[leaf-user] IPSec errors, kernel/userland version mismatch?

2007-03-30 Thread James Neave
Hi, I've been asked to add VPN capabilities to our router here at work. It's currently Bering-uClibc 2.3.1. I keep getting this error in the /var/secure log when starting up or connecting to the VPN: Connecting: ERROR: L2TP-PSK[2] 5.6.7.8 #3: pfkey write() of SADB_ADD message 5 for Add SA

Re: [leaf-user] IPSec errors, kernel/userland version mismatch?

2007-03-30 Thread James Neave
Of James Neave Sent: 30 March 2007 12:55 To: leaf-user@lists.sourceforge.net Subject: [leaf-user] IPSec errors, kernel/userland version mismatch? Hi, I've been asked to add VPN capabilities to our router here at work. It's currently Bering-uClibc 2.3.1. I keep getting this error in the /var

[leaf-user] How to wipe Squid configuration

2006-11-22 Thread James Neave
Hi, I'm experimenting with squid on our new Bering-uClibc 3.0 box. Could somebody tell me how to wipe the configuration for squid without wiping all of the config for the box? Also, squid is (apparently) meant to come with a command called 'client'? Or GNU is meant to have a 'client' command? Is

Re: [leaf-user] How to wipe Squid configuration

2006-11-22 Thread James Neave
PROTECTED] Sent: 22 November 2006 17:13 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] How to wipe Squid configuration Hi James, The simplest method is just deleting the squid config file, save config (in lrcfg) and reboot. After a reboot the default config file

[leaf-user] DMA problem

2006-11-16 Thread James Neave
Hi, We're building a squid box and testing Being-uClibc 3.0 at the same time. I'm trying to enable DMA for the CD and HDD in the box. But: hdparm -d 1 /dev/had gets me: HDIO set dma failed: operation not permitted It's a PIII machine with i810 and ICH (82801AA) Anybody have any idea what's

Re: [leaf-user] DMA problem

2006-11-16 Thread James Neave
-Original Message- From: [EMAIL PROTECTED] [mailto:leaf-user- [EMAIL PROTECTED] On Behalf Of James Neave Sent: 16 November 2006 13:08 To: leaf-user@lists.sourceforge.net Subject: [leaf-user] DMA problem Hi, We're building a squid box and testing Being-uClibc 3.0 at the same

Re: [leaf-user] DMA problem

2006-11-16 Thread James Neave
PROTECTED] Sent: 16 November 2006 13:21 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] DMA problem Hi James, Maybe your chipset needs a linux driver for DMA? If that's true, you can add the driver to the moddb and enable it in /etc/modules. Eric

Re: [leaf-user] DMA problem

2006-11-16 Thread James Neave
Hi, It was piix.o. Thanks, James. -Original Message- From: Eric Spakman [mailto:[EMAIL PROTECTED] Sent: 16 November 2006 13:21 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] DMA problem Hi James, Maybe your chipset needs a linux driver for DMA

Re: [leaf-user] DMA problem

2006-11-16 Thread James Neave
[mailto:[EMAIL PROTECTED] Sent: 16 November 2006 14:36 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: RE: [leaf-user] DMA problem Hi James, Glad it's working. There is a small package where you can list the devices which should be dma enabled, so you won't need to use

[leaf-user] Broken links on LEAF website.

2006-11-13 Thread James Neave
Hi, Just to let you know the documentation links on the Bering-uClibc subsection of the leaf.sourceforge.net website are broken. On the page: http://leaf.sourceforge.net/bering-uclibc/ These links: http://leaf.sourceforge.net/doc/bk02.html http://leaf.sourceforge.net/doc/bk05.html In the

Re: [leaf-user] dnsmasq will not start

2006-10-13 Thread James Neave
-Original Message- From: Eric Spakman [mailto:[EMAIL PROTECTED] Sent: 11 October 2006 21:43 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] dnsmasq will not start Hi James, I probably asked you the previous time, but have you tried without

[leaf-user] dnsmasq will not start

2006-10-11 Thread James Neave
Hi, A few months ago I asked this question and started getting some help but I've not had the time to complete it. Anyway, the last thing that happened was that I as advised to install the latest version of dnsmasq.lrp (by Eric, in mid-July, sorry Eric), which I have done now. Version: 2.27

Re: [leaf-user] dnsmasq will not startq

2006-07-14 Thread James Neave
Hi, I don't know, where do you find the version number? I shall try again with a new package, but not today (too much work to do) Some time next week. Thanks, James. -Original Message- From: Eric Spakman [mailto:[EMAIL PROTECTED] Sent: 13 July 2006 19:31 To: James Neave Cc: leaf-user

[leaf-user] dnsmasq will not startq

2006-07-13 Thread James Neave
Hi, Getting this when I try to start dnsmasq: dnsmasq: failed to find list of interfaces: Cannot assign requested address The only reference I can find to this error is something about IPv6. Does anybody know what's going on? Thanks, James. dnsmasq.conf: # Configuration file for dnsmasq. #

Re: [leaf-user] dnsmasq will not startq

2006-07-13 Thread James Neave
Message- From: Eric Spakman [mailto:[EMAIL PROTECTED] Sent: 13 July 2006 14:56 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] dnsmasq will not startq Hi James, The only thing that I see in the config what could cause this are the following two entries: interface

RE: [leaf-user] Network Load Analysis

2006-03-03 Thread James Neave
] Sent: 03 March 2006 07:27 To: James Neave; Leaf-User (E-mail) Subject: Re: [leaf-user] Network Load Analysis James Neave wrote: Looks good, I don't suppose you know where a Bering-SNMP for dummies HOWTO is? :) That's not really Bering specific, any net-snmp HOWTO will do. Although I must

[leaf-user] Network Load Analysis

2006-03-02 Thread James Neave
Hello list, Does anybody know of any packages that would allow me to look at network load and what is using bandwidth? Sometimes our external link slows to a crawl and I would like to find out what's causing it and mitigate it. Thanks, James. The information in this email is confidential and

[leaf-user] ip_conntrack_pptp will not load

2006-02-02 Thread James Neave
Hi, Our Bering box crashed yesterday and somebody had pinched the disk from the drive. I restored it from backups and it all appeared to load fine, apart from this error in syslog: Feb 1 17:07:34 gateway kernel: unable to load module ip_conntrack_pptp automatically because kernel was compiled

RE: [leaf-user] ip_conntrack_pptp will not load

2006-02-02 Thread James Neave
Hi, Slight update. I can manually load the modules with: insmod /lib/modules/ip_conntrack_pptp insmod /lib/modules/ip_nat_pptp syslog: Feb 2 09:22:43 gateway kernel: ip_conntrack_pptp version 1.9 loaded Feb 2 09:23:05 gateway kernel: ip_nat_pptp version 1.5 loaded Then it works fine. Here is

[leaf-user] IPSec qeustion

2005-10-19 Thread James Neave
Hello list, Quick question, for Bering-uClibc. To use a box as an IPSec server, is it still FreeS/WAN that gets used? And is all the same documentation that was used for original Bering still valid? Thanks, James. The information in this email is confidential and may be legally privileged.

RE: [leaf-user] Man pages and Samba

2005-08-25 Thread James Neave
:[EMAIL PROTECTED] Sent: 24 August 2005 17:14 To: leaf-user@lists.sourceforge.net Subject: RE: [leaf-user] Man pages and Samba On Wed, 2005-08-24 at 06:46, James Neave wrote: The test version of samba.lrp is missing smbmount. Is it in another lrp somewhere, or is samba.lrp just incomplete

[leaf-user] Man pages and Samba

2005-08-24 Thread James Neave
Hello, I have a network that needs a WINS server, to be provided by Samba. But I can't fit the Samba.lrp package on the boot floppy. What I do have is a NAS device that I could store all sorts of packages on and it's always on. I've got the module to install that will allow me to mount SMB

RE: [leaf-user] Man pages and Samba

2005-08-24 Thread James Neave
Hi, The test version of samba.lrp is missing smbmount. Is it in another lrp somewhere, or is samba.lrp just incomplete at the moment? Thanks, James. The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by

RE: [leaf-user] Re: Identify Bering-uClibc version.

2005-08-12 Thread James Neave
2.2.2 Thankyou! James. The information in this email is confidential and may be legally privileged. It is intended solely for the addressee. Access to this email by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, distribution or any action

[leaf-user] Identify Bering-uClibc version.

2005-08-11 Thread James Neave
Hi, Hi, I need to install smbfs on my Bering disk, but I can't remember which version it is. The kernel is 2.4.26, so can I just use one of the modules tarballs for 2.4.26 or does it have to match my Bering version? If it does, how do identify the Bering version number? Thanks, James. The

[leaf-user] What is the proper way to add persistent routes?

2005-08-08 Thread James Neave
Hello all, Now that I require routes to be added to make my network work, I'm looking into how to make them automatically add themselves when the system boots. I tried putting a simple script in if-up.d, but it ran too soon. It would not wait for the br0 interface to come up (it waits for 30

[leaf-user] Backing up LEAF disks over the network.

2005-07-21 Thread James Neave
Hi, Can anybody tell me how I could back up a LEAF disk over the network? I can get and put files to my LEAF boxes using SCP, but at the moment the only way to take a backup image is to put the disk in another machine and take an image backup. It's probably dd but I don't know how to set that up

RE: [leaf-user] Backing up LEAF disks over the network.

2005-07-21 Thread James Neave
? Thanks, James. -Original Message- From: Charles Steinkuehler [mailto:[EMAIL PROTECTED] Sent: 21 July 2005 12:12 To: James Neave Cc: leaf-user@lists.sourceforge.net Subject: Re: [leaf-user] Backing up LEAF disks over the network. -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Erich Titl

[leaf-user] Multicast routing

2005-07-21 Thread James Neave
Hi! Last one for today :) Multicast routing. Does anybody know what it would take to turn Bering-uClibc into a multicast enabled router? My provider, NTL, is apparently multicast enabled. So I could watch and listen to multicast transmissions if I have one windows box attached to the usb port

RE: [leaf-user] FW: Load balancing (LARTC 4.2) over 2connectionson 2 routers.

2005-07-20 Thread James Neave
Hi Charles, CS: You'll *REALLY* want to pull the two routers into a single box, if at all Possible. Me: I don't think that's possible. They use two of these to turn their ADSL connections into a nice, neat Ethernet connections: http://www.adslnation.co.uk/products/xmodem-ce.php But they run

RE: [leaf-user] FW: Load balancing (LARTC 4.2) over 2connectionson 2 routers.

2005-07-20 Thread James Neave
Hi, On DNS caching with LEAF with my dual provider network. At the moment resolv.conf is set by dhcpcd from the ISPs DHCP servers. As I have two connections, this is breaking DNS as you can only talk to Demon's DNS cache over Demon's ADSL network and vice-versa with BT's ADSL service. If I turn

[leaf-user] FW: Load balancing (LARTC 4.2) over 2 connections on 2 routers.

2005-07-19 Thread James Neave
Hello All, I've been trying to get some assistance on the LARTC mailing list on the question below. No joy. Not really a LEAF problem, except that we use two Bering-uClibc machines as the routers. A bit OT, but if anybody can shed some light I would be grateful :) There should have been an

RE: [leaf-user] FW: Load balancing (LARTC 4.2) over 2connectionson 2 routers.

2005-07-19 Thread James Neave
/Daves) with multicast routing for mDNS and iTunes. ** Thanks, James. -Original Message- From: Arne Bernin [mailto:[EMAIL PROTECTED] Sent: 19 July 2005 16:03 To: James Neave Subject: RE: [leaf-user] FW: Load balancing (LARTC 4.2) over 2connectionson 2 routers. On Tue, 2005-07-19

RE: [leaf-user] lets talk about something--anything!

2005-07-07 Thread James Neave
Hi, Another problem with lrcfg is that once you have more than 20 config options they scroll off the screen. True, that's becoming an issue with the shorwall package. Someone having a solution for it? Not really a solution, but coming in using PuTTY on a WinXP box, making the terminal window

RE: [leaf-user] lets talk about something--anything!

2005-06-30 Thread James Neave
Hi, One tricky thing I've found as a Windows LEAF user is the wall of choice when it comes to picking which Linux distro to add to my WinXP machine for the purpose of building for LEAF. I've tried Mandrake, one for non technical users, and I was baffled, it was vast! With LEAF I know where

RE: [leaf-user] lets talk about something--anything!

2005-06-30 Thread James Neave
for my annual attempt-to-get-to-grips-with-linux session when the replacement turns up. Maybe I'll save up for a separate PC for it, I hate dual-boot. Thanks, Jim. -Original Message- From: Martin Hejl [mailto:[EMAIL PROTECTED] Sent: 30 June 2005 11:46 To: James Neave Cc: leaf-user

RE: [leaf-user] lets talk about something--anything!

2005-06-28 Thread James Neave
Maybe it's been perfected? ^^ Jim. -Original Message- From: cpu memhd [mailto:[EMAIL PROTECTED] Sent: 28 June 2005 07:55 To: leaf-user@lists.sourceforge.net Subject: [leaf-user] lets talk about something--anything! Only 64 messages this month. Are less and less people using leaf, what

RE: [leaf-user] lets talk about something--anything!

2005-06-28 Thread James Neave
CD, but ultimately decided it probably wasn't what people wanted. I base this theory on the fact that few people request this sort of thing and the fact that Lince never really took off, what do you think? -cpu James Neave wrote: Maybe it's been perfected? ^^ Jim

RE: [leaf-user] Network Configuration Ideas

2005-06-28 Thread James Neave
Hi, When you say two routes, do you mean: 1: NATed behind the LEAF box. 2: Through a Citrix session. When you say you don't want LEAF as a single failure point, do you mean you don't want LEAF to be a NAT'ing firewall for you internet connection as well as performing the routing and/or

RE: [leaf-user] Network Configuration Ideas

2005-06-28 Thread James Neave
is completely capable of performing this function, it just introduces another failure point to their network that I don't want. Thanks - Bob Coffman -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of James Neave Sent: Tuesday, June 28, 2005 9:06 AM To: Robert K

RE: [leaf-user] Network Configuration Ideas

2005-06-28 Thread James Neave
. OR Throw away the Cisco and just use LEAF! :D Regards, James. -Original Message- From: Robert K Coffman Jr - Info From Data Corporation [mailto:[EMAIL PROTECTED] Sent: 28 June 2005 15:32 To: James Neave; leaf-user@lists.sourceforge.net Subject: RE: [leaf-user] Network Configuration Ideas

RE: [leaf-user] Bering-uClibc, are Julian Anastasov's routing patches applied?

2005-05-04 Thread James Neave
Hi, OK, that buildtool looks good. Here come the brain-dead questions :) 1) buildtool is linux only, right? 2) Recommendations for which flavour of linux to use? 3) Which packages will I have to re-compile? 4) Is there any way to keep the configuration from my existing Bering box? Referring

[leaf-user] Bering-uClibc, are Julian Anastasov's routing patches applied?

2005-05-03 Thread James Neave
Hi, Can anybody tell me whether Julian Anastasov's routing patches are applied to stock Bering-uClibc disks? http://www.ssi.bg/~ja/#routes Or more generally, how can I find out what patches have been applied to Bering-uClibc? Is there a list somewhere? Thanks, James. The information in this

RE: [leaf-user] Cheap NICs or Expensive NICs?

2005-03-02 Thread James Neave
2005 18:27 To: James Neave; leaf-user@lists.sourceforge.net Subject: RE: [leaf-user] Cheap NICs or Expensive NICs? Quick question. What is this impact of cheap NICs (8139too, smc900, etc) instead of expensive NICs (3c905)? For instance, when building a NAT/firewall device to share xDSL

[leaf-user] Cheap NICs or Expensive NICs?

2005-03-01 Thread James Neave
Hi, Quick question. What is this impact of cheap NICs (8139too, smc900, etc) instead of expensive NICs (3c905)? For instance, when building a NAT/firewall device to share xDSL or cable. Thanks, James. The information in this email is confidential and may be legally privileged. It is intended

RE: [leaf-user] Re: leaf-user digest, Vol 1 #2420 - 7 msgs

2004-09-24 Thread James Neave
Any ideas how to make installation/configuration easier? Firewall users are not so likely to be Linux users. Most Linux distros come with installable/installed firewalls, and workstations can be made fairly secure in themselves. A LEAF installation tool should either run with whatever OS

[leaf-user] RE: leaf-user digest, Vol 1 #2420 - 7 msgs

2004-09-23 Thread James Neave
On Thu, 23 Sep 2004 10:47:15 +0100 James Neave [EMAIL PROTECTED] writes: But simple to start with, a windows or platform independent application that automates the download, assembly and initial configuration (meaning the necessary steps from the installation docs) would greatly increase

[leaf-user] RE: On Bering and modems.

2004-09-22 Thread James Neave
Hi, Victor Wrote:- I added the list in. I built a few Bering dialout boxes for others - worked reliably for 2 years. I have used both internal and external modems. If internal - use an ISA modem - not pci - that are almost always software modems. I

RE: [leaf-user] Traffic Shaping

2004-09-02 Thread James Neave
Hi, Yes, there are lots of modules that you need to load. They are in Your modules/kernel/net/sched. I can't remember how I found out which ones I needed. Either I loaded all of them or I used trial and error. If you look carefully in the script, there is a comment on how to put it into debug

RE: [leaf-user] Traffic Shaping

2004-09-02 Thread James Neave
-mule) kill anything wondershaper achieves. So far I have not found a way to set traffic that uses random ports to very low priority. Has anybody figured this out? James. -Original Message- From: Roger E McClurg [mailto:[EMAIL PROTECTED] Sent: 02 September 2004 15:42 To: James Neave Cc

RE: [leaf-user] DHCP NTL cable problem.

2004-09-01 Thread James Neave
NTL cable problem. Unless I missed something, you haven't yet resolved this. So here are a few thoughts. At 09:25 AM 8/26/2004 +0100, James Neave wrote: Hi all, NTL has recently upgraded my cable box, taking my line from 1Mb/s to 1.5Mb/s. Very nice of them. But my fairly long serving Bering 1.2

RE: [leaf-user] TC for Bering 1.2

2004-08-26 Thread James Neave
Hi, I know I DO use htb wondershaper. I'm pretty sure I just grabbed tc.lrp and a whole bunch of modules and away I went. But it's been a long time since I loaded it and forgot about it. Sorry I can't be of more help. :\ James. -Original Message- From: Roger E McClurg [mailto:[EMAIL

[leaf-user] DHCP NTL cable problem.

2004-08-26 Thread James Neave
Hi all, NTL has recently upgraded my cable box, taking my line from 1Mb/s to 1.5Mb/s. Very nice of them. But my fairly long serving Bering 1.2 box has thrown a hissy fit, because NTL reset the MAC registration which only lets you connect registered NICs to their network. Now, pump won't get an IP

RE: [leaf-user] DHCP NTL cable problem.

2004-08-26 Thread James Neave
logging for the DHCP conversation on? Thanks, James. -Original Message- From: Simon Bolduc [mailto:[EMAIL PROTECTED] Sent: 26 August 2004 12:42 To: James Neave Cc: [EMAIL PROTECTED] Subject: Re: [leaf-user] DHCP NTL cable problem. Hey James, Since the registration is based on MAC

[leaf-user] Bering 1.2 and SSH Sentinel problem.

2004-08-18 Thread James Neave
Hi all, I now have an SSH Sentinel client to get through our company Bering box. After some initial mistakes with the PSK, the diagnostics for SSH-S now declare our connection functional, but it still does not connect. I guess this is the ESP/NAT problem, yes? We will probably correct this by

[leaf-user] IPTables ipt_*.o modules, what are they for?

2004-04-27 Thread James Neave
Hi, I'm wondering what the ipt_*.o modules do, specifically ipt_ah.o and ipt_esp.o. Just curious really, we have lots of different local win32 IPSEC based vpn dialers and endless problems with them (mostly local win32 problems, bleh). Ta, James.

[leaf-user] The OpenH323 Gatekeeper.

2004-04-27 Thread James Neave
Hi, I've been asked to look into getting video/audio conferencing working to very remote sites. I'm looking at gatekeepers and the conntrack and NAT modules for IPTables. We will probably use MSN Messenger (yuck) and/or MS NetMeeting (slightly less yuck) ip_conntrack_h323.o and ip_nat_h323.o

RE: [leaf-user] Is my NIC the bottleneck?

2004-04-15 Thread James Neave
Hi, 768Kb/s = 96KB/s or 93KB/s depending on what your ISP considers a Kilo. I have 1024 over 256 cable, I very VERY rarely see one connection hit more than 70. If I want a fast download, I use Getright and use 3 or 4 different sources. Does anyone else think that all this massive increase in

[leaf-user] Probably OT: Cisco VPN Passthrough Bering 1.2

2004-04-15 Thread James Neave
Hi, We're trying to connect the Cisco VPN Dialer (v3) to a Cisco VPN concentrator through a Bering 1.2 box performing firewalling and NAT, pretty standard stuff. The rules we use are: Policy = No traffic allowed period. Rules for this case: ACCEPT loc:192.168.x.y net:a.b.c.d udp 500 ACCEPT

RE: [leaf-user] Probably OT: Cisco VPN Passthrough Bering 1.2

2004-04-15 Thread James Neave
12:46 To: James Neave Cc: leaf Subject: Re: [leaf-user] Probably OT: Cisco VPN Passthrough Bering 1.2 James Neave wrote: snip Now, this is why it is probably OT. It work fine on Win2K SP1 boxes It does NOT work on Win2K SP4 and WinXP SP1 So currently is seems to be a Windows problem, not a LEAF

[leaf-user] ip_conntrack_pptp csum error

2004-03-31 Thread James Neave
Hi, We're running Bering 1.2 and use the ip_conntrack_pptp module. But every time somebody dials to an external pptp server, we get error: ip_conntrack_pptp.c: bad csum I say error, but the connections do actually work, it just pops that up on the screen of the Bering box. So not really a

[leaf-user] ACX100 drivers.

2004-03-30 Thread James Neave
Hi, Could somebody compile the drivers for ACX100 based 802.11b cards please? I need them for Bering-uClibc 2.1, but mandrake and I are not getting on at the moment. http://acx100.sourceforge.net Thanks, James. --- This SF.Net email is

RE: [leaf-user] Looking for a VPN Solution

2004-03-23 Thread James Neave
Hi, I have PoPToP for Bering. It's around on the LEAF site somewhere. It's a bugger to get working, the version on the website has config files that are not for openSSH. I tracked it all down and have a nice server working for Win32 clients doing their dial-in. When I get home I'll email you my

RE: [leaf-user] Bering and the XModem

2004-01-30 Thread James Neave
tech support though. James. -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: 29 January 2004 07:55 To: James Neave; [EMAIL PROTECTED] Subject: Re: [leaf-user] Bering and the XModem James At 14:20 28.01.2004 +, James Neave wrote: Hi all, Well, xDSL modems and Bering

RE: [leaf-user] Bering and the XModem

2004-01-30 Thread James Neave
that review was written, the UK is PPPoA. Thanks, James -Original Message- From: Erich Titl [mailto:[EMAIL PROTECTED] Sent: 29 January 2004 10:33 To: James Neave; [EMAIL PROTECTED] Subject: RE: [leaf-user] Bering and the XModem Hi James At 09:57 29.01.2004 +, James Neave wrote: Hi

[leaf-user] Bering and the XModem

2004-01-28 Thread James Neave
Hi all, Well, xDSL modems and Bering are hideous. UK modems use all different sorts of chipsets for different ISPs, none of which has native support for Bering (no nice LRPs). But I found this, and this looks good. http://www.adslguide.org.uk/hardware/reviews/2003/q3/xmodem.asp An ADSL modem

RE: [leaf-user] Bering can't handle Dell GX150 integrated Ethernet?

2004-01-22 Thread James Neave
Whoops, came a bit late to this one.. I had the same problem with 905's. Yes there are two different drivers in the modules tarball, the one that did not work for you requires: pci-scan.o 3c95x.o And the other one does not. This information is buried somewhere in the modules.dep file. This has

[leaf-user] Shorewall, Static NAT and loc2loc rules.

2003-11-21 Thread James Neave
Hi all, This is a strange one. The Zones: Eth0 = net Eth1 = loc Eth2 = dmz The policy is REJECT or DROP every connection. In the static NAT file I have NetZoneIP eth0 LocZoneIP NO NO NetZoneIP eth1 LocZoneIP NO NO In RULES I have ACCEPT net loc:LocZoneIP tcp 80 ACCEPT loc loc:LocZoneIP tcp

RE: [leaf-user] TI ACX100 based wireless NIC problem.

2003-10-25 Thread James Neave
of windows (finally, I was never able to get X to work with other linux distros). Which means I can compile stuff. Thanks, James. -Original Message- From: Sebastian A. Aresca [mailto:[EMAIL PROTECTED] Sent: 22 October 2003 17:08 To: James Neave; [EMAIL PROTECTED] Subject: Re: [leaf-user

RE: [leaf-user] TI ACX100 based wireless NIC problem.

2003-10-24 Thread James Neave
] Sent: 22 October 2003 17:08 To: James Neave; [EMAIL PROTECTED] Subject: Re: [leaf-user] TI ACX100 based wireless NIC problem. James wrote: Hi again, Well, I was lucky enough to find some binaries for the TI acx100 chipset. The one compiled for 2.4.20 with gcc 3.2 loads with success. But lsmod

[leaf-user] TI ACX100 based wireless NIC problem.

2003-10-21 Thread James Neave
can't set the essid, etc., etc. I'm not sure how I can have an eth1 when the module is unused. I don't know whether pci-scan.o has anything to do with it. Any help, Thanks, James. -Original Message- From: James Neave Sent: 09 October 2003 16:03 To: [EMAIL PROTECTED] Subject: [leaf-user

[leaf-user] Super ISDN Support Box.

2003-10-14 Thread James Neave
Hello All, An all new problem to solve. Came up with this idea, the boss man likes it. Our company supports several clients and the majority have unshakeable policies of ZERO INCOMING INTERNET TRAFFIC. No ports open, period. The only way to remotely support these clients is to dial into their

[leaf-user] 2xNIC Bering won't route? Help!

2003-10-09 Thread James Neave
Hi Everybody, This ones got my hair falling out. A very simple task, which I've done before. 1 Bering box, 2 NICs (3c905C and rtl8139) This box has no external connection (yet, still no ADSL), just needs to route between the two eth adaptors A D-Link WAP (192.168.51.2) is plugged straight into

RE: [leaf-user] 2xNIC Bering won't route? Help!

2003-10-09 Thread James Neave
masklen 24 broadcast 192.168.51.255 (no gateway tag) ip route show just has the two networks with their respective adaptors. Thanks, James. -Original Message- From: Dave Hunt [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 10:37 To: James Neave; [EMAIL PROTECTED

RE: [leaf-user] 2xNIC Bering won't route? Help!

2003-10-09 Thread James Neave
Hi, I'll give that a go. Somehow I got some wires crossed and thought you had to put the IP of the interface you were leaving through. Whoops... Thanks! James -Original Message- From: Dave Hunt [mailto:[EMAIL PROTECTED] Sent: 09 October 2003 11:00 To: James Neave; [EMAIL PROTECTED

[leaf-user] TI ACX100 based wireless NIC problem.

2003-10-09 Thread James Neave
Hello All, *sighs* Well, Alex has managed to buy hardware that seems to universally hate linux... We have a D-LINK 520+ pci wifi nic based on the TI ACX100 chipset. There is a very early open driver for it here http://sourceforge.net/projects/acx100/ Which is still alpha. And a guide to use

RE: [leaf-user] Public Key SSH access

2003-10-08 Thread James Neave
Hi, You mean I can put a key on a disk/USB dongle and use that to authenticate myself to my LEAF box? Instead of passwords? How long are these keys? Much longer than 10-15 char passwords I guess. I also wish to know how to do this :) Thanks, James. -Original Message- From: Matthew

RE: [leaf-user] Load balancing.

2003-10-08 Thread James Neave
Hello All, Well, I think I need a new LRP to get these ADSL modems working. There are docs, .debs and source files here. http://eciadsl.flashtux.org/ Could somebody make this into an eciadsl.lrp file for me please? :) Thanks! James. -Original Message- From: James Neave Sent: 06

RE: [leaf-user] Load balancing.

2003-10-03 Thread James Neave
September 2003 23:15 To: James Neave Cc: LEAF-USER Subject: Re: [leaf-user] Load balancing. On Fri, 2003-09-12 at 01:43, James Neave wrote: Hello all, First of, my definition of Load Balancing is 2 or more Modems in a machine and both are used to connect to a network or ISP, increasing

RE: [leaf-user] Load balancing.

2003-10-03 Thread James Neave
[mailto:[EMAIL PROTECTED] Sent: 11 September 2003 23:15 To: James Neave Cc: LEAF-USER Subject: Re: [leaf-user] Load balancing. On Fri, 2003-09-12 at 01:43, James Neave wrote: Hello all, First of, my definition of Load Balancing is 2 or more Modems in a machine and both are used to connect

[leaf-user] ip_conntrack message

2003-09-17 Thread James Neave
Hello all, Quick one. I got this message in syslog here at work today. Sep 17 12:41:34 firewall kernel: ip_conntrack: max number of expected connections 1 of ftp reached for (Local IP)-(Remote FTP IP), reusing Can somebody tell me what this means and whether it is a problem please? Thankyou,

RE: [leaf-user] Load balancing.

2003-09-12 Thread James Neave
? Thanks everybody! James -Original Message- From: James Neave Sent: 11 September 2003 14:44 To: [EMAIL PROTECTED] Subject: [leaf-user] Load balancing. Hello all, First of, my definition of Load Balancing is 2 or more Modems in a machine and both are used to connect to a network or ISP

[leaf-user] Load balancing.

2003-09-11 Thread James Neave
Hello all, First of, my definition of Load Balancing is 2 or more Modems in a machine and both are used to connect to a network or ISP, increasing the maximum possible bandwidth. A friend asked me a question. Is it possible to load balance two ADSL connections? One is his, one is his

RE: [leaf-user] Bering floppy basics

2003-08-28 Thread James Neave
Hi, The 3.5 SBCs from Diamond Point International might meet your needs. The GX1LCD/3.5 has EIDE, CF drive, 2xUSB, 2xRS232, 1x100baseT and some other stuff. The GX1 uses the Geode 300MHz processor. Only needs one 5V rail to operate as well, so only needs a high quality adaptor, not a PSU. I

RE: [leaf-user] LowCost Small Size x86 System

2003-08-28 Thread James Neave
service - Eth Port is for the LAN and NetAdmin activity. Sincerely -bino- - Original Message - From: James Neave [EMAIL PROTECTED] To: bino-psn [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, August 28, 2003 3:51 PM Subject: RE: [leaf-user] Bering floppy basics Hi, The 3.5 SBCs

RE: [leaf-user] LowCost Small Size x86 System

2003-08-28 Thread James Neave
Hi, --- bino said --- www.dpie.com = No boxes, but you could build a credit card sized LEAF box. -- No IDE port com with it, it's completely CF-Based board -- No 2 PCMCIA port come with it -- No 1 free PCI Slot - The GX1LCD/3,5 does have 2 IDE channels and a CF card slot, on

RE: [leaf-user] Spoofed local source IPs on incoming internet packets.

2003-08-14 Thread James Neave
Hi, Thanks for that, James. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET.

RE: [leaf-user] Can I play Shoutcast streams?

2003-08-09 Thread James Neave
Hi all, Thanks everybody, hoepfully will have some decent radio in my living room now as opposed to the pap they play on Pop Comercial Radio X all the time. Also, thank for the help with DNSCache and Shorewall, I changed the RCDLINKS value for DNCache properly and now it starts up before

[leaf-user] Can I play Shoutcast streams?

2003-08-01 Thread James Neave
Hi all, I have an old ISA SB Vibra16 soundcard kicking around. If I put this into my LEAF box, is it possible to play streaming mp3? My Bering box is right nest to the stereo in the living room, I really would like to be able to play the radio stations I listen to. I guess I have to install

RE: [leaf-user] Can I play Shoutcast streams?

2003-08-01 Thread James Neave
to be compiled with ALSA support I guess. I've been trying to ste up a development environment myself for LEAF for a while and have not been very successful. Hope you have a better time. Regards Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of James Neave

RE: [leaf-user] Virtual Interface on Bering

2003-07-29 Thread James Neave
Hi, Yes I tried this and it does not work. Something to do with ip replacing ifconfig command or something. But you can get an interface to respond to an extra IP address with the following auto eth0 iface eth0 inet static address 192.168.0.2 masklen 24 broadcast 192.168.0.255

[leaf-user] Win32 -- Bering Network file access.

2003-07-28 Thread James Neave
Hi, Without using Samba2, what secure ways are there to gain access to files on our corporate Bering box? SSH allows us to administer it, but at the moment the only way we can make print-outs of the rules is hacking it out of the floppy with WinZip. Can you tranfer files across ssh? Thanks,

RE: [leaf-user] Win32 -- Bering Network file access.

2003-07-28 Thread James Neave
Hi, OK, I'll look into those, thanks everyone. James. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or

[leaf-user] Weblet Oddness.

2003-07-18 Thread James Neave
Hello all, Well, after some badness with Microsoft ISA server, it got ditched and replaced with a Bering 1.2 box. We have a 3 interface setup, net, loc dmz. In the dmz is our corporate web server. On the net interface is one of our external IP addresses. Both the dmz and the loc are SNAT'ed

[leaf-user] FTP problems.

2003-07-18 Thread James Neave
Hi again! Another problem with our new corporate Bering box. At home, I have no problem running FTP clients, because all my outgoing ports are open. But here at work, the default is all ports closed in every direction. So even if I open port 21 for one user here, he can't use FTP because it's

[leaf-user] Making DNSCache start before Shorewall

2003-07-09 Thread James Neave
Hello all, I'm trying to make DNSCache start before shorewall. This is because I need DNS lookups in the shorewall rules file. I spoke to a friend of mine and we changed the RCDLINKS in the init.d files to the following DNSCache RCDLINKS=2,S45 3,S45 6,K45 Shorewall RCDLINKS=2,S41 3,S41 6,K46

[leaf-user] DNS lookups in shorewall rules fail at boot.

2003-06-29 Thread James Neave
Hi, I open holes in the firewall from specific IP addresses to allow access to my pptp server. ACCEPT net:X.X.X.X fw tcp 1723 ACCRPT net:X.X.X.X fw 47 and for my friends with dynamic IPs, they have dynamic DNS entries. ACCEPT net:MyIP.No-IP.Org fw tcp 1723 ACCEPT

FW: [leaf-user] MicroPC

2003-06-27 Thread James Neave
Hi, There is also www.dpie.com They make insanly tiny boards. The DIMM-PC modules go up to 133MHz w/ 32Mb of RAM and are only 68x40 mm Course, it requires a base board. The 3.5 SBCs however just require a 5V rail. James. -Original Message- From: David Ondzes [mailto:[EMAIL

RE: [leaf-user] Re: Trouble getting started

2003-06-26 Thread James Neave
Hello, Have you tried just having one 3c509 card in the machine? The cards may all be at same io port. Are the cards in plug and pray mode? I think linux may not like that! You may need to use the dos setup program to set cards up. HTH. I agree. I have 2 3c509 cards. Nothing works until

[leaf-user] RE: [Poptop-server] Require Encryption fails. (RESOLVED)

2003-06-18 Thread James Neave
the dialing and route building. Thanks, James. -Original Message- From: Peter Mueller [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 9:15 PM To: James Neave; [EMAIL PROTECTED] Subject: RE: [Poptop-server] Require Encryption fails. Hi James, Unfortunately I don't really

  1   2   >