Linux-Networking Digest #436, Volume #11 Mon, 7 Jun 99 00:13:36 EDT
Contents:
Re: Connecting to the Internet. (Clifford Kite)
Re: basic network question ("David Means")
IPCHAINS HELP? (sebastopop)
Re: Performance of Portfw ("David Means")
Re: You can earn $50,000 40686 (Frank v Waveren)
LINUX/win98 network via IPX !?!?!?!? ("Action")
Speed problems through IP Masq. ("Nigel Sim")
Re: Where is my /usr/sbin/in.ftpd (Ian Cottrell)
How do you ID a FA310TX rev C that uses the DEC chipset??? ([EMAIL PROTECTED])
Re: Laptop and tulip driver.... ("Otto")
Re: A good diald Question. ("Carl R. Friend")
Re: Removing Anonymous FTP access (Chris McGarry)
Warning against Announce Communications web hosting (agner)
Re: what is "sunrpc" ? (Glen Parker)
How do I log onto ver. 6.0? ("Lamar Thomas")
Re: Anyone get Redhat 6.0 + Cable Modem working????? (John Pisini)
need help configuring Linux as a Router (mango)
Linux Networking Problem ("Mr. Ozette Brown")
problems with internet in Mandrake (Jeremy Lunn)
----------------------------------------------------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: Connecting to the Internet.
Date: 6 Jun 1999 20:27:44 -0500
Mark Stevens (*[EMAIL PROTECTED]) wrote:
: I've also manually connecting following the instructions at
: http://axion.physics.ubc.ca/ppp-linux.html my modem appears to work fine.
: The log files from the instructions at the site above show nothing about
: pppd. Even though it says it should var/log/ppp should reveal info about
: the type of login.
Did you configure /etc/syslog.conf, create /var/log/ppp-log, and then do
killall -1 syslogd
( or killall -HUP syslogd or kill -HUP `pidof syslogd` )
to force syslogd to read /etc/syslog.conf ?
Is syslogd running? My "older" syslogd is picky about TAB separators in
syslog.conf, and spaces cause it to die when it reads the file.
You really need the chat -v and pppd link negotiation debug log messages
to help determine what happened. The messages in your post just aren't
enough.
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* Speak softly and carry a +6 two-handed sword. */
------------------------------
From: "David Means" <[EMAIL PROTECTED]>
Subject: Re: basic network question
Date: Sun, 6 Jun 1999 18:29:08 -0700
Fabian M�ller <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Dann Church wrote:
>
> > Fabian,
> >
> > Couple of issues to address:
> > [snip]
> > As for not being able to ping the other host, you might try this:
> >
> > tcpdump -vv > /tmp/tcpdump.txt 2>&1 &
> > ping 192.168.10.52
> > kill <PID of tcpdump>
> >
> > The tcpdump.txt file should show you're machine doing an arp request to
> > find the other's MAC address, and an arp reply from the other providing
> > it's MAC address. The next packets should then be an ICMP echo request
> > and an ICMP echo reply.
> >
> > If you see packets going out, but not coming back in, I would suspect
that
> > either you have a cable issue (if direct connect, need a crossover
cable)
> > or that the other machine does not know how to route packets back to
you.
> > [snip]
> Until now I have tried the connction with the BNC-cable-connection. But
today
> I have bought me
> a Twisted Pair cable. The Package says the following:
>
> Twisted Pair Network-Cable
> 2 x RJ45-plug with Level 5 cable
> For connection of two network-components with RJ45-jack.
> The use of Level 5 cable guarantees highest data-safety.
>
> I think that this should work, but I am still not able to ping my other
host.
>
> I have also tried the thing with tcpdump. I followed a book as I named my
two
> hosts and the Damain:
> My Host: adamix
> Other Host evamix
> The Domainnames of both computers are paradix.
> So the output of tcpdump an my computer gives me:
> 20:02:03.883625 arp who-has evamix.paradix tell
adamix.paradix
>
> .
> .
> .
> .
> Nothing except the time and the Number changes in all of the following
lines.
>
> If I quit this listing I receive:
> 13 packets received by filter
> 0 packets droped by Kernel
This smells more and more like a cabling issue, if you are sure about the
address assignment. The result of the tcpdump indicates that you are only
ever seeing ARP requests, and never an ARP reply. This exchange is
necessary before you will ever get any traffic between two machines.
Are all the little lights on the interface cards at BOTH ends showing that
the card thinks the link is good? Is there some other confusion (at .52)
about which interface is assigned which address?
And how does the ppp0 interface fit into all of this (on .51)?
------------------------------
From: sebastopop <[EMAIL PROTECTED]>
Subject: IPCHAINS HELP?
Date: Sun, 06 Jun 1999 20:10:33 -0500
hey folks,
i am fairly new to linux and i need some help please.
i am trying to set up a home network. i have a linux machine running
redhat 6.0. i also have another linux machine running redhat and
another running nt. i have all the machines hooked up on an ethernet.
i've read a bit about ipchains. i have to admit i didn't grasp it too
well.
i would like to use my dial up ppp connection on my first linux box to
allow internet connections to all the other boxes.
i use the reserved ip addresses for a class c network.
my linux box is 192.168.0.1
my nt box is 192.168.0.2
my other linux box is 192.168.0.3
what is the easiest way to set this up using ipchains.
do i need other items compiled into the kernel or is 6.0 ready to go as
is?
thanks in advance for the help.
[EMAIL PROTECTED]
------------------------------
From: "David Means" <[EMAIL PROTECTED]>
Subject: Re: Performance of Portfw
Date: Sun, 6 Jun 1999 18:12:35 -0700
Greg Bastian <[EMAIL PROTECTED]> wrote in message
news:7j9uqv$1ffh$[EMAIL PROTECTED]...
> Hi All,
>
> To me, using a machine which forwards http and ssl connections to another
> machine (using ipmasqadm and portfw) would be much more secure than having
> that host sit openly on the internet.
I think the two are equivalent. What port forwarding does is to create a
hole
in the firewall for a given port. This seems about the same as allowing
access
to a given port on the firewall machine. It seems to me that a pretty good
arrangement would be to have the web-server on the firewall machine, and
the database back-end on an internal machine. You could then explicitly
permit access between the web server and the backend, and nothing else
from outside.
> Is there a downside to doing this ?
The downside to port-forwarding is that you then have to watch 2 machines
like a hawk instead of just one.
> My dilemma is to expose a web site which has a database back end on a
> different machine. I want the database to exist on our internal network,
so
> it can be accessed by our staff, and also provide it to the web server
which
> is constanly updating data.
>
> I would love to have both machines on our internal network (as part of a
> different domain with the corresponding nt security setup) and simply
portfw
> web and ssl requests at our firewall.
>
> Is this a stable arrangement ?
>
> Regards,
>
> Greg.
>
>
------------------------------
From: [EMAIL PROTECTED] (Frank v Waveren)
Subject: Re: You can earn $50,000 40686
Crossposted-To:
comp.lang.java.programmer,comp.lang.javascript,comp.lang.perl.misc,comp.lang.tcl,comp.mail.eudora.ms-windows,comp.os.linux.advocacy,comp.os.linux.development.system,comp.os.linux.hardware,comp.os.linux.misc
Date: Tue, 01 Jun 1999 13:12:07 GMT
In article <7iuvt0$qb1$[EMAIL PROTECTED]>,
"Kent Dahl" <[EMAIL PROTECTED]> writes:
> send a reply, filling their e-mail-boxes as they do with ours.... Now, where
> is that virtual memory file and how do I attach it to outgoing e-mail? ;-))
Wouldn't you prefer something that *doesn't* contain all your private info? :-)
How about everybody send them the trailer of the phantom menace? :-)
--
Frank v Waveren
[EMAIL PROTECTED]
ICQ# 10074100
------------------------------
From: "Action" <[EMAIL PROTECTED]>
Subject: LINUX/win98 network via IPX !?!?!?!?
Date: Mon, 07 Jun 1999 00:57:58 GMT
I have a linux machine tied to a hub at 100baseTX, as well as a win98
machine. hub uplinks to a cable modem. cable modem assigns IP numbers to
both boxes via DHCP. works beautifully.
the only problem is, the two boxes are assigned IPs of different subnets.
so I'm trying to configure the network to go via IPX instead.
gotten it to work in network neighborhood with two win98 machines, but how
do I get linux to work with win98 via IPX ???
I understand TCP/IP pretty well, but IPX is new to me, so be kind. =-0
thanks all!!!
Action.
------------------------------
From: "Nigel Sim" <[EMAIL PROTECTED]>
Subject: Speed problems through IP Masq.
Date: Tue, 1 Jun 1999 22:11:42 +1000
I have a linux box running as an internet gateway (IP Masquerading and
Squid), and a file server (Samba). The computer uses a dial up ppp link to
the isp. The ipchains rules are pretty simple:
Chain forward (policy DENY):
MASQ all ------ localnet/8 anywhere n/a
This just masquerades everything (that is destined for the internet) from
the local network out onto the internet.
However this does not run at anything close to a reasonable speed. ie I can
normally download from the web at up to 5 k but normally closer to 3k. but
through the server with no other load on the link I am getting 200 - 800
bytes per second... As well an FTP mirror which I can also normally get
access to quite quickly has the same problem.
I originally set up the squid server to try to reduce the load on the
connection a little as the computers that use the link start at the same
homepage and may very well follow simular links. However this connection is
slower again with speeds between 80 and 400 bytes per second.
Firstly, is there any tweaking I can do to improve this?
Secondly, how CPU and RAM intensive is this process of proxying and
masquerading?
Thanks
Nigel
------------------------------
From: [EMAIL PROTECTED] (Ian Cottrell)
Subject: Re: Where is my /usr/sbin/in.ftpd
Date: 7 Jun 1999 01:45:59 GMT
Michael Mellinger ([EMAIL PROTECTED]) wrote:
:
: This wasn't installed on my machine. That's why my ftp doesn't work.
: So where the heck is it?
You didn't say anything about which distribution you are running, but on
my RedHat 6.0, its in wu-ftpd (wu-ftpd-2.4.2vr17-3.rpm to be exact). Just
install the package with rpm and all will be well.........Ian
P.S. If you want to ftp as root (not recommended, but your choice), remove
'root' from /etc/ftpusers..............IC
--
============================================================================
Ian Cottrell office email: [EMAIL PROTECTED]
Chief, Internet Services personal email: [EMAIL PROTECTED]
Department of Justice office: (613) 941-5233
284 Wellington Street
Ottawa, ON, Canada
============================================================================
------------------------------
From: [EMAIL PROTECTED]
Subject: How do you ID a FA310TX rev C that uses the DEC chipset???
Date: Mon, 07 Jun 1999 01:13:27 GMT
I understand the Netgear FA310TX revision C* uses
the DEC 21140 chipset. How do you identify one of
these? My local CompUSA has about a dozen Netgear
cards on the shelf three of which have a "C" at
the end of the stenciling on the largest chip.
Can someone who has one of the cards using the DEC
chip post some information on how to identify this
card?
Steve
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: "Otto" <[EMAIL PROTECTED]>
Subject: Re: Laptop and tulip driver....
Date: Mon, 07 Jun 1999 02:44:06 GMT
Rod Smith <[EMAIL PROTECTED]> wrote in message
> The "tulip" driver IS the correct one. You might need something more
> up-to-date than what comes with standard Linux kernels, though. Try this
> URL for an updated tulip.c file:
>
> http://cesdis.gsfc.nasa.gov/linux/drivers/tulip-devel.html
>
> Take the tulip.c file, drop it into your Linux kernel tree, and recompile
> the kernel and/or modules.
Thanks for the link and I'll try to recompile the kernel.
> It's also possible that you're having problems with your Linux networking
> configuration rather than with the driver itself. For instance, have you
> set up a gateway machine? Assigned an address to the computer itself?
> Check the Linux networking HOWTOs for information on setting this up.
I did read those HOWTO's and the network settings were correct, was able to
ping the loopback and the assigned IP address. Off to find some kernel
HOWTO's...
Otto
------------------------------
From: "Carl R. Friend" <[EMAIL PROTECTED]>
Subject: Re: A good diald Question.
Date: Sun, 06 Jun 1999 21:47:33 -0400
"Walter L. Williams" wrote:
>
> Diald seems to have a little habbit of dialing out when ever it wants
> to. And sometimes for no apperent reason.
To find out what's waking diald up, try hanging a tcpdump on the
proxy interface (usually sl0).
> Is there a way to adjust diald to only dail out when it looking for
> a URL?
Not quite as such. It's easier to configure it to ignore stuff which
you _don't_ want to wake the link up (like NTP) than only to bring it
up for what you may want (e.g. HTTP which would ignore NNTP).
> It seems to be a little TOO sensitive.
It's all configurable. Have a look at /etc/diald.conf and, of course,
the man pages, for all the subtle details.
Hints: configure it to ignore NetBT (NetBIOS over IP - a M$ problem)
and NTP packets (if you run NTP on your LAN). Those bits are guaranteed
to bring up a link every few minutes.
Good luck!
--
+------------------------------------------------+---------------------+
| Carl Richard Friend (UNIX Sysadmin) | West Boylston |
| Minicomputer Collector / Enthusiast | Massachusetts, USA |
| mailto:[EMAIL PROTECTED] | |
| http://www.ultranet.com/~crfriend/museum | ICBM: N42:22 W71:47 |
+------------------------------------------------+---------------------+
------------------------------
From: Chris McGarry <[EMAIL PROTECTED]>
Subject: Re: Removing Anonymous FTP access
Date: Sun, 06 Jun 1999 18:35:20 -0700
Hey Matt,
I'm no expert but I believe if you remove the word "anonymous" out of
the line "class real,guest,anonymous" in the file /etc/ftpaccess that'll
do it.
Chris McGarry
Matt wrote:
> I've setup wu-ftpd, and in order to get guest groups working I had to
> install anon-ftp. I don't want to allow anonymous access to my server
> however. How can I set this up?
------------------------------
From: agner <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.os2.misc,comp.os.linux.network
Subject: Warning against Announce Communications web hosting
Date: Tue, 01 Jun 1999 14:26:07 +0200
Since Allen Hoffman of Announce Communications has announced his web
hosting business here I feel it is appropriate to warn you about my bad
experiences with this business.
The business is cheap, but service is extremely poor. Severe errors are
only fixed after many complaints, and less severe errors are never fixed
at all. Most E-mails are never answered. But worst of all: if you are
dissatisfied and want to move to another service provider, you may not
be able to transfer your domain name.
My story is:
I have bought a domain web site at Announce Communications. In april my
site went down because mr Hoffman failed to pay the Internic bill. All
my complaints remained unanswered. After a month I decided that I had to
move my domain to another ISP. Only after he learned that I was moving
the domain did I hear from mr Hoffman. Do you think it was an apology?
Or an offer to refund what I had paid for a faulty service? No - you
can't guess it. It was a demand that I pay him 70$ for releasing my
domain! My question is now: is it possible to move the domain without
his permission? The internic record has my name as registrant, and his
name as administrative contact.
------------------------------
Date: Sun, 06 Jun 1999 17:36:18 -0700
From: Glen Parker <[EMAIL PROTECTED]>
Subject: Re: what is "sunrpc" ?
> maybe you can help me with what the heck md_thread is :)
That's the 'multi device' support kernel thread, which is the linux name
for raid. Your kernel was compiled with raid support, and so it starts
those threads on boot. The only way I know of to make them go away is
to remove raid support from the kernel.
Glen
------------------------------
From: "Lamar Thomas" <[EMAIL PROTECTED]>
Subject: How do I log onto ver. 6.0?
Date: Mon, 07 Jun 1999 02:56:27 GMT
How do I log onto ver. 6.0?
I just installed Redhat Linux 6.0 server and rebooted my system. I am at
the X Windows login but don't know what to enter as a login name and
password. The Installtion never asked me to make a user name. However, it
did ask me to set a "Root" password. Can anyone help me log on now that
it's up and running? Thanks for your help.
Lamar
[EMAIL PROTECTED]
------------------------------
From: John Pisini <[EMAIL PROTECTED]>
Crossposted-To:
linux.redhat.announce,linux.redhat.digest,linux.redhat.install,linux.redhat.list,linux.redhat.misc,linux.redhat.rpm,linux.samba
Subject: Re: Anyone get Redhat 6.0 + Cable Modem working?????
Date: Sun, 06 Jun 1999 21:29:44 -0400
> Mediaone as far as I can tell uses the network card to controll access.
I have moved the network card I got from them into three seperate computers no
problem can conect with any of them.
If I use any of these computers with another nic it fails to connect I know the
cards work because the machines show up on my
network. It is the only thing I can think of. If you are using mediaone just get
the numbers for them from a windows box they say you have a dynamic IP but i've
been using the same ip address for almost a year with no problems.
------------------------------
From: mango <[EMAIL PROTECTED]>
Subject: need help configuring Linux as a Router
Date: Tue, 01 Jun 1999 08:29:39 -0400
can someone help me configure RH Linux 6 as a router?
what's the difference between IP Masquerading and IP routing?
------------------------------
Date: Sun, 06 Jun 1999 23:34:58 -0400
From: "Mr. Ozette Brown" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: Linux Networking Problem
Hello,
I have a small network (2 PC's) on PC is a Linux box running RH6 and
the other box is Window98. Now the Linux box has IP Masquerading setup
and I use it to connect to the internet. I can now use the Win98 box
(via the Linux box's internet connection) to browse the internet.
Here's the problem:
If I use the Linux box to browse the internet, I can't. I make sure I
have an internet connection but nothing works. Keep in mind that the
Win98 box, while in this scenario, works just fine. I want two users to
be on the internet at the same time, but it's become impossible with
this setup, please help.
Thanks,
Ozete
--
Mr. Ozette J. Brown <President>
Imaginative Creations <[EMAIL PROTECTED]>
A Website Development and Consulting Company.
http://www.imaginative-creations.com
------------------------------
From: Jeremy Lunn <[EMAIL PROTECTED]>
Crossposted-To: aus.computers.linux,comp.os.linux.advocacy
Subject: problems with internet in Mandrake
Date: Tue, 08 Jun 1999 14:03:33 +1000
Hi,
I have just installed Mandrak Linux 6.0 on this computer, I had been
using Red Hat... and it worked fine for the internet... but was kind of
broken for some things...
But I have problems with the internet in Mandrake now. I can connect to
some sites with no problems, but others I get no route to host. Some
sites that I have pinged I don't get packets returned.
I think it is a problem with routing, but in linuxconf, it is set to set
up default route when connecting with PPP.
Has anyone had a simular problem and been able to fix it thanks,
Jeremy Lunn
PS please reply through email and through the newsgroup
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************