Linux-Networking Digest #557, Volume #11         Wed, 16 Jun 99 15:13:42 EDT

Contents:
  ISDN Adapter problems ("Martin Hearn")
  Re: Simple LDAP for Linux? (Robert Lynch)
  ppp connection (Vitor Alcantara Batista)
  Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft Retest 
News (Paul D. Smith)
  Re: diald still dials every time (Paulo Garcia)
  Re: FTP across Linux gateway errors (Andrzej Filip)
  Re: E-mail programme for Linux..? ([EMAIL PROTECTED])
  Re: printing from windows to a linux print spool ([EMAIL PROTECTED])
  Re: WIERD NETWORK CONFIGURATION PROBLEM.... ([EMAIL PROTECTED])
  Re: Linux proxy + firewall ("Otto")
  ipchains port forwarding problems ("Jurik Ristjouw")
  Re: dns question ([EMAIL PROTECTED])
  Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft Retest 
News ("Stuart Fox")
  Re: samba-server does not appear in the network neightbourhood (Ben Short)
  Samba -access rights problem ("Groover")
  Re: ipchains port forwarding problems (Wesley Daemen)
  Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft Retest 
News (Paul D. Smith)
  Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft Retest 
News (I R A Aggie)
  Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft Retest 
News (I R A Aggie)
  Re: Behind firewall.. getting out? ([EMAIL PROTECTED])
  FTP across Linux gateway errors ("Joseph Bergevin")
  Re: 3com installation. Help. ("Niek Schroten")
  Re: ftp quickie (Romain Guilleret)

----------------------------------------------------------------------------

From: "Martin Hearn" <[EMAIL PROTECTED]>
Subject: ISDN Adapter problems
Date: Wed, 16 Jun 1999 16:44:20 GMT

Hi there
Has anyone managed to get an Elsa Quickstep 1000 Pro PCI (ISDN) card working
under Red Hat 5.2  or Linux Kernel 2.0.36
Thanks
Martin




------------------------------

Date: Wed, 16 Jun 1999 10:13:21 -0700
From: Robert Lynch <[EMAIL PROTECTED]>
Subject: Re: Simple LDAP for Linux?

Mark Bramwell wrote:
> 
> I have a couple of thousand names and email address in a file.
> e.g.   "Full Name","Email Address"
> 
> I want to be able to point the Outlook Express program at my linux box and
> have it do a LDAP query.  I can put the data in any format but I don't want
> a large x.500 server app.  Anyone have any recommendations for a quick and
> dirty bare bones LDAP server daemon ?
> 
> PS:  I have downloaded and compiled Open LDAP.  It passes all of the tests
> but can't figure out how to put my data into the server.

See the execellent LDAP article at:

http://www.linuxworld.com/linuxworld/lw-1999-03/lw-03-uptime.html
-- 
Robert Lynch-Berkeley CA [EMAIL PROTECTED]
http://www.best.com/~rmlynch/

------------------------------

From: Vitor Alcantara Batista <[EMAIL PROTECTED]>
Subject: ppp connection
Date: Wed, 16 Jun 1999 11:13:55 -0300


        I'm having problems with ppp connection with my internet provider.
I'm using kppp. I'm sure that domain name, DNS IP and phone number are
correct. When I try do connect, after the connection made, the mensage
"the ppp deamon died unexpected" apear.
        Can anybody help me?

      ==========================================
      |                                        |
      |  Vitor Alcantara Batista               |
      |  Aluno de Ciencia da Computacao - UFMG |
      |  Endereco :                            | 
      |  R.Araxa, 272/203 Colegio Batista      |
      |  Belo Horizonte - BH  CEP : 31110-280  |
      |  Telefone : (031) 444-2047             |
      |                                        |
      ==========================================


------------------------------

From: [EMAIL PROTECTED] (Paul D. Smith)
Crossposted-To: 
omp.os.ms-windows.nt.advocacy,comp.os.linux.advocacy,comp.infosystems.www.servers.unix,comp.os.linux.misc
Subject: Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft 
Retest News
Date: 16 Jun 1999 12:51:36 -0400
Reply-To: [EMAIL PROTECTED]

%% "Chad Mulligan" <[EMAIL PROTECTED]> writes:

  >> IE ?  who cares. THe Solaris version is a POS.

  cm> Couldn't be worse that Netscape.

Hah hah hah!  You _obviously_ have never tried it.  I have.  Trust me,
no matter how bad you think Netscape is, IE for Solaris is much, much
worse.  I posted a review of my experience with it last summer.

  - It doesn't have any features except the browser (no mail, no news
    client, no editor, etc.)  It does have a way to invoke your own,
    though (I wish Netscape made this simpler!)  This is its _only_
    useful point :).

  - It's _huge_ compared to Netscape, both on disk and in memory--and
    this is compared full-fledged Netscape Communicator with all the
    trimmings, not the standalone Navigator, which is basically what IE
    for Solaris is.

  - It's _much_ slower than Netscape.

  - The first time it starts it creates a huge directory structure under
    your home directory with megabytes and megabytes of stuff in it (not
    cache files, either).

  - It died twice on me in one day.

  - It looks and works more like a Windows app than a UNIX/X app.  Yuck.

You may not like Netscape, but they do a far, far better job of writing
Windows apps than Microsoft does writing UNIX/X apps.

IMO, Netscape on UNIX isn't too bad.  It's big and kinda slow, and until
very recently would die on me much more than I expect from a UNIX tool,
but since I started using Navigator 4.08 it's been pretty stable.  (I
tried 4.5 for a while, but the bookmark drag-n-drop is busted so I went
back to 4.08).

-- 
===============================================================================
 Paul D. Smith <[EMAIL PROTECTED]>         Network Management Development
 "Please remain calm...I may be mad, but I am a professional." --Mad Scientist
===============================================================================
   These are my opinions---Nortel Networks takes no responsibility for them.

------------------------------

From: Paulo Garcia <[EMAIL PROTECTED]>
Subject: Re: diald still dials every time
Date: Wed, 16 Jun 1999 16:22:24 GMT



> I don't think diald automatically tells you exactly why it is bringing
> itself up.  On my machine, it does send a message to
> "/var/log/messages"  every time it comes up.  But that message doesn't
> specify which rule was responsible for bringing the link up.
>
> On my installation of diald, there is a file called "standard.filter"
> in the directory "/etc".  This file, which came with the distribution
> of diald, controls what packets bring the link up and keep it up.  It
> has many explanatory comments.
>
> I do not fully understand everything in the file myself, but if you
> can find this file on your machine somewhere, you can play with it.
> Also, you can post portions of it with questions and people can answer
> them.
>
> let me know if you want me to email my "standard.conf" to you.
>
> regards, GW
> [snip]
>
I look this standard.conf and to my knowlegement it 's very dificult to
understand, but I'll research a little more.

If you can send me your standard.conf I accept. May be looking your
file I can do something...


Thanks!
--
===========================
[]'s
Paulo Garcia
[EMAIL PROTECTED]
Digivoice Eletronica


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------

From: Andrzej Filip <[EMAIL PROTECTED]>
Subject: Re: FTP across Linux gateway errors
Date: Wed, 16 Jun 1999 16:29:42 +0200

Joseph Bergevin wrote:

> I've got a Linux box set up as an Internet gateway, using RH5.1 (ipfwadm).
> Anyway, all the services work great across the gateway except FTP, which
> allows me to log on to a server, but then has problems when I try to get a
> directory listing. If I telnet to the Linux box, I can FTP fine from there.
> Any precedent?

Standard ftp sessions requires two tcp connections:
* control from client to server
* data from server to client

Typical masquerading does not handle it.

AFAIK you have two options:
1) use ftp client which can handle passive option
(both connections from client to server)
2) use ftp masquerading module.

--
Andrzej (Andrew) A. Filip
mailto:[EMAIL PROTECTED] http://www.bigfoot.com/~anfi
Postings: http://www.deja.com/profile.xp?author=Andrzej%20Filip&ST=PS



------------------------------

From: [EMAIL PROTECTED]
Subject: Re: E-mail programme for Linux..?
Date: Wed, 16 Jun 1999 17:54:58 GMT

Andrew Wedding <[EMAIL PROTECTED]> wrote:
> Hi everyone, just a question regarding e-mail.

> Other than the normal text-based e-mail programmes that come with Linux (ie
> elm and pine) is Netscape the only (best) e-mail programme with HTML
> capabilities?  What programmes does everyone else use?

nmh works well, set its showmimeproc to metamail, and add an
entry to your mailcap that starts lynx on it.

Alternatively, you could tell people to quit sending you HTML
email.

-- 
Adam C. Emerson                             [EMAIL PROTECTED]
http://www.calvin.edu/~aemers19/

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: printing from windows to a linux print spool
Date: Wed, 16 Jun 1999 18:02:48 GMT

Rage-DCA <[EMAIL PROTECTED]> wrote:
> ok, i'm using lprng, gs5.85, and apsfilter5.1.2 and it works great. i
> am also running samba2.0.4b and thats working great with my hp deskjet
> 660 cse. i know my printer works because i can print off the computer
> it is connected to and from another linux server. one problem though,
> i can't get windows95 to set it up right. i have windows setup right
> with everything else so it jives with samba, i just don't know how to
> setup the printer itself

> what printer driver do you use for windows 95? the hp driver? an
> postscript printer driver?
> should i make windows use a RAW or EPM spool type? and what should i
> link it to on linux (a raw spool, or normal spool)? if anyone has a
> setup kinda like this, please let me know. thx alot.

Just configure Winders to use the hp driver, magicfilter passes
PCL straight through.

-- 
Adam C. Emerson                             [EMAIL PROTECTED]
http://www.calvin.edu/~aemers19/
Movesource Network Systems Specialist

------------------------------

From: [EMAIL PROTECTED]
Subject: Re: WIERD NETWORK CONFIGURATION PROBLEM....
Date: Wed, 16 Jun 1999 18:00:48 GMT

David B. Hostetler <[EMAIL PROTECTED]> wrote:
> Okay here is the setup.
> "Bob" is computer A. WinNT server with service pack 5.  He is the domain
> master.
> "Leonard" is computer B. A RedHat 6.0 Workstation class install with
> Samba added. We also want to use leonard as an IP firewall.
> "Stanley" is computer C. A RedHat 6.0 Workstation.
> "Chuck" is computer D. A Windoze 95B Workstation.
> "Oscar" is computer E. A Windoze 98 upgrade Workstation.

>     Right now they are all configured for DHCP. The internet connection
> is an ADSL router. Leonard does not currently have IP masquerade set up.
> The problem is that Bob and Oscar cannot log onto Leonard, He shows up
> in network neighborhood but gives an incorrect password error to the
> user.
>     Is there something wierd about NT and 98 as far as passwords go?
> What do I need to edit and on what machines?
>     Also I have never configured IP masquerade, Any advice would be
> helpful.

You need to use a recent version of samba, and enable encrypted
passwords.

-- 
Adam C. Emerson                             [EMAIL PROTECTED]
http://www.calvin.edu/~aemers19/
Movesource Network Systems Specialist

------------------------------

From: "Otto" <[EMAIL PROTECTED]>
Subject: Re: Linux proxy + firewall
Date: Wed, 16 Jun 1999 14:28:45 GMT

Should be in the DMZ, port1 LAN --> port2 DMZ (proxy server) --> port3
Internet.

Roman Payreder <[EMAIL PROTECTED]> wrote in message
news:7k7tcs$r$[EMAIL PROTECTED]...
> Hi all!
>
> We plan to use a socks5 Linux proxy in our network.
> Our network consits of a firewall (Checkpoint FW-1) with 3 ports: 1 for
LAN,
> 1 for DMZ and 1 for the Internet.
>
> My question is: Where should we place the proxy server (which network) to
be
> sure that everything works and everything as secure as possible ?
>
>



------------------------------

From: "Jurik Ristjouw" <[EMAIL PROTECTED]>
Subject: ipchains port forwarding problems
Date: Wed, 16 Jun 1999 19:16:42 +0200

Hi, I hope sombeody can help me with the following...

i have suse 6.1

i've set up the following rules for interal network..

ipchains -P forward DENY
ipchains -A forward -s 192.168.0.1 -j MASQ
ipchains -A forward -s 192.168.0.2 -j MASQ
ipchains -A forward -s 192.168.0.100 -j MASQ
ipchains -A forward -s 192.168.0.101 -j MASQ

and the modules ip_masq_irc, ip_masq_ftp for the irc and ftp problems...

this is working perfectly, all the computers can browse etc.

now i'm trying to run a ftp server on one of the local machines ie
192.168.0.1 port 21

i have tried (and many variants) to do this
ipchains -I input -p tcp -j REDIRECT -s 0/0 21:21 -d 192.168.0.1 21:21

it does appear in the chain, but it just won't work, what is the problem

please help

Jurik





------------------------------

From: [EMAIL PROTECTED]
Subject: Re: dns question
Date: Wed, 16 Jun 1999 14:50:48 GMT

David Bell <[EMAIL PROTECTED]> wrote:
> I already have a primary dns setup for my private lan. I wondered if I have to
> put my isp's dns ip address on the windows computers or if my dns (on the linux
> computer) would forward the requests that it doesn't know the answers to, to
> the isp?

No, your nameserver is set up as caching (unless you specifically
set it not to be), and you'll get better performance since queries
for cached sites will just go over the network rather than through the
phoneline.

> Please don't email me just reply on the board.

Newsgroup.  HTH. HAND>

-- 
Adam C. Emerson                             [EMAIL PROTECTED]
http://www.calvin.edu/~aemers19/
Movesource Network Systems Specialist

------------------------------

From: "Stuart Fox" <[EMAIL PROTECTED]>
Crossposted-To: 
omp.os.ms-windows.nt.advocacy,comp.os.linux.advocacy,comp.infosystems.www.servers.unix,comp.os.linux.misc
Subject: Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft 
Retest News
Date: Wed, 16 Jun 1999 10:40:29 +1200


Philip Brown <[EMAIL PROTECTED]> wrote in message
> >

> If you read the supplied URL above, you'll learn that microsoft doesn't
have
> to cheat, to give a better performance than linux on an SMP box.
> Personally, I'd like to see the results on the same machine, when
> linux is swapped out for solaris.
>
But Linux != Solaris, the benchmark is between Linux and NT.

Stu



------------------------------

From: [EMAIL PROTECTED] (Ben Short)
Crossposted-To: comp.os.linux.misc
Subject: Re: samba-server does not appear in the network neightbourhood
Date: Wed, 16 Jun 1999 08:59:16 +1000

In article <[EMAIL PROTECTED]>, hauke.luethje@cybernet-
ag.de says...
> Hi, all together,
> 
> I have a problem with a samba-server (version 2.0.3) with
> SUSE Linux 6.1.
> My network looks like this:
> 
> 2 Windows NT 4.0 Servers (SP4) as PDC and BDC
> 1 Windows NT 4.0 Workstation (SP4) with Firewall-SW as primary DNS
> 1 Linux PC (SUSE 6.1 with Samba 2.0.3) as secondary DNS
> some Win95 and Win98 Clients.
> 
> The samba-server work fine but he does not appear in the network
> neightbourhood windows of the windows servers and clients.
> 
> With "search computer" the samba-server will be found and its shares
> will be displayed.
> 
> The services smbd and nmbd are started through scrips in the
> file rc.config and not in the file inetd.conf.
> 
> There is another fact that can be important for the solution of the
> problem:
> when i call "nmblookup -d 2 '*'", then i only receive an answer (got
> positive name query response) from the samba-server itself. The other
> machines in the network dont give a response, but they are in
> the same subnet ( net:172.16.x.x subnetmask: 255.255.0.0).
> 
> does anybody have a solution for this problem?
> Hauke
> 
> A copy of my smb.conf:
> 
> [global]
>    netbios name = teslixa
>    workgroup = TESCOM
>    guest account = nobody
>    server string = Samba Server
>    keep alive = 10
>    os level = 33
>    interfaces = 172.16.0.12/255.255.0.0
> 
>    security = domain
>    password server = tesnt4b
>    encrypt passwords = yes
> 
>    domain master = no
>    local master = no
>    preferred master = no
>    wins support = no
> 
You may find it will work if you make the samba box the prefferred local 
master browser. I had a similar problem and that rectified it.

Alternatively, youw could read the BROWSING.txt file that is in the samba 
docs, for remote announce and things like that :)

-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Ben Short                http://www.shortboy.dhs.org
Shortboy Productions     mailto:[EMAIL PROTECTED]

*Remove n0spam to email me*
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

------------------------------

From: "Groover" <[EMAIL PROTECTED]>
Subject: Samba -access rights problem
Date: Wed, 16 Jun 1999 20:14:03 +0200

I have installed Samba and it's runs fine.
My problem is this, I have created a map called let's say Public and I have
created users that are members of the group test.

I set the rights like this:
# chown myuser:test /home/public
# chmod 2770 /home/public

Now all my users in the group test should be able to create files and the
files will be owned and accessed by the group test. Well it's here it all
goes wrong. The user who creates the file is the owner and all the other
members can only read the file but not write to the file. How can I fix this
so all the mebers in the group can read/write files independent on who's the
original owner. I really want to share the files with the members in the
group. Anyone got an idea of to solve this (simple) problem? /Martin



------------------------------

From: Wesley Daemen <[EMAIL PROTECTED]>
Subject: Re: ipchains port forwarding problems
Date: Wed, 16 Jun 1999 20:21:24 +0200

Jurik Ristjouw wrote:
> 
> Hi, I hope sombeody can help me with the following...
> 
> i have suse 6.1
> 
> i've set up the following rules for interal network..
> 
> ipchains -P forward DENY
> ipchains -A forward -s 192.168.0.1 -j MASQ
> ipchains -A forward -s 192.168.0.2 -j MASQ
> ipchains -A forward -s 192.168.0.100 -j MASQ
> ipchains -A forward -s 192.168.0.101 -j MASQ
> 
> and the modules ip_masq_irc, ip_masq_ftp for the irc and ftp problems...
> 
> this is working perfectly, all the computers can browse etc.
> 
> now i'm trying to run a ftp server on one of the local machines ie
> 192.168.0.1 port 21
> 
> i have tried (and many variants) to do this
> ipchains -I input -p tcp -j REDIRECT -s 0/0 21:21 -d 192.168.0.1 21:21
> 
> it does appear in the chain, but it just won't work, what is the problem
> 
> please help
> 
> Jurik

I think you misunderstand the use of the REDIRECT keyword.
REDIRECT is used to redirect from one port of the firewall to another
port on the SAME machine
For example: I use a REDIRECT to redirect port 55555 to port 23, so I
can telnet to my firewall (my ISP blocks all incoming messages below
port 1024 :-( )
For this I use:

ipchains -I input -p tcp -s 0.0.0.0/0 -d la.la.la.la 55555 -j REDIRECT
23

(la.la.la.la is the local adres, the firewall's adres visible from the
outside of the firewall)

I also use a portforwarding of port 55556 of the firewall to port 23 of
a machine behind the firewall.
To do this you need (for a 2.2.x kernel, preferably the new 2.2.10, I
believe the 2.2.9 has problems with forwarding) the ipmasqadm utility
(http://juanjox.kernelnotes.org))
Command:
ipmasqadm portfw -a -P tcp -L la.la.la.la 55556 -R ra.ra.ra.ra 23

(ra.ra.ra.ra is the adres of the machine you are redirecting to)

I hope this can help you solving the problem

Wesley

------------------------------

From: [EMAIL PROTECTED] (Paul D. Smith)
Crossposted-To: 
comp.os.linux.advocacy,comp.infosystems.www.servers.unix,comp.os.linux.misc
Subject: Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft 
Retest News
Date: 16 Jun 1999 13:28:43 -0400
Reply-To: [EMAIL PROTECTED]

%% [EMAIL PROTECTED] (Terry Carmen) writes:

  tc> On Wed, 16 Jun 1999 14:11:07 GMT, [EMAIL PROTECTED] (Mark S. Bilk) wrote:

  >>> If Microsoft wins, they must have cheated.

  >>> If Linux wins, they didn't.

  >> The tests would have to be repeated on hardware that is 
  >> known to have unmodified microcode, and with software and
  >> configuration data that are also known not to have been 
  >> meddled with.  The precautions to ensure this would have 
  >> to take into account the fact that executing any program 

  tc> I suspect that if Microsoft had any "magic software dust" that
  tc> they could sprinkle around to improve performance, they would do
  tc> it in their production code, which would improve sales, and not
  tc> save it for a rainy day when they needed to annoy Linux users.

Well, the changes may be specifically designed to allow the system to
perform much better on that particular benchmark, but are useless at
best or very bad at worst for normal, day-to-day usage.

Compiler writers have a long and storied history of this kind of thing:
they like to write specific optimizations for well-known benchmarks so
their compilers look better in comparisons--but most benchmarks are
fairly poor at emulating real-life usage so these kinds of targeted
optimizations almost never result in any real code running faster.

Anyway, changing hardware microcode has nothing to do with the
performance of the OS: that gives a skewed result for the
benchmark... it's like running benchmarks on different hardware.  The
comparison you want to make is between the operating systems themselves,
so everything else has to be as invariant as possible.

-- 
===============================================================================
 Paul D. Smith <[EMAIL PROTECTED]>         Network Management Development
 "Please remain calm...I may be mad, but I am a professional." --Mad Scientist
===============================================================================
   These are my opinions---Nortel Networks takes no responsibility for them.

------------------------------

From: [EMAIL PROTECTED] (I R A Aggie)
Crossposted-To: 
omp.os.ms-windows.nt.advocacy,comp.os.linux.advocacy,comp.infosystems.www.servers.unix,comp.os.linux.misc
Subject: Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft 
Retest News
Date: 16 Jun 1999 18:10:47 GMT
Reply-To: [EMAIL PROTECTED]

On 16 Jun 1999 12:51:36 -0400, Paul D. Smith <[EMAIL PROTECTED]>, in
<[EMAIL PROTECTED]> wrote:

[about IE under Solaris]

+   - It doesn't have any features except the browser (no mail, no news
+     client, no editor, etc.)

You say that like it is a bad thing.

James

------------------------------

From: [EMAIL PROTECTED] (I R A Aggie)
Crossposted-To: 
omp.os.ms-windows.nt.advocacy,comp.os.linux.advocacy,comp.infosystems.www.servers.unix,comp.os.linux.misc
Subject: Re: Could Microsoft Cheat On The New Mindcraft Benchmark? (was: Mindcraft 
Retest News
Date: 16 Jun 1999 18:13:33 GMT
Reply-To: [EMAIL PROTECTED]

On Wed, 16 Jun 1999 08:58:02 -0700, Chad Mulligan
<[EMAIL PROTECTED]>, in
<RPP93.142$[EMAIL PROTECTED]> wrote:

+ The server too busy is IE for timeout.

Then IE is broken if it returns a HTTP error code when it should be
transmitting a 'connection timed out' error.

James


------------------------------

From: [EMAIL PROTECTED]
Subject: Re: Behind firewall.. getting out?
Date: Wed, 16 Jun 1999 18:06:18 GMT

[EMAIL PROTECTED] wrote:
> I'm behind a proxy and firewall on which only web ports for traffic are
> allowed out. I was wondering if there's any sort of application set so
> I could use a web browser (and maybe run a JAVA app) to use the web
> port to communicate with something on a Linux system which I have on
> the outside world to FTP, telnet, or other applications from. So I'd
> use my browser (and any JAVA apps it loads.. or I could run some other
> program on this system than a browser) to interact thru port 80 with
> the other system. Suggestions?

You could set up telnet (maybe ssh?  Don't konw) on port 80 of
your linux system, and use term through it.

-- 
Adam C. Emerson                             [EMAIL PROTECTED]
http://www.calvin.edu/~aemers19/
Movesource Network Systems Specialist

------------------------------

From: "Joseph Bergevin" <[EMAIL PROTECTED]>
Subject: FTP across Linux gateway errors
Date: Wed, 16 Jun 1999 09:59:26 -0400

Hello all,

I've got a Linux box set up as an Internet gateway, using RH5.1 (ipfwadm).
Anyway, all the services work great across the gateway except FTP, which
allows me to log on to a server, but then has problems when I try to get a
directory listing. If I telnet to the Linux box, I can FTP fine from there.
Any precedent?

Thanks



------------------------------

From: "Niek Schroten" <[EMAIL PROTECTED]>
Subject: Re: 3com installation. Help.
Date: Wed, 16 Jun 1999 16:24:50 +0200


Dan D <[EMAIL PROTECTED]> schreef in berichtnieuws
EHD93.2213$[EMAIL PROTECTED]
> I have @home service and 3com 3c509b nic
>
>
> During the bootup it says:
> ...
> ...eth0                                                 OK
> delaying ...eth0                               FAILED
>
> Now I know all my settings (we have static ip) and the card's PNP is off.
I
> enterde them in netconf under eth0. What's wrong?
>
> BTW. How do I enter the I/O and IRQ? This is what I did.
>
> I/O    0360     (300H in the card's DOS setup utility)
> IRQ  03
>
> Is this correct?
>
Use 3c5x9cfg to configure your card on a free IRQ (9,10,11.....) en adres
300 or something laike that if its free and reinstall the card with
ifconfig. IRQ 3 is in use by com 2/4, therefore it is not recommended you
use this interupt.



------------------------------

From: Romain Guilleret <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.security,comp.os.linux.misc,comp.os.linux.setup
Subject: Re: ftp quickie
Date: Wed, 16 Jun 1999 20:20:50 +0200
Reply-To: [EMAIL PROTECTED]

Andrew Hughes wrote:

> I have an ftp site using wu.ftpd (standard ftp deamon which is shipped
> with redhat) and would like to know how to allow users to access only
> their home directory (i.e. their home dirctory on the box is their root
> directory) when they ftp to the box.
>
> any ideas?

Use the guestgroup directive in /etc/ftpaccess

guestgroup groupname [groupname]

where  groupname is a valid group in /etc/group will cause the ftp server
to chroot to the home directory of any user
of groupname ( man ftpaccess for more )

For this to work well, the home directory of your users should be
configured like an anonymous ftp directory ( man ftpd for more details )

If you don't make any change to their directories, they won't be able to
use ls



Hope this helps


            Romain Guilleret







>
>
> Thanx in advance
>
> Andy


------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to