Linux-Networking Digest #218, Volume #10 Mon, 15 Feb 99 21:13:42 EST
Contents:
Would anyone like to write for a newsletter? (Port Lord)
rpm for pop3 for RH5.2 (Partha Sri)
Re: Setup xntp? (John Mellor)
Setup xntp? ([EMAIL PROTECTED])
Re: Attempting to setup PPTP ("John Hardin")
Re: Too Many DNS lookups from win98 machine (Victor Wagner)
DNS working, yet more questions (Sedmail problem maybe?) (Brian Lavender)
Re: Cable modem (Jianmang Li)
Re: telnet: Was my system hacked? (Jianmang Li)
IP masquerading and socket timeouts (Nightmare)
QMail questions ([EMAIL PROTECTED])
Re: Fetchmail/procmail question ("John Hardin")
How do i get linux onto a 486 box eh?!!?!?!?! ("Dane Maxwell")
Re: linux & VPN ("John Hardin")
Re: PCNet Driver (L J Bayuk)
Re: How do i get linux onto a 486 box eh?!!?!?!?! (L J Bayuk)
Re: VNC - Anybody had any luck with this? (Yan Seiner)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Port Lord)
Subject: Would anyone like to write for a newsletter?
Date: 16 Feb 1999 00:15:08 GMT
My friend and I have put together a nice newsletter about Internet ,phone
systems, Computer Security , Cryptography and about every aspect of computers
and phones. We are far from desperate for writers but we could still use them.
If
you would like to write an article about anything on computers or phones that
would be informing ,researched(meaning it is fact) , and topics that haven�t
been
killed , meaning there is already 293829 articles on it, we would be
interested. The name of our newsletter is Columbia 2032 or C2032 for short. You
can send all articles to [EMAIL PROTECTED] . We will review and add you
to our newsletter mailing list.
------------------------------
From: Partha Sri <[EMAIL PROTECTED]>
Subject: rpm for pop3 for RH5.2
Date: Mon, 15 Feb 1999 18:44:47 -0600
Reply-To: [EMAIL PROTECTED]
Hi:
can anyone tell me where to find the rpms for pop3??
thanks
Partha
------------------------------
From: [EMAIL PROTECTED] (John Mellor)
Subject: Re: Setup xntp?
Date: Tue, 16 Feb 1999 01:00:41 GMT
I'm running xntp3-5.93-4 rpm, which should be all you need. Its the one that
ships with RedHat.
Here is my /etc/ntp.conf file, which has been essentially unchanged for a long
time:
#
# Undisciplined Local Clock. This is a fake driver intended for backup
# and when no outside source of synchronized time is available. The
# default stratum is usually 3, but in this case we elect to use stratum
# 10. Since the server line does not have the prefer keyword, this driver
# is never used for synchronization, unless no other other
# synchronization source is available. In case the local host is
# controlled by some external source, such as an external oscillator or
# another protocol, the prefer keyword would cause the local host to
# disregard all other synchronization sources, unless the kernel
# modifications are in use and declare an unsynchronized condition.
#
server 127.127.1.0 # local clock
fudge 127.127.1.0 stratum 10
#
# Drift file. Put this in a directory which the daemon can write to.
# No symbolic links allowed, either, since the daemon updates the file
# by creating a temporary in the same directory and then rename()'ing
# it to the file.
#
driftfile /etc/ntp/drift
multicastclient # listen on default 224.0.1.1
broadcastdelay 0.008
#
# Authentication delay. If you use, or plan to use someday, the
# authentication facility you should make the programs in the auth_stuff
# directory and figure out what this number should be on your machine.
#
authenticate no
#
# Keys file. If you want to diddle your server at run time, make a
# keys file (mode 600 for sure) and define the key number to be
# used for making requests.
#
keys /etc/ntp/keys
trustedkey 12345
requestkey 12345
controlkey 12345
# Reference Sites -- check http://www.eecis.udel.edu/~mills/ntp/clock2.htm
server 132.246.168.80 # timefreq.phy.nrc.ca # stratum 2 Ottawa
#server 128.100.103.252 # tick.utoronto.ca # stratum 2 Toronto
server 128.100.100.128 # tock.utoronto.ca # stratum 2 Toronto
server 128.100.102.201 # chime.utoronto.ca
server 142.3.100.15 # timelord.uregina.ca # stratum 2 Regina
server 199.212.17.50 # www2.cmc.ec.gc.ca # stratum 2 Quebec City
server 24.2.9.33 # proxy.ktchnr1.on.wave.home.com # Rogers-kw
peer 24.112.108.39 # cr918730-a.cambr1.on.wave.home.com # Tony Lill
peer 24.112.104.63 # cr154328-a.ktchnr1.on.wave.home.com # Jeff Voskamp
peer 204.138.110.1 # omega.metrics.com # Tom Haapinen
peer 198.73.192.2 # deka.mks.com # MKS
peer 192.75.213.193 version 2 # xenitec.xenitec.on.ca # Ed Hew
Note that the local clock is set up as a stratum 10 server, NOT the default (and
wrong) RedHat value of startum 1. Check out the ntp home site for the current
list of available servers at each stratum, and be intelligent about some of the
local sites to peer with.
Does that help you?
In article <7a9vc7$2dj$[EMAIL PROTECTED]>,
[EMAIL PROTECTED] writes:
|> Anybody got any idea how to setup xntp? There don't seem to be any man
|> pages on it. I downloaded the latest ntp rpm, but it won't install because of
|> conflicts with xntp, which I think is older, but not sure.
|>
|> H.
|>
|> -----------== Posted via Deja News, The Discussion Network ==----------
|> http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
--
John Mellor Kitchener, Ontario, Canada http://www.kitchener.com/mellor/
[EMAIL PROTECTED] http://www.mellor.kw.net/
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
------------------------------
From: [EMAIL PROTECTED]
Subject: Setup xntp?
Date: Mon, 15 Feb 1999 20:17:19 GMT
Anybody got any idea how to setup xntp? There don't seem to be any man
pages on it. I downloaded the latest ntp rpm, but it won't install because of
conflicts with xntp, which I think is older, but not sure.
H.
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: "John Hardin" <[EMAIL PROTECTED]>
Subject: Re: Attempting to setup PPTP
Date: Mon, 15 Feb 1999 17:02:46 -0800
[EMAIL PROTECTED] wrote in message <[EMAIL PROTECTED]>...
>I am attempting to setup the following scenario with little success:
>
>|------------|---- ============= ------|-------------|
>A B C D
>
>===== - Internet
>A - remote resource I want to connect to
>B - BayNetworks ExtraNet server
>C - my Linux server running as a Firewall - Linux 2.0.34 w/ PPTP compiled
in
>D - my NT laptop running ExtraNet client
>
>I have installed the PPTP software from John Hardin to no avail. I
>still can not get a connection to server. I can connect on the TCP port
>but the GRE connection does not seem to be working. Any help would be
>greatly appreciated. Thank you in advance.
What are your firewall rules?
Have you read through the PPTP Masq HOWTO at
ftp://ftp.rubyriver.com/pub/jhardin/masquerade/PPTP-howto/PPTP-Masquerade.h
tml ? It has a troubleshooting section.
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
=======================================================================
If you spend any time administering Windows NT, you're far too
familiar with the Blue Screen of Death (BSOD) ...
- "MSDN Flash" email newsletter, 2/9/1999
=======================================================================
98 days until Star Wars episode I
------------------------------
From: [EMAIL PROTECTED] (Victor Wagner)
Subject: Re: Too Many DNS lookups from win98 machine
Date: 16 Feb 1999 00:48:42 +0300
Jim Rainville <[EMAIL PROTECTED]> wrote:
: I have a small home network that is using a Linux machine (redhat 5.2 kernel
: 2.0.36) as a masquarde gateway. The problem I'm having is that the win98
: machines that are connected to this are doing DNS lookups about every 5
: minutes. Since the Linux box is connected to the internet via modem and I'm
: using diald the link comes up with every one of these DNS lookups. So, every
: 5 minutes the modem is dialing out even when nobody is using the internet.
: I have to questions about this:
: 1) How do I find out more information about the DNS lookups. I'm using
: ksniffer on the linux box and I can see a packet go out on port 53 (DNS)
: with the IP address of my ISP's DNS. I would like to get more information on
: the packet such as what is being looked up.
Enable logging in named.boot file.
In my bind 4.don't-remeber-how-many it is
options query-log
If you have bind 8.x things may be slightly different. Check the man
page.
After you have done this you'll see in /var/log/messages
when some of your machines have done lookup and what address it is for.
There are two possible causes of DNS lookup
1. MSIE
2. Something on your Linux machine which tries to resolve name or
address of your windows machine connecting to it.
: 2) How do I stop it? I can't put a diald filter rule to ignore DNS because
: then the link would never come up. Any ideas.
I don't know how to do it with Windows 98, but with Windows 95 answer is
quite simple - remove MSIE.
: PS - I do have a caching only DNS set up on the Linux machine but if I
: disable it it doesn't solve this problem.
I think you need to go to opposite direction and create primary zone
for your local net. Set up both direct (name to address) and reverse
zones. Don't forget reverse zone for 127.in-addr.arpa (to resolve
localhost) and A record for localhost.your.domain in direct zone.
Thus most of your DNS requests would be resolved locally
without need to bring link up. If this doesn't help,
do following
1. Add IP address of some net portal into local named cache with very
large TTL.
2. Make this portal starting page for exploring internet on all
machines.
Thus any user starting exploring internet would get IP address of the
start page from local nameserver and his first packet outside would on
port 80 which would bring link up.
: Thanks in advance.
: Jim
--
========================================================
I have tin news and pine mail...
Victor Wagner @ home = [EMAIL PROTECTED]
------------------------------
From: [EMAIL PROTECTED] (Brian Lavender)
Subject: DNS working, yet more questions (Sedmail problem maybe?)
Date: Mon, 15 Feb 1999 20:59:07 GMT
I successfully configured dns and now I have web and ftp services. I
registered bigbrie.com for testing purposes. I have a demo webpage at
http://www.bigbrie.com and anonymous ftp at ftp://ftp.bigbrie.com. I
am having a couple problems with my mail server which I am not sure is
from the way DNS (BIND 8.?) is configured or from the way sendmail is
configured. I am using Slackware 3.6 which comes with Sendmail 8.9.1 .
First problem, I can email out of my machine, but when the recipient
recieves it, it puts the sender with the machine name appended (ie
from: [EMAIL PROTECTED]) . I would like it so the sender says
[EMAIL PROTECTED] . Is this a DNS or a Sendmail issue? How do I fix
it?
Second problem, If I go to send email to [EMAIL PROTECTED] and it gets
bounced with a relay error( included below). If you are more curious
about the error, send email to [EMAIL PROTECTED] and it should bounce.
If you send email to [EMAIL PROTECTED] it gets there. Of
course I want people to be able to send email to [EMAIL PROTECTED] .
Same question of course: Sendmail or DNS? The fix?
Please look over my DNS configuration (below). Do I have to have the
MX name the same name as the machine? It looks as if
mail.domainname.com is usually the name of the machine that is used
for mail. Of course everything is on one machine in my case. I have my
machine hostname named darkstar or darkstar.bigbrie.com
Thanks
brian
====================
Brian Lavender
Sacramento, CA
http://www.brie.com/brian/
"If a train station is where the train stops,
what is a workstation?" -- Phil Adamson
Received: from eshu.request.net ([207.48.132.2]) by munin.request.net
with ESMTP id <57470877-21660>; Mon, 15 Feb 1999 14:46:59 -0500
Received: by eshu.request.net id <482-1694>; Mon, 15 Feb 1999 14:46:19
-0500
To: [EMAIL PROTECTED]
From: The Post Office <[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
Subject: Delivery problems with your mail
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="A4330.919107973=_/eshu.request.net"
Message-Id: <[EMAIL PROTECTED]>
Date: Mon, 15 Feb 1999 14:46:13 -0500
Status:
--A4330.919107973=_/eshu.request.net
Content-Type: text/plain
A copy of your message is being returned to you due to difficulties
encountered while attempting to deliver your mail.
Very often people attempt to send mail to USERIDs, which are not
known to this particular system.
The following errors occurred during message delivery processing:
<smtp bigbrie.com [EMAIL PROTECTED] 32765>: ...\
<<- RCPT To:<[EMAIL PROTECTED]>
->> 550 <[EMAIL PROTECTED]>... Relaying denied
--A4330.919107973=_/eshu.request.net
Content-Type: message/delivery-status
Reporting-MTA: dns; eshu.request.net
Arrival-Date: Mon, 15 Feb 1999 14:46:01 -0500
Final-Recipient: RFC822; [EMAIL PROTECTED]
Action: failed
Status: 5.1.1 (bad destination mailbox)
Diagnostic-Code: smtp; 550 ( <[EMAIL PROTECTED]>... Relaying denied)
Remote-MTA: dns; bigbrie.com
--A4330.919107973=_/eshu.request.net
Content-Type: message/rfc822
Received: from munin.request.net ([208.236.140.172]) by
eshu.request.net with ESMTP id <3694-1694>; Mon, 15 Feb 1999 14:46:01
-0500
Received: from munin.request.net ([208.236.140.172]) by
munin.request.net with SMTP id <57316090-19239>; Mon, 15 Feb 1999
14:45:58 -0500
Date: Mon, 15 Feb 1999 14:45:51 -0500 (EST)
From: Brian Lavender <[EMAIL PROTECTED]>
X-Sender: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: just bigbrie.com
Message-ID:
<[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
no darkstar in this one.
=========
Brian E. Lavender
http://www.brie.com/brian/
"For every complex problem, there is a solution that is simple,
neat, and wrong"
-- H.L.Mencken
--A4330.919107973=_/eshu.request.net--
darkstar:# cat /etc/named.conf
options {
directory "/var/named";
// Uncommenting this might help if you have to go through a
// firewall and things are not working out:
// query-source address * port 53;
};
zone "." {
type hint;
file "root.hints";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "pz/127.0.0";
};
zone "linux.bogus" {
notify no;
type master;
file "pz/linux.bogus";
};
zone "bigbrie.com" {
type master;
file "pz/bigbrie.com";
};
zone "133.212.207.in-addr.arpa" {
type master;
file "pz/207.212.133";
};
zone "1.168.192.in-addr.arpa" {
notify no;
type master;
file "pz/192.168.1";
};
darkstar:# cat /var/named/pz/bigbrie.com
@ IN SOA bigbrie.com. root.bigbrie.com. (
1999021403 ; serial, todays date +
todays serial #
8H ; refresh, seconds
2H ; retry, seconds
1W ; expire, seconds
1D ) ; minimum, seconds
;
TXT "Big Brie of Brie Web Publishing"
NS ns1.bigbrie.com.
NS ns1.granitecanyon.com.
NS ns2.granitecanyon.com.
MX 10 darkstar.bigbrie.com. ; Primary Mail
Exchanger
localhost A 127.0.0.1
bigbrie.com. A 207.212.133.10
MX 10 darkstar
ns1 A 207.212.133.10
MX 10 darkstar
www A 207.212.133.10
MX 10 darkstar
ftp A 207.212.133.10
MX 10 darkstar
mail A 207.212.133.10
MX 10 darkstar
darkstar A 207.212.133.10
MX 10 darkstar
darkstar:# cat /var/named/pz/207.212.133
@ IN SOA bigbrie.com. root.bigbrie.com. (
1999021401 ; Serial
28800 ; Refresh
7200 ; Retry
604800 ; Expire
86400) ; Minimum TTL
NS ns1.bigbrie.com.
NS ns1.granitecanyon.com.
NS ns2.granitecanyon.com.
;
; Servers
;
10 PTR bigbrie.com.
====================
Brian Lavender
Sacramento, CA
http://www.brie.com/brian/
"If a train station is where the train stops,
what is a workstation?" -- Phil Adamson
------------------------------
From: Jianmang Li <[EMAIL PROTECTED]>
Subject: Re: Cable modem
Date: Tue, 16 Feb 1999 02:48:51 +0100
Reply-To: [EMAIL PROTECTED]
ftp://ftp.suse.com/suse_update/S.u.S.E.-5.3/n1/dhclient.rpm
Wadels wrote:
> Some distributions are still libc5 based instead of what all the new
> programs need to install, glibc2 (compile-time incl.). Caldera 1.3 is one
> such dist. I don't know about your SuSE. If you have glibc2, you can install
> dhcpcd (DHCP client daemon) to do the job. See www.linuxapps.com to find the
> download page. If your Linux is not glibc2 based, you'll prob. have to
> upgrade, unless your cable modem ISP will let you use static IP. Good luck.
>
> Frederic Lemoine wrote in message <7a1434$p0o$[EMAIL PROTECTED]>...
> >Hello,
> >
> >I'd like to connect to Internet through a cable modem (LANcity) under SuSe
> >5.3
> >
> >Could anyone explain me what I should do ? As I'm a beginner I would very
> >much appreciate a comprehensive answer.
> >
> >In my SuSe manual I don't find anything about DHCP client. Am I blind or is
> >this technique not used in Linux, or does it have another name ?
> >
> >Thanks for your answer.
> >
> >Fred.
> >
> >
------------------------------
From: Jianmang Li <[EMAIL PROTECTED]>
Subject: Re: telnet: Was my system hacked?
Date: Tue, 16 Feb 1999 02:44:10 +0100
Reply-To: [EMAIL PROTECTED]
It looks familiar. I remember the couse of the problem in my case is that I change
the IP number of one Linux box from 192.168.1.2 to 192.168.2.2. The other box I
only did it partly. If you did changed you IP number somehow then grep the old IP
number in /etc directory and change them all to new number.
GenaBlu wrote:
> Good morning!
>
> I've been connecting to my Linux boxes using Windows' telnet for the longest
> time. Then, a couple of days ago, it stopped working. Just like that. I was
> logged on to my Linux box, then closed the connection for a few minutes, then
> tried again and it didn't work. Here are the symptoms:
>
> 1. I can connect to the server (I can see it using netstat), the "Red Hat Linux
> Kernel 2.0.35 on an i586" screen appears, but I get no login prompt.
>
> 2. My servers and workstation are in the same LAN, and share consecutive IP
> addresses and gateway.
>
> 3. My DNS is provided by my DSL vendor for now, but that's bound to change; I'm
> using canonical IP addresses to connect (x.y.z.w) so I don't think I have
> reverse-lookup problems.
>
> 4. I can't connect from Linux box to Linux box using telnet either. Now, the
> funny thing is, people telnetting from outside the LAN can telnet just fine.
>
> I shut the r* services off (yeah, I know) already. FTP, Samba, httpd, etc.
> work just fine. It's only the telnetd that seems to be acting up.
>
> I've been working my way down the CERT advisories and so far I haven't found
> anything strange in my system; I'm getting nervously ready to re-install parts
> or all of Linux if I can find that the systems were compromised, but I'd
> appreciate if someone knows what might be wrong.
>
> Please help! I try managing all of these machines from a couple of telnet
> sessions so I don't have to physically switch among them.
>
> Thanks for your help!
>
> G
------------------------------
From: Nightmare <[EMAIL PROTECTED]>
Subject: IP masquerading and socket timeouts
Date: Tue, 16 Feb 1999 01:52:36 GMT
First off, I'm using the Slackware 3.5 release with the kernel updated to
2.0.35. I'm using a Win95B machine and a Win98 machine as clients. The
Linux box is my gateway to the internet via PPP and IP masquerading (using
ipfwadm, ipautofw, and diald). Everything works great except for one thing.
If I perform an FTP transfer (on one of my clients) on a file that takes more
than a certain amount of time to complete (looks like about 15-20 mins), what
it boils down to is that something is shutting down the FTP control port
(port 21) during the transfer so that my clients can't notify the server (or
the server notify the clients, not sure which) that they received the file
okay. (In other words, WS_FTP says something like "Blocking call canceled".)
How can I change or remove this timeout? Or is it a bug that I just have to
live with?
If you need more information, please tell me which file(s) to post.
Thanks,
Bill
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: [EMAIL PROTECTED]
Subject: QMail questions
Date: Tue, 16 Feb 1999 01:48:53 GMT
Somehow or another I'm still nominally responsible
for operating this Linux box. This in spite of my
continued status as "bumbling newbie." =) Anyway...
We swapped Sendmail for qmail a while back. Something
to do with hackers, spammers, and etc. And I never
could get the alias bit of sendmail working properly
with the newer config files. (I initially followed
the instructions on the now defunct and non-maintained
"virtual-web" mini-HOWTO, with domainalias files and
Cw records and etc.)
So we tossed in qmail, which proved to be secure
and usable. However, we've never gotten .forward
files to work (even while using the proc+df rc file).
I noticed that dot-foward appears to be an executable
of some sort; where would I find it?
Also, for some reason 'root' has never gotten mail since
qmail was installed. I'm assuming there's probably some
alias lurking somewhere; any thoughts as to where I should
look? Many thanks in advance... I'm clueless on a command
line! (I'm a Mac user who's only CL experience was using
ProDOS on an Apple IIgs...)
=================================================
R. Christopher Harshman: [EMAIL PROTECTED]
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: "John Hardin" <[EMAIL PROTECTED]>
Subject: Re: Fetchmail/procmail question
Date: Mon, 15 Feb 1999 16:50:33 -0800
Juergen Fiedler wrote in message <7a5om9$j80$[EMAIL PROTECTED]>...
>and my .procmailrc looks like that:
>>-------SNIP-------<
>:0:
>* ^To:*ppp
>/usr/home/juergen/mail/Linux-PPP
>
>:0:
>* ^To:*kde*
>/usr/home/juergen/mail/KDE
>>-------SNIP-------<
>
>But even if the 'To' lines contain 'ppp' or 'kde', the mails
>aren't moved to the appropriate folders. The mail folders exist -
>at the moment, I'm copying my mail there manually.
>Could someone please tell me what I'm doing wrong?
You're confusing syntaxes here. Procmail uses Regular Expressions, which
have a different syntax than the filename wildcards used by the shell.
Take a look at "man procmailex" for examples, or the perl regular
expression manual page, or "man egrep".
To fix your examples, they should be:
:0:
* ^To:.*ppp
/usr/home/juergen/mail/Linux-PPP
:0:
* ^To:.*kde.*
/usr/home/juergen/mail/KDE
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
=======================================================================
If you spend any time administering Windows NT, you're far too
familiar with the Blue Screen of Death (BSOD) ...
- "MSDN Flash" email newsletter, 2/9/1999
=======================================================================
98 days until Star Wars episode I
------------------------------
From: "Dane Maxwell" <[EMAIL PROTECTED]>
Subject: How do i get linux onto a 486 box eh?!!?!?!?!
Date: Mon, 15 Feb 1999 17:58:26 -0800
I want to set up a network in my room of 3 computers, i no nothing about
networking (yet). i have one main host computer, it has windows98 pent ii
266 so i should have no trouble setting this as the host computer... now,
the biggie, how do i setup slack3.5 on a 486 when i dont have a cdrom or
anything on it?
Thanx,
Another guy
------------------------------
From: "John Hardin" <[EMAIL PROTECTED]>
Subject: Re: linux & VPN
Date: Mon, 15 Feb 1999 16:59:27 -0800
[EMAIL PROTECTED] wrote in message
<[EMAIL PROTECTED]>...
>There's a VPN mini-HOWTO that creates a VPN. It does so by using ssh
>(the secure shell) and pppd.
>
>ssh can run remote commands while on-the-fly encrypting/decrypting the
>traffic between your computer and the remote one. The VPN involves
>picking pppd as the remote command to run. Then running a local pppd
>against it-- the normal way to get a point-to-point interface between
>2 computers ("points"). The entire subsequent traffic over this
>interface therefore runs through the ssh encryption/decryption
>process, conforming this scheme to the definition of a VPN. The
>downside is it does multiple tunneling-- packets inside packets inside
>packets-- which imposes a performance cost.
>
>[EMAIL PROTECTED] wrote:
>
>>Looking at options for building a VPN. With MS I can use NT, Proxy
>>Server and PPTP. What options do I have if I go the Linux route.
ppp-over-ssh imposes no more of a performance penalty than ppp-over-GRE,
which is what PPTP is. In fact, I wouldn't be at all surprised if
ppp-over-ssh performs a lot better than M$ PPTP - which in my experience is
pretty poor - does. Note, however, that there are licensing fees involved
with using ssh in a commercial setting.
There is the Linux PPTP project, which has a working tunnel implementation
and is just now getting MS-compatible encrypting and compressing pppd
patches. http://www.pdos.lcs.mit.edu/~cananian/Projects/PPTP/
There is also the Linux FreeS/WAN implementation of IPSEC and ISAKMP, if
you're not scared by beta-level software. http://www.xs4all.nl/~freeswan/
--
John Hardin KA7OHZ [EMAIL PROTECTED]
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
=======================================================================
If you spend any time administering Windows NT, you're far too
familiar with the Blue Screen of Death (BSOD) ...
- "MSDN Flash" email newsletter, 2/9/1999
=======================================================================
98 days until Star Wars episode I
------------------------------
From: [EMAIL PROTECTED] (L J Bayuk)
Subject: Re: PCNet Driver
Date: 16 Feb 1999 02:02:01 GMT
[EMAIL PROTECTED] wrote:
>I'm looking for a driver for the Network Interface on my PC Server 325.
>I've heard that the pcnet32.c driver will work, but don't know where to
>locate it.
>Any help would be greatly appreciated.
>
The pcnet32 driver is included with the standard kernel (2.0.35 at least).
It works with AMD PCNet32 PCI cards like the AT-2450.
Rebuild your kernel, or load it as a module.
------------------------------
From: [EMAIL PROTECTED] (L J Bayuk)
Subject: Re: How do i get linux onto a 486 box eh?!!?!?!?!
Date: 16 Feb 1999 02:05:44 GMT
[EMAIL PROTECTED] wrote:
>I want to set up a network in my room of 3 computers, i no nothing about
>networking (yet). i have one main host computer, it has windows98 pent ii
>266 so i should have no trouble setting this as the host computer... now,
>the biggie, how do i setup slack3.5 on a 486 when i dont have a cdrom or
>anything on it?
>
It can be done in several ways. If you have another Linux system
on the net with a CD-ROM, you can install over Slackware with NFS.
Another way is to use floppies to install the A and N series,
enough to bring up networking, then use FTP to transfer the rest.
(I realize this is sketchy, but you did say you want to learn
about networking, right? Get through this, and you'll be an expert.)
------------------------------
From: Yan Seiner <[EMAIL PROTECTED]>
Subject: Re: VNC - Anybody had any luck with this?
Date: Mon, 15 Feb 1999 16:33:15 -0500
Reply-To: [EMAIL PROTECTED]
A lot of these problems are covered in the ORL VNC faq. check there for
your specific problem. Which file/dir does not exist? What error are
you getting? Come on, we're good, but no psychic.
Yan
Jacques Engelbrecht wrote:
>
> I'm running Slackware 3.6.
> I'm trying to get VNC running, no luck..... keep getting coplaints about
> file or directory not existing.
>
> Regards
> Jacques
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************