Re: [leaf-user] Bizzare Shorewall drops of rfc1918

2003-09-16 Thread Matt Schalit
Tom Eastep wrote: On Tue, 16 Sep 2003, Matt Schalit wrote: Thanks for the reply, Tom. I probably shouldn't have called this Bizzare Shorewall Drops, because I don't think Shorewall is acting odd. It's more like I don't understand how I was getting DST=10.2.3.4, which v

Re: [leaf-user] Bizzare Shorewall drops of rfc1918

2003-09-16 Thread Matt Schalit
Ray Olszewski wrote: At 09:36 AM 9/16/2003 -0700, Matt Schalit wrote: I had to subscribe to leaf-user for this one, A fate worse that death? Surely not. Welcome back, Matt. More like scary. Every day I know less. Darn that fight against ignorance. You guys win ;-) As to your problem

Re: [leaf-user] Bizzare Shorewall drops of rfc1918

2003-09-16 Thread Matt Schalit
Tom Eastep wrote: On Tue, 2003-09-16 at 09:36, Matt Schalit wrote: I had to subscribe to leaf-user for this one, which maybe I don't understand because shorewall doesn't log every piece of information? I don't know, but here's the log entry and the details: Sep 16

[leaf-user] Bizzare Shorewall drops of rfc1918

2003-09-16 Thread Matt Schalit
I had to subscribe to leaf-user for this one, which maybe I don't understand because shorewall doesn't log every piece of information? I don't know, but here's the log entry and the details: Sep 16 09:12:31 hub kernel: Shorewall:rfc1918:DROP:IN=eth0 OUT=eth1 SRC=82.82.76.144 DST=10.2.3.4 LEN=48 TOS

Re: [leaf-user] Now On-Line but big trouble...

2003-07-23 Thread Matt Schalit
Michelle Konzack wrote: and Do not like very much the USA even if I have american friends... You don't like the USA? Fine. I'm through with this thread. --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Repor

Re: [leaf-user] Now On-Line but big trouble...

2003-07-22 Thread Matt Schalit
Michelle Konzack wrote: $FW -I -a accept -W eth2 -P tcp -o $FW -I -a accept -W eth2 -P udp -o $FW -O -a accept -W eth2 -P tcp -o $FW -O -a accept -W eth2 -P udp -o OK, it is working... But Now ther is another problem... The TX of ppp0 is increasing all 15-20 seconds but there is nothing in

Re: [leaf-user] Now On-Line but big trouble...

2003-07-22 Thread Matt Schalit
Michelle Konzack wrote: Am 22:32 2003-07-21 -0700 hat Matt Schalit geschrieben: FW="/sbin/ipfwadm" $FW -I -a accept -W eth0 -P tcp -o $FW -I -a accept -W eth0 -P udp -o $FW -O -a accept -W eth0 -P tcp -o $FW -O -a accept -W eth0 -P udp -o YES - IT WORKS, - but too heavy !!!

Re: [leaf-user] Now On-Line but big trouble...

2003-07-22 Thread Matt Schalit
Michelle Konzack wrote: ... = has no hosthame 12) IP fw-in62.29.118.8:102780.9.196.110:137 = has no hosthame 13) IP fw-in218.6.129.87:1029 80.9.196.110:137 = has no hosthame (ping timed out) ... PORT 137 are Netbios !

Re: [leaf-user] Now On-Line but big trouble...

2003-07-21 Thread Matt Schalit
Michelle Konzack wrote: >... and can not build new LRP 2.9.4 Packages... Michelle Mich, if you have 2.9.4, that means ipfwadm. Just log the packets with that. I think all you need are these as your first firewall rules. FW="/sbin/ipfwadm" $FW -I -a accept -W eth0 -P tcp -o $FW -I -a accept -

Re: [leaf-user] LEAF doing some DAC stuff

2003-07-19 Thread Matt Schalit
Jon Clausen wrote: > On Tue, Jul 15, 2003 at 11:49:27AM -0700, Matt Schalit wrote: > >>I suppose this could go on leaf-hardware, >>but I was wondering who's added a DAC to >>their box? > > Not really. (You *do* mean Digital-Analog Converter, right?) Yup, th

[leaf-user] LEAF doing some DAC stuff

2003-07-15 Thread Matt Schalit
I suppose this could go on leaf-hardware, but I was wondering who's added a DAC to their box? It'd seem like a decent place to launch a few cron jobs from. Just patch in a unity gain op-amp for some bigtime imput impedence, and you get a cheap buffer you can blow if you make a mistake (how much is

Re: [leaf-user] Long time ago...

2003-06-21 Thread Matt Schalit
Michelle Konzack wrote: Hello, I was vor some years on the original LRP-Mailinglists and now I have joined the leaf-project... Hey Mich, welcome back. You had some wild setups going back then, cutting edge stuff, but now your site is down? Oh well, hopefully things will work out for you.

Re: [leaf-user] Problem after power outage

2003-03-21 Thread Matt Schalit
Patrick Teague wrote: Hello, I had a power outage yesterday morning, my leaf box wasn't affected because it's on a UPS. However my external modem is connected to the surge protector part of the UPS, but for some reason it doesn't seem to be working. It was working fine prior to the power outag

Re: [leaf-user] My weblet doesn't work :-(

2003-03-18 Thread Matt Schalit
Craig Caughlin wrote: Hi folks, I've made a new Bering CD, made it just like I've always done in the past...but when I open my browser and try to view the weblet (http://192.168.1.254/)... I get a Cannot find server message. Suggestions? Thank you. Craig more /var/log/syslog Look for any mess

Re: [leaf-user] Question running Dachstein Router/FW/DHCP/DSN andUnix...

2003-03-01 Thread Matt Schalit
Charles Steinkuehler wrote: Dennis Christilaw wrote: I have done fresh installs on both UNIX boxes but I cannot get them to Ping outside the LAN regardless of the way I have networking set up on them. Even though I can ping the router's IP, if I run the following command >> (in HP-UX) "rou

Re: [leaf-user] Boot from Ide disk

2003-02-27 Thread Matt Schalit
Strange how it's getting hung during the insmod. I think the key is that line that says > Insmod: ide-pr~1.o: No module by that name found You should probably verify the package names are not mangled and that you typed everything correctly. If you want, once you copy the files to the IDE drive

Re: [leaf-user] Heartbeat support for LEAF?

2003-02-24 Thread Matt Schalit
http://www.mail-archive.com/[EMAIL PROTECTED]/msg12772.html Peter Mueller just posted that a while ago. It should be just what you're looking for. Also today I think he posted an introduction to himself on the leaf-devel list with a few more thoughts about vrrpd. If you like chess pieces that ar

Re: [leaf-user] Update: Short term LEAF project goals

2003-02-20 Thread Matt Schalit
Lynn Avants wrote: I just didn't know how tunneling methods were integrated into Java other than possibly a call built-into the source. I think I'm back to my previous question, aren't these tunnel programs run as seperate apps from the GUI? What I mean is, there aren't any applications

Re: [leaf-user] Update: Short term LEAF project goals

2003-02-19 Thread Matt Schalit
Lynn Avants wrote: Matt, Are lshd, Sounds new. what's the benefit of lshd? stunnel, http://tinyurl.com/63lh or zebedee also feasible options with Java??? Don't see why not, isn't this, like stunnel, completely seperate from the application? It's another thing to compile and make r

Re: AW: [leaf-user] upgrading procedures

2003-02-19 Thread Matt Schalit
Anyone who can string together the six words, "automatic resolving of kernel module dependencies" should be a developer of *something*. Sign him up. matt --- This SF.net email is sponsored by: SlickEdit Inc. Develop an edge. The most com

Re: [leaf-user] Update: Short term LEAF project goals

2003-02-18 Thread Matt Schalit
[EMAIL PROTECTED] wrote: You asked for comments: I long ago created my own "database", wherein Thanks for posting your information about the db you created. In our discussions, we've called this a "flat" databse, meaning that the entire database is a single bash sourceable text file contain

Re: [leaf-user] Update: Short term LEAF project goals

2003-02-18 Thread Matt Schalit
S Mohan wrote: I'd also suggest a change in lrp packaging by which the modules required for a package to run is bundled with the lrp. Installing the lrp will also insmod the module automatically. A depmod kind of facility will make it easy to use/ configure LEAF. Give me an example please of

[leaf-user] Update: Short term LEAF project goals

2003-02-17 Thread Matt Schalit
This is an unofficial message to let folks know what the short term goals are for the LEAF project, the hot topics being developed, just in case you're not monitoring the leaf-devel list. I wasn't asked to write this, but I figured it'd might help a bit. Please toss in your comments if you'd lik

Re: [leaf-user] HELP...

2003-02-13 Thread Matt Schalit
Welcome to the list. People are nice here, and we'll try to take the time to get your system running. I have not used WISP, so you will have to wait for a specific answer to your question. Most people use Bering rather than WISP, and you might try it yourself. There might be more documents writ

Re: [leaf-user] bandwith management

2003-02-06 Thread Matt Schalit
I was wondering if you ever got any help with this Ronny? It seems like a common question. Are you sure shorewall can't do it? I mean if you have some intersting static NAT going on or maybe MAC based filtering and you make a special chain for that, are you sure you can't throttle a chain? I'm

Re: [leaf-user] Bering 1.0: ntpsimpl.lrp - Polling NTP Servers toofrequently

2003-02-06 Thread Matt Schalit
Brad Fritz wrote: Jay, On Thu, 06 Feb 2003 12:21:24 +1100 Jay Langford wrote: I was recently contacted by the admin of my NTP service who informed me that he had been receiving a large increase in NTP requests from various sources to his servers lately. (Note: I did contact him before I star

Re: AW: [leaf-user] "Custom" commands??

2003-02-03 Thread Matt Schalit
I suggest appending the following line to /etc/profile: alias mflash="mount -t msdos /dev/nftla1 /flash" Then backup etc.lrp Here are some of the aliases I use in my /etc/profile. alias cls="clear" alias ll="ls -al | more" alias msl="more /var/log/syslog" alias tsl="tail /var/log/syslog" al

Re: [leaf-user] Gigabit Router/Switch

2003-02-01 Thread Matt Schalit
I think all you'd need is Bering with supported GB-nics and static routes for each of the subnetted LANs. I think that traffic would move around fine, but netBIOS wouldn't cross the router, so Windows file/print sharing might require multiple WINs servers. Maybe bridging would work here. Unfort

Re: [leaf-user] Symantec

2003-01-30 Thread Matt Schalit
Brad Fritz wrote: Homer, Or use squid if the traffic is port 80. Matt --- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com

Re: [leaf-user] Revert Bering back to IDE from DoC

2003-01-27 Thread Matt Schalit
John Mullan wrote: Can somebody tell me the easiest and/or most straight forward way to re-implement this with IDE booting? Well your procedure was correct I guess, but I got all crazy and typed this up, so I might as well send it ;-) Good Luck, Matt Boot into DOS6.22, fdisk /mbr the hard

Re: [leaf-user] satellite with bering

2003-01-26 Thread Matt Schalit
Andrew GRAY wrote: I have a Dachstien CD box running Satellite from iHug here in Australia. Is that a PCI card that interfaces to the satellite dish? What make and model? What type of cable runs from the dish to the PCI card? What drivers.o are needed? Just curious, Matt ---

Re: [leaf-user] satellite with bering

2003-01-25 Thread Matt Schalit
Paonia Ezrine wrote: I am thinking about getting oneway satellite internet access from http://www.nebulink.com or http://www.copperlink.net/satnet/index.shtml (they both resell the same service). Though I don't have sattelite, I can take a few guesses. So you can stop reading if you'd like :

Re: [leaf-user] tinydns: access Internal Hosts using External DomainName

2003-01-24 Thread Matt Schalit
Lynn Avants wrote: Have you used the suggestions in the Bering Users Manual to set this up? I remember Matt S. made some suggestions to updating the doc for this type of setup many months ago. There should be a post in the leaf-user archives with very implicit directions if your still having pr

Re: [leaf-user] CF boot problems

2003-01-21 Thread Matt Schalit
Luis.F.Correia wrote: Boot DOS from a floppy, type fdisk /mbr Bingo. As a couple of you kindly suggested, dos 6.22 fdisk /mbr works when fdisk itself doesn't always successfully overwrite leftover bytes in the mbr. I think I originally fdisked and formatted that CF in Win98, leading to the

[leaf-user] CF boot problems

2003-01-21 Thread Matt Schalit
I'm getting a whole lot of nothing when trying to boot my new SanDisk 64MB CF using an ACS IDE-CF adapter. I set the BIOS IDE detection to Auto/Auto, and I left the jumper on the IDE-CF adapter in default position indicating it would be Master. It's installed on the Primary IDE cable. The BIOS

Re: [leaf-user] Bering box spontaneous reboot

2003-01-19 Thread Matt Schalit
Spontaneous reboots are caused by hardware. Possibly your power supply or your ram, more rarely your keyboard or vga adapter. Don't think I've heard of a bad nic causing that, but someone may post with that experience. Good luck swapping hardware, Matt H.G. Bekker wrote: Dear LEAF list, I am

[leaf-user] Re: [leaf-devel] Ann: LEAF Bering-uClibc 1.0.2

2003-01-19 Thread Matt Schalit
K.-P. Kirchdörfer wrote: > ... General: Removed ls color option due to better readability and saves 400 kb. Did removing the ls color option really save 400 KB? or 40 KB? Still that's a lot, room enough for dhcpd.lrp. Matt --- This SF.N

Re: [leaf-user] Bering + Orinoco wireless and wavelan2_cs.conf

2003-01-17 Thread Matt Schalit
Brad Fritz wrote: #1 occurs because etc/pcmcia/wavelan2_cs.conf is included in the pcmcia_orinoco.lrp package. Ahh, yes, when I rename that file, and svi restart pcmcia, then it loads with orinoco_cs, rather than wavelan2_cs. Now I'll have to get the laptop to test. Matt

Re: [leaf-user] Bering + Orinoco wireless

2003-01-17 Thread Matt Schalit
Brad Fritz wrote: IIRC, Matt built his from scratch, but that's not really necessary. Just grab the kernel (linux-2.4.20.upx), pcmcia_orinoco.lrp and modules.lrp from http://leaf.sourceforge.net/devel/jnilo/bering/latest/contrib/2.4.20/ > http://leaf.sourceforge.net/devel/jnilo/bering/late

Re: [leaf-user] Bering + Orinoco wireless

2003-01-16 Thread Matt Schalit
wing newton wrote: Matt, I found out what the problem was. It was caused by memory conflict. ... Nice spotting that. Thank God for useful output to the syslog and dmesg, huh? BTW, do you know if I can use the same interface to do both ad-hoc and managed mode concurrently ? Never hear

Re: [leaf-user] Bering + Orinoco wireless

2003-01-16 Thread Matt Schalit
wing newton wrote: > Matt, > > Thank you for your help. Hi again Newton, I just got my Bering-1.0 up and running great w/kernel 2.4.20 and my Orinoco Gold. I started from blank diskettes and built the system out of parts from /devel/jnilo/bering/latest/ following the Bering install guide an

Re: [leaf-user] Bering + Orinoco wireless

2003-01-16 Thread Matt Schalit
Scott Merrill wrote: This is a long message, attempting to document the steps I took to get my Orinoco wireless cards to work in my laptop and in my LEAF/Bering box. Hey, funny thing, I just got 1.0 stable running my Orinoco gold, and it cardmgr choked if I only had the orinoco*.o modules in

Re: [leaf-user] Bering + Orinoco wireless

2003-01-16 Thread Matt Schalit
Hey, read down your post included at the bottom, and tell me why it finds your card as an Intersil? It finds mine as a Lucent/Agere. When I boot my w/rc3 and the pcmcia_orinoco.lrp that I use, called pcmcia.lrp, version 3.1.33, I see the following in my syslog: cardmgr[6583]: watching 2 sockets

Re: [leaf-user] Bering + Orinoco wireless

2003-01-14 Thread Matt Schalit
inoco_cs: register_netdev() failed Thank you for your help. Newton --- Matt Schalit <[EMAIL PROTECTED]> wrote: wing newton wrote: > ... The orinoco gold (WaveLAN Turbo 11 > Mbps) works fine with all versions of Windows - XP, > ME, 2000, Win98) but not with Bering's orinoco_c

Re: [leaf-user] Bering + Orinoco wireless

2003-01-14 Thread Matt Schalit
wing newton wrote: > ... The orinoco gold (WaveLAN Turbo 11 > Mbps) works fine with all versions of Windows - XP, > ME, 2000, Win98) but not with Bering's orinoco_cs. > ... Ok, but as I mentioned, my Orinico Gold works in an ISA PC-Card adapter w/Bering rc3. I've never had any problems with it.

[leaf-user] Speakeasy

2003-01-14 Thread Matt Schalit
Anyone using them for DSL? My buddy just got two static ip's (608Kbs/128Kbps) and a self-install DSL kit w/external DSL bridge for $60/mo. We did a quick speed test straight into a Win box at dslreports and got 600Kbps down. So it's funny how it's capped at 600 like advertised. My SBC dsl line

Re: [leaf-user] Bering + Orinoco wireless

2003-01-14 Thread Matt Schalit
Hi Scott, sorry to hear about the wireless problems. I have the same network hardware as you. Tell us if you diverged at all from the Bering User's Guide Orinoco section? Also, you haven't pasted in the wireless config files nor the output of iwconfig. But if we trust you have those right, then

Re: [leaf-user] DoC or CD Reader

2003-01-14 Thread Matt Schalit
S Mohan wrote: My experience has been the best with a CF reader drive and CF ... > IDE-CF convertor... Later, I found that CF readers are available in 3 1/2" drive formats for $19! Are you refering to the Soyo Bayone 3.5" drive bay that provides CF, SmartMedia, and two USB-2.0 ports? Tha

Re: [leaf-user] Bering RC4 SLOW PINGS

2002-11-21 Thread Matt Schalit
James K. Wiggs wrote: Folks, I apologize if this is a FAQ, but my net connection is so slow now that I can't effectively search the web for information. I have a Road Runner Commercial Cable account in the Tampa Bay area; I upgraded to the This almost sound like the cat > /dev/tty## thi

Re: [leaf-user] Help!!! My Firewall Crash After FTP some files.

2002-11-19 Thread Matt Schalit
Thitiporn Pornpirunrak wrote: > [description of newtork] 1) Describe what "crash" means exactly. 2) Paste in a process listing from firewall3. 3) Describe the exact hardware config. --- This sf.net email is sponsored by: To learn the basics of

Re: [Leaf-user] two-diskettes system

2002-04-10 Thread Matt Schalit
David Douthitt wrote: >>>Matt Schalit wrote: >>>>I have a small request that the backup scripts write >>>>to the drive from which the package was loaded. Would >>>>that be a major rewrite? > Another thing: Define The Problem. I don't s

Re: [Leaf-user] two-diskettes system

2002-04-10 Thread Matt Schalit
David Douthitt wrote: >>>Matt Schalit wrote: >>>>I have a small request that the backup scripts write >>>>to the drive from which the package was loaded. Would >>>>that be a major rewrite? > Another thing: Define The Problem. I don't s

Re: [Leaf-user] tinydns: UID: readonly variable

2002-04-06 Thread Matt Schalit
Robert Williams wrote: > Hi all, > I just added another computer to my network and decide to install > tinydns instead of updating all of those host files. I am using DS CD > 1.2. However tinydns doesn't seem to work. I am using it straight out of > the box. the only changes I have made was to

Re: [Leaf-user] some hosts not connecting

2002-04-03 Thread Matt Schalit
David Goodrich wrote: > I emailed the list about certain hosts not being able to ssh into my > firewall. I've done a bit more testing, and it seems to be a mostly > arbitrary distinction between who can and cannot connect... When you have a firewall/connection problem, the first thing to do

Re: [Leaf-user] two-diskettes system

2002-04-03 Thread Matt Schalit
David Douthitt wrote: > Packages will be backed up to whatever disk is in the drive - make > sure you put the appropriate disk in the boot drive before backing up. David, I have a small request that the backup scripts write to the drive from which the package was loaded. Would that be a maj

Re: [Leaf-user] can I run simple Samba server on a LEAF machine? orsomething similar,

2002-04-02 Thread Matt Schalit
Steve Fink wrote: > Gary, > > The main purpose behind LEAF is to provide firewalling security and a > secure gateway to the internet for more than one machine. That's an understandable, but common misperception. Oxygen is certainly not limited to that description nor was it designed t

Re: [Leaf-user] Bering & wavelan2_cs

2002-04-02 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > > Hi All, > > I'm trying to get pcmcia onto my home LRP system. I am trying running > Bering-1680-v1.0-rc1 and > Lucent/Orinoco 11 Mbit/s Silver pcmcia card over a Lucent/Avaya pci-to-pcmcia > adapter. > I need to have the pcmcia package along with the release 6.16

Re: [Leaf-user] Flash Write Protect

2002-04-02 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > > > > > > Matt Schalit <[EMAIL PROTECTED]> on 04/01/2002 06:09:47 PM > > To: Phillip Watts/austin/Nlynx@Nlynx > cc: [EMAIL PROTECTED] > > Subject: Re: [Leaf-user] Flash Write Protect > > > > &

Re: [Leaf-user] Flash Write Protect

2002-04-02 Thread Matt Schalit
Steve Fink wrote: > Matt, > > The tech doc on the Nagasaki DOM's that I have shows a set password command > available. I'm in communication with the manufacturer, they do not > currently have a utility available to the public to set this password, but > where there's a will there's a way.

Re: [Leaf-user] Flash Write Protect

2002-04-02 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > I gotcha. Roger that. I swapped the subject line to be more reflective of the discussion. Hope that's ok. > My problem is I'm always wanting to do updates remotely > and wouldn't want users to have to flip a switch or God forbid reboot. Flipping a switch sho

Re: [Leaf-user] ssh firewall

2002-04-01 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > > > > > > Matt Schalit <[EMAIL PROTECTED]> on 03/30/2002 10:22:44 PM > > To: [EMAIL PROTECTED] > cc:(bcc: Phillip Watts/austin/Nlynx) > > Subject: Re: [Leaf-user] ssh firewall > > > > 4) hardwa

Re: [Leaf-user] ssh firewall

2002-03-30 Thread Matt Schalit
John Desmond wrote: > I guess I need a new holy grail now. (I already got > VNC working, too, but my upload speed at home is only > 90KB which makes for realy slow screen updates.) Any > suggestions for a new grail? > -John 1) QoS (discussed recently, though) 2) multiple ISP load balancing 3)

Re: [Leaf-user] ssh/sftp through dachstein firewall

2002-03-29 Thread Matt Schalit
David Goodrich wrote: > I set up portforwarding to point ssh to my fileserver, in the hopes that i > would be able to secure-ftp into it, but it doesn't seem to like the > portforwarding. > > svi network ipfilter list portfw says that port 22 is pointed to the > apropriate internal machine, and i

Re: [Leaf-user] dhclient and dnscache

2002-03-29 Thread Matt Schalit
\"Will Clements\" wrote: > Hi, > > I recently setup a Dachstein floppy firewall/gateway for > 1] The machine being used is a Compaq P133, (and old Don't know. Maybe. > 2] I want to automatically update the external servers People have described some sort of exit script that you can cuso

Re: [Leaf-user] ssh in Bering

2002-03-27 Thread Matt Schalit
Jim Van Eeckhoutte wrote: > This the problem im having . I cant back it up I get cant move from tmp > dir error. Please post the exact error message, plus a listing of what's in you /tmp directory, plus explain what "I get cant move from tmp dir error" means. Good Luck, Matt

Re: [Leaf-user] Disk Difficulties

2002-03-27 Thread Matt Schalit
Steve Fink wrote: > Jacques et al, [snip] > I then found some IDE Disk-On-Modules. They're awesome! I originally > purchased two Nagasaki 8mb modules ( http://www.nagasaki.com.tw/DOM.htm > purchasable here > http://www.bwi.com/scripts/site/site_category.php3/id/188 )and put them into > my

Re: [Leaf-user] Re: Re: Bering with SSH and TinyDNS

2002-03-27 Thread Matt Schalit
John Stauffer wrote: > Matthew, > > I do use the hosts file to resolve the names Bering needs to. I'd rather > have the space for sshd and other packages I may need. I haven't used > tinydns for any of my setups since I started using lrp with ppp in 1999. > > John Ahaa. Ok that's what I figur

Re: [Leaf-user] rdate, udp and Bering

2002-03-27 Thread Matt Schalit
Stephen Lee wrote: > Hi, > > I noticed that rdate from Bering does not seem to accept the "-u" switch > for time requests using UDP. I suspect many of the RFC868 rdate servers > are only accepting UDP requests because under RedHat7.2 I needed the > "-u" switch to get a response for most of the se

Re: [Leaf-user] Re: Re: Bering with SSH and TinyDNS

2002-03-27 Thread Matt Schalit
John Stauffer wrote: > Hi Matthew- > > I have a Win2k server inside my local lan that handles my internal dns > and forwarding to bering (dnscache) for external addresses. Roger that. > My resolv.conf is: > > Nameserver 127.0.0.1 But in this case, the LEAF box, using that nameserver, queries

Re: [Leaf-user] Using LEAF with one static public IP address

2002-03-27 Thread Matt Schalit
Dave Anderson wrote: > Hi, > > I'm going to be switching my home network from ISDN to ADSL in the next few > weeks, and I want to set up a LEAF firewall in preparation. I currently have > a linux box as my gateway, running iptables. That box has the fixed public > IP address that my ISP provided.

Re: [Leaf-user] two-diskettes system

2002-03-27 Thread Matt Schalit
Jacques Nilo wrote: [snip] > That is all. The packages will be backep up of the disk > they come from unless you want to change that with > through the backup menu. It doesn't work that way on Oxygen < 1.8.0, from my experience. All backups want to go to the first floppy drive, which is a pai

Re: [Leaf-user] ipchains ?

2002-03-23 Thread Matt Schalit
Glenn McKechnie wrote: > antken wrote: > [...] > >>my first question is: >>how can i change the rules in the current chains to let all traffic in >>and >>out ? ( i know this is dangerous but i am just messing on a test >>machine ) > > > ipchains -F input && ipchains -P input ACCEPT > ipchains

Re: [Leaf-user] A jpg diagram of my working LEAF

2002-03-23 Thread Matt Schalit
really inexpensive file(only) server. and an internet firewall > of course.. > > thanks > Gary > > - Original Message - > From: "Matt Schalit" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, March 22, 2002 12:17 PM > Subjec

Re: [Leaf-user] A jpg diagram of my working LEAF

2002-03-22 Thread Matt Schalit
Reginald R. Richardson wrote: > Looks...almost like mines.. > > Job will done.. > > cheers > > -Original Message- > From: junkmail [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, March 20, 2002 23:29 > To: [EMAIL PROTECTED] > Subject: [Leaf-user] A jpg diagram of my working LEAF > > >

Re: [Leaf-user] Convert Bering 1680 to 1440?

2002-03-18 Thread Matt Schalit
James Duberg wrote: > First, thanks to all involved in LEAF. I've been using it, in one form > or another for a few years now in my small business, and at home. It is > great! If it's been good for your work, we have a testimonial page we just started that could use a few contribs. > I've do

Re: [Leaf-user] Sudo in Cgi

2002-03-17 Thread Matt Schalit
Greg Morgan wrote: > [EMAIL PROTECTED] wrote: > > >>I don't know what the big deal is. >>Some one wrote to the list about root access from >>Apache cgi. I responded with a Reply with History >>from Lotus Notes ( sorry that's what my company uses). >> >>My email was rejected by the moderator.

Re: [Leaf-user] 56k modem : BERING

2002-03-15 Thread Matt Schalit
Jim Van Eeckhoutte wrote: > Ah oh a newbie question. How does one get a internal 56k modem to work > in bering? Ive read the howtos but none on modem. Im trying to get a > router goin to share verizon dialup for office. Right now office is > using ICS on a ME machine(very unreliable). Any response

Re: [Leaf-user] is this a possible LEAF, configuration- idea's

2002-03-15 Thread Matt Schalit
Gary Dodge wrote: >2kserver > (192.168.1.1) > (gigabit) > | > (gigabit) > LEAF >eth1(gigabit) eth2(100m)eth3(100m) > || | > (gigabit) (100m switch)(dsl) > super users majority > > eth1 and eth2 would hav

Re: [Leaf-user] 4 NIC LEAF -Dachstein CD- DNS issues

2002-03-15 Thread Matt Schalit
Gary Dodge wrote: > Hi all.. > and Thanks to all of you that have contributed to this message > board and even more to all who have specifically address my questions.!! That's very kind and statesmanly of you :) > I have a Dachstein CD LEAF, with multiple subnet's (eth1-eth3) > I have been wor

Re: [Leaf-user] Are all recent ssh packages so large?

2002-03-15 Thread Matt Schalit
Brian Boonstra wrote: > Hi > > I note that Jacques Nilo has a nice modern pair of sshd.lrp and > ssh.lrp on the LEAF website. I was thinking of upgrading, but I still like > to try to get by with a single floppy, while those packages are > 300K each > (and the binaries inside > 600K

Re: [Leaf-user] Sudo in Cgi

2002-03-15 Thread Matt Schalit
[EMAIL PROTECTED] wrote: > > I couldn't get a reply with history past the moderator. Could you explain this Phillip? Nobody in the LEAF group wants to make it difficult for you. Let us know the details and if we can/need to fix something on our end. Thanks! Matt ___

Re: [Leaf-user] what Im trying to accomplish using Dachstein CD. anysuggestions?

2002-03-13 Thread Matt Schalit
Gary Dodge wrote: > Internet (dsl) > | > |_Eth0 Firewall > |_ >|| | > Eth1Eth2 Eth3 > (192.168.1.254) (10.10.10.254) (192.168.2.254) >

Re: [Leaf-user] DCD Port forwarding not working

2002-03-13 Thread Matt Schalit
Doug Sampson wrote: [snip] > I still can't access the web server via http://www.cybersampson.com!!! > #$%#!& > > I'm beginning to think it's the web server that is denying access. I'm That web address is having problems. Apparently www2.cybersampson.com does not work at this time. Regards,

Re: [Leaf-user] DNScache and hosts config question

2002-03-09 Thread Matt Schalit
Scott C. Best wrote: > Heyaz. So I'm using a fairly stock DS relase, > and I've a question about properly setting up dnscache > and my "host" entries in network.conf. > Scott! I hope all is well in the South Bay. Are you going to make it up to SF for the Linux Embedded conference this we

Re: [Leaf-user] routing more than 1 hop

2002-03-09 Thread Matt Schalit
Bob Pocius wrote: >>Sometimes LEAF distros are configured to block traffic destined for >>the private address space from going out eth0. It's designed that >>way because private addresses are in general for internal use only. >>Rarely, an ISP uses these, and adjustments are made to ipfilter.conf

Re: [Leaf-user] martians on internal network ??? [LONG!]

2002-03-09 Thread Matt Schalit
Michael D. Schleif wrote: > Jeff Newmiller wrote: Jeff I'm sorry you ended up with that reply. Please don't take it home with you, so to speak. We highly value your contributions to LEAF, and we appreciate your willingness to help Michael. >>On Fri, 8 Mar 2002, Michael D. Schleif wrote: >>

Re: [Leaf-user] blocking users from accessing IRC server

2002-03-06 Thread Matt Schalit
Jack Coates wrote: > Also remember that the port something runs on is a matter of convention, > not requirement. If you really want to block things, do a default deny > outbound and then open up services and locations that are approved. At > my work there is no outbound access for any endusers; ev

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-06 Thread Matt Schalit
Charles Steinkuehler wrote: > from the man page > > UsePrivilegedPort > Specifies whether to use a privileged port for outgoing connec­ > tions. The argument must be ``yes'' or ``no''. The default is > ``no''. ^^ So if the default is no,

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-05 Thread Matt Schalit
Charles Steinkuehler wrote: > When you run ssh on a *nix box, it will default to using a "low" port to > make the connection unless you specify a command line switch (which is > different for ssh, scp, and varies from one ssh implementation to anoteher). I just found this on the openssh faq:

[Leaf-user] Re: [Leaf-devel] A few sshd and tinydns issues for JN

2002-03-05 Thread Matt Schalit
Jacques Nilo wrote: > Hi Matt > I just got your mail today. I have been out of town for a week. > I understand from what you say that the sshd/dnscache/tinydns documentation > needs some clarification. Indeed if you have tinydns running you should not > need to adjust /etc/hosts. > If you could su

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-05 Thread Matt Schalit
Charles Steinkuehler wrote: > When you run ssh on a *nix box, it will default to using a "low" port to > make the connection unless you specify a command line switch (which is > different for ssh, scp, and varies from one ssh implementation to anoteher). I tried this on every system I could f

Re: [Leaf-user] routing more than 1 hop

2002-03-04 Thread Matt Schalit
Bob Pocius wrote: > Thanks for the replies guys. On my way home (after I had some time to think > about what I wrote), I realized that I didn't describe my problem properly. > As well as being lazy about transcribing my routing tables, I didn't include > some of the connection info. Sites 1, 2 and

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-04 Thread Matt Schalit
Scott C. Best wrote: > Matt: > Heya. Thanks for the candid feedback. Some replies > to you inline, with gratuitous clipping: > > >> Let me first say that I like echowall and what you've done with. >>I've said that before and recommended it to others even though I've >>authored my own pfw

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-04 Thread Matt Schalit
Charles Steinkuehler wrote: [snip] > When you run ssh on a *nix box, it will default to using a "low" port to > make the connection unless you specify a command line switch Aha. I didn't realize that as I never run ssh from the firewall to anywhere. I always use an internal machine whose tra

Re: [Leaf-user] multiple ip's

2002-03-04 Thread Matt Schalit
guitarlynn wrote: > On Monday 04 March 2002 15:27, Matt Schalit wrote: > >>Charles Steinkuehler wrote: >>[snip] >> >> >>>To see your port-forwards, run "net ipfilter list" >>> >>I guess 'net' is a DF command. Would

Re: [Leaf-user] forwarding Protocal 47(gre) on Eigerstein LRP

2002-03-04 Thread Matt Schalit
Scott C. Best wrote: > Lonnie: > > You can best find echoWall on freshmeat.net. The blurb > there is fairly accurate. :) > > http://freshmeat.net/projects/echowall/ > > cheers, > Scott Scott! Let me first say that I like echowall and what you've done with. I've said that before and

Re: [Leaf-user] multiple ip's

2002-03-04 Thread Matt Schalit
Charles Steinkuehler wrote: [snip] > To see your port-forwards, run "net ipfilter list" I guess 'net' is a DF command. Would you post it's usage? Thanks, Matt ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinf

Re: [Leaf-user] routing more than 1 hop

2002-03-03 Thread Matt Schalit
Bob Pocius wrote: > I'm using Bering as a platform to help me route between buildings connected > to my network. In some cases, routing has to hop more than once (up to 3 > times). Using standard routing commands, I don't seem to be able to fix > this. Here is what my network looks like. Site 1 i

Re: [Leaf-user] 4 LAN Adapters. One floppy. Prism2.

2002-03-02 Thread Matt Schalit
Dmitri Gofmekler wrote: > Hello, > > 1. > Please someone send me the info how to use an Oxygen distribution with 4 LAN > adapters. I need to make NAT router for 3 subnets without connecting them > together. If someone nas image with 4 interfaces and sshd it would be great. Well, Oxygen is much

Re: [Leaf-user] a few questions

2002-03-02 Thread Matt Schalit
guitarlynn wrote: > On Saturday 02 March 2002 17:10, Ant Ken wrote: > >>hi, >> >>thanks for your reply >> [...] >>and i dont think the ipchains thing is letting everything through by >>default, if i type the command ipchains -v -L it gives me screen >>full's of rules and 99.9% if them have the w

  1   2   3   >