Linux-Networking Digest #68, Volume #11 Fri, 7 May 99 11:13:36 EDT
Contents:
Re: Routing and router redundancy (Mark)
Re: Routing non-routable address ("d. martin")
Re: Best Free X Windows Server for Win95/98 Box on Samba/Linux Network? (Greg Weeks)
Re: secure telnet through gateway (Greg Weeks)
Re: ipchains help please (Paul Rusty Russell)
Re: IPfwadm log question (Paul Rusty Russell)
Etherpower II 9432 BTX wont't work ([EMAIL PROTECTED])
Re: Ipchains and lots of interfaces ("Jan Johansson")
Re: pcanywhere equivalent for linux (Bernd Eckenfels)
Help with rdist - how to backup a computer
([EMAIL PROTECTED])
Re: how to restart ftp server? (Michael Balderas)
Re: Routing and router redundancy ("d. martin")
How do I change my FQDN in DNS? (Dan Poynor)
Linux newbie questions ("Georg Cantor")
Re: Help: How to set up a POP server on my linux (Michael Balderas)
Re: Is it possible for aol to run under linux? ("Peter L. Berghold")
SMBFS ("Josh Devins")
Re: serieller Remotezugriff auf DOS-Rechner? (Ingo Ciechowski)
Thank You All! Re: Serial cables or Cerial for breakfast... ("Brian")
Where to find large cables for networking? ("Vimal Parikh")
Re: Multitech ZPW modem (Lew Pitcher)
Re: Routing NTweb traffic to Apache on Linux w/private IP (Dave Brown)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Mark)
Subject: Re: Routing and router redundancy
Date: Fri, 07 May 1999 10:50:23 GMT
Thanks for the suggestions but I'm a little puzzled.
I thought the internet originally came from a distributed military network
which would re-route information if one node was down (i.e. hit by a bomb) and
so remove any weak links in the information chain.
I had assumed that this sort of system would be possible to implement in a
LAN. I must admit that in these days of raid, hot swappable drives and
redundant power supplies in servers that it seems odd that a single router
failure could effectively trash your network.
I must have got hold of the wrong end of the stick somewhere
Cheers
Mark Garner
------------------------------
From: "d. martin" <[EMAIL PROTECTED]>
Subject: Re: Routing non-routable address
Date: Fri, 7 May 1999 04:12:38 -0500
You must use ipfwadm, ipchains, or firewall to mask your internal addresses.
You can't have a thousands of hosts sending messages from the same ip
address. And yes 192.168.x.x is reserved for private networks and should not
be used on the Internet.
Gustavo Tavares wrote in message <7gtj6s$a12$[EMAIL PROTECTED]>...
>Bob Eckhardt wrote in message <[EMAIL PROTECTED]>...
>>Im trying to set up a linux box with to network cards, what I want to do
>>is allow linux to go ahead
>>and route the 192.168.XX non routable addresses to a routable address
>>network on the second interface.
>
>
>The 192.168.X.X is not a non routable address. This network is a invalid
>internet
>address, but it can routed normaly. Maybe you have problems with the router
>configuration but, definily it�s not a address problem.
>
>
>--
>[]�s
>
>from Goiania - Goias - Brasil
>Gustavo Roberto Silva Tavares
>
>-- to Contact
>me ---------------------------------------------------------------------
>| Web : <www.geocities.com/Area51/Corridor/2078>
>| Personal e-mail : <[EMAIL PROTECTED]>
>| Business e-mail : <[EMAIL PROTECTED]>
>| ICQ : 11024838
>---------------------------------------------------------------------------
-
>----------------
>Ask for my *new* PGP Public Key !
>
>
------------------------------
Reply-To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Greg Weeks)
Subject: Re: Best Free X Windows Server for Win95/98 Box on Samba/Linux Network?
Crossposted-To: comp.os.linux.x,alt.os.linux,comp.os.linux.misc,comp.os.linux.setup
Date: Fri, 7 May 1999 07:50:25 -0500
In article <7gtqmq$4q6$[EMAIL PROTECTED]>,
"rob" <[EMAIL PROTECTED]> writes:
> Good referral - so far VNC is fantastic! I can't believe just last
> week I was visiting this site for their open source CORBA
> server - who are these guys?
Part of AT&T now. Read the first page of their web site and it gives
the story.
Greg Weeks
--
http://durendal.tzo.com/greg/
------------------------------
Reply-To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED] (Greg Weeks)
Subject: Re: secure telnet through gateway
Date: Fri, 7 May 1999 07:55:27 -0500
In article <[EMAIL PROTECTED]>,
[EMAIL PROTECTED] writes:
>
> Can I restrict a user on a LAN-connected linux workstation (machine A)
> to telnetting to one other workstation (machine B). And nothing else
> within either machine A or the LAN.
>
>
> The objective is to give a remote user telnet access to machine B.
> Machine A is an internet gateway. Machine B has no direct internet
> connection. I have a secure way (ssh) to give the remote user command
> prompt on machine A (as if he were telneting to it). He thus becomes a
> user of machine A, under his own user account. From there he can run
> his telnet to machine B.
>
> But I don't want him to launch any other activities from machine A. He
> should be quarantined from machines on the LAN other than B. And he
> shouldn't run, or read, other stuff that's on A. Just telnet to B.
Set his login shell on machine A to be ssh with the correct options to
send him to machine B. Insure that ssh doesn't have an escape
mechanism enabled to keep him from getting a real shell on machine
A. If you're really paranoid configure ssh to not use login prompts
but to only allow public key/private key user verification.
Greg Weeks
--
http://durendal.tzo.com/greg/
------------------------------
Subject: Re: ipchains help please
From: Paul Rusty Russell <[EMAIL PROTECTED]>
Date: 07 May 1999 08:52:05 +0930
mist <[EMAIL PROTECTED]> writes:
> d. divine <[EMAIL PROTECTED]> scribed to us that -
> >But his second line is right on the nose and he receives a "no chains found"
> >message:
> >
> > ipchains -A forward -i ppp0 -j MASQ
> >
> >This command should work without problems, but the error reports their is no
> >"forward" chain.
> >
Hi mist,
I notice you're catching most of these; this note is FYI.
This is a mistake in the 1.3.8 HOWTO; 1.3.9 has been delayed, awaiting
the completion of the new masquerading HOWTO which it references. I
plan to release it next week come hell or high water though (ipchains
1.3.9 is also delayed, due to the quick reference sheet update being
two weeks away).
Keep up the good work,
Rusty.
--
Tridge, Raster, DaveM, Cort, maddog... Where will you be 9-11 July 1999?
http://www.linux.org.au/projects/calu
------------------------------
Subject: Re: IPfwadm log question
From: Paul Rusty Russell <[EMAIL PROTECTED]>
Date: 07 May 1999 09:00:04 +0930
[EMAIL PROTECTED] (David Kennedy) writes:
> Sorry for the intrusion, but do you know where I can find more
> information on the logs ipchans/ipfwadm builds?
The ipchains HOWTO? From 1.0.7-pre3:
The kernel logs this information looking like:
Packet log: input DENY eth0 PROTO=17 192.168.2.1:53 192.168.1.1:1025
L=34 S=0x00 I=18 F=0x0000 T=254
This log message is designed to be terse, and contain technical
information useful only to networking gurus, but it can be useful to
the rest of us. It breaks down like so:
1. `input' is the chain which contained the rule which matched the
packet, causing the log message.
2. `DENY' is what the rule said to do to the packet. If this is `-'
then the rule didn't effect the packet at all (an accounting rule).
3. `eth0' is the interface name. Because this was the input chain, it
means that the packet came in `eth0'.
4. `PROTO=17' means that the packet was protocol 17. A list of
protocol numbers is given in `/etc/protocols'. The most common are
1 (ICMP), 6 (TCP) and 17 (UDP).
5. `192.168.2.1' means that the packet's source IP address was
192.168.2.1.
6. `:53' means that the source port was port 53. Looking in
`/etc/services' shows that this is the `domain' port (ie. this is
probably an DNS reply). For UDP and TCP, this number is the source
port. For ICMP, it's the ICMP type. For others, it will be 65535.
7. `192.168.1.1' is the destination IP address.
8. `:1025' means that the destination port was 1025. For UDP and TCP,
this number is the destination port. For ICMP, it's the ICMP code.
For others, it will be 65535.
9. `L=34' means that packet was a total of 34 bytes long.
10.
`S=0x00' means the Type of Service field (divide by 4 to get the
Type of Service as used by ipchains).
11.
`I=18' is the IP ID.
12.
`F=0x0000' is the 16-bit fragment offset plus flags. A value
starting with `0x4' or `0x5' means that the Don't Fragment bit is
set. `0x2' or `0x3' means the `More Fragments' bit is set; expect
more fragments after this. The rest of the number is the offset of
this fragment, divided by 8.
13.
`T=254' is the Time To Live of the packet. One is subtracted from
this value for every hop, and it usually starts at 15 or 255.
Rusty.
--
Tridge, Raster, DaveM, Cort, maddog... Where will you be 9-11 July 1999?
http://www.linux.org.au/projects/calu
------------------------------
From: [EMAIL PROTECTED]
Subject: Etherpower II 9432 BTX wont't work
Date: Fri, 07 May 1999 12:49:22 GMT
...at least not always!
Hi,
currently I'm trying to get a 2xPentiumII machine (P2B-DS motherboard) running
with a SMC 9432BTX network card (OS:Linux 2.2.2).
Everythings seems to be set up all right (newest driver epic106.c, routes,
bios, irqs, network card parameters...), However, sometimes it works
perfectly, but most of the times it doesn't! No error messages. Seems like
the driver is really still experimental? Did anyone else had similar problems
with this card and Linux?
Greetings
Christian
============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/ Search, Read, Discuss, or Start Your Own
------------------------------
From: "Jan Johansson" <[EMAIL PROTECTED]>
Subject: Re: Ipchains and lots of interfaces
Date: Fri, 7 May 1999 13:01:09 +0200
>Use `-i eth0'.
Now i am confused :) Hmm.. so what would be a rule to masquerade everything
except local traffic?
------------------------------
From: Bernd Eckenfels <[EMAIL PROTECTED]>
Subject: Re: pcanywhere equivalent for linux
Date: 6 May 1999 21:03:06 GMT
[EMAIL PROTECTED] wrote:
> Does anyone know of a s/w equivalent of pcanywhere for linux? I'd *really*
> like control my NT workstations without having to reboot into win 95 (barf,
> hurl) each time i want to do this. Any pointers greatly appreciated.
VNC
Greetings
Bernd
------------------------------
From: [EMAIL PROTECTED]
Subject: Help with rdist - how to backup a computer
Date: 06 May 1999 23:09:25 +0200
Reply-To: [EMAIL PROTECTED]
Hi,
I want to mirror or backup the filesystems from computer 1 to another
computer 2.
/boot, /bin, /usr and so on.
user and time of the files should be preserved.
I tried rdist, but it seems, that I have to make a .rhosts for root, so
that root@1 can set up an rsh-command as root@2 -- and linux just doesn't
allow me that.
Can anyone give me some hints for a rdist-configuration or a pointer for
another program for mirroring?
TIA,
Andre Deparade
------------------------------
From: mike*no*spam*@yourhelpdesk.com (Michael Balderas)
Subject: Re: how to restart ftp server?
Date: Thu, 06 May 1999 21:08:01 GMT
what ftp daemon are you running?
On Thu, 06 May 1999 13:47:16 -0400, Lei Zhang <[EMAIL PROTECTED]> wrote:
>Hey,
>
>I used ftpshut to shutdown my ftp server after I changed the ftpaccess
>file, now I don't know how to start it again.
>I reboot the machine and the ftp server did not start neither! I am
>using RH5.2, please help!
>
>-- luke
>
>Email: [EMAIL PROTECTED]
------------------------------
From: "d. martin" <[EMAIL PROTECTED]>
Subject: Re: Routing and router redundancy
Date: Fri, 7 May 1999 05:59:23 -0500
Agreed. If you want to route - route the slowest network segment. With
todays prices on 100mb hubs and switches with support for vlans it is
riduculous to route in any normal sized network. Using a computer as a
router provides and expensive and slow shared link (a single connection on
the Linux box) . Not even router companies try to sell routers for this kind
of environment anymore. Any growth in users or bandwidth demands and you
have to scrap the router (linux box) and put in the switch anyway. When you
can buy cheap 10/100mb hubs at about $15 a port with a 100mb switch to the
backbone thrown in for free, it's hard to justify spending more to do less.
Curt wrote in message ...
>While linux is quite reliable, you might consider the use of switches
>instead of hubs. A switch would probably be more reliable and acheive your
>objective. Unless you have more than 253 hosts.
>
>Mark <[EMAIL PROTECTED]> wrote in message
>news:[EMAIL PROTECTED]...
>> I currently have a 10Mbs network and I am considering moving some of the
>> systems that generate the heaviest traffic to a 100Mbs segment.
>>
>> I am considering doing this using Linux and ip forwarding to route
packets
>> appropriately between the two segments.
>>
>> i.e.
>> eth0 - 10Mbs segment - 192.168.255.0
>> eth1 - 100Mbs segment - 192.168.254.0
>>
>> However, in such a setup the router has to be extremely reliable, if the
>> router should fail (hardware failure, naturally) then the two subnetworks
>> would become invisible to each other, this is not an acceptable solution.
>>
>> How could I implement a secondary (backup) router into such a scheme to
>allow
>> some redundancy and how would I set up and configure such a system.
>>
>> Thanks for any suggestions
>>
>>
>>
>> Mark Garner
>
>
------------------------------
From: [EMAIL PROTECTED] (Dan Poynor)
Subject: How do I change my FQDN in DNS?
Date: Thu, 06 May 1999 14:09:32 -0700
How do I change the fully qualified name in DNS for my Linux server? I'm
using my co-located servers ISP as the name server and they say I need to
change this on my server some how.
Previously I had hired someone to setup my server initially while I'm
learning, but now need to change it and can't figure this out through the
man pages or my books. I edited /etc/hosts but that doesn't seem to change
my fqdn.
TIA,
DAN
------------------------------
From: "Georg Cantor" <[EMAIL PROTECTED]>
Subject: Linux newbie questions
Date: Thu, 6 May 1999 22:08:53 +0100
Reply-To: "Georg Cantor" <[EMAIL PROTECTED]>
I have a number of questions to ask about using and setting up Linux.
I have just installed Linux and have got samba working with it. However
printing the man files to see the command options is proving difficult.
1. Is it possible to setup XConfigurator for multiple monitors and switch
between them from the command line?
2. I am looking a Windows 9X/NT utility for viewing and printing man files.
3. Linux command for printing man files
4. Using X Windows and Linux to print to a Windows 9X/NT printer
5. Setting up telnet so I can link to server from Windows workstation.
Is that too many? :)
------------------------------
From: mike*no*spam*@yourhelpdesk.com (Michael Balderas)
Subject: Re: Help: How to set up a POP server on my linux
Date: Thu, 06 May 1999 21:10:29 GMT
you could also install Qpopper (from the makers of Eudora)
ftp://ftp.qualcomm.com/eudora/servers/unix/popper/
It will interface with your system nicely and even allows support for
shadow-passwords. I run it fine on a mail server answering for 300
email account and 3 different domains.
Mike
On Thu, 06 May 1999 19:06:00 GMT, [EMAIL PROTECTED] ()
wrote:
>On Thu, 06 May 1999 18:30:07 GMT, Peter <[EMAIL PROTECTED]> wrote:
>>Help: How to set up a POP server on my linux
>>
>>All help greatly appreciated
>>
>
>Install the "imap" package on a recent version of Linux. Consider installing
>"sslwrap" available from various web sites near you in order to encrypt the
>transmission of passwords for Netscape and other more sophisticated clients.
>
>And consider using IMAP instead of POP, for various reasons.
------------------------------
From: "Peter L. Berghold" <[EMAIL PROTECTED]>
Subject: Re: Is it possible for aol to run under linux?
Date: Thu, 06 May 1999 21:17:23 GMT
SMinor wrote:
> nt
Why would you want to do such a thing... get a real ISP....
--
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
Peter L. Berghold [EMAIL PROTECTED]
"Linux renders ships http://www.berghold.net
NT renders ships useless...." ICQ# 11455958
------------------------------
From: "Josh Devins" <[EMAIL PROTECTED]>
Subject: SMBFS
Date: Fri, 07 May 1999 06:54:30 GMT
I've seen this post before, but never any replies with a conclusion or
fix...
I have Samba up and running perfectly (as far as I know at least), but want
to run smbfs. When I run:
> smbfs //PC_Name/share /mnt/mounted_drive
I get an error:
mount error: No such device
Please look at smbmount's manual page for possible reasons
So, naturally I checked the man pages and found nothing on the subject. Any
wise Linux gurus with advice?!
Thanks,
Josh Devins
===========================
Simon Fraser University
Computer Science
------------------------------
From: [EMAIL PROTECTED] (Ingo Ciechowski)
Crossposted-To: de.comp.os.msdos,de.comm.software.misc,de.comp.os.unix.networking
Subject: Re: serieller Remotezugriff auf DOS-Rechner?
Date: Fri, 07 May 1999 13:09:32 +0200
In article <[EMAIL PROTECTED]>,
[EMAIL PROTECTED] (Gerd Roethig) wrote:
> Das gleiche Problem bekommt wohl erst mal jeder, der diesen (gelinde
> gesagt, etwas krausen) MS-TCP/IP-Stack installiert. Leider scheint es
> keine Alternativen dazu zu geben, deshalb habe ich zum Bleistift einen
> halben Tag herumgedoktert, um das Ganze in den hohen Speicher zu
> bekommen.
Alle Achtung!
Ich mu�te zwar die zugewiesenen Speicherbl�che beim Aufruf von EMM386.EXE
etwas �ndern und an zwei Stellen in das jeweils andere Segment laden, aber
jetzt klappts! ;-))
Letztlich habe ich mich dazu entschieden, ein Verzeichnis von Linux aus zu
mounten und dort meine Logfiles abzulegen. So habe ich nat�rlich
permanenten Zugriff auf alles.
Tausend Dank!!!
Ingo
[EMAIL PROTECTED]
------------------------------
From: "Brian" <[EMAIL PROTECTED]>
Crossposted-To:
alt.os.linux.slackware,alt.os.linux.turbolinux,comp.infosystems.www.servers.unix,comp.os.linux.hardware,comp.os.linux.questions
Subject: Thank You All! Re: Serial cables or Cerial for breakfast...
Date: Fri, 07 May 1999 13:27:03 GMT
Thanks for the feedback. Am gonna play with different cables
and perhaps a break=out box.
Any thoughts on upgrading the memory on the old PM-11?
Any thoughts on using the PM-11?
Best regards,
Brian
Brian wrote in message ...
>Hi Everyone:
>Here I am with my bowl of O's & milk and I'm thinking, "I
>sure would like to get that Livingston PM-11 running".
>Here is my question:
>How do I connect from a Linux box DB25 male serial port to
>my Livingston PM-11 DB25 female serial port to start
setting
>it up.
>Do I use a:
>DB25 pin M-F serial cable,
>DB25 pin M-F modem cable,
>DB25 pin M-F null-modem cable,
>None of the above?
>The PM-11 appears to boot up, (can hear floppy flopping
>about), but I have no way of even beginning to talk to it
>until I can login and I can't do that until I figure out
HOW
>to talk to it.
>This is by no means an emergency, I just happened to pick
up
>this historical piece of gear on eBay for a song and I
would
>like to get it attached to my home tcp/ip network and play.
>I have read most everything about the PM-11 (PM-2 manual)
>including the upgrade stuff so I am on the lookout for the
>additional DRAM chips (can anybody help with that) that
will
>allow me to upgrade the software but that comes next!
>Thanks everyone.
>Best regards,
>Brian
------------------------------
From: "Vimal Parikh" <[EMAIL PROTECTED]>
Subject: Where to find large cables for networking?
Date: Fri, 7 May 1999 09:29:17 -0400
Hi. I need large cables (either COAX or Crossover) like 150 ft long.
Will I have problems with my network ( only 2 computers) if I have
cables of this length? I have to connect a computer that's in my
basement to one that's on the 2nd floor in my bedroom. Anyone wanna
suggest a better way to do this. Please don't suggest radio or
wireless as these are too expensive for my small networking purposes.
TIA
------------------------------
From: [EMAIL PROTECTED] (Lew Pitcher)
Subject: Re: Multitech ZPW modem
Reply-To: [EMAIL PROTECTED]
Date: Mon, 03 May 1999 15:08:48 GMT
On Mon, 03 May 1999 22:35:38 +0800, sm <[EMAIL PROTECTED]> wrote:
>I'm trying to get a PPP connection through a Multitech modem MT5634ZPW
>supplied with an HP Pavilion 8215. At the installation, Linux RedHat 5.2
>don't recognize it. Setserial shows that the UART is unkown. If I force
>it to 16550A it doesn't help at the initialization with Minicom (no OK
>return) and I can't have the line before dialing.
>Thanks for some help.
Sorry, but you're SOL.
According to the Multitech site (http://www.multitech.com/)
the MT5634ZPW is a "unique controllerless design" which
"uses your personal computer's processing power to handle many
communication functions normally done by the modem" (see
http://www.multitech.com/support/manuals/82063901.pdf).
What you've got is generically called a "WinModem", and will only work
with the proper software. At this time, there is no manufacturer of
WinModems that have either ported their driver software to Linux or released
the specifications to permit others to craft a driver. What you've got is
so much sand, and (unless you collect useless pieces of hardware) should be
scrapped and replaced with a real modem.
Sorry... :-(
Lew Pitcher
System Consultant, Integration Solutions Architecture
Toronto Dominion Bank
([EMAIL PROTECTED])
(Opinions expressed are my own, not my employer's.)
------------------------------
From: [EMAIL PROTECTED] (Dave Brown)
Subject: Re: Routing NTweb traffic to Apache on Linux w/private IP
Date: Fri, 7 May 1999 08:59:52 -0600
Thanks, it sounds like SyGate does exactly what I'm in the process of
writing. I'm writing a little app that will take all traffic coming in on
port 80 on a specific IP address and forwarding it to the Linux box.
Thanks!
In article <FC66AFA3AAC51D12.08223B885A6B46BC.F56921DD3A1BFDF5@library-
proxy.airnews.net>, mike*no*spam*@yourhelpdesk.com says...
> You could also do this with Sygate, just modifying the apprules file
> to point all inbound traffic destined to port 80 at the internal i.p.
> of the linux box.
>
> Mike
>
>
> On Fri, 7 May 1999 04:18:04 -0500, "d. martin" <[EMAIL PROTECTED]>
> wrote:
>
> >Options:
> >Put Proxy server on the NT Box. It will do the address translation and can
> >forward web requests to appropriate server. A proxy client does not have to
> >exist on the Apache box. NT proxy does this and it's probably offered on
> >other shareware or cheap proxies (if they exit?)
> >
> >Install Apache on the NT Box and use ReverseProxy, ProxyPass options to
> >route traffic. This will also mask the internal address and it costs
> >nothing.
> >
> >Dave Brown wrote in message ...
> >>I am trying to all requests from my NT box to my Linux Apache web server.
> >>
> >>Here's the scenario:
> >>
> >>My NT box is dialed into my ISP so I have a temporary IP address that I
> >>can use for web serving from my NT box. This is just for testing a
> >>development web site so I don't care that it's not a static IP address. I
> >>have all of my web based html, servlets, etc.. on my Linux box running
> >>Apache. I would like to route the calls coming to my NT box to the apache
> >>server.
> >>
> >>I tried going into IIS and forwarding all traffic to my linux box for a
> >>particular site, but that only works here since it a private network.
> >>Since the linux box has a 192.168.xxx.xxx IP address the real world
> >>doesn't know how to route to it.
> >>
> >>Any ideas???
> >>
> >>Thanks,
> >>
> >>Dave Brown
> >>
> >>
> >
>
>
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
