Linux-Networking Digest #150, Volume #11         Fri, 14 May 99 06:13:42 EDT

Contents:
  Re: New ISP in deep and dire with Redhat 5.2 -- NEED HELP ("Curt")
  Re: Bridge or Routing ? (Leslie Mikesell)
  Re: configuracion de red (Ramon Fernandez)
  Re: @HOME Cable Service and Linux ([EMAIL PROTECTED])
  Re: Help me...I've been hacked! (Bill Unruh)
  Re: Best Nework Cards ([EMAIL PROTECTED])
  Multicasting and Multiple NICs... ("Hermin Lim")
  Re: trouble pinging ([EMAIL PROTECTED])
  Re: pap authentication failure Help.. (Bill Unruh)
  Linux box as a NetWare client ("Takashi Masuda")
  Re: Linux box as a NetWare client (Jamie)
  Strange NFS problem (Fung Wai Keung)
  Re: DNS? ([EMAIL PROTECTED])
  Re: NO CARRIER causes PPP to abort (David Guyon Martin)
  httpd cannot find server name error??? (Robin Jackson)
  Setup Apache 1.3.3 with RedHat 5.2 [kernel 2.0.36] (Yoke Meng Kim)
  10000 connections in quick succession causes drops (Jon Skeet)
  Re: Help me...I've been hacked! ([EMAIL PROTECTED])
  xdm/gdm/wtf (Darrin Rothe)
  Re: Is this possible? (VPN+IPMASQ) (Walter Hunt)
  Re: 10Base2 Connector/Cable Quality ("Josh")

----------------------------------------------------------------------------

Reply-To: "Curt" <[EMAIL PROTECTED]>
From: "Curt" <[EMAIL PROTECTED]>
Subject: Re: New ISP in deep and dire with Redhat 5.2 -- NEED HELP
Date: Tue, 11 May 1999 17:05:23 -0500

Look for a LINUX consultant near you:
http://metalab.unc.edu/LDP/HOWTO/Consultants-HOWTO.html
I doubt they cost $2000/day.

Hannu <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> You might consider something like this:
> 1.) get fid of the 3Com cards, replace them with Intel Pro 10/100
> cards, if your Linux boxes aren't really doing anything, reinstall
> them so you get the correct driver detected
>
> 2.) Make sure your linux boxes can ping each by the IP address
> (number)
>
> 3.) set up DNS for your domain. Linux comes with BIND, and you might
> want to use O'Reilly's DNS and BIND as a guide to get the domain
> going.
>
> 4.) Now, consider setting up sendmail, radius etc. If you are
> relatively new to Unix, don't start hacking sendmail. It is very
> difficult to get right.  Radius is not that bad, and your PortMaster
> comes with software and manuals.
>
> 5.) Obviously your setup is meant to produce revenue, so paying 2-4
> 000 dollars to get the whole thing going isn't that bad. The ISP setup
> is full of little tricks based on experinece which is impossible to
> aqcuire if you don't have a lot of time.
>
> Good luck!
> Hannu
>
> On Sun, 4 Apr 1999 20:32:23 -0500, "Gerald Barker" <[EMAIL PROTECTED]>
> wrote:
>
> >We have a T-1 connection to the internet, a GTX router, and a
> >Livingston/Lucent Portmaster 3 with 48 internal modems. We are waiting
for
> >two PRI's, but the T-1 is up. The router and the Portmaster are
configured
> >and can ping UUNET's authentication servers and each other. We have two
> >Redhat 5.2 machines set up with 3com cards which cannot see or be seen.
We
> >are newbies in awful deep, but fighting the need to go back to NT, which
is
> >what we know. Advise was to run Linux and we are trying to do that--we
want
> >to do that very much.  We have configured and reconfigured until we are
wore
> >out. Probably no big deal for the Linux pros out there.  We thought we
would
> >be able to find plenty of help, but the help is too often found with to
many
> >"in-betweens" left out. We need to get this system up and running. If
anyone
> >can help we would greatly appreciate the help. We have looked into hiring
> >UUNET consultants, but $2000.00 a day is awful steep.
> >--
> >Gerald Barker
> >www.aaacs.com
> >502-443-9573/9590/9578
> >3244 Hovekamp Road
> >Paducah, KY 42003-0451
> >[EMAIL PROTECTED]
> >[EMAIL PROTECTED]
> >[EMAIL PROTECTED]
> >[EMAIL PROTECTED]
> >[EMAIL PROTECTED]
> >
> >
> >
> >
>



------------------------------

From: [EMAIL PROTECTED] (Leslie Mikesell)
Subject: Re: Bridge or Routing ?
Date: 14 May 1999 00:17:37 -0500

In article <[EMAIL PROTECTED]>,
Gunther Grelczak  <[EMAIL PROTECTED]> wrote:
>Hello,
>
>I have 2 small Networks ( all Winboxes ) and they are connected
>with a Linuxbox ( 2 Ethernet-cards ) like this :
>
>Subnet 1( 2 PC's Win ) <==> ( NIC1 ) LINUX (NIC2) <==>Subnet 2 ( 5 PC's
>Win)
>
>TCP/IP Communication is OK. The Apache on the Linux is reachable
>from both sides, but I can`t see the Windows-shares on Subnet1 from
>Subnet2
>or on Subnet2 from Subnet1.
>
>I know that NetBIOS and SMB are not routable protocols, but I heard
>about a
>bridge configuration which can solve my problem. Who knows anything
>about this ?

If you have netbios-over-tcp as one of the windows protocols (the
default on win95 and up) you can actually connect across routers
even though the network neighborhood browsing doesn't work.  If
you use the find/computer choice with a dns name or ip number,
or a command line 'NET USE...' to connect you can hook up the
shares.  For a small net like this you can just edit the LMHOSTS
file on each machine for name resolution.  However since the linux
box can see both nets you might make everything work by running
samba configured to be the local master browser.  Read the
comments in /etc/smb.conf for the details.

  Les Mikesell
   [EMAIL PROTECTED]

------------------------------

From: Ramon Fernandez <[EMAIL PROTECTED]>
Crossposted-To: es.comp.os.linux
Subject: Re: configuracion de red
Date: 14 May 1999 09:01:22 +0100

In es.comp.os.linux mary <[EMAIL PROTECTED]> wrote:
: estoy intentando configurar mi ordenador portatil con linux para entrar en
: el ordenador de un amigo mediante tarjetas de red, el tiene la suya y yo la
: mia PCMCIA, pero nos hemos quedado estancados porque no hemos conseguido
: realizar ningun tipo dee conexion , hemos mirado how-to�s, man pages,
: articulos de revistas pero nada, no hay manera, el caso el que segun todos
: estos documentos la cosa parece facil pero no lo hemos conseguido, ni con
: el netcfg, ni con el yast de Suse de mi portatil, ni modificando a mano los
: archivos de configuracion de una red: etc/hosts, route.conf, network,
: netgroup, etc...
: agradeceria cualquier tipo de sugerencia que nos ponga en el camino de
: conectar nuestros ordenadores. gracias

  Supongo que si haces un cat /proc/devices te aparecer'a una l'inea
  donde ponga "ttyp", porque si no... hala, a recompilar :)

  De todas formas, con la informaci'on que das tampoco se puede
  hacer mucho :( Has probado el ifconfig?  Puedes hacer ping a tu
  m'aquina? Sabes c'omo va lo del subnetting y las m'ascaras? Se ha
  comido tu gato el cable de red?? :)

-- 
Ram�n Fern�ndez Marina  <[EMAIL PROTECTED]>
IEEE Student Member


------------------------------

From: [EMAIL PROTECTED]
Subject: Re: @HOME Cable Service and Linux
Date: Fri, 14 May 1999 06:54:09 GMT

Hi Scott

@ home curently uses static ip thru a dhcp server & the @ home backbone
is firewalled but not your ip blocks & servers that are for personal use
can be set up  not "commerical" ie: as long as your not taking up
bandwith & impeading the network they don't have a problem with it
general preformance is good unless you in a problematic area

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] wrote:
> Hi
>
> Im curious if anyone has had any experience using linux with the @HOME
> cable modem service (www.home.com).
>
> I know they do not support it, but is it possible to connect anyway
and
> do they fire wall? static or dynamic ip? Is the general performance of
> the line good or bad?
>
> I'd plan to run a web server and maybe a mail server over it (for
> completely personal use of course). Anyone have any experience with
them?
>
> Thanx in Advance
>
> Scott
>

--
"At The End Of The Storm Is A Golden Sky" -- Carousel
Dave_D_Man -- http://home.att.net/~dayft
[EMAIL PROTECTED]


--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---

------------------------------

From: [EMAIL PROTECTED] (Bill Unruh)
Subject: Re: Help me...I've been hacked!
Date: 14 May 1999 07:05:01 GMT

In <7hfqa0$511$[EMAIL PROTECTED]> [EMAIL PROTECTED] writes:

>So can anyone explain all this in a reply in NEWBIE terms what this is
>all about. I know how to use telnet though and that i have a shadow
>password file, but that must be about everything i know about security
>:-(

>I would like to know if people can hack my linuxbox that easy if i dont
>shut any ports after i installed Redhat6.0

Yes. Redhat tends to install in a rather insecure manner. Thus there are
a numberof holes that need to be shut. 

First you have to decide what services you want your machine to offer
outsiders, and shut down everything that is not needed.
Eg if you do not have another machine mounting via NFS from yours, shut
down the nfs services.

In the files /etc/rc.d/rc?.d, change all the initial S to K for the
services you do not need
eg nfs, smb (Samba) sendmail (getting incoming mail),http, rusersd,
rwhod, named, 
Then go and edit /etc/inetd.conf. Put a # at the beginning of theline of
each service you do not want to offer. (especially pop,imap, rexecd)

For the remaining services decide if you want to offer them to the world
(eg ftp) or just a limited set of computers.
In /etc/hosts.deny put 
ALL:ALL
in /etc/hosts.allow, list the services youwant to offer eg
in.telnetd in.ftpd:ALL
in.fingerd: 137.33.44.
portmap:192.168.1.

Finally, go toyour distribution distributer.(eg www.redhat.com ->Support
-> updates) and download and install all of the security patches.
Remember todo this at least once a month.

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Best Nework Cards
Date: Fri, 14 May 1999 06:11:41 GMT

In article <[EMAIL PROTECTED]>,
  mike <[EMAIL PROTECTED]> wrote:
> I would like to know what network cards people have
> had the least problems with so that one could have
> the best chance of getting one installed and not have to
> try to return it and try another?
>
>                                         Mike
>
>

i used very cheap ne2000-compatibles ( no-name ) and 3c509 so far and
never had any problems with recognition at boot-up or whatever - so i
can recommend these.


--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---

------------------------------

From: "Hermin Lim" <[EMAIL PROTECTED]>
Subject: Multicasting and Multiple NICs...
Date: 14 May 1999 07:07:07 GMT

I have two NIC, which are connected to each subnet.

Route table shows like this: (only example..)

Destination    Gateway       Genmask       Flags .... Iface
203.100.100.0  0.0.0.0       255.255.255.0 U     .... eth0
128.134.200.0  0.0.0.0       255.255.255.0 U     .... eth1
127.0.0.0      0.0.0.0       255.0.0.0     U     .... lo
0.0.0.0        128.134.200.1 0.0.0.0       UG    .... eth1

I want to send multicasting packets.
So I made the sample program, which sends the packet to the
destination address of '225.1.2.3'(multicasting address).

Other parts of the program are correct.

But, binding was problem.

I traced the packets using tcpdump.
When I traced the packet through eth0, I could't find anything.
But, through eth1, I found the packets.

So to speak, the packets went out through eth1.

I thought that this is because I didn't call 'bind()'.
So I called 'bind()' to bind the socket to the eth0's IP-address.
But the result was same.......

I guess that by routing policy, '225.1.2.3' isn't caught
by the eth0's subnet('203.100.100.0').
And only the '0.0.0.0' seems appropriate for the destination address of
'225.1.2.3'.
( I knew that routing policy disregards real IP-address of each NIC
    and searchs only routing table.)

Routing policy didn't know the multicasting?

I want to send the multicasting packet through eth0 or
through both eth0 and eth1, with not modifing the route table.

Is there any solution?

good day...



------------------------------

From: [EMAIL PROTECTED]
Subject: Re: trouble pinging
Date: Fri, 14 May 1999 06:20:06 GMT

In article <7hg3l1$[EMAIL PROTECTED]>,
  "Vampa" <[EMAIL PROTECTED]> wrote:
> I have two computers on a small home network: one is running windows
95 and
> the other Debian linux v2.1.  Both have D-link NICS(the windows is a
DE-528,
> the linux is DE-220).  I have both of the cards configured correctly
and the
> linux box uses a ne-2000 compatible isa driver.  both computers can
ping
> themselves and eth0 does show up when I run ifconfig. The network also
shows
> up correctly in the routing table. But when i ping the linux computer
from
> windows 95 and vice versa, it times out.  if i run tcpdump on linux
and then
> ping it from windows 95 it shows that the linux box is receving the
request

this tells us so far  that the physical connection is ok

> and that it is sending a return packet, but the windows 95 ping still
times
> out.  I have even tried running a win95 packet sniffer and found the
same
> results
i.e., the win95box receives the request and gives out an answer, but the
linux-ping still times out, is that right?

when I ping from linux.
> What could I be doing wrong?
>
it would help to know about
a) your configuration
( ip-adresses, subnet-mask from both machines)
and b)
do you ping with names and adresses
( like ping vvv.www.xxx.yyy AND ping linux.box where vvv.www.xxx.yyy is
the adress of the computer with the name linux.box )



> Thanks in advance,
> Kevin Riederer
>
>


--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---

------------------------------

From: [EMAIL PROTECTED] (Bill Unruh)
Subject: Re: pap authentication failure Help..
Date: 14 May 1999 07:15:38 GMT

In <[EMAIL PROTECTED]> "Gene Heskett" <[EMAIL PROTECTED]> writes:

] BU> It sounds to me like you have IRQ problems or that you are
] BU> running your modem at the default speed of 9600 bd. If you have
] BU> no, or an unsupported speed in your configuration, it will not
] BU> tell y ou, it will simply use 9600 BD.

]Well. goto network config, dbl-click on ppp0, and wade thru the options
]to the interface speed, which is set at 115,200.  Very often, a download
]will start out at 5000 cps or better, but will quickly degrade to the
]sub 1000 cps area, and this is at 2 am local time!

It could be that you have a noisy telephone line, and your modem is
downgrading itself progressively. do you get weird pauses in the flow?
If you tell the modem not to kill the speaker after a connect, so it
keeps being noisy throughout the connection, do you hear it suddenly
start up with the same initial training sequence again? ( a working
modem is just a constant shshshshshshs. The training sessionis when you
hear all those whistles beeps and gurgles. Occuiring during the
connection means the modem has decided the line is bad and it needs to
figure out what the best speed for line conition is necessary.

------------------------------

From: "Takashi Masuda" <[EMAIL PROTECTED]>
Subject: Linux box as a NetWare client
Date: Fri, 14 May 1999 16:04:25 +0900

  Does anybody help me?
  I want to connect my linux box to a NetWare file server. I read IPX-HOWTO
and did the following things. But my box can't recognise the NetWare server.

1) Download ncpfs-2.0.11.tgz and make the ncpfs software.
2) Rebuild the kernel which version is 2.2.7. I chose following options.
    Networking options --->
        <M> The IPX protocol
    Filesystems --->
        <M> NCP filesystem support
3) Reboot.
4) Type the following command.
    # ipx_configure --auto_interface=on --auto_primary=on
    # slist
   I couldn't see the NetWare serever.

  What should I do? Thanks in advance

Takashi Masuda
K.K.Rocky.



------------------------------

From: Jamie <[EMAIL PROTECTED]>
Subject: Re: Linux box as a NetWare client
Date: Fri, 14 May 1999 00:29:53 -0700

You might want to check the caldera linux distributions, I have Open Linux Lite
here, and it even had Netware client softwrae on it.

Jamie

Takashi Masuda wrote:

>   Does anybody help me?
>   I want to connect my linux box to a NetWare file server. I read IPX-HOWTO
> and did the following things. But my box can't recognise the NetWare server.
>
> 1) Download ncpfs-2.0.11.tgz and make the ncpfs software.
> 2) Rebuild the kernel which version is 2.2.7. I chose following options.
>     Networking options --->
>         <M> The IPX protocol
>     Filesystems --->
>         <M> NCP filesystem support
> 3) Reboot.
> 4) Type the following command.
>     # ipx_configure --auto_interface=on --auto_primary=on
>     # slist
>    I couldn't see the NetWare serever.
>
>   What should I do? Thanks in advance
>
> Takashi Masuda
> K.K.Rocky.


------------------------------

From: [EMAIL PROTECTED] (Fung Wai Keung)
Subject: Strange NFS problem
Date: 14 May 1999 08:05:51 GMT

Hi all,

        My system setup is bit complex.  I have 3 PCs using RedHat Linux.
2 of them are installed in a mobile robot and they communicate to outside
world via a pair of wireless bridges.  The 2 PCs in robot shares 1
wireless bridge for communication.  The other PC are stationary and I set
it as NFS server to serve filesystems to the 2 "mobile" PCs.  The mobile
PCs are running RedHat 5.0 and 4.2 respectively.  The stationary PC is
running RedHat 4.2.  This setup works fine in the past.

        Recently, we have moved to a new building, with the mobile robot.
I setup the PCs as in my old building and didn't change any settings in
the computers.  However, one of the "mobile" PC frequently shows the "NFS
not responding" error in my syslog.  It seems that there are frequent
sudden lost in NFS linkages and the linkages are restored nearly
immediately.

                ........
May 14 11:08:41 maemb1 kernel: NFS server maemb3 not responding, still
trying.  
May 14 11:08:41 maemb1 kernel: NFS server maemb3 OK.
May 14 11:08:51 maemb1 kernel: NFS server maemb3 not responding, still
trying.
May 14 11:08:51 maemb1 kernel: NFS server maemb3 OK.
May 14 11:11:53 maemb1 kernel: NFS server maemb3 not responding, still
trying.  
May 14 11:11:53 maemb1 kernel: NFS server maemb3 OK.
May 14 11:14:11 maemb1 kernel: NFS server maemb3 not responding, still
trying.
May 14 11:14:11 maemb1 kernel: NFS server maemb3 OK.
May 14 11:16:38 maemb1 kernel: NFS server maemb3 not responding, still
trying.  
May 14 11:16:38 maemb1 kernel: NFS server maemb3 OK.
                ................

        The performance of that "NFS not responding" PC drops drastically.
It's strange that only 1 "mobile" PC has this problem.  The other "mobile"
PC works fine, although they share the same wirless bridge for
commmunication.  What's wrong with my PC?  How to solve the problem?

Thanks in adance.


--

Regards,
Wai Keung, Fung

Department of Mechanical and Automation Engineering,
The Chinese University of Hong Kong,
Shatin, N.T.,
Hong Kong.

Tel: (852)26098056      Fax: (852)26036002

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: DNS?
Date: Fri, 14 May 1999 08:22:51 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (DB7654321) wrote:
> I am new to linux and networking and wondered:  What are the main uses
of a DNS
> server?

resolve names to adresses
want more info, read howtos ( like net3-howto,dns-howto ...)

 I have a dialup connection to the internet and do not want to
handle
> DNS requests for the internet.

dont worry, you won't

  How can I let my ISP handle those?
The only
> reason I might need one is for the small network (3-5 computers) I am
going to
> set up soon.  What services need DNS?
>
> David Bell
>
> Please don't email me just reply on the board.
>


--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---

------------------------------

From: David Guyon Martin <[EMAIL PROTECTED]>
Subject: Re: NO CARRIER causes PPP to abort
Date: Fri, 14 May 1999 10:39:55 +0200

Hello,

I used linuxconf, for the setings and for starting pppd.
There the init script can't be changed, or I don't know how.

I still have the same problem since I've post the first message.

Thanks for your answer,
David

Ian Long a �crit:
> 
> Are you using the same init string in Linux that you do in Windows 95?
> Perhaps you could provide your script....
> 
> Cheers,
> Ian
> 
> David Guyon Martin <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]...
> > Before posting this I've read howtos, news archives, ..., it helped me
> > to configure ppp but it still doesn't work.
> >
> > In /var/log/messages I can read that pppd is aborting because the modem
> > tells him 'NO CARRIER'.
> >
> > I have no trouble to dial and connect to internet with win95 and QNX
> > (the IAT demo floppy disk with OS, wm, browser, connexion wizard on it).
> >
> > My Linux config is: Mandrake 5.3 ( RedHat 5.2 + XFree 3.3.3.1 + KDE
> > 1.1), Kernel 2.2.3
> > My modem is a Kortex Adaptix, external, K56Flex (V90 ready, I will flash
> > it soon).
> >
> > The modem dials the correct phone number, I can hear usual noises of PAP
> > protocol, then the NO CARRIER stops pppd.
> >
> > Please help,
> > thanks
> > David
> >

------------------------------

From: [EMAIL PROTECTED] (Robin Jackson)
Crossposted-To: comp.os.linux.setup
Subject: httpd cannot find server name error???
Date: Fri, 14 May 1999 10:34:30 +0100

Hi

When my system is starting up I get an errot message httpd cannot find
server name setup with ServerName??

I have no idea what to do to correct this, can anyone give me a pointer
please?

Robin




------------------------------

From: Yoke Meng Kim <[EMAIL PROTECTED]>
Subject: Setup Apache 1.3.3 with RedHat 5.2 [kernel 2.0.36]
Date: Fri, 14 May 1999 15:54:40 +0800
Reply-To: [EMAIL PROTECTED]

When I start the Apache with webmin. I got the following message:

"Failed to start apache : 

/usr/sbin/httpd -d /etc/httpd failed :
Syntax error on line 158 of /etc/httpd/conf/httpd.conf:
LogFormat takes 1-2 arguments, a log format string (see docs) and an
optional format name"

Following are the line from 158 to 161:

LogFormat "%h %l %u %t "%r" %>s %b "%{Referer}i" "%{User-Agent}i""
combined
LogFormat "%h %l %u %t "%r" %>s %b" common
LogFormat "%{Referer}i -> %U" referer
LogFormat "%{User-agent}i" agent

What should I do ?

------------------------------

From: [EMAIL PROTECTED] (Jon Skeet)
Subject: 10000 connections in quick succession causes drops
Date: Fri, 14 May 1999 08:48:52 +0100

I'm having some problems getting a set of results for some tests I'm 
running on my server. A number of users are set up to give the system a 
known load, and then a single operation is performed 10000 times as 
quickly as possible. All this is done over the network.

I've found that a lot of times, several of the 10000 connections are 
refused. (As a guide, it usually takes about 60 seconds to perform the 
operations.)

I've already tweaked the following parameters:

/proc/sys/net/ipv4/tcp_fin_timeout: 30
/proc/sys/net/ipv4/tcp_max_syn_backlog: 1024
/proc/sys/fs/file-max: 16384
/proc/sys/net/ipv4/ip_local_port_range: 1024 60000

Does anyone have any further suggestions? Anything in /proc/sys/net/core? 

Would it be reasonable to increase tcp_max_syn_backlog even further?

I don't *think* it's the load on the system that's causing the problem...

I'm running Linux 2.2.7 on a P2/333 with 192Mb RAM and a DEC Tulip-
compatible network card - any further specs available on demand :)

-- 
Jon Skeet - [EMAIL PROTECTED]
http://www.pobox.com/~skeet/

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Help me...I've been hacked!
Date: Fri, 14 May 1999 07:39:56 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] wrote:

> Please take a close look at the ssh license before you start to use
> it. Ssh2, in particular,

...is crap.  Agreed.  'nuf said.

> Ssh1 is better, but still problematic for some situations.

...such as trying to sell it.  That's pretty much it.

> And of course, RSA is under patent in the U.S.A. until next fall, so
> there are restrictions on what you can do with it.

Correct.  You're not allowed to sell it.

> Encryption and authentication over the 'Net are *good*.  Violating the
> license of the software is *illegal*.  Illegal is *bad*.

I bet you get really freaked out by FBI warnings on videotapes, right?

I just double-checked the license, to make sure I wasn't forgetting some
ridiculous clause, but it looks the same as when I read it the first
time -- harmless.

Look, neither myself nor anybody else is suggesting that people try to
make money off installing or distributing ssh.  Those are the only
activities really prohibited by Data Fellows' license.  So long as we
all just install sshd on our own machines for our own use [which is what
was suggested earlier in this thread], there's no problem.

--
-Bill Clark
Systems Architect
ISP Channel
http://locale.ispchannel.com/


--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---

------------------------------

From: Darrin Rothe <[EMAIL PROTECTED]>
Subject: xdm/gdm/wtf
Date: Fri, 14 May 1999 00:43:00 -0700
Reply-To: [EMAIL PROTECTED]

I recently upgraded from RH 5.2 to 6.0, and I have to say the upgrade
wasn't pretty.  I lost networking and a few other system setups, and had
to go find all the .rpmsave files and return the system to normal.

One problem I haven't fixed yet is gdm/xdm.  I had always been using xdm
with a runlevel of 5.  I used Exceed on my PC to do an XDMCP broadcast
logins which gave me the regular login prompt, full desktop etc.  None
of that works now.  I noticed, even though I didn't necessarily ask for
it, that all of the GNOME components were installed, and it was actually
running gpm instead of xdm.  I reset it to run xdm again, and at least
now I can select the host out of the chooser (that Exceed provides), but
after selecting the host, no login ever appears.  Passive X works fine. 
I had similar problems with kdm awhile back which is why I was using xdm
in the first place.  

Does anyone else have this problem?  Know whats going on?

Technically, what are the differences between xdm, kdm, and gdm.  Why
are there three programs that do essentially the same thing?

Thanks,
Darrin
[EMAIL PROTECTED]

------------------------------

From: [EMAIL PROTECTED] (Walter Hunt)
Subject: Re: Is this possible? (VPN+IPMASQ)
Date: Fri, 14 May 1999 07:54:01 GMT

In article <[EMAIL PROTECTED]>,
        "John Hardin" <[EMAIL PROTECTED]> writes:
> 
> Walter Hunt wrote in message ...
>> One thing to keep in mind: If the VPN you want to use is based on the
>>AH protocol (Authentication Header), it will *not* work through the Linux
...
>> This may not apply to you. It does apply to me. :-( It's not well
>>emphasized in the HOWTO you were pointed at.
> 
> 
> Which HOWTO is that? I thought I stated it clearly in the VPN Masq HOWTO...

        Yours. It may be because I read it in the beginning of my long trek
to figure out that I couldn't do what I wanted to do. It keeps talking about
PPTP and IPSec, but if there's a mention of AH, there's not much.

        I guess what I really needed to see when I first looked at your HOWTO was
a synopsis part somewhere that explained a few of the terms, what could be
done, and what couldn't.

        Hmmm, just went back and re-read it. It does mention AH, but down at the
bottom after you've gone through the rest. Maybe I missed it the first time,
or read it before I knew that's what my VPN was based on. Sorry for the slight.

> 
>> (I have a plan/plot on how to make it work, but don't have the time or
>>energy right now to implement it. By the time I do, I won't need it
> anymore.)
> 
> 
> How would you successfully masquerade AH packets without participating in
> the ISAKMP key exchange???

        Well, you would have to participate in the key exchange, of course. What
I really meant to say was, it should be possible for me to hook up my 
particular VPN, since they had a driver for 2.0.36 that just (hah) needs to
be ported over to the annoyingly different net stuff in 2.2.x.

        They provided source for the driver, with binary modules for the crypto
stuff (which seems reasonable to me), plus a tk client that does a pretty
good job of imitating the Mac and Windows clients.

        The problem with all of it is, they seem to have taken the long way 'round
doing the driver. What they really should have done is start from the ip_gre
stuff (or ipip stuff), and make a VPN tunnel from there.

        My thought for when I find some spare time is to extract out the proto-
specific areas from general tunnel operations (hashing connections, wrapping
packets, etc.), make a general purpose structure, and then have one driver
that would be able to handle multiple tunneling protocols simply by having
different tunnel drivers add their own specs.

        'Course, I don't really know what I'm doing here, but what's Linux for
if you can't hack it up a bit.

--
Walter Hunt

------------------------------

From: "Josh" <[EMAIL PROTECTED]>
Subject: Re: 10Base2 Connector/Cable Quality
Date: Fri, 14 May 1999 00:59:42 -0700

This is something I was also planning to do in the (hopefully) not so far
off future. I've just started playing with Linux, and I haven't done any
networking, so I still need a lot of info. I hate it when people just flat
out ask for all the info they need, step by step, and don't try things on
their own first, so I do plan on looking for the info myself. But I was
hoping I could get pointed in the right direction to things like background
info, FAQs, or anything else that might come in handy. What I hope to end up
accomplishing is a two computer network, with Linux hooked up to the Net
(DSL hopefully), possibly running a small web server with my personal stuff,
and shared Net access with the other computer (Windows).

So, if anyone can offer any advice or a good starting point for info, please
let me know.

thanks,
Josh
[EMAIL PROTECTED]


Glenn Watson <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Hi all - I realise this isn't the most appropriate newsgroup for this
> question, but anyway....I will soon be setting up a small network at
> home.




------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to