Linux-Networking Digest #677, Volume #10         Tue, 30 Mar 99 13:13:35 EST

Contents:
  Re: Linux box on two networks ("Eugene")
  NT provider - new to Linux ("Mike Kokinda")
  IBM EtherJet 10/100 is not running !!!!!!! (Zlatko Baumberger)
  Re: Good IP masquerading web site??? (Kevin Martin)
  Briding in 2.2.x - br_tx_frame() not called (Brian McCauley)
  Re: Help me spend $2,000 on a new Linux-based computer (Shimpei Yamashita)
  Re: Can Squid Do This? ("Eugene")
  Re: IP Masquerading abilities? (Tobias Reckhard)
  modem/ppp setup problem (tcgetattr I/O error ? ) ([EMAIL PROTECTED])
  Problem with Qmail - Fetchmail (Alexander Haeckel)
  Re: PPP connections problem with RedHat 5.2 ([EMAIL PROTECTED])
  Re: IPMASQ vs SOCKS ("Curt")
  Re: /etc/hosts.deny syntax differs from man pages ? ("Curt")
  Help: my computer has no name (Sim)
  Re: modem/ppp setup problem (tcgetattr I/O error ? ) (Clifford Kite)
  linux and NT ([EMAIL PROTECTED])

----------------------------------------------------------------------------

From: "Eugene" <[EMAIL PROTECTED]>
Subject: Re: Linux box on two networks
Date: Mon, 29 Mar 1999 19:19:01 GMT

I heard something about IP encapsulation and from what I understand it's
supposed to solve your problem. I don't know how it works and I don't know
of anyone who uses it. I remember there was a brief description of it in the
kernel source.

hope that helps
good luck

--
"Ein Folk, ein Reich, ein Fuhrer" - Adolf Hitler
"One World, one Web, one Program" - Microsoft's slogan



Mark Roberts <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> I have a removeable hard drive and want to configure Linux on this drive
> so I can operate it on two machines. Fortunately these machines have
> fairly similar hardware and the same type of network card.
>
> I'd like suggestions on how to configure networking so I get this drive
> to operate on two different IP networks ? I know the fixed IP address to
> use on both networks.
>
> Ideas I've thought of are:
> use of DHCP - can do this at home but not at work [no DHCP server].
> aliasing the Ethernet connection. eth0:0 and eth0:1 ??
>
> Anyone offer any advice on the best way of doing this, preferably if
> you've done it before. If it is a case of RTFM please advise on the
> correct FM to read!
>
> Regards
> Mark Roberts



------------------------------

From: "Mike Kokinda" <[EMAIL PROTECTED]>
Subject: NT provider - new to Linux
Date: Tue, 30 Mar 1999 09:59:13 -0500
Reply-To: "Mike Kokinda" <[EMAIL PROTECTED]>

I am an NT webhost just starting to add Linux servers to our network..
Looking for opinions on whose version to run.

Michael Kokinda
[EMAIL PROTECTED]



------------------------------

From: Zlatko Baumberger <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.portable
Subject: IBM EtherJet 10/100 is not running !!!!!!!
Date: Tue, 30 Mar 1999 16:48:29 +0200

Hi,

I have an IBM Thinkpad 770X running SuSE Linux 6.0 everything works 
only the Ethernet-Card is not working.

It is an IBM EtherJet 10/100 CardBus.

When cardmgr is running and i insert the card, the system hangs
and after removing the card everything works fine again
then in the /var/log/messages i have hundreds of similar lines like:

Mar 30 16:48:37 mars kernel:   image 206035: 0x000000-0xffffffff,
signature PCIR
Mar 30 16:48:37 mars kernel:   image 206035: 0x000000-0xffffffff,
signature PCIR
Mar 30 16:48:37 mars kernel:   image 206035: 0x000000-0xffffffff,
signature PCIR
Mar 30 16:48:37 mars kernel:   image 206035: 0x000000-0xffffffff,
signature PCIR
Mar 30 16:48:37 mars kernel:   image 206035: 0x000000-0xffffffff,
signature PCIR
...

I have no problems inserting a Adaptec SlimSCSI 1460C. Now i am not
shure
wat is causing the problem, because a normal pcmcia-card is recognised
correctly.


Thanks 

zlatko

------------------------------

From: [EMAIL PROTECTED] (Kevin Martin)
Subject: Re: Good IP masquerading web site???
Date: Tue, 30 Mar 1999 15:50:48 GMT

In article <7dqolr$[EMAIL PROTECTED]>, it says "Bill Garrett" 
<[EMAIL PROTECTED]> wrote:

>http://ipmasq.cjb.net

Seems they HTML'ed the full text of the HOW-TO...?  The problem I had with 
the HOW-TO is that it tries to cover all the bases, and so adds a lot of 
complexity that just doesn't apply to a typical home user (IMHO!).

I tried to write a more focused document that you might find useful:
        http://www.brasscannon.com/Linux/

It's focused on two topics that have taken up a lot of space here:  ppp 
dial-on-demand and IP masquerade.  I summarized a lot of posts, stripped 
them down to the essentials and aimed them at the home user who has a 
working Linux setup.  (Or as the cjb.net page describes it, "a guy who wants 
to share a phone line with his wife." :-))  It doesn't replace the complete 
HOW-TO; it wasn't meant to.

Comments welcomed.

------------------------------

From: Brian McCauley <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.development.system
Subject: Briding in 2.2.x - br_tx_frame() not called
Date: 30 Mar 1999 12:59:50 +0100

It would appear that br_tx_frame() is never called in 2.2.x.#

This has the effect that packets transmitted from higher protocol
levels are transmitted without consideration being given to bridging.

In 2.0.x br_tx_frame() was called in do_dev_xmit_queue() but in 2.2.x
do_dev_xmit_queue() does not exist.

The obvious thing to do is to simply insert the chunk of code that was
in do_dev_xmit_queue() into dev_xmit_queue().

Can anyone who understands this stuff better than I please comment on
this?

--- linux-2.2.5/net/core/dev.c.orig     Tue Mar 30 12:49:38 1999
+++ linux-2.2.5/net/core/dev.c  Tue Mar 30 12:50:17 1999
@@ -578,6 +578,19 @@
        struct device *dev = skb->dev;
        struct Qdisc  *q;
 
+       /*
+        *      If we are bridging and this is directly generated output
+        *      pass the frame via the bridge.
+        */
+
+#ifdef CONFIG_BRIDGE
+       if(skb->pkt_bridged!=IS_BRIDGED && br_stats.flags & BR_UP)
+       {
+               if(br_tx_frame(skb))
+                       return 0;
+       }
+#endif
+
 #ifdef CONFIG_NET_PROFILE
        start_bh_atomic();
        NET_PROFILE_ENTER(dev_queue_xmit);


-- 
     \\   ( )  No male bovine  | Email: [EMAIL PROTECTED]
  .  _\\__[oo   faeces from    | Phones: +44 121 471 3789 (home)
 .__/  \\ /\@  /~)  /~[   /\/[ |   +44 121 627 2173 (voice) 2175 (fax)
 .  l___\\    /~~) /~~[  /   [ | PGP-fp: D7 03 2A 4B D8 3A 05 37...
  # ll  l\\  ~~~~ ~   ~ ~    ~ | http://www.wcl.bham.ac.uk/~bam/
 ###LL  LL\\ (Brian McCauley)  |

------------------------------

From: Shimpei Yamashita <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: Help me spend $2,000 on a new Linux-based computer
Date: Mon, 29 Mar 1999 23:00:01 +0100

David Fox <d s f o x @ c o g s c i . u c s d . e d u> writes:
>Jet <[EMAIL PROTECTED]> writes:
>
>> Am I the only one who doesn't like big monitors? I don't like
>> anything bigger than 15".
>
>Quite possibly.

I know one person who doesn't like big monitors because she
gets neck strains looking up and down the screen. Everybody else I've
bothered to survey favors big monitors--bigger than 15", in any case;
very large monitors (> 19") can take up enough desk space to be a
nuisance, and it can be difficult to place a 21" monitor such that you
don't feel lost in all that space.

-- 
Shimpei Yamashita               <http://www.submm.caltech.edu/%7Eshimpei/>

------------------------------

From: "Eugene" <[EMAIL PROTECTED]>
Subject: Re: Can Squid Do This?
Date: Mon, 29 Mar 1999 19:25:50 GMT

as for the load part, welcome to the Linux world! Here we have a thing
called  *scalability*
I don't exactly understand the firewall part though. If you want the users
to access the private network you have to put the dial-in server behind the
firewall. If you want them to also access the internet, they have to go
through the firewall. I'm not sure how squid fits into this picture. Unless
you are planning to replace your existing firewall with squid???

--
"Ein Folk, ein Reich, ein Fuhrer" - Adolf Hitler
"One World, one Web, one Program" - Microsoft's slogan



Rick Gocher <[EMAIL PROTECTED]> wrote in message
news:e7NL2.93$[EMAIL PROTECTED]...
> Hello All,
>
> I would like to setup a proxy server which would allow our dial in users
to
> access services on the Net and was recommended to use Squid. I'm just
> not sure if it could handle the load.  Initially this could be several
> hundred
> connections but has the possibility of going much higher.
>
> Does anyone have any suggestions regarding the type of solution that
> might fit best?  Also, we have a firewall and I'm not sure where I should
> put
> the dialin users as they will need to access web data behind our firewall
> but also need to surf.
>
> Thanks for any help,
>
> Rick
>
>



------------------------------

From: [EMAIL PROTECTED] (Tobias Reckhard)
Subject: Re: IP Masquerading abilities?
Date: Tue, 30 Mar 1999 10:31:47 GMT

On Mon, 15 Mar 1999 20:01:55 -0800, [EMAIL PROTECTED] (David Ashley)
wrote:

>My lan goes through a router that masquerades to the internet.
>
>Can I set up the router's ipfwadm so that it will remap and forward a
>packet originating from inside the lan back to the lan?
>
>Normally
>LAN -> router (remap) -> outside world new IP address and port
>
>I want it to
>LAN (using new IP address and port) -> router -> back to lan, as if
>  packet originated from outside.

Sure that's possible. The problem I see is that you need to tell your
LAN hosts to send traffic that's local to the LAN to the router. As
soon as it gets there and you let it in, which you might not yet, if
you've got IP spoofing attempts blocked, the router should normally
try to pass it onto the LAN.

Tobias

------------------------------

From: [EMAIL PROTECTED]
Subject: modem/ppp setup problem (tcgetattr I/O error ? )
Date: Mon, 29 Mar 1999 19:19:32 GMT



I am Having some problems setting up a new modem
I have described the problem in detail below

I would greatly appreciate any help in configuring the modem
Thanks -Amit

Redhat 5.0
Linux version 2.0.32 ([EMAIL PROTECTED])
US Robotics 56K v.90 internal modem Model 5685 (NOT a winmodem)
Shows up on COM2 under win95
The Only cards I have are the modem and a SB16 Sound card

Following shows up among startup messagess
...
Serial driver version 4.13 with no serial options enabled
tty00 at 0x03f8 (irq = 4) is a 16550A
tty01 at 0x02f8 (irq = 3) is a 16550A
...

minicom does not work with ttyS0, ttyS1, cua0 OR cua1
setserial -ga /dev/ttyS* OR setserial -ga /dev/cua* gives the following

/dev/cua0, Line 0, UART: 16550A, Port: 0x03f8, IRQ: 4
   Baud_base: 115200, close_delay: 50, divisor: 0
   closing_wait: 3000, closing_wait2: infinte
   Flags: spd_normal skip_test

/dev/cua1, Line 1, UART: 16550A, Port: 0x02f8, IRQ: 3
   Baud_base: 115200, close_delay: 50, divisor: 0
   closing_wait: 3000, closing_wait2: infinte
   Flags: spd_vhi skip_test

/dev/cua2, Line 2, UART: unknown, Port: 0x03e8, IRQ: 4
   Baud_base: 115200, close_delay: 50, divisor: 0
   closing_wait: 3000, closing_wait2: infinte
   Flags: spd_normal skip_test

/dev/cua3, Line 3, UART: unknown, Port: 0x02e8, IRQ: 3
   Baud_base: 115200, close_delay: 50, divisor: 0
   closing_wait: 3000, closing_wait2: infinte
   Flags: spd_normal



Running pppd with /dev/ttyS1 causes the following messages in the log
Trying to connect using kppp always gives modem busy
...
kernel: PPP: version 2.2.0 (dynamic channel allocation)
kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
kernel: PPP line discipline registered.
kernel: registered device ppp0
pppd[355]: pppd 2.3.3 started by root, uid 0
pppd[355]: tcgetattr: Input/output error(5)
pppd[355]: Exit.
kernel: PPP: ppp line discipline successfully unregistered
...


Running pppd with /dev/ttyS0 causes the following messages in the log
Trying to connect using kppp always says  modem ready then gives a
message modem not responding.

kernel: PPP: version 2.2.0 (dynamic channel allocation)
kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
kernel: PPP line discipline registered.
kernel: registered device ppp0
pppd[387]: pppd 2.3.3 started by root, uid 0
chat[388]: abort on (BUSY)
chat[388]: send (ATDT3522288^M)
chat[388]: expect (CONNECT)
chat[388]: alarm
chat[388]: Failed
pppd[387]: Connect script failed
pppd[387]: Exit.



I am using the following connect script

#!/usr/bin/perl
# Script to establish connection from a Linux system to
# worldnet via PPP.
#
# Look at WORLDNET\PROGRAM\REG.INI (WORLDNET\DIALER\REG.INI
# and ATT.SR under WorldNet version 1) to get the following
# settings.
#
$DOMAIN="worldnet.att.net";
$SEARCH=$DOMAIN;
$NAMESERVER1="204.127.160.1";
$NAMESERVER2="204.127.129.1";
$NAMESERVER3="204.127.129.2";
$NAME="myname\@worldnet.att.net";
$PHONE="3522288";
$MODEM="/dev/ttyS1"; #originally/dev/modem

$resolv = '>/etc/resolv.conf';

open(CONF,$resolv)|| die "Cannot open file: $resolv.\n  $! \n";

print CONF "\#resolv.conf - created by ".$ARGV."\n";
print CONF "domain ".$DOMAIN."\n";
print CONF "search ".$SEARCH."\n";
print CONF "nameserver ".$NAMESERVER1."\n";
print CONF "nameserver ".$NAMESERVER2."\n";
print CONF "nameserver ".$NAMESERVER3."\n";

$command="/usr/sbin/pppd name \"".$NAME."\"".
    " -d connect \'/usr/sbin/chat -t 45 -v ABORT BUSY \"\" ATDT".
    $PHONE." CONNECT \"\"\' ".$MODEM.
    " 57600 noipdefault modem defaultroute crtscts";
$ENV{'PATH'} = ''; # Make $ENV{'PATH'} untainted
                 system($command);

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: Alexander Haeckel <[EMAIL PROTECTED]>
Subject: Problem with Qmail - Fetchmail
Date: Mon, 29 Mar 1999 19:37:12 +0200

Hello,

my problem is the following:

i've installed installed Qmail on a Debian 2.1 System and it works quite
well for local deliveries. I can't do remote deliveries using my local
email-address, because our  universities mailserver is checking outgoing
mail for a valid sender-address.
So I tried to solve the problem by setting up the $MAILHOST and
$MAILUSER variables. The result is that I can do remote deliveries, but
when I want to get my mail from the universities mailserver fetchmail
delivers the mail to port 25 and Qmail forwards all my mail back to the
universities mailserver :-(. I don't want to manage all my mail traffic
by setting and unsetting the $MAILHOST and $MAILUSER variables, because
I'm expecting some problems with syncronizing incoming and outgoing
traffic after doing this.

How can I solve the problem?

Thank you very much,
Alexander


------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.setup
Subject: Re: PPP connections problem with RedHat 5.2
Date: Tue, 30 Mar 1999 13:18:59 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (Jon-o Addleman) wrote:
> Once upon a  Sat, 27 Mar 1999 11:33:19 +0800, "Jimmy Lee"
> <[EMAIL PROTECTED]> wrote:
>
> >Hi, all,
> >
> >I need some help for the above issue.
> >
> >I have a Hayes 56k modem (dual mode).  And I want to use it for my linux
> >computer on COM1.  I can make the connections to the ISP by using the
> >minicom.  After I leave the minicom without reset, the connections drop
> >after a few seconds.  I don't know why this happened.
>

I found that the reason why it was hanging up on my system was the timeout
value wasn't set.  So my computer when it was connected to my ISP, was timing
out right away instead of waiting long enough for the scripts to run.  Once I
put 15 sec. in the time out value I was able to dial up to my ISP with no
problem.

-Eric
[EMAIL PROTECTED]

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: "Curt" <[EMAIL PROTECTED]>
Subject: Re: IPMASQ vs SOCKS
Date: Tue, 30 Mar 1999 12:15:13 -0500

IP  masq works at the IP level  (simplified NAT)
Socks works at the transport level  (proxy server)

IP masq is built in to linux kernel 2.0
Socks is a separate daemon

IMO, it is possible to build a more secure firewall with socks.   However,
unless your
site has a dedicated connection 24/7, it is not worth the extra trouble.
For my home network I use IP masq.   For the site at work I use socks.

IP masq is simpler to install and get working.


David Kennedy wrote in message <[EMAIL PROTECTED]>...
>
>
>Could someone please give me a quick rundown of the pros and cons to
>using masquerading vs using a proxy (TIS or socks for example)
>
>
>I would like to have ppp0 a dial up and eth0 my internal network.
>
>Thanks.



------------------------------

From: "Curt" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: /etc/hosts.deny syntax differs from man pages ?
Date: Tue, 30 Mar 1999 12:27:54 -0500

Here is an alternative if you don't need to know when someone right away
that someone
is trying to break in.

I cron the following script once a day, from /etc/cron.daily:  (you could
run it as often as you like)

#!/bin/sh
grep fail   /var/log/secure >  /tmp/secure
grep refuse /var/log/secure >> /tmp/secure
grep warn   /var/log/secure >> /tmp/secure
if [ -s /tmp/secure ]
then
   cat /tmp/secure | elm -s 'secure' root@domain >> /dev/null
fi


Pierre Bodart wrote in message <[EMAIL PROTECTED]>...
>Hi,
>
>I'm using RH 5.2 kernel 2.0.34. I'm protecting a little bit also my box
>by running tcpd from inetd for most of the services (Telnet, FTP, ...).
>With tcpd you can allow/deny access to services with the configuration
>files hosts.allow and hosts.deny.
>According the man pages, you can also ask tcpd to run  a command when a
>rule is valid. E.g. in hosts.deny you can have an entry like :
>
>in.telnetd: ALL: (/usr/bin/finger -l @%h | /bin/mail -s %d-%h
>[EMAIL PROTECTED])&
>
>which will for each telnet attempt (who will be refused by this rule)
>run the finger command against the calling host and mail the result to
>[EMAIL PROTECTED] The command is launched in the background to not hung
>the service.
>
>By the way, when attempting to telnet to my box, I'm well 'denied', but
>the log file show me the following error and I'm getting of course no
>mail under root :
>
>in.telnetd: connect from xx.xx.xx.xx
>in.telnetd: error: /etc/hosts.deny, line 9: bad option name:
>"(/usr/bin/finger"
>in.telnetd: refused connect from xx.xx.xx.xx
>
>I've tried several other syntax or commands, no way.
>It seems that the command is passed to telnet as an argument, which is
>of course a bad option .... but it's not what is expected or explained
>in the man page.
>
>Does anyone have an idea ?
>
>Cheers,
>
>Pierre



------------------------------

From: [EMAIL PROTECTED] (Sim)
Subject: Help: my computer has no name
Date: Mon, 29 Mar 1999 19:30:55 GMT

I'm trying to set up qmail, but the first problem I have (I'm sure
many more are to come) is that the compile breakdowns due to a lack of
a hostname.  I'm using  RH5.2 and have two ethernet cards, one
connected via a cable modem and using DHCP, the other static and
connected to my internal network (and called P350.customer.chello.be)

Although hostname returns P350,
hostname -f gives hostname: Unknown host
and I guess this is what is causing qmail to choke.

Any help appreciated

Simon

------------------------------

From: [EMAIL PROTECTED] (Clifford Kite)
Crossposted-To: comp.os.linux.setup,comp.protocols.ppp
Subject: Re: modem/ppp setup problem (tcgetattr I/O error ? )
Date: 29 Mar 1999 13:25:07 -0600

[EMAIL PROTECTED] wrote:


: Running pppd with /dev/ttyS1 causes the following messages in the log
: Trying to connect using kppp always gives modem busy
: ....
: kernel: PPP: version 2.2.0 (dynamic channel allocation)
: kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
: kernel: PPP line discipline registered.
: kernel: registered device ppp0
: pppd[355]: pppd 2.3.3 started by root, uid 0
: pppd[355]: tcgetattr: Input/output error(5)

The tcgetattr error almost certainly means that the IRQ is being used by
another process.  Check with "cat /proc/interrupts" to see which device
uses IRQ 3.


--
Clifford Kite <[EMAIL PROTECTED]>                       Not a guru. (tm)
/* The signal-to-noise ratio is too low in many [news] groups to make
 * them good candidates for archiving.
 *    --- Mike Moraes, Answers to FAQs about Usenet */

------------------------------

From: [EMAIL PROTECTED]
Subject: linux and NT
Date: Tue, 30 Mar 1999 13:51:08 GMT

hi,

I am a french student and I work in a company for a trainee. I would like to
convince them that Linux is a good solution. They have different servers:
Unix and NT. I would like to know if it is possible to connect them with
Linux. Moreover, I would like to know if you can launch an application by the
distance- like under Unix- or if you need to import it before executing it.
Thanks for your help.

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to