpkg.cfg, you need a few more packages like libnsl and libcrypt pls keep me updated cheers Tried them out last night, and they

Re: [leaf-user] RAM disks

2004-03-22 Thread Erich Titl
Hi At 07:57 22.03.2004 +, Shango wrote: How can I change the amount of RAM allocated to a RAM disk in Bering 1.2? I've searched researched... the mail archive is a useful tool in these circumstances... http://leaf.sourceforge.net/doc/guide/biaddrm.html cheers Erich THINK Püntenstrasse

Re: [leaf-user] Updated SSH packages

2004-03-22 Thread Erich Titl
Dave At 15:34 19.03.2004 +, Dave Hunt wrote: Hi All, Does anyone have more recent versions of the ssh/sshd/sftp packages? There's a security advisory (http://www.openssl.org/news/secadv_20040317.txt) that affects the current versions in use at http://leaf.sourceforge.net/devel/jnilo/ I

Re: [leaf-user] Which Distro for This Firewall/Router?

2004-03-22 Thread Erich Titl
Cal At 09:47 22.03.2004 -0500, you wrote: On Fri, 2004-03-19 at 15:01, Eric Spakman wrote: Calvin, Too give some extra information about Bering-uClibc packages that can be used for the asked functionality. Here is a summary of the functionality required: Thank you very much for

Re: [leaf-user] Network time synchronization

2004-03-17 Thread Erich Titl
Hi At 11:00 17.03.2004 +, Shango wrote: I can think of 2 causes: 1. You are sync'ing your Bering box to a timeserver in a different timezone than you, in which case get a server in your location: http://www.eecis.udel.edu/~mills/ntp/servers.html NTP servers usually serve UTC

Re: [leaf-user] Delay after loading boot modules

2004-03-16 Thread Erich Titl
Mark At 18:14 16.03.2004 +1100, Mark Holmes wrote: Hello, Ok, looks like I have an answer after some playing with /linuxrc. After turning on VERBOSE to see what is happening, this is where in the script appears to fail: # Query /proc/cmdline line for a 'boot' option. # This will solve the

Re: [leaf-user] Delay after loading boot modules

2004-03-15 Thread Erich Titl
Mark At 19:14 15.03.2004 +1100, Mark Holmes wrote: Hello, I'm using a computer with no keyboard / monitor and booting off a compact flash card using an IDE - Compact Flash adaptor. The setup runs quite nice. I recently set about setting up a boot system using a Nexdisk USB storage device. (as a

[leaf-user] Re: [leaf-devel] New linuxrc mods ready for testing

2004-03-14 Thread Erich Titl
At 16:36 14.03.2004 -0600, you wrote: re: mounting various partitions in /linuxrc I have been thinking more about this issue, and have come to the following conclusion (mantra). Repeat after me: ... linuxrc IS NOT init ... ... linuxrc IS NOT init ... ... linuxrc IS NOT init ... true, true

Re: [leaf-user] USB Pen Drive

2004-03-09 Thread Erich Titl
Roger At 16:07 09.03.2004, you wrote: Greetings All, I've been trying to configure a Bering 1.2 system to accept my Lexar Jumpdrive (USB pen drive). I loaded the USB modules as well as scsi-mod. I tested with both usb-ohci and usb-uhci. Usb-uhci seems to work. I mounted /proc/bus/usb and the

Re: [leaf-user] Could not mount backup device on usb pen drive

2004-03-03 Thread Erich Titl
Ronny It's an old bug... I ran into it a few times, but was always too lazy to track it down, because it was so easy to get around. At 11:19 03.03.2004 +0100, Ronny Aasen wrote: I have found a strange behavior when trying to backup packages using the shortcuts added when using custom

Re: [leaf-user] Moving from Dachstein to Bering

2004-03-02 Thread Erich Titl
Karl At 15:18 02.03.2004 -0600, Karl Schmidt wrote: I've just moved a fire wall from Dachstein to Bering and have everything working except one thing. Before there was a set up where if I would: ssh -P333 firewall.domain.com The firewall would pass that on to a private server using port 22.

Re: [leaf-user] Actiontec DSL gateway with Qwest DSL and rfc 1918

2004-02-24 Thread Erich Titl
At 22:56 23.02.2004 -0800, Eric House wrote: . In one sense, the problem's solved. But: is this a reasonably safe thing to do? Has anybody out there found a better solution using LEAF with an Actiontec? Ideally I'd be able to turn the thing into a dumb bridge, but when it's set up that way

[leaf-user] Re: Actiontec DSL gateway with Qwest DSL and rfc 1918

2004-02-24 Thread Erich Titl
into a dumb bridge, but when it's set up that way I can't get my IP address via dhcp. I'm not ready to double the cost of the connection to get a static IP address. Erich Titl [EMAIL PROTECTED] then asked Can't you use pppoe/a ? The modem uses pppoa to connect to Qwest, as per Qwest's configuration

Re: [leaf-user] Almost there ...

2004-02-22 Thread Erich Titl
Joah At 04:00 22.02.2004, joah moat wrote: Okay, I have made some more progress with my Bering-uClibc2.1rc2 on notebook: Good, but see below I made an error in my report this morning: lsmod does return the use of pcnet_cs.o module. (Darn, go figure I should prompt lsmod when the pcmcia

Re: [leaf-user] Publishing an assigned IP address when the modem owns it

2004-02-21 Thread Erich Titl
Eric At 02:58 21.02.2004, Eric House wrote: ... The Actiontec box has an http configuration interface through which the assigned IP address is visible. After tweaking shorewall to allow fw-net connections I can use snarf and grep to figure out the IP address. But 1) that's a pain; and 2) I

Re: [leaf-user] How can I test my PCMCIA eth1?

2004-02-21 Thread Erich Titl
Hi At 20:20 21.02.2004, joah moat wrote: I am too old to surrender now ... :) Well, let's see. I will be more specific with my configuration. I have a D-link 670 PCMCIA card with an extended bot (for plugin) on the top PCMCIA port. I have a 3com 589 PCMCIA card with a doggle (for plugin)

Re: [leaf-user] Re: LEAF on Notebook help

2004-02-20 Thread Erich Titl
Joah At 19:53 19.02.2004, joah moat wrote: Ecxept that joe moat is still not up and running :( That is not a complete problem description, could you tell us _exactly_ what your problem is? We would then be in a better position to help you. cheers Erich THINK Püntenstrasse 39 8143 Stallikon

Re: [leaf-user] QOS script

2004-02-11 Thread Erich Titl
Pascal At 19:39 11.02.2004, Pascal OFFREDO wrote: Hi, I'm using Bering 1.2 I've been playing manually for several days with Traffic control in an ipsec tunnel ... Works fine. Now, I'd like to automate it with a script.I'd like it to be played as soon as the ipsec (ipsec0, ipsec1, ...) interface

Re: [leaf-user] libm.lrp availabiltiy?

2004-02-09 Thread Erich Titl
Hi At 20:03 08.02.2004 -0800, [EMAIL PROTECTED] wrote: Hey all, I've been looking at setting up a timeserver on my Bering 1.2 box, and have a bit of confusion over the libm.lrp package. In the User's manual, the link for the libm.lrp package returns a 404 error. When I went looking for it in

Re: [leaf-user] solved: loading D-link de650

2004-02-09 Thread Erich Titl
Henning At 12:01 09.02.2004 +0100, Henning Jebsen wrote: That's funny, Bering-uClibc 2.1 did not default to this with my d-link 670. So this bug seems only to be cleaned in 1.2 ulib not in the older version, I use: bering 1.0 glib other card is not supplying DHCP for my network. I think I have

Re: [leaf-user] Kind of OT : LEAF based Ax wi-fi node

2004-02-03 Thread Erich Titl
Tom At 14:50 02.02.2004 -0800, Tom Eastep wrote: On Monday 02 February 2004 02:34 pm, Stelios Koroneos wrote: I assume that is a crypto hardware card I see in the image. Could you please explain the driver you chose Erich, Actually its a Realtek ethernet card... Crypto is the name of the

Re: [leaf-user] machine access by hostname in the DMZ?

2004-02-03 Thread Erich Titl
Charles At 13:16 02.02.2004 -0600, Charles Steinkuehler wrote: .. I do this sort of thing using the 'views' feature of Bind9. Systems get different IP's for the same hostname depending on who's asking (based on IP address of the querying system). It's pretty easy to setup if you're running

Re: [leaf-user] machine access by hostname in the DMZ?

2004-02-03 Thread Erich Titl
At 14:25 03.02.2004, Charles Steinkuehler wrote: Erich Titl wrote: Charles At 13:16 02.02.2004 -0600, Charles Steinkuehler wrote: .. I do this sort of thing using the 'views' feature of Bind9. Systems get different IP's for the same hostname depending on who's asking (based on IP address

Re: [leaf-user] Kind of OT : LEAF based Ax wi-fi node

2004-02-02 Thread Erich Titl
Stelios At 17:53 02.02.2004, Stelios Koroneos wrote: Greetings ! This is kind of OT but you might be interested in seeing a LEAF box serving as an Ax wi-fi node :-) http://www.stelioscellar.com/SteliosBox/AWMN/ I assume that is a crypto hardware card I see in the image. Could you please explain

Re: [leaf-user] Bering and the XModem

2004-01-31 Thread Erich Titl
James At 14:20 28.01.2004 +, James Neave wrote: Hi all, Well, xDSL modems and Bering are hideous. UK modems use all different sorts of chipsets for different ISPs, none of which has native support for Bering (no nice LRPs). But I found this, and this looks good.

Re: [leaf-user] bash.lrp seems to break some scripts

2004-01-31 Thread Erich Titl
Geoff At 11:46 28.01.2004 -0800, Geoff Nordli wrote: Has anyone noticed that some scripts break when using the bash package? Yes, there has been a thread discussing this recently. Most scripts are written in an ashen dialect. Basically what needs to be done is to remove the link from /bin/sh

RE: [leaf-user] Bering and the XModem

2004-01-30 Thread Erich Titl
Hi James At 09:57 29.01.2004 +, James Neave wrote: Hi, Thanks Eric, That review says it does not do any NAT/firewalling. Whether that's true, who knows. PPP Half Bridge and DHCP Spoof modes is mentioned, but they might be talking about competitors there. It gives the WAN IP to a DHCP

Re: [leaf-user] machine access by hostname in the DMZ?

2004-01-27 Thread Erich Titl
Hi At 15:01 24.01.2004, arif wrote: Hey folks, the recent thread on machine access by hostname reminded me that I'd been intending to setup some form of DNS so that I could access my server in the DMZ by hostname. I've searched around and done a pretty good of confusing myself since this is

Re: [leaf-user] Bering-uClibc: pcmcia_orinico + dhcpd

2004-01-20 Thread Erich Titl
Scott At 22:57 19.01.2004 -0500, Scott Merrill wrote: I just upgraded my home LEAF/Bering 1.1 box to LEAF/Bering-uClibc 2.1rc1. I have three NICs: eth0 = smc-ultra connected to my DSL line eth1 = 3c509 connected to my LAN eth2 = Orinoco Gold I configured dhcpd to provide leases to clients on

Re: [leaf-user] Increasing /var/log size

2004-01-07 Thread Erich Titl
Stelios At 19:55 07.01.2004, Stelios Koroneos wrote: Greetings to all ! I am debugging a wireless AP router based on Bering 1.2 and since there is a lot of logging going on, the /var/log runs our of space very fast. # df Filesystem 1k-blocks Used Available Use% Mounted on

Re: [leaf-user] Xircom pcmcia

2004-01-05 Thread Erich Titl
Robert At 18:46 02.01.2004 +0100, Robert Sabine von Knobloch wrote: Hallo LEAF World ! Has anyone experience with Xircom pcmcia NICs ? I'm trying to convert a friend to LEAF, he has an old Compaq laptop he wants to use (because it makes no noise). This is equipped with a double pcmcia card slot

Re: [leaf-user] Boot Bering from floppy, most Pkgs on CD

2003-12-30 Thread Erich Titl
Gene At 02:28 30.12.2003 -0500, Gene Smith wrote: I am attempting to run Bering from a non-bootable CD which requires booting from floppy. I am presently running fine for over a year from two floppies but would like to have more packages than will fit on my two floppies. Is there explicit

RE: [leaf-user] Setting time/date clarification

2003-12-30 Thread Erich Titl
I know it is bad karma to reply to ones own messages, but then I must have eaten really rotten things before I wrote this At 00:37 30.12.2003 +0100, Erich Titl wrote: ... Normally /etc/TZ is read at system boot. You can set TZ manually for your terminal session or add it to your .profile

RE: [leaf-user] Setting time/date clarification

2003-12-30 Thread Erich Titl
At 06:24 30.12.2003 -0800, Craig Caughlin wrote: Hi folks, Hey, thanks Erich. I forgot to ask you: I *think* I know what the ntpdate package is for (updating the firewall itself), what's the ntpsimpl package for? ntpdate (at least that is my opinion) is a one time shot to initialise the your

Re: [leaf-user] Static DNS entry

2003-12-22 Thread Erich Titl
Hi At 09:52 22.12.2003 +0100, you wrote: Does anyone know a simple way to set a couple of static dns entries on my LEAF Bering (uClib) box? I'm running DNSCACHE for resolving Internet names and have an MS Win2000 Domain controller as internal DNS (it needs it's own dynamic DNS for active

Re: [leaf-user] Bash Bering uClibc

2003-12-22 Thread Erich Titl
Robert At 14:57 22.12.2003 +0100, Robert Sabine von Knobloch wrote: Hello LEAF World! My earlier mail was too hasty, another problem has emerged when using bash. Backup of any or all package (backup... c... L...)results in each package reporting a line number and terminated ticker. A reboot

Re: [leaf-user] uClibc2 Bering

2003-12-21 Thread Erich Titl
Hi At 12:07 21.12.2003 +0100, Robert Sabine von Knobloch wrote: Hello LEAF World, I have just made the transition from Bering 1.2 to the new uClibc release. So far I have got it all working, using only the new uClibc packages except that when I try to use the bash shell (packages ncurses.lrp

RE: [leaf-user] QOS setup under Bering 1.2

2003-12-17 Thread Erich Titl
Joey for your reference, this is how the wondershaper installs the root qdisc # install root HTB, point default traffic to 1:20: tc qdisc add dev $DEV root handle 1: htb default 20 HTH Erich At 22:30 16.12.2003 -0600, Joey Officer wrote: ... firewall: -root- # tc qdisc add dev eth0 root handle

<    3   4   5   6   7   8   9   10   11   >