Linux-Networking Digest #898, Volume #9 Sat, 16 Jan 99 17:14:00 EST
Contents:
Re: You won't crack this one... ([EMAIL PROTECTED])
Re: VPN / PPTP (James Riggs)
Any way to use 2 modem lines not EQL? ("Ashley")
Re: OH My God !!!! (Gregory G. Woodbury)
Re: When I'm online, my hard drive makes noise... (Enno Middelberg)
Re: Man TFTPD (Brian McCauley)
Re: Two ip addresses on one NIC (Gary Dale)
Fetchmail error (messages included). SMTP fail.
Re: ip-masquerading (Michal Jaegermann)
Re: Where to insmod ip_masq_* modules? (Kevin Martin)
Re: ip-masquerading ("Ashley")
Re: This is Linux, not Windows, so why not superior flexibility AND idiot-friendly?
(Gregory Loren Hansen)
Re: How to assign a IP address range to an interface ? (Brian McCauley)
Re: two network cards (Arun K. Khan)
Configuring PPP server for IPX (Victor Sturgeon)
Re: Need TCP/IP routing guru assistance (Brian McCauley)
Re: IP Masquerading Problem with 2.2 pre7 (Kevin Martin)
Re: Linux as a NAT. (Arun K. Khan)
Re: Modem connection breaks after a short inactivity. (Marco Haakmeester)
Re: securing a linux box (Yan Seiner)
Re: 3c509 (Athan)
Help with setuid-root ("Rick Glunt")
Re: two network cards (Athan)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED]
Subject: Re: You won't crack this one...
Date: Fri, 15 Jan 1999 16:57:07 GMT
In article <[EMAIL PROTECTED]>,
"Martin Edelius" <[EMAIL PROTECTED]> wrote:
> Whoever cracks this one is not from this world...
>
> When we ran tcpdump on my friends net there was activity like hell but not a
> damn thing here. And I didn't change a thing! I unplugged it from his
> network and plugged it in here. We even configured the Linux box with my
> settings (ip, gw, etc.) and it ran just fine in his net. Not at all in mine.
>
> Any ideas are more than welcome. I'm going nuts here...
It might help if we saw copies of these config files. Also tghe printout
from ifconfig and route would be real helpful.
Incidentally I would also tripple check for duplicate ip addresses.
>
> Martin Edelius
> [EMAIL PROTECTED]
> (Remove the nospam part in my e-mail when you reply directly)
>
>
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: [EMAIL PROTECTED] (James Riggs)
Subject: Re: VPN / PPTP
Date: 15 Jan 1999 17:10:54 GMT
On Fri, 15 Jan 1999 06:55:58 -0500, Yan Seiner <[EMAIL PROTECTED]>
wrote:
>I've been in contact with him. He has written a PPTP client for linux that
>connects to a NT VPN server. I need the opposite - a VPN server for linux
>that can interface with a MS Win32 client. Accprding to the author, the
>server implementation should not be hard, but he does not have the time or the
>inclination to do it. That describes me as well, but in addition I don't
>thave the knowledge. :-)
>
>The only solution I'm finding is the commercial implementation of ssh. I'll
>download the trial versions and see if that works.
>
>Yan
You may want to check out a program called Tera Term. Not sure what the URL
is off the top of my head. And then you will need the TTSSH addon which is
for SSH over Tera Term. This is all Freeware.
Hope this helps.
--
To reply via E-mail, please remove the nospam from the E-mail address.
------------------------------
From: "Ashley" <[EMAIL PROTECTED]>
Subject: Any way to use 2 modem lines not EQL?
Date: Sun, 17 Jan 1999 07:55:17 +1100
Hi,
I am currently trying to setup a linux gateway to the internet (ip masq)
which is not a problem.. but I was wondering if there was a way to use two
or more modem lines thru PPP without using EQL (isp doesnt support it)
There is a Win95/98 program that can called Midway Modem Teaming (Midway??
forget)...
is it possible in linux?
Thanks for the information...
CYA!!
Ashley
------------------------------
From: [EMAIL PROTECTED] (Gregory G. Woodbury)
Subject: Re: OH My God !!!!
Date: 16 Jan 1999 21:11:13 GMT
Jayasuthan [VorHacker] shaped electrons to say:
>Great news..... I JUST DELETE MY WEB SERVER !!!!! .....
>I have no backup. Lucky that I still have source files...
>
>Just another advice be carefull with ROOT.
Always! Its better to create yourself a regular user account,
install sudo, and use sudo to perform the actions that need root
permissions -- tends to make one think before doing sillyness.
I actually find that I do things without sudo-ing and have to
redo them with sudo.
--
Gregory G. "Wolfe" Woodbury `-_-' Owner/Admin: wolves.durham.nc.us
ggw at wolves.durham.nc.us U Erstwhile co-moderator of:
soc.religion.unitarian-univ
"The Line Eater is a boojum snark." Hug your wolf. (Thanks Peter.)
------------------------------
From: Enno Middelberg <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: When I'm online, my hard drive makes noise...
Date: Sat, 16 Jan 1999 22:06:15 +0100
Enno Middelberg wrote:
>
> Hi,
>
> I've a little problem with Linux and my modem: When I'm online and eg
> telnetting to another machine, EACH letter I type makes the hard drive
> making some noise. And compared to M$Windows, the harddrive is running
> much more during surfing or networking under Linux. Does anybody know
> where I can change this???
>
> thanx
>
> Enno Middelberg
>
> Please feel free to mail answers directly to [EMAIL PROTECTED], as I'm
> a rare guest here. Thank you!!!
Sorry, I didn't mention that I'm running a P75 with 64Megs of RAM. This
should be enough to surf the net...
Regards
Enno
------------------------------
From: Brian McCauley <[EMAIL PROTECTED]>
Subject: Re: Man TFTPD
Date: 15 Jan 1999 17:31:42 +0000
"Stefano Pasquale" <[EMAIL PROTECTED]> writes:
> Is there the manual page of "tftpd". Inetd should have an explanation of it,
> but it is not enough. Could someone send me a tip on how to find it?
The man page is present in SuSE. It doesn't say a lot.
> Please answer me by e-mail also.
> (* remove NOSPAM_ to answer me *)
It is utterly pointless to mung your address if you ask for a copy of
the answer as the follow follow-up posting will contain your un-munged
address.
TFTPD(8) UNIX System Manager's Manual TFTPD(8)
NAME
tftpd - DARPA Trivial File Transfer Protocol server
SYNOPSIS
tftpd [directory ...]
DESCRIPTION
Tftpd is a server which supports the DARPA Trivial File Transfer Proto-
col. The TFTP server operates at the port indicated in the `tftp' ser-
vice description; see services(5). The server is normally started by
inetd(8).
The use of tftp(1) does not require an account or password on the remote
system. Due to the lack of authentication information, tftpd will allow
only publicly readable files to be accessed. Files may be written only
if they already exist and are publicly writable. Note that this extends
the concept of ``public'' to include all users on all hosts that can be
reached through the network; this may not be appropriate on all systems,
and its implications should be considered before enabling tftp service.
The server should have the user ID with the lowest possible privilege.
Access to files may be controlled by invoking tftpd with a list of direc-
tories by including pathnames as server program arguments in
/etc/inetd.conf. In this case access is restricted to files whose names
are prefixed by the one of the given directories. If no directories are
supplied the default is /tftpboot. To give out access to the whole
filesystem, should this be desired for some reason, supply / as an argu-
ment.
SEE ALSO
tftp(1), inetd(8)
HISTORY
The tftpd command appeared in 4.2BSD.
4.2 Berkeley Distribution May 13, 1991 1
------------------------------
From: Gary Dale <[EMAIL PROTECTED]>
Subject: Re: Two ip addresses on one NIC
Date: Fri, 15 Jan 1999 08:14:23 -0500
There is a good document on this subject in
Documentation/networking/alias.txt. In order to get this to work, you need
to have network aliasing and IP aliasing enabled (either in the kernel or
in modules). Once you've done that, everything works as stated!
------------------------------
From: <none>
Subject: Fetchmail error (messages included). SMTP fail.
Date: Fri, 15 Jan 1999 16:31:18 GMT
Greetings,
I'm using RH4.2 and connecting to the internet through a WAN connection.
I've created a .fetchmailrc file in my home directory, and it was working
fine when I had no mail. When I finally got some mail, this is a transcript
of what went down.
2 messages for [user] at [server] (16782 bytes) reading message 1 of 2
(11622 bytes) .fetchmail: SMTP connect to localhost failed
fetchmail: SMTP transaction error while fetching from server
fetchmail: Query status = 10
What went wrong?
While I have you here, I could also use a clue as to editing my .fetchmailrc
to check multiple POP3 accounts.
Thanks,
Aaron Mitchell
[EMAIL PROTECTED]
------------------------------
From: [EMAIL PROTECTED] (Michal Jaegermann)
Crossposted-To: comp.os.linux.alpha
Subject: Re: ip-masquerading
Date: 16 Jan 1999 21:16:43 GMT
Reply-To: [EMAIL PROTECTED]
Christopher ([EMAIL PROTECTED]) wrote:
: The problem I am having is when I try to the following command
: /sbin/ipfwadm -F -a m -S 192.168.0.0/24 -D 0.0.0.0/0
: I get the error message
: ipfwadm: setsockopt failed: Invalid argument
ipfwadm distributed with 5.1 (and 5.2) Red Hat on Alpha has broken
binaries. They are recompiled with wrong headers. Recompile yourself
or use binaries from 5.0 distribution. They are ok.
This was reported to Red Hat numerous times. It is their sweet
mystery why they are choosing to ignore that.
Various other responses in this thread qualify as "voodoo computing".
In particular 192.168.0.0 is by a definition class C network, and not B,
with 255.255.255.0 default netmask and 192.168.0.0/24 is correct
unless your internal network was deliberately misconfigured.
If you need an "internal" class B, or even class A, network there
are IP addresses reserved for that.
--mj
------------------------------
From: [EMAIL PROTECTED] (Kevin Martin)
Subject: Re: Where to insmod ip_masq_* modules?
Date: Sat, 16 Jan 1999 21:20:51 GMT
In article <77qg5v$o7f$[EMAIL PROTECTED]>, it says Hugh Sparks
<[EMAIL PROTECTED]> wrote:
>In the Redhat (5.2) scheme of things, where should the
>insmods for the ip masquerade modules go? I put them
>in rc.local because I don't know any better.
I wrote a script called "masq" and I invoke it from rc.local with "masq
start" (and shut it down with "masq stop") so it works like many of the
other RH scripts.
> I'm looking for the 'right' way to configure and start ip masquerading
>in Redhat.
Good thing you used those quotes around 'right.' :-) You see, "There are
nine and twenty ways of constructing tribal lays; and Every. Single. One.
Of. Them. Is. Right." - Kipling
With that understood, visit <http://www.nic.com/~cannon/Linux> for some
collected wisdom from the group. I've gotten some nice notes about it.
Unfortunately the next stable kernel (2.2.x) throws out ipfwadm, so I get to
do it all over with ipchains. :-(
If anyone knows whether that is a drop-in replacement, or has instructions
for those of us upgrading from ipfwadm, I'd be grateful to read about it
here (and might even update my page).
------------------------------
From: "Ashley" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.alpha
Subject: Re: ip-masquerading
Date: Sun, 17 Jan 1999 07:50:33 +1100
Figured that out after 7 kernel compiles and 16hrs of work...
argh...
John Wolanski wrote in message <[EMAIL PROTECTED]>...
>Try editing /etc/sysconfig/network and change IPV4_FORWARD= to yes
>or true.
>
>Bart wrote:
>> I am experiencing the same problem on RH 5.1 / Noname. The suggested
lines
>> below are not working either...
>> I thought it had to do with too small packets from ipfwadm for (certain
>> versions of?) glibc...?
>> Anyone have a clue?
>> > Here what I have, because I use 192.168.1.1 as my local gateway
>> > ipfwadm -F -a m -S 192.168.1.0/16 -D 0.0.0.0/0
>> > I assume (below) should work
>> > ipfwadm -F -a m -S 192.168.0.0/16 -D 0.0.0.0/0
>
>--
>-John Wolanski
> Remove the "_removethis" from my email address to reply.
------------------------------
From: [EMAIL PROTECTED] (Gregory Loren Hansen)
Crossposted-To:
comp.os.linux.misc,comp.os.linux.portable,comp.os.linux.powerpc,comp.os.linux.setup
Subject: Re: This is Linux, not Windows, so why not superior flexibility AND
idiot-friendly?
Date: 15 Jan 1999 18:02:03 GMT
In article <4cCn2.2270$[EMAIL PROTECTED]>,
MalkContent <[EMAIL PROTECTED]> wrote:
>aIts a pain in the backside to mount then unmount a CDROM.
>even though it looks like :
> mount dev/cdrom /mnt/cdrom/blahblahblah
You might want to put that line in a startup file like DOS does, so it
will be mounted automatically when you log on.
>Most users probably agree that that's a whole bunch of extra effort.
>If Linux is so great as described, why's it so painful for the john doe to use?
>
>Windoze is a necessary evil - access for the uninformed, or unwilling
When I'm not using a Unix, I'm using a Mac. I don't see that as a
necessary evil, just something that's nice to use.
--
"Besides, it doesn't take much creativity or courage to figure out that
something which reads 'Danger: Flammable' on the label might be fun to
fool about with." -- Joris van Dorp
------------------------------
From: Brian McCauley <[EMAIL PROTECTED]>
Subject: Re: How to assign a IP address range to an interface ?
Date: 15 Jan 1999 17:46:25 +0000
Matt Kressel <[EMAIL PROTECTED]> writes:
> [EMAIL PROTECTED] wrote:
> >
> > Hi,
> >
> > I need to recompile my 2.1.117 kernel and assign a range of ip address to an
> > interface.
Why do you think this?
> > How can I do that ? What's the kernel hack ?
> >
> > Example: eth0: 10.0.0.1 to 10.0.0.254
> >
> > Thank you to answer me also by email
> >
>
> "Network Aliasing" and see also in linux source:
> Documentation/networking/alias.txt
No don't do that! Not for more than a handfull of addresses. This is
a 2.1.x kernel. You can assign address ranges to the "lo" device
simply by routing to it because it behaves promiscuously with respect
to IP addresses.
route add -net 10.0.0.0 netmask 255.255.255.0 dev lo
In theory you also need to add a proxy ARP
arp -Ds 10.0.0.0 eth0 netmask 255.255.255.0 pub
However some kernel versions seem to do this automagically.
Of course in 2.1 there are even simpler ways to do proxy ARP but
that's another story.
--
\\ ( ) No male bovine | Email: [EMAIL PROTECTED]
. _\\__[oo faeces from | Phones: +44 121 471 3789 (home)
.__/ \\ /\@ /~) /~[ /\/[ | +44 121 627 2173 (voice) 2175 (fax)
. l___\\ /~~) /~~[ / [ | PGP-fp: D7 03 2A 4B D8 3A 05 37...
# ll l\\ ~~~~ ~ ~ ~ ~ | http://www.wcl.bham.ac.uk/~bam/
###LL LL\\ (Brian McCauley) |
------------------------------
From: [EMAIL PROTECTED] (Arun K. Khan)
Subject: Re: two network cards
Date: 15 Jan 1999 18:18:17 GMT
I have 2 ISA NE2K cards. In /etc/conf.modules I have the following
entries to initialized the cards:
alias eth0 ne
alias eth1 ne
options ne io=0x300,0x320 irq=5,10
The 3c509 driver set up may be different but this gives you an idea.
HTH
-- Arun Khan
PS - to email remove 'nospam.' in the address.
In article <77n4of$[EMAIL PROTECTED]>, steve says...
>
>I am trying to get two network cards running in my box but the second
card
>is not working gives error 3c509.0 io not found
>
>Thanks Steve
>
>
------------------------------
From: Victor Sturgeon <[EMAIL PROTECTED]>
Subject: Configuring PPP server for IPX
Date: Fri, 15 Jan 1999 12:22:12 -0600
Hello all.
I'm trying to setup a linux box to provide PPP dialup access to a TCP/IP
and IPX network. Basically I want the client to establish a PPP
connection and be able to see both the TCPIP network and the Novell IPX
Network.
So far the TCPIP portion is working fine. By using mgetty to configure
the modem and pppd for the ppp access. I'm having problems however
getting IPX to work.
I have IPX running on the linux box, its laso using SAMBA and can see
the novell servers without any problems. My issues are concerned with
getting pppd to establish a IPX connection as well as the TCP/IP.
I have read the HOWTO's and they mention ipxd as a routing daemon thats
runs on the linux box. However ipxd will not compile on RedHat 5.2
because of the libc incompatabilities inherent in newer linux
distributions.
Has anyone any experience or ideas they can lend. I'd love some advice,
thanks.
--
Victor Sturgeon
[EMAIL PROTECTED]
------------------------------
From: Brian McCauley <[EMAIL PROTECTED]>
Subject: Re: Need TCP/IP routing guru assistance
Date: 15 Jan 1999 17:36:37 +0000
Sim <[EMAIL PROTECTED]> writes:
> Because of my own stupidity, I wrecked a perfectly operating Linux
> (RH5.2 2.1.127) environment. Now I need help getting it back together
> again.
>
> I have two network cards:
> - one connected to a cable modem and calling dhcp successfully at start
> up
> - the other connects to my second computer and has a fixed IP address
> (192.168.0.254)
>
> The two computers can ping each other successfully, but my second
> computer can no longer access the samba server on the first,
Can't help with no details.
> and the ip masquerading is no longer working.
Is IP forwarding switched on?
> In addition, from my main computer I
> get the following phonemena:
>
> [root@P350 /root]# traceroute www.netscape.com
> traceroute: Warning: Multiple interfaces found; using 192.168.0.254 @
This is a well known bug in traceroute. Use -s 0.0.0.0 to suppress
this bug. Did you try a Usenet search on "traceroute multiple
interfaces"? No, I thought not.
--
\\ ( ) No male bovine | Email: [EMAIL PROTECTED]
. _\\__[oo faeces from | Phones: +44 121 471 3789 (home)
.__/ \\ /\@ /~) /~[ /\/[ | +44 121 627 2173 (voice) 2175 (fax)
. l___\\ /~~) /~~[ / [ | PGP-fp: D7 03 2A 4B D8 3A 05 37...
# ll l\\ ~~~~ ~ ~ ~ ~ | http://www.wcl.bham.ac.uk/~bam/
###LL LL\\ (Brian McCauley) |
------------------------------
From: [EMAIL PROTECTED] (Kevin Martin)
Subject: Re: IP Masquerading Problem with 2.2 pre7
Date: Sat, 16 Jan 1999 21:02:12 GMT
In article <[EMAIL PROTECTED]>, it says Ben
<bendem [at] bigfoot.com> wrote:
>I can't dial with with kernel 2.0.36 but it works well with 2.1.129
>until 2.2 pre7.
At which point support for ipfwadm is thrown out and replaced by ipchains.
(Story of my life -- I finally get it working and the Powers That Be change
it all out from under me!)
"DejaNews is your friend." It's been discussed here. Look for "ipchains"
and you'll find what you need.
------------------------------
From: [EMAIL PROTECTED] (Arun K. Khan)
Subject: Re: Linux as a NAT.
Date: 15 Jan 1999 18:29:30 GMT
Let me attempt to answer this briefly. For the gory details please
refer to the How2s and man pages.
Let's say that you use 192.168.1.x (x=1-254) range for the
modems. You can then masquerade 192.168.1.0 network on the
interface (say eth0) going to the default route (Internet) using the
ipfwadm utility.
-- Arun Khan
PS to email remove 'nospam.' from the address.
In article <77lm7q$ld4$[EMAIL PROTECTED]>, [EMAIL PROTECTED]
says...
>
>Hi,
>
>I'm using a redhat 5.1 (2.0.34) as a RAS machine. I've a 64 IP rang
and I dont
>want to give these IP to modems. How can I setup my RAS machine as
a NAT?
>
------------------------------
From: [EMAIL PROTECTED] (Marco Haakmeester)
Subject: Re: Modem connection breaks after a short inactivity.
Date: Sat, 16 Jan 1999 21:39:23 GMT
On Fri, 08 Jan 1999 23:23:27 +0200, Juha Manninen
<[EMAIL PROTECTED]> wrote:
>Hei !
>There seem to be many problems with modems, but exactly like this: the
>connection to ISP starts OK, and if I keep the modem busy it works. If I
>let it be idle for ca. 1 minute it disconnects. The modem clicks and a
>message 'pppd died...' comes. The ISP does not send any errors, only
>'connection succeeded'.
>
>I have made the connection with both xisp and kppp. In kppp I have tried
>'idle 600' argument for pppd (there is a window for that). Doesn't help.
>
>The modem is ISA-card 56K data/fax from GVC from Taiwan.
>
>I have not read all the 10000 lines of HOWTO I should. Somehow I feel it
>should not be that complicated.
>
>Juha Manninen
>
>
Check /var/log/messages Maybe this will give you some more details.
Current info is too little.
Marco
>
------------------------------
From: Yan Seiner <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: securing a linux box
Date: Sat, 16 Jan 1999 15:21:19 -0500
I hate to reveal my ignorance, but what is USE? Is there maybe an O'Reily
publication I should read up on?
Thanks for the other pointers. I am trying to close all ports except ssh and
Apache; I figure if I really need it, I can proxy it through shh if I understand ssh
correctly. At least I think I can get it to listen to a port (say 5801 for VNC),
run it thorugh on port 22, and then present it on port 5801 at the remote machine.
Yan
David Augros wrote:
> The first thing you should do is take a look at /etc/inetd.conf, and hash out
> everything you don't need (read USE on a regular basis).
>
> dave
------------------------------
From: Athan <[EMAIL PROTECTED]>
Subject: Re: 3c509
Date: Fri, 15 Jan 1999 18:26:08 +0000
Reply-To: [EMAIL PROTECTED]
Go to the contib place of a redhat mirror and download the
3c5x9 * rpm file it might help you..
Athan
Kris Jordan wrote:
> I have a 3c509 card in a computer and it seems to work perfectly fine for
> only awhile. After that while it seems to just stop working, especially if
> I start to send large files over it. This does not happens when I use this
> card with windows. I don't see any errors.
>
> I'm not sure if this is related, but when I installed RedHat on this
> computer, awhile through the setup, things start to go real slow, because it
> starts to access the cdrom or floppy a lot every time I press a key. I
> think it could be the network card, since it happed in another computer, but
> I also had it happen with out the network card in.
>
> Also, when this computer shuts down it seems not to want to shut some of the
> programs off properly, no such pid. rpc.mountd, sendmail, smbd, named and
> related. Those are network stuff.
> I think I have changed the settings on the nic it self with no solution, but
> maybe I have not found the correct combination.
>
> Thanks for any help given,
>
> Kris Jordan
------------------------------
From: "Rick Glunt" <[EMAIL PROTECTED]>
Subject: Help with setuid-root
Date: Fri, 15 Jan 1999 13:26:52 -0500
As root, I've created scripts that dial my ISP and retreive mail. I want
another user to have access to run these scripts. When they try, they get
the error 'must be root to run /usr/sbin/pppd, since it is not setuid-root'
. I have this user in a group called dialout and /usr/sbin/pppd is set as
"-rwxr-xr-x 1 root dialout ". Whats wrong. Any help appreciated!
------------------------------
From: Athan <[EMAIL PROTECTED]>
Subject: Re: two network cards
Date: Fri, 15 Jan 1999 18:26:59 +0000
Reply-To: [EMAIL PROTECTED]
Go to the contib place of a redhat mirror and download the
3c5x9 * rpm file it might help you..
Athan
PS If you try to connect them without a hub you will need a cross over cable
steve wrote:
> I am trying to get two network cards running in my box but the second card
> is not working gives error 3c509.0 io not found
>
> Thanks Steve
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
