Linux-Networking Digest #252, Volume #12         Tue, 17 Aug 99 00:13:46 EDT

Contents:
  Re: smbmount problem: Too many open files in system (Douglas Bollinger)
  Cable Modems ("Chad Zalkin")
  Re: Failed to see my NIC (Simon Pallister)
  Re: Problem "beyond the ability" of redhat support =) -- telnet and redhat 6.0 
(Frank v Waveren)
  Sorry, wrong newsgroup ("bran")
  Re: 3Com 3c905c-tx ("Steve Cowles")
  Re: Change IP from remote computer.. (Malware)
  Re: IPmasq - blocking group of hosts (Malware)
  Sendmail in LAN ("Dr. Al Bento")
  Re: Bus Error in Netscape (Chris Mahmood)
  vpn question (Taso Hatzi)
  Re: Direct ethernet connection under Linux (Paul Hovnanian)
  Re: Linux Dialup, please help. (Chris Mahmood)
  Re: Proxy Serving across Cable Modem (Simon Pallister)
  win 9x not seeing Samba server (guru help needed) (Jason)
  Re: IP Tunneling? (Greg Hookey)
  caching-only named woes :-) (Marc Mutz)
  what op system? (Bob Tennent)
  Re: Cable Modems (Todd Graham)
  ipfwadm and ftp (Dave Morgan)

----------------------------------------------------------------------------

From: [EMAIL PROTECTED] (Douglas Bollinger)
Crossposted-To: comp.os.linux.misc
Subject: Re: smbmount problem: Too many open files in system
Date: Mon, 16 Aug 1999 21:17:30 -0400

Olivier Perron at [EMAIL PROTECTED] says...
 
> I've find it: I've just recompiled the kernel enabling the "Win 95 bug
> fixes" in the smbfs options.
> 
> Now everything works ok.
> 
> Olivier.

Thanks Olivier, that solution fixed my Samba problem as well.

What's really annoying for me is that "Win 95 bug fixes" is set "on" 
for the standard RH6.0 system that I'm using and the RPM upgrade 
kernels.  So, when I was recompiling the kernel for something else, 
I set the W95 bug fixes flag to off and promptly forgot about it.  
Why?  Well, I changed it to "off" on the recommendation of a post 
from one of the Samba team in the RH mailing list.  Supposedly, with 
my Win98 system, using the kernel Win95 bug fixes setting would 
cause bad time stamps.

While getting the other hardware device working, Samba wasn't 
getting used much of the time, but a few weeks later I was pulling 
my hair out wondering what happened to the "Network Neighborhood."

The morale of the story is that when you start goofing with the 
kernel, do one thing at a time. :)

Now, time for a little email, it looks like the Win98 users needs 
the bug fixes too.

-- 
Douglas Bollinger
Mt. Holly Springs, PA   17065

My other computer runs Linux.

------------------------------

From: "Chad Zalkin" <[EMAIL PROTECTED]>
Subject: Cable Modems
Date: Mon, 16 Aug 1999 20:49:34 -0500

Hi, I am looking into getting a cable modem.  Before I call my cable
provider, I'd like to be sure I can use this in Linux. (And I'm guessing the
provider will be of no help if I don't know what to ask them).

Does anyone have this set up?  Should I get a certain type of modem?  What
questions should I ask the provider to be sure it will work under Linux and
Win98?  How can I figure out if my existing network card works under Linux.
(I've never used it in anything under linux).

I'm running Caldera OpenLinux 2.2 on a Compaq Presario (PIII)


Thanks in advance!
Chad Zalkin



------------------------------

From: Simon Pallister <[EMAIL PROTECTED]>
Subject: Re: Failed to see my NIC
Date: Mon, 16 Aug 1999 15:08:52 -0800

thanks Steve, I'll try that later, problem solved for now
with different NIC.



* Sent from RemarQ http://www.remarq.com The Internet's Discussion Network *
The fastest and easiest way to search and participate in Usenet - Free!

------------------------------

From: [EMAIL PROTECTED] (Frank v Waveren)
Subject: Re: Problem "beyond the ability" of redhat support =) -- telnet and redhat 6.0
Date: Tue, 17 Aug 1999 02:46:24 GMT

In article <H8%t3.9935$[EMAIL PROTECTED]>,
        "Carlos Martin del Campo" <[EMAIL PROTECTED]> writes:
> When I do a telnet to my computer it actually opens and stablishes a
> connection and i get to see in my terminal the contents of the issue.net
> file, but i doesn't show me the log in prompt!!!!  it gets stuck there and
> later on closes my connection because of time out...
> 
> now, the PATH is ok: /bin
> the login program is working all right too, i have tested it several times
> the permissions in /bin/login are ok too.
> i also tried telling telnet where login lives wit the "-D /bin/login"
> option.
> i called redhat support and they told me that this problem is "beyond their
> ability" and refered me to this newsgroup...  =)  (no kidding!!!)

Hmm, that's what you pay 70 bucks for? That sucks. have you tried putting
the IP of the machine your telnetting in from in /etc/hosts, combined with
a hostname? This sounds like telnetd is trying to reverse resolve the 
ip of the connecting client, and can't.
-- 

                        Frank v Waveren
                        [EMAIL PROTECTED]
                        ICQ# 10074100

------------------------------

From: "bran" <[EMAIL PROTECTED]>
Subject: Sorry, wrong newsgroup
Date: Mon, 16 Aug 1999 18:39:52 -0700





------------------------------

From: "Steve Cowles" <[EMAIL PROTECTED]>
Subject: Re: 3Com 3c905c-tx
Date: Mon, 16 Aug 1999 23:16:10 GMT

You might have to download/compile/install the driver for this card. It
looks like Donald Becker has deveolped a  specific driver for the 905C.
Check out this site.

http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html

Steve Cowles
SWCowles at gte dot net


Patrick Larkin <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
>
> I got a new machine with a
> 3Com 3c905c-tx
>
> When I select 3c90x from the RedHat 6 installer, it can't find the
> device.
>
> any advice?  is this specific card supported?
>
>
> --
> Patrick J. Larkin
> Senior Computing Consultant
> Lehigh University
> http://www.lehigh.edu/~pjl2/



------------------------------

From: Malware <[EMAIL PROTECTED]>
Subject: Re: Change IP from remote computer..
Date: Sun, 15 Aug 1999 11:25:02 +0200

Hi Jon,

you wrote:
> What would happen if you used ifconfig (redhat obviously) to create an aliased
> IP for that card such that the card has two IPs, then kill the first one. For
> example:
> 
> Original IP: 192.168.1.16
> Add additional IP: 192.168.2.54
> Disconnect from system remotely, then telnet in through the new IP.
> Kill off the original IP: 192.168.1.16

This might work for Linux 2.0 if you care about the routes too by adding
the same routes as are existing for eth0 to eth0:1 too and delete the
old ones after. But for Linux 2.2 shuting down the original interface
with ifconfig does catch the alias device too. I'd recommend using the
iproute2 utitlity (namely the program "ip") to add an alias address
(this is possible now without creating an alias device), create the new
telnet session as above and delete the old address later on.

To move from 192.168.2.1 to 192.168.2.6 following should work:

ip addr add 192.168.2.6/24 broadcast 192.168.2.255 scope global dev eth0
# create new telnet session to 192.168.2.6 now!
ip addr del 192.168.2.1/24 dev eth0



Malware

------------------------------

From: Malware <[EMAIL PROTECTED]>
Subject: Re: IPmasq - blocking group of hosts
Date: Sun, 15 Aug 1999 11:28:24 +0200

Hi Marek,

you wrote:
>  /sbin/ipchains -D output -s internal -d xx.xx.xx.xx/213 -p tcp -j
> REJECT
[...]
> /sbin/ipchains: invalid mask `213' specified
> Try `/sbin/ipchains -h' or '/sbin/ipchains --help' for more information.

It's perfectly correct. How can a IP netmask consisting of 32 bits like
an IP address contain 213 bits setted to 1?

> How can I block group of IP adressess without issuing each command for
> each address??

Just give it a valid netmask.


Malware

------------------------------

From: "Dr. Al Bento" <[EMAIL PROTECTED]>
Subject: Sendmail in LAN
Date: Tue, 17 Aug 1999 02:02:33 GMT

How can I set up Sendmail in a LAN not connected to the Net, so that it
does not take forever to time out at boot because it cannot find the
FQDN in the DNS server? Can I create a fake FQDN in the LAN use HOSTS or
the like to avoid this?

TIA

Al

------------------------------

From: Chris Mahmood <[EMAIL PROTECTED]>
Subject: Re: Bus Error in Netscape
Date: 16 Aug 1999 17:00:07 -0700

Spathi <[EMAIL PROTECTED]> writes:

> I am now experiencing the same problems, it is happening whenever java is
> started (if you look down the bottom in the status bar it says Starting
> Java... then it dumps) If i find any information on this i will let you
> know, i would appreciate if you could do the same. I am also using rh 6
Bus errors are most often caused by mismatched libraries.  Run ldd on
your netscape binary and make sure your libraries are up-to-date.  And 
just b/c it's a web browser doesn't make it a networking
question--please post in the approp. group.
-ckm

------------------------------

From: Taso Hatzi <[EMAIL PROTECTED]>
Subject: vpn question
Date: Tue, 17 Aug 1999 00:55:23 +0000


Is it possible to set up Linux to accept incomming
VPN connections from Win95/98/NT DUN clients? How
do I do it?

TIA

------------------------------

From: Paul Hovnanian <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup,comp.os.linux.hardware
Subject: Re: Direct ethernet connection under Linux
Date: Mon, 16 Aug 1999 18:42:29 -0700

LIAN SHEN wrote:
> 
> Hello everyone,
> 
> I get a problem with ethernet connection under linux:
> 
> I want to connect 2 laptops, both equipped with PCMCIA 10/100BaseT
> ethernet card. So I took a cross-over cable (not the normal twisted-pair
> one)
> 
> My setup is the following:
> 
> IP=130.60.93.222 resp. 130.60.93.223
> Mask=255.255.255.0, Broadcast=130.60.93.255 (for both hosts)
> 
> Under Windows98, it's no problem, both cards detect a 100Mbit/s mode.
> (The actual transfer rate is lower.)
> 
> When I booted ONE host to Linux, ethernet cards can still detect
> 100Mbit/s mode, but there is no connection available. Then I pulled out
> this crossed-over cable from the linux host, connected this linux host
> with normal twisted-pair cable to our switch, (without reboot and
> changing any network information), it can problemlessly connect to
> internet
> (ping, ftp, telnet...).
> 
> When both hosts booted to Linux, there was still no improvement, ping
> showed
> no response from the other host.
> 
> /var/log/messages tells me
> kernel: eth0: Setting full-duplex based on MII #0 link partner
> capability of 41e1.
> 
> The ifconfig command tells me
> eth0      Link encap:Ethernet  HWaddr 00:60:08:B5:73:E2
>           inet addr:130.60.93.222  Bcast:130.60.93.255
>           Mask:255.255.255.0
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:99 errors:2 dropped:0 overruns:0 frame:2
>           TX packets:44 errors:0 dropped:0 overruns:0 carrier:44
>           collisions:0 txqueuelen:100
>           Interrupt:10 Base address:0x100
> 
> Does anyone have an idea what I configured wrong under Linux?

The card looks OK. Run the 'route' command (or netstat -r) and see if you have a 
route pointing to eth0. You should see something like:

Destination     Gateway         Genmask         Flags MSS    Window Use Iface
130.60.93.0        *            255.255.255.0   U     1436   0     4189 eth0


You might have to add one:

route add -net 130.60.93.0 dev eth0

This tell the kernel that anything for the 130.60.93.0 network needs to go out 
through eth0.


> BTW, Linux version I use is Mandrake6.0 and Redhat6.0.
> 
> Thanks a lot!
> 
> Lian Shen

-- 
Paul Hovnanian     mailto:[EMAIL PROTECTED]
==================================================================
>From the moment I picked your book up until I put it down I was
convulsed with laughter.  Some day I intend reading it.
                -- Groucho Marx, from "The Book of Insults"

------------------------------

From: Chris Mahmood <[EMAIL PROTECTED]>
Subject: Re: Linux Dialup, please help.
Date: 16 Aug 1999 17:03:33 -0700

[EMAIL PROTECTED] (Ian) writes:
> 
> Thanks for your reply Clifford. I tried adding the init string with
> quotes but with no success (not exactly sure if I did it correctly).
> As for the logs, as I mentioned I am a complete linux newbie and I
> dont know what logs to look for or where said logs live. :)
Run chat with the '-v' option and look in /var/log/messages.
-ckm

------------------------------

From: Simon Pallister <[EMAIL PROTECTED]>
Crossposted-To: redhat.networking.general
Subject: Re: Proxy Serving across Cable Modem
Date: Mon, 16 Aug 1999 15:02:50 -0800

I actually use both these methods. I run a Squid proxy
(with peer-proxying with other cable users) and run IP Masq
too.

Take a look at the squid homepage (not sure of the url, but
it's easy to find) and/or the firewall HOWTO. It has to be
easy to do - I did it!!



* Sent from RemarQ http://www.remarq.com The Internet's Discussion Network *
The fastest and easiest way to search and participate in Usenet - Free!

------------------------------

From: Jason <[EMAIL PROTECTED]>
Crossposted-To: redhat.networking.general,redhat.servers.general
Subject: win 9x not seeing Samba server (guru help needed)
Date: Tue, 17 Aug 1999 02:30:47 GMT

All of my NT servers and NT workstations can see my Linux/Samba in the 
network neighborhood, but none of my win95/98 boxes will.

Hers is what I've done so far.
Linux server is AP400 - IP 192.145.10.63

My smb.conf is as follows
[global]
workgroup = OEG
announce as = NT
server string = AP400
hosts allow = 192.145.10 127.
load printers = yes
guest account = nobody
log file = /var/log/samba/log.%m
max log size = 50
security = I'm trying "domain" and have used "server"
server = main (have also used the IP)
encrypt password = yes
smb passwd file = /etc/smbpasswd
unix password sync = yes
passwd program = /usr/bin/passwd %u
sockect options = TCP_NODELAY
interface = I'm not sure exactly the way this option works. using    
______"192.145.10.63/24"
remote browse sync = 192.145.10.5 
remote announce = 192.145.10.
domain controller = main

with wins I've tried having the samba server be both the wins server 
syncing browse list with 192.145.10.5 and just a wins client and I have 
changed the win9x box to use it as a wins server/ and tried all 3 browse 
master options.  also have tried using Samba as a wins proxy.

DNS - working fine

and then my shares

I've been looking through newgroup after newgroup and tried everything and 
it is still not working. Any suggestions will be welcome.

==================  Posted via CNET Linux Help  ==================
                    http://www.searchlinux.com

------------------------------

From: Greg Hookey <[EMAIL PROTECTED]>
Subject: Re: IP Tunneling?
Date: Tue, 17 Aug 1999 02:31:48 +0000

Your isp is most probably running a firewall.  One that blocks incoming
icmp packets ( eg ping ).  It can be a blessing ( no ping floods from out
side the network ) or it can suck ( no replys to icmp packets you send ) .
Judge according when choosing whether you want to stay with your isp or
change to new one.

Greg

Mark A wrote:

> I use DirecPC as my ISP.  The other day I noticed that I am consistently
> unable to connect to the web site, www.linux.org.  I can't even "ping"
> it; I get "Request timed out" messages.  This only happens when I am
> using DirecPC as my ISP.  When I log in with another ISP, I can access
> it just fine.
>
> I asked DPC tech support about this, and they said that "...it is
> probably the result of IP filtering.  The site may be secure and not
> compatible with the IP tunneling that DirecPC employs".
>
> I don't know enough about IP filtering and tunneling to know what this
> answer means.  Are they just jerking me around, or does this answer
> sound plausible?
> --
> Mark S. Anthony
> [EMAIL PROTECTED]


------------------------------

Date: Sun, 15 Aug 1999 20:58:13 +0000
From: Marc Mutz <[EMAIL PROTECTED]>
Subject: caching-only named woes :-)

Hi out there!

The problem is the following:

ISDN line (ippp0) is down:
su root -c '/sbin/init.d/named start'
lftp somehost
> ls
# ISDN line comes up
# ... 20 sec timeout
# ISDN line goes down
# ... some seconds
# ISDN line goes up
# ...20 sec timeout
# ISDN line goes down
# ad infinitum
CTRL-C; exit
su root -c '/sbin/init.d/named stop'
lftp somehost
> ls
# ISDN line comes up
ls output
> exit

This is the setup:
$ cat /sbin/init.d/i4l
#!/bin/sh

PIDFILE=/var/run/ipppd.ippp0.pid

case "$1" in
start)
        #
        # configure interfaces
        #

        echo -n "isdnctrl'ing ippp0..."

        # register device
        /sbin/isdnctrl addif ippp0

        # my MSN/EAZ
        /sbin/isdnctrl eaz ippp0 911419

        # enable automatic dial-out
        /sbin/isdnctrl dialmode ippp0 auto

        # numbers to dial out to
        /sbin/isdnctrl addphone ippp0 out 0521911781

        # set level 2 protocol to HDLC
        /sbin/isdnctrl l2_prot ippp0 hdlc

        # set level 3 protocol to the only supported value
        /sbin/isdnctrl l3_prot ippp0 trans

        # set encapsulation to SyncPPP
        /sbin/isdnctrl encap ippp0 syncppp

        # no-one allowed to dial-in (for now)
        /sbin/isdnctrl secure ippp0 on

        # set hangup-timeout to xx sec...
        /sbin/isdnctrl huptimeout ippp0 20

        # enable hangup just before next charge info
        /sbin/isdnctrl chargehup ippp0 on

        # huptimeout for incoming calls? (not used for now)
        /sbin/isdnctrl ihup ippp0 off

        # obvious one:
        /sbin/isdnctrl dialmax ippp0 5

        # cb functions not needed
        # callback features
        #/sbin/isdnctrl callback $NETDEV $I4L_CALLBACK
        #/sbin/isdnctrl cbdelay $NETDEV $I4L_CBDELAY
        #/sbin/isdnctrl cbhup $NETDEV $I4L_CBHUP

        echo done

        echo -n "Setting up network device ippp0..."

        ifconfig ippp0 192.168.0.1 pointopoint 192.168.0.123 up

        # start ppp-daemon
        /sbin/ipppd pidfile $PIDFILE ippp0

        # bind to ???
        /sbin/isdnctrl pppbind ippp0 0

        echo done

        ;;
stop)
        echo -n "Shutting down ippp0..."

        test -s $PIDFILE && kill -15 `cat $PIDFILE`
        if test -s $PIDFILE; then
                sleep 2
                # ganz schoen hartnaeckig :-(
                echo "Warning: kill -9 `cat $PIDFILE`"
                kill -9 `cat $PIDFILE` 2>/dev/null
        fi

        ifconfig ippp0 down
        /sbin/isdnctrl delif ippp0

        ;;
*)
        echo "Usage: $0 {start|stop}"
        exit 1
        ;;
esac

exit 0
$ cat /etc/ppp/ip-up
#!/bin/sh

BASENAME=`basename $0`
INTERFACE=$1
DEVICE=$2
SPEED=$3
LOCALIP=$4
REMOTEIP=$5

/sbin/route add default gw $REMOTEIP dev $INTERFACE

# flushing seti@home client's buffers
for i in 1 2; do
    cd /home/mmutz/setiathome/setiathome-$i
    if [ -f RAN ]; then
        su mmutz -c './setiathome -stop_after_xfer'
        rm RAN
    fi
done
$ cat /etc/named.boot # yes, I know: old bind :-)
directory /var/named
cache . root.cache
forwarders a.b.c.d a.b.e.f
slave

where the forwarders are _valid_ DNS servers, and yes, they accept the
connctions from my named, as I can do:

$ nslookup www.suse.com
<ISDN line comes up but nslookup hangs, so CTRL-C'ed>
$ nslookup www.suse.com
<blah>
Non-authorative answer:
<blah>

So it actually gets the DNS entries and caches them. But if I run named
locally, the connection that initiates an ISDN dial-up hangs, where it
does not hang if I use my ISP's nameservers directly.

<other conf files omitted due to security>

TIA,
Marc

-- 
Marc Mutz <[EMAIL PROTECTED]>                    http://marc.mutz.com/
University of Bielefeld, Dep. of Mathematics / Dep. of Physics

PGP-keyID's:   0xd46ce9ab (RSA), 0x7ae55b9e (DSS/DH)


------------------------------

From: [EMAIL PROTECTED] (Bob Tennent)
Subject: what op system?
Date: 17 Aug 1999 02:51:45 GMT
Reply-To: rdt(a)cs.queensu.ca

How can I discover which operating system my cable company is
using in its very unreliable servers?

Bob T.

------------------------------

From: Todd Graham <[EMAIL PROTECTED]>
Subject: Re: Cable Modems
Date: Tue, 17 Aug 1999 03:01:43 GMT

I've got a cable set up with my Linux system, RH/Mandrake. Ask them what
the set up will be.  With mine, my ISP put a NIC card in my box which in
turn connects to the modem via twin pair cables. With with a bit of
configuration Linux recognized it, that card is an Intel EtherExpress
Pro 10.  I've got a three com in my other box and Linux recognized it no
problem.  Ask what kind of card they do use if this is how they set it
up. 3com is you're best bet, in fact, ask if they are going to hard code
the you IP address into it, definatly make sure you use a reliable NIC
card.

Hope this helps.



In article <[EMAIL PROTECTED]>,
  "Chad Zalkin" <[EMAIL PROTECTED]> wrote:
> Hi, I am looking into getting a cable modem.  Before I call my cable
> provider, I'd like to be sure I can use this in Linux. (And I'm
guessing the
> provider will be of no help if I don't know what to ask them).
>
> Does anyone have this set up?  Should I get a certain type of modem?
What
> questions should I ask the provider to be sure it will work under
Linux and
> Win98?  How can I figure out if my existing network card works under
Linux.
> (I've never used it in anything under linux).
>
> I'm running Caldera OpenLinux 2.2 on a Compaq Presario (PIII)
>
> Thanks in advance!
> Chad Zalkin
>
>


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------

From: Dave Morgan <[EMAIL PROTECTED]>
Subject: ipfwadm and ftp
Date: Tue, 17 Aug 1999 03:10:50 GMT

Hi All,
        Time to stop lurking :)

        I have the following firewall.sh script and everything works except
        ftp from internal clients.

        I get ILLEGAL PORT complaints from the (any) external ftp server.

        Any help will be greatly appreciated.

TIA
Dave
-- 
Dave Morgan

[EMAIL PROTECTED]


#!/bin/sh
#
# /etc/rc.d/firewall.sh
# this is released to public EXTERNAL_IP has been changed

PATH=/sbin:/bin:/usr/sbin:/usr/bin
INTERNAL_NETWORK=192.168.1.0/24
EXTERNAL_NETWORK=0.0.0.0/0
INTERNAL_IP=192.168.1.1
EXTERNAL_IP=129.122.111.155
UNPRIVPORTS="1024:65535"

# Incoming, flush and set default policy of deny. 
ipfwadm -I -f
ipfwadm -O -f
ipfwadm -F -f

ipfwadm -I -p deny
ipfwadm -O -p deny
ipfwadm -F -p deny

# IP spoofing, get lost
ipfwadm -I -a deny -V $EXTERNAL_IP -S $INTERNAL_NETWORK
ipfwadm -I -a deny -V $EXTERNAL_IP -S $EXTERNAL_IP

#Internal traffic  required to administer the box 
ipfwadm -I -a accept -V $INTERNAL_IP
ipfwadm -O -a accept -V $INTERNAL_IP
 
# local interface, local machines, going anywhere is valid
# outgoing anything goes
ipfwadm -I -a accept -S $INTERNAL_NETWORK -D $EXTERNAL_NETWORK
ipfwadm -F -a masquerade -S $INTERNAL_NETWORK -D $EXTERNAL_NETWORK

#ftp-data only externally initiated connection allowed
ipfwadm -I -a accept -P tcp -S $EXTERNAL_NETWORK ftp-data -D
$INTERNAL_NETWORK $UNPRIVPORTS

# incoming only unpriv ports
ipfwadm -I -a accept -k -P tcp -S $EXTERNAL_NETWORK -D $INTERNAL_NETWORK
$UNPRIVPORTS
ipfwadm -I -a accept -k -P udp -S $EXTERNAL_NETWORK -D $INTERNAL_NETWORK
$UNPRIVPORTS

#masqueradeing for data transfers
ipfwadm -F -a masquerade -S $EXTERNAL_NETWORK -D $INTERNAL_NETWORK

#firewall acceptance packets
ipfwadm -I -a accept -S $EXTERNAL_NETWORK -D $EXTERNAL_IP
ipfwadm -O -a accept -S $EXTERNAL_IP -D $EXTERNAL_NETWORK

# remote interface, any source, going/returning to web server
ipfwadm -I -a accept -V $EXTERNAL_IP -P tcp -S $EXTERNAL_NETWORK -D
$EXTERNAL_IP/32 www
ipfwadm -O -a accept -P tcp -S $EXTERNAL_IP www

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to