Dear chaitanya arun deosthale,
reading through the mails you wrote in the recent days, it seems to be
obvious that you have a different idea of what LEAF should do for you,
than what the people using LEAF understand.
So how about if you tell us what exactly it is you want to get done by
using LEA
>Installing it on a virtual machine might be your only option if you
>absolutely want to run it on your SuSE box.
I can confirm, at least under VMWare Server, that this configuration works
well.
-
This SF.net email is spon
chaitanya arun deosthale wrote:
>
> Thanks for the feeback Paul and Erich.
>
> @Erich as you told me I read about the Bering booting from IDE
> configuration.Well from the harddisk it said it required a ext2 filesystem.I
> also read about the LEAF cd and floppy configuration.But i want to i
> Now
> since LEAF is a distro how would i run it on SUSE?Is it by installing
> a virtual machine like VMWARE or is there any other method.
You run it on a different physical machine.
> Also i
> searched google for some LEAF configurations and i saw the tom's
> engineering website which shows a
Thanks for the feeback Paul and Erich.
@Erich as you told me I read about the Bering booting from IDE
configuration.Well from the harddisk it said it required a ext2 filesystem.I
also read about the LEAF cd and floppy configuration.But i want to install LEAF
over a network where any changes
> Well i read about LEAF installation from the documentation provided on
> the official site.But i found there an iso which also contains LEAF.so i
> d/led it.Now i do have the following queries
> I'm usin open SUSE 10.2 as my distro
Ahh, well, I suppose one could become confused. The basic id
chaitanya arun deosthale wrote:
>
> First of all thanks for your help and clearing many of my doubts.
> Now i went through the Bering Installation guide but it says it needs
> a floppy,now currently i don't have a floppy attached to my laptop but
> as you stated that any write enabled mediu
chaitanya arun deosthale schrieb:
>
> Well i read about LEAF installation from the documentation provided on the
> official site.But i found there an iso which also contains LEAF.so i d/led
> it.Now i do have the following queries
> I'm usin open SUSE 10.2 as my distro
Good, so you are use
Troy,
I'm not really a snmp expert, but you can try a few things to
pinpoint the exact problem.
In the netsnmpd config you can set the following options in the
default file for logging to /var/log/daemon.log (restart snmpd after
setting these options).
# snmpd options (use syslog, close stdin
Hello Troy
> Hello there. I have a quick newbie question here. I would just like to know
> the
> CLI Command that I use to show the output below. I am assuming that it is
> some variation of
> Ip addr .
almost correct ;)
#ip -s link show
the -s option includes the statistics
Eric Wolzak
mem
Troy Aden wrote:
What command will give me this output that I see in weblet?
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
RX: bytes packets errors dropped overrun mcast
93612 0 0 0 0
TX: bytes
At 05:45 PM 1/3/03 -0600, Jeremy A Tourville wrote:
As I set up my Firewall/Router everything seems to be ok except for two
error messages: "Cannot set route filtering on eth0" and "eth1 must be
up before shorewall starts" Can anyone give me ome clues whare to get
started on this? Your help is
--On Friday, January 03, 2003 05:45:32 PM -0600 Jeremy A Tourville
<[EMAIL PROTECTED]> wrote:
As I set up my Firewall/Router everything seems to be ok except for two
error messages: "Cannot set route filtering on eth0" and "eth1 must be
up before shorewall starts" Can anyone give me ome clues
At 08:38 AM 10/30/02 -0800, Tom Eastep wrote:
[...]
Actually, iptables DOES support filtering by source MAC address and in
Shorewall 1.3.10 (Beta available now), it is possible to do exactly what
Sanyarin is asking for.
Ah, I missed that. So you'd do a series of forward-chain rules something
Ray Olszewski wrote:
At 09:51 AM 10/30/02 +0100, Sanyarin wrote:
>You can do better than this if you use a switch that allows head-end
>restriction of what IP addresses (or MAC addresses; I'm a bit hazy on
how
>this works) can connect to each port, [...]
I checked the manuals of the four VH-
At 09:51 AM 10/30/02 +0100, Sanyarin wrote:
>You can do better than this if you use a switch that allows head-end
>restriction of what IP addresses (or MAC addresses; I'm a bit hazy on how
>this works) can connect to each port, [...]
I checked the manuals of the four VH-2402S switches we use and
>You can do better than this if you use a switch that allows head-end
>restriction of what IP addresses (or MAC addresses; I'm a bit hazy on how
>this works) can connect to each port, [...]
I checked the manuals of the four VH-2402S switches we use and yes, I can
restrict the use of a certain port
What you want do is feasible. Authentication for outgoing traffic if
http can be done thro' squid. If you want masq or nat, look at Horatio.
It uses authentication for allowing nat/masq in a typical dhcp LAN where
each machines IP is dynamic and hence static IP filtering cannot be
applied. It runs
Sanyarin,
If I needed a solution like you asked about I think I'd look into
seting up a second server as a proxy for web and ftp. With a proxy you
could (I think) log web and ftp URLs. Combine that with a mac address
and maybe switchport information would give you enough to track down a
mal
At 02:54 PM 10/29/02 +0100, Sanyarin wrote:
[...]
- would it be possible to use the same machine that is running the router
as a 'public' (for my intranet) place to leave e.g. patches, driver updates
or other useful files on?
Possible? Yes. Any general-purpose Linux system (e.g., Red Hat, Debian
By dial-up router you mean, link your internal network to the
internet or serve dial-up access?
I use Bering, conecting my home net through a dial-up modem (56K).
For printserver services, I use my Samba server (another machine).
Try Bering:
This is the link to the Download area
http://sourcef
On Wed, Jul 31, 2002 at 08:29:10PM -0700, Cass Tolken wrote:
>
> Hmm... if $100 to $300 US is the going range, I'd probably lean toward
> the "SmartIDE - Smart Media to IDE adapter" from:
> http://www.mesanet.com/diskcardinfo.html
> that I posted earlier ($98 US + ~$15 US for a 32MB SM card.)
Check http://www.ecasia.com.sg.
Mohan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Cass Tolken
Sent: 01 August, 2002 8:59 AM
To: S Mohan
Cc: [EMAIL PROTECTED]
Subject: RE: : [leaf-user] Newbie
Hi Mohan,
--- S Mohan <[EMAIL PROTECTED]>
therwise familiar with.
>
> Mohan
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Cass Tolken
> Sent: Wednesday, July 31, 2002 10:21 PM
> To: brooksp5; [EMAIL PROTECTED]
> Subject: Re:: [leaf-user] Newbie
>
> Hi Pau
familiar with.
Mohan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Cass Tolken
Sent: Wednesday, July 31, 2002 10:21 PM
To: brooksp5; [EMAIL PROTECTED]
Subject: Re:: [leaf-user] Newbie
Hi Paul,
Ya, I've come across those in my searches (or so my br
On Wed, 2002-07-31 at 05:31, Cass Tolken wrote:
> I'm a newbie myself and I would like to ask a question of you, Mohan.
> Could you tell me what kind of device you mean by "a flash 8MB IDE
> module" (perhaps a URL to such a device?) Do you mean something
> different than Compact Flash to IDE?
Ca
Hey there Larry,
Ya, those devices were also mentioned on the Wearables mailing list
(pretty cool, if you ask me ;). But the question of write protected
flash still remains with those products. Cost is also a factor for
me. The CF/IDE adapter combo would be ~$50 US but no WP. The
{floppy,cd-r
Hi Cass,
Larry Platzek [EMAIL PROTECTED]
On Wed, 31 Jul 2002, Cass Tolken wrote:
> Date: Wed, 31 Jul 2002 09:51:26 -0700 (PDT)
> From: Cass Tolken <[EMAIL PROTECTED]>
> To: brooksp5 <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
> Subject: Re:: [leaf-user] Newbie
>
&
Hi Paul,
Ya, I've come across those in my searches (or so my browser history tells
me ;). Any idea on prices? I suppose I could ask one of their distributor
but maybe you have already. Also, I'm not sure what "ATA/IDE" means (I'm
not a hardware geek ;). It'd be for a tiny netpc (no floppy or
On Wed, 2002-07-31 at 09:29, Ray Olszewski wrote:
> At 06:11 PM 7/31/02 +0530, S Mohan wrote:
> >I want to create in such a manner that every time the configuration has
> >to be changed, the system has to be taken off the network, make
> >writeable, config changes made and turned back to read only
At 06:11 PM 7/31/02 +0530, S Mohan wrote:
>I want to create in such a manner that every time the configuration has
>to be changed, the system has to be taken off the network, make
>writeable, config changes made and turned back to read only. Changes can
>be made only from console as root after rem
-0700 (PDT)
> From: Cass Tolken <[EMAIL PROTECTED]>
> Subject: Re: [leaf-user] Newbie
> To: S Mohan <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
>
> --- S Mohan <[EMAIL PROTECTED]> wrote:
> [snip]
> > My objective: build a secure router/firewall/bandwidth
o: 'Cass Tolken' <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
> Subject: RE: [leaf-user] Newbie
>
> It is a CF/ Disk on Chip (magicram) that I had in mind. I have also
> checked out IDE PC Card drives and they cost approx $80-$100 and seem a
> good option. Here again write-pr
e the others ro. Any ideas?
Mohan
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Cass Tolken
Sent: 31 July, 2002 6:01 PM
To: S Mohan; [EMAIL PROTECTED]
Subject: Re: [leaf-user] Newbie
--- S Mohan <[EMAIL PROTECTED]> wrote:
[snip]
> My objective:
I want to create in such a manner that every time the configuration has
to be changed, the system has to be taken off the network, make
writeable, config changes made and turned back to read only. Changes can
be made only from console as root after remounting the fs as rw.
This will avoid rootkit
--- S Mohan <[EMAIL PROTECTED]> wrote:
[snip]
> My objective: build a secure router/firewall/bandwidth manager system
> preferably without any moving components and a disk/fs component that
> would allow me to make the device read-only thro' physical means e.g.
> tabs, jumpers etc. I intend using
Comments inline.
>
>My objective: build a secure router/firewall/bandwidth manager system
>preferably without any moving components and a disk/fs component that
>would allow me to make the device read-only thro' physical means e.g.
>tabs, jumpers etc. I intend using a flash 8MB IDE module. I know
On Tue, 30 Jul 2002 09:08:07 -0700
"Craig" <[EMAIL PROTECTED]> wrote:
> Thanks Phillip,
> I see the Dachstein CD already has the ipsec.lrp (and ipsec509.lrp &
> ipsec.o files) on it. Can I just use those? As far as the Windows Ipsec
> client, I found instructions on using the functionality alread
Can't help you with 509. SSH Sentinel supports it.
Can't help you with windows ipsec. I downloaded Sentinel and
got it working in an hour because the folks at my office
told me the microsoft client was a bear to configure.
Never tried it myself.
If you use ipsec.lrp you have a choice of sha
1. download the ipsec.lrp
2. down load the docs from FreeSWAN.org and do a lot of reading
but don't get depressed.
3. You need a win ipsec client.
I suggest SSH Sentinel. Download it, eval is free.
4. Go the FAQ on Sentinel and read about configuring a
Bering will run on 486.
Bering has netfilter and iptables. Worth
moving up to after you get your bearings.
---
This sf.net email is sponsored by:ThinkGeek
Two, two, TWO treats in one.
http://thinkgeek.com/sf
-
On Wed, 10 Jul 2002, Harold Miller wrote:
> I'm currently running Dachstein, because I don't think the default Bering
> dist will run on my 486CPU (2.4 kernel?) Someone correct me if I'm wrong.
I use 486's with Bering.
---
Aanhalen Harold Miller <[EMAIL PROTECTED]>:
Comments inline.
> I'm new to the whole LEAF / LRP arena, but an old programmer. Started
> my
> first ISP with a single Linux/486DX4-100 box a while ago, sold it, and
> now
> have a dozen machines running at my home/office. I have a few questions.
> I
Replies inline below.
I waited a bit before replying to see if others could give you more direct
answers than I can. Please take these comments for what they are worth.
At 05:09 PM 7/9/02 -0700, Harold Miller wrote:
>I'm new to the whole LEAF / LRP arena, but an old programmer. Started my
>firs
There are several Netgear cards out there. The FA310 uses the tulip.o
module and the FA311 uses the natsemi.o module.
Robert Chambers
Craig wrote:
>Hi Harold!
>I don't know answers to all of your questions, but I almost positive the
>Netgear cards use the natsemi.o module. As far as which vers
On Mon, Jun 03, 2002 at 09:25:38PM -0500, Brad Fritz wrote:
>
> On Mon, 03 Jun 2002 21:09:59 EDT Steven Nickle wrote:
>
> > I am in the process of setting up a development environment to build an
> > application to run under Leaf/Bering.
>
>
>
> I am not the best person to answer, but since n
On Mon, 03 Jun 2002 21:09:59 EDT Steven Nickle wrote:
> I am in the process of setting up a development environment to build an
> application to run under Leaf/Bering.
I am not the best person to answer, but since no one responeded
to your leaf-devel posting (or this one) yet, I'll jump in.
On Tue, 26 Feb 2002 14:48:09 CST Adrian wrote:
> Hi all...I had successfully finished a previous install with a 2.2.19-IDE
> kernel and run from a small IDE HD.
Cool.
> What I would like to do is repeat this with a 2.4 kernel (currently messing
> around with Bering Beta4...no probs running
First familiarise yourself with the general methods for running from hard
disk via the excellent HOWTO on the LEAF site.
Bering's kernel has module support for IDE built in (always a good idea to
check the kernel config file which most developers provide with the dist so
you can check what is in
SUCCESS!! Adding the rightsubnet entry on both sides solved the problem.
Now both internal nets can access each other.
Kjetil
>A simple configuration problem. You have specified a subnet-host
connection, *NOT* a subnet-subnet connection. >You are missing a
rightsubnet=192.168.3.0/24 entry in b
> I'm trying to setup a VPN from my home to the network at work. I'm using
> DCD on firewalls at both ends, the difference being at the home-end
> where I do not have a static IP. After much trying and failing I'm at
> the point
> Where I can issue an ipsec auto --up Work-Home and get a connection
At 2002-01-03 21:18 -0600, guitarlynn wrote:
>I've roughly got one, if somewhat opinionated from my experience.
>
>http://www.geocities.com/guitarlynn/lrp.html
Lynn,
If you have time, please look over the following FAQ.
http://leaf.sourceforge.net/pub/doc/docmanager/docid_1966.html
Please submit
the linux kernel is written in C, but is programmed somewhat object
orientedly. there have been discussions to switch to C++, but nobody
was too serious. there are some good reasons not to switch. not the
least of which is ALOT would have to change.
support scripts are generally written in she
Here is another newbie question:
What language is LEAF/LRP and it's assorted packages written in? Is C/C++ the
standard language for Linux?
Thanks to all!!
Sincerely,
Justin Pease
N u a n c e N i n e
Web Usability, Development and Design
www.nuance9.com
__
On Friday 04 January 2002 23:48, you wrote:
> Thanks for putting that up. Any reason why
> the first couple of paragraphs have strange
> word
> wrap so that a lot of lines look like the above?
My html line breaks aren't taking properly and with all the devel and
personal work in the last month,
[EMAIL PROTECTED] wrote:
>
> Hello.
Nice to have you aboard. Try Dachstein 1.0.2. Cd is
fun if you got a burner.
[snip]
> Hardware wise, I will be using a P90 with 16MB RAM.
ouch. Use 24 or 32 MB if you can for good whatnot program
headroom and space for your logfiles.
Best,
Matthew
_
guitarlynn wrote:
> I've roughly got one, if somewhat opinionated from my experience.
>
> http://www.geocities.com/guitarlynn/lrp.html
>
> ~Lynn Avants
> Guitarlynn
Thanks for putting that up. Any reason why
the first couple of paragraphs have strange
word
wrap so that a lot of lines look l
On Thursday 03 January 2002 23:19, you wrote:
> Lynn -
>
> Thanks! That really was helpful. I think I am going to go ahead and try
> out the Dachstein package.
It is what I would suggest for a home/small business firewall.
~Lynn Avants
___
Leaf-use
Lynn -
Thanks! That really was helpful. I think I am going to go ahead and try out the
Dachstein package.
Sincerely,
Justin Pease
N u a n c e N i n e
Web Usability, Development and Design
www.nuance9.com
___
Leaf-user mailing list
[EMAIL PROT
On Thursday 03 January 2002 21:32, you wrote:
> very nice!
>
> pete
Thank-you, hope it proves useful to some people.
~Lynn Avants
[EMAIL PROTECTED]
___
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
-- Forwarded Message --
Subject: Re: [Leaf-user] Newbie: Help choosing correct package
Date: Thu, 3 Jan 2002 21:16:06 -0600
From: guitarlynn <[EMAIL PROTECTED]>
To: Robert Chambers <[EMAIL PROTECTED]>
On Thursday 03 January 2002 20:36, you wrote:
> Yes I agre
Because I was limited to which lrp version that I could use, I have a
dsl connection with PPPoE, I used Eigerstein2beta with PPPoE from Ken
Hadley. Sorry I do not have any experience with Oxygen, Coyote,
FreeSCO, and Matterhorn.
If I remember correctly Matterhorn is no longer supported and I t
Robert -
I am using a Cable Modem and DHCP.
What is the Pro's / Con's of using something like Dachstein / Oxygen / Coyote /
FreeSCO / Matterhorn or just the plain old LRP?
How secure are the above mentioned tools as far as a firewall goes? Do they allow
much control over your firewall poli
When I was a newbie with Linux, I used Eigerstein2beta (floppy image)
and it was very easy to setup.
I have tried Dachstein 1.0.2 and it is a bit easier to set up and run.
I have never tried the cd image, I do not have a cd burner.
BTW which connection to the Internet do you have cable, dsl? I
i've used eigerstein (which i am completely happy with) and dachstein cd
(which i'm even more happy with).
the docs for dachstein cd say that it's not for LRP newbies, but
honestly, i didn't see much that was more complicated than eigerstein.
the worst i can say about dachstein cd is that the net
On Thu, 13 Dec 2001, Kenneth Downs wrote:
> Folks,
>
> The extensive documentation on Sourceforge is a delight, many thanks to
> those who have put time into it, it will provide much pleasant reading
> and education.
>
> I do have one question that I do not see covered, and I wonder if I just
> d
> I've just subscribed to this list, and thought I would search the
> archives on sourceforge before posting a question. However, it seems
> that their search covers their entire site? IOW, when I wanted to find
> out about "rollover", I got all kinds of news articles.
>
> Am I missing something
Behalf Of Charles
Steinkuehler
Sent: Monday, December 10, 2001 6:14 AM
To: Jim Van Eeckhoutte; ,
Subject: Re: [Leaf-user] newbie question on ipchains in dachstein cd 1.2
> Where do I add, change, or open ports? I see no ipchains.input/.output
> in /etc. Ive been to the ipchains man an unde
> Where do I add, change, or open ports? I see no ipchains.input/.output
> in /etc. Ive been to the ipchains man an understand the syntax now I
> need help inputting in to dachstein. Isnt this Exciting
Start with the settings in /etc/network.conf. You can do most of the
'usually required' things
> By some miracle, a year ago I got LRP up and running using 2.9.7 with
> SSH, DHCPD, DHCLIENT on a 1440 floppy. It provides NAT from my
> home network (5 PCs) through a cable modem to the internet. I've been
> thrilled with it!
>
> Now I want to add VPN access (IPSec) so I can get to the home n
Cool!
Yeah I'm working on loading the module now. I'm getting every old box I have
involve to test.
Thanks a bunch to you and all who have replied to my posts.
Thanks,
Glenn
Charles Steinkuehler wrote:
> > > In your setup, however, you've only got one internal NIC on the LRP, so
> all
> > > y
> > In your setup, however, you've only got one internal NIC on the LRP, so
all
> > you need is the proper static routes configured on the LRP system. Note
> > that you will probably also need the proper static routes setup on your
> > clients, or you may still see connection problems. AFAIK, th
Wow, I just dug into DHCP more. I didn't realize how many options it had.
Charles Steinkuehler wrote:
> > Sorry folks if this is too big I was rejected for 60KB. I compressed the
> > attachment more.
> >
> > 1. I modified /etc/init.d/network to add a static route to 192.168.1.0/24
> via
> >
Charles Steinkuehler wrote:
> > Sorry folks if this is too big I was rejected for 60KB. I compressed the
> > attachment more.
> >
> > 1. I modified /etc/init.d/network to add a static route to 192.168.1.0/24
> via
> > 192.168.2.253
> > 2. Also, my INTERN_NET="192.168.2.0/24 192.168.1.0/24"
>
> Sorry folks if this is too big I was rejected for 60KB. I compressed the
> attachment more.
>
> 1. I modified /etc/init.d/network to add a static route to 192.168.1.0/24
via
> 192.168.2.253
> 2. Also, my INTERN_NET="192.168.2.0/24 192.168.1.0/24"
> 3. I do wnat my two internal networks to tal
Sweet!!!
Man I love this Leaf/LRP stuff.
Thanks,
Glenn
Mike Noyes wrote:
> Glenn A. Thompson, 2001-06-27 08:11 -0600
> >Ok:
> >
> >I'll have to brush up on my ASCII drawing :-)
>
> Glenn,
> There are some templates that you can modify, so you don't have to start
> from scratch. I hope they hel
Glenn A. Thompson, 2001-06-27 08:11 -0600
>Ok:
>
>I'll have to brush up on my ASCII drawing :-)
Glenn,
There are some templates that you can modify, so you don't have to start
from scratch. I hope they help.
http://leaf.sourceforge.net/pub/doc/network_diagrams/
Everyone,
Contributions of other
Ok:
I'll have to brush up on my ASCII drawing :-)
Thanks,
Glenn
Mike Noyes wrote:
> Glenn A. Thompson, 2001-06-26 19:51 -0600
> >Charles,
> >
> >Sorry folks if this is too big I was rejected for 60KB. I compressed
> >the attachment more.
>
> Glenn,
> Your posting was held for approval, becaus
Glenn A. Thompson, 2001-06-26 19:51 -0600
>Charles,
>
>Sorry folks if this is too big I was rejected for 60KB. I compressed
>the attachment more.
Glenn,
Your posting was held for approval, because of its size. I rejected it this
morning after noticing this post from you.
Everyone,
I increased
Charles,
Sorry folks if this is too big I was rejected for 60KB. I compressed the
attachment more.
1. I modified /etc/init.d/network to add a static route to 192.168.1.0/24 via
192.168.2.253
2. Also, my INTERN_NET="192.168.2.0/24 192.168.1.0/24"
3. I do wnat my two internal networks to talk.
Thanks!
I've been working on the changes I should be able to test them on Friday!
Glenn
Charles Steinkuehler wrote:
> > I noticed you were responding to a question. Did you see the following
> > posting? I received no response.
> >
> > Thanks a buncj if you can help.
> >
> > Glenn
> >
> > "G
> I noticed you were responding to a question. Did you see the following
> posting? I received no response.
>
> Thanks a buncj if you can help.
>
> Glenn
>
> "Glenn A. Thompson" wrote:
>
> > Hi all:
> >
> > I downloaded and configured Charles Steinkuehler's Static Eiger disk
> > image. I manage
Charles,
I noticed you were responding to a question. Did you see the following
posting? I received no response.
Thanks a buncj if you can help.
Glenn
"Glenn A. Thompson" wrote:
> Hi all:
>
> I downloaded and configured Charles Steinkuehler's Static Eiger disk
> image. I managed to get it
Keep in mind that any speed increase you see from using switches instead of
hubs (I use 10/100 Netgear hubs at home) will only be on your internal
network.
I have had great luck with the Netgear FA-310tx NIC. It uses the tulip
driver. I was so happy with it, that I replaced all my internal NI
84 matches
Mail list logo
