Linux-Networking Digest #966, Volume #11 Wed, 21 Jul 99 18:13:44 EDT
Contents:
Re: Can't ping ISP (Jan Andres)
Re: 1 modem for http, 1 for ftp/news/mail/etc. (Jan Andres)
Re: Strange reboot (Rudolf Potucek)
Re: TELNET & NFS (ANTOV)
Samba problem (Paul)
innd problem! ("Jeffrey R. Goyer")
Same min/max io address (Paul Williams)
Re: Why not C++ (David Schwartz)
Re: Samba problem (Monte Phillips)
Re: Linux connecting to wingate ("Terry Cox")
Another IPChains Question :) ("Charlie Ghent")
Re: QuickTime 4 streams through linux router/firewall (Alex Luchkovsky)
re: Slackware and voodoo3 ("cts")
Re: Why not C++ (Kaz Kylheku)
2 ppp's / 2 isp (Ron Bombard)
Linux subnet proxy arp daemon for 2.2 kernels ("TeMP")
squid ... ("Jorge Cust�dio")
Automate DNS entries in Red Hat ([EMAIL PROTECTED])
Linux 2.2.9 patches broke ISDN? ([EMAIL PROTECTED])
sendmail genericsdb (Ralf Kneemeyer)
ISP connection slowdown after a couple of days (Michael Klein)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Jan Andres)
Subject: Re: Can't ping ISP
Date: 21 Jul 1999 15:26:23 GMT
In article <[EMAIL PROTECTED]>, mikes wrote:
>While dialed into my ISP....
>
>From my firewall I can ping my Win95 machine and my ISP.
>From My Win 95 machine I can ping my firewall, but can't ping my ISP
>
>What should I check for?
Check whether your firewall does IP forwarding at all.
# cat /proc/sys/net/ipv4/ip_forward
If it says 0, add this to your startup procedure:
# echo 1 >/proc/sys/net/ipv4/ip_forward
Or (even better) use your distribution's way to change this parameter.
Under RedHat, e.g., you can set "FORWARD_IPV4=yes" in
/etc/sysconfig/network.
If this is already set to 1, there may be the following problems:
1. You assigned a private IP address to your Windows machine. In this
case, you must set up the firewall to masquerade outgoing traffic.
2. You have a (second) public IP address for your Windows machins.
Then you most likely have a firewall rule that filters out ping
packets.
--
Jan Andres
[EMAIL PROTECTED]
Ham radio: DH2JAN
------------------------------
From: [EMAIL PROTECTED] (Jan Andres)
Subject: Re: 1 modem for http, 1 for ftp/news/mail/etc.
Date: 21 Jul 1999 15:15:24 GMT
In article <7msktt$2pc$[EMAIL PROTECTED]>, [EMAIL PROTECTED] wrote:
>I would like to be able to share my internet traffic between 2 modems.
>I currently have 2 permanent modem accounts (with different providers,
>so EQL is no good).
>
>I would like all http traffic (via squid) to be routed through one
>modem and all other traffic (mail, news, ftp etc) through the other.
>
>Is this possible?
Yes. Have a look at the package iproute2, available at
ftp://ftp.src.uchicago.edu/pub/linux/ip-routing/.
--
Jan Andres
[EMAIL PROTECTED]
Ham radio: DH2JAN
------------------------------
From: [EMAIL PROTECTED] (Rudolf Potucek)
Subject: Re: Strange reboot
Date: 21 Jul 1999 18:22:47 GMT
I have seen something similar, though in my case I can only say with
certainty that it was not a ctl+alt+del reboot and that I have blocked of
all network traffic below port 1024 except ports 20,21,23,53 and 80 via
ipfwadm.
Any clues welcom
Rudolf
Antonio Santos
([EMAIL PROTECTED]) wrote: : Dear all
: I was outside my faculty during a few days to install a linux box
: in another department (with a NT network, so it took me a few days...)
: While I was logged in as a user I spotted a shutdown at 9:00PM on Monday.
: All the users in this box were gone for holidays, and the last login
: was at 8:00PM from a friend who was with me at that moment. We run
: a firewall at the faculty, but I've set up all the possible (?) security
: configurations I know (no unecessary daemons, tcp wrappers, etc). This
: linux box is connected to an UPS, and the shutdown was smooth (no
: devs uncleanly unmounted). I've looked up the logs but apparently nothing
: strange happened. The strange thing is, if it was a power failure, all
: the winboxes that are in my subnetwork should have the passwd dialog
: in (after rebooting). Is it possible for the kernel to reboot
: spontaneously? The box was running for several months and I've noticed that
: the pids were getting higher and higher...
: Should I suspect from an attack (kind of DOS) or an installed rootshell?
: (and no, I didn't install tripwire :-( )
: Thanks in advance
: Antonio Santos
: ------------------ Posted via SearchLinux ------------------
: http://www.searchlinux.com
--
------------------------------
From: ANTOV <[EMAIL PROTECTED]>
Subject: Re: TELNET & NFS
Date: Wed, 21 Jul 1999 21:41:10 +0200
Reply-To: [EMAIL PROTECTED]
As far as telneting is concerned all you need is a working TCP/IP network
between your machines. You need to set up the network interfaces (cards) under
linux and the assing them an IP address (look in /etc/hosts and
/etc/resolv....).
Once you have set up TCP/IP you could also connect to a remote NFS server.
You have to run the NFS daemon nfsd and export a path to the clients. Thus your
/etc/exports file may look like
/home/mydirectory remoteclient rw (or ro for read only).
If your server is running you can mount /home/mydirectory on a client
mount -nfs server:/home/mydirectory /mnt/server
Ok!
Larry Rivera a �crit :
> I know that i may sound like a moron but hey I am a newbie and a linux fan
> as well.
>
> I need to know how I can setup NFS mounting and telneting to my linux boxes
>
> i have 1 nt machine and 2 reh hat linux boxes
>
> Thank you in advance
------------------------------
From: [EMAIL PROTECTED] (Paul)
Subject: Samba problem
Date: Wed, 21 Jul 1999 19:38:50 GMT
I am running Redhat 6.0. I can telnet and ftp into my Linux box. I
configured Samba. I can use smbclient to connect to the Window98 PCs
I see the Linux box in the Network neighborhood but when I try and
connect it reports that the device cannot be located on the network.
Any suggestions
------------------------------
From: "Jeffrey R. Goyer" <[EMAIL PROTECTED]>
Subject: innd problem!
Date: Wed, 21 Jul 1999 11:51:02 -0700
This is a multi-part message in MIME format.
==============07115DFC5B338A8A9B12CBA1
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
=====BEGIN PGP SIGNED MESSAGE=====
Hash: SHA1
Users began getting errors when connecting to get mail. The only error I
can find is when running ctlinnd.
[root@xxx news]# /usr/lib/news/bin/ctlinnd mode
No innd.pid file; did server die?
Can't send "mode" command (sendto failure) Connection refused.
[root@xxx news]#
This computer runs RedHat 5.2.
Any suggestions, comments, answers?
Thanks,
Jeff Goyer
[EMAIL PROTECTED]
=====BEGIN PGP SIGNATURE=====
Version: PGPfreeware 6.5.1 for non-commercial use <http://www.pgp.com>
iQA/AwUBN5YWcGBIKC1vzgDxEQJJ9gCglcr2vIOkHp8hgL2okSMpSL2kpKgAnicj
SqjBwx3EYooNtbHhfSrex5Ux
=QMcQ
=====END PGP SIGNATURE=====
==============07115DFC5B338A8A9B12CBA1
Content-Type: text/x-vcard; charset=us-ascii;
name="jgoyer.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Jeffrey R. Goyer
Content-Disposition: attachment;
filename="jgoyer.vcf"
begin:vcard
n:Goyer;Jeffrey R.
tel;fax:805.965.7880
tel;work:805.965.8115
x-mozilla-html:FALSE
url:www.origindata.com
org:Origin Data, Inc.
adr:;;;Santa Barbara;California;93101;
version:2.1
email;internet:[EMAIL PROTECTED]
title:Manager Information Technology
fn:Jeffrey R. Goyer
end:vcard
==============07115DFC5B338A8A9B12CBA1==
------------------------------
From: Paul Williams <[EMAIL PROTECTED]>
Subject: Same min/max io address
Date: Wed, 21 Jul 1999 20:34:58 +0100
Hi
I have installed Linux on a second system and I am trying to configure
the network card (rtl8109). But if I use pnpdump the min and max io
address is identical (io=0x0220). If I use modprobe to 'try' and load a
module I get a 'device busy' message. Any Ideas?
TiA
Paul
------------------------------
From: David Schwartz <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.development.apps,comp.os.linux.development.system
Subject: Re: Why not C++
Date: Wed, 21 Jul 1999 12:24:12 -0700
Kaz Kylheku wrote:
>
> On Tue, 20 Jul 1999 20:40:52 -0700, David Schwartz <[EMAIL PROTECTED]> wrote:
> > Sometimes the rules do need to be broken for one reason or another. A
> >good language lets you do that when you need to.
>
> An even better language lets you do it whenever you have the slightest
> urge. E.g. C and C++. :)
It is not the language's place to decide when you need to break the
rules. That's your job. Yes, you can break the rules whenever you have
the slightest urge. We will need a lot more AI than we currently have
before a language can decide when your breaking the rules is justified.
The best we can do today is make it clear when you are doing so.
DS
------------------------------
From: [EMAIL PROTECTED] (Monte Phillips)
Subject: Re: Samba problem
Date: Wed, 21 Jul 1999 20:06:34 GMT
BY some off chance did you forget to set up the hosts and lmhost files
on the NT machine?
[EMAIL PROTECTED] (Paul) wrote:
>I am running Redhat 6.0. I can telnet and ftp into my Linux box. I
>configured Samba. I can use smbclient to connect to the Window98 PCs
>I see the Linux box in the Network neighborhood but when I try and
>connect it reports that the device cannot be located on the network.
>Any suggestions
------------------------------
From: "Terry Cox" <[EMAIL PROTECTED]>
Subject: Re: Linux connecting to wingate
Date: Wed, 21 Jul 1999 13:01:13 -0700
I would do it the other way around. I would set up Linux box to connect to
your ISP. I would then set up IP Masquerading so that multiple clients on
your local network can share the same IP address, be it dynamically or
statically assigned by your ISP. (What the ISP doesn't know, won't hurt
it.) I suggest you read the network and IP Masquerading Howto's at:
www.sunsite.unc.edu . I don't think Windoze 9X supports what you are
trying to do, anyway.
Werden wrote in message ...
>hi.. i'd like to connect my newly installed redhat6.0 to internet through
my
>wingate server... and i'm REALLY newbie to linux stuff... could anyone
help
>me out with this !?!? or at least give me some hints...
>
>
>Thanx!
>
>
>Werden
>
>
------------------------------
From: "Charlie Ghent" <[EMAIL PROTECTED]>
Subject: Another IPChains Question :)
Date: Wed, 21 Jul 1999 20:32:20 GMT
OK, I have mastered the basics of IPChains. I have my linux box up on a
cablemodem, and I have 3 other PCs (running win98) on the back-end of the
network, using IPMASQ to get them out to the world. All is golden.....
Now comes the snake in the garden - I used to run an aberMUD on the linux
box, and have now resurrected it from the dead. It is up and running, and I
can access it without any problem from inside the network, or as a logged on
user to the linux box. From external sites, I can telnet, ftp, http, etc to
my linux box without any problems. The MUD on the other hand uses port
5000.... as I said, from the internal network, I can telnet to port 5000 on
the linux box and it works great. From external sites, I get a connection
refused and cannot connect to the MUD.
I have used all sorts of combinations of IPChains to try and open port 5000
on eth0, and when I run IPChains -L, I see the rules that say it should be
accepting inputs from any site and allowing them to my port 5000, and also
the output rule that says from port 5000 to any site.... but it still
doesn't work.
Here is the basic gist of the lines I have been running to open the port:
ipchains -A input -j ACCEPT -i eth0 -p tcp -s 0.0.0.0/0 -d <my machine ip
address>/32 5000
ipchains -A output -j ACCEPT -i eth0 -p tcp -s <my machine ip address>/32
5000 -d 0.0.0.0/0
Any takers? :)
Thanks in advance for your help.
Charlie
------------------------------
From: Alex Luchkovsky <[EMAIL PROTECTED]>
Subject: Re: QuickTime 4 streams through linux router/firewall
Date: Wed, 21 Jul 1999 20:46:07 +0000
Fortunately for us Apple provided a solution - RTSP proxy for
UNIX/Linux.
Get it from http://www.apple.com/quicktime/developers/rtspproxy.html
Run "make linux" and you'll be all set. Works beautifully :-)
--
Alex Luchkovsky
IT Manager
Earthwatch Expeditions
http://www.earthwatch.org
DidiDo wrote:
>
> Has anyone tried or have experiences with QuickTime 4 streams (audio/video)
> through a linux router/firewall using ipfwadm (ip_masq)?
>
> We use such a router and the clients (w95/w98/Mac's) can't see
> Quicktime-streams
> because they cannot connect to QuickTime-servers. They get a: 10061:
> Connection failed
>
> There is some information on the QuickTime-site
> http://www.apple.com/quicktime/resources/qt4/us/proxy/
> and I have made some modifications to my ipfwadm-configuration but it
> doesn't help.
>
> I think I have to use the RTP/RTSP protocol (which isn't installed now).
> Any suggestions, tips?
>
> Best regards,
>
> Marius
> [EMAIL PROTECTED]
------------------------------
From: "cts" <[EMAIL PROTECTED]>
Subject: re: Slackware and voodoo3
Date: Wed, 21 Jul 1999 13:24:05 -0700
I am having problem configuring voodoo3 . i've downloaded the drivers from
www.3dfx.com and have problem installing it.
my Rpm does not want to install the files correctly. Have anyone made this
work ?
------------------------------
From: [EMAIL PROTECTED] (Kaz Kylheku)
Crossposted-To: comp.os.linux.development.apps,comp.os.linux.development.system
Subject: Re: Why not C++
Date: Wed, 21 Jul 1999 20:52:26 GMT
On Wed, 21 Jul 1999 12:24:12 -0700, David Schwartz <[EMAIL PROTECTED]> wrote:
>
>Kaz Kylheku wrote:
>>
>> On Tue, 20 Jul 1999 20:40:52 -0700, David Schwartz <[EMAIL PROTECTED]> wrote:
>> > Sometimes the rules do need to be broken for one reason or another. A
>> >good language lets you do that when you need to.
>>
>> An even better language lets you do it whenever you have the slightest
>> urge. E.g. C and C++. :)
>
> It is not the language's place to decide when you need to break the
>rules. That's your job.
Except when, like millions of C and C++ programmers, you don't know the better
portion of the rules, so that you don't know that you are breaking them.
Constructs along the schema of
a[i] = i++;
can often be unearthed in production code. Because of the possibility of
writing ambiguous expressions that do not violate any syntax rule or
constraint, even an experienced programmer can unintentionally break the rules.
------------------------------
From: Ron Bombard <[EMAIL PROTECTED]>
Subject: 2 ppp's / 2 isp
Date: 21 Jul 1999 20:58:30 GMT
Greetings!
Question: If I have 2 isp accounts, 2 modems, 2 telephones, 2 ppp
interfaces (one for each isp acct)......
is there a way to use the both at the same time. to say... balance the
load between the two ppp interfaces....
I'm running squid for internet access for my WinBlows users. I bacially
want to know if I can add bandwidth without going to an ISDN or whatnot.
Any Ideas / Suggestions / Flames???
Ron
--
Ron Bombard, Network Administrator
[EMAIL PROTECTED]
PO Box 2567, Glens Falls, Ny 12801
http://members.theglobe.com/virtual_ron
Sometimes loosing a wife can be hard... in my
case it was nearly impossible!!!
===================================================
_O_ _____ _<>_ ___
/ \ | | / \ / _ \
|==/=\==| |[/_\]| |==\==/==| | / \ |
| O O | / O O \ | >< | | |"| |
\ V / /\ - /\ ,-\ () /-. \ X /
/`---'\ /`---'\ V( `-====-' )V /`---'\
O'_:_`O O'M|M`O (_____:|_____) O'_|_`O
-- -- -- -- ---- ---- -- --
STAN KYLE CARTMAN KENNY
------------------------------
From: "TeMP" <[EMAIL PROTECTED]>
Subject: Linux subnet proxy arp daemon for 2.2 kernels
Date: Wed, 21 Jul 1999 23:51:12 +0300
Does such a beast exist? If so, where could I get one.
And if not, how could I translate the dev entry in userspace arpd into ethX.
I think I could hardwire arpd to do what I want.
The third option would be loading all 4000 entries individually, but I think
I'd suffer some ill effects from that.
- Teemu Pitkanen
------------------------------
From: "Jorge Cust�dio" <[EMAIL PROTECTED]>
Subject: squid ...
Date: Wed, 21 Jul 1999 21:17:50 +0100
Hi all !
I have a computer running linux 6.0 with a connection to the internet and
running squid proxy server, this computer is connect on a local net with a
second computer running windows 98, everthing ok so far, IE access's well
through squid but i cant make mIRC to work in the windows computer, its is
necessary to enable the DNS on the windows computer, won't the the gateway
serve !? Please Help !
Thx !
--
Jorge Custodio
[EMAIL PROTECTED]
ICQ 29273521
------------------------------
From: [EMAIL PROTECTED]
Subject: Automate DNS entries in Red Hat
Date: Wed, 21 Jul 1999 21:00:40 GMT
Hello all,
I am finding I am spending an insane amount of
time doing something that I'm sure someone has
had the sense to automate ... creating the proper
entries for DNS.
Modifying the /etc/named.conf
Creating the /var/named/domain/db.whatever file
Modifying the /var/name/domain/db.123.123.123
reverse DNS file
Then restarting the DNS service /usr/sbin/ndc
restart
This is insane. Someone had to have created a
Perl script or other tool to do this chore.
Anybody out there that can lead me to
the "Promise Land" I would be exceedingly
greatful.
Jay Burgherr
Data & Media Technologies
Kansas City, MO
[EMAIL PROTECTED]
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: [EMAIL PROTECTED]
Subject: Linux 2.2.9 patches broke ISDN?
Date: Wed, 21 Jul 1999 21:00:58 GMT
I've encountered a problem when upgrading my system by installing Mandrake
6.0. My problem seem to be exactly the same as another user has reported in
another news group, you can find it here:
http://x26.deja.com/getdoc.xp?AN=488748392&CONTEXT=932583744.384172291&hitnum=15
>From his posting, it seems something in the later 2.2.9 kernel patches have
made ISDN stopped working properly, and this strange "Network is down"
message appears. The original poster (posted in fa.linux.kernel) does not
mention anything about Mandrake or RedHat 6.0, so I am (possibly wrongfully)
assuming this has something to do with the kernel or related drivers.
Does anybody with a clue about what is going on? I have included my own log
at the end of this posting, in case it can be of any help.. There is also a
message in there about an unknown protocol received which I have no clue
about how to fix (or what it means).
Thanks in advance,
Marius
Jul 21 20:21:30 haze ipppd[762]: Found 1 device: /dev/ippp0 Jul 21 20:21:30
haze ipppd[762]: ipppd i2.2.10 (isdn4linux version of pppd by MH) started Jul
21 20:21:30 haze ipppd[762]: init_unit: 0 Jul 21 20:21:30 haze ipppd[762]:
Connect[0]: /dev/ippp0, fd: 7 Jul 21 20:21:45 haze kernel: ippp0: dialing 0
DIALUPNUMBER... Jul 21 20:21:47 haze kernel: isdn_net: ippp0 connected Jul 21
20:21:47 haze ipppd[762]: Local number: MYNUMBER, Remote number:
DIALUPNUMBER, Type: outgoing Jul 21 20:21:47 haze ipppd[762]: PHASE_WAIT ->
PHASE_ESTABLISHED, ifunit: 0, linkunit: 0, fd: 7 Jul 21 20:21:48 haze kernel:
eth0: transmit timed out, tx_status 00 status e000. Jul 21 20:21:50 haze
ipppd[762]: ioctl(SIOCSIFMTU): Invalid argument, 6 ippp0 1524. Jul 21
20:21:52 haze ipppd[762]: Remote message: Jul 21 20:21:52 haze ipppd[762]:
MPPP negotiation, He: Yes We: Yes Jul 21 20:21:52 haze ipppd[762]: CCP
enabled! Trying CCP. Jul 21 20:21:52 haze ipppd[762]: CCP: got ccp-unit 0 for
link 0 (protocol: 0x80fd) Jul 21 20:21:52 haze ipppd[762]: ccp_resetci! Jul
21 20:21:52 haze ipppd[762]: Kernel check for LZS failed Jul 21 20:21:52 haze
ipppd[762]: Unknown protocol (0x8071) received Jul 21 20:21:52 haze
ipppd[762]: local IP address 195.204.216.64 Jul 21 20:21:52 haze ipppd[762]:
remote IP address 195.204.216.248 Jul 21 20:21:52 haze ipppd[762]:
ioctl(SIOCADDRT) device route (ippp0/195.204.216.0/ffffff00): Network is down
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Jul 21 20:21:52 haze
ipppd[762]: LCP terminated by peer
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Jul 21 20:21:52 haze
kernel: isdn: HiSax,ch0 cause: E0010 Jul 21 20:21:52 haze kernel: ippp0:
remote hangup Jul 21 20:21:52 haze kernel: ippp0: Chargesum is 0 Jul 21
20:21:52 haze ipppd[762]: Modem hangup Jul 21 20:21:52 haze ipppd[762]:
Connection terminated. Jul 21 20:21:52 haze ipppd[762]: taking down
PHASE_DEAD link 0, linkunit: 0 Jul 21 20:21:52 haze ipppd[762]: LCP is down
Jul 21 20:21:52 haze ipppd[762]: closing fd 7 from unit 0 Jul 21 20:21:52
haze ipppd[762]: link 0 closed , linkunit: 0
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: Ralf Kneemeyer <[EMAIL PROTECTED]>
Subject: sendmail genericsdb
Date: Wed, 21 Jul 1999 23:11:35 +0200
Hi,
can anyone help me setting up a generics db for
my sendmail ( 8.9 / Suse6.1 ) ??
Seems that everything is installed correct, but
in any case sendmail does not map local users
to users in generics db.
Thanks.
--
Ralf
------------------------------
From: Michael Klein <[EMAIL PROTECTED]>
Subject: ISP connection slowdown after a couple of days
Date: Wed, 21 Jul 1999 23:01:36 +0200
Hi,
I'm running a small LAN with two dual boot Linux/Win0.95 and a Linux
gateway running kernel 2.2.9 and ipchains 1.3.8 for firewalling and
masquerading (no proxies). Dial-on-demand connections via ISDN are made
with ipppd 2.2pl10.
After a couple of days there is a noticable slowdown with certain
services, especially DNS, but also POP3, NNTP and telnet. I don't know,
if it's caused by the gateway's uptime or by the number of connections
made, though. After reboot, everything is fast again for a while...
I guess, this slowdown is caused by high latency times, not lack of
bandwidth (hope you understand what i mean, sorry for any bad english).
With 2.0.36 and ipfwadm, there were no such problems, but I used ipfwadm
only for masquerading but no firewalling at all (gotten paranoid:) ).
Furthermore, I'd like to run a caching-only nameserver on my gateway
(ISP's nameserver as forwarder in /etc/named.boot, nothing else). However,
forwarded DNS querys seem to be sent over UDP, not TCP, which bites
ip_dynaddr, is this correct? Or, in other words, in which cases is
either UDP/TCP used for DNS?
Any solutions/hints appreciated, TIA
(please Cc any follow-ups, I'm not a frequent reader)
--
Michael
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
