Linux-Networking Digest #173, Volume #10         Thu, 11 Feb 99 01:13:29 EST

Contents:
  Re: hacked login (Chad M. Townsend)
  Re: Linux DHCP vs NT ([EMAIL PROTECTED])
  Re: IPv6 questions ([EMAIL PROTECTED])
  Circumventing my ISP (Kevin Currie)
  Re: Can I run a web server with xDSL? ("Thom V")
  2.2.1 and etherexpress 16 (eexpress) (TheSuit)
  Re: Creating a Linux PPP RAS Server for Win95 Clients (Ross Crawford)
  Linux redhat 5.2 and Win98 network (Wong Kui Nevin)
  Re: Multi IP addresses on one NIC question (tongkm)
  Re: syslogd and high cpu loads (Joel Shellman)
  Re: limiting Web site access in Linux (sam)
  IPsec and Linux (Stephen Carville)
  Re: Red Hat and networking ("Matt Chipman")
  sharing CD-R and Zip drive on a network (Yan Seiner)
  printing on LINUX net (=?iso-8859-1?Q?Bj=F6rn?= Gerhart)
  Using my linux equiped adsl system as a news server ("Kim Gross")

----------------------------------------------------------------------------

From: Chad M. Townsend <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc,comp.os.linux.admin
Subject: Re: hacked login
Date: Thu, 11 Feb 1999 03:53:09 GMT

They most likely got in through another service like 'named' or 'imap' etc..
and the rootkit replaced 'login', so they did'nt hack login, they prob. hack
another service in /etc/inetd.conf, (or maybe not), be sure you ONLY have
services you need on and the rest off, and the ones you keep on, make sure
you know exactly what the are doing.  Keeping you software uptodate and
patched will help.

-chad


  "Mitchell Maltenfort" <[EMAIL PROTECTED]> wrote:
> >It sounds like some one used ROOT-kit on you computer, tehey did the same
> >on my PC, i had to reinstall all becouse he also planted a backdoor
> >(check) he also replaced a hacked inetd so he can log in not to be
> >detected he can also replace ls, ps, etc...  check
> >http://www.rootshell.com/ for the rootkit and unpack it en read the readme
> >and you be dazzeled ehat it can do...
> >
>
> I checked out rootshell and was surprised, although at my end of the
> learning curve it looked more like an ammo dump than a bomb shelter.
>
> I did a search on rootkit and was surprised to only see ways to download it.
> Is there any way to block it?
>
>


========================================================
Chad M. Townsend         Virtual Community Network, Inc.
Chief Technical Officer  Your Local Community Online!

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Linux DHCP vs NT
Date: Mon, 08 Feb 1999 22:34:00 GMT

In article <79mkga$hp6$[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (Villy Kruse) wrote:
> In article <[EMAIL PROTECTED]>,
> David Efflandt  <[EMAIL PROTECTED]> wrote:
> >On 2/5/99, 4:02:20 PM, Sean MacLennan <[EMAIL PROTECTED]> wrote=20
> >regarding Linux DHCP vs NT:
>
>
> >A good DHCP server will check if an IP is in use before assigning it,
> >but who here thinks that NT is good?  8-)
>
> A good network administrator would not assign a static IP address in
> the range managed by any DHCP server.

Who said anything about the adminstrator doing this.

#1  Users frequently trying things like this even if they are setup not to be
allowed to.

#2  There could be a system malfunction that has caused this.  I have seen
discussions of DHCP servers and or clients doing this every once in a while.

#3  You have never typoed a configuration, right ;-)


>  A DHCP server should reightfully
> assume that any IP address it has not issued a licence for, and which are
> in the range administered by this server should be available and not used.

The bottom line is an assume makes an ASS out of U and ME.  When a simple
ping would verify that the address is used it is very silly to to take this
stop.  I believe implied here, but not stated is that the address would not
be assigned, but that the system manager would also be notified of the
problem.

> In addition the DHCP server should leave a range of addresses excluded
> from its jurisdiction. These addresses can then be assigned to servers
> and other machines that need a static IP address.

The point is not to handle normal configuration in this manner, but to deal
with problems by checking for them.  This is the same as my crossing the
street in a cross walk.  I wait for the walk light, and then I check for any
cars ignoring the red light before I cross.  This keeps you alive a lot
longer.  In the same way double checking that an IP is out of use before
assigning it will keep your network alive and well.

>
> Villy
>

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: IPv6 questions
Date: Mon, 08 Feb 1999 22:43:05 GMT

IPv6 has been implemented, there are a lot of IPv6 backbones working in
tandem with IPv4.  You can't just decided to use IPv6, what if your ISP's
router doesnt know how to use it?  As far as how it works, it's just IP with
more bits.

-Gammo



In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (AhYap) wrote:
> Hi guys
>
> Is IPv6 still under research? or it already impliment into real
> working system? if yes what are the advantages?
> how do i upgrade myself into IPv6?
>
> how actually IPv6 work?
>
> thanx ^_^
>
>

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: Kevin Currie <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Circumventing my ISP
Date: Mon, 08 Feb 1999 17:43:18 -0500

I am wonderring if anyone can help me find a way to circumvent some
firewalling my ISP is doing.  Here is the situation (names have been changed
to protect the guilty):

~ I have a linux box on xxx.yyy.zzz.0/24 (say xxx.yyy.zzz.e/32)
~ Incoming traffic to this subnet can only come from xxx.yyy.0.0/16
  without going though some ip manipulation to prevent servers on my
  subnet.
~ I have access to a linux machine on xxx.yyy.0.0/16 which has two ip
  addresss (lets say xxx.yyy.a.a/32 and xxx.yyy.a.b/32).

Now this setup the ISP has is all fine and dandy for Windows users, but I'd
love to be able to telnet/ftp to my machine from remote computers to do
things like get my mail and transfer files and such.

I would like to be able to take all traffic coming to xxx.yyy.a.b/32 and
send it to my machine on xxx.yyy.zzz.e/32.  Is there a way to do this with
ipportfw, ipchains, ipfwadm, or anything?  I've looked at ipautofw and it is
not acceptable because it would take traffic from both xxx.yyy.a.a _AND_
xxx.yyy.a.b and send it though.  xxx.yyy.a.a must be able to get its own
traffic.

Can anyone help me with a solution?  Is this even possible?
Please post and mail if possible.

Thanks,
Kevin Currie

------------------------------

From: "Thom V" <[EMAIL PROTECTED]>
Subject: Re: Can I run a web server with xDSL?
Date: Wed, 10 Feb 1999 20:07:41 -0800

With an external xDSL connector such as the FlowPoint 2200 it should be a
piece of cake.
Just set up the system so that the gateway is set to the FlowPoint DSL
router and you're up
and running.

HTH,
Thom

Chris wrote in message <[EMAIL PROTECTED]>...
>On Tue, 26 Jan 1999 11:56:53 -0800, Chris Plachta
><[EMAIL PROTECTED]> wrote in comp.os.linux.networking:
>
>>I am in the process of trying to set up a web server (Apache on Linux)
>>that I will use to host multiple sites. I am trying to decide between
>>co-locating a server or hosting it in-house with a DSL connection. I am
>>wondering if there is anyone out there that is currenlty running a web
>>server with a DSL connection, and if there are any problems I should
>>know about before diving into it.
>
>I am using ADSL with no real problems.  There are two things you have to
>ensure in order for your site to work properly:
>
>1) First and foremost, you have to ensure that you will not be stuck
>behind a firewall.  There have been reports of some xDSL providers
>blocking incoming traffic.
>
>2) Assuming you are reachable from the outside, you must have some
>Linux-compatible way of obtaining a static FQDN.  For example, my telco
>uses DHCP to assign the addresses and a secure "login" web page that calls
>a CGI to update their DNS.  Lucky for me, someone else came along and
>wrote a perl script to feed the appropriate information to their https
>server so I don't have to manually login.
>
>>A couple of questions I have:
>>
>>-How do I handle the DNS service for mulitple sites? Can I outsource
>>this our do I have to set up DNS on my own machine?
>
>Typically, the telco will provide you with a single DNS entry that points
>to your firewall's IP address.  You would have to get an outside DNS to
>support any other domains you have registered.  Of course, the people who
>provide you with the domain names should be willing to do this for you.
>At your end, you can configure Linux to use IP Aliasing to support
>multiple FQDNs to one IP address so that Apache can provide a different
>starting page depending on what site the client thought it was contacting.
>
>>-How about email servcies? If I am hosting a domain, can I provide POP
>>mail service on my server? Is this asking too much of a single box? Can
>>this be outsourced?
>
>You can install POP, SMTP and HTTP servers on one machine.  Whether or not
>it's too much load will depend on how busy your web pages get.
>
>>-Are any issues with network config and DSL that I should be aware of?
>
>There are several competing DHCP clients under development.  None of them
>are quite finished, and you may need to do some hand-holding for a while.
>
>The other big issue is the fact that there is no industry standard yet for
>connecting a DHCP server to a DNS server, so every telco has a different
>way of doing it (assuming they bother).  No matter who you use for a DNS,
>you will have to find out how they want their DNS updated and write the
>appropriate "i am here" script.
>



------------------------------

From: TheSuit <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.hardware,comp.os.linux.setup,uk.comp.os.linux
Subject: 2.2.1 and etherexpress 16 (eexpress)
Date: Thu, 11 Feb 1999 04:31:44 +0000

Has anyone noticed any problems with this combination?  I've had my
etherexpress16 working under 2.0.3x since I first installed linux with
vitually no problems... now all of a sudden after upgrading to 2.2.1 i
occasionally get the following error messages (usually after i put some
heavy'ish, 1mb +, trafic on the link)

=============
???  reset  timed out, kicking...
???  reset  timed out, kicking...
???  reset  timed out, kicking...
???  not responding, giving up
=============

???= something like eth0 ixxxxxx..  can't remember the exact numbers..

Has anyone else experianced this problem?  Or does anyone know what the
error messages mean?  Does this indicate a hardware or software failure?

I can provide more details if someone gives me some indication of what
is required..

Thanks in advance..

Suit

------------------------------

From: Ross Crawford <[EMAIL PROTECTED]>
Crossposted-To: 
comp.os.linux.setup,comp.protocols.ppp,force9.tech.linux,linux.redhat.ppp
Subject: Re: Creating a Linux PPP RAS Server for Win95 Clients
Date: Thu, 11 Feb 1999 15:10:46 +1100

David,

Exactly what isn't working? Have you looked in the log file? I have mgetty set
up on my box, and can dial in from Win95 & NT boxes at work, without a problem.

Main points - What authentication are you using? PAP->Must have pap-secrets
file; CHAP->Must have chap-secrets file. Note that if you want to use CHAP with
M$ clients, you'll need the ppp patches for MSCHAP (I think - I haven't tried
this). My AutoPPP line is:
/AutoPPP/ - - /usr/sbin/pppd auth -chap +pap login 192.168.25.100

Put the ip you want the server to have in the options on the AutoPPP line in
login.config.

Put the ip you want the client to get in /etc/ppp/options.ttyXX (substitiute
your serial device here).

Hope this helps.

ROSCO

David Travers wrote:

> I am currently working on a project to create a PPP server that will allows
> Windows 3.1/95/NT clients to dial in and access our company's internal
> network.
>
> This will allow the users to collect their e-mail from the e-mail server on
> the LAN and possibly browse the web.
>
> I have managed to get a PPP client to work (i.e Linux will dial an ISP), but
> I cannot get the PPP server to work. Also mgetty automatically answer's the
> call but nothing seems to happen after that. I have recompiled mgetty with
> support for AutoPPP.
>


------------------------------

From: Wong Kui Nevin <[EMAIL PROTECTED]>
Subject: Linux redhat 5.2 and Win98 network
Date: 10 Feb 1999 04:32:22 GMT

Hello,

I want to install Linux redhat 5.2 to my computer and connect a network
to my other computer running Win98. How can I do that? I'm new to Linux.
Do I just buy 2 network cards and plug them in? Or do I need a hub or
something? Thanks

Yours,
Nev

------------------------------

From: tongkm <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc,comp.os.linux.setup
Subject: Re: Multi IP addresses on one NIC question
Date: Wed, 10 Feb 1999 12:18:30 +0800

I did it using the config as below, using one nic with 1 valid ip address
and 2 privite ip.

my rc.local with lines :

# Setting up IP alias interfaces.
echo "Setting up 192.168.10.1 IP Aliases ... "
/sbin/ifconfig eth0:0 192.168.10.1 netmask 255.255.255.0 up
/sbin/ifconfig eth0:1 192.168.20.1 netmask 255.255.255.0 up
#
# Setting up IP routes
echo "Setting up IP routes ..."
/sbin/route add -net 192.168.10.0 netmask 255.255.255.0 eth0:0
/sbin/route add -net 192.168.20.0 netmask 255.255.255.0 eth0:1
# Loading modules
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp.o
#
# Setting up IP Masquerade
echo "Setting IP Masquerade ..."
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.10.0/24 -D 0.0.0.0/0
ipfwadm -F -a m -S 192.168.20.0/24 -D 0.0.0.0/0

and my network report the status as :

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Bcast:127.255.255.255  Mask:255.0.0.0
          UP BROADCAST LOOPBACK RUNNING  MTU:3584  Metric:1
          RX packets:28 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28 errors:0 dropped:0 overruns:0 carrier:0 coll:0

eth0      Link encap:Ethernet  HWaddr 00:60:8C:C8:C0:A6
          inet addr:192.168.133.155  Bcast:192.168.133.255
Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1040584 errors:0 dropped:0 overruns:0 frame:0
          TX packets:440875 errors:0 dropped:0 overruns:0 carrier:0
coll:2116
          Interrupt:10 Base address:0x330

eth0:0    Link encap:Ethernet  HWaddr 00:60:8C:C8:C0:A6
          inet addr:192.168.10.1  Bcast:192.168.10.255  Mask:255.255.255.0
          UP RUNNING  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 coll:0

eth0:1    Link encap:Ethernet  HWaddr 00:60:8C:C8:C0:A6
          inet addr:192.168.20.1  Bcast:192.168.20.255  Mask:255.255.255.0
          UP RUNNING  MTU:1500  Metric:1
          RX packets:1 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 coll:0

the system work fine on a 486-100 16M RAM linux box with slackware 3.5,
kernel 2.0.36.

Stormie Nelson wrote:

> Howdy from Texas -
>
> I am trying to set up a masquerading firewall.  I have done this before
> with no real problems, but I am doing something a little weird at a
> customer's request.  It has a legal address assigned by the ISP, and
> they want me to assign a private address for ipmasq to the same NIC, so
> the same physical interface is configured for the public and the private
> network.
>
> In rc.inet1 I am doing
>
> /sbin/ifconfig eth0 201.20.99.2 broadcast 201.20.99.255 netmask
> 255.255.255.0
> /sbin/ifconfig eth0:0 192.168.200.1 broadcast 192.168.200.255 netmask
> 255.255.255.0
>  /sbin/route add default gw 201.20.99.1 netmask 0.0.0.0 metric 1
>  /sbin/route add -net 192.168.200.0 gw 192.168.200.1
>
> In a file I created called rc.masq I am doing
>
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_cuseeme.o
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_ftp.o
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_irc.o
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_quake.o
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_raudio.o
> /sbin/modprobe /lib/modules/2.0.36/ipv4/ip_masq_vdolive.o
> /sbin/ipfwadm -F -p accept
> /sbin/ipfwadm -F -f
> /sbin/ipfwadm -I -f
> /sbin/ipfwadm -O -f
> /sbin/ipfwadm -F -a m -S 192.168.200.0/24 -D 0.0.0.0/0
>
> I know, I have not yet locked down the firewalling portion, I just want
> to get connectivity squared away before I start shutting services down.
>
> I am getting kind of weird results, like _intermittent_ ability to get
> out to the Internet from within the private network, especially from
> folks dialing in to the >cringe< WinNT RAS server.
>
> I am running Slackware 3.6, kernel 2.0.36, and an Intel Ether Express
> Pro 100b.  Is this just not a good thing to do, running two logical
> networks on one physical interface?  I am starting to believe it is not,
> but I was just looking for anyone who had any input.
>
> If convenient, please respond via e-mail as well as post.
>
> Thanks!


------------------------------

Date: Tue, 09 Feb 1999 22:25:03 +0000
From: Joel Shellman <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.help,comp.os.linux.misc
Subject: Re: syslogd and high cpu loads

Can you give a specific example please? Also, are there any
considerations for this? Will it possibly cause problems by
not syncing?
-- 
Joel Shellman
knOcean Interactive Corporation
http://corp.knOcean.com/


Jukka Timonen wrote:
> 
> High CPU time is system mode is explained by syslogd sync()'ing after every
> line logged. You can omit syncing by prefixing filenames with "-" in
> syslog.conf.
> 
> t.
> --Jukka
> 
>  Wed, 03 Feb 1999 06:49:47 GMT, Frank J. Dziuba <[EMAIL PROTECTED]> wrote:
> >We have a machine set up to receive syslogd messages from some other machines
> >so we can centralize our logs. It gets about 2-3 log entries per second.
> >It's a pentium 200mhz with plenty of ram and stuff, scsi disks, etc....
> >
> >The syslogd process stays at about 70% cpu load! When we do some analysis
> >on it we see what appears to be a lot or DNS lookups on the
> >sending hosts. We put them in the /etc/hosts file thinking it would help
> >but the load is still high. Doesn't make sense. Anybody seen this or fixed
> >this?
> >
> >thanks in advance.
> >
> >Frank

------------------------------

From: sam <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: Re: limiting Web site access in Linux
Date: Wed, 10 Feb 1999 05:41:06 GMT


==============B1C342BB7BD0BDB496BE8A1C
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I wonder if  the following entries in httpd.conf will work
proxyBlock *
proxyPass with selected domain list  (map only those sites that you need)

Andre Riscalla wrote:

> Yes there is a way. One solution is to build a proxy with Apache
> (www.apache.org). This will give you the flexibility to limit and
> control web access. There is a pretty good article on how to do this in
> the last sys-Admin magazine, february issue (www.samag.com)
>
> On Fri, 5 Feb 1999 [EMAIL PROTECTED] wrote:
>
> > Hi -
> >
> > I am in the process of setting up my first Linux machine (running RedHat
> > 5.1). It will be used for Internet access by our employees to 2 specific Web
> > sites (not in-house).  My question is: is there any way that I can limit
> > which Web sites may be visited? The fear by Administration is that folks will
> > rummage about in all sorts of sordid Web sites on Company time, and they
> > would like for me to eliminate that as much as possible.
> >
> > Thanks in advance for any help you can give!
> >
> > Best Regards,
> > Karen Clendenin
> >
> > -----------== Posted via Deja News, The Discussion Network ==----------
> > http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own
> >
> >
>
> --
> Contrary to popular belief, Unix IS user friendly. It just happens
> to be very selective about who it decides to make friends with.
>
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
> Andre Riscalla                                  Sr. Network Engineer
> [EMAIL PROTECTED]                       514-940-5664
> Data Service and Technology, Engineering        Metronet Communications
> +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+

--
Remove the NONO in my reply to address



==============B1C342BB7BD0BDB496BE8A1C
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
I wonder if&nbsp; the following entries in httpd.conf will work
<br>proxyBlock *
<br>proxyPass with selected domain list&nbsp; (map only those sites that
you need)
<p>Andre Riscalla wrote:
<blockquote TYPE=CITE>Yes there is a way. One solution is to build a proxy
with Apache
<br>(www.apache.org). This will give you the flexibility to limit and
<br>control web access. There is a pretty good article on how to do this
in
<br>the last sys-Admin magazine, february issue (www.samag.com)
<p>On Fri, 5 Feb 1999 [EMAIL PROTECTED] wrote:
<p>> Hi -
<br>>
<br>> I am in the process of setting up my first Linux machine (running
RedHat
<br>> 5.1). It will be used for Internet access by our employees to 2 specific
Web
<br>> sites (not in-house).&nbsp; My question is: is there any way that
I can limit
<br>> which Web sites may be visited? The fear by Administration is that
folks will
<br>> rummage about in all sorts of sordid Web sites on Company time, and
they
<br>> would like for me to eliminate that as much as possible.
<br>>
<br>> Thanks in advance for any help you can give!
<br>>
<br>> Best Regards,
<br>> Karen Clendenin
<br>>
<br>> -----------== Posted via Deja News, The Discussion Network ==----------
<br>> <a 
href="http://www.dejanews.com/">http://www.dejanews.com/</a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Search, Read, Discuss, or Start Your Own
<br>>
<br>>
<p>--
<br>Contrary to popular belief, Unix IS user friendly. It just happens
<br>to be very selective about who it decides to make friends with.
<p>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
<br>Andre 
Riscalla&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Sr. Network Engineer
<br>[EMAIL PROTECTED]&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
514-940-5664
<br>Data Service and Technology, Engineering&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Metronet Communications
<br>+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+</blockquote>

<pre>--&nbsp;
Remove the NONO in my reply to address</pre>
&nbsp;</html>

==============B1C342BB7BD0BDB496BE8A1C==


------------------------------

From: Stephen Carville <[EMAIL PROTECTED]>
Subject: IPsec and Linux
Date: 10 Feb 1999 05:41:38 GMT

I would like to implement IPSec between Linux w 2.0.36 kernel and a Nortel
(Baynet) Contivity 2000 "Extranet" switch.  I have DL'ed the freeswan v0.91
code but this appear to be a linux only solution which I cannot use.  Has
anyone been able to successfully talk form a linux box to a commercial
IPsec switch like the Contivity 2000?  Ideally, the solution would be a
user space application like stunnel or ssh (Neither of which works with the
Baynet hardware) but I can recompile a kernel if necessary :-)

-- 
Stephen Carville
[EMAIL PROTECTED]
====================================================
Management: The art of hiring intelligent, skilled individuals and then
ignoring their advice.

------------------------------

From: "Matt Chipman" <[EMAIL PROTECTED]>
Subject: Re: Red Hat and networking
Date: Thu, 11 Feb 1999 16:44:31 +1100

In the advanced options of the device configuration under netcfg in
xwindows, i think there is a button that says "allow any user to activate
this device"  sorry i dont know how to do this other than through x windows.

The device should be ppp0 or similar.

regards

Matt

Esposito Roberto wrote in message ...
>Hi,
>  I'm a beginner in configuring linux and I've the following problem:
>I've setted up an Internet connection using netcfg (a standard python
>program by Red Hat), and I succeed in connecting to Internet as super
>user, but when I try to connect myself using another user the os didn't
>allow me to continue due to permission errors.
>
>I've tried:
>  - to set uid and gid flags in the permission flags of netcfg related
>files
>  - to set ppp files writeable by all
>
>Now netcfg starts but even if I push the activate button over the
>interface I use to connect, it does nothing.
>
>I don't know what to do.
>
>Sorry for my poor english, I hope I've succeeded in explaining my problem.
>
>Thanks in advance,
>Roberto Esposito
>
>
>
>
>



------------------------------

From: Yan Seiner <[EMAIL PROTECTED]>
Subject: sharing CD-R and Zip drive on a network
Date: Tue, 09 Feb 1999 21:04:08 -0500

I want to set up a CD-R, a Zip drive, and a 4 CD changer as a shared
resource on the network, all running on a linux box.

Here's how I envision this will work:

A user will stick a CD, zip disk, or CD-R in and mount it.  This should
lock out any other users who attempt to umount it.

After the user is done, (s)he can umount the drive, and eject, and the
next user can use the resource.

These rerources will be available to the user (and group) across the
network during the time (s)he has them mounted.

I have no idea how this will work, as I can't suid the mount command.  I
would lose what littel hair I have left with that mess :-o

I am looking for suggestions on how to work this.  Is there a way to
restrict the mount command to allow any user to mount and umount a
specific drive?

TIA,

Yan


------------------------------

From: =?iso-8859-1?Q?Bj=F6rn?= Gerhart <[EMAIL PROTECTED]>
Crossposted-To: de.comp.os.unix.linux.misc
Subject: printing on LINUX net
Date: Wed, 10 Feb 1999 16:17:14 +0100

This is a multi-part message in MIME format.
==============7FED3F7E5F68D1D872146FE8
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hello,

I've a printserver (Linux) running and I want to print from my (Linux)
workstation. The printer on the printserver is installed and running.
The network is also running (NFS on both sides installed).
Which files do I have to modify on the server, and which
printcap-entries do I need on the workstation to get access to the
printserver's printer??

Thanks a lot for your help.
            Bjoern

==============7FED3F7E5F68D1D872146FE8
Content-Type: text/x-vcard; charset=us-ascii;
 name="bjoerni.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Bj�rn Gerhart
Content-Disposition: attachment;
 filename="bjoerni.vcf"

begin:vcard 
n:Gerhart;Bj�rn
x-mozilla-html:FALSE
adr:;;;;;;
version:2.1
email;internet:[EMAIL PROTECTED]
fn:Bj�rn Gerhart
end:vcard

==============7FED3F7E5F68D1D872146FE8==


------------------------------

From: "Kim Gross" <[EMAIL PROTECTED]>
Subject: Using my linux equiped adsl system as a news server
Date: Tue, 9 Feb 1999 23:02:17 -0700

Can anybody point me to info on setting up my linux web server as a local
news server?  I have a news server through my ISP but it is so slow I can't
stand it.  (besides that it seems to delete messages after 2 days).  Anyway
if I could just have the linux box regularly connect to the news server and
download the messages and then allow me to read them from my 95 boxes that
would be great.  Or if anybody knows of a free nntp server that would be
willing to allow another connect for a few newsgroups that would be even
better.

Thanks

Kim Gross




------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to