Linux-Networking Digest #262, Volume #12 Tue, 17 Aug 99 20:13:52 EDT
Contents:
Re: bridge + firewall (Vidar Andresen)
Modem Dial-in (Kelvin Dam)
ppp-diald-network ???? ("Marco")
Anonymous FTP setup (Help needed) (Hanqing Wu)
Socket Access Denied ("Scott.R.Wachtler")
Re: pppd in 'setuid-root' mode (Chris Butler)
Re: WhereToFind? Socket 7 motherboard with onboard ethernet, sound, and video?
(Frank Schwab)
GNUware.com ("Kerry J. Cox")
Re: Modem Dial-in ("Steve Cowles")
Need Surecom NE12P driver !!! (=?iso-8859-1?Q?P=E5l?= Berge)
Re: ftp problem ("Phil")
Linux Internet Access Through Proxy Server ("Doug Thews")
Re: Linux PPP dialup problem to Ascend Modems (Clifford Kite)
Re: ppp compression missing
Re: ICMP not working (Frank v Waveren)
Re: Which Network Cards (Greg Leblanc)
Cracks for Linux? (Sean)
Re: Running DOS from Linux (Nicholas E Couchman)
Re: Linux and NT Proxy Servers ("Phil")
PPP and Ethernet connection. (Frederik Likaj)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Vidar Andresen)
Crossposted-To: tw.bbs.comp.linux
Subject: Re: bridge + firewall
Date: Tue, 17 Aug 1999 20:19:28 GMT
In article <7o6chs$2vp$[EMAIL PROTECTED]>,
"�˼��H" <[EMAIL PROTECTED]> wrote:
>if i use ipchains to do packet filtering on a computer with bridge
>configured, packet from and to the same subnets are not scanned?! the fact i
>get is that all the packets from and to the same subnet is ignored. thanx.
Bridging mean to let everything _float_ _trough_ your machine on the
interfaces wich are bridged. And when the receiver is known, traffic
goes that way an not out all ways.
But your machine, and the macines connected _to_ your machine does not
neccesary have a _route_ _to_ eachother or your machine.
What route an ipchain and ipfwadm does is routing and filtering on what
float on the _route_ _to_ other interfaces and nets.
But. The bridge can also do some filtering, not based on routes and
adresses, but on content, protocol. The first bridge the HOWTO's
point to can not, but there was a second version, check the bridge
script (/etc/rc.d/init.d/bridge or wherever you have placed it) for
this line:
# brcfg start exempt 802_3 802_2 ip arp
If uncomented that mean you start the bridge, but not on the above
protocols/services. That mean if you dont want the bridge to let
tcp/ip trough this would be the way you want to start the bride (all
set in the script):
brcfg start exempt ip
That would mean these packet would need a route to get trough your
machine, and could be inspected and handled.
http://support.broadjump.com/cerberus/ is a bridge rewritten for 2.2.*
I belive. Got some info.
There is also freebsd-bridge out there somewhere, have not looked into
it, but from size of source (much more lines written) it may do a more
detailed work.
Mvh Vidar Andresen
------------------------------
From: Kelvin Dam <[EMAIL PROTECTED]>
Subject: Modem Dial-in
Date: Tue, 17 Aug 1999 22:39:01 +0200
Hey there!
I'm newbie with a RH6.0 installation.
I've installed mgetty to collect my incomming calls, and if authorized -
logging in.
But my modem answers after 1 ring, so if the phone rings, I have to run
like ...... ;)
Is it mgetty I should configure to answer later, or is it the actual
modem?
And if so - how do I configure the modem?
Thx
Kelvin Dam
------------------------------
From: "Marco" <[EMAIL PROTECTED]>
Subject: ppp-diald-network ????
Date: Wed, 18 Aug 1999 00:47:58 +0200
wvdail is great. I use SUSE 6.1 and it works perfect.
i hooked my lan using a linux box via ppp0 to the internet. firewall and
masq are working everything is fine.
But no one was able to explain me how i can get the modem to dial up
automatically when someone sends a tcpip request to the linux box.
Do i have to use diald or is there a possibility to get it working using
wvdial
Please help
Thank you
Marco
------------------------------
From: Hanqing Wu <[EMAIL PROTECTED]>
Subject: Anonymous FTP setup (Help needed)
Date: Mon, 16 Aug 1999 16:43:25 -0500
How can I set up anonymous ftp to my new linux server. the login seems
work, but not go to the right directory. The message is shown below:
ftp cbtlx1
Connected to cbtlx1.
220 cbtlx1 FTP server (Version wu-2.4.2-academ (1) Wed Aug 11 14:21:22 CDT
1999)
ready.
Name (cbtlx1:ftpadmin): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password:
230 Guest login ok, access restrictions apply.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> pwd
257 "/" is current directory.
ftp> ls
200 PORT command successful.
150 Opening ASCII mode data connection for /bin/ls.
226 Transfer complete.
ftp>
I am very appreciated if you can give some help. Thanks!
Hanqing Wu
[EMAIL PROTECTED]
------------------------------
From: "Scott.R.Wachtler" <[EMAIL PROTECTED]>
Subject: Socket Access Denied
Date: Tue, 17 Aug 1999 14:47:05 -0700
Hi,
I've written several client-server applications that I'm trying to
port over to linux. When I run the clients though they are denied access
to the sockets defined. The applications all ran fine on my Solaris box,
and the clients running from a Linux box can connect with my Solaris
box, but they're unable to connect to by Linux box. It appears I have a
permissions problem but I'm unable to locate it.
I've double and triple checked settings in etc/services, inetd.conf,
hosts.allow, hosts.deny and even hosts.equiv. I'm able to telnet in on
port 25, and access my web page off port 80. Is there any other place
where access may be being denied or someplace I need to specify access
allowed on more ports? Nothing is showing up in my logs.
Any help is greatly appreciated.
Sincerely,
Scott Wachtler
------------------------------
From: [EMAIL PROTECTED] (Chris Butler)
Crossposted-To: comp.os.linux.misc
Subject: Re: pppd in 'setuid-root' mode
Date: 17 Aug 1999 23:30:43 +0100
[comp.os.linux.misc - Tue, 17 Aug 1999 13:04:01 +0100] * Richard G wrote *
> I suspect the system is revoking pppd's suid root status at some point and
> I was wondering if there are any likely causes of this? (When initially
> called by a pppuser, I think pppd _is_ running as root as I don't get the
> standard error message telling me to run it as root!)
pppd sets its UID back to the UID of the user who ran it once it has done
whatever it needs root privs to do. Basically because doing a lot of stuff
as root is generally a Bad Thing(tm).
--
Chris Butler
<[EMAIL PROTECTED]>
------------------------------
From: [EMAIL PROTECTED] (Frank Schwab)
Crossposted-To: comp.os.linux.portable,comp.os.linux.hardware
Subject: Re: WhereToFind? Socket 7 motherboard with onboard ethernet, sound, and video?
Date: Tue, 17 Aug 1999 21:17:29 GMT
Try www.ebay.com, computers, motherboards. Search for "Video sound
ethernet" in Hardware/motherboards, titles and descriptions. I got 10
matches.
There are several manufacturers of this style board that I've seen
lately. Unfortunately, none had what I was looking for which was NTSC
video out. If you happen to find one with NTSC output, LET ME KNOW.
/frank
On Tue, 17 Aug 1999 14:44:10 -0500, David Scott Copus
<[EMAIL PROTECTED]> wrote:
>I'm looking for a Socket 7 (preferable Super 7) that has *onboard*
>sound, ethernet, and video. Does anybody recommend any
>motherboards that have all these features... and can work
>with Linux?
>
>Or... if you know where I can look to find motherboards with all
>these features... I will gladly accept any suggestions!!
>
>Just curious... but would an Intel 166 MMX (socket 7) run _cooler_
>or _warmer_ than any Pentium II chip? I want to put a computer
>in my car... and am concerned about heat. :>
>
>thanks!
>Scott.
>[EMAIL PROTECTED]
>
>
------------------------------
From: "Kerry J. Cox" <[EMAIL PROTECTED]>
Subject: GNUware.com
Date: Tue, 17 Aug 1999 17:02:05 -0600
I host a web site that I hope to use to promote Linux. I'm curious
as to what the Linux community thinks of the idea of offering 1000+
Linux programs all on one CD for a very low price. The CD is currently
available at http:/www.gnuware.com/ Is it something that looks viable
and is worth the price? One concern has been that
people outside the US might not want to spend much time trying Linux
because of lengthy download time. I ave lived several years outside
the US and have found phone use to be expensive, yet the interest in
Linux to be as great as if not more than that here in the US. People
might be put off by the download time involved in trying out various
Linux programs.
I've noticed one of the biggest criticisms about Linux is the lack
of software. I find this not to be the case and feel that a collection
of programs together in one place might still some of the criticism. The
programs are all current and the iso image for burning is updated
nightly. CDs are burned upon request and can also be custom tailored to
suit individual needs. You can check out the contents of the CD as they
currently stand at http://www.gnuware.com/version1_1.html
I would like some feedback. I speak German, Portuguese and Spanish
as well as English, so don't be shy. Let me know what would be
worthwhile to Linux users and how this product could be made even
better.
KJ
--
.-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-.
| Kerry J. Cox Vyzynz International Inc. |
| [EMAIL PROTECTED] Systems Administrator |
| (801) 596-7795 x101 http://www.vii.com |
| ICQ# 37681165 http://quasi.vii.com/linux/ |
`-------------------------------------------------------'
------------------------------
From: "Steve Cowles" <[EMAIL PROTECTED]>
Subject: Re: Modem Dial-in
Date: Tue, 17 Aug 1999 22:57:46 GMT
I use mgetty also, but have not tried the -n option. This is straight from the
man pages: man mgetty
-n # Tells mgetty to pick up the phone after the #th RING. Default is 1.
Steve Cowles
SWCowles at gte dot net
Kelvin Dam <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]...
>
> Hey there!
>
> I'm newbie with a RH6.0 installation.
>
> I've installed mgetty to collect my incomming calls, and if authorized -
> logging in.
> But my modem answers after 1 ring, so if the phone rings, I have to run
> like ...... ;)
>
> Is it mgetty I should configure to answer later, or is it the actual
> modem?
>
> And if so - how do I configure the modem?
>
> Thx
>
> Kelvin Dam
>
------------------------------
From: =?iso-8859-1?Q?P=E5l?= Berge <[EMAIL PROTECTED]>
Subject: Need Surecom NE12P driver !!!
Date: Wed, 18 Aug 1999 01:04:48 +0200
NE12P should be compatible with NE2000-series, but it doesn't work.
Anyone got a driver that works?
------------------------------
From: "Phil" <[EMAIL PROTECTED]>
Subject: Re: ftp problem
Date: Tue, 17 Aug 1999 13:59:12 -0700
Can you connect, are you denied login, or can you login but not xfer files?
ftpd is run from /etc/inetd.conf - is the entry commented out?
Have the ports been changed or commented out in /etc/services? ftp data -
20 & ftp - 21 for udp & tcp
/etc/hosts.allow & /etc/hosts.deny can be setup to allow/deny specific tcp
services to anyone/everyone.
man tcpd
man 5 hosts_access
Anonymous login? Do you have a user ftp in /etc/passwd?
Hope this helps a little.
Phil
F.B.Quinn <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Two side-by-side RH6.0 boxes on campus network, will ping each other,
> will telnet to each other, but will NOT permit ftp access to each
> other. Why???
> /home/ftp is chmod 777 (for test purposes only) and still no joy.
> Appreciate suggestions!
> F. B. Quinn, Jr., M.D.
> UTMB Galveston TX USA
------------------------------
From: "Doug Thews" <[EMAIL PROTECTED]>
Subject: Linux Internet Access Through Proxy Server
Date: Tue, 17 Aug 1999 18:11:20 -0500
I am having trouble configuring Netscape (or anything else) to work through
our proxy server (MS Proxy 2.0). I configured Netscape to point to the
proxy server (as I did for all of the other Win95 machines - which works
fine). But, I get an error message stating that the automated proxy script
was not recognized. When I try to do this manually, I get an error message
stating that the host name is not found.
I can ping internal and external IP addresses from a command shell, and I
can also resolve names through the internal and external DNS. But, I cannot
HTTP (or anything else IP related) outside of the proxy server.
Does anyone have a setup script for connecting Redhat 6.0 through MS Proxy
Server?
--
Doug Thews
Director, Client Solutions
D&D Consulting Services
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: Linux PPP dialup problem to Ascend Modems
Date: 17 Aug 1999 18:04:22 -0500
Mark ([EMAIL PROTECTED]) wrote:
: Hi there ppl,
: Dunno if I'm posting this query to the correct newsgroup, but here goes
: anyway. I work for an ISP and we have a 2 ascend MAX (version 7.1) modems
: for our customers to dial up to (authenticating with radiusd). Users who
: are running macs and windows have no problem at all at dialling up - that is
: to say, they can dial, connect to our modems and they are successfully
: assigned a dynamic IP from a specified pool (that we choose).
: However, linux seems to be a problem. I have a redhat 5.2 (kernel 2.0.36)
: machine, which is masquerading my LAN here at home onto the net. When I
: dial up to these Ascend modems, linux/the ascend modems appear to do
: something rather odd (nothing I've ever seen before). Linux basically says
: to the ascend modems "I don't care what IP address you are gonna give me...
: I want this one" - my linux box seems to tell the ascend modems what IP it
: wants, and I end up connecting to the ascend modems with my LAN IP address
: (192.168.168.10).
The pppd option noipdefault should make things right. Without this
option pppd looks for an IP address for a local interface to use based
on the hostname.
*Note* If you are using the pppd demand option then you need to get
ppp-2.3.9 at cs.anu.edu.au in pub/software/ppp . Otherwise there may
be yet another problem with getting the IP address for the connection.
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* My confidence in this answer (X), on a scale of 1 to 10:
|----|----|----|----|----|----|----|----|----|----|
0----1----2----3----4----5----6----7----8----9---X10 */
------------------------------
From: [EMAIL PROTECTED] ()
Crossposted-To: alt.uu.comp.os.linux.questions,comp.os.linux.misc
Subject: Re: ppp compression missing
Date: Tue, 17 Aug 1999 22:58:20 GMT
Reply-To: [EMAIL PROTECTED]
On Wed, 18 Aug 1999 00:42:58 +1000, Aaron <[EMAIL PROTECTED]> wrote:
>I've been dialing in to my ISP as well as my univ server thru Linux & found
>in /var/log/messages some lines that go :
>
>can't locate module ppp-compress-#
>
>where # is some number.
>I was not able to log on to my ISP (which uses PAP), but could with my univ
>(uses txt script).
>does anybody know what module is it reporting about? I'm using RH6.0 with
>pppd 2.3. I've neva come across such errors when using RH5.2
Presumably it's refering to: ppp_deflate.o
* ppp_deflate.c - interface the zlib procedures for Deflate compression
* and decompression (as used by gzip) to the PPP code.
* This version is for use with Linux kernel 1.3.X.
This is the only other ppp-ish module I have in my config. This corresponds
to the "deflate nr,nt" option in your ppp options.
Interesting note in the Makefile:
# if anything built-in uses ppp_deflate, then build it into the kernel also.
# If not, but a module uses it, build as a module.
# ... NO!!! ppp_deflate.o does not work as resident;
# it works only as a module!
R. Marc
------------------------------
From: [EMAIL PROTECTED] (Frank v Waveren)
Subject: Re: ICMP not working
Date: Mon, 16 Aug 1999 01:19:31 GMT
Maybe a stupid question, but: Did you compile in ICMP support? (It does help
occassionally :-) ).
In article <[EMAIL PROTECTED]>,
Monz <[EMAIL PROTECTED]> writes:
>
>
> Here is tcpdump output from a workstation ('monz, linux 2.2.11) being
> pinged:
> From 'cable' (192.168.1.2), a functioning linux (2.0.36) router:
>
> 14:24:38.396452 192.168.1.2 > monz.dorx.net: icmp: echo request (ttl 63,
> id 19744)
> 14:24:38.396516 monz.dorx.net > 192.168.1.2: icmp: echo reply (ttl 255,
> id 12286)
> 14:24:39.396404 192.168.1.2 > monz.dorx.net: icmp: echo request (ttl 63,
> id 19746)
> 14:24:39.396461 monz.dorx.net > 192.168.1.2: icmp: echo reply (ttl 255,
> id 12287)
> 14:24:40.396413 192.168.1.2 > monz.dorx.net: icmp: echo request (ttl 63,
> id 19748)
> 14:24:40.396470 monz.dorx.net > 192.168.1.2: icmp: echo reply (ttl 255,
> id 12288)
> 14:24:41.396481 192.168.1.2 > monz.dorx.net: icmp: echo request (ttl 63,
> id 19750)
> 14:24:41.396538 monz.dorx.net > 192.168.1.2: icmp: echo reply (ttl 255,
> id 12289)
>
> From 'marmoset', the server that cannot ping:
>
> 14:22:56.568323 marmoset.dorx.net > monz.dorx.net: egp: [version 8] (ttl
> 64, id 65201)
> 14:22:56.568392 monz.dorx.net > marmoset.dorx.net: icmp: monz.dorx.net
> protocol 8 unreachable [tos 0xc0] (ttl 255, id 12269)
> 14:22:57.567274 marmoset.dorx.net > monz.dorx.net: egp: [version 8] (ttl
> 64, id 65204)
> 14:22:57.567329 monz.dorx.net > marmoset.dorx.net: icmp: monz.dorx.net
> protocol 8 unreachable [tos 0xc0] (ttl 255, id 12270)
> 14:22:58.565472 marmoset.dorx.net > monz.dorx.net: egp: [version 8] (ttl
> 64, id 65207)
> 14:22:58.565527 monz.dorx.net > marmoset.dorx.net: icmp: monz.dorx.net
> protocol 8 unreachable [tos 0xc0] (ttl 255, id 12271)
>
> What does this mean? It looks like maybe the packets are corrupted in
> some way, says egp: [version 8] insted of icmp. Currently the server is
> linux 2.2.11, the old 2.2.10 kernel was tested with the same results.
> Pinging suddenly stopped friday, before all was ok. This was noticed
> when netsaint could not ping anything and when it pinged the print
> server, the print server crashed.
--
Frank v Waveren
[EMAIL PROTECTED]
ICQ# 10074100
------------------------------
From: Greg Leblanc <[EMAIL PROTECTED]>
Subject: Re: Which Network Cards
Date: Tue, 17 Aug 1999 22:48:41 GMT
I would recomend getting a pair of 3Com Etherlink III (3c509/3c509b)
second hand if you can find them. They should be cheap ($14 is what I
think we were paying) and they're good cards. They're easy to set up,
and the drivers are pretty mature for pretty much every OS in existence.
You'll also want a "cross-over" cable. Basically, this is a cable with
8 wires, with what looks like a fat phone connector on one end, with
several wires crossed.
Greg
In article <[EMAIL PROTECTED]>,
Nevada <[EMAIL PROTECTED]> wrote:
> *I have been thinking of installing network cards in my two computers.
> One being a linux box and the other with Windose95. I have no
experience
> or knowledge of network cards. What type of cards should I be looking
> for? Would prefer the cheapest cards that would do the job.
Manufacturer
> and model numbers would be helpful. Also how the cards are hooked up -
> cable, wire, etc. Any other info appreciated.
>
> ***** REMOVE '-NOSPAM' TO GET CORRECT EMAIL ADDRESS *****
> Linux the stable O/S of the New Millennium
>
>
--
It's pronounced "sexy" not "scuzzy"!
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: Sean <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.development.apps,comp.os.linux.misc
Subject: Cracks for Linux?
Date: Tue, 17 Aug 1999 23:31:15 GMT
Hi I think free software is the best. Especially Open Source Software.
Linux is supposed to be fre isn't it. So why do I have to pay 20$ to get
sound? I have the OSS/Linux demo. That stops working after 20 minutes.
Does anyone have a crack for this? Or does anyone know of a crack page
that has cracks for linux (like OSS/Linux maybe). Astalaviata.box.sk
doesn't have it and I don't know where to look. If so e-mail me at
[EMAIL PROTECTED]
================== Posted via CNET Linux Help ==================
http://www.searchlinux.com
------------------------------
From: Nicholas E Couchman <[EMAIL PROTECTED]>
Crossposted-To: linux.redhat.install
Subject: Re: Running DOS from Linux
Date: Tue, 17 Aug 1999 18:01:47 -0600
I believe, I'm not sure, but I believe you can use the "net" program
drivers, etc to access a network on DOSEMU.
--Nick
Luiz Guilherme B Damiano wrote:
> I would like to run my old Clipper applications in a Linux based
> computer.
>
> My problem is that the Clipper executables are located in a Netware
> server im my local network. I can see the programs there but in Linux I
> could not run it. If I start the DOSEMU, I do not "see" the LAN.
>
> There is any solution to this? Could I run a Netware client over the
> DOSEMU and then get access to the LAN?
>
> Any answer will be appreciate.
------------------------------
From: "Phil" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.questions
Subject: Re: Linux and NT Proxy Servers
Date: Tue, 17 Aug 1999 16:06:05 -0700
MS Proxy Server 2.0 supports Socks Proxy for non-Windows hosts. MS uses
SOCKS ver. 4.3a.
The MS SOCKS proxy will support Telnet, FTP, HTTP, and Gopher. It will not
support apps that use UDP - Real Audio, VDOLive, MS Netshow, Quake, .....
other fun stuff. The Winsock Proxy does do UDP.
More info on SOCKS - www.socks.nec.com
www.socks.nec.com/socks4.protocol
There are also permissions and other configuration required on the Proxy
Server.
HTH, but probably not quite what you wanted to hear.
Phil
Justin Mathews <[EMAIL PROTECTED]> wrote in message
news:n%eu3.99$[EMAIL PROTECTED]...
> I have an NT-based network where the NT workstations and win98 clients run
> the ms proxy client, connecting to the ms proxy server on the NT server.
I'd
> like to allow the linux machine on the network to also share the same
> connection. How do I get linux to talk to the ms proxy server on the NT
> server machine?
>
>
------------------------------
From: Frederik Likaj <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc,comp.os.linux.setup
Subject: PPP and Ethernet connection.
Date: Tue, 17 Aug 1999 23:31:15 GMT
Hej Guys.
I run RedHat 6.0 with kernel 2.2.5 which follows with the distribution.I
had to compile the kernel to get my network card working.I have a
RealTek8019 PnP Lan network card.I used the linux documentation i got from
RealTek's homepage.So i compiled the kernel /usr/src/linux 1.Make mrproper
2.Make xconfig 3.The only thing I changed was to set NE2000/NE1000 (Y)
instead of (M) into network devices. 4.Make dep 5.Make clean 6.Make bzdisk
(I use a floppy disk to boot to linux) 7.Make modules. 8.Make
modules_install.Then i used the reset8019.exe in DOS to set the network
card in jumperless mode instead of plug and play.Now when i boot with the
new kernel (same version) after compiling it i get my eth0 working just
fine but my ppp0 connection to internet cannot be activated from usrnet and
remains yellow.I get no messages.When i boot with the floppy from
installation (kernel before compiling)I have ppp0 connection as i used to
but have no eth0 connections.It remains yellow when i try to activate it
from usernet and no messages commes.Another thing i am just experiencing
now as i am writing this message is that my ppp0 to internet get down and
get activated again by itselfs???????
Help is appreciated from people who knows about those problems.
================== Posted via CNET Linux Help ==================
http://www.searchlinux.com
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
