Linux-Networking Digest #528, Volume #11 Mon, 14 Jun 99 08:14:56 EDT
Contents:
Re: Need help convincing my company Linux TCP/IP stack is safe. (Gilford Wimbley)
Re: Bind 8 & Dial-on-Demand ("Andrey Smirnov")
Re: Frontpage server extensions (Monte Phillips)
Host problems (OrtMan)
wu-ftp (David Bell)
Re: Synchronizing cmos clock with timeserver? (Villy Kruse)
Re: Warning against Announce Communications web hosting (Matthew Marlowe)
Re: IMAP software for the linux (Matthew Marlowe)
Re: Frontpage server extensions (Matthew Marlowe)
"Promiscuous mode enabled" ("Carlos RCU")
Bring up ADSL link on demand, how? (Joseph Lam)
Re: Need help convincing my company Linux TCP/IP stack is safe. (Matthew Marlowe)
Dual NIC Help Please ("Ron Cordell")
Re: PPP is not working.../dev/ttyS1 permission denied!? (Mark Weinem)
Re: ftp localhost problems... ("Andrew Wedding")
Problem initializing modem. ("Troy C. Newman")
Kernel 2.2.x and arp (Joerg Paysen)
Re: Help! Networking & IP Masquerading & PPP, oh my! (Gilford Wimbley)
Routing through linux ("Carl Filpo")
sub-domain (mp)
Secure network-backup via nfs? ([EMAIL PROTECTED])
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Gilford Wimbley)
Subject: Re: Need help convincing my company Linux TCP/IP stack is safe.
Date: Mon, 14 Jun 1999 04:06:23 GMT
On Tue, 08 Jun 1999 04:15:19 GMT, Christian Hudon
<[EMAIL PROTECTED]> wrote:
>Hi,
>
>the company I work for has been experiencing networking problems
>recently, and they've started to take a look at everything that's
>connected to their internal network. That includes my Linux box. So I'd
>need help convincing them that Linux's TCP/IP stack doesn't cause
>network floods, is well implemented, etc. I know this is a bit silly,
>but...
>
>So, I'd appreciate pointers to resources showing that Linux's TCP/IP
>stack is implemented according to the RFCs. Pointers to resources
>showing that people actually use Linux on the Internet without causing
>problems (so-and-so % of
>the Internet's web servers are running Linux, company x relies on
>Linux's TCP/IP stack for their business, company y uses Linux for its
>servers, etc.) would also be great. Anything.
>
>If there are other appropriate forums for this kind of questions, I'd
>like hearing about them too.
>
There's one called "comp.os.linux.advocacy"
I bet those folks can dig up some stats for you.
>Thanks in advance.
>
> Christian
Good luck!
GW
------------------------------
From: "Andrey Smirnov" <[EMAIL PROTECTED]>
Subject: Re: Bind 8 & Dial-on-Demand
Date: Sun, 13 Jun 1999 23:58:06 -0700
http://metalab.unc.edu/LDP/HOWTO/DNS-HOWTO-8.html
[EMAIL PROTECTED] wrote in message <7k1d90$a16$[EMAIL PROTECTED]>...
>I am using a Linux box to provide dial-on-demand access
>for my home network. I recently upgraded from RH51 to RH6
>and have run into a small problem. I am running Bind on
>the box so that my Win9X machines won't receive a timeout
>while the link is coming up. In order to flush bind's name
>cache, I do a restart on bind in the ip-down script. I have
>to do the restart because if I ask for a cached name while the
>link is down it will reply before the link comes up and the
>client machine will be routed into never-never land.
>
>With the old version of bind I just set it up as a forwarding
>only nameserver. When I did the restart everthing worked
>great. However, with Bind 8, it queries something on the
>internet (root name servers?) whenever I do a restart, even
>though it is configured as a forwarding only nameserver. This
>causes my link to stay up (it gets restarted in ip-down and
>brings the link back up).
>
>I have patched it up by deleting all root server entries
>in the named.ca file except one, and changing it
>to 127.0.0.1. This way it just looks at itself and doesn't
>bring the link up. Everything works fine this way, except I
>get a good deal of complaining in the syslog.
>
>Any ideas about a better way to do this? I basically need
>a forwarding only nameserver that won't try to hit the net
>when it is restarted.... or some other way of clearing bind's
>cache... which I don't think can be done any other way.
>
>
>Sent via Deja.com http://www.deja.com/
>Share what you know. Learn what you don't.
------------------------------
From: [EMAIL PROTECTED] (Monte Phillips)
Subject: Re: Frontpage server extensions
Date: Mon, 14 Jun 1999 06:19:31 GMT
David,
Unless you really hav eno security problems and don't mind hassling
<G> put extensions into Apache, BUT. you might want to take a look
here to see WHY you maybe shouldn't.
www.hal-pc.org on this site is a page that explains why they will
not place frontpage on their Apache server.
On 14 Jun 1999 04:00:17 GMT, [EMAIL PROTECTED] (David Bell)
wrote:
>I need to install the frontpage server extensions to my apache server on my
>RH5.2 system. Which extensions do I need and how do install them?
>
>-------------------------
>David Bell
>
>Please don't email me just reply on the board.
------------------------------
From: OrtMan <[EMAIL PROTECTED]>
Subject: Host problems
Date: Mon, 14 Jun 1999 01:36:31 -0600
Hi,
I'm relatively new to linux and having one nagging problem that
developed with gnome installation.
I'm running RH5.2 with gnome 1.0 and I've been getting a warning saying
that my host can't be found.
Normally I understand root is the local domain host, but after hooking
up and disconnecting to the net, my "host" becomes my ISP's address or
host. i.e. ts3port.ucalgary.......
Before gnome no problem. The warning comes up if I logout as user and
login as root or vice versa AND only after I have connected and
unconnected to my ISP and only after a reboot or restart. A clean start
up has the host as localhost.localdomain.
When I'm not hooked up and switch modes the warning I get says that
gnome may not function properly because the host cannot be found.
Also, I have to connect via UserNet, my university gives me 8-bit not
clean errors with the standard ppp-on method. Is this host problem
UserNet related?
How come my ISP remains my host after disconnecting from it? And can I
fix this?
Can someone help me understand what is going on?
thanks Jullian
------------------------------
From: [EMAIL PROTECTED] (David Bell)
Subject: wu-ftp
Date: 14 Jun 1999 03:57:22 GMT
I am trying to get wu-ftp work but am having problems. I can log-in and
download files but cannot upload any. How do I fix this? Or does anyone
recommend any other ftp servers that might be easier for a newbie to use.
=========================
David Bell
Please don't email me just reply on the board.
------------------------------
From: [EMAIL PROTECTED] (Villy Kruse)
Crossposted-To: comp.os.linux.misc
Subject: Re: Synchronizing cmos clock with timeserver?
Date: 14 Jun 1999 08:40:54 +0200
In article <[EMAIL PROTECTED]>,
Marc Mutz <[EMAIL PROTECTED]> wrote:
>after the rdate, add '/sbin/clock [-u] -w' or 'hwclock --systohc
>[--utc]', where -u and --utc tell the progs, that you cmos clock runs
>GMT.
>
This is correct, but for redhat system you have a shell script called
/usr/sbin/setclock which will do this paying attention to the paramters
defined in the /etc/sysconfig/clock file. In other words: setclock
will do the right thing.
Villy
------------------------------
From: Matthew Marlowe <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.os2.misc,comp.os.linux.network
Subject: Re: Warning against Announce Communications web hosting
Date: Mon, 14 Jun 1999 03:32:37 -0700
It's not that bad. You'll just need to make a short phone call
and fax over a letter with some form of letterhead and/or
identification.
I agree, the end user should ___ALWAYS__ be the administrative
contact for the domain, unless he's handed that responsibility
over to someone who he trusts and/or has contracted to work
for him. It should not be the ISP.
thanks,
Matt
Jonathan Guthrie wrote:
>
> In comp.os.linux.networking agner <[EMAIL PROTECTED]> wrote:
> > My question is now: is it possible to move the domain without
> > his permission? The internic record has my name as registrant, and his
> > name as administrative contact.
>
> Oh, spare me from people who kinda-sorta know what they're doing WRT the
> NIC. As the owner of an ISP, I get notifications about bunches of
> malformed domain requests come through my mailbox. Here is what you need
> to take away from this experience:
>
> The administrative point of contact (APOC) should be YOU! The APOC is, by
> definition, the person who makes decisions about the domain like who
> should host it. (The other fellow is a sleaze if he always sets himself
> up as APOC.) At Brokersys, you would be the billing point of contact
> because we don't want to get any more involved with the NIC's crappy
> billing system than we have to be to maintain the domains we use ourself.
> However, I understand that some places do things differently. C'est la
> vie. The technical point of contact should be person who runs the name
> servers.
>
> Now, if you're listed as ANY of the contacts, you can request that the
> domain be moved. In fact, you should talk to your new provider about this
> because they'll be able to fill out the "paperwork" for you.
> Unfortunately, as someone else said, if he doesn't consent, it won't be
> automatic. Be prepared to spend some long-distance money on calls to
> Virginia.
> --
> Jonathan Guthrie ([EMAIL PROTECTED])
> Brokersys +281-895-8101 http://www.brokersys.com/
> 12703 Veterans Memorial #106, Houston, TX 77014, USA
--
Matthew Marlowe http://www.jalan.com/ (p) 909.799.3805
[EMAIL PROTECTED] Jalan Network Services (f) 909.799.3285
"Quality Web Hosting, Network, Linux, and Solaris Consulting"
------------------------------
From: Matthew Marlowe <[EMAIL PROTECTED]>
Subject: Re: IMAP software for the linux
Date: Mon, 14 Jun 1999 03:34:03 -0700
The Cyrus IMAP server is generally considered the best
under Linux. Take a look at:
http://andrew2.andrew.cmu.edu/cyrus/cyrus.html
Matt
Jonathan Guthrie wrote:
>
> pawan <[EMAIL PROTECTED]> wrote:
> > Is there any package which will have the IMAP support for the linux
> > machine
>
> Yes. I had to install it when I installed imp for Web-based mail.
> --
> Jonathan Guthrie ([EMAIL PROTECTED])
> Brokersys +281-895-8101 http://www.brokersys.com/
> 12703 Veterans Memorial #106, Houston, TX 77014, USA
--
Matthew Marlowe http://www.jalan.com/ (p) 909.799.3805
[EMAIL PROTECTED] Jalan Network Services (f) 909.799.3285
"Quality Web Hosting, Network, Linux, and Solaris Consulting"
------------------------------
From: Matthew Marlowe <[EMAIL PROTECTED]>
Subject: Re: Frontpage server extensions
Date: Mon, 14 Jun 1999 03:35:28 -0700
Check out www.rtr.com for the latest on FP extensions.
Be aware that most clued folks consider them extremely
detrimental to system security.
Thanks,
Matt
David Bell wrote:
>
> I need to install the frontpage server extensions to my apache server on my
> RH5.2 system. Which extensions do I need and how do install them?
>
> -------------------------
> David Bell
>
> Please don't email me just reply on the board.
--
Matthew Marlowe http://www.jalan.com/ (p) 909.799.3805
[EMAIL PROTECTED] Jalan Network Services (f) 909.799.3285
"Quality Web Hosting, Network, Linux, and Solaris Consulting"
------------------------------
From: "Carlos RCU" <[EMAIL PROTECTED]>
Subject: "Promiscuous mode enabled"
Date: Mon, 14 Jun 1999 12:32:09 +0200
Hi all:
I got a server with an ISDN and a ETHERNET card. The server has a valid
IP address on the Internet. I use the ISDN card for connecting remotely to
the server from a router on a LAN, so the LAN has direct access to Internet.
Everything works properly but after a big amount of time that the server
has no network tasks to do (after weekends most of the times) the systems
hangs up but it answers to a ping. I have to restart the server for putting
it back to work.
I don't have any idea where the problem could be and the only weird
thing I found is the following message on the system log:
kernel: eth0: Promiscuous mode enabled
I didn't have seen that message before having problems.
What the hell is that means?. Any idea for why the ethernet adapter
hangs?.
------------------------------
From: Joseph Lam <[EMAIL PROTECTED]>
Subject: Bring up ADSL link on demand, how?
Date: Mon, 14 Jun 1999 18:03:14 +0800
Hi,
I'm using ADSL(connected to eth0) and every time I want to connect to the
internet I have to execute a special command. The linux box is
masquerading for two windows boxes and I'd like to have it automatically
execute the command when the clients make any request. And then execute
another command to cut the connection after a certain timeout. These have
nothing to do with ppp nor slip so I wonder if diald suits my needs. All I
need is to just execute a specific command on demand.
Any ideas?
Regards,
Joseph
------------------------------
From: Matthew Marlowe <[EMAIL PROTECTED]>
Subject: Re: Need help convincing my company Linux TCP/IP stack is safe.
Date: Mon, 14 Jun 1999 03:37:10 -0700
Gilford,
I doubt that it's the stack - they might be pretty unclued if they
think that it is. It could be a bad ethernet card on the network,
bad wiring, etc....rather than wasting their time guessing, they
should do some network troubleshooting or bring in a network tester.
Thanks,
Matt
Gilford Wimbley wrote:
>
> On Tue, 08 Jun 1999 04:15:19 GMT, Christian Hudon
> <[EMAIL PROTECTED]> wrote:
>
> >Hi,
> >
> >the company I work for has been experiencing networking problems
> >recently, and they've started to take a look at everything that's
> >connected to their internal network. That includes my Linux box. So I'd
> >need help convincing them that Linux's TCP/IP stack doesn't cause
> >network floods, is well implemented, etc. I know this is a bit silly,
> >but...
> >
> >So, I'd appreciate pointers to resources showing that Linux's TCP/IP
> >stack is implemented according to the RFCs. Pointers to resources
> >showing that people actually use Linux on the Internet without causing
> >problems (so-and-so % of
> >the Internet's web servers are running Linux, company x relies on
> >Linux's TCP/IP stack for their business, company y uses Linux for its
> >servers, etc.) would also be great. Anything.
> >
> >If there are other appropriate forums for this kind of questions, I'd
> >like hearing about them too.
> >
> There's one called "comp.os.linux.advocacy"
> I bet those folks can dig up some stats for you.
>
> >Thanks in advance.
> >
> > Christian
>
> Good luck!
> GW
--
Matthew Marlowe http://www.jalan.com/ (p) 909.799.3805
[EMAIL PROTECTED] Jalan Network Services (f) 909.799.3285
"Quality Web Hosting, Network, Linux, and Solaris Consulting"
------------------------------
From: "Ron Cordell" <[EMAIL PROTECTED]>
Subject: Dual NIC Help Please
Date: Sun, 13 Jun 1999 23:49:01 -0400
Hello,
I have a 2.0.36 kernel (RH5.2) and 2 ethernet cards. One is set to
192.168.1.1, the other to 209.186.14.64. The route table shows entries for
both cards and the default gateway as 209.186.14.1 (the gateway on the
internet part of the net).
I can ping both IP addresses from the machine. I can ping all internal
network addresses of 192.168.1.x, but I can't ping an address like
209.186.14.1, or 209.186.12.2 (the DNS). Shouldn't I be able to ping these
addresses if the route information is set correctly? The mask for both cards
is set to 255.255.255.0.
Any help would be wonderful.
Thanks!
Ron Cordell
------------------------------
From: [EMAIL PROTECTED] (Mark Weinem)
Subject: Re: PPP is not working.../dev/ttyS1 permission denied!?
Date: Sun, 13 Jun 1999 19:06:06 +0200
Reply-To: [EMAIL PROTECTED]
On Sun, 13 Jun 1999 Raiden Fighter <[EMAIL PROTECTED]> wrote:
>A "ls -l /usr/sbin/pppd" shows:
>-rwsr-xr-x 1 root root 120020 Apr 10 11:33 /usr/sbin/pppd
^^^^^
So only root is able to execute pppd.
My "ls -l /usr/sbin/pppd" shows:
-rwsr-x--- 1 root dip 105532 Jun 19 1998 /usr/sbin/pppd
1. create group dip (or "dialout", or "ppp", or...)
2. add the user to group dip
3. "chmod 4750 /usr/sbin/pppd"
4. "chgrp dip /usr/sbin/ppd"
Mark Weinem
>
>Now "ls -l /dev/ttyS1"
>crw-rw---- 1 root uucp 4, 65 Jun 13 16:46 /dev/ttyS1
>
>Now only root can start pppd
>I am running RedHat 6.0.
>
>Any clue?
>
>Thanks, Lynx
>
>
>Sent via Deja.com http://www.deja.com/
>Share what you know. Learn what you don't.
------------------------------
From: "Andrew Wedding" <[EMAIL PROTECTED]>
Subject: Re: ftp localhost problems...
Date: Mon, 14 Jun 1999 14:06:10 +1000
Thanks for that it works a charm.. except that it now doesn't accept my
password for whichever user that I enter. I had checked the man pages and
just couldn't understand why it wasn't working.
I also had already done tcpchk and realised that there was a problem with a
couple of lines that was missing the : I now understand it all a little bit
better.
Thanks again,
Andrew
--
Kind Regards,
*************************************
Andrew Wedding
Final year BIT student
Central Queensland University
http://users.bigpond.com/awedding
*************************************
Thomas Zajic <[EMAIL PROTECTED]> wrote in message
news:376461f6.5848866@news...
> Add the following line to /etc/hosts.allow:
>
> in.ftpd,in.telnetd: 127.0.0.1,localhost
>
> Then do a 'man 5 hosts_access' and 'man 5 hosts_options' to
> understand why. Use 'tcpdchk' to check your tcpd configuration
> for errors, and 'tcpdmatch' to check whether a specific host
> and/or user would be granted or denied access using your current
> configuration. Also read the man pages for tcpdchk and tcpdmatch.
>
> Get used to read man pages in general. ;-)
>
> HTH,
> Thomas
------------------------------
From: "Troy C. Newman" <[EMAIL PROTECTED]>
Crossposted-To:
alt.os.linux.dial-up,alt.uu.comp.os.linux.questions,comp.os.linux.help,comp.os.linux.setup
Subject: Problem initializing modem.
Date: Mon, 14 Jun 1999 06:49:08 -0400
I currently am running a usr 56k sportster (ISA not winmodem)... The jumpers
are set a PnP and windows puts it @ com3 irq5... within Linux(RH6) I cannot
even initialize even though I have tried all four com ports
(ttys0-ttys3...etc). Can anyone give me some info about where to go from
here.
thanks...tcn
------------------------------
From: [EMAIL PROTECTED] (Joerg Paysen)
Crossposted-To: comp.os.linux.misc
Subject: Kernel 2.2.x and arp
Date: 14 Jun 1999 10:34:10 GMT
Hi,
when I want to manually set an arp entry with
arp -v -i eth0 -s myhost my_hw_address pub
I get the following entry (arp -a):
myhost (111.111.111.111) at * PERM PUB on eth0
What does the asterix mean???
(I set proxy_arp with echo "1" > /proc/sys/net/ipv4/conf/all/proxy_arp
I use RedHat 6.0 with kernel 2.2.9-ac6)
Joerg
"In a world without fences, who needs Gates?"
======================================================================
Joerg Paysen Tel. +49 451 500/3724
- System Administrator - Sekr. /3721
Fax. /3722
Institut fuer Telematik, Uni Luebeck
Ratzeburger Allee 160 mail: [EMAIL PROTECTED]
D-23538 Luebeck, Deutschland http://www.itm.mu-luebeck.de
PGP fingerprint = 47 97 66 96 2E 37 EA 0F 74 46 15 6D 2C FC 8D 9F
======================================================================
------------------------------
From: [EMAIL PROTECTED] (Gilford Wimbley)
Subject: Re: Help! Networking & IP Masquerading & PPP, oh my!
Date: Mon, 14 Jun 1999 04:40:49 GMT
On Sat, 12 Jun 1999 23:31:22 -0700, "David Gallo"
<[EMAIL PROTECTED]> wrote:
>Hmmm..... I guess I was being a little vague on what exactly I wanted help
>with.
>
>First things first.
>
>1) The kernel already has the appropriate bits installed, so there's one egg
>in the basket. Lucas Bradstreet: Will the info about IPchains really help me
>if I'm running RH5.2? I was under the impression that 5.2 only had ipfwadm?
>Please correct me if I'm wrong.
>
I'm glad you weren't asking me, because I don't know ;-)
>2) I have issued forwarding policies (I also have a few books that seem to
>be quite excellent as well as the How-To. It's still a bit confusing, but I
>think I understand this part). Egg isn't quite in the basket, but this isn't
>the point I'm at yet (I think).
>
>3) Yes. This is easy. However, the part I want to know about is this:
>
>If I do not have a separate firewall server, then how do I use ipfwadm (how
>do I set the interfaces/source & destination) and how do I configure the
>gateway? All documentation I've been able to find has been for a dual-server
>setup, and that's not what I want to do right now ( I just want to get it
>working this way so I can use it. Down the road I'll end up setting up a
>second server for security's sake.)
I don't have a second server either. My home lan isn't an ultra
secure zone. Oh, well...
The commands I put in /etc/rc.d/rc.local are as follows:
ipfwadm -F -p deny
ipfwadm -F -a m -S 192.168.1.0/24 -D 0.0.0.0/0
the first sets up a default policy of deny, and the second sets up a
policy to masquerade all packets coming from my local net
(192.168.1.xxx). The /24 part tells ipfwadm that it the netmask is 24
bits long. (i.e., the last number of the four in the dotted quad can
be anything). The -D 0.0.0.0/0 lets me masquerade to any destination
on the internet.
What else. On the masquerading machine itt seems to me that I
configured almost everything from the x-based network configuration
tool. Assuming that you have the interfaces working properly on the
linux machine, then in RH5.2, you can startx as root. Run the Network
Configurator (on my default installation this is started by clicking
on an icon on the control panel that looks like a bunch of stations
connected to a server.) Under the routing tab in the Network
Configurator make sure that the network packet forwarding box is
checked (red = checked on my machine).
I think you also need to do the following: Under Default Gateway
Device, enter ppp0. If, by some strange chance, you have a static IP
for your ppp connection you can enter that static address in the
Default Gateway space, otherwise leave it blank. I think you might
need to run pppd with the defaultroute option or something like that.
>
>Thank you for the help
>
>- David
>
>
Hope that helps!
>Gilford Wimbley wrote in message <[EMAIL PROTECTED]>...
>>Well, what you want to do isn't that trivial. It can't be explained
>>in a short reply. Let me list the big steps, to direct your
>>attention.
>>
>>1) recompile your kernel to support masqerading and reboot.
>>2) issue the appropriate forwarding policy using ipfwadm
>> (once you are sure of the commands, you can put them in rc.local)
>> (also, make sure you allow forwarding)
>>3) Configure your 5 plus windows 98 machines to use your linux machine
>>as a gateway. You can either make your linux box be a DNS or tell the
>>windows machines to use whatever your ISP gave you as a DNS.
>>
>>I learned how to do all three of these things from a book called _The
>>Linux Network_ by Fred Butzen and Christopher Hilton. It is very
>>detailed and very specific to exactly what you want (and I wanted) to
>>do.
>>
>>However, I'm not feeling patient enough at the moment to condense and
>>paraphrase two chapters ;-)
------------------------------
Reply-To: "Carl Filpo" <[EMAIL PROTECTED]>
From: "Carl Filpo" <[EMAIL PROTECTED]>
Subject: Routing through linux
Date: Mon, 14 Jun 1999 12:48:53 +0800
I have a linux box (Debian 2.1) set up as a mail server/gateway with a
permanent
dialup to an ISP with a static IP. eg. 203.x.x.x for agument sake.
It runs IP masquerading so the computers on the LAN all have addresses
192.168.0.x
I need to set up another box - a web server on the local network with
another
"real" static IP.
What I'm not sure about is how t oroute from the gateway mentioned above
(203.x.x.x) to the web server (203.x.x.y) on the local lan.
Questions:
1. What command must I give to route from the gateway to the web server ?
How about: route add 203.x.x.y in the rc script ??
2. Does the web server need to have 2 ip addresses ( 1 for the 192.168.0.x
and 1 for the real ip ) ??
Or will it be fine with a real IP on the local net of 192.168.0 ?
3. If I set the ISP's DNS as:
domainname.com 203.x.x.x
www .domainname.com 203.x.x.y
will the static route I set up from (1) allow traffic through to the www
site from the gateway (domainname.com) ?
Does the ISP have to have anything special in their routing config for
Internet nodes to access the web server given
that the only direct connection is through 203.x.x.x - does the www entry
have to point to 203.x.x.x or 203.x.x.y ??
--
Carl Filpo
Computer Network Consultant
=================================================
Carl Filpo BSc(Curtin)
Computer Network Consultant
C&M Computer Solutions
26 Russell St
MORLEY WA 6062
Email: [EMAIL PROTECTED]
Phone: +61 08 9375 1144
Fax: +61 08 9375 1141
Mobile: 0407 396 316
=================================================
------------------------------
From: mp <[EMAIL PROTECTED]>
Subject: sub-domain
Date: Tue, 08 Jun 1999 10:03:58 +0000
Hi all,
How do you go about aadding sub-domains that point to directories under
the document root?
Thanks,
Mark
------------------------------
From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.misc
Subject: Secure network-backup via nfs?
Date: Mon, 14 Jun 1999 10:25:21 GMT
I work for a company who runs a number of publicly accessible servers.
That's five servers running some version of RedHat ( kernel 2.2.x ) and
various services like sendmail, apache, mysql.
For backups we have a HP SureStore 24eU DAT tapedrive, which is
connected to one of the servers. BRU is the preferred software.
My question is: How can I backup all the servers in a secure way, by
using the host to which the DAT is connected?
Ideally I would like to nfs-mount all servers on the DAT-host, but I
have avoided nfs for perceived lack of security and performance issues.
How vulnerable does it make our servers if we use nfs ( assuming we
configure it properly )?
Another possibility would be using the rmt device. I would still need to
enable rpc for that, again opening up the system.
What's the best way of handling backup for a similar setup?
--
-Toem
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
