Linux-Networking Digest #68, Volume #12          Sat, 31 Jul 99 11:13:45 EDT

Contents:
  Dual Networks ("Juan Carlos")
  Re: Connecting 2 linux boxes with X-over cable ("Gene Heskett")
  Re: delaying eth0 initialization (Vidar Andresen)
  Re: Linux Training (Bob Koss)
  Re: Help setting up sendmail (Allen Wong)
  Re: binding two NICs (Artur Swietanowski)
  Re: OOPS! Security Question ("pg")
  ppp - connection keeps failing ("TwoSheds")
  Re: SMB works for Win95 not Win98, NT4.0 ("gonZo theGreaT")
  Re: ppp - connection keeps failing (W.G. Unruh)
  Re: Kppp help - ("Bruce Scherzinger")
  pcnet_reset_8390 did not complete **ERROR** (Miguel Rodriguez Artacho)
  unable to find ip alias lib (andy qi)
  Re: netscape (Monte Phillips)
  Re: sendmail and NIS maps (Andrzej Filip)
  Re: ipchains not recognized by 2.2.5 kernel? (Bill Steiner)
  Re: SMC1211tx PCI nic does not work !! HELP PLEASE. ("John N")
  Re: Strange DIP problem (Richard A Lough)
  ipportfw/ADSL problems ("Michael Wheeler")
  route ? (Marc Schuette)
  Re: IP Masquerading seems flaky with 2.2.x kernels (Monte Phillips)
  Re: Reverse Proxy & Load Balance + Redundancy ([EMAIL PROTECTED])

----------------------------------------------------------------------------

From: "Juan Carlos" <[EMAIL PROTECTED]>
Subject: Dual Networks
Date: Sat, 31 Jul 1999 07:17:53 -0700

Go easy on me, I am not a networking expert.  But I did manage to get my
linux box at home networked and everything was great.  I was able to access
it just fine from my Win98 machine at home.  Then I was required by my
employer to install RAS on my Win98 to keep me captive at work.

I can still telnet and FTP into linux, but I can't access any home
directories, even when I create a user named the same as my network ID at
work.  The folders are empty, even though I have files in there.

Is there a way for these two domains, networks, or whatever the terminology
is, to coexist and play nice?



------------------------------

Date: 31 Jul 99 06:18:48 -0500
From: "Gene Heskett" <[EMAIL PROTECTED]>
Subject: Re: Connecting 2 linux boxes with X-over cable

Unrot13 this;
Reply to: <[EMAIL PROTECTED]>

Gene Heskett sends Greetings to Tony C;

 TC> While I agree that proper net etiquette is to not post jpgs to a
 TC> non-binary news group I am wondering why all you people that
 TC> bitch about it don't get a news reader that doesn't download
 TC> message contents until you specifically ask it to? If Microsoft
 TC> has done anything right it's that Outlook Express will only give
 TC> you the message headers until you specifically ask it for the
 TC> message contents, thereby putting you in control of what gets
 TC> downloaded and what doesn't.

 TC> Furthermore, IMHO, it's equally as bad to post off-topic bitches
 TC> and gripes to the newsgroup when you could have easily sent the
 TC> offender a private email. (Which is exactly what I have done here
 TC> so I guess we are all a bunch of low class slobs!)

Gulty :)

Oh?  Can OE go online and get your mail and news while you sleep?  Many,
probably the huge majority of us do exactly that, using scripts or
programs written with *utility* in mind.  Because we read this stuff,
and compose our replies offline, connect time is limited to that
required to transact our business.  I can send those few replies, and
suck over 100 messages from the newsgroups I'm 'subscribed' to, and do
it in an average online time of a minute to a minute thirty per hourly
session.

Add your 125k jpeg to the mix, and assume the average newsservers speed
from halfway around the planet of maybe 2k/sec, its an extra minute of
online time to do that.  We don't normally pay by the minute here in the
us, but much of the world _does_ pay by the minute of connect time,
often far more than the dime a minute Sprint brags about.

Multiply that extra minute by the number of users auto sucking this
newsgroup, and your picture just cost the rest of the worlds users a
combined extra cost ranging upwards from 500 bucks.  Since my lengthy
reply is too, I'll get me coat, and snip the rest.

Cheers, Gene


------------------------------

From: [EMAIL PROTECTED] (Vidar Andresen)
Subject: Re: delaying eth0 initialization
Date: Sat, 31 Jul 1999 00:43:56 GMT

In article <[EMAIL PROTECTED]>, Matt Menze <[EMAIL PROTECTED]> wrote:
>I am trying to install a linux box on a network that consists of some NT
>workstations and some Windows95.  I am using NetBios for the network,

Netbios over tcp/ip ? (or the netbeui thing? That is win only)

>but I have a DSL line that uses DHCP to connect to all the computers.  I
>am having serious trouble trying to get my linux box on the network.  I
>am using RH 6.0 with kernel 2.2.5-15.  I have it set up as hostname
>"hawk" with dhcp protocol.  When I boot linux it tries to initialize
>eth0 but fails and says  "delaying eth0 initialization".  When I run
>ifconfig all that I see is the loopback.  Does anybody have a words of
>wisdom?

Split the problem.

It seems like you not are getting any contact with the nic at all.
That is the first thing to solve.  Could be a driver issue,
hardware-conflict, 'boot with pnp-os' set in bios, pnp on the nic, a
lot of things.  Is this 'kernel 2.2.5-15' part of the problem, dont
know.

To get it running, I suggest unplug (maybe problem..) the box from the
net.  And use lets say 'linuxconf' to configure the nic with the right
modul, and a static ip-address, (192.168.0.2, netmask 255.255.255.0)
(that is not dhcp).

If you get it up and running (and have another machine, linux or win
set at the same values (only tcp/ip if win machine, and netbios over
tcp/ip, netbui is of no help)) and a _crossover_ tp-cable you can test
if it is working.)

_then_, if that is ok, go ahed and try to solve the 'DSL line' and
dhcp part of it.  (going to linuxconf and choose dhcp on the nic, and
whatever it takes, i really dont know.)

Mvh Vidar Andresen


------------------------------

From: Bob Koss <[EMAIL PROTECTED]>
Crossposted-To: 
comp.os.linux.development.system,comp.os.linux.misc,comp.os.linux.hardware,comp.os.linux.development.apps
Subject: Re: Linux Training
Date: 31 Jul 1999 07:39:08 -0400

"JamesH" <[EMAIL PROTECTED]> writes:


> 
> Can anyone recommend a good Linux Training Organization?
> Has anyone used or heard anything about Linuxcare or Redhat training?
> 

Learning Tree (www.learningtree.com) offers Linux training.

-- 
--
Robert Koss, Ph.D.  | Object Mentor, Inc.    | Tel: (800) 338-6716
Senior Consultant   | 14619 N Somerset Cr    | Fax: (847) 918-1023
[EMAIL PROTECTED]      | Green Oaks IL 60048    | www.objectmentor.com


------------------------------

From: Allen Wong <[EMAIL PROTECTED]>
Subject: Re: Help setting up sendmail
Date: Fri, 30 Jul 1999 18:16:09 -0700


    Have you tried www.sendmail.org.

Allen
-- 
Linux:  If you're not careful, you might actually learn something.

------------------------------

From: Artur Swietanowski <[EMAIL PROTECTED]>
Subject: Re: binding two NICs
Date: Sat, 31 Jul 1999 14:19:42 +0200

douglasf wrote:
> Is it conceivable to put two 10T NICs in a
> Linux server and have them bind together on the same (or different) 
> IP to share the load? 

Yes.

(a) Different IP's (possibly different networks):
    Your clients will have to be aware of the difference, so it's 
    only OK when they may really be put on two separate networks 
    with the Linux box serving as a gateway between them. Which is 
    often the case, as a matter of fact. 

    On the server, you will need to set up routes to both networks. 

(b) Same IP's:
    You will need to recompile your kernel with advanced router 
    option enabled and then "equal cost multipath".
 
    I'd suggest allowing both cards to share exactly the same work, 
    i.e., no division such as eth0 for reads, eth1 for writes. 

    The cards may then be connected to the same segment of the 
    network, or to two different ones. In the latter case, routing 
    will have to be done, with routes specyfying the interface as 
    well as IP. 

    If you put both cards on the same network segment, you will 
    presumably connect them to the same router. Then the router 
    capacity will be the potential limiting factor of just how 
    successful this setup is.

> If NIC binding is possible is it a good idea?

Sure, if you need more bandwidth.

Regards,
=====================================================================
Artur Swietanowski                    mailto:[EMAIL PROTECTED]
Institut f�r Statistik,  Operations Research  und  Computerverfahren,
Universit�t Wien,     Universit�tsstr. 5,    A-1010 Wien,     Austria
tel. +43 (1) 427 738 620                     fax  +43 (1) 427 738 629
=====================================================================

------------------------------

From: "pg" <[EMAIL PROTECTED]>
Subject: Re: OOPS! Security Question
Date: Sat, 31 Jul 1999 12:23:32 GMT


Nathan T. Lager <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...


> Why not fix the current system? worries about trojans/backdoors?
>
====================================

YES.  You could back up your data 1st, and then restore it - but I wouldn't
trust any of the binaries.

pg



------------------------------

From: "TwoSheds" <[EMAIL PROTECTED]>
Subject: ppp - connection keeps failing
Date: Sat, 31 Jul 1999 13:28:26 +0100

Hi,

When I dial into my ISP, the connection keeps getting dropped, and then the
modem seems to repeat the connection attempt, continuously.

Here's a sample output from /var/log/messages:

Jul 24 13:02:23 localhost kernel: CSLIP: code copyright 1989 Regents of the
University of California
Jul 24 13:02:23 localhost kernel: PPP: version 2.3.3 (demand dialling)
Jul 24 13:02:23 localhost kernel: PPP line discipline registered.
Jul 24 13:02:23 localhost kernel: registered device ppp0
Jul 24 13:02:23 localhost pppd[776]: pppd 2.3.7 started by root, uid 0
Jul 24 13:02:24 localhost chat[781]: abort on (BUSY)
Jul 24 13:02:24 localhost chat[781]: abort on (ERROR)
Jul 24 13:02:24 localhost chat[781]: abort on (NO CARRIER)
Jul 24 13:02:24 localhost chat[781]: abort on (NO DIALTONE)
Jul 24 13:02:24 localhost chat[781]: abort on (Invalid Login)
Jul 24 13:02:24 localhost chat[781]: abort on (Login incorrect)
Jul 24 13:02:24 localhost chat[781]: send (ATZ^M)
Jul 24 13:02:24 localhost chat[781]: expect (OK)
Jul 24 13:02:43 localhost chat[781]: ATZ^M^M
Jul 24 13:02:43 localhost chat[781]: OK
Jul 24 13:02:43 localhost chat[781]:  -- got it
Jul 24 13:02:43 localhost chat[781]: send (ATDT08453331111^M)
Jul 24 13:02:43 localhost chat[781]: expect (CONNECT)
Jul 24 13:02:43 localhost chat[781]: ^M
Jul 24 13:03:23 localhost chat[781]: ATDT08453331111^M
Jul 24 13:03:23 localhost chat[781]: CONNECT
Jul 24 13:03:23 localhost chat[781]:  -- got it
Jul 24 13:03:23 localhost chat[781]: send (^M)
Jul 24 13:03:23 localhost chat[781]: expect (ogin:)
Jul 24 13:03:33 localhost chat[781]:  115200^M
Jul 24 13:03:33 localhost chat[781]:
Jul 24 13:03:43 localhost last message repeated 23 times
Jul 24 13:04:03 localhost chat[781]: === TNT-3 Easynet Dial Service ===^M
Jul 24 13:04:03 localhost chat[781]: ^M
Jul 24 13:04:03 localhost chat[781]: ^M
Jul 24 13:04:08 localhost chat[781]: alarm
Jul 24 13:04:08 localhost pppd[776]: Connect script failed
Jul 24 13:04:08 localhost chat[781]: Failed
Jul 24 13:04:09 localhost pppd[776]: Exit.

Any ideas?

Thanks

- Kev




------------------------------

From: "gonZo theGreaT" <[EMAIL PROTECTED]>
Subject: Re: SMB works for Win95 not Win98, NT4.0
Date: Sat, 31 Jul 1999 12:30:27 GMT


Paul Young <[EMAIL PROTECTED]> wrote in message
news:GZ1n3.2217$[EMAIL PROTECTED]...
> To all that can help:
>      I have Redhat LINUX 6.0 installed with SMB running.  I've shared one
of
> the LINUX directory out to Windows clients.  Although I can access it with
> no problem from a Windows 95 client, Windows 98 and NT 4.0 keeps on
> prompting for the password, when entered, it reject it.  Windows 95
clients
> allows access to the share without prompting at all.  Networking
differences
> between Win95 and Win98 causing this problem?
> the Linux (SMB server) box has been configured as a NT member server.  All
> inputs are appreciated, thanks.
>
>
Windows 98 uses encrypted passwords like Win NT !
You have to add an entry to your win98-registry to keep goin !

[HKey_Local_Machine]-[System]-[CurrentControlSet]-[Services]-[Vxd]-[VNETSUP]

Inhere you have to add a DWORD-entry called "EnablePlainTextPassword"
Then change the Value to "1"

Restart your machine - now it should work for you !
I am not sure, but I think this will not work for Win NT !

Hope it Helps !

Gonzo



------------------------------

From: [EMAIL PROTECTED] (W.G. Unruh)
Subject: Re: ppp - connection keeps failing
Date: 31 Jul 99 12:38:16 GMT

"TwoSheds" <[EMAIL PROTECTED]> writes:
>Jul 24 13:02:24 localhost chat[781]: send (ATZ^M)
>Jul 24 13:02:24 localhost chat[781]: expect (OK)
>Jul 24 13:02:43 localhost chat[781]: ATZ^M^M
>Jul 24 13:02:43 localhost chat[781]: OK
>Jul 24 13:02:43 localhost chat[781]:  -- got it
You have IRQ problems. NOt the 19 second delay between sending ATZ and recieving
OK. You do not have the modem IRQ set up using setserial as the same as 
the IRQ wich your modem is actually using. These delays will mean
dropped characters and timeouts ( as you are getting.

------------------------------

From: "Bruce Scherzinger" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup
Subject: Re: Kppp help -
Date: Sat, 31 Jul 1999 01:49:31 -0400

For what it's worth, I am having the exact same problem with an almost
identical setup. Is this possibly affected by settings elsewhere in the
system (linuxconf)?

<[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
>   Need help with routing setup (I think) - I can connect, but usually
> takes 2-3 tries to get it all right. Sometimes there is no thru-put at
> all, sometimes can access pages at my ISP only, and when it's all
> correct - I get full access to the outside world.
>   Appears to be a problem with the address assigned at log-on. I'm
> running a small network on eth0 and access the ISP with ttys0.



------------------------------

From: Miguel Rodriguez Artacho <[EMAIL PROTECTED]>
Subject: pcnet_reset_8390 did not complete **ERROR**
Date: Sat, 31 Jul 1999 15:52:43 +0200
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------------------------------

From: andy qi <[EMAIL PROTECTED]>
Subject: unable to find ip alias lib
Date: Sat, 31 Jul 1999 06:07:01 GMT

I have redhat 6.0 linux installed and wanted
to load ip_alias module but could not find
ip_alias.o in /lib/modules directory. I could
not find ip_alias.c source neither from 
/usr/src/linux. Questions: How do I set up
ip alias without ip_alias.o. Where can I find
the source for the ip alias? Linux kernel version
is 2.2.5-15.

------------------------------

From: [EMAIL PROTECTED] (Monte Phillips)
Subject: Re: netscape
Date: Sat, 31 Jul 1999 12:18:35 GMT

Yeh?  By the time the poor guy learned to muck around in vi to the
extent he could both make the changes and get out of it, the whole
problem would be moot because linux would be upto 5.5.23 kernel.


 [EMAIL PROTECTED] (Alex Harrington) wrote:

>And in that time, I could have fired up vi and changed the config file 
>manually!!
>
>In article <[EMAIL PROTECTED]>, [EMAIL PROTECTED] says...
>>
>>Alex Harrington wrote:
>>> 
>>> Because I want to talk to my own news server, not the one at my ISP
>>> > Alex -


------------------------------

From: Andrzej Filip <[EMAIL PROTECTED]>
Subject: Re: sendmail and NIS maps
Date: Sat, 31 Jul 1999 16:03:51 +0200

Peter Norton wrote:

> I'm running a SUNOS box as an NIS server and trying to setup a linux box
> running RedHat 6.0 (kernel 2.2.5-22) as our mail server. I've compiled
> sendmail with -DNIS, but when I try to send an email to a user from the
> NIS aliases map, sendmail doesn't expand the alias and just comes up
> with "info... User Unknown".
>
> NIS is working perfectly OK in all other aspects, it just seems to be a
> sendmail problems!

*) change aliases line in /etc/service.switch file (on /etc/nsswitch.conf)
to
aliases nis
or
aliases nis files

OR

*) Add one more "O AliasFile=" line in /etc/sendmail.cf after the original
line
O AliasFile=nis:mail.aliases

You may ask any further question at news:comp.mail.sendmail

--
Andrzej (Andrew) A. Filip | Warsaw, Poland | fax: +1(801)327-6278
[EMAIL PROTECTED]  |  [EMAIL PROTECTED]  |  http://bigfoot.com/~anfi
   Postings: http://deja.com/profile.xp?author=Andrzej%20Filip

 Who refuses a better job offer ?



------------------------------

From: Bill Steiner <[EMAIL PROTECTED]>
Subject: Re: ipchains not recognized by 2.2.5 kernel?
Date: Fri, 30 Jul 1999 21:43:07 -0700

Yep, ipchains does work with the 2.2.5 kernel, as noted in the 2.2.5 kernel
documentation.

Chip Buck wrote:

> Ok, I have installed the 2.2.10 kernel. This has unfortunately created
> other difficulties.
>
> My network cards are recognized and show up in ifconfig, but they will
> not handle any traffic
> ( this is true for both cards, the internal network and external ). I am
> sure this is due to something I have left out
> of the kernel, but I don't know what. I've been playing with this since
> my last post.
>
> On the good side ipchains commands do respond, so ... If I can only get
> the NIC's talking as well as with
> my old 2.2.5 kernel  then I'll be in business.
>
> Suggestions Please !!


------------------------------

From: "John N" <[EMAIL PROTECTED]>
Subject: Re: SMC1211tx PCI nic does not work !! HELP PLEASE.
Date: Sat, 31 Jul 1999 09:26:07 -0400

Hi John,
Thank you for input.
That's exactly the same howto that I've read, but it looks a little cryptic.
I have the file in front of me and I do not know how to make it work. I've
copied this to the /lib/modules but do not know how to tell the kernel, due
to my inexperience, to "read" this file.
Can you help me
Thanks again, John Nunez


John W. Lemons III wrote in message ...
>I just installed that same card under redhat 6.0 about a week ago.  I
>followed the instructions in the Ethernet HOWTO at the Linux Documentation
>Project page.  I also used the same source code you used, from SMC.
>Everything worked great.  What exactly are you trying that isn't working?
>
>
>John N <[EMAIL PROTECTED]> wrote in message
>news:7ntor2$6q6$[EMAIL PROTECTED]...
>> Need help please,
>>       I very "green" in linux, being a DOS/WINDOWS believer for a long
>> time... my SMC1211tx PCI nic card does not work. I've downloaded the
>source
>> code for this driver from smc for this nic card, but I do not know how to
>> make it all work.
>>
>> Can you please HELP thanks a mil...
>> John Nunez
>>
>>
>>
>>
>
>



------------------------------

From: Richard A Lough <[EMAIL PROTECTED]>
Subject: Re: Strange DIP problem
Date: Mon, 26 Jul 1999 07:52:05 +0100
Reply-To: [EMAIL PROTECTED]

Richard A Lough wrote:
> 
> Hi All,
> 
> I'm running Debian Linux, kernel 2.2.1, IP masq, and ppp works Ok.
> 
> I need to run DIP.
> 
> If I su to root, I can get dip to dial out ok, but
> I am not allowed access to ping.
> 
> With my own account, dip runs, but ttyS1 tells me I have
> no permission to open.
> 
> File permissions are
> 
> -rws--x--- root dip /usr/bin/dip
> 
> crw-r----- root dialout /dev/ttyS1
> 
> any advice gratefully received
> 
> TIA
> 
> Richard A Lough

Well, by changing permission on /dev/ttyS1 to:
 crw-rw---- root dialout /dev/tty

I can get dip to work.

Is there a security problem with this permission?

TIA

Richard A lough

------------------------------

From: "Michael Wheeler" <[EMAIL PROTECTED]>
Subject: ipportfw/ADSL problems
Date: Fri, 30 Jul 1999 14:09:27 -0400

I've got a RH 5.2 machine that has been running IP masq
successfully for some time now. I would like to be able to
ICQ, and thats my problem. I understand I can use ipportfw
to forward to the internal machine, but my ADSL IP is dynamic,
and I can't seem to find the correct parameter or ipportfw to put in
my rc.firewall. The only info I found in the How To was for PPP,
which I believe is ip-up.

Thanks in advance,
mike




------------------------------

From: Marc Schuette <[EMAIL PROTECTED]>
Subject: route ?
Date: Fri, 30 Jul 1999 11:13:31 -0700

i wondering how to make a network config change on our linux
box. for internal network is 192.1.1.xxx and the entry in the route
table is as follows:

Destination    Gateway    Genmask            Flags    Metric    Ref
Use    Iface
192.1.1.0        *           255.255.255.0        0
0              0  0         eth0

I would like to change this entry to use 192.1.1.254 as the gateway
address for the 192.1.1.xxx network. how would i do this? thanks.

--

Marc Schuette - Consolidated Supply Co.
Voice  (503) 684.5904 ext.125
Fax    (503) 598.1086
Email  [EMAIL PROTECTED]



------------------------------

From: [EMAIL PROTECTED] (Monte Phillips)
Crossposted-To: comp.os.linux.development.system
Subject: Re: IP Masquerading seems flaky with 2.2.x kernels
Date: Fri, 30 Jul 1999 17:30:36 GMT

I may be completely out in left field here BUT <G>. 

The 42.42.42.42 has me baffled, why not just plain 0.0.0.0?   That 42
stuff would seem to me to possibly screw up some masks.

g'luk

 Steve Mokris <[EMAIL PROTECTED]> wrote:
>I have recently upgraded several network gateway machines to various
>versions of the 2.2.x kernel (where x=6, 7, and 10).  I was previously
>running 2.0.34 which I compiled to include support for IP Masquerading,
>and this setup worked very well.  I used ipfwadmin to initialize the
>masquerading.
>/etc/rc.d/rc.inet:
># 42.42.42.42 is a dummy ip to initialize eth0 to before it gets
># the real ip from dhcp.  it did not seem to initialize properly
># otherwise.
>/sbin/ifconfig eth0 42.42.42.42 up
>/sbin/rrdhcpcd
>/sbin/rrlogind
>/sbin/ifconfig eth0:0 10.0.7.1 up
>/sbin/route add -net 10.0.7.0 netmask 255.255.255.0 eth0:0
>/sbin/ipchains -P forward DENY
>/sbin/ipchains -A forward -s 10.0.7.0/24 -i eth0 -j MASQ
>echo 1 > /proc/sys/net/ipv4/ip_forward
>/sbin/modprobe ip_masq_ftp
>/sbin/modprobe ip_masq_user
>I have had varying success with external access using machines on the
>local network (10.0.7.0/24).  Windows machines (arrgh) and Unix
>workstations (two SGI Indys, an HP workstation, an AlphaStation, and a
>Sun) have no trouble accessing the Internet through the masquerading
>gateway, though all of the Linux boxen have very flaky access.

>After rebooting, I can (for example) ping netscape.com seemingly
>indefinitely.  I then try to ping freshmeat.net, and get at most four
>ping responses.  Following that, I am unable to access any other
>external servers.  The same thing happens with any set of two external
>servers.


------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: 
comp.infosystems.www.servers.unix,microsoft.public.proxy,alt.unix.wizards
Subject: Re: Reverse Proxy & Load Balance + Redundancy
Date: Sat, 31 Jul 1999 14:50:38 GMT

Can you use reverse proxy as load balancer as well as cahcing mechanis
for your web frarms? Has anybody done it? Any literature on the net?



In article <[EMAIL PROTECTED]>,
  stanislav shalunov <[EMAIL PROTECTED]> wrote:
> Reverse Proxy would probably not help much in your case.  I've
> designed a no-single-point-of-failure scheme for my company (it should
> survive a nuclear attack on any single facility :-) but cannot give
> out the details.  Since you know it's possible, you might just think
> and reproduce it.
>
> Or you might just use a high availability load balancer.  Cisco Local
> Director, or there are solutions both commercial and free on *BSD.
>
> But wait; why do you need to load-balance Apache for static content?
> You can handle like 200 hits per second on very modest hardware
> (PII+64MB RAM+some striped disks) on a single machine running FreeBSD
> (crank up maxusers or you'll start to be getting TCB-number bound
> because of TIME_WAIT state!).  That's several millions hits per day,
> depending on how long and intensive is your peak period.  Completely
> free (except PC hardware for which you'll have to pay some $2000 with
> all the good SCSI gear you may want).
>


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to