[Leaf-user] MacIP/AppleTalkIP ?

2002-02-21 Thread Scott Sandeman-Allen
Does anyone have any experience routing/filtering/firewalling any of these protocoals? Any suggestions where a guy might find some documentation? Notes? I did a search on Leaf and didn't find much. Thanks, Scott ___ Leaf-user mailing list [EMAIL PR

[Leaf-user] [DCD] DMZ SSH still not ... oh that would be a problem...

2002-02-15 Thread Scott Sandeman-Allen
Hello all, Well, I was all ready to send the message below when I discovered what the real problem is... the gateway was set wrong in the unreachable box... so it couldn't route the packets back to the client. I include the following as an example of some working settings, though they are no

[Leaf-user] SSH Problems with DMZ

2002-02-13 Thread Scott Sandeman-Allen
Hi, me again! I have configured my Dachstien CD based router and parts are working quite fine. My web server can be seen from its dedicated public IP and from my masq. network.Unfortunately, I cannot ssh into the server via the public-ip & router. This despite the fact I have enabled the port

Re: [Leaf-user] [DMZ w/Dachstein CD] Going nuts?- Yes!

2002-02-11 Thread Scott Sandeman-Allen
>> > ipchains -C -p tcp -i eth0 -s 0.0.0.0 www 231.123.123.242 www >> >>I believe there is a typo in the test line. It should read: >> >>ipchains -C -p tcp -i eth0 -s 0.0.0.0 www -d 231.123.123.242 www >> ^^ >>I don't know if the typo is just here in th

Re: [Leaf-user] [DMZ w/Dachstein CD] Am I going nuts?!?

2002-02-11 Thread Scott Sandeman-Allen
>When you change numbers, you always risk hiding something that matters. >Here, I'm proceeding on the following assumptions: > > 1. That the "231.123.123" substitues for a "real" class C > address, not a private-space address > 2. That the fourth number in the quad

[Leaf-user] 2.4 Kernel & packet inspection?

2002-02-11 Thread Scott Sandeman-Allen
Hi, As I review firewalling etc. I have become interested in stateful packet filtering as well as a few other goodies offered by the 2.4 kernel (and a few not yet offered). Is there any work in progress for LRP to be running packet inspection/mangling etc. in the near future? Thanks, Scott

[Leaf-user] [DMZ w/Dachstein CD] Am I going nuts?!?

2002-02-11 Thread Scott Sandeman-Allen
Hi, I've been trying to configure LEAF Dachstein CD to firewall 5 IP addresses. I have tried several configurations but cannot get the beast to work. I have changed the IP's and removed the comments to make it a shorter message... I hope those who may help are okay with this. Here is what I

Re: [Leaf-user] Confused about eth2 ROUTES - update

2002-02-03 Thread Scott Sandeman-Allen
Well, after reading the scripts over again a few more times, I have found an example: eth2_ROUTES="1.1.1.3 2.2.2.0/24_via1.1.1.18" Now I have to figure out how this _really_ works because so far, there is no reference as to which IP & network represents what. What is presently confusing me is

[Leaf-user] Confused about eth2 ROUTES

2002-02-02 Thread Scott Sandeman-Allen
I'm trying to configure the 3rd NIC in my Dachstein LRP box and I cannot find many docs regarding ROUTES. What I am confused about is which networks this relates to. I'm thinking it should be the eth2 net and the eth0 (external) net. For example. If my eth0 is at 75.75.25.7 & 255.255.252.0 th

[Leaf-user] DMZ config example.

2002-02-02 Thread Scott Sandeman-Allen
Is there anywhere I can find an example DMZ config script. I'm going through the documentation and about 95% is making sense but a couple of things are challenging me. If there are none, I'd be happy to supply one once I get it figured out but may end up asking a bunch more questions on the li

[Leaf-user] Fwd: Where do I find CD image boot documentation

2002-02-01 Thread Scott Sandeman-Allen
Hi, In reviewing the Dachstein version of LRP and making changes etc. I have come across the need to crack open the bootdisk.bin binary file and re-create a new one. Can anyone direct me to the documentation for manipulating this file/disk image. Thanks in advance for any assistance, Scott