Linux-Networking Digest #730, Volume #10          Sat, 3 Apr 99 11:13:30 EST

Contents:
  Re: cant get into linux server - whats ipc$ ("Curt")
  Why Windows requires special netmask??  (Vincent)
  Re: Help with Linux as Client on Sygate... (contains setup information to assist) 
("pg")
  Re: Help Please: Linux 2.2.5 and BT Speedway ISDN (honestly new question) (Nick Kew)
  Re: Linux as NT server ("William R. Mattil")
  Re: How do I monitor my modem ("Curt")
  hostnames with _ in DNS ? (PETERS Maschinenfabrik GmbH)
  Re: IBM auto 16/4 token-ring isa ("Hal Coley")
  $6 for $42000 in four weeks ("Goodwomen")
  Re: Multi-ethernet config at boot strange problem... ("William R. Mattil")
  help with ipportfw and ipfwadm (Bob Holcomb)
  Re: Don't wanna run 'diald', so what else??? (Andre van Dijk)
  Re: Advice on Linux as internet gateway (AfterBurn)
  Re: How to install ipchains on RH5.2? (AfterBurn)
  Re: ADSL ethernet with Dynamic IP ([EMAIL PROTECTED])
  Re: DHCP and IP-Masquerade (Yue Huang)
  getting my innd server fed, through ppp (Kevin & Chelby Geiss)

----------------------------------------------------------------------------

From: "Curt" <[EMAIL PROTECTED]>
Subject: Re: cant get into linux server - whats ipc$
Date: Sat, 3 Apr 1999 07:20:51 -0500

make sure /etc/hosts.allow includes your local network.

Charlie Macintyre wrote in message
<7e2ocp$31i2$[EMAIL PROTECTED]>...
>I have jst got redhat running and have my win98 recognising the linux pc
but
>how do i get past into it over my lan. I cant seem to be able to creat a
>user that will allow logging on from my win machines? it also seems to be
>only working on netBeui.
>
>charlie
>
>



------------------------------

Date: Sat, 03 Apr 1999 04:29:18 -0800
From: Vincent <[EMAIL PROTECTED]>
Subject: Why Windows requires special netmask?? 

Reading the dhcpd manual, it states "some DHCP clients (e.g. Windows 95)
must be able to send packets with an IP destination address of
255.255.255.255".  Correct me if I'm wrong, but if there is 3 different
classes of networks which has its own netmask:

CLASS A - 255.0.0.0
CLASS B - 255.255.0.0
CLASS C - 255.255.255.0

Where does the require 255.255.255.255 come from.  Is this some sort of
Microsoft thing or what.  Any ideas??

Vincent

------------------------------

Reply-To: "pg" <[EMAIL PROTECTED]>
From: "pg" <[EMAIL PROTECTED]>
Subject: Re: Help with Linux as Client on Sygate... (contains setup information to 
assist)
Date: Sat, 03 Apr 1999 13:24:35 GMT

What I am suggesting is to configure the Linux box to use the same DNS
addresses as the Windows box uses.

As you have it set up now, the private address 192.168.x.x would have to
contain all of the DNS information about the entire Internet in order to get
the correct IP address back to the Linux box.

PG


Charles R. Thompson <[EMAIL PROTECTED]> wrote in message
news:ZghN2.18824$[EMAIL PROTECTED]...
> >Are you running a DNS on 192.168.0.1 ?  If not, then maybe you
> need to put
> >in the proper DNS info here.  Since you are using a cable
> modem,  try
> >putting the DNS values for your cable co ISP in place of
> 192.168.0.1
>
>>>>SNIP<<<<<



------------------------------

From: [EMAIL PROTECTED] (Nick Kew)
Crossposted-To: 
alt.os.linux.dial-up,comp.os.linux.help,comp.os.linux.questions,comp.os.linux.setup,uk.comp.os.linux
Subject: Re: Help Please: Linux 2.2.5 and BT Speedway ISDN (honestly new question)
Date: Sat, 3 Apr 1999 11:08:37 +0000

Ah, I missed the "2.2" in your post.  The box with my Speedway card in
is still running 2.0.36.  I looked at 2.2.1, saw it seemed to have lost
some of 2.0.36's ISDN support, and decided I haven't time to figure it
out just now.

-- 
Nick Kew

------------------------------

From: "William R. Mattil" <[EMAIL PROTECTED]>
Subject: Re: Linux as NT server
Date: Fri, 02 Apr 1999 21:17:44 -0600

Mogul 55 wrote:

> i want linux to act as an NT server would.  The clients are running Win 98.
> The big thing is i want the linux box to validate the users that are on the Win
> 98 PCs..
> Some one please help
>
> Thanks in advance
> [EMAIL PROTECTED]

The easy part will be samba ......... the far more difficult part to try and
duplicate will be the infamous "blue-screen-of-death".  This is as far as I can
tell a Micro$oft monopoly.


Regards
Bill

--
William R. Mattil       | Fred Astaire wasn't so great.
[EMAIL PROTECTED]  | Ginger had to do it all backwards
(972) 399-4106          | and... in high heels.




------------------------------

From: "Curt" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc
Subject: Re: How do I monitor my modem
Date: Sat, 3 Apr 1999 06:52:52 -0500

I'm sure some of this could be done with mrtg.   Probably all of it if
you're willing
to do some coding.

http://break.org/tommy/linux/mrtg/

Stephen Thomas wrote in message <3VeN2.248$[EMAIL PROTECTED]>...
>I am using diald to dial up a ppp account with my ISP. I would like to
>monitor the modem connection rate, time connected, bytes sent, bytes
>received, etc. Is there a utility to do this?
>
>Thanks,
>Steve
>
>



------------------------------

From: [EMAIL PROTECTED] (PETERS Maschinenfabrik GmbH)
Subject: hostnames with _ in DNS ?
Date: Sat, 3 Apr 1999 15:48:25 +0200

Hi!
I have the this problem:
I want to set up a DNS-server in Linux,
but I need to cover some hostnames
like abc_1, abc_2 etc which the DNS-
server doesn't accept (bind8).

Are there any possible solutions?

M. Pauly
PETERS Maschinenfabrik GmbH

[EMAIL PROTECTED]




------------------------------

From: "Hal Coley" <[EMAIL PROTECTED]>
Subject: Re: IBM auto 16/4 token-ring isa
Date: Sat, 3 Apr 1999 09:01:37 -0600

I am running Redhat 5.1 on 5 PCs at work with IBM 16/4 Auto ISA or 16/4
Turbo ISA cards with no problem.  The RedHat installation detects them and
sets them up fine.   There isn't a Linux version of Lanaid that I'm aware
of -- you can just boot a DOS disk and use your existing Lanaid to set ring
speed, IRQ, etc.  prior to the Linux installation.

[EMAIL PROTECTED] wrote in message <[EMAIL PROTECTED]>...
>I work on an all Ibm Campus running mostly Win95/98, I always wanted
>to install Linux on my computer at work and I did just that, our
>school is on an token-ring, with WinN, my question is it possible to
>get my new Linux OS on this network and must I us Lanaid and if so
>anybody know where I can find the Linux ver. of Lanaid I have been try
>for quite sometime to get this to work, my NT Admin. is against this
>happening and thinks it won't work can somebody Please Please point me
>in the right direction. Ohh.. i have read the mini Howto on this and I
>am running RedHat 5.2.
>
>Thx in advance.........



------------------------------

From: "Goodwomen" <[EMAIL PROTECTED]>
Crossposted-To: 
comp.os.linux.help,comp.os.linux.m68k,comp.os.linux.misc,comp.os.linux.portable,comp.os.linux.powerpc,comp.os.linux.questions,comp.os.linux.setup,comp.os.linux.x,comp.os.lynx
Subject: $6 for $42000 in four weeks
Date: Sat, 3 Apr 1999 17:47:37 +0400



THIS REALLY CAN MAKE YOU EASY MONEY!! IT WORKS!!! BUT YOU HAVE TO FOLLOW IT
TO A LETTER FOR IT TO WORK!!!!
A little while back, I was browsing through newsgroups, just like you are
now, and came across an article similar to this that said you could make
thousands of dollars within weeks with only an initial investment of $6.00!
So I thought," Yeah, right, this must be a scam", but like most of us, I was
curious, so I kept reading.

Anyway, it said that you send $1.00 to each of the 6 names and address
stated in the article. You then place your own name and address in the
bottom of the list at #6, and post the article in at least 200 newsgroups.
(There are thousands) No catch, that was it. So after thinking it over, and
talking to a few people first, I thought about trying it. I figured what
have I got to lose except 6 stamps and $6.00, right? Like most of us I was a
little skeptical and a little worried about the legal aspects of it all. So
I checked it out with the U.S. Post Office (1-800-725-2161) and they
confirmed that it is indeed legal! Then I invested the measly $6.00. Well
GUESS WHAT!!... within 7 days, I started getting money in the mail! I was
shocked! I figured it would end soon, but the money just kept coming in. In
my first week, I made about $25.00. By the end of the second week I had made
a total of over $1,000.00! In the third week I had over $10,000.00 and it's
still growing. This is now my fourth week and I have made a total of just
over $42,000.00 and it's still coming in rapidly. It's certainly worth
$6.00, and 6 stamps, I have spent more than that on the lottery!!

Let me tell you how this works and most importantly, why it works....also,
make sure you print a copy of this article NOW, so you can get the
information off of it as you need it. STEP 1: Get 6 separate pieces of paper
and write the following on each piece of paper "PLEASE PUT ME ON YOUR
MAILING LIST." Now get 6 US $1.00 bills and place ONE inside EACH of the 6
pieces of paper so the bill will not be seen through the envelope to prevent
thievery. Next, place one paper in each of the 6 envelopes and seal them.
You should now have 6 sealed envelopes, each with a piece of paper stating
the above phrase, your name and address, and a $1.00 bill. What you are
doing is creating a service by this. THIS IS ABSOLUTELY LEGAL! Mail the 6
envelopes to the following addresses:

#1) Grant
P.O.Box 703394
New Smyrna Beach, FL 32170 USA

#2) MIKE ELEFANT
502 N. FRANCES ST. 510E
MADISON WI 53703 USA

#3) Gerry
P.O. Box 854
Pomona, NJ 08240 USA

#4) Hope
112 E. Madison St.
Paulsboro, NJ 08066 USA

#5)Quishia
P.O. Box 174
Clarksboro, NJ 08020-0174 USA

#6) Alex
P.O. Box 1
Russia, Moscow 117630

STEP 2: Now take the #1 name off the list that you see above, move the other
names up (6 becomes 5, 5 becomes 4, etc...) and add YOUR Name as number 6 on
the list. STEP 3: Change anything you need to, but try to keep this article
as close to original as possible. Now, post your amended article to at least
200 newsgroups. (I think there are close to 24,000 groups) All you need is
200, but remember, the more you post, the more money you make! ---

DIRECTIONS-----HOW TO POST TO NEWSGROUPS------------ Step 1) You do not need
to re-type this entire letter to do your own posting. Simply put your cursor
at the beginning of this letter and drag your cursor to the bottom of this
document, and select 'copy' from the edit menu. This will copy the entire
letter into the computers memory. Step 2) Open a blank 'notepad' file and
place your cursor at the top of the blank page. From the 'edit' menu select
'paste'. This will paste a copy of the letter into notepad so that you can
add your name to the list. Step 3) Save your new notepad file as a .txt
file. If you want to do your postings in different sittings, you'll always
have this file to go back to. Step 4) Use Netscape or Internet explorer and
try searching for various newsgroups (on-line forums, message boards, chat
sites, discussions.) Step 5) Visit these message boards and post this
article as a new message by highlighting the text of this letter and
selecting paste from the edit menu. Fill in the Subject, this will be the
header that everyone sees as they scroll through the list of postings in a
particular group, click the post message button. You're done with your first
one!

Congratulations...THAT'S IT! All you have to do is jump to different
newsgroupes and post away, after you get the hang of it, it will take about
30 seconds for each newsgroup!
**REMEMBER, THE MORE NEWSGROUPS YOU POST IN, THE MORE MONEY YOU WILL MAKE!!
BUT YOU HAVE TO POST A MINIMUM OF 200** That's it! You will begin reciving
money from around the world within days! You may eventually wany to rent a
P.O.Box due to the large amount of mail you will receive. If you wish to
stay anonymous, you can invent a name to use, as long as the postman will
deliver it. **JUST MAKE SURE ALL THE ADDRESSES ARE CORRECT.**

Now the WHY part: Out of 200 postings, say I receive only 5 replies (a very
low example). So then I made $5.00 with my name at #6 on the letter. Now,
each of the 5 persons who just sent me $1.00 make the MINIMUM 200 postings,
each with my name at #5 and only 5 persons respond to each of the original
5, that is another $25.00 for me, now those 25 each make 200 MINIMUM posts
with my name at #4 and only 5 replies each, I will bring in an additional
$125.00! Now, those 125 persons turn around and post the MINIMUM 200 with my
name at #3 and only receive 5 replies each, I will make an additional
$626.00! OK, now here is the fun part, each of those 625 persons post a
MINIMUM 200 letters with my name at #2 and they each only receive 5 replies,
that just made me $3,125.00!!! Those 3,125 persons will all deliver this
message to 200 newsgroups with my name at #1 and if still 5 persons per 200
newsgroups react I will receive $15,625,00! With a original investment of
only $6.00! AMAZING! When your name is no longer on the list, you just take
the latest posting in the newsgroups, and send out another $6.00 to names on
the list, putting your name at number 6 again. And start posting again. The
thing to remember is, do you realize that thousands of people all over the
world are joining the internet and reading these articles everyday, JUST
LIKE YOU are now!! So can you afford $6.00 and see if it really works?? I
think so... People have said, "what if the plan is played out and no one
sends you the money? So what! What are the chances of that happening when
there are tons of new honest users and new honest people who are joining the
internet and newsgroups everyday and are willing to give it a try? Estimates
are at 20,000 to 50,000 new users, every day, with thousands of those
joining the actual internet. Remember, play FAIRLY and HONESTLY and this
will work.





------------------------------

From: "William R. Mattil" <[EMAIL PROTECTED]>
Subject: Re: Multi-ethernet config at boot strange problem...
Date: Fri, 02 Apr 1999 20:38:22 -0600

Sebastien wrote:

> Hi everyone !
>
> I've a problem i find really strange .... here's the description:
>
> I have a PC acting as a router with 3 ethernet interfaces,
> one is PCI and is eth0 (tulip.o driver)
> two are ISA and are eth1 and eth2 correctly assigned regarding their io/irq
> (ne.o driver for both)
>
> I'm using Linux redhat 5.2, with kernel 2.2.3, with all necessary packages
> for kernel 2.2.x
> I have the 3 correct files ifcfg-eth0, ifcfg-eth1 and ifcfg-eth2 in
> /etc/sysconfig/network-scripts/
> the drivers are compiled in modules and loaded using kmod feature.
>
> OK, now for the problem :
> When booting, the 3 cards are detected, but when i log on and do an
> ifconfig,
> it reports than eth0 is correctly configured with values of ifcfg-eth0,
> eth1 is configured with values of ifcfg-eth2   (aie :) )
> eth2 is not configured at all (aie aie :) ) and thus not displayed.
>
> So, what's wrong ?? i've spent 2 days 'hacking' the rc.*, tried to add some
> delay between detection/ifconfig and nothing worked ...
> Setting up the whole thing manually works fine, but for a router this is not
> really cute ...
>

If I understand this correctly, the value that you want for eth1 actually
become eth2 and so on. This is IIRC due to the nature of the modules loading
scheme and is dependent upon the io addresses of the cards in question
especially since they are using the same driver. To repeat, the lower IO
address card becomes eth1 and the next one becomes eth2. The simple fix (:^))
is to exchange the two connections to each card........ but if that is not
possible due to media differences then exchange the two cards IO addresses and
it should be fine.

Regards
Bill

--
William R. Mattil       | Fred Astaire wasn't so great.
[EMAIL PROTECTED]  | Ginger had to do it all backwards
(972) 399-4106          | and... in high heels.




------------------------------

Date: Sat, 03 Apr 1999 08:08:10 -0600
From: Bob Holcomb <[EMAIL PROTECTED]>
Subject: help with ipportfw and ipfwadm

I'm runing redhat 5.2.  I recompiled the kernel with the ipportfw
patch.  When I run ipportfw it says:

"ipfwadm: setsockopt failed: Protocol not available"

I don't know what this means, or how to fix it.

thanks,

Bob Holcomb
[EMAIL PROTECTED]


------------------------------

From: [EMAIL PROTECTED] (Andre van Dijk)
Crossposted-To: alt.os.linux,comp.os.linux.misc
Subject: Re: Don't wanna run 'diald', so what else???
Date: 3 Apr 1999 10:28:17 GMT
Reply-To: [EMAIL PROTECTED]

On Sat, 03 Apr 1999 04:48:58 GMT, David M. Cook wrote:
>On Thu, 01 Apr 1999 09:28:39 -0700, Jon Slater <[EMAIL PROTECTED]> wrote:
>
>>I don't like 'diald'.  It works fine.  But I want something a little
>>more interactive.
>
>Diald provides a way for anyone to interact with it via a named pipe.  I
>forget the name of pipe, something like /etc/daild/diald.something.  You can

You can set it in diald.conf

>echo stuff to that file to control the connection (if you set permissions on
>it correctly.)  

There's also a X frontend for that. Try dctrl

-- 
A. van Dijk                     Hmmm, I smell Bacon, Elvis is in the kitchen
mailto: [EMAIL PROTECTED]                   - Denis Leary
icq   : 4249631                   Linux: What you read is what you get.

------------------------------

From: [EMAIL PROTECTED] (AfterBurn)
Subject: Re: Advice on Linux as internet gateway
Date: Sat, 03 Apr 1999 13:26:27 GMT

On Sat, 20 Mar 1999 23:15:32 +0000, Steve Robertson <[EMAIL PROTECTED]>
muttered in [comp.os.linux.networking]:

->Richard Steiner wrote:
->
->> Here in comp.os.linux.networking, Dale Rose <[EMAIL PROTECTED]>
->> spake unto us, saying:
->>
->> >I will be switching to ADSL service here at the end of the month when it
->> >becomes available in my area.  I have several computers at home and I
->> >would like to network them and use a dedicated machine to provide
->> >internet access.  I will be networking four pentiums (running win95/98)
->> >and I would like to use a 486dx2-66 I have as the dedicated machine.
->> >
->> >Is it possible to configure Linux to act satisfactorily as an internet
->> >gateway on a 486?  (Or am I shooting myself in the foot?)
->>
->> That's exactly what I do here.  A pair of PPros (soon to be three) on
->> the inside of the firewall, and a 486DX4/100 using IP Masquerading as
->> the guardian against the Evil Forces Without.  :-)
->>
->> >Also, is a particular flavor of Linux better suited to this task than
->> >another?
->>
->> Probably not.  Although some mini distributions (Trinux is one example)
->> are sort of specialized for such use.  I just use Red Hat here.
->>
->> >Although I'm pretty competent working with tcp/ip networks on windows
->> >machines, I'm pretty inexperienced with Linux and Unix systems in
->> >general so the most user-friendly recommendations would be appreciated.
->> >:)
->>
->> If you don't really need a service running on the firewall box, make
->> sure you turn it off.  :-)
->>
->> >As far as hardware is concerned, is there anything I should avoid or be
->> >leary of?  I have been planning on setting up a 100mb UTP ethernet with
->> >generic NE2000 NICs and a simple hub.
->>
->> I have a 3Com 10BaseT hub here, the PPros all have Intel EtherExpress
->> Pro/100B cards, and the firewall has a pair of el-cheapo NE2000 clone
->> cards.  They work fine.
->>
->> >If there are any links or other sources of information you can point
->> >me to, I'd appreciate it.
->>
->> DejaNews.  :-)
->>
->>   http://www.dejanews.com/home_ps.shtml
->>
->> Perhaps also here:
->>
->>   http://sunsite.unc.edu/LDP/HOWTO/mini/ADSL.html
->>   http://www.tor.shaw.wave.ca/~ambrose/
->>
->> --
->>    -Rich Steiner  >>>--->  [EMAIL PROTECTED]  >>>---> Bloomington, MN
->>     OS/2 + Linux (Slackware+RedHat+SuSE) + FreeBSD + Solaris + BeOS +
->>     WinNT4 + Win95 + PC/GEOS + MacOS + Executor = PC Hobbyist Heaven!
->>          -- This tagline was discovered by an alchemist --
->
->Richard,
->What are using for the Firewall/Forwarding control; IPFWADM or IPChains? I'm
->really struggling with IPFWADM and would appreciate an editted version of
->your  IPFWADM statements -- if you don't mind.

Try upgrading to 2.2.x and use ipchains. Much easier to configure as ipfwadm.

-AB-
afterburn <at> crashdot <dot> com

    "I haven't lost my mind, it's backed up on disk somewhere!"

------------------------------

From: [EMAIL PROTECTED] (AfterBurn)
Subject: Re: How to install ipchains on RH5.2?
Date: Sat, 03 Apr 1999 13:26:32 GMT

Did you check the redhat site? support/updates? there is a complete guide to
upgrading to 2.2.x, and it includes all the files you HAVE to upgrade in rpm
format. (there is a lil more then just ipchains you need). Im running 2.2.5 with
forwarding/firewalling and it works GREAT.


Good luck.

-AB-

On Mon, 22 Mar 1999 16:15:28 +0100, "Eriksson"
<[EMAIL PROTECTED]> muttered in [comp.os.linux.networking]:

->I got kernel 2.2.3 for my Red Hat 5.2 box. And in order to use IP masq I
->need ipchains 1.3.8 according to the HOWTO
->
->I've read the howto and from what I could figure out there was no other way
->around the problem than installing ipchains-1.3.8
->
->But there were NO instructions HOW to install them!!!
->
->My question is..
->
->How do I install ipchains???
->Like.. Where should I unpack the .gz file? What files should I change? I've
->said Y to everything I need to "y" when I configured the kernel.
->
->When I run "man ipchains" I get nothing..
->
->Please don't give me any URLs or "RTFM" replies.. Unless I've missed
->something the installation instructions are simply not there..
->
->Thanx!
->
->/Martin
->

afterburn <at> crashdot <dot> com

    "I haven't lost my mind, it's backed up on disk somewhere!"

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: ADSL ethernet with Dynamic IP
Date: Sat, 03 Apr 1999 13:17:41 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (Luca Filipozzi) wrote:

> Are you talking about one-to-one NAT or many-to-one NAT (often called
> masquerading)?

Both.

> If you are talking about the former, then you still need just as many ip
> addresses.

Actually, no -- proper NAT'ing will actually use *fewer* IPs than DHCP, under
most circumstances.

The Problem, as I see it, is this:  ISPs often have more clients than public
IP addresses.  There are two ways to solve this problem.  The first allocates
the public IP addresses in a dynamic manner, and depends upon the fact that
most clients will not be connected at the same time, in order to work.  The
second solution is to use a private IP range to assign *static* addresses to
all clients, and then to use either 1-1 NAT or many-1 NAT depending on the
needs of each client.  In order for the second solution to work, the user
base must consist primarily of people who don't need routable two-way
connections (web surfers, email readers -- most users).

Fortunately, the client base of most ISPs consists primarily of users who are
both intermittantly connected and not in need of a routable two-way
connection. This means that, most of the time, both solutions are feasible. 
The reason I favor the latter solution is that it has no upper limit on
network size (other than the 16.7 million addresses in 10.x.x.x -- which is
more than large enough for any conceivable private segment).  Dynamic
allocation of public IPs has a limit on concurrent connections, and that
limit cannot be raised except by increasing the available IP space.  NAT'ing
a private segment has a limit on the number of 1-1 NAT entries, but an
essentially unlimited overall network size.

> If you are talking about the latter, then when the packet header gets
> rewritten, both the ip address and port number of the masqueraded machine
> are modified. The firewall has to keep track of these port numbers etc.
> For a lot of protocols, this isn't a problem. For some, FTP comes to mind
> right away, a helper module (in terms of Linux) is required to keep
> additional track of connections, etc. That's what Donley meant by asking
> you whether you were going to write all these modules.

I see.  Well, in the case of FTP, many-1 NAT only barfs on passive-mode,
which doesn't have to be used (most if not all FTP clients support both
passive and non-passive modes).  Regardless, there will be many applications
that won't be able to function through many-1 NAT.  For those, the client
would have to pay extra in order to get a 1-1 NAT.  This "extra" charge would
hopefully still be less than the current cost for a static IP, since many-1
NAT is essentially "free" to the ISP, in that it doesn't require time-sharing
of a limited resource (the public IP range allocated to the ISP).  I say
"hopefully" because although this type of solution is *technically* cheaper
for the ISP, I don't necessarily trust that ISP to pass the savings onto the
consumer (_especially_ for something that's effectively an upgrade of
service).

Also keep in mind that clients within the same private segment will be able
to communicate directly (no intervening NAT), using *static* IP addresses. 
This means an automatic upgrade of service, even for users paying for the
cheapest level of service.  In fact, ISPs could even assign entire class C
ranges from the 10.x.x.x block to each client, at no real additional cost
(although only one 1-1 NAT per client is really feasible).

> As for Dynamic DNS... I'm not opposed to it, as long as it is secure (I
> use an SSH-based script).

I'm opposed to it in any cases where the DDNS server is public.  Using DDNS
for public purposes is the moral equivalent of spamming usenet.  The TTL is
meant to be kept *high* in order to keep the number of forward lookups (and
hence public network traffic for DNS lookups) low.  It should _only_ be
lowered when a renumbering occurs.  Technically, I suppose DDNS could justify
its low TTL by the fact that dynamic IP usage effectively means that a
renumbering is always in progress, but that only pushes the problem to
another level.  The bottom line is you're not paying for the extra traffic
that DNS servers around the world will generate as a result of DDNS's low
TTLs, so it shouldn't be used unless it's on a private segment for which you
*do* pay all associated bandwidth costs (i.e. a home network or office
network).

If there were some public accounting system in place that charged you for the
bandwidth associated with forward lookups to your DDNS server, things would be
different -- but there isn't, so they're not.

As a real-world example of why DDNS in particular is bad, a sizable percentage
of DNS servers around the world now completely ignore TTLs.  Ignoring TTLs is
the easiest way to keep your DNS server from being overloaded in the face of
DDNS, but at a great cost -- renumbering a high-traffic domain now requires at
least a week (as I very painfully found out when I helped move XOOM.com's site
to a new NOC last year).  It used to take a few hours, and that delay is a
direct result of the popularity of DDNS.

-Bill Clark

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: Yue Huang <[EMAIL PROTECTED]>
Subject: Re: DHCP and IP-Masquerade
Date: 3 Apr 1999 15:10:01 GMT

Larry Benoit <[EMAIL PROTECTED]> wrote:
: Yue Huang wrote:
:>
:> Thank you for any help.
:>
:> yue

: You give very little information on your setup, but your DNS is not set correctly
: -- it shouldn't be the
: address of your Linux server,  rather it is dynamically set by DHCP.  You must
: obtain the DNS address and then
: set it for each of your PC clients.  For details on how to do this see:

: http://metalab.unc.edu/LDP/HOWTO/mini/DHCP-3.html#ss3.3

Here is my setup.  I have Slackware 3.2 package and use kernel 2.0.36.

When I used PPP connection over phone line, the DNS, PPP and IP-Masquerade
were setup on the 192.168.0.5 box. DNS is setup according to DNS-HOWTO.  
Other three machines, 192.168.0.x, connected to 192.168.0.5 could access 
each other and the internet. 

Now I have a cable modem with DHCP connection to the internet with dynamic
IP.  The connection is setup on 192.168.0.5 according to DHCP mini-HOWTO. 
I compile and install dhcpcd 0.7 using "make" and "make install".  when 
dhcpcd starts the box is connected to the internet, very fast.  However,
the hostname is changed to an assigned named and IP is changed to 
212.xxx.xx.xxx.  So, I lost connection to other boxes with 192.168.0.x.
The problem is not only DNS since I cannot even ping these boxes with 
their IPs.

I have moved DNS to another box 192.168.0.2 and the problem is the same;
once 192.168.0.5 connected to the internet with DHCP the machine is isolated
from my network.

My question is how I can keep connection of DHCP box with my network and how
I can update my DNS for dynamic IP from DHCP connection. 

Thanks.

yue

------------------------------

From: [EMAIL PROTECTED] (Kevin & Chelby Geiss)
Crossposted-To: comp.os.linux.setup
Subject: getting my innd server fed, through ppp
Date: Sat, 03 Apr 1999 15:02:46 GMT

=====BEGIN PGP SIGNED MESSAGE=====
Hash: SHA1

I'd like to set up a cron job which would log in in the middle of the
night, and then do something to get my innd server fed about 10 text
groups.

I already have some perl scripts to do the logging in.

- From what I've learned so far, there's no way to tell the news
server
(innd) to go fetch new messages from a nother news server. It waits to
get fed. 

So is there a program which would connect to my isp's news server as a
reader, get a list of what messages the server has, then connect to my
innd as a feeder, and use all the i have/i need protocols to determine
which messages need to be transferred, and then transfer the correct
messages, fetching them from my isp's innd as if it were a reader, and
feeding them to my innd as if it were a feeder?
=====BEGIN PGP SIGNATURE=====
Version: PGP Personal Privacy 6.0.2

iQA/AwUBNwYtj0dhI7WRwtgqEQLXSgCgw2EjK/A+w69gYKgeyWXeYiXsUpMAn1ed
ho2RsECwZLN84sF9GQ22RBZm
=YBlq
=====END PGP SIGNATURE=====


------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to