Linux-Networking Digest #554, Volume #10         Fri, 19 Mar 99 11:14:56 EST

Contents:
  Re: For all you Nicrosoft lovers (doole)
  Re: For all you Nicrosoft lovers (Morely Dotes)
  Configuring Linux as mail server .. (Raghavendra B K)
  Re: For all you Nicrosoft lovers (Don Baccus)
  Re: How to compile Kernel 2.2.2  with redhat 5.2??? (root)
  Wich hardware ? (MB)
  Re: For all you Nicrosoft lovers (doole)
  Re: The truth about the Pentium III chip and ID --- **boycott info** ("Michael 
Barnes")
  Re: DNS files okay? (tperuzzi)
  Re: Linux server and multipile POP3 accounts (Iztok Polanic)
  Re: ARP: called for own IP address (Edward Lee)
  Re: cable modem ("George Csahanin")
  Re: Multiple Domains and Websites ("john -r s")
  Re: Multiple Domains and Websites (Raymond Doetjes)
  Re: IP Masquerading with Red Hat 5.2 (Raymond Doetjes)
  pcmcia freezes me to death ("Mario Schrijver")
  Firewall And DNS (Filargiropoulos Stavros)
  Re: NFS and win98/linux (Raymond Doetjes)
  Re: Connect to linux server over internet? (Raymond Doetjes)

----------------------------------------------------------------------------

From: [EMAIL PROTECTED] (doole)
Crossposted-To: alt.os.linux,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: For all you Nicrosoft lovers
Date: 19 Mar 1999 14:00:16 GMT
Reply-To: [EMAIL PROTECTED]

>
>>Doesn't make sense.
>??you think people in a free society dont cherish there personal privacy??
>
Of course they do (and should) and it shouldn't be abused, either.

------------------------------

From: [EMAIL PROTECTED] (Morely Dotes)
Crossposted-To: alt.os.linux,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: For all you Nicrosoft lovers
Date: 19 Mar 1999 14:00:30 GMT
Reply-To: [EMAIL PROTECTED]

In article <[EMAIL PROTECTED]>, [EMAIL PROTECTED] wrote:
>
>But I say it again, why would you care what they read - UNLESS of
>course, you were committing a crime. No one wants to answer that
>question directly, for some stupid reason.

Let me try this one, then:  Are you screwing your 10-year-old cousin?

Don't want to answer that, and the very fact that anyone would even ask pisses 
you off?

Now you know how people feel when *their* privacy is invaded.

>You send loads of your private information to the IRS, and willingly.

Who does?  The IRS gets the bare minimum from me required to comply with 
the law.

>Why the hell isn't anyone complaining about THAT?

Who's not complaining?  I write my congresscritters regularly.  If it were up 
to me, the IRS would be disbanded, income tax abolished and outlawed, and 
Microsoft's management would be sacrificed to Finagle.

>Doesn't make sense.

Then you aren't asking the right questions.

-- 
 "Opt-out is a cop-out."  -  Jerry Bookter
 [ No "courtesy copies" via e-mail, please. ] 
 This message was tested on small, cute, furry animals
 who cried piteously while it was being read to them.
                

------------------------------

From: Raghavendra B K <[EMAIL PROTECTED]>
Subject: Configuring Linux as mail server ..
Date: Fri, 19 Mar 1999 16:03:38 +0530

Hello,

I have a Linux server (DLD 5.4 kernel 2.0.33) which is on a LAN. This is
part of a bigger intranet. Now I would like to configure my system as a
mail server so that I can send/receive mails from the outside world
(outside intranet).

I sent a mail using elm and this is what I got.
=======================================================================
Returned mail: Data format error:
<[EMAIL PROTECTED]>... Sender domain must exist
501 <[EMAIL PROTECTED]>... Data format error
=======================================================================
At this point, I can give you a hint. If,  from any dos/windows based
system (within the intranet), I use ftp or telnet to
[EMAIL PROTECTED],  I can successfully do the job.

Please let me know the step-by-step procedure to configure my
mailserver. My resources include sendmail, elm and kmail (of kde). Also
tell me know what are the changes to be done  to sendmail, etc so that I
can send/receive mails without doing anything in the domain server.

Thanks in anticipation.

Regards,
Raghavendra B K
([EMAIL PROTECTED])


------------------------------

From: [EMAIL PROTECTED] (Don Baccus)
Crossposted-To: alt.os.linux,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: For all you Nicrosoft lovers
Date: 19 Mar 1999 14:04:28 GMT

In article <[EMAIL PROTECTED]>, doole <[EMAIL PROTECTED]> wrote:

>If you need YOUR privacy, then go ahead and fight for it. That's fine,
>I'm just curious about folk's thoughts on it.

>My fault, I know, but I still don't quite get the jist.

Well, you might consider than in the United States, yes,
our own little country, people have been denied jobs,
persecuted, and in other ways harassed FOR PERFECTLY
LEGAL BEHAVIOR.

Even in your stating that you do nothing in private
that you would mind having exposed "except for things
like sex", you are stating that to some degree 
privacy is important to you.

Because, as I'm sure you're aware, in some states
certain types of sex - things less kinky than occured
recently in the White House - are against the law,
even when conducted by a man and woman joined in
holy matrimony sactioned by the state.

So, buddy, you never know, if privacy rights disappear,
it might be YOUR back up against the wall.

Those who wrote our Constitution understood the world
better than you do, I'm afraid...
-- 

- Don Baccus, Portland OR <[EMAIL PROTECTED]>
  Nature photos, on-line guides, at http://donb.photo.net

------------------------------

From: [EMAIL PROTECTED] (root)
Crossposted-To: aus.computers.linux,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: How to compile Kernel 2.2.2  with redhat 5.2???
Date: 19 Mar 1999 13:54:27 GMT
Reply-To: [EMAIL PROTECTED]

James Gray ([EMAIL PROTECTED]) wrote:
: Dear Aaron,

: > I cannot get the 2.2.2 kernel to work correctly under RedHat 5.2.

Hi - I wasn't able to do that either - but all of my problems vanished after
having upgraded to kernel 2.2.3. Cheers, juergen.



--
*****************************************************************
* Juergen Leising, E-Mail: [EMAIL PROTECTED] *
*          http://www.stud.uni-bayreuth.de/~a0037/              *
*****************************************************************

------------------------------

From: MB <[EMAIL PROTECTED]>
Subject: Wich hardware ?
Date: Fri, 19 Mar 1999 15:08:39 +0100

hi
I am planning to change ourCompaq Prosignia netware file server to an
Linux file an data server and I have to replace the hardware too .We
have about 30 PC's to connect. Is it a good Idea to acquire a Digital
server with ALPHA 400 mhz ? Or is it  better use a classic server with
Intel PII 450 mh. Does a Be-processor P II  more powerfull and is it
well accepted by Linux ?

l
Mourad
[EMAIL PROTECTED]


------------------------------

From: [EMAIL PROTECTED] (doole)
Crossposted-To: alt.os.linux,comp.os.linux.hardware,comp.os.linux.setup
Subject: Re: For all you Nicrosoft lovers
Date: 19 Mar 1999 08:08:41 GMT
Reply-To: [EMAIL PROTECTED]

Ok, then...

[EMAIL PROTECTED] (Morely Dotes) apparently said this:
>
>Let me try this one, then:  Are you screwing your 10-year-old cousin?
>
>Don't want to answer that, and the very fact that anyone would even ask pisses 
>you off?
>

Of COURSE I want to answer it! No I'm certainly not! Furthermore, I
want the world to know that!

It doesn't piss me off at all. It just makes me wonder about the
interogator. <g>

My own attitude is that if you really want to look into my underwear
drawer, go ahead, it's your own tough luck. Personally, I can't see
how 'privacy' has improved my life in any way. I try not to do things
in private that I would be ashamed to do in public. (Except for the
obvious stuff, like sex and other biological functions, which OUGHTN'T
to be done in public. But I would hope enough common sense will
prevail to exclude those things from the discussion.)

If you need YOUR privacy, then go ahead and fight for it. That's fine,
I'm just curious about folk's thoughts on it.

My fault, I know, but I still don't quite get the jist.

------------------------------

From: "Michael Barnes" <[EMAIL PROTECTED]>
Crossposted-To: 
comp.lang.perl.misc,comp.lang.python,comp.lang.tcl,comp.mail.sendmail,comp.os.linux.setup,comp.os.ms-windows.advocacy
Subject: Re: The truth about the Pentium III chip and ID --- **boycott info**
Date: 19 Mar 1999 13:40:12 GMT

Every MODEM has a MAC address also...so your friends pc is nicless, but not
macless
As far as I know you cannot network anywhere without a mac address since
IP's map directly to machine addresses at lower levels to identify your
particular machine on any network.  So, if your connected to any network via
any hardware device (router, switch, modem, nic) those devices must have mac
addresses.

and modems are easy to replace compared to CPU's also...



Bill Anderson wrote in message <[EMAIL PROTECTED]>...
>Tim Roberts wrote:
>>
>> John Lehmann <[EMAIL PROTECTED]> wrote:
>>
>> >Kano wrote:
>> >>
>> >> Oh come on. Many other standard devices (ethernet cards, for example)
>> >> have their
>> >> own unique serial numbers that software can use at will. Get over it.
>> >>
>> >
>> >Yes - but ethernet mac cards are only broadcast over the lan, not over
>> >the net (except by Office98, of course).
>>
>> The POINT here is that it is exactly as easy to embed my unique MAC
address
>> in an Internet transaction as it is to embed my unique Pentium-III CPU ID
>> in an Internet transaction.  Any software which will go to the trouble to
>> fetch the unique CPU identifier and send it over the network to identify
me
>> could just as easily be written TODAY to use a MAC address for exactly
the
>> same purpose.  The CPU identifier is not significantly different in
concept
>> from the MAC address, and yet there has not been a hue and cry to boycott
>> NIC manufacturers.
>
>Ho wmany home users ar LAN connected to the internet?
>oh, yeah, that's right, they dial up with a modem; no getting a MAC
>address from a machine that does not have one.
>
>>
>> >And what do you mean get over it???  This kind of personal information
>> >is valuable.  Business are willing to pay for it.  This kind of
>> >behavior IS DOWNRIGHT THEFT!!!
>>
>> But whatever they could do with a CPU ID, they are probably already doing
>> with a MAC address.  It is just as good as a unique identifier.  "Get
over
>> it" is exactly the right attitude.
>
>Can you explain how they would be getting a MAC address from my friends'
>NIC-less pc?
>
>A MAC address is not as good, in any event. NICs get changed mor often
>than cpus (in most cases). IIRC MAC addresses can be changed, and there
>have been cases of MAC addresses beinf reused?



------------------------------

Date: Fri, 19 Mar 1999 12:25:49 +0100
From: tperuzzi <[EMAIL PROTECTED]>
Subject: Re: DNS files okay?

Steve Shreeve wrote:
> 
> I've gotta DNS question for you. If you can help, I'd appreciate it if you
> could email me as well at: ([EMAIL PROTECTED])  I have a Linux box running at
> the med school. It has an assigned hostname and IP address of
> 'medweb.med.uci.edu' and '128.200.234.2'. I'd like to use this machine to
> serve up DNS information for other domains. For example, I'd like to serve up
> info for a domain called 's2s.org' and another called 'foobar.com' (let's
> say). The 's2s.org' domain I'd like to share the same IP address with
> 'medweb.med.uci.edu'. However, the 'foobar.com' machine will actually be
> located on an @Home connection. I am currently running bind-8.1.2 and have the
> following config files (see below, sans the 'foobar.com' one). I was wondering
> if you could give a quick check over these to see if everything is cool. I'd
> appreciate any help you could offer...
> 
> Steve
> 
> /etc/named.conf
> ===============
> options {
>         directory "/var/named";
> };
> 
> zone "." {
>         type hint;
>         file "hints";
> };
> 
> zone "0.0.127.in-addr.arpa" {
>         type master;
>         file "localhost";
> };
> 
> zone "s2s.org" {
>         type master;
>         file "s2s.org";
> };
> 
> /var/named/hints
> ================
> is just the result of `dig @a.root-servers.net > /var/named/hints`
> 
> /var/named/localhost
> ====================
> @               IN SOA  medweb.med.uci.edu. shreeve.uci.edu (
>                         1998030373      ; Serial, today's date + version
>                         3H              ; Refresh after 3 hours
>                         1H              ; Retry after 1 hour
>                         1W              ; Expire after 1 week
>                         1D )            ; Minimum TTL of 1 day
>                 NS      medweb.med.uci.edu.
> 
> 1               PTR     localhost.
> 
> /var/named/s2s.org
> ==================
> @               IN SOA  ns shreeve (
>                         1998030373      ; Serial, today's date + version
>                         3H              ; Refresh after 3 hours
>                         1H              ; Retry after 1 hour
>                         1W              ; Expire after 1 week
>                         1D )            ; Minimum TTL of 1 day
>                 NS      ns
>                 NS      ns.r8ix.com.    ; a buddy's name server
>                 MX 10   mail
>                 A       128.200.234.2
> localhost       A       127.0.0.1
> ns              A       128.200.234.2
> mail            A       128.200.234.2
> www             A       128.200.234.2
> ftp             A       128.200.234.2

you need to modify your records
for example the A RRs
localhost       in a    128.....
                ^^
what i mean: you have to put an "in" before A CNAME and PTR Records
tom
-- 
===========================
ICS
Thomas Peruzzi
[EMAIL PROTECTED]
http://www.fh-sbg.ac.at/ics
0043 662 4665 653
===========================

------------------------------

From: Iztok Polanic <[EMAIL PROTECTED]>
Subject: Re: Linux server and multipile POP3 accounts
Date: Fri, 19 Mar 1999 09:15:01 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (ETX) wrote:
> On Thu, 18 Mar 1999 11:12:08 GMT, Iztok Polanic
> <[EMAIL PROTECTED]> wrote:
> >Can fetchmail encrypt password as fetchpop does? If not, then root can see
> >your password!
>
> Nope, but why are you so worried about what root can do?
>
>
Hello !!!

Why shouldn't I be? For Example:

we are running local linux server and we want to use fetchmail to download our
mail. Every user will type in .fetchmailrc his password. Then root can just
browse to his/hers' directory and see the password.

Fetchpop (another version of retrieving POP3 mail) has an option so that it
can encrypt your password and nobody can see it. I think that would be a very
good feature to fetchmail also. I don't want a superb encryption but a simple
one so a normal user couldn't see the password.

============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: Edward Lee <[EMAIL PROTECTED]>
Subject: Re: ARP: called for own IP address
Date: Thu, 18 Mar 1999 15:56:54 -0800

DNS

Steve Levoe wrote:

> I am receiving a constant stream (a couple a second) of the following
> message on the console:
> ARP: called for own IP address
> Any clues on what I should look at to find out what is wrong?
> RedHat 5.2 Intel, 3C509B
> Thanks


------------------------------

From: "George Csahanin" <[EMAIL PROTECTED]>
Subject: Re: cable modem
Date: Thu, 18 Mar 1999 23:54:57 GMT

I have @HOME, and spent 5 hours on the phone with their support(?) people a
couple of nights ago. It is nice to know that they do have some Linux heads
there. But the problem they chased for all those hours(up to 2:30AM) was as
they put it...a tech working on a router somewhere. I don't really believe
it, but who knows...symptom is cable light goes out, and unit goes bet\ween
flashing cable light, and test light.

Meanwhile tore out the Linux firewall, etc, and had just the NT box
connected to the cable modem. Then the service came back on, and has been
fine, albeit slow, ever since.

But it has always been pretty slow. Need to tweak MTU. Get 400kbps at best
rarely.

It does frequently stop, in general with no indication. I chech the local
router at the headend to see it it is me or them. Usually I can ping it
fine, but that's as far as she goes. This is frequent, and is probably too
many "Little Johnny's" doing geography homework, or some other waste of
bits.

If you call customer service, be prepared for a VERY LONG wait. Took 2 hours
to talk to the first guy, and another two hours to get to the second, and he
had no record from the first guy of my problem...Y'know, they almost seem
like cable TV guys.

OH! One last thing. I do not and will not use DHCP. Tell 'em you want a
static IP address. I got three and collected the whole set.

-GC

[EMAIL PROTECTED]

my spam address, tho I do look before deleting globally

georgec(X)@dyb.com
The real one, remove...etc.


Koen de Boev� wrote in message <[EMAIL PROTECTED]>...
>On Tue, 16 Mar 1999, Tri Tram wrote:
>>Ok.  So far, I got the network card working, the linux working, and the
>>cable modem working.  I can telnet out, ftp out, browse out of the linux
>>box.  However, after a few minutes, my connection is suddenly lost.
>>They just cut my connection for no apparent reason.  I have @home cable
>>as the service provider.  Any ideas why my connection just stops for
>>no apparent reason?



------------------------------

From: "john -r s" <[EMAIL PROTECTED]>
Subject: Re: Multiple Domains and Websites
Date: Fri, 19 Mar 1999 07:29:16 -0500


Allen wrote in message ...
>
>Can I host multiple domains and websites on a single Linux box? Do I need
>multiple NICs for this?

One way to have multiple web sites is to have the httpd's running on
different ports.  It is common to have applications with a operational port
of 80 and a maintenance port of some other number.  I also used to run an
experimental or design site if you will, next to the operational one.  The
drawback in this is that  you need to know the port number if different from
80.  There are ways to fix this also but more importantly if someone could
respond to part 2 I would also like to know how to set up the DNS for this
situation.

-jrs




------------------------------

From: Raymond Doetjes <[EMAIL PROTECTED]>
Subject: Re: Multiple Domains and Websites
Date: Fri, 19 Mar 1999 15:49:23 +0100

Without any problems.
When you find your httpd.conf, their you find the header #<Virtualhost> just
enter the right values, and you have your virtual http domain setup. This is
an example

<VirtualHost www.otherdomain.com>
ServerAdmin [EMAIL PROTECTED]
DocumentRoot /usr/local/www.otherdomain.com
ServerName www.otherdomain.com
ErrorLog logs/www.otherdomain.com-error_log
TransferLog logs/www.otherdomain.com-access_log
</VirtualHost>

When you want people to have their own ip addresses then you should recompile
a kernel with (i can't remember the exact parameter, but it is under
networking), it enables you to add several ip addresses to a single NIC.

You should also create an extra primary zone for that domain name to your DNS
/etc/named.boot or named.conf. This is so that they have their own domain
lookup zones.

cache               .
/var/named/root.cache
primary            1.168.192.in-addr.arpa        /etc/synapses-it.dns
primary            synapses-it.com                 /etc/synapses-it.com
primary            phonax.com                      /etc/phonax.com
primary            otherdoamin.com              /etc/otherdomain.com
forwarders       195.64.32.3 195.64.32.43

This is an example of a zone file:


; Zone file for the synapses-it.com domain
;
; Date created 1-1-1998
; Date last modified 3-3-1999
;
@       IN      SOA     mailsrv.synapses-it.com. root.synapses-it.com.  (
                        1998010101      ; serial, todays date + serial #
                        28800           ; refresh seconds
                        7200            ; retry seconds
                        3600000         ; expire seconds
                        86400  )        ; minimum seconds
                NS      mailsrv.synapses-it.com.
                NS      syn01nt40.synapses-it.com.

synapses-it.com. IN     MX      10      mailsrv
synapses-it.com  IN    MX       20      mail.phonax.com.

www1        CNAME   syn01nt40
ftp1            CNAME   syn01nt40
msm           CNAME   syn01nt40

localhost     CNAME   mailsrv
pop3           CNAME   mailsrv
proxy          CNAME   mailsrv

www          A       195.64.32.23
syn01nt40    A       192.168.1.1
mailsrv        A       192.168.1.2
router          A       192.168.1.253
router-wag   A       192.168.1.252
mprins          A       192.168.1.251
aschut          A       192.168.1.250
intranet         A       192.168.1.3

Raymond

Allen wrote:

> Hi all,
>
> Can I host multiple domains and websites on a single Linux box? Do I need
> multiple NICs for this?
>
> Thank you.
>
> Allen

--
=====================================================================
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
                   not stand 1 bit of competition.
=====================================================================



------------------------------

From: Raymond Doetjes <[EMAIL PROTECTED]>
Subject: Re: IP Masquerading with Red Hat 5.2
Date: Fri, 19 Mar 1999 16:11:37 +0100

Did you make a masquerading kernel yet? Just hammering in the ipfadm or ipchains
firewall rules isn't sufficient.

You should make a kernel and enable:

firewalling
ip masquerading
icmp masquerading
optimize your host as router
and... ip always defragment.

Also be sure to set the default gateway address of your clients to the ip
address of your linuxbox on their subnet. f.i. 192.168.1.1 is the ip address of
your linuxbox in the localnet then the gateway addresses should be set to
192.168.1.1

What also is crusial to know is what kernel do you use. With 2.2.x kernel, you
need to set ip_forwarding. (I don't have that documentation here) if you run
2.2.x mail me at mailto:[EMAIL PROTECTED]

After you've compiled the kernel, be sure to copy the kernel to the ./ (root)
and to add an other boot section for that file in your /etc/lilo.conf and then
ALWAYS even if you overwrite a file run lilo.

And that's it. (I've done it within 30 minutes). Als insert the ip_masq modules
for strange protocolls.

If you just want to use httpp and ftp (or you feel the need of a caching proxy),
then you can also install squid this is a caching proxy, it runs default from
port 3128. Setup the browsers and your even faster done.

Raymond

Darrell wrote:

> Can anyone give me some sort of direction on setting up IP Masquerading on
> Red Hat 5.2? I am new to Linux and this is my first attempt at doing
> anything with it and so far it has resulted in an endless search of HTML
> documents that all point to another document.
>
> I need to take my machine that has two ethernet cards, connect one card to
> the wireless 256K internet connection we have (I have done this and accessed
> the web with no problem) then I need to connect the other network card to an
> internal network of the 192.168.1.xxx variety. I have setup the second
> network card as 192.168.1.1 and connected it to a hub, then I connected a a
> windows98 machine numbered 192.168.100 to the hub but I can not ping the
> 192.168.1.1 machine from this machine. If I reconfigure the Windows98
> machine to our other network and connect it to the internet, I can ping the
> Linux machine from the internet on its adapter marked 209.198.17.41. I am at
> somewhat of a loss on how to trouble shoot this. I have the HOWTO dated
> February 7, 1999, but I don't really see a troubleshooting guide with it. I
> have enabled IPV4 routing in Red Hat. Is there any routing information that
> needs to be added in the Network Configurator to make this work? I didn't
> see anything about routing tables in the HOWTO, only the ipfwadm and I used
> the most liberal setting available there just to try and get it working.
>
> Any help would be appreciated. I was hoping to not have to go to the NT
> Proxy Server package, but since I set that up in an hour at another location
> and I have little time as it is it is looking more likely.

--
=====================================================================
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
                   not stand 1 bit of competition.
=====================================================================



------------------------------

From: "Mario Schrijver" <[EMAIL PROTECTED]>
Crossposted-To: 
apana.lists.os.linux.kernel,apana.lists.os.linux.ppp,apana.lists.os.linux.redhat,at.fido.linux,comp.os.linux.development.system,comp.os.linux.hardware,comp.os.linux.portable,comp.os.linux.setup,de.comp.os.unix.linux.hardw
Subject: pcmcia freezes me to death
Date: 19 Mar 1999 13:45:11 GMT

Hi,


I,ve got a Micropoint Iliission with the pcmcia-cs-3.0.8 module combined
with 2.2.3 Linux Kernel. Starting PCMCIA freezes the machine.

probe -m shows an i82365 like pcmcia chipset in my machine. Still, loading
the modules by hand shows that all other related modules don't cause a
crash, but the i82365 does

When i relay the output to logfiles it only shows the module going in  for a
restart... and then it stops.


 How to debug this?

Anyone has a clue how to handle this.?


Regards,


Mario Schrijver



------------------------------

Date: Fri, 19 Mar 1999 17:17:23 +0200
From: Filargiropoulos Stavros <[EMAIL PROTECTED]>
Subject: Firewall And DNS

Lets suppose we have a firewall on a machine running a nameserver.
We should noramly ALLOW all incoming connection from port 53
allow udp from 0.0.0.0/0 53 to localip
allow tcp from 0.0.0.0/0 53 to locallip
Right?

Well isn't that a security whole, since someone can connect to any port
on our machine
if he uses the 53 port of his machine?


------------------------------

From: Raymond Doetjes <[EMAIL PROTECTED]>
Subject: Re: NFS and win98/linux
Date: Fri, 19 Mar 1999 16:20:54 +0100

With NFS the UID and GID must match the onces taht are in the /etc/passwd file.
WIth most NFS clients on windows, you can set the UID and GID, set them to match
the once in your /etc/passwd file for that user and it must work.

Raymond

Graham Wharton wrote:

> I have just a quick question regarding my setup
> I have two directories exported on my linux box using nfsd and am able to
> connect to them locally and also from a BeOS machine on the network. Both
> mount fine
>
> I am trying to connect using Intergraph's DiskAccess software from Windows
> 98 and keep on getting refused error messages when it tries to check my UID
> and GID
>
> /var/log/messages gives me this recurring error
>
> Mar 18 20:39:45 linux portmap[1549]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
> Mar 18 20:39:59 linux portmap[1550]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
> Mar 18 20:40:04 linux portmap[1551]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
> Mar 18 20:40:10 linux portmap[1552]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
> Mar 18 20:40:19 linux portmap[1553]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
> Mar 18 20:40:29 linux portmap[1554]: connect from 192.168.0.3 to
> callit(ypserv): request not forwarded
>
> Has anybody any ideas on what is happening, and where i can look to try and
> sort it out
>
> Your time is appreciated
> --
> Graham Wharton
> [EMAIL PROTECTED]
> =========================================
> Main Home Page
> http://www.dotdot.force9.co.uk
>
> Discussion Board
> http://cgi.dotdot.force9.co.uk/cgi-bin/entercgi.pl?discus/messages/board-top
> ics.html
>
> E-Mailing files as attatchments with sendmail (MIME)
> proper text counter and access logger
> Dynamic generation of HTML
> =========================================

--
=====================================================================
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
                   not stand 1 bit of competition.
=====================================================================



------------------------------

From: Raymond Doetjes <[EMAIL PROTECTED]>
Subject: Re: Connect to linux server over internet?
Date: Fri, 19 Mar 1999 16:18:36 +0100

First install a Xserver on your Windowsx 98 machine. (A good server is the X
server from Chameleon, though it is not for free but trial versions can be
obtained).
Then let that software telnet to your Linux machine and start a xterm -display
ipaddreswin98:0.0. (also be sure your windows 98 server will allow
connections!) Then you get an Xterm and you can start any other programs
without entering the -display parameter.

The same procedure is used when connecting from other Unix servers. first run
xhost ipaddress_server_you_are_connecting (or for the people who don't care
about security among us xhost +) Telnet in type xterm -display:0.0 and after a
few seconds you have an xterm running.

Raymond

"Alexander J. Perovich" wrote:

> Just got a Linux server, but not near by where I can work with it.  How can
> I connect using Win98 to the server and use Xwindows to manipulate the
> server?
>
> You can e-mail me at [EMAIL PROTECTED]
> Any information would be greatly appreciated.

--
=====================================================================
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
                   not stand 1 bit of competition.
=====================================================================



------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to