Linux-Networking Digest #14, Volume #12 Mon, 26 Jul 99 15:13:51 EDT
Contents:
Re: Firewall forwarding NetBios? (Tmack)
SOLVED! ("G. Pollack")
Re: difference between static ip and internal ip's ? ("Cliff")
[Q] ipchains how-to? (Marc)
ftp config (Jason Rotunno)
Re: Printer problems (Birger Toedtmann)
Re: Internet access using Win98 PPP Connection (Monte Phillips)
Problems with NFSROOT and network modules ,,, (Thomas Binder)
VPN (Dustin Puryear)
Re: Broad Q /etc/hosts.allow et al (Stuart R. Fuller)
Re: Linux friendly ISPs ([EMAIL PROTECTED])
ncpmount problem: kernel requires mount version 3? ("G. Pollack")
Re: Leased Line Configuration with Linux ("Lee Sharp")
Re: POP Mail? ("Andrew Dolan")
Re: very slow ethernet connection IN ONE DIRECTION! (Mandl Martin)
Re: Multihomed routing issues (Rudolf Potucek)
Re: How to set IP address? ("Quiney, Philip (EXCHANGE:HAL02:HM10)")
Linux basics ("John Hill")
Netscape and https (Peter Buelow)
Re: Download Manager (Larry)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Tmack)
Crossposted-To: comp.os.linux.security
Subject: Re: Firewall forwarding NetBios?
Date: 21 Jul 1999 06:32:42 GMT
In article <[EMAIL PROTECTED]>,
Bryan <[EMAIL PROTECTED]> wrote:
>Johannes Hettig wrote:
>>
>> The firewall works with ipfwadm and masquerading. I want to access the
>> other computers of the domain via SMB, but this does not work.
>
-=snip=-
>Tell all the Windows boxes to use TCP/IP as their default protocol, and
>then enable NetBios over TCP/IP.
While I haven't yet tried that, I have been somewhat successfull in seeing
the windoze local network machines by putting ipxtunnel in bridge mode on
my linux machine. It does have some side affects, and can only see a few
of the computers, but it works, and allows playing of ipx/spx games
with other networked computers (although with some lag problems).
Another method I have heard about but not tried is to use Samba to mount
the windoze shares on your linux machine, then export them to your
private subnet.
Tmack
--
blah
bleh
------------------------------
From: "G. Pollack" <[EMAIL PROTECTED]>
Subject: SOLVED!
Date: Mon, 26 Jul 1999 18:01:01 GMT
"G. Pollack" wrote:
I just checked RedHat's ftp site and saw that the version of ncpfs there
is 2.2.0. I upgraded to that, and everything works now!
--
Gerald Pollack
Dept. of Biology, McGill University
------------------------------
From: "Cliff" <[EMAIL PROTECTED]>
Subject: Re: difference between static ip and internal ip's ?
Date: Mon, 26 Jul 1999 16:16:07 GMT
Static IPs and internal IPs are not necessarily mutually exclusive. A
static IP is simply an IP that has been more or less permanently assigned to
an interface. Compare this with a dynamic IP that is assigned to an
interface via the DHCP server. Internal IPs are used on your LAN and not on
the Internet at large. Certain blocks of IPs have been set aside for this
purpose and some routers won't even allow these private IPs to pass. An
internal IP can be static or dynamic depending on the needs of your network.
I'm not familiar with the howto that you mentioned but I suspect that it
wants you to assign a static, non-private IP to the interface between your
LAN and the Internet at large. The private IP is then assigned to the LAN
interface. Assigning IPs is done with the ifconfig command. Try "man
ifconfig" for more details.
HTH.
--
-Cliff
Views expressed are my own and not necessarily those of my employer
Concordia Net, Inc. When replying via email please use; cwheat at concordia
dot net not
root@localhost
John Brashier wrote in message <[EMAIL PROTECTED]>...
>I am wondering about the masquerade howto directing internal 'private'
>IP's be set to the 192.168.0.0 numbers. My question: if the masq-gate
>machine is set to 192.168.0.1, then where does the static IP come in? Do
>you set the internet-connected machine to two addresses? ....if so, how?
>
>Thanks,
>Brashier
>
------------------------------
From: Marc <[EMAIL PROTECTED]>
Subject: [Q] ipchains how-to?
Date: Wed, 21 Jul 1999 09:01:30 +0200
Hello,
After reading some how-to's about ipchains I still have problems.
We have 3 pc's on a lan (10.10.10.2-10.10.10.4) running win95.
On our gateway we are running RH6 and installed two networkcards, for
the lan with ip 10.10.10.1 and to the cable internetmodem with the
static ip from the isp. I have to use a default gateway at my isp.
On the linux pc I can use internet fine.
What must the ipchains commands looks like to allow the win95 pc's
on the lan to use internet with all the common protocols
(http,ftp,pop,new,icq)
Many thanks in advance.
------------------------------
From: [EMAIL PROTECTED] (Jason Rotunno)
Crossposted-To: comp.os.linux.misc
Subject: ftp config
Date: 26 Jul 1999 16:24:25 GMT
i've got a question about configuring ftp. i've recently installed a
linux box (maybe in march - slackware 3.6) and everything seems to be
going ok. one problem that i'm having, though is that i can't upload
anything via anonymous ftp (permission denied). i've checked the
permissions on the directory which seem ok. i've even set the permissions
to 777 on the ftp directory, but still no luck. i thought that at one
time i was able to upload using anonymous ftp, but i might have just
tested downloading. maybe anonymous ftp is disabled, but i'm having
trouble on finding out how to check this. i didn't find any information
in the "running linux" book or the "linux system administrator's guide" on
sunsite on how to configure ftp. i've also installed linuxconf becuase i
thought it might help, but i don't see any ftp configuration options. if
anyone can give me some suggestions i'd appreciate it. thanks.
------------------------------
From: Birger Toedtmann <[EMAIL PROTECTED]>
Subject: Re: Printer problems
Date: Mon, 26 Jul 1999 17:21:30 +0200
Roberto wrote:
> I have a network
> 1 Linux machine (red hat 6.0)
> 3 Windows machines (windows 98)
>
> I want to connect the printer to my linux machine, the problem is.
>
> How can I configure the Windows machines to print in that printer trough
> the network??
>
> If the server were windows, I can only set the path (//Comp name/printer
> name)
> but I have no idea how to find the path for the linux machine.
If you don't want to install samba on your linux box, you might want to install
lpr's on your windozes. Search the Net for "winlpr", it is quite easy to use and
enables printing to a remote lpd.
Regards,
Birger
--
Birger T�dtmann. Bielefeld, Germany.
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq' | \dc
00 83 E2 57 EC 60 0B 1C D3 18 AE 2A 40 55 81 22
------------------------------
From: [EMAIL PROTECTED] (Monte Phillips)
Subject: Re: Internet access using Win98 PPP Connection
Date: Mon, 26 Jul 1999 16:20:38 GMT
This site has a step by step howto for complete setup of samba. steps
for both linux and the win machine. (and they really work <G>)
http://www.sfu.ca/~yzhang/linux/samba/index.html
and this one as well
http://home.talkcity.com/MigrationPath/maguai/samba.html
These sites singly or in combination are nearly guaranteed to get you
networked.
Leeroy Smith <[EMAIL PROTECTED]> wrote:
>Sorry I can't help you with your problem. If I knew how to then I certainly
>would. However, I have a problem that I think you can help me with. I have 3
>computers: 1 win95 setup, 1 win98 setup and 1 Linux Caldera 2.2. I have
>ethernet cards in all 3. My questions is :
>How do I connect and get to work with files from my linux box to the other win
>machines? Can you give a step by step solution? Thanks in advance
------------------------------
From: Thomas Binder <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.development.system,linux.redhat.misc
Subject: Problems with NFSROOT and network modules ,,,
Date: Wed, 21 Jul 1999 08:52:42 +0200
Dear Linux Gurus!
We have a system of several Linux clients and one Server. The clients mount the
root and usr partitions upon boot from the server.
The client-kernel has no network drivers compiled in, all necessary network
modules are attached as initrd. To load the kernel we use either a bootrom or a
floppy disk.
>From RedHat 4.0 to RedHat 5.2 this worked out of the box.
As of RedHat 6.0 we're having some troubles now. First I thought that it might
have to do something with DHCP (RedHat decided to remove BOOTP from the
distribution) and that we misconfigured something. As I get deeper and deeper
into the subject I now doubt that it's directly related to DHCP.
I discovered that the BOOTP/RARP requests are no longer in the file nfsroot.c
but were moved to ipconfig.c. On boot I now get a complaint from IP-Config that
no network cards were found. When the boot continues initrd gets mounted and the
network modules are properly inserted. However, the kernel complains about no
available NFS Servers. Obviously the modules were inserted too late...
I started to play around a bit and managed to put a call to `ip_config' right
after the mount of initrd and just before the mount of the actual (NFS) root-
partition. This now works fine for me, but I'm not sure of any side effects...
Since we have several machines with different hardware it would be quite
convenient to have *everything* compiled as a module.
Is there a `straight' solution to that?
Did I miss some important documentation?
Any response would be appreciated.
Tom
--
"Computers are like air conditioners - they stop working properly when you open
Windows"
\\\|///
\\ ~ ~ //
( @ @ )
/------------------------oOOo-(_)-oOOo-----------------------------------------\
| Thomas Binder | |
| Institute for Microelectronics | phone: ++43/1/58801-36036 |
| Technical University Vienna | |
| Gusshausstrasse 27-29 / E360 | fax : ++43/1/58801-36099 |
| A-1040 Vienna | |
| A U S T R I A | email: [EMAIL PROTECTED] |
\---------------------------------Oooo.----------------------------------------/
.oooO ( )
( ) ) /
\ ( (_/
\_)
------------------------------
From: [EMAIL PROTECTED] (Dustin Puryear)
Subject: VPN
Date: Mon, 26 Jul 1999 17:46:16 GMT
I would like to investigate implementing a VPN so that workers can
connect to the office system without using a RAS dial-up connection.
The home machines are all Windows based, but the office machines are
Linux. Any hints, tips, or leads are very welcome!
---
Dustin Puryear
[EMAIL PROTECTED]
------------------------------
From: [EMAIL PROTECTED] (Stuart R. Fuller)
Subject: Re: Broad Q /etc/hosts.allow et al
Reply-To: [EMAIL PROTECTED]
Date: Mon, 26 Jul 1999 18:10:03 GMT
Wayne Allison ([EMAIL PROTECTED]) wrote:
: Questions:
:
: 1.
: If one has /etc/hosts.allow and /etc/hosts.deny set up,
: to be as tight as be does it stop one being able to ping a remote site.
: ie. ping www.yahoo.com?
:
: I guess yes but haven't seen it stated anywhere only in broad vague
: terms ( to me that is ).
Those two files are used in access control for INCOMING connections. You
attempting to ping a remote site is an OUTGOING connection.
: Is it that if hosts.deny exists it overrides hosts.allow or is it a
: combination.
That question is answered in "man hosts.allow".
: 2.
: If I can 'nslookup www.apple.com' and get a result shouldn't I be able
: to use 'lynx' to look at that site with out it sitting for ages trying
: to resolve the address
: and the finally failing.
:
: Lynx will work on some sites and not others although they all nslookup
: ok.
:
: It's the same if I 'nslookup' a ftp site and try to ftp there it'll come
: back no joy.
Pretty bizarre. Please post the exact commands and message(s) received. Are
you running a caching nameserver?
Stu
------------------------------
From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.misc
Subject: Re: Linux friendly ISPs
Date: 26 Jul 1999 12:28:31 -0400
Dhiraj Kacker <[EMAIL PROTECTED]> writes:
> to connect. In particular, I'd like to know how good the
> following ISPs are :
>
> 2. Att World Net
I use ATT, mainly because they are $15/mon instead of $20.
I never needed their support, I used a windows 3.1 system to
do the initial logon, and using altavista found the rest of
what I needed for Linux.
--
Tom Evans
------------------------------
From: "G. Pollack" <[EMAIL PROTECTED]>
Subject: ncpmount problem: kernel requires mount version 3?
Date: Mon, 26 Jul 1999 17:45:08 GMT
First, thanks to those who helped with an ealier problem I posted re
network collisions. That's fixed now (I think), but there's another. I'm
attempting to mount a novell server on my linux system (RedHat 5.2,
kernel 2.2.2). I have ipx properly configured (I think), and I've
installed the ncpfs package (version 2.0.11). When I do slist I can see
the list of available servers. When I try to mount the server of
interest, the mount fails and generates the following in
/var/log/messages:
ncp_read_super: kernel requires mount version 3
I've been unable to find version 3 of either the ncpfs package or of the
"standard" mount package (I have version 2.9i installed). Can anyone
tell me where to find version 3? Or am I misinterpreting this error
message?
Thanks,
--
Gerald Pollack
Dept. of Biology, McGill University
------------------------------
From: "Lee Sharp" <[EMAIL PROTECTED]>
Subject: Re: Leased Line Configuration with Linux
Date: Mon, 26 Jul 1999 13:22:03 -0500
geofox wrote in message <7ni157$mei$[EMAIL PROTECTED]>...
|my company just installed a leased line.
|However, i don't know how to set it up with my Linux box?!
You need to provide a lot more information. A leased line to where?
What format? What equipment do you have? Connectivity has to be determined
before services can be... Look for buzz words like PPP/Frame/ATM, and
56k/T1/ISDN. And try and find out what equipment is on the other end.
Lee
--
SCSI is *NOT* magic. There are *fundamental technical reasons* why it is
necessary to sacrifice a young goat to your SCSI chain now and then. * Black
holes are where God divided by zero. - I am speaking as an individual, not
as a representative of any company, organization or other entity. I am
solely responsible for my words.
------------------------------
From: "Andrew Dolan" <[EMAIL PROTECTED]>
Crossposted-To:
alt.os.linux,alt.os.linux.slackware,comp.os.linux.misc,comp.os.linux.setup
Subject: Re: POP Mail?
Date: Mon, 26 Jul 1999 10:55:54 +0100
>anyone know how to tell if POP mail is running ?
If you are using, say, Netscape, you need to know the address of the Pop3
server that your email is hosted on, contact your support staff to find this
out.
>then how can I setup some pop client like netscape to read it.
Go to the preferences section and then go to Mail & Newsgroups. Add a new
POP3 server.
>I have only IP addys, no Public Domain names (no company.com)
>How do you send someone email useing IP addresses?
>[EMAIL PROTECTED] does not work.
As far as I know, you can't, although it may work if you give the IP address
of the mail server... I have never tried it.
Ian.
------------------------------
From: Mandl Martin <[EMAIL PROTECTED]>
Subject: Re: very slow ethernet connection IN ONE DIRECTION!
Date: Mon, 26 Jul 1999 18:31:26 +0200
.... as said before: I have a similar problem but with a "normal" setup:
I can send fast, but I receive approximatly a factor 1000 slower ...
I had the same setup with REDHAT 4.1, and everything worked fine ...
Then I upgraded to REDHAT 5.1 (2.0.35) and got this problem. I am
connected directly to our "intranet" ... All (IP, Gatway, DNS,
nameserver ...) is as before ... ifconfig shows only some dropped TX
packages, but not that many ...
Any suggestions ????
Martin
------------------------------
From: [EMAIL PROTECTED] (Rudolf Potucek)
Subject: Re: Multihomed routing issues
Date: 26 Jul 1999 18:03:04 GMT
I tould help if you poster the output of 'route -n' but the problem might be that
the subnet routes are not set correctly. In the ifcfg-ethX files make sure that
the NETMASK setting is ok and the networking code shopuld do it all
automatically. If not try to manually set up routes like
>route add -net 202.188.x.180 netmask 255.255.255.248 eth0
The other thing ... how certain are you about the 248 in the netmask? In my
reasoning that would allow access to machines 176-183, but I may be wrong.
Rudolf
Lim Chee Onn ([EMAIL PROTECTED]) wrote:
: I am running kernel-2.2.10 with two ethernet interfaces connected to
: different services providers. The configuration details are as follows
: ;-
: eth0 202.186.x.8/255.255.255.0
: eth1 202.188.x.180/255.255.255.248
: Default_gw 202.186.x.1/255.255.255.0 eth0
: Users from outside (dial-in via their ISP) are able to ping 202.186.x.8
: but not 202.188.x.180. Can anyone show me perhaps where I am going
: wrong? Do I need to setup default routes for each individual interfaces?
: Thanks in advance.
: --
: =====================================================================
: Alex Lim Chee Onn
: VCN Technology Sendirian Berhad (http://www.vcn.com.my)
: Future Trend Computer Services (http://www.ftrend.com.my)
: =====================================================================
--
------------------------------
From: "Quiney, Philip (EXCHANGE:HAL02:HM10)" <[EMAIL PROTECTED]>
Subject: Re: How to set IP address?
Date: Wed, 21 Jul 1999 08:01:35 +0100
[EMAIL PROTECTED] wrote:
>
> Hello,
> I just installed Red Hat 6.0 and I am a Linux idiot. I did not specify
> an IP address during the install, so now I cannot get my Linux to
> recognize my network connection and therefore my internet connection.
> How can set an IP address for my system. I do not know any console
> commands, although I do know how to bring it up. I have been playing
> around with both Gnome and KDE, if there is a way to do it from within
> one of those. Any help would be greatly appreciated.
In a console type:
netcfg&
This utility can also be found on the RedHat control panel, which has
lots of other graphical admin tools. Type:
control-panel&
to start it.
This should bring up a window which lets you add hosts, interfaces etc.
It is fairly straightforward to use, however I have never used it in
anger as I prefer to stick to the 'normal' method of editing the files
by hand. Usually get things like the networking going before having a
graphical display ;-)
HTH
Regards
Phil Q
--
Phil Quiney Digital PowerLine,
[EMAIL PROTECTED] Nortel Networks,
Telephone: +44 (1279) 402363 London Rd, Harlow,
Fax: +44 (1279) 402885 Essex CM17 9NA,
United Kingdom.
"This message may contain information proprietary to Northern
Telecom so any unauthorised disclosure, copying or distribution
of its contents is strictly prohibited."
------------------------------
From: "John Hill" <[EMAIL PROTECTED]>
Subject: Linux basics
Date: Mon, 26 Jul 1999 20:11:55 +0100
I have two PCs connected together by a hub . They both have 3Com
3C509(Combo) network cards. I have TCP/IP running between them under windows
95. I have recently been using Linux and have problems getting this to work
. I can ping the network card in the linux machine and it responds. If I
ping the other machine the light on the hub flashes but there is no return .
I have included some information which might be relevant. I have kernel
2.0.35 from Slackware. Any help gratefully received
John
IFCONFIG
lo Link encap:Local Loopback
inet addr:127.0.0.1 Bcast:127.255.255.255 Mask:255.0.0.0
UP BROADCAST LOOPBACK RUNNING MTU:3584 Metric:1
RX packets:107 errors:0 dropped:0 overruns:0 frame:0
TX packets:107 errors:0 dropped:0 overruns:0 carrier:0
Collisions:0
eth0 Link encap:Ethernet HWaddr 00:20:AF:57:22:E4
inet addr:120.2.2.2 Bcast:120.255.255.255 Mask:255.0.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:38 errors:0 dropped:0 overruns:0 frame:0
TX packets:61 errors:0 dropped:0 overruns:0 carrier:0
Collisions:0
Interrupt:10 Base address:0x300
netstat -r
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt
Iface
loopback * 255.0.0.0 U 3584 0 0 lo
localnet * 255.0.0.0 U 1500 0 0
eth0
Active Internet connections (including servers)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 *:www *:* LISTEN
tcp 0 0 *:smtp *:* LISTEN
tcp 0 0 *:2049 *:* LISTEN
tcp 0 0 *:681 *:* LISTEN
tcp 0 0 *:printer *:* LISTEN
tcp 0 0 *:auth *:* LISTEN
tcp 0 0 *:netstat *:* LISTEN
tcp 0 0 *:systat *:* LISTEN
tcp 0 0 *:finger *:* LISTEN
tcp 0 0 *:imap2 *:* LISTEN
tcp 0 0 *:pop3 *:* LISTEN
tcp 0 0 *:login *:* LISTEN
tcp 0 0 *:shell *:* LISTEN
tcp 0 0 *:telnet *:* LISTEN
tcp 0 0 *:ftp *:* LISTEN
tcp 0 0 *:time *:* LISTEN
tcp 0 0 *:sunrpc *:* LISTEN
udp 0 0 *:ntalk *:*
udp 0 0 *:biff *:*
udp 0 0 *:time *:*
udp 0 0 *:2049 *:*
udp 0 0 *:678 *:*
udp 0 0 *:ntalk *:*
udp 0 0 *:biff *:*
udp 0 0 *:time *:*
udp 0 0 *:sunrpc *:*
raw 0 0 *:1 *:*
Active UNIX domain sockets (including servers)
Proto RefCnt Flags Type State I-Node Path
unix 2 [ ] STREAM 1621 /dev/log
unix 2 [ ] STREAM CONNECTED 1620
unix 1 [ ACC ] STREAM LISTENING 1139 /var/run/gpmctl
unix 1 [ ] STREAM 1131
unix 2 [ ] STREAM 1085 /dev/log
unix 2 [ ] STREAM CONNECTED 1084
unix 2 [ ] STREAM 765 /dev/log
unix 2 [ ] STREAM CONNECTED 764
unix 2 [ ] STREAM 745 /dev/log
unix 2 [ ] STREAM CONNECTED 744
unix 1 [ ACC ] STREAM LISTENING 738 /dev/printer
unix 2 [ ] STREAM 711 /dev/log
unix 2 [ ] STREAM CONNECTED 710
unix 1 [ ACC ] STREAM LISTENING 704 /dev/log
PING 120.2.2.2 (120.2.2.2): 56 data bytes
64 bytes from 120.2.2.2: icmp_seq=0 ttl=64 time=0.2 ms
64 bytes from 120.2.2.2: icmp_seq=1 ttl=64 time=0.1 ms
64 bytes from 120.2.2.2: icmp_seq=2 ttl=64 time=0.1 ms
64 bytes from 120.2.2.2: icmp_seq=3 ttl=64 time=0.0 ms
64 bytes from 120.2.2.2: icmp_seq=4 ttl=64 time=0.1 ms
--- 120.2.2.2 ping statistics ---
5 packets transmitted, 5 packets received, 0% packet loss
round-trip min/avg/max = 0.0/0.1/0.2 ms
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 5 lo
120.0.0.0 0.0.0.0 255.0.0.0 U 0 0 1 eth0
------------------------------
From: Peter Buelow <[EMAIL PROTECTED]>
Subject: Netscape and https
Date: Mon, 26 Jul 1999 12:34:38 -0500
Reply-To: [EMAIL PROTECTED]
Has anyone noticed that netscape 4.51 or 4.6 have trouble connecting
to https servers? I consistently get "Unable to connect to server xxxxx"
Can't seem to find a reason why? Does anyone know why? Just curious
mostly, as I have other machines that I can use, but it would be nice to
use my own workstation. Thanks.
--
Peter Buelow - Software Engineer
--
"Finger to spiritual emptiness underlying everything." -- How a C manual
referred to a "pointer to void."
------------------------------
From: [EMAIL PROTECTED] (Larry)
Crossposted-To: comp.os.linux.misc
Subject: Re: Download Manager
Reply-To: [EMAIL PROTECTED]
Date: 26 Jul 1999 11:41:59 -0600
On Sun, 25 Jul 1999 20:23:26 +0000, Peter Caffin <[EMAIL PROTECTED]> wrote:
>John Napier wrote:
>> Is there a Download Manager for Linux like "GoZilla" or "Getright"
>> which can auto-resume (or even manually resume) broken downloads.
>
>wget.
Or just use reget in your regular ftp.
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
