Linux-Networking Digest #917, Volume #11         Fri, 16 Jul 99 17:13:43 EDT

Contents:
  Re: win98 <-> linux ("Terry Cox")
  The best way? (Ken R.)
  Re: Linux IRQ oops ([EMAIL PROTECTED])
  Re: PING in NT DOMAIN and LINUX ("Terry Cox")
  Multiple dialin connections using PPP (Charles Steaderman)
  RFC 959 linux ftpd, Contivity Extranet Switch (Richard Demanowski)
  Re: Linux PPP server problems (Tom Griep)
  Re: Win98(Server) -> Linux(Client), Suggestions??? (Brad Kittredge)
  Linux IRQ oops ("Hunter Ritchie")
  Re: Linux PPP server problems (Clifford Kite)
  Re: Another problem with multiple NICS (Charles Stack)
  Re: Linux IRQ oops (H.Bruijn)
  Re: Firewalls when I don't control the entire subnet (Greg Leblanc)
  THANK YOU. Re: takes long time to connect via telnet. (Ron Peterson)
  Re: PPP-After get connected and ppp0 configured, I can't see route table !!! ("Terry 
Cox")
  Re: netscape, dns lookup probs (Cris Johnson)
  Re: My Dissapointment to find Linux not a viable solution (Gary Flynn)
  Re: RFC 959 linux ftpd, Contivity Extranet Switch (Alan Curry)
  Re: Apache: You do not have permission to access (tomislav)

----------------------------------------------------------------------------

From: "Terry Cox" <[EMAIL PROTECTED]>
Subject: Re: win98 <-> linux
Date: Fri, 16 Jul 1999 12:20:37 -0700

Is your Linux network card supported?  The fact that you can ping yourself
is a good sign.  If it still doesn't work, you may have one or both network
cards not setup properly.  It is difficult to know which one.  If you have a
TP hub, can you see any lights when these machines are up.  If you have the
same network address (typically 192.168.1.0) and the appropriate subnet mask
(255.255.255.0), you should be able to ping the other machine without the
need of a gateway or DNS.  On your Win9X system, check Device Manager to see
if it reports any problems with your NIC.  Good Luck!


Marco Vranken wrote in message <7mlm4v$r5v$[EMAIL PROTECTED]>...
>Hello,
>
>I'm still not able to ping between win98 and linux (after reading
>NET3-HOWTO, SAMBA-HOWTO, and
>lots of mailing in this newsgroup).  I use alsways the IP addresses, so no
>problems with
>hostnames can occur.  When I ping from WIN98 to LINUX, I get a time out.
>When I ping from LINUX to WIN98, I aways get something with 56 databytes,
>and then nothing.
>I am able to ping my localhost and eth0 within linux.
>I am also able to ping the win98 IP starting from win98.
>I also adapted the encrypted password problem.
>I also adapted the most important files in the /etc/... directory which are
>described in NET3-howto.
>
>
>I am getting pretty desperate.  Can somebody send me an example of the most
>simple win98-linux network configuration settings  (I mean settings in
>/etc/... files, and settings on the win98 side like properties
>of networkcards, tcp/ip settings) that works, I mean where at least I can
>ping between win98 and linux.
>Thanks in advance.
>
>(I want linux to be server for win98.)
>
>!!!!!Some concrete questions!!!!
>1) suppose, I only want to ping from win98 to linux or vica versa:
>        > do I need samba for this ??? (on linux)
>        > do I need DNS for this ??? (on win98)
>        > do I need to mark the box for filesharing (on win98) for this??
>        > do I need to logon into the winNT domain (this looks obvious yes,
>but you never know)???
>
>I already tried out all the possible combinations, and nothing seems to
>work/ping
>
>Help, my holidays get messed up a little bit .
>Greetings, Marco Vranken
>
>
>



------------------------------

From: Ken R. <[EMAIL PROTECTED]>
Subject: The best way?
Date: Fri, 16 Jul 1999 18:43:04 GMT

What be the best way to ahve a linux laptop use file and printers on
multiple netware 5 servers. The servers are running true IP and the
laptop is connecting using DHCP. If any one has any advice or knows of a
good how-to that would help alot. Thanks Ken R.


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.setup
Subject: Re: Linux IRQ oops
Date: Fri, 16 Jul 1999 19:22:00 GMT

"Hunter Ritchie" <[EMAIL PROTECTED]> wrote:
>   Question::  How or where do I manipulate settings (through commands or
>script modification) to get Linux to look for the card at IRQ 10?  I've
>tried 'ifconfig' and 'ether=' at boot.  Neither has worked (which means they
>both probably do and I just didn't use them correctly.)

I suspect it will being passed to the relevant module as an argument in
one of the init scripts residing in /etc/rc.d. I don't use redhat personally
(because they make such a dogs dinner of lots of supposedly simple things
 including the /etc/rc.d filesystem ironically) so I couldn't tell you which
one but look for something called rc.inet or similar and then search for "eth"
and the number 5 in the file.

NJR

------------------------------

From: "Terry Cox" <[EMAIL PROTECTED]>
Subject: Re: PING in NT DOMAIN and LINUX
Date: Fri, 16 Jul 1999 12:24:41 -0700

Check the Hardware FAQ to make sure your network card is supported.  I know
some 3Com cards are brain dead.

Bwilkinson1 wrote in message ...
>I have three machine's on my home network. One NT Primary Domain Controller
>, One NT Workstation , and one Linux box running Mandrake 6.0. They are all
>plugged into a 10mb hub (not switched). All my machine sit behind a proxy
>"Wingate 3.0" and are routed to the internet thru my DSL router. Of course
>my PDC is the default Gateway. I want to set up my LINUX box to be the
>Gateway but there is one problem.. I cant ping my NT boxes from Linux, and
I
>cant ping the Linux box from NT. The weird thing is that the Linux box
>running Samba is able to announce itself on the NT browse list's but I am
>unable to access it. If anybody has ran into this and could help me I would
>really appreciate it. I have spent many hours and have read countless man
>pages and various documents. I have re-installed twice. I have configured
>DNS instead of WINS. I would assume maybe a hardware problem, but the fact
>it announces itself in network neighborhood. I have to assume that I have
>configured the Networking portion of linux wrong. Here is what I have.
>
>NT PDC (3c509)
>IP 192.168.1.1
>Submask 255.255.255.192 (when I configured DNS it changed the 0 to 192...)
>
>NT WS (3c905)
>IP 192.168.1.2
>Submask 255.255.255.192
>Default GW 192.168.1.1
>
>Linux Box (3c509)
>IP 192.168.1.5
>Submask 255.255.255.192
>Primary NS 192.168.1.1
>Secondary 192.168.1.5
>
>I entered all the hosts info in /etc/hosts... When I send out a ping I can
>see activity between the hosts on the HUB lights.. They just dont recieve
>responses. PLEASE HELP!!!
>
>
>
>



------------------------------

From: Charles Steaderman <[EMAIL PROTECTED]>
Subject: Multiple dialin connections using PPP
Date: Fri, 16 Jul 1999 14:00:13 -0500

This is a multi-part message in MIME format.
==============8736C6ED198DD7423FED9FA7
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I am using PPP on RedHat Linux 6.0 to allow up to 4 dialin connections
to our company and provide a connection to the Internet. I have a
DigiBoard PC/Xe 4 port serial card which seems to be working fine. I can

dialin to any on of the 4 phone numbers and can get to the Internet with

no problem. The problem occurs when 2 or more connections are active.
Only one of the connections can get to the Internet. The other
connection(s) send data (shown on the client modem monitor and verified
by looking at the modem) but no data is transmitted back to the client.
Route problem? Here is the output from route when multiple connections
are active (ppp0 and ppp1). Any ideas?

[root@server /var/log]# /sbin/route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use
Iface
206.145.88.122  *               255.255.255.255 UH    0      0        0
ppp0
206.145.88.123  *               255.255.255.255 UH    0      0        0
ppp1
206.145.88.65   *               255.255.255.255 UH    0      0        0
eth0
206.145.88.64   *               255.255.255.192 U     0      0        0
eth0
127.0.0.0       *               255.0.0.0       U     0      0        0
lo
default         poliac2-rt-isdn 0.0.0.0         UG    0      0        0
eth0

--
Charlie Steaderman
[EMAIL PROTECTED]
VP Engineering
Poliac Research Corporation
Phone: 612.707.6245


==============8736C6ED198DD7423FED9FA7
Content-Type: text/x-vcard; charset=us-ascii;
 name="charlies.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Charles Steaderman
Content-Disposition: attachment;
 filename="charlies.vcf"

begin:vcard 
n:Steaderman;Charles
x-mozilla-html:FALSE
org:Poliac Research Corporation
adr:;;12233 Wood Lake Drive;Burnsville;MN;55337;USA
version:2.1
email;internet:[EMAIL PROTECTED]
title:VP Engineering
tel;fax:612.882.1374
tel;work:612.707.6245
x-mozilla-cpt:;37600
fn:Charles Steaderman
end:vcard

==============8736C6ED198DD7423FED9FA7==


------------------------------

From: Richard Demanowski <[EMAIL PROTECTED]>
Crossposted-To: utah.linux,comp.os.linux.development.system
Subject: RFC 959 linux ftpd, Contivity Extranet Switch
Date: Fri, 16 Jul 1999 19:00:40 GMT

I've found an issue with the Bay Networks Contivity Extranet Switch (a VPN
solution), and the Linux ftpd.

The CES uses an FTP server to load software upgrades.  On the Linux
server, the download to the CES dies with a message that it can't get a
directory listing from certain directories.

In the software tree there are several directories which contain no files,
and these are the ones that the CES pukes at.

It works fine from a Solaris and an NT box.

I tried doing an FTP from a client workstation onto the Linux and the Sun
boxes, and did an ls and a dir on an empty directory.

Here's what I got from the Linux box:

        ftp> cd empty
        250 CWD command successful.
        ftp> ls
        200 PORT command successful.
diff -> 550 No files found.
        ftp> dir
        200 PORT command successful.
        150 Opening ASCII mode data connection for /bin/ls.
diff -> total 2
        drwxr-xr-x   2 nortel   users        1024 Jul 16 05:26 .
        drwxr-xr-x   9 nortel   users        1024 Jul 16 05:26 ..
        226 Transfer complete.
        126 bytes received in 0.11 seconds (1.15 Kbytes/sec)

Here's what I got from the Sun box:

        ftp> cd empty
        250 CWD command successful.
        ftp> ls
     -> 200 PORT command successful.
diff -> 150 ASCII data connection for /bin/ls (167.1.23.126,16644) (0 bytes).
     -> 226 ASCII Transfer complete.
        ftp> dir
        200 PORT command successful.
        150 ASCII data connection for /bin/ls (167.1.23.126,16643) (0 bytes).
diff -> total 4
        drwxr-xr-x   2 nortel   staff        512 Jul 16 09:25 .
        drwxr-xr-x   6 nortel   staff        512 Jul 16 09:25 ..
        226 ASCII Transfer complete.
        124 bytes received in 0.02 seconds (6.20 Kbytes/sec)

The difference is that the Linux ftpd responds to the ls request with a
550 File not found, and the Sun ftpd responds with the sequence 150, 226.

The response to the dir request is also different, in that the Linux box
finds 2 files, and the Sun box sais 4.

Looking at RFC 959, page 51, I  see that the 150, 226 sequence is a valid
response to a list request.  I do not, however, see 550 in the list of 
valid responses.

It does not seem to me that  550 would be acceptable, since 5yz indicates
a Permanent Negative Completion, x5z indicates that it's from the file
system, yet a directory listing that contains no file names is still a
perfectly good directory listing.

Does the Linux ftpd not adhere to RFC 959?  Is there an updated RFC that I
missed that lists 550 as a valid response to LIST?  I could not find any
documents on www.isi.edu that supercede RFC 959 with regard to expected
behaviour from the LIST directive.

Thanx,
RichD
-- 
[EMAIL PROTECTED]                               [EMAIL PROTECTED]
                    http://www.wasatch.com/~rdemanow/
=========================================================================
  "I may disagree with what you have to say, but I will defend, to the
               death, your right to say it." -- Voltaire

------------------------------

From: [EMAIL PROTECTED] (Tom Griep)
Subject: Re: Linux PPP server problems
Date: 16 Jul 1999 19:03:19 GMT

Thanks for the help Clifford. I got it setup but I have one
problem. After I dial in and hang up the phone, the modem
in the server doesn't hang up and the ppp daemon is still running.
If I kill the pppd daemon, the modem hangs up and I can dialin again.

Any thoughts?

Sweep

Clifford Kite (kite@NoSpam.%inetport.com) wrote:
: The Sweep ([EMAIL PROTECTED]) wrote:

: : If I open up a terminal screen and login by hand, the PPP connection
: : works to the NT box. The problem I think is the Linux PPP server
: : is asking the username and password and the NT machine gets
: : confused.

: Configuring mgetty with it's AutoPPP sets up PAP authentication which
: might work.

: --
: Clifford Kite <kite@inet%port.com>                    Not a guru. (tm)
: /* 97.3% of all statistics are made up. */

------------------------------

From: Brad Kittredge <[EMAIL PROTECTED]>
Subject: Re: Win98(Server) -> Linux(Client), Suggestions???
Date: Fri, 16 Jul 1999 20:34:41 GMT

Same here...  I suggest that you move the modem to the Linux box and=20
use IP Masquerading to connect the network to the Internet.  It works=20
great, and is worth the effort, if for no other reason than to=20
understand how TCP/IP works...

>>>>>>>>>>>>>>>>>> Original Message <<<<<<<<<<<<<<<<<<

On 7/16/99, 10:27:17 AM, "Terry Cox" <[EMAIL PROTECTED]> wrote regardi=
ng=20
Re: Win98(Server) -> Linux(Client), Suggestions???:


> I have a similar environment.  I recently moved my modem off of my=20
Win95 box
> and put it on my Linux box.  I then set up my ISP connection on the=20
Linux
> box, using PPP and Chat.  I set up IP Masquerading so that all my=20
machines
> on my network can access the internet at the same time through my=20
Linux box.
> I suggest you take a look at the Networking Howto at=20
www.sunsite.unc.edu
> I'm not sure of the path, but look in something like Linux/Docs/Howto.=
=20
Good
> Luck!

> Lars Johnson wrote in message ...
> >Hi, I have a Win98 PC with an Internet connection  and I want to be=20
able to
> >access its Internet connection through from my Linux machine.  I have=
=20
SuSE
> >Linux 6.1, no server software for Win98 and an Ethernet connection=20
between
> >them.  Could anybody give me some suggestions to some free(GNU=20
perhaps)
> >Win98 servers that are easy to set up, and mabey direct me to some=20
info on
> >how I should go about setting this up.
> >
> >Thanks,
> >[EMAIL PROTECTED]
> >
> >
> >
> >




------------------------------

From: "Hunter Ritchie" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.setup
Subject: Linux IRQ oops
Date: Fri, 16 Jul 1999 15:08:11 -0400

Penguins,

    This is a repost because the last one didn't seem to take.
    Anyway, I've just installed RedHat 6.0 on an old 486 machine with 20Mb
RAM.  It takes about 4 hours for the install, so I am resistant to repeating
the procedure.

    Problem::    I oopsed during the install and set my Ethernet card to be
used at IRQ 5.  Unfortunately, the card itself is set to be used at IRQ 10.

    Question::  How or where do I manipulate settings (through commands or
script modification) to get Linux to look for the card at IRQ 10?  I've
tried 'ifconfig' and 'ether=' at boot.  Neither has worked (which means they
both probably do and I just didn't use them correctly.)

    I know it is possible to reconfigure the card itself with a DOS utility,
but am avoiding that because it conflicts with my "master plan".

Any help clearing this mess up is greatly appreciated.
Thanks in advance,
Pops



------------------------------

From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: Linux PPP server problems
Date: 16 Jul 1999 14:42:14 -0500

Tom Griep ([EMAIL PROTECTED]) wrote:
: Thanks for the help Clifford. I got it setup but I have one
: problem. After I dial in and hang up the phone, the modem
: in the server doesn't hang up and the ppp daemon is still running.
: If I kill the pppd daemon, the modem hangs up and I can dialin again.

A guess is that you need the pppd -detach option.  Here is a link that
you might want to check out:

http://www.swcp.com/~jgentry/pers.html

--
Clifford Kite <kite@inet%port.com>                    Not a guru. (tm)
/* Editing with vi is a lot better than using a huge swiss army knife.
   Use +} to wrap paragraphs in vi. */

------------------------------

From: Charles Stack <[EMAIL PROTECTED]>
Subject: Re: Another problem with multiple NICS
Date: Fri, 16 Jul 1999 15:42:33 -0400

This is a multi-part message in MIME format.
==============35FA7FC18AC02379F387E6AB
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Tobias Knowles wrote:
> 
> How is your route table set up?
> 
> Tobias


Turns out the problem WAS much simpler than expected.  Seems that once I
changed the 2nd NIC to use a different set of IP addresses and a
different subnet, I could ping to/from both cards with no problem at
all.  

Since both cards where on the 10.0.0.0 network (subnet 255.0.0.0), Linux
was unable to figure out what card to use so it used the default, eth0.

Now, I'm working on getting DHCP and IP Mascarade running.  The only
real trick here will be understanding ipchains vs ipwadm.

Thanks again for your help.

Charles
==============35FA7FC18AC02379F387E6AB
Content-Type: text/x-vcard; charset=us-ascii;
 name="charles.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Charles Stack
Content-Disposition: attachment;
 filename="charles.vcf"

begin:vcard 
n:Stack;Charles
x-mozilla-html:FALSE
org:Cody Computer Services
adr:;;;;;;
version:2.1
email;internet:[EMAIL PROTECTED]
title:Director of Information Systems
x-mozilla-cpt:;0
fn:Charles Stack
end:vcard

==============35FA7FC18AC02379F387E6AB==


------------------------------

From: [EMAIL PROTECTED] (H.Bruijn)
Crossposted-To: comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.setup
Subject: Re: Linux IRQ oops
Date: 16 Jul 1999 20:06:31 GMT
Reply-To: [EMAIL PROTECTED]

On Fri, 16 Jul 1999 15:08:11 -0400, Hunter Ritchie allegedly wrote:
>Penguins,
>
>    This is a repost because the last one didn't seem to take.
>    Anyway, I've just installed RedHat 6.0 on an old 486 machine with 20Mb
>RAM.  It takes about 4 hours for the install, so I am resistant to repeating
>the procedure.
>
>    Problem::    I oopsed during the install and set my Ethernet card to be
>used at IRQ 5.  Unfortunately, the card itself is set to be used at IRQ 10.
>
>    Question::  How or where do I manipulate settings (through commands or
>script modification) to get Linux to look for the card at IRQ 10?  I've
>tried 'ifconfig' and 'ether=' at boot.  Neither has worked (which means they
>both probably do and I just didn't use them correctly.)
>
>    I know it is possible to reconfigure the card itself with a DOS utility,
>but am avoiding that because it conflicts with my "master plan".
>
>Any help clearing this mess up is greatly appreciated.
>Thanks in advance,
>Pops
>
The script these settings are kept in is one of:
/etc/conf.modules
/etc/modutils/network
/etc/lilo.conf
/etc/sysconfig/network
/etc/sysconfig/network-scripts/*

I am quite sure the first, or possibly the second one will do the 
trick. (assuming you use modules to load the network driver)
-- 
       Herman
-- ------------------------------------------------------------------
 If a trainstation is place where trains stop, what is workstation?
=====================================================================
Herman Bruijn                                   hbruijn dix.Mines.EDU


------------------------------

From: Greg Leblanc <[EMAIL PROTECTED]>
Subject: Re: Firewalls when I don't control the entire subnet
Date: Fri, 16 Jul 1999 20:08:19 GMT

I'll have to poke around and find a subnet mask calculator to answer
that part of the question.  It IS possible to firewall that way.  Why do
you need/want public (routable) addresses on the other side of the
firewall?  That will make it much easier to attack the machines behind
the firewall, and unless you have servers behind it, probably add little
functionality.
      Greg

In article <7mnr8l$[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] (Matthew Hanselman) wrote:
> Please excuse me if I get some terminology incorrect.... :)
>
> I've read the FAQs about firewalls but am still a bit confused.
> I own only 20 IP addresses out of a subnet, so let's say I
> control 123.456.789.{10-30}.  Is there any way I can set it up
> so that .10 is a firewall for .11-.30?  If so, what would my
> subnet masks, etc, look like for this (or how would I figure
> it out)?
>
> I currently have it set up so that .10 masquerades for everybody
> else, but that puts everybody on a 192.168.1.xxx network....
>
> Thanks a lot
>
> - Matt
>

--
It's pronounced "sexy" not "scuzzy"!


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------

From: Ron Peterson <[EMAIL PROTECTED]>
Subject: THANK YOU. Re: takes long time to connect via telnet.
Date: Fri, 16 Jul 1999 20:47:13 GMT
Reply-To: [EMAIL PROTECTED]

I spent most of the day trying to figure this out.  I was going nuts.  I'll
console myself by thinking I learned a lot along the way.  No brain, no pain.

Thank you, Thank you.

Ron Peterson

============

Sami Yousif wrote:

> set up dns/reverse for your internal net...
>
> or have the ips of all the clients in your /etc/hosts


------------------------------

From: "Terry Cox" <[EMAIL PROTECTED]>
Subject: Re: PPP-After get connected and ppp0 configured, I can't see route table !!!
Date: Fri, 16 Jul 1999 12:39:24 -0700

I am having a similar problem.  I connect to my ISP via PPP.  A defaultroute
through my ppp0 interface is not set up.  I have to manually set it up:  #
route add default gw 165.234.17.28 .  After I do that, I can get it to work.
I use 'ifconfig' to find out what my P-t-P ip address is.  I am trying to
figure out how I can get my default route to always be my ppp0 interface.  I
am lurking in the newsgroup to see if anyone else is have the same problem.
Good Luck!

Jorge Ventura wrote in message <[EMAIL PROTECTED]>...
>This happen not always but many times, after get connected, ppp0 with
>the IP configured, I try to see the routing table using 'route' or
>'netstat -r' without get the table. It works if I disconnect.
>
>Any idea.
>
>Thanks in advance
>Ventura
>



------------------------------

From: [EMAIL PROTECTED] (Cris Johnson)
Subject: Re: netscape, dns lookup probs
Date: 16 Jul 1999 20:50:50 GMT

I think I am having the same dns-lookup problem.  My isp's nntp
server name is not recognised through the netscape newsreader, but
if I enter the nntp IP address directly into the newsreader's
server list, the reader works fine.  Curiously, the netscape web
browser works fine, along with ftp and telnet, dealing with dns
names.

I have a "nameserver" entry in the /etc/resolv.conf file and that
seemed to to suffice for getting telnet and the web browser working
with DNS names.  Is something else supposed to be there for this
newsreader?  Slackware 3.6 (kernel 2.0.35)/Communicator 4.07

In article <[EMAIL PROTECTED]>,
Raymonds Doetjes  <[EMAIL PROTECTED]> wrote:
>Huh?!
>
>Are you sure you have the DNS servers added to the top of the
>/etc/resolv.conf file?
>
>Jon Kee wrote:
>
>> ok, read everything this time :)
>>
>> why can't i get netscape to use my isp's domain servers?
>>
>> everything else seems to work fine, ftp, telnet, etc. in xterm
>>
>> J
>



------------------------------

From: Gary Flynn <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.advocacy,comp.security.firewalls
Subject: Re: My Dissapointment to find Linux not a viable solution
Date: Fri, 16 Jul 1999 16:32:31 -0400
Reply-To: [EMAIL PROTECTED]


I'm not sure which post to reply to :)

Someone said block it before it gets in with firewalls, someone
said do it on the server, and someone said do it on the client.

1. Any detection mechansism depends upon knowing the code
   sequence. With people publishing source code for viruses
   and trojans, this can't be guaranteed. Worse, if someone
   knowledgable really wanted to target you, they'd write
   their own (fairly easy these days) and you'd never know
   it as they sucked whatever information was available to
   your computer out the net or scribble all over your
   hard drive.

2. Worse, encryption or compression will further neutralize any
   pattern checking control measure.

3. The ONLY solution is to educate your users on the dangers
   of executing unknown programs and to help them configure
   their desktops to prevent this from happening automatically.

------------------------------

Subject: Re: RFC 959 linux ftpd, Contivity Extranet Switch
From: [EMAIL PROTECTED] (Alan Curry)
Date: Fri, 16 Jul 1999 20:29:52 GMT

In article <[EMAIL PROTECTED]>,
Richard Demanowski  <[EMAIL PROTECTED]> wrote:
>diff -> total 2
>       drwxr-xr-x   2 nortel   users        1024 Jul 16 05:26 .
>       drwxr-xr-x   9 nortel   users        1024 Jul 16 05:26 ..
>diff -> total 4
>       drwxr-xr-x   2 nortel   staff        512 Jul 16 09:25 .
>       drwxr-xr-x   6 nortel   staff        512 Jul 16 09:25 ..

>The difference is that the Linux ftpd responds to the ls request with a
>550 File not found, and the Sun ftpd responds with the sequence 150, 226.

What version of ftpd are you running, and what version of the ftp client are
you testing with? (different ftp clients may send different commands to do an
ls)

>The response to the dir request is also different, in that the Linux box
>finds 2 files, and the Sun box sais 4.

That's just "disk blocks", not files, and the blocks are allocated
differently. Pay no attentiont to the "total" line.

-- 
Alan Curry    |Declaration of   | _../\. ./\.._     ____.    ____.
[EMAIL PROTECTED]|bigotries (should| [    | |    ]    /    _>  /    _>
==============+save some time): |  \__/   \__/     \___:    \___:
 Linux,vim,trn,GPL,zsh,qmail,^H | "Screw you guys, I'm going home" -- Cartman

------------------------------

From: [EMAIL PROTECTED] (tomislav)
Subject: Re: Apache: You do not have permission to access
Date: Fri, 16 Jul 1999 21:47:37 +0200

In article <7mnf7c$gji$[EMAIL PROTECTED]>, [EMAIL PROTECTED] says...
> I have Apache installed and running, I can view ther html in the httpd
> directory, but users cannot view the html of there public_html directory.
> I set the permissions of the public-html directory to 755 and made sure
> that in /etc/httpd/conf/srm.conf the user directories are set to
> public_html. The error message is You do not have permission to access
> filename on this server.

You need to set the the permissions on the files in the public_html 
directory to 644.

chmod 755 public_html
cd public_html
chmod 644 *

-- 
[EMAIL PROTECTED]
http://tojo.home.dhs.org/pgp.asc

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to