Linux-Networking Digest #119, Volume #10          Fri, 5 Feb 99 21:13:51 EST

Contents:
  Can ping, not much else, tho (Christopher Quale)
  Re: using diald (Name)
  DFE-530TX and NETWORK (bruno)
  ifconfig eth0 + Linux 2.2.1 = locked machine -Please HELP (Daniel Bruce)
  Re: eth0+eth1+ route how to (Mitch Cant)
  Re: DFE-530TX and NETWORK (Mitch Cant)
  SSI (tafe)
  Re: Linux to Win95 networking problem ("Andrew Bryson")
  Re: Standard host name for standalone box? (Christof Schwenzer)
  Re: getting out of the gateway (Mitch Cant)
  Re: Remote Access with root by telnet? (Mitch Cant)
  Kernel 2.2, to upgrade or not to upgrade??? (Greg Kettmann)
  Re: ftp attempt = 421 Service not available (Mark)
  Mascerading & Ip Adresses (Patrick)
  Re: how do I know 'From Where?' I am connected? (Bill Anderson)
  Re: Romote "root" login (Rick Onanian)
  Linux and Windows (Calvin Chak)
  Re: SurfBoard 1000 Cable Modem ("Jim Orfanakos")
  Re: Linux DNS ([EMAIL PROTECTED])
  Re: Help: FTP hang Solaris 2.6->Redhat 5.2 ("Eric A. Hall")
  Re: IP Masquerade with ICQ (Mitch Cant)
  Warning: Connecting Linux Redhat 5.2 to ISP that supports SMTP 
([EMAIL PROTECTED])
  Re: Help, I'm at my wits end over PPP (Mark H.)
  Re: Dialin PPP Server and Windoze clients (David Efflandt)

----------------------------------------------------------------------------

From: Christopher Quale <[EMAIL PROTECTED]>
Subject: Can ping, not much else, tho
Date: Fri, 05 Feb 1999 14:50:29 -0800


Hello,

In my small home network, I have 3 machines:

 A - linux machine sharing ppp connection via ip masq 
   - ip addr: 192.168.1.1
 B - linux desktop
   - ip addr: 192.168.1.2
 C - dual boot win98/linux laptop
   - ip addr: 192.168.1.5

The ip masquerading part is working swimmingly. Both
client machines can access the internet fine.

The problem: machine C cannot telnet or ftp into machine
B, nor can machine C, when in windoze, see any of the
samba shares on machine B. (Note: A<->B is fine as is
A<->C for all services.) However, machine C can ping machine
B and vice-versa. 

To get the ip-masq to work, I had to set the default 
gateways on machine B and C to be 192.168.1.1. Does
this have anything to do with my woes?

Thanks to anyone who can help. My ip-masq script is at
the end of this post if it is at all useful.
Thanks,
Chris


#!/bin/sh

case "$1" in
  start)
        echo -n "Starting IP Masquerade support... "
# flush current settings:
        /sbin/ipfwadm -O -f
        /sbin/ipfwadm -I -f
        /sbin/ipfwadm -F -f
# default policy is "deny"
        /sbin/ipfwadm -F -p deny
        /sbin/ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0
# install these modules if you have a need for them...
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_cuseeme.o
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_ftp.o
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_irc.o
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_quake.o
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_raudio.o
        /sbin/insmod /lib/modules/2.0.36/ipv4/ip_masq_vdolive.o
        echo "Done."
        ;;

------------------------------

From: [EMAIL PROTECTED] (Name)
Subject: Re: using diald
Date: Fri, 05 Feb 1999 23:25:10 GMT

In article <79flmd$em4$[EMAIL PROTECTED]>, 
[EMAIL PROTECTED] says...
> Name <[EMAIL PROTECTED]> wrote:
> [snip]
> >> 
> >> I too am running a Linux server with IP Masquerading. My server has an IP
> >> address of 198.162.1.1 but I use 127.0.0.2 for local and 127.0.0.3 for 
> >> remote in the diald.conf file. I'm not sure it makes sense to use the 
> >> same IP address for both the local and remote settings in the diald.conf
> >> file.
> >> 
> >> Tony
> >> 
> >> 
> > One problem I'm having, and maybe your suggestion will fix this, is that 
> > diald dials the modem before any of the client machines are even logged 
> > in.  At that time, there should be no outbound packets.  I'm wondering if 
> > I, by putting my linux box as the local/remote ip for diald, caused diald 
> > to want to dial the line when something like a DHCP request comes in? 
> 
> > If so, then your suggestion might help.
> 
> > Thanks
> > Reggie
> 
> I've heard reports from others that Win9x boxes are notorious for causing
> diald to dial the modem all of the time. I had a set of firewall rules I
> use to keep all of the netbios name server lookups from going outside
> of my LAN and so diald only dials when someone inside the network 
> starts up a web browser or email client.
> 
> I can email you my firewall rules if you want them. I run then 
> automatically from diald using the "ip-up", "ip-down" directives
> in the diald.conf file.
> 
> Tony
> 
> 
That would be great.  Thanks

------------------------------

From: bruno <[EMAIL PROTECTED]>
Subject: DFE-530TX and NETWORK
Date: Fri, 05 Feb 1999 15:39:28 +0100

Hi,
I have a network card D-link DFE-530TX with a Redhat 5.2, kernel 2.0.36.

It's not supported by the tulip driver.

Do you know an answer to my problem?

Thank you.
Bruno


------------------------------

From: Daniel Bruce <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: ifconfig eth0 + Linux 2.2.1 = locked machine -Please HELP
Date: Fri, 05 Feb 1999 06:56:39 -0800

Hello all,


    I am having a terrible time trying to configure my EEpro100B with
Linux 2.2.1
    Booting system with 2.0.36 everythings OK.
   With 2.2.1 no networking boots OK.
    ifconfig eth0 works with noparms,    shows eth0 eepro100 mac address
and  such

    strace ifconfig eth0 gets up to a couple of ioctrls  and locks
solid....

    Any help appreciated. So close yet so far....
--
* --------------------------------------------------- *
* Daniel Bruce - mailto:[EMAIL PROTECTED]
* http://www.mygen.com
* P.O. Box 7167 , Tahoe City Ca. 96145
* --------------------------------------------------- *



------------------------------

From: Mitch Cant <[EMAIL PROTECTED]>
Subject: Re: eth0+eth1+ route how to
Date: Fri, 05 Feb 1999 06:45:51 -0800

I am having a related problem...

I figured it out once before, and didn't have time to write it all
down...

so here I am again...

My linux box can see both networks... and my inside network can ping
the IP addresses of both cards in the linux box (which indicates to me
that things
are almost working).... but I can't get any further...

The external network has a subnet mask of

255.255.192.0

but when I start trying to use the Linux box as a router I see another
entry appear in
the route table indicating a second route for 255.255.255.0

does this have something to do with my problem?

thanks

mitch.

PS please cc my mail if you can help me... my newsfeed has not been
reliable enough.

toni wrote:

> I have a problem route table with two ethernets. can someone help me.
> thanks.

--
===========================================================
Mitch Cant <[EMAIL PROTECTED]>
DDP Consulting Group, Vancouver BC Canada
Phone: 604-294-9193  Fax: 604-294-9155
Web Page: http://www.ddp.ca/
===========================================================



------------------------------

From: Mitch Cant <[EMAIL PROTECTED]>
Subject: Re: DFE-530TX and NETWORK
Date: Fri, 05 Feb 1999 06:41:25 -0800

Hi

I was going to have the same problem.... so I just used an old NE2000
clone...

I heard that DLINK has not been very supportive... and was told to buy
adifferent card when I
need to step up to 100 MB

mitch

bruno wrote:

> Hi,
> I have a network card D-link DFE-530TX with a Redhat 5.2, kernel 2.0.36.
>
> It's not supported by the tulip driver.
>
> Do you know an answer to my problem?
>
> Thank you.
> Bruno

--
===========================================================
Mitch Cant <[EMAIL PROTECTED]>
DDP Consulting Group, Vancouver BC Canada
Phone: 604-294-9193  Fax: 604-294-9155
Web Page: http://www.ddp.ca/
===========================================================



------------------------------

From: tafe <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup
Subject: SSI
Date: Fri, 05 Feb 1999 01:08:30 +1000

Can anyone tell me how to configure my web server (Apache) to enable
Server side Includes.

Also what security concerns does enabling SSI create?

Thanks

Geoff


------------------------------

From: "Andrew Bryson" <[EMAIL PROTECTED]>
Subject: Re: Linux to Win95 networking problem
Date: Sat, 6 Feb 1999 13:01:04 +1300

Lt.Data wrote in message <[EMAIL PROTECTED]>...
>um.. linux does not allow a .0 in its ips

That's odd. On my network I have two win95 machines at 192.168.0.1 and
192.168.0.2 and a RH5.2 box at 192.168.0.3. Everything seems to work
properly (internal access to all machines and internet access via ipmasq and
diald).

>the rule regarding them is that a 0 signifies a broadcast, not a node
>windows allows it coz microsoft ignored the rule because windows does not
deal
>with broadcast packets and so forth
>i had to change my ips when i switch from wingate to ipmasq on linux for
this
>reason
>my machines are now
>192.168.1.1, 192.168.1.2 etc
>and teh subnet is the same, 255.255.255.0 because it is a broadcast subnet

I had to change part of the settings for either diald or ipmasq (I can't
remember which) because one of them wanted to use 192.168.0.1 and
192.168.0.2 as virtual IP addresses of some kind. After I changed that
setting everything worked properly. The problem that I have is that every
ten and fifteen minutes diald logs in my linux box for two minutes, and then
disconnects. As far as I can tell it is something to do with domain name
(read machine name) lookups running on my win95 network (which also uses
TCP/IP). Or is this related to the problem you have mentioned above?

Andrew Bryson, Christchurch New Zealand
http://shell.ihug.co.nz/~leight/andrew/index.html

PS. I managed to get around the problem (if others are having the same one)
by not allowing diald to connect when it receives a domain name request.
This means that whenever I want to connect to the internet I have to try to
access an external IP address directly (which I do by setting my email
program's pop3 server to the ip address rather than the domain name of the
pop server). If anyone has a more elegant solution, please help...



------------------------------

From: Christof Schwenzer <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: Standard host name for standalone box?
Date: Fri, 05 Feb 1999 14:30:06 +0000

Jay wrote:

> All,
>
>         I'm curious if there is a standard hostname convention for stand
> alone Linux boxes.  I run Linux on my home machine and thos hostname is
> localhost.localdomain.  Is it customary to change that to something more
> personal?

Yes, you can choose the name you like.
Christof


------------------------------

From: Mitch Cant <[EMAIL PROTECTED]>
Subject: Re: getting out of the gateway
Date: Fri, 05 Feb 1999 07:29:32 -0800

I have the same problem... but I have got valid (not *.0) ip
addresses....

My gateway machine can see and ping and telnet to hosts on both nets

my internal machines can ping both nics in the linux box, but they can't
get to
anything else on the internet

although I do see the activity lights blinking on the internet-side
network card.

when I run route, I have a gateway, but when I try connecting from
inside to the
internet another route appears
the subnet mask of the outside card is supposed to be

MASK=255.255.192.0

I have guessed from the fact that my name server is 209.53.0.1, that my

NETWORK=209.53.0.0

but this extra route with a mask of 255.255.255.0 keeps appearing...

related??

please cc my email

thanks

mitch

[EMAIL PROTECTED] wrote:

> Hi Guys,
>     I tried to set up a small network with linux boxes. There was a linux
> box with two ethernet cards. The one got its ip from a dhcp server. The other
> ethernet card linked to the internal network.
> This gateway box had one ip configured by the DHCP server and the other was
> 192.168.1.1 . The internal network had just one linux machine with ip
> 192.168.1.0. We added the route and the default gateway to 192.168.1.0.
> The internal box is able to see the gateway but not outside the gateway.
> But the gateway box  is able to see the outside world and also the internal
> network.  I am new to all the networking stuff.  I wld be glad if someone cld
> help me out. Ip forwarding was turned on, on the   gateway machine. I saw that
> in the network file where it said ipforwarding="YES".
> Thanks in Advance.
> bye
>
> -----------== Posted via Deja News, The Discussion Network ==----------
> http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own

--
===========================================================
Mitch Cant <[EMAIL PROTECTED]>
DDP Consulting Group, Vancouver BC Canada
Phone: 604-294-9193  Fax: 604-294-9155
Web Page: http://www.ddp.ca/
===========================================================

------------------------------

From: Mitch Cant <[EMAIL PROTECTED]>
Subject: Re: Remote Access with root by telnet?
Date: Fri, 05 Feb 1999 07:38:02 -0800

I understand it has something to do with removing the securetty file
(which lists allowable local terminals for login)

but to close the GAPPING hole that leaves perhaps you could create a
/etc/usertty or /etc/login.access file??

I've heard you can somehow specify valid IP's.... not bulletproof, but
not as bad as wide open and for us newbie's,

it would be much easier to log in as root when we need to do something
*grin*

please cc me if you get more details

mitch

Bruno Camara wrote:

> I would like to know how to allow a host receive telnets (or rlogins)
> with root. I'm using RH5.0.
>
> ----------------------------
> Bruno Camara
> Insituto Superior Tecnico
> [EMAIL PROTECTED]
> ---------------------------

--
===========================================================
Mitch Cant <[EMAIL PROTECTED]>
DDP Consulting Group, Vancouver BC Canada
Phone: 604-294-9193  Fax: 604-294-9155
Web Page: http://www.ddp.ca/
===========================================================



------------------------------

From: Greg Kettmann <[EMAIL PROTECTED]>
Subject: Kernel 2.2, to upgrade or not to upgrade???
Date: Fri, 05 Feb 1999 19:27:59 -0500

I've installed RH 5.1 and 5.2 half a dozen times and slackware a
couple.  I currently run a 5.1 machine as a firewall running IP Masq.
and NAT.  Samba's installed but not configured (although I intend to).
I use two NE2000 compatible adapters.

Should I consider installing the new 2.2 kernel?

Should I consider installing the new(er) 2.0 Samba?

I know that I probably want XFREE86 but are there any other pieces that
I need?

I'd like to use an older MCA 486/33 (which 2.2 supports natively) any
comments?

Thanks for any help or suggestions.  [EMAIL PROTECTED]


------------------------------

From: Mark <[EMAIL PROTECTED]>
Subject: Re: ftp attempt = 421 Service not available
Date: Fri, 05 Feb 1999 16:50:19 -0700

Mark wrote:

> I have installed wu-ftp, but am having problems with logging in.  I can
> telnet and ping fine.  When I try to login as a regular user I get the
> error "421 Service not available" after I enter my password.  I have
> tried logging in as all of my regular users and receive the same
> results.  I am running red-hat 5.2, kernel  2.0.36
>
> Any help would be appreciated, thank you
>
> Info from my system;
>
> /etc/ inetd.conf for ftp reads:
>
> ftp     stream  tcp     nowait  root    /usr/sbin/tcpd  in.ftpd
>
> I removed the default "-l -a" so that nothing is logged and do not use
> the ftpaccess file(I believe this is default, I have tried -A too)
>
>  /etc/ftpusers file does not have any regular users defined in it so
> they should not be getting denied service
>
> /etc/ftpgroups is empty
>
> /etc/ftphosts is also empty (everything commented out)

I figured out what was wrong,  in /etc/inetd.conf I was not pointing it to
the correct binary


Mark


------------------------------

From: Patrick <[EMAIL PROTECTED]>
Subject: Mascerading & Ip Adresses
Date: Fri, 05 Feb 1999 22:10:44 +0100

Hi !

After having struggled for a day or so and followed this thread all the
way through - I could not find the right posting for my problem. :(

I got a Firewall/squid/mascerading linux suse 5.1 box (internal
192168.2.1, external  195.34.153.103) to connect my privat network to a
cable modem.

Everything worked fine for connecting 192.168.2.2 and 192.168.2.3 they
have inet connection and can also icq etc...

But when assigning an IP adress higher than 192.168.2.3 to any of the
hosts (i noticed when assigning a new computer), then onyl the lan is
visible, but the inet is unreachable from all IP >3.

As it was my firts installation, I guess i must have goofed some mask ..
but I could not find the right one.

Any help appriciated - see schema & rc.config for details - (please also
replay using pawart@[EMAIL PROTECTED])

  Patrick

exterior
195.34.153.103
    LINUX SUSE 5.1 (MASQ/FW/SQUID)
192.168.2.2
interior
192.168.2.x


rc.config:

FW_START="yes"
FW_LOCALNETS="195.34.152.0/30 192.168.2.0/30"
FW_FTPSERVER=""
FW_WWWSERVER=""
FW_SSLSERVER=""
FW_SSLPORT="443"
FW_MAILSERVER=""
FW_DNSSERVER="195.34.133.10 195.34.133.11"
FW_NNTPSERVER=""
FW_NEWSFEED=""
FW_WORLD_DEV="eth0"
FW_INT_DEV="eth1"
FW_LOG_ACCEPT="no"
FW_LOG_DENY="yes"
FW_ROUTER="195.34.152.1"
FW_FRIENDS="no"
FW_INOUT="no"
FW_TRANSPROXY_OUT="192.168.2.1"
FW_TRANSPROXY_IN="195.34.153.103,0/0,81"
FW_REDIRECT="81,192.186.2.2:3001"
FW_TCP_LOCKED_PORTS="1:1023"
FW_UDP_LOCKED_PORTS="1:1023"
#
# Masquerading settings - See /usr/doc/packages/firewall
#                         for a detailed description
#
MSQ_START="yes"
MSQ_NETWORKS="192.168.2.0/255.255.255.0"
MSQ_DEV="eth0"
MSQ_MODULES="ip_masq_cuseeme ip_masq_ftp ip_masq_irc ip_masq_quake
ip_masq_raudio ip_masq_vdolive"
#


------------------------------

From: Bill Anderson <[EMAIL PROTECTED]>
Subject: Re: how do I know 'From Where?' I am connected?
Date: Fri, 05 Feb 1999 17:28:41 -0700

Rob wrote:
> 
> On Fri, 5 Feb 1999 09:24:23 -0000, "phantom"
> <[EMAIL PROTECTED]> wrote:
> 
> >
> >Mark Bramwell wrote in message <79d257$[EMAIL PROTECTED]>...
> >>Is there an utility that if I run it, it tells me MY ip
> >>address, not the ip address of the linux machine?
> >
> >
> >route ?
> >
> /sbin/ifconfig  might be what youre looking for

As I understand it, ifconfig would be worthless.
As I read it, he is telnetting from A -> B, and while on B, wants to
know the IP address of A.

in this case, he could do a who, parse the output for the hostname (the
last field(in parens)), then do an nslookup on it.

------------------------------

From: Rick Onanian <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux,comp.os.linux.admin,comp.os.linux.help,nl.comp.os.linux
Subject: Re: Romote "root" login
Date: Fri, 05 Feb 1999 16:42:25 -0500

"F.R.M.Barnes" wrote:

> Elson Liu ([EMAIL PROTECTED]) wrote:
> : I don't think that you can logon as root from anywhere other than the
> : console...I think you'd have to logon as a different user with superuser
> : privileges.
>
> /etc/consoles or /etc/securetty are where allowed terminals for root
> logins appear. (on my slackware at least)

On debian, also. I think it was /etc/securetty. I just did a ls of /dev/tty*
or something like that (I don't remember) into a file and appended that to the
securetty file. Worked like a charm - now root can login from anywhere, and I
can get hacked one step easier..:)

  rick


>
>
> Fred.
> --
> +----------------------------------------------------------------------+
> | Fred Barnes, CS Student, UKC                http://teddy.xylene.com/ |
> | [EMAIL PROTECTED]                            http://stuE253.ukc.ac.uk/ |
> +----------------------------------------------------------------------+


------------------------------

From: Calvin Chak <[EMAIL PROTECTED]>
Subject: Linux and Windows
Date: Fri, 05 Feb 1999 19:56:03 +0800
Reply-To: [EMAIL PROTECTED]

Hello all,

What are the advantages of using Linux to get on the Internet
rather than using Win95/98 ?


Calvin Chak


********************************************************
Posted via PersoNews - HK FREE News Server - by PersoNet
FREE E-mail & Newsgroups - URL : http://www.personet.net
========>>>>>>> news://news.personet.net <<<<<<<========
********************************************************

------------------------------

From: "Jim Orfanakos" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.hardware
Subject: Re: SurfBoard 1000 Cable Modem
Date: Fri, 5 Feb 1999 19:59:42 -0500

I figured it out....

I was using tar -xvf (note the minus sign).  I worked a lot with various
commercial UNIX systems.  When I left the minus sign out it worked fine.

Thanks.



Jim Orfanakos wrote in message ...
>Thanks.  I have tried giving the name, as well as tried just to view the
>contents of the file with the 't' option...no luck.
>
>danno (nospam_noway) (Dan) <@itn.net> wrote in message
><[EMAIL PROTECTED]>...
>>Jim,
>>
>>try:    tar xvf sb1000-1_1_2.tar
>>
>>The filename must be on the argument line.
>>
>>Dan
>>
>>
>>On Tue, 2 Feb 1999 18:00:26 -0500, "Jim Orfanakos" <[EMAIL PROTECTED]>
>>wrote:
>>
>>>I have a Surfboard 1000 Cable modem.  This is a hybrid system where I use
>my
>>>modem for the uplink and the cable modem for the downlink.
>>>
>>>1)  Has anyone got this working in Linux?
>>>
>>>2)  I downloaded from my ISP's web site the Linux drivers.  The file
>>>"sb1000-1_1_2.tar.gz" will uncompress with gzunzip...but I cannot un-tar
>the
>>>file.  When I "tar -xvt" or any one of those options...the tar process
>>>hangs.
>>
>>
>
>



------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Linux DNS
Date: Sat, 06 Feb 1999 00:01:28 GMT

In article <[EMAIL PROTECTED]>,
  Michael Jenner <[EMAIL PROTECTED]> wrote:

> Here's what I guess is happening (please correct me if I'm wrong - I'm trying
to
> learn dns): First bind tries to resolve names in local zones (master or
slave),
> if negative it consults the root zone and if the root zone servers (masters of
> the Internet :o) can't answer bind gives up. Only if there is no root zone it
> consults the specified forwarders. My isp firewalls out direct access to root
> servers - perhaps your isp doesn't - in other words your configuration
probably
> makes bind consult the root servers directly, thus bypassing the forwarders
> completely ?
>
> Regards,
>
> Michael
>

I think it first checks the forwarders first, then the local domains.  The
docs seem to state that (see http://www.isc.org/bind8/options.html).  Then,
if not local, it will try the root servers.  Perhaps it is redundant what I
did, but it seems to work.

I modified the named.ca file to remove references to *.root-servers.net,
placed my local nameservers in that file, and used the forward first option.

If you can't access the root servers, you might as well never try to reach
them directly.  But, if I remove the reference to the named.ca in named.conf,
I cannot query for anything outside the local bogus domain.

Anyone with a better solution?  It's my first day on the new .conf syntax.

Regards,

Dan Harter

named.ca:

.                 3600000  IN NS NS1.EXAMPLE.NET.
NS1.EXAMPLE.NET.  3600000     A  10.1.1.1
.                 3600000  IN NS NS2.EXAMPLE.NET.
NS2.EXAMPLE.NET.  3600000     A  10.2.2.2

named.conf:

options {
     directory "/var/named";
     forward first; //would prefer forward last if it existed
     forwarders { 10.1.1.1; 10.2.2.2; };
};

//from default RH52
zone "." {
        type hint;
        file "named.ca";
};

zone "0.0.127.in-addr.arpa" {
        type master;
        file "named.local";
};

// bogus domain (to the outside)
zone "bogus.example.net" {
        type slave;  // or whatever
        file "db.bogus.example.net";
        masters { 10.3.3.3; };
};

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: "Eric A. Hall" <[EMAIL PROTECTED]>
Crossposted-To: 
comp.os.linux.misc,comp.sys.sun.admin,comp.sys.sun.misc,comp.protocols.tcp-ip
Subject: Re: Help: FTP hang Solaris 2.6->Redhat 5.2
Date: 05 Feb 1999 08:23:47 PST


> Scanning with tcpdump confirmed that the Linux box was repeatedly
> sending the FIN in a packet that also had the last bit of data -
> and the Sun box was acknowledging the data but not the FIN.

Yeah, this is one of the more interesting TCP anomalies: Solaris won't
ACK/FIN a segment with data.

> I would think this would leave other protocols hanging, besides FTP,
> wouldn't it?

It's a problem for any app that puts the FIN flag on a data segment
that's talking to Solaris.

-- 
Eric A. Hall                                            [EMAIL PROTECTED]
+1-650-685-0557                                    http://www.ehsco.com

------------------------------

From: Mitch Cant <[EMAIL PROTECTED]>
Subject: Re: IP Masquerade with ICQ
Date: Fri, 05 Feb 1999 06:48:45 -0800

take a look at...

http://www.tor.shaw.wave.ca/~ambrose/rh5setup.html

hope it helps...

mitch

Josh Rusko wrote:

> I finally got my cable modem, so now I have 3 PC's on a network at
> home, sharing the cable connection. One is running Linux and it is the
> onc connected. The other 2 are windoze. IP Masquerade works fine for
> just about everything, except one thing on ICQ. File transfers from a
> PC behind the masq TO a computer anywhere on the internet work, but
> file transfers from a pc on the internet to a computer behind the
> masqerade do not. in other words I can send but cannot recieve files.
> I know there are IP Masq modules for use with IRC and RealAudio and
> other services, is there one for ICQ? Or is there a way to get file
> transfers working?
> thank you

--
===========================================================
Mitch Cant <[EMAIL PROTECTED]>
DDP Consulting Group, Vancouver BC Canada
Phone: 604-294-9193  Fax: 604-294-9155
Web Page: http://www.ddp.ca/
===========================================================



------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: linux.redhat.install;,demon.ip.support.unix;,redhat.networking.general;
Subject: Warning: Connecting Linux Redhat 5.2 to ISP that supports SMTP
Date: Fri, 05 Feb 1999 16:24:16 GMT

A warning for anyone installing linux for the first time who has an ISP that
supports users receiving e-mail via SMTP (aswell as, or instead of POP3) -
Demon Internet being a prime example:

The RedHat 5.2 installation (and others), by default, runs sendmail at
startup. This will cause you a problem if you haven't set up users on Linux
that correspond to the e-mail addresses at which people send you e-mail - as
soon as you connect, sendmail swings into action and receives all waiting
mail via SMTP but it will bounce all mail for users it doesn't know about
which is probably all of them (unless your e-mail address is
[EMAIL PROTECTED]!).

eg:  my e-mail address is [EMAIL PROTECTED], mab is not set up as a user
on my linux system so all e-mail to mab gets bounced (not anymore!).

The thing do to, especially if you want to use POP3 to recieve your e-mail
(like I do) is just to remove sendmail from the startup files.

I only lost about 10 e-mails because of this - hopefully this will help
someone else to not lose any.

Michael.



============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: [EMAIL PROTECTED] (Mark H.)
Subject: Re: Help, I'm at my wits end over PPP
Date: Sat, 06 Feb 1999 00:11:24 GMT

On Fri, 05 Feb 1999 21:47:22 GMT, The Scot
<[EMAIL PROTECTED]> wrote:


>Am I doomed to surf with only windoze, I really don't understand why its not
>working! Please help if you can!
>
>cheers,
>Dom
>

I can't give you a solution to your problem, but rest assured your not
alone. ppp seems to be one of the most annoying things to configure.
Just do what I do, go outside , scream, take a few deep breaths and
maybe by then someone will suggest something you haven't tried.



------------------------------

From: David Efflandt <[EMAIL PROTECTED]>
Subject: Re: Dialin PPP Server and Windoze clients
Date: Sat, 06 Feb 1999 01:44:38 GMT
Reply-To: [EMAIL PROTECTED]

On 2/5/99, 11:29:09 AM, Mike Stradling <[EMAIL PROTECTED]> wrote=
=20
regarding Dialin PPP Server and Windoze clients:

> I have set up a RH5.2 Linux box as a dial in server.  When dialing in
> using a Linux box all is well.  When I dial in using a Windoze box it
> connects ok but if I initiate a FTP download the download speed is
> extermely slow.   I have noticed that I have the following entries in
> /var/log/messages on my dialin server when the Windoze box has
> connected:

> [pppd]    CCP terminated by peer
> [pppd]    Compression disabled by peer

> I have compression enabled on the DIN entry on the Windoze box.

> Anybody got any ideas how I can speed up the download speed ??

> TIA

Software compression is not enabled by default unless you load related=20
modules in a certain order.  But that takes memory resources and may=20
not help much, since current modems already do hardware compression. =20
Although, the vj header compression supposedly helps.

If ifconfig is not showing errors and drops, then it could be a DNS=20
problem.  If you do not have properly configured DNS for remote=20
connections, make sure there are names for their IP's in /etc/hosts=20
and that /etc/resolv.conf only contains nameservers that are currently=20
connected.  /etc/ppp/ip-up.local and ip-down.local are handy for=20
manipulating resolv.conf based on connecting IP.




------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to