Linux-Networking Digest #30, Volume #11 Mon, 3 May 99 20:13:43 EDT
Contents:
Re: Netscape "Looking for..." (Darren Greer)
Re: Losing DHCP & NIC (David Kennedy)
DNS hosting (Tom Jaeger)
Olicom Token-Ring Drivers for 2.2.6 kernel ("Daniel Ulfe Paredes")
Re: ip forwarding problems ([EMAIL PROTECTED])
Re: samba not seen in Network Neighborhood (Chip Transisto)
Re: Valid IP addresses for home network ([EMAIL PROTECTED])
Re: Netscape "Looking for..." (Stagga)
Re: DNS hosting (Darren Greer)
DNS problems ("Marten")
Re: Accessing Samba server across subnets (Andrew Congdon)
Re: TCP attack or wrapper problem? ("Curt")
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Darren Greer)
Subject: Re: Netscape "Looking for..."
Date: Mon, 03 May 1999 23:13:33 GMT
-->I tried nslookup, if I just type nslookup I don't get any type of
-->console, just a blank line, if I type www.netscape.com then hit enter
-->nothing happens. If I type nslookup www.netscape.com again, nothing
-->happens. So what does this mean and what can I do about it?
-->
-->>> and not domain names? If so, how do I go about fixing it? I have my
-->>> DNS name servers set up.
Where do you have them set up......ie what are you using to connect?
Usually one sets them up in /etc/resolv.conf
There you would put:
search domain.com (your domain)
nameserver xxx.xxx.xxx.xxx (Your dns ip address)
Darren
------------------------------
From: [EMAIL PROTECTED] (David Kennedy)
Subject: Re: Losing DHCP & NIC
Date: Mon, 03 May 1999 17:31:08 GMT
Dont take this the wrong way, because it is unfortunate you are having
this problem but for me it is good because I am having the EXACT same
problem.
Do you also have these :
dhcpcd[155]: sendto (rebinding): Operation not permitted
dhcpcd[155]: sendto (rebinding): Operation not permitted
The day I lost my IPaddress I tried rebooting several times and it
failed. I left it until the next day and just issued ifup eth0 and
all was fine.
I can not issue "ifdown eth0" (by that I mean afterwords the
interface is still up, as described by ifconfig)
Details: redhat 5.2, rebuilt kernel 2.0.36
NIC is using the TULIP driver (dlink card)
eth1 is the same card, static IP address, no problems
I have also contemplated the cron job to restart, but would also like
a cleaner solution.
On Wed, 28 Apr 1999 07:25:21 -0400, "Jim St.Cyr" <[EMAIL PROTECTED]>
wrote:
>My problem is that about every three days I lose my DHCP obtained IP. I
>also lose the device (eth0) associated with it. By lose I mean that
>when I run ifconfig, eth0 is no longer present.
>
>My messages log has this entry:
>
>Apr 27 05:52:17 linuxstein dhcpcd[178]: recvfrom (rcvAndCheckDhcpMsg):
>Connection refused
>Apr 27 06:16:05 linuxstein dhcpcd[178]: REBINDING: Lease time expired.
>Fall back to INIT
>Apr 27 06:17:11 linuxstein dhcpcd[178]: no DHCPOFFER messages
>
>I am running RH 5.1 and DHCP dhcp-2.0b1pl1-2. The kernel has been
>rebuilt with routing optimization. This machine connects to a cable
>modem via eth0 which is a 3Com 3C509 NIC. It connects to my internal
>hub via a SMC ether-16 NIC which is eth1. When this problem happens
>eth1 is unaffected.
>
>I have been tempted to set up a cron job to periodically reboot the
>machine but that strikes me as advoiding something rather than fixing.
>
>Suggestions?
>
------------------------------
From: Tom Jaeger <[EMAIL PROTECTED]>
Subject: DNS hosting
Date: Mon, 3 May 1999 19:16:04 -0400
Does anyone know a place that will map a domain to a static ip for a
reasonable price.
thanks
Tom Jaeger MCSE
windowsnetworking.com
[EMAIL PROTECTED]
------------------------------
From: "Daniel Ulfe Paredes" <[EMAIL PROTECTED]>
Subject: Olicom Token-Ring Drivers for 2.2.6 kernel
Date: Mon, 3 May 1999 18:38:03 +0200
Hello. I Have a Olicom Token-Ring PCI card working fine in kerner 2.0.35.
Olicom Token-Ring support in this kernel was provided downloaded from Olicom
web site making a
Patch in kernel source and "make" related utilities. I want to use this card
whit
2.2.6 kernel but in make config I still haven't an option to compile Olicom
TokenRing Adapter.
There is posible to compile this drivers like a module in 2.0.35 version and
after use this
in 2.2.6 kernel?. If this is not possible... How can I patch source kernel
in order to incorporate
Olicom Token-Ring support?
Regards in advance...
Daniel Ulfe from Spain
------------------------------
From: [EMAIL PROTECTED]
Subject: Re: ip forwarding problems
Date: Mon, 03 May 1999 19:12:56 GMT
In article <7gdjt5$ql7$[EMAIL PROTECTED]>,
[EMAIL PROTECTED] wrote:
Does anyone have any clue as to what the problem could be? I never received a
reply to my post and have pretty much used up every howto and faq I can find
on the subject. BTW, I am using the 2.0.35 kernel. ANY help would be greatly
appreciated.
> I am attempting to setup a ppp link between two lan segments. Obviously, I
> need to setup two gateways, one at each segment. According to the docs, I
> then need to ensure that ip forwarding is enable on both gateways so that
> each each machine on both segments can be contacted, rather than just the
> gateways.
>
> My problem is that I cannot contact any machine upstream of the ppp link
> besides the upstream gateways. Here is a rundown:
>
> lan a
> gateway.a 192.168.1.12
> netmask 255.255.255.0
>
> lan b
> gateway.b 192.168.2.1
> netmask 255.255.255.0
>
> I can get the ppp link up and running. The two gateway machines CAN speak with
> one another. However, those are the only two machines capable of using the
> link. Here is my netstat -r for gateway.b:
>
> Kernel IP routing table
> Destination Gateway Genmask Flags MSS Window irtt Iface
> 192.168.2.1 * 255.255.255.255 UH 552 0 0 ppp0
> 192.168.1.0 * 255.255.255.0 U 1500 0 0 eth0
> 192.168.2.0 192.168.2.1 255.255.255.0 UG 552 0 0 ppp0
> 127.0.0.0 * 255.0.0.0 U 3584 0 0 lo
> default 192.168.2.1 0.0.0.0 UG 552 0 0 ppp0
>
> and my route -n (just in case) for gateway.b:
> Destination Gateway Genmask Flags Metric Ref Use Iface
> 192.168.2.1 0.0.0.0 255.255.255.255 UH 0 0 1 ppp0
> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 13 eth0
> 192.168.2.0 192.168.2.1 255.255.255.0 UG 0 0 0 ppp0
> 127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 4 lo
> 0.0.0.0 192.168.2.1 0.0.0.0 UG 0 0 0 ppp0
>
> Checking to make sure the network link is correct, I use ifconfig:
>
> lo Link encap:Local Loopback
> inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0
> UP BROADCAST LOOPBACK RUNNING MTU:3584 Metric:1
> RX packets:54 errors:0 dropped:0 overruns:0
> TX packets:54 errors:0 dropped:0 overruns:0
>
> eth0 Link encap:Ethernet HWaddr 00:40:33:D0:C2:35
> inet addr:192.168.1.12 Bcast:192.168.1.255 Mask:255.255.255.0
> UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
> RX packets:2344 errors:0 dropped:0 overruns:0
> TX packets:1604 errors:0 dropped:0 overruns:0
> Interrupt:11 Base address:0x380
>
> ppp0 Link encap:Point-to-Point Protocol
> inet addr:192.168.1.12 P-t-P:192.168.2.1 Mask:255.255.255.0
> UP POINTOPOINT RUNNING MTU:552 Metric:1
> RX packets:365 errors:0 dropped:0 overruns:0
> TX packets:280 errors:0 dropped:0 overruns:0
>
> My gateway.a ifconfig is the same with the exception that ppp0 inet addr is
> 192.168.2.1 and the P-t-P is 192.168.1.12.
>
> I have ip forwarding enable to gateway.a. If, while on gateway.b, I type
>
> ping 192.168.1.2 (my nameserver on the local lan segment), ping will just sit
> there, waiting.. If I try to use traceroute, I get (more or less):
>
> traceroute 192.168.1.2
> 1 192.168.1.12
> 2 * * *
> 3 * * *
> 4 * *
>
> I take it 2-4 is just traceroute timing out. To enable ip forwarding on
> gateway.b, I enabled it in the kernel, recompiled and installed. I then ran
> lisa, the Caldera OpenLinux config utility, and enable ip forwarding under
> the network options. I did not edit any configuration files myself, since I
> haven't seen any docs explaining how to do so.
>
> Did I miss a step? How can I narrow down the problem? I ran netstat on my ppp
> link to the internet on another machine and got similar output.
>
> ---
> Dustin Puryear
> [EMAIL PROTECTED]
>
> -----------== Posted via Deja News, The Discussion Network ==----------
> http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
>
--
---
Dustin Puryear
[EMAIL PROTECTED]
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: [EMAIL PROTECTED] (Chip Transisto)
Subject: Re: samba not seen in Network Neighborhood
Date: Mon, 03 May 1999 23:22:44 GMT
Reply-To: Chip Transisto
I have installed linux several times. This procedure always works.
1. Edit /etc/smb.conf and change the following
MAKE SURE that the line "workgroup = MYGROUP' is CHANGED to be
"workgroup = (what ever you have in windows under workgroup in
settings-control panel-network-identification"
2. Change the line 'security = user' to security = share'
3. Uncomment (take out the semi-colon) the section that looks like
this:
;[public]
;path = /home/samba
;public = yes
;writable = yes
;printable = no
4. If you want your whole linux machine to show up in windows, change
the above "path = /home/samba" to 'path = /", otherwise, only the
/home/samba directory will be available to windows.
5. Shutdown and restart samba or reboot you linux machine and it will
be visible in windows network neighborhood.
On 3 May 1999 11:05:31 GMT, "Darin Beckett" <[EMAIL PROTECTED]>
wrote:
>A newbie with common problem.....
>
>I can ping either machine but I cannot access or see the linux(RH 5.0)
>server from
>Win 95 machine (I don't know how or if I can 'see' the win 95 machine from
>Linux). I am new to Linux and Networking and I'm a bit stuck. I get this
>message when i log onto windows: "No domain server was available to
>validate your password. You may not be able to gain access to some network
>resources".
>
>smbstaus output reads:
>
>samba version 1.9.17p4
>service uid gid pid machine
>
>no locked files
>
>I have not been able to set the domain up and the machine is
>[root@localhost /root]#.
>
>/etc/hosts output reads:
>127.0.0.1 localhost.localdomain
>192.168.1.254 harry.lightfoot.com *Linux box*
>192.168.1.2 mollie.lightfoot.com *win 95*
>
>I can telnet to the IP address 192.168.1.254 but not the domain
>'harry.lightfoot.com.
>
>smbclient //harry/root -U root output reads:
>
>added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
>unknown socket option tcp_nodelay
>server time 'etc'
>timezone 'etc'
>password:
>Domain=[WORKGROUP] OS=[UNIX] Server=[Samba 1.9.17p4]
>security=user
>smb:\>
>
>My guess, for what it's worth, is that the Domain/DNS need(s) to be set up
>somewhere.
>
>Any ideas?
>
>tia
>
>darin
------------------------------
From: [EMAIL PROTECTED]
Subject: Re: Valid IP addresses for home network
Date: Mon, 03 May 1999 22:34:06 GMT
In article <[EMAIL PROTECTED]>,
Jeff Lasman <[EMAIL PROTECTED]> wrote:
> The machine that connects to the Internet MUST have an Internet-routable
> IP address;
That's not necessarily true. *Some* machine in your upstream route must have
a routable IP address, but it need not be your local gateway. It's perfectly
reasonable [and, IMHO, preferable] for an ISP to use a private network rather
than DHCP or some other IP-wasting scheme.
Of course, that's just theoretical -- I'm sure the original poster's ISP uses
a more standard scheme, in which case your statement is correct. :)
> if you'll be dialing in this is usually supplied by your
> ISP. If you've got a permanent connection (xDSL, T1, etc.) then you'll
> get the information from your ISP.
Some xDSL providers use DHCP as well. Don't ask me why... I don't understand
it either. Why somebody would use dynamic IP assignment on a static
connection is beyond me.
> This computer and all the other computers on your network will also need
> a NIC card with non-routable addresses. I generally use something from
> <192.168.*.*>; this will allow you to have up to 65,536 devices on your
> network <smile>.
Actually, you can only connect 65,534 devices [don't forget about broadcast
and network addresses], one of which is probably your gateway, leaving "only"
65,533 IP addresses available for hosts.
Personally, I've never really understood why 192.168/16 is so much more
popular than 10/8. The latter gives you upwards of 16.7 _million_ IPs to
work with, and is just as easy to set up. Maybe it stems from the common
misconception that the /8 "wastes" IP addresses [on a private network such
considerations are pointless]. Or maybe it just stems from
ignorance/inertia. Who knows?
-Bill Clark
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: [EMAIL PROTECTED] (Stagga)
Subject: Re: Netscape "Looking for..."
Date: Mon, 03 May 1999 22:32:57 GMT
Reply-To: [EMAIL PROTECTED]
I tried nslookup, if I just type nslookup I don't get any type of
console, just a blank line, if I type www.netscape.com then hit enter
nothing happens. If I type nslookup www.netscape.com again, nothing
happens. So what does this mean and what can I do about it?
>> and not domain names? If so, how do I go about fixing it? I have my
>> DNS name servers set up.
>
>Maybe you don't have them setup. Try to resolve a name with the
>nslookup command. Go to a prompt, and type nslookup. Once in that,
>type www.netscape.com, or some well known name. If that returns with an
>IP, then we know DNS resolving is working, and the problem lies
>elsewhere.
>
>Seth
------------------------------
From: [EMAIL PROTECTED] (Darren Greer)
Subject: Re: DNS hosting
Date: Mon, 03 May 1999 23:31:59 GMT
All depends on what you consider a decent price. And it also depends
on how much control you want. Many places will charge like $50 a
month for just html support, and then charge you extra for cgi-bin
access, ftp/telnet access, etc etc.
I know of a company where I live that does such things, and I have
personal ties with them. So if you want their name....e-mail me
privately.
Darren
On Mon, 3 May 1999 19:16:04 -0400, Tom Jaeger
<[EMAIL PROTECTED]> wrote:
-->Does anyone know a place that will map a domain to a static ip for a
-->reasonable price.
-->thanks
-->
-->Tom Jaeger MCSE
-->windowsnetworking.com
-->[EMAIL PROTECTED]
-->
------------------------------
From: "Marten" <[EMAIL PROTECTED]>
Subject: DNS problems
Date: Mon, 3 May 1999 19:44:03 +1000
I have been unable to get my cache only DNS working again since
re-installing Redhat 5.2 on my machine. Can anyone give me some help please.
I have a telnet session of the relevent file attached.
This is what i get when try to use dns
[root@devilman nbk]# /usr/bin/nslookup
*** Can't find server name for address 127.0.0.1: No response from server
*** Can't find server name for address 139.134.5.51: No response from server
Regards Marten
INFO ON MY MACHINE
=================================
[root@devilman nbk]# cat /etc/host.conf
order hosts, bind
multi on
[root@devilman nbk]# cat /etc/resolv.conf
domain bigpond.com
search netIQ
nameserver 127.0.0.1
nameserver 139.134.5.51
nameserver 139.134.2.18
[root@devilman nbk]# cat /etc/named.conf
// generated by named-bootconf.pl
options {
directory "/var/named";
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
// query-source address * port 53;
};
//
// a caching only nameserver config
//
zone "." {
type hint;
file "root.hints";
};
zone "0.0.127.in-addr.arpa" {
type master;
file "pz/127.0.0";
};
[root@devilman nbk]# cat /etc/named.
named.boot named.conf
[root@devilman nbk]# cat /var/named/root.hints
. 6D IN NS G.ROOT-SERVERS.NET.
. 6D IN NS J.ROOT-SERVERS.NET.
. 6D IN NS K.ROOT-SERVERS.NET.
. 6D IN NS L.ROOT-SERVERS.NET.
. 6D IN NS M.ROOT-SERVERS.NET.
. 6D IN NS A.ROOT-SERVERS.NET.
. 6D IN NS H.ROOT-SERVERS.NET.
. 6D IN NS B.ROOT-SERVERS.NET.
. 6D IN NS C.ROOT-SERVERS.NET.
. 6D IN NS D.ROOT-SERVERS.NET.
. 6D IN NS E.ROOT-SERVERS.NET.
. 6D IN NS I.ROOT-SERVERS.NET.
. 6D IN NS F.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 5w6d16h IN A 192.112.36.4
J.ROOT-SERVERS.NET. 5w6d16h IN A 198.41.0.10
K.ROOT-SERVERS.NET. 5w6d16h IN A 193.0.14.129
L.ROOT-SERVERS.NET. 5w6d16h IN A 198.32.64.12
M.ROOT-SERVERS.NET. 5w6d16h IN A 202.12.27.33
A.ROOT-SERVERS.NET. 5w6d16h IN A 198.41.0.4
H.ROOT-SERVERS.NET. 5w6d16h IN A 128.63.2.53
B.ROOT-SERVERS.NET. 5w6d16h IN A 128.9.0.107
C.ROOT-SERVERS.NET. 5w6d16h IN A 192.33.4.12
D.ROOT-SERVERS.NET. 5w6d16h IN A 128.8.10.90
E.ROOT-SERVERS.NET. 5w6d16h IN A 192.203.230.10
I.ROOT-SERVERS.NET. 5w6d16h IN A 192.36.148.17
F.ROOT-SERVERS.NET. 5w6d16h IN A 192.5.5.241
[root@devilman nbk]# cat /var/named/pz/127.0.0
@ IN SOA ns.linux.bogus. hostmaster.linux.bogus. (
1 ; Serial
8H ; Refresh
2H ; Retry
1W ; Expire
1D) ; Minimum TTL
NS ns.linux.bogus.
1 PTR localhost.
[root@devilman nbk]# /usr/sbin/ndc restart
Name Server Restarted
[root@devilman nbk]# tail -f /var/log/messages
May 2 00:36:02 devilman named[1162]: NSTATS 925569362 925568645 A=4 PTR=4
May 2 00:36:02 devilman named[1162]: XSTATS 925569362 925568645 RR=0 RNXD=0
RFw
dR=0 RDupR=0 RFail=0 RFErr=0 RErr=0 RAXFR=0 RLame=0 ROpts=0 SSysQ=5 SAns=4
SFwdQ
=4 SDupQ=281 SErr=0 RQ=8 RIQ=0 RFwdQ=0 RDupQ=0 RTCP=0 SFwdR=0 SFail=0
SFErr=0 SN
aAns=0 SNXD=0
May 2 00:36:08 devilman named[1206]: starting. named 8.1.2 Thu Sep 24
02:47:08
EDT 1998 ^[EMAIL PROTECTED]:/usr/src/bs/BUILD/src/bin/named
May 2 00:36:08 devilman named[1206]: cache zone "" (IN) loaded (serial 0)
May 2 00:36:08 devilman named[1206]: master zone "0.0.127.in-addr.arpa"
(IN) lo
aded (serial 1)
May 2 00:36:08 devilman named[1206]: listening on [127.0.0.1].53 (lo)
May 2 00:36:08 devilman named[1206]: listening on [192.168.1.1].53 (eth0)
May 2 00:36:08 devilman named[1206]: listening on [139.134.196.247].53
(ppp0)
May 2 00:36:08 devilman named[1206]: Forwarding source address is
[0.0.0.0].109
9
May 2 00:36:08 devilman named[1207]: Ready to answer queries.
------------------------------
From: Andrew Congdon <[EMAIL PROTECTED]>
Subject: Re: Accessing Samba server across subnets
Date: Tue, 04 May 1999 09:32:32 +1000
> We have been testing Samba on our development site and I have to
> admit that I'm very impressed with its performance and have convinced
> upper management to implement Samba in our production sites but I need
> some info on how login into Samba across subnets ... I have been digging
> around but haven't found any good examples yet.
Take a look at the BROWSING docs in the Linux distribution. The key
is to set up WINS (if you haven't already). I'm using Samba with Domain
authentication across several subnets and it works very well. I found
nmblookup very helpful in debugging WINS. DHCP gives clients the WINS
server address.
> Kevin
--
Andrew
------------------------------
Reply-To: "Curt" <[EMAIL PROTECTED]>
From: "Curt" <[EMAIL PROTECTED]>
Subject: Re: TCP attack or wrapper problem?
Date: Mon, 3 May 1999 18:57:14 -0500
Looks like tcpd is doing its job.
> Apr 27 20:34:33 ns3 wu.ftpd[845]: refused connect from unknown
> May 1 05:08:59 ns3 wu.ftpd[7834]: refused connect from unknown
> May 1 05:08:59 ns3 ipop3d[7835]: refused connect from unknown
> May 1 05:08:59 ns3 in.telnetd[7836]: refused connect from unknown
> May 1 05:09:00 ns3 wu.ftpd[7837]: refused connect from unknown
> May 1 05:09:00 ns3 wu.ftpd[7838]: refused connect from unknown
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
