Linux-Networking Digest #709, Volume #9          Tue, 29 Dec 98 23:13:34 EST

Contents:
  sloooow ppp connection, help! ("kAos")
  Re: PPP and CompuServe (Jean-Francois MOINE)
  Re: 3c905b urgent help (Dan Kegel)
  Apache, PHP3, CGI and Redhat 5.2 ("Dr. S. Robert Senay")
  NIS and nis.domain (elegall)
  Apache problem with symbolic links ("Jeffrey W. Goers")
  Re: IP Masquerading & ports (Dan Kegel)
  Re: Cannot get Linux to see two nic cards ("Idiot")
  Redhat 5.1 @home...  SIOCADDRT  uh huh? (Brad)
  Re: Help with automating fetchmail ("Jonas")
  Re: AOL as ISP? (Troutman)
  Re: need help with redhat5.2 and ISDN (Andrew Lister)
  Re: Configuring sendmail service (Andrew Lister)
  Re: sloooow ppp connection, help! (Andrew Lister)
  Re: IRC Crashes Linux, fix? (Jim Richardson)
  Re: Successful connection to Earthlink? (J Scott Berg)
  Re: Configuring sendmail service ("VorDOM")
  Re: Different email addresses (Steven Sykes)
  Re: having mail address problems ("VorDOM")
  Re: Duplicate Ping Packets (Michael)
  Re: Satan on Linux? (Agent Hall)
  DHCPcd leasing addresses but rejecting them...  PLEASE read this, I really need help 
(8 days I've had this problem) ("john Doe")
  Re: what exactly is SYN flood? ([EMAIL PROTECTED])

----------------------------------------------------------------------------

From: "kAos" <[EMAIL PROTECTED]>
Subject: sloooow ppp connection, help!
Date: Tue, 29 Dec 1998 22:39:08 -0800

Hi there,

I have really pathetic ppp transfer speed. It's so bad that I can't download
the available noewsgroups from my ISP because slrn times off! I couldn't
download a 300k text file from the ppp server on the other end in 1/2 an
hour! My modem's 'receive' LED hardly ever liights up. 'ifconfig ' reports
about 12-20% frame loss in the receive direction, but the speed is
incredibly slow. Browsing the www is next to impossible.

I only know that the linux setup is wrong, because I tried to use window's
dial-up-networking, and data started to come through the connection with
'amazing' speed. I downloaded the newsgroup list in less than 5 mins, and in
20 min's about 2 Mb data came through. I'm desperate. I haven't used windows
for over a year, I don't want to do it again just for networking. Please
somebody help me!

I've got a 33.6k 'noname' modem, Red Hat 5.0 (with the kernel sources that
came with it (can't recall the version)), and it runs on a 486 based box.
I'm also running masquarading, sambe, named, apache, sendmail, and who knows
what, and serving a small home LAN, with no problem whatsoever. I re-read
(scanned through) every possible relevant on-line docs (NAG, PPP-HOTO,
etc.), but couldn't find any help on where to look for the problem, what the
set. Everybody's help would be greatly appreciated!

Since I can't read news using my linux, please cc your answers to
[EMAIL PROTECTED] .

TIA,
Akos



------------------------------

From: Jean-Francois MOINE <[EMAIL PROTECTED]>
Subject: Re: PPP and CompuServe
Date: 29 Dec 1998 08:33:16 +0100

>>>>> "Fattburger" == Fattburger  <[EMAIL PROTECTED]> a skrive:

    Fattburger> I'm trying to make a modem connection  to CompuServe without any real 
success. 
    Fattburger> I have noticed
    Fattburger> that when I use minicom with parity setting 7E1 I can log in and 
browse the
    Fattburger> text version of CIS.
    Fattburger> Kernel 2.0.34 however complains about not being 8-bit clean. So, when 
I log on
    Fattburger> to CompuServe
    Fattburger> again and set parity to NONE, I get up to Connect: ppp0 <--> 
/dev/ttyS0 and
    Fattburger> thats about it.
    Fattburger> After about a minute, the modem hangs-up.  :>(
        [snip]

Send '+CIS' instead of just 'CIS': it's magic!

-- 
Ken ar c'henta�         ** Breizh ha Linux atav ! **
                mailto:[EMAIL PROTECTED]
Jef             (home mailto:[EMAIL PROTECTED])

------------------------------

From: Dan Kegel <[EMAIL PROTECTED]>
Subject: Re: 3c905b urgent help
Date: Tue, 29 Dec 1998 18:31:33 -0800

erdem schrieb:
> i have a  3c905b  ethernet card.
>  linux kernel recognizes
> the card and ifconfig,netstat and others also say ok. but
> ping and network do not. how can i  solve this problem.

If you're using Red Hat Linux, upgrade to 5.2.  That fixes it.
Otherwise, you might have to download the latest Vortex 
driver and install it into your kernel.
- Dan

-- 
Speaking only for myself, not for my employer

------------------------------

From: "Dr. S. Robert Senay" <[EMAIL PROTECTED]>
Subject: Apache, PHP3, CGI and Redhat 5.2
Date: Tue, 29 Dec 1998 21:38:20 -0500

Well folks I've just built myself a brand shinny new server with Redhat
5.2.  I just went nuts and told it to install EVERYTHING, and now want
very much to get PHP3 and CGI working which it has, and from my
understanding of things should be all set to go...  However, I can't
seem to make it go...  PHP3 appears to be configured from the box as an
apache module, I've added the appropriate AddType declaration but no
go...  Apache is working just fine, but I'm a bit puzzled about the
rest...  I'd really rather NOT re-install  Apache, PHP3 and PostgreSQL
just to get PHP3 working...  My thinking is that "Out of the box it
should work if I configure it correctly, just that the DOCS are all
speaking about a configuration DIFFERENT than the way RedHat does it
when one installs 5.2...

ANY help would be appreciated...

Scott...
[EMAIL PROTECTED]


------------------------------

From: elegall <[EMAIL PROTECTED]>
Subject: NIS and nis.domain
Date: Tue, 29 Dec 1998 22:09:06 +0000

I try to install a client/server Nis on a local Network but I have few
problems.

At boot time(on server NIS)  I have this message: domain not bound

When I use the command #domainname I can get my domain (batiment2) which
one I've initialised in /etc/sysconfig/network   - I've also used
Linuxconf (redhat 5.1) =same result.

When I try to log on a distant machine (with nis client) I can read many
errors as :
do_ypcall : clnt_call :RPC : unable to receive ; errno= Connection
refused
At the end I can connect the server with a strange promt :
[I hahe no name! @ machine2 user_name] #

on the server machine the message is quite the same  : YPBINDPROC_DOMAIN
: domain not bound
but my prompt is ok ( [root @ machine1 root] # )

I can't find the problem ; could you help me ?


------------------------------

From: "Jeffrey W. Goers" <[EMAIL PROTECTED]>
Subject: Apache problem with symbolic links
Date: Tue, 29 Dec 1998 21:34:28 -0500
Reply-To: "Jeffrey W. Goers" <[EMAIL PROTECTED]>

I am having a problem with symbolic links with Apache on Redhat 5.2.  I
created a link in /home/httpd/html called ora-doc to /usr1/app/oracle/doc.
When I enter ora-doc in the browser I go the the correct directory and all
the files there are displayed - but - when I click on a html file the source
is displayed instead of the document.  What is going on here?
FollowSymLinks is set in access.conf.

regards,
Jeffrey W. Goers




------------------------------

From: Dan Kegel <[EMAIL PROTECTED]>
Subject: Re: IP Masquerading & ports
Date: Tue, 29 Dec 1998 18:37:56 -0800

"!Xabbu" schrieb:
> I am using my Linuxbox to masquerade the TCP packets of a Macintoshbox. The
> programm I want to use on the Macintosh does the following:
> It connects to a server using a default port and the IP address of the
> server (works fine)
> Then the server sends the Client (my Mac) the list pf IP addresses of other
> users on the server. (works)
> And also does this to the other users on the server (sends em my IP)
> But then the connection between the users and me is not managed thourgh the
> server but directly, so they have to try to lookup my IP and send the chat
> packages to it. But because of Masquerading the packets never connect to
> correct port, and my Linux machine doesnt know to which IP address forward
> the packets on which port ...

If I understand you correctly, your chat program tries to set up
direct peer-to-peer connections.  This can work through NAT (aka Masq),
but only if the chat program uses the scheme detailed at
http://alumni.caltech.edu/~dank/peer-nat.html
and only if it uses UDP.  It just plain won't work with TCP, I think.
- Dan
-- 
Speaking only for myself, not for my employer

------------------------------

From: "Idiot" <[EMAIL PROTECTED]>
Subject: Re: Cannot get Linux to see two nic cards
Date: 29 Dec 1998 21:33:42 GMT

Try changing the /etc/conf.modules

alias eth0 eepro100
alias eth1 3c509

Asuming the first card is Intel Etherexpress Pro 100 (+) and the second card
is 3Com 509 based.

If all the IRQ are okay, you should be all set.

If you know the IO and IRQ for the cards, try adding them as "options".

Hope this helps....

Idiot.
compuware.com <[EMAIL PROTECTED]> wrote in message <768clg$[EMAIL PROTECTED]>...
>If a try to ifconfig eth1 (ifconfig eth1 10.1.1.1 255.0.0.0)  I get
>SIOCSIFADDR: Operation not supported by device
>SIOCSIFADDR: Operation not supported by device
>
>I have tried MULTIPLE types of cards.  What I have in the box now is two
PCI
>cards one Intel and one 3com.
>
>Both work if they are the ONLY card in the box. If bothare in the box only
>one will work (the intel card)
>
>I've also tried it with two 3 com cards (one pci and one isa) if I do this
>only the pcicard works.
>
>Also tried it with two isa cards (only one will work)
>
>THanks.
>
>
>
>



------------------------------

From: Brad <[EMAIL PROTECTED]>
Subject: Redhat 5.1 @home...  SIOCADDRT  uh huh?
Date: Wed, 30 Dec 1998 02:44:04 GMT

Folks, 
        I am calling out the those who know a great deal more about networking
than I do.  I have run across a problem that I can't correct and it's
driving me nuts.  I want my linux machine back!!!   I have installed
more than a few linux distributions on my PC over the last two years
with out any problems up to this point.   I will try and be as brief and
thorough as possible.  

Problem: No outbound Connectivity, I am able to ping my own ip,
loopback, and broadast address, but nothing else.  Upon boot all the
hardware seems to be ok.  The PC light on my cable modem lights up, if I
put the feed into a hub it lights up so I assume the card is working.

My physical connection is good, I can use my windows98 machine on the
modem and it works fine. This leans to pilot error on the linux install.
When I boot up now, I see two error messages.  The first is (SIOCADDRT)
invalid argument.  The second comes up when httpd starts, it tells me
it's unable to resolve the hostname.  I assume the httpd error will
clear up once the network is usable again.

I used netconf to supply my networking information as provided to me by 
Cox @home.  (this has always worked in the past, nothing special was
needed during or after the install)  
 
When I type route the machine just hangs there with two entries and
never brings out the gateway address with should be 24.0.132.1
When I invoke Route this is what I see

Destination           Gateway       Genmake flag metric ref useiface
24.0.132.0            *         255.255.255.0 U    0     0   0 eth0
127.0.0.0             *         255.0.0.0     U    0     0   1 lo    
=======this line hangs and returns nothing======================

I am about at my wits end, after running linux for a couple of years
windows just seems dead and lifeless, but it's the only working machine
I have at the moment.  I know mail accounts or web hosting is not that
big of a thing but I will gladly provide either (or any other network
service that won't get me kicked off @home) for anyone that can give me
an answer to this.  

Many thanks in Advance,
Brad

[EMAIL PROTECTED]

------------------------------

From: "Jonas" <[EMAIL PROTECTED]>
Subject: Re: Help with automating fetchmail
Date: Tue, 29 Dec 1998 22:37:21 +0100

Thanks! That just what i needed.
This must have been the fastes answers ever. I had the answer 'bout ten
second after I posted the question, incredible.

If I have understood fetchmail correct (not likely)it by default it
downloads mail to the current ~/mail (home directory) but how can I make the
mail get in different directories for different users. I have at least one
account at the internet POP-server for every user on the LAN so the easiest
way would be if I could specify where it should store the mail for each
fetchmail connection, or do I  have to use procmail for that?

TIA /Jonas



------------------------------

From: Troutman <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: AOL as ISP?
Date: Tue, 29 Dec 1998 16:43:40 -0500
Reply-To: [EMAIL PROTECTED]

> Matthias Warkus wrote:
> >
> > It was the 28 Dec 1998 04:09:01 GMT, Rod Brick...
> > > Does anyone know if it's possible to connect to the internet via AOL as
> > > the ISP?  If so, can you point me in the direction of any relevant
> > > documentation to accomplish this.  Thanks much.
> >
> > It's not possible with Linux. AOL use a proprietary protocol, and AOL
> > software that makes use of that protocol is so far only available for Windows.
> >
> > Perhaps they will see the light after the years, just like T-Online (kind of
> > a German AOL ;) did, and offer normal PPP.

In the past, using AOL 3, I have connected to AOL then minimized and run
Eudora and Netscape to surf the net.  That would tell me that they are
using tcp/ip and it may be possible to run Linux on a home lan behind a
proxy on the PC running AOL.

Why on earth you would _want_ to do that is beyond me.

------------------------------

From: [EMAIL PROTECTED] (Andrew Lister)
Subject: Re: need help with redhat5.2 and ISDN
Date: 30 Dec 1998 03:00:26 GMT

In article <76c2a2$lmp$[EMAIL PROTECTED]>,
        "Jeff" <[EMAIL PROTECTED]> writes:
> to connect my isdn up, i just changed the init string for my modem for
> multilink and it dial both lines and seeed to be connected, but no ping.
> called my isp they were of help as much as posible but havent been able to
> resolve this problem. Fro the isp they say i was connected had a ip# but was
> unable to ping me.
> 
> My set up: redhat 5.2 . fresh install, 3comImpactIQ

Do you have ISDN support in the kernel?  If not, you will have to
recompile it.

-- 
Andrew Lister     <http://www.xbae.syd.net.au>     [EMAIL PROTECTED]
Maintainer of the XbaeMatrix widget  -  a public domain table widget

------------------------------

From: [EMAIL PROTECTED] (Andrew Lister)
Subject: Re: Configuring sendmail service
Date: 30 Dec 1998 03:02:16 GMT

In article <[EMAIL PROTECTED]>,
        "Ong Boon Wee" <[EMAIL PROTECTED]> writes:
> there is 2G left over unused. However, my sendmail service has given me this
> error message:
> Swap in:
> Out of memory sendmail
> 
>     I suspect that it could be due the fact that there is insufficient
> storage allocated for incoming mail. How do you increase the capacity to
> allow more mail be able to receive?

This is a message saying you are out of "RAM" not disk space.  Do you
have any swap space allocated or are you just using your physical
memory?

Andrew

-- 
Andrew Lister     <http://www.xbae.syd.net.au>     [EMAIL PROTECTED]
Maintainer of the XbaeMatrix widget  -  a public domain table widget

------------------------------

From: [EMAIL PROTECTED] (Andrew Lister)
Subject: Re: sloooow ppp connection, help!
Date: 30 Dec 1998 03:06:29 GMT

[Posted and mailed]

In article <[EMAIL PROTECTED]>,
        "kAos" <[EMAIL PROTECTED]> writes:
> Hi there,
> 
> I have really pathetic ppp transfer speed. It's so bad that I can't download
> the available noewsgroups from my ISP because slrn times off! I couldn't
> download a 300k text file from the ppp server on the other end in 1/2 an
> hour! My modem's 'receive' LED hardly ever liights up. 'ifconfig ' reports
> about 12-20% frame loss in the receive direction, but the speed is
> incredibly slow. Browsing the www is next to impossible.

Try setting the values of mru and mtu to 552 in /etc/ppp/options:
        mru 552
        mtu 552

Also, I have had some success with a kernel module called irqtune which
you can download from your favourite ftp site.  Documentation is included
in the package

Andrew

-- 
Andrew Lister     <http://www.xbae.syd.net.au>     [EMAIL PROTECTED]
Maintainer of the XbaeMatrix widget  -  a public domain table widget

------------------------------

From: [EMAIL PROTECTED] (Jim Richardson)
Crossposted-To: linux.redhat.install
Subject: Re: IRC Crashes Linux, fix?
Date: 30 Dec 1998 02:51:41 GMT
Reply-To: [EMAIL PROTECTED]

On Tue, 29 Dec 1998 06:15:48 GMT, 
 Glenn Valenta <[EMAIL PROTECTED]> sayeth...:

>Jim Richardson wrote:
>> 
>> On Mon, 28 Dec 1998 05:16:20 GMT,
>>  Glenn Valenta <[EMAIL PROTECTED]> sayeth...:
>> 
>> >I can't seem to figure out if I am being hacked or if irc is making my ssytem
>> >crash to the core.
>> >
>> >I was having this problem with RH5.1. Everything was stable for over a year
>> >until I started using irc. After a few hours of just watching, I will generally
>> >have a crash that will at least kill the x server and usally lock up the whole
>> >computer. I have never seen a linux system lock up like this!
>> >
>> >Anybody else have this problem?
>> >
>> >Is it someone doing some sort of IRC attack?
>> >(I have hosts.deny = deny:all and have shut down all services)
>> >
>> >How do I evaluate a core dump to see how and what created it?
>> >
>> >--
>> are you running as root when this happens? what are the permissions on
>> your irc client?.
>
>-rwxr-xr-x   1 root     root       287628 Oct 11 01:19 /usr/bin/irc-4.4
>
>I'm running it as usr "glenn", It wouldn't let me run it as root.
>

Well, I have no idea, sorry.

-- 
Jim Richardson
        Anarchist, pagan and proud of it
WWW.eskimo.com/~warlock
        Linux, because life's too short for a buggy OS.


------------------------------

From: J Scott Berg <[EMAIL PROTECTED]>
Subject: Re: Successful connection to Earthlink?
Date: 29 Dec 1998 21:41:04 GMT

In article <[EMAIL PROTECTED]>, Tyler Dinh  <[EMAIL PROTECTED]> wrote:

> Does anyone have a successful connection to Earthlink? I was able to
>connect, and received an IP, but immediately Earthlink dropped my
>connection. Any suggestion?

I connect to Earthlink, and while there are a lot of hassles to get
things right, most of the problems I've had are fairly subtle.

You're sure you received the IP?  Once you get to that point, you
should at least be able to do something.  Does /sbin/ifconfig list
ppp0 at any point?  Does /var/log/messages (or maybe some other
syslogd-created file) actually state that you have an IP address (it
should)?

Do you have an ip-up script (or anything other than config files in
/etc/ppp)?  If so, get rid of it for now.

Make sure that you start up ppp with as little as possible running.
The idea is to make sure that nothing is trying to send anything down
your connection.

What version of pppd are you running?  Does it match what is compiled
into your kernel?

Post your /etc/ppp/options file.

                                -Scott Berg


------------------------------

From: "VorDOM" <[EMAIL PROTECTED]>
Subject: Re: Configuring sendmail service
Date: Wed, 30 Dec 1998 10:52:43 +0800

Check Your /etc/sendmail.cf where it state :

# minimum number of free blocks on filesystem
O MinFreeBlocks=30000

Tweak here and there will do.....

Ong Boon Wee wrote in message <[EMAIL PROTECTED]>...
>Hi
>
>    Does anyone know how to configure the sendmail service to increase its
>ability to receive more mail? I have currently a dedicated RedHat 5.2 Linux
>server with 6Gb harddisk space. Upon checking the diskspace, I found that
>there is 2G left over unused. However, my sendmail service has given me
this
>error message:
>Swap in:
>Out of memory sendmail
>
>    I suspect that it could be due the fact that there is insufficient
>storage allocated for incoming mail. How do you increase the capacity to
>allow more mail be able to receive?
>
>
>Boon Wee
>
>



------------------------------

From: Steven Sykes <[EMAIL PROTECTED]>
Subject: Re: Different email addresses
Date: Tue, 29 Dec 1998 17:54:33 +1300

In article <[EMAIL PROTECTED]>,
Max <URL:mailto:[EMAIL PROTECTED]> wrote:
> On Thu, 24 Dec 1998, Steven Sykes wrote:
> 
> > Hi all,
> > 
> > On my Linux box which uses the 192.168.x.x. IP space, I'm using a
> > non-registered domain name of samindustries.co.nz, which I guess is OK
> > since it's only for an internal LAN.
> > 
> > However, I wish to collect and send email from the machine. Receiving is
> > OK, but when I go to send an email I get my Linux login and Linux domain
> > name appearing in the sender's address
> > ([EMAIL PROTECTED]) instead of my ISP email address
> > ([EMAIL PROTECTED]).
> 
> > 
> > How do I get the correct email address to appear on email that I send?

[big answer snipped]

Thanks heaps!

Cheers,

-- 
Steven

Newsletter editor and Webmaster of WACC - Wellington Acorn Computer Club
WACC pages: http://www.paradise.net.nz/~pbrowne/WACC/
Phone: (03) 358-5601 or (025) 908-448
My pages: http://www.paradise.net.nz/~acorn/

... You are only young once, but you can be immature forever.



------------------------------

From: "VorDOM" <[EMAIL PROTECTED]>
Subject: Re: having mail address problems
Date: Wed, 30 Dec 1998 10:58:14 +0800

Where is you email relay to... and does that relay updated your user name
 update alias files ].  It depend to your relay .......

Sending out edit file alias in this format

hacker:        [EMAIL PROTECTED]

Then do newalias to update you mail database [ alias database ].
Now u can submit email by using name alone.... tips..


Daddy Rabbit wrote in message <[EMAIL PROTECTED]>...
>I have a linux server set up as a mail server. It also has Apache and
>it has a network printer attached.
>
>My problem is in the address required to send and receive mail. If I
>send mail to [EMAIL PROTECTED] the mail is sent without a hitch.
>But, if I address it to user@domainname it is not sent.
>
>NSLookup sees everything you, < I >, would expect to so I'm wondering
>what I did wrong. Anyone got a clue?
>
>Jim



------------------------------

From: Michael <[EMAIL PROTECTED]>
Subject: Re: Duplicate Ping Packets
Date: Tue, 29 Dec 1998 23:02:28 -0500

"William R. Mattil" wrote:
> 
> D. Wade wrote:
> >
> > Network Guru's...
> >
> > Does anyone know what might cause duplicate's in response to a ping to
> > my ISP.
> > I am on a cable modem. Out of 1,000 pings, I get 43 duplicates and 8%
> > loss.
> > The techical guy did not know what might be the root cause of
> > duplicates.
> >
> > I'm real curious.  I've seen this on some network years ago and have
> > forgetten.
> 
> Well the obvious explanation for duplicate pings would be another host
> with the same ip but in your case I don't think thats the cause. If you
> are using coax for your network and it is badly terminated, or poorly
> grounded it can cause reflections which could very well produce exactly
> that effect.

Certain specific lengths of network cable can also cause
these symptoms.  I don't recall the value of the length
multiple that one should always try to avoid, but some
searching re: network cabling should turn it up.

Best regards,
Michael.

------------------------------

From: [EMAIL PROTECTED] (Agent Hall)
Crossposted-To: rpi.os.linux
Subject: Re: Satan on Linux?
Date: 29 Dec 1998 20:00:17 -0500

>OBDisclaimer: Remember, only use this on your own systems or systems
>you are authorized to use this on.

yeah, or cis/acs/its will send you personalized e-mails to make you
feel all warm and fuzzy!!

http://www.rpi.edu/~hallm4/satan.txt



-- 
Overflow on /dev/null; please empty the bit bucket.

------------------------------

From: "john Doe" <[EMAIL PROTECTED]>
Crossposted-To: 
alt.linux,alt.os.linux,aus.computers.linux,comp.os.linux.advocacy,comp.os.linux.development.apps,comp.os.linux.development.system,comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.setup,comp.os.linux.x,es.comp.os.
Subject: DHCPcd leasing addresses but rejecting them...  PLEASE read this, I really 
need help (8 days I've had this problem)
Date: Sat, 26 Dec 1998 10:13:40 -0800

My linux box is running Redhat 5.2 (brand new install) with DHCPCD
installed.  I followed the dhcp howto to the letter, but I still get this
problem...

My box leases an ip like its supposed to, but when it gets the IP and tries
to use it, it rejects it saying its already in use and says "falling back to
INIT".

Is this a subnet mask problem?  (I do not have a subnet)

Does anyone know how to fix this?

Please don't reply in the newsgroup here, RATHER:

Please send e-mail to [EMAIL PROTECTED]

Thank you!!!  I really need help




------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.security.unix
Subject: Re: what exactly is SYN flood?
Date: Tue, 29 Dec 1998 22:16:06 GMT


> I also noticed you obscured the IP address by munging the last two octets.
> Did you intentionally make the source and destination octets the same or
> where they from different machines initially?

I saw an IP that wasn't mine once, and this last time both IPs (from and to)
were the same and they were my own IP, although I don't think anything should
be accessing those ports.

> Also, since it's on a high
> port, it could have been several failed attempts to access and eggdrop bot
> or user app that triggered the response.

The only user that logs in to this machine is me, so far.  I'm not running
anything that would access those ports.... no clue what it is.

> It should only be a problem if
> you see tons of these in syslog followed by "Message repeated X times."
> However, if these are mailicious, the source address is most likely
> spoofed and the best you can do is feel safe that your kernel is already
> capable of dealing with them.

which is what I got :)

Thank you for suggestions Joseph, and thank you for a detailed post explaining
TCP handshaking!

Otis

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to