Linux-Networking Digest #493, Volume #10 Sun, 14 Mar 99 17:14:00 EST
Contents:
Linux Friewall --> NICs (Markus Felber)
How to hide the dot files in a samba share (Michael T)
Re: HAVE I BEEN CRACKED? ("B.K. DeLong")
Re: PnP modem. More info ("Ju")
Re: Kernel 2.2.1 with ipfwadm problem, please help ! (Mephisto)
PPP connection question (Christian Dysthe)
RH 5.2: Routing table losing default route/gateway ("Charles J. Boening")
Linux and Sygate ("Roland Rabien")
Re: PPP Beginner - Please Help (Clifford Kite)
Upgrading sendmail 8.8.7/8.7.3 -> latest: Horror stories? (Frederic Faure)
Re: Password problem! (sean)
NFS start problem (Cokey de Percin)
Re: Kernel 2.2.1 with ipfwadm problem, please help ! (Daniel Bruce)
Re: Linux Friewall --> NICs ("White Giant")
Re: RealServer G2 Problems... ([EMAIL PROTECTED])
Re: Looking for an X client for Windows 95 (Don Heffernan)
Re: smbmount won't work (Benoit Panizzon)
Re: Will Linux work with a Cable Modem??? (G. Mark Stewart)
----------------------------------------------------------------------------
From: Markus Felber <[EMAIL PROTECTED]>
Subject: Linux Friewall --> NICs
Date: Sun, 14 Mar 1999 17:03:57 +0100
==============8B4FBD6FEEB2847062636078
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hi,
My Firewall looks like this:
_____________________
| | ________
| Firewall | | |
L A N ------> |eth0 eth1| ------> | Router |
---> I N T E R N E T
| Linux | |________|
|_____________________|
aaa.bbb.ccc.0/24 aaa.bbb.ccc.1
My problem is the configuration of the network adapters. How must the IP
adresses and gateway be defined on the Linux Firewall (eth0 and eth1).
And what gateway must the computers in my LAN have?
Can somebody help me?
Thanks!
==============8B4FBD6FEEB2847062636078
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
<html>
<tt>Hi,</tt><tt></tt>
<p><tt>My Firewall looks like this:</tt><tt></tt>
<p><tt>
_____________________</tt>
<br><tt>
|
| ________</tt>
<br><tt>
| Firewall
|
||
|</tt>
<br><tt> L A N
======> |eth0
eth1| ------> | Router | ---> I N T E R N E T</tt>
<br><tt>
|
|Linux
| |________|</tt>
<br><tt>
|_____________________|</tt><tt></tt>
<p><tt>
aaa.bbb.ccc.0/24
aaa.bbb.ccc.1</tt>
<br><tt> </tt><tt></tt>
<p><tt>My problem is the configuration of the network adapters. How must
the IP adresses and gateway be defined on the Linux Firewall (eth0 and
eth1). And what gateway must the computers in my LAN have?</tt><tt></tt>
<p><tt>Can somebody help me?</tt><tt></tt>
<p><tt>Thanks!</tt></html>
==============8B4FBD6FEEB2847062636078==
------------------------------
From: [EMAIL PROTECTED] (Michael T)
Subject: How to hide the dot files in a samba share
Date: Sun, 14 Mar 1999 16:10:55 GMT
Reply-To: [EMAIL PROTECTED]
Is there a way to hide the dot files that are visible when mapping a
share from Windows 9x/NT to a samba server?
TIA
Michael
------------------------------
From: "B.K. DeLong" <[EMAIL PROTECTED]>
Crossposted-To: comp.security.unix
Subject: Re: HAVE I BEEN CRACKED?
Date: Sun, 14 Mar 1999 16:05:16 -0500
Juergen Heinzl wrote:
> Do not worry, most people on the Net are not after you and
> the ones who are do not leave logfiles around.
I'd be inclined to disagree. Every hacker is different. I had a bunch of
script kiddies hack into a machine and they stopped the "mesages" file from
logging, and emptied all the logs, leaving the files there but empty.
I was able to figure out that the machine was hacked when I checked the
"last" log and saw an account that should have not been logged into since
July 1998. Since January, there's had 300 logins. I checked the account and
found BNC, an IRC proxy running....
------------------------------
From: "Ju" <[EMAIL PROTECTED]>
Subject: Re: PnP modem. More info
Date: Sun, 14 Mar 1999 13:35:51 -0700
I should add I guess that I have a dual boot system w95 and Redhat5 Linux
and would like to be able to use the modem in either OS. I understand that I
could jumper the modem for Linux but then w95 is out.
thanks Jullian
------------------------------
From: Mephisto <[EMAIL PROTECTED]>
Subject: Re: Kernel 2.2.1 with ipfwadm problem, please help !
Date: Sun, 14 Mar 1999 20:49:22 GMT
Had the same problem when updated to 2.2.2. The right thing to do is to
download ipchains :))) and learn how to use it.
P.S. You should also read file Changes in the kernel documentation.
__
[EMAIL PROTECTED]
[EMAIL PROTECTED]
------------------------------
From: Christian Dysthe <[EMAIL PROTECTED]>
Subject: PPP connection question
Date: Sun, 14 Mar 1999 16:14:13 GMT
Hi,
when I am logged on to my ISP and type "ps a" I get the following:
/sbin/getty/ 38400 tty1
Does this mean that my speed is 38400? My dialer (Xisp) tells me I connect at
42-48000.
I'm a bit confused.
//Christian
[EMAIL PROTECTED]
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: "Charles J. Boening" <[EMAIL PROTECTED]>
Subject: RH 5.2: Routing table losing default route/gateway
Date: Fri, 12 Mar 1999 16:21:32 -0800
We're running RH 5.2 Apollo, 1 NIC.
Here's what our working routing table looks like:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
206.100.166.128 * 255.255.255.192 U 0 0 1521 eth0
127.0.0.0 * 255.0.0.0 U 0 0 41 lo
default 206.100.166.190 0.0.0.0 UG 0 0 4935 eth0
this box was just setup and configured. It seems to spontaneously/ramdomly
loose it's default route.
I'm no linux expert so I'm not too sure if this is the right way or not, but
the only way we can seem to get the route back is by doing the following:
route -add default netmask 0.0.0.0 dev eth0
route -add default netmask 0.0.0.0 gw 206.100.166.190 dev eth0
then the table looks like:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
206.100.166.128 * 255.255.255.192 U 0 0 1521 eth0
127.0.0.0 * 255.0.0.0 U 0 0 41 lo
default * 0.0.0.0 U 0 0 42 eth0
default 206.100.166.190 0.0.0.0 UG 0 0 4935 eth0
Any ideas?
Thanks
Charlie
------------------------------
From: "Roland Rabien" <[EMAIL PROTECTED]>
Subject: Linux and Sygate
Date: Sun, 14 Mar 1999 21:05:58 GMT
Has anybody got Linux working with Sygate?
If so, could you let me know how. I use RedHat (Kernal 2.0.36) and I can't
get it to work. I can ping people on my intranet, but not on the internet?
Any ideas?
------------------------------
From: [EMAIL PROTECTED] (Clifford Kite)
Subject: Re: PPP Beginner - Please Help
Date: 14 Mar 1999 10:07:22 -0600
David Bossert ([EMAIL PROTECTED]) wrote:
: I'm trying to connect to my ISP (dynamic IP). I've read every newsgroup I
: can find, but something's not working right. Dummy Interface seems to be
: working fine(I can ping myself) but when I try using chat + pppd it says
: "Bad local host: 127.0.0.1." And when I try it manually through minicom and
: quit w/out resetting, pppd just sits there. Anyone know any online docs
: other than the PPP and ISP Hookup HOWTOS? Anyone know how to connect
: through X tools? Please reply to [EMAIL PROTECTED]
This likely means that something is wrong with the loopback interface.
"ifconfig" should show an entry similar to
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:3924 Metric:1
RX packets:121937 errors:0 dropped:0 overruns:0 frame:0
TX packets:121937 errors:0 dropped:0 overruns:0 carrier:0
Collisions:0
and "route -n" should show an entry similar to
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
The lo (loopback) interface is to allow the host to talk to itself
via TCP/IP and ordinarly the distribution install will create and
configure it.
It's an unusual problem and it may affect things other than PPP,
e.g., the X window system. Try the NET-3-HOWTO for more about the
loopback interface.
--
Clifford Kite <[EMAIL PROTECTED]> Not a guru. (tm)
------------------------------
From: [EMAIL PROTECTED] (Frederic Faure)
Subject: Upgrading sendmail 8.8.7/8.7.3 -> latest: Horror stories?
Date: Sun, 14 Mar 1999 16:23:16 GMT
Reply-To: [EMAIL PROTECTED]
All,
As our 8.8.7/8.7.3 Linux sendmail server running Red Hat 5.1
is still set to allow relay of incoming e-mail, and we got complaints
re spammers, I need to upgrade to the latest and greatest sendmail.
I did read O'Reilly's "Stopping Spam", and do intend to read
the relevant parts in "Sendmail", but before I go ahead and fiddle
with this production server users depend on... are there any traps I
should look for?
BTW, why do we get the two sets of figures
"myserver.mydomain.com (8.8.7/8.7.3) with SMTP" in e-mail headers?
Thanks for any tip,
FF.
--
The system required Windows 95 or better, so I installed Linux!
------------------------------
From: sean <[EMAIL PROTECTED]>
Subject: Re: Password problem!
Date: 14 Mar 1999 16:25:27 GMT
On Sun, 14 Mar 1999 13:36:15 -0000 Matt Williams <[EMAIL PROTECTED]>
mentioned something about ...
:) I successfully installed Linux 5.2 on my old P100 and can now log on as root
:) from my new Win98 PC. However, although I can see the Linux machine on the
:) network, when I select it I am asked for a password for the resource
:) //'servername'/IPC$. I haven't a clue what this is as it isn't mentioned in
:) the Win95 based Linux book I'm using.
:) I've tried my root password, no password and everything else I can think of
:) without success.
uncomment 'encrypt passwords = yes' from /etc/smbd.conf then
killall -HUP smbd
sean
------------------------------
From: Cokey de Percin <[EMAIL PROTECTED]>
Subject: NFS start problem
Date: 14 Mar 1999 21:00:32 GMT
I have a RH 5.2 with the 2.2.2 kernel, ac7 patch and the upgrade
rpms installed on a dual PPro and everything work great (really flies!)
except for nfs. Portmap starts fine but then rpc.mountd & rpc.nfsd
time out trying to start.
I also have an old 180 Penium also with RH 5.2 and the same kernel
(except its compiled for the Pentium and virt. consoles rather than
the serial one) and patch, but without the upgrade rpms and rpc.mountd
and rpc.nfsd load just fine!?
I when back and upgraded the old box with the same rpms I put on the big
box and nfs still works find on the old box!? What could I have done to
cause nfs to stop working??
I've backed out most of the upgrade rpms, but that dosen't help. Anyone
got any clues? Is there anything else I can check? Any thoughts
appreciated.
Best
Cokey
--
==================================================================
Cokey de Percin, DBA Email:
Policy Management Systems Corp. Work - [EMAIL PROTECTED]
Columbia, South Carolina Home - [EMAIL PROTECTED]
------------------------------
Date: Sun, 14 Mar 1999 13:22:30 -0800
From: Daniel Bruce <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: Re: Kernel 2.2.1 with ipfwadm problem, please help !
1. Get kernel 2.2.3
2. Get IPCHAINS (Latest 1.3.8?) (ipfwadm only works on 2.0 kernels).
http://www.rustcorp.com/linux/ipchains/
3. Really! read the /usr/src/linux/documentation/Changes file.
4. Use more recent hardware. On old system the NIC's would not work at all.
(had ISA PnP 3COM and EEPRO100B PCI). New system using 2 EE100ProB PCI and 2.2.3
loves'em.
I still can't get Masq'ing to work on 2.2.3.
My problem:
Recently upgraded to Slakware 3.60 with 2.0.36 kernel and latest libs and
utils. Everything is peachy! Off with the old, all my goodies recomipled and
working great even old SATAN. (Need newer version of sniffit and/or tcpdump that
works! old versions won't recompile).
2.2.3 problems:
1. I had routing software Gated before. Now 2.2.3 kernel now has ospf
support. and picks up my psuedo OSPF1.dom. (Bad). Seems to be confused as to the
inside domain (I am multi-homed multi-domained three-way one dom inside, two
dom outside). I will try to drop the psuedo for the testing and see if that
helps. I am not using ospf anymore anyway.
2. gated won't run on 2.2.3 (even after recompile) (R3.6A2) (Bad). Gated
people require snail mail registration before they let you in to there download
area and I am lazy
3. Server can talk to all hosts inside and outside. (good)
4. Inside Hosts cannot talk to Server. (packets to server go to bit bucket,
firewalling works well, sort of!) this is Bad.
It seems like doing echo 1 > /proc/sys/net4/ipv4/ip_forward does not seem to
do anything after ifconfig. But things are so messed up by then ... well who
cares anymore.
This is part of my script to give an idea.
/sbin/ipchains -A forward -j MASQ -s 172.16.3.1/24 -d 0.0.0.0/0 -p all -l
#echo ' diplaying curreent masq'
/sbin/ipchains -M -L
echo ' diplaying all'
/sbin/ipchains -L
Hope that help a little. So close yet so far....
Bigboss wrote:
> Hi
>
> I am running Kernel 2.0.35 with IP-Masq. and everything is working fine.
>
> When I upgrade my kernel to 2.2.1 (hopefully its stable :) and when I use
> ipfwadm for IP-Masq. such as
>
> ipfwadm -F -p deny
>
> I got this message
>
> ipfwadm: setsockopt failed: Invalid argument
>
> I also notice, something when I compile the kernel 2.2.1 is, there is new
> option Linux Socket Filtering ? I dont pretend to know anything about it but
> from the sounds of it, I enable it !! Is it the right thing to do ? or Is
> there anything else ?
>
> Thanks for all the comments.
>
> Ayewin
--
* --------------------------------------------------- *
* Daniel Bruce - mailto:[EMAIL PROTECTED]
* http://www.mygen.com
* P.O. Box 7167 , Tahoe City Ca. 96145
* --------------------------------------------------- *
------------------------------
From: "White Giant" <[EMAIL PROTECTED]>
Subject: Re: Linux Friewall --> NICs
Date: Sun, 14 Mar 1999 22:11:15 +0100
Markus Felber schrieb in Nachricht <[EMAIL PROTECTED]>...
>Hi,
>My Firewall looks like this:
_____________________
| | ________
| Firewall | | |
L A N ------> |eth0 eth1| ------> | Router | --->
I N T E R N E T
| Linux | |________|
|_____________________|
aaa.bbb.ccc.0/24 aaa.bbb.ccc.1
>My problem is the configuration of the network adapters. How must the
IP adresses and gateway be defined on >the Linux Firewall (eth0 and eth1).
eth0: aaa.bbb.ddd.x
eth1: aaa.bbb.ccc.x
default gateway(0.0.0.0): eth1(aaa.bbb.ccc.x)
> And what gateway must the computers in my LAN have?
default gateway: aaa.bbb.ddd.x
>Can somebody help me?
>Thanks!
------------------------------
From: [EMAIL PROTECTED]
Subject: Re: RealServer G2 Problems...
Date: Sun, 14 Mar 1999 21:09:40 GMT
In article <[EMAIL PROTECTED]>,
Wim Borgers <[EMAIL PROTECTED]> wrote:
>
> I must say I'm using a i486, 66Mhz with IPmasq., but that didn't prevent
> me from serving with RealServer 5.0. What could the problem be with
> this G2?
I've been having this problem with all content from a G2 server running on
RedHat 5.2. I did the original install minimally from CD, which seems to miss
a few components - it doesn't install in.ftpd anywhere either for example. In
the end I've just reinstalled giving the installer a bit more rope and the
server is now responding, so the answer seems to be let the CD decide. Don't
ask me why...
Simon
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: [EMAIL PROTECTED] (Don Heffernan)
Subject: Re: Looking for an X client for Windows 95
Date: Sun, 14 Mar 1999 21:12:01 GMT
On Fri, 12 Mar 1999 10:56:05 -0600, Sean McEwan <[EMAIL PROTECTED]>
wrote:
>That is what I am looking for. I downloaded X-Win32 from StarNet, but
>have not yet suceeded with it. I can run X programs remotely between two
>Linux boxes. Has anyone had any sucess with X-Win32 or any other X
>client for Windows 95? If so, please mail me at:===>[EMAIL PROTECTED]
>. Thanks
>
>Sean
I've tried the MI/X server that somene here suddested. I works OK.
http://tnt.microimages.com/www/html/freestuf/mix/mix-faq.htm
Don
------------------------------
From: Benoit Panizzon <[EMAIL PROTECTED]>
Subject: Re: smbmount won't work
Crossposted-To: comp.protocols.smb,linux.samba
Date: 14 Mar 1999 21:30:59 GMT
In comp.protocols.smb Bill Hayles <[EMAIL PROTECTED]> wrote:
Same trouble here...
I get SMBFS: Need mount version 6 error in the messages file
I tryed to recompile samba in 2.2.3ac1 including --with-smbmount...
Now smbmount behaves like smbclient....
Any clues?
Please send mail to [EMAIL PROTECTED]
-Benoit-
> ozric wrote:
>>
>> No I rpmed the Samba 2.0.3 and it did not have smbmount in it ? So you
>> are saying that I have to compile it. Ok I will remove the smbfs rpm and
>> compile samba I just hate that I have to --prefix the path to put all
>> the stuff where I want it.
>>
> You have to explicitly include the smbmount option when you run
> /configure :-
> /configure --with-smbmount
> And if it makes you feel any better, that had to be pointed out to me,
> too!
> --
> Who needs a life when there's linux?
> Bill Hayles
> [EMAIL PROTECTED]
--
Benoit Panizzon / Woody
ScoutNet Schweiz http://www.scout.ch
------------------------------
From: [EMAIL PROTECTED] (G. Mark Stewart)
Crossposted-To: comp.os.linux.setup,alt.os.linux,comp.os.linux
Subject: Re: Will Linux work with a Cable Modem???
Date: 14 Mar 1999 16:24:47 GMT
Rick Onanian ([EMAIL PROTECTED]) wrote:
: Father QAA wrote:
: > My family is getting Comcast @ home cable modem service. I believe that
: > the cable modem is actually a router that is accessed through a network
: Pretty much, it's easier just to think of it as a regular modem with a weird
: connection..:)
: > I was also wondering, and am pretty sure that Windows 95 computers can
: > network to the modem via a hub to the linux server via TCP/IP???? I am
: It's not quite THAT easy. What you have to do is to set up the Linux box to
: run IP Masquerading - that will allow you to set up your own in-home
: network, and use only one real internet IP - @home only gives you one.
Which brings up a couple questions -- has anyone noticed a significant
disadvantage with using a linux machine as a cable modem server for
other machines -- linux/mac/windows/unix -- and has had a chance to
compare the service with a network of machines connected to a
dedicated network-server-type box -- one of the 5 hundred or so buck
ones? Has anyone ever noticed any lag when the server machine, or, for
that matter, any of the subtended clients, is heavily loaded? Finally,
what are the security issues? Is it possible (well, probable) to misroute
packets to the wrong client or to actually receive or otherwise take
the content of data being sent to another client or the server and
get the contents at the server or another client?
Mark
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
