Linux-Networking Digest #390, Volume #12         Fri, 27 Aug 99 23:13:46 EDT

Contents:
  Re: Samba newbie "where to start?"
  Tunneling? How.. ("Use replyaddr. from sig.")
  linux-based telnetrc tricks of the trade (John Gianni)
  Re: RJ-45 without hub? ("Andrew Dadmun")
  Re: pap-secrets simple question ("Jeff")
  ROOT CONSOLE LOGIN PROBLEMS ("news.uq.net.au")
  dual ethernet, no joy (Scott Post)
  Re: watching mail-server acting ("Steve Cowles")
  Re: Hardware required for a firewall machine (Raymonds Doetjes)
  Re: pap-secrets simple question (Clifford Kite)
  Re: Two Nics Required? (Raymonds Doetjes)
  Re: Slow connection to ISP ("Matthew O. Persico")
  Win98 <--> RH5.2 ("RichardMAN")
  Re: firewall and icq (Raymonds Doetjes)
  testing ... testing ... testing ... ("psyfybre")
  Re: Linux users group in Kansas City area - can't find one ("Jonathan Hutchins")
  Re: ppp problems (root)
  "user@localhost unsafe .." says .forward. Why? (John Doe)
  Re: "user@localhost unsafe .." says .forward. Why? (John Doe)
  Re: ip masquerading great problem (Raymonds Doetjes)
  Mail is tweaked ("Jeff")

----------------------------------------------------------------------------

From: <[EMAIL PROTECTED]>
Subject: Re: Samba newbie "where to start?"
Date: Sat, 28 Aug 1999 00:30:58 GMT

This worked perfect for me the first time.
it is a good place to start.

http://www.sfu.ca/~yzhang/linux/samba/toc.html

Clemens Nijhof wrote:
> Hello everyone,
> 
> I ordered a book about samba from H W Sams but, while this book is in
> the mail I was wondering where to start? From our local usegroup I got
> an e-mail to install sendmail,Bind, fetchmail, Samba and dhcpd.
> 
> Now what to do next?  running RH v 6.0
> 
> -Clem
> 


==================  Posted via CNET Linux Help  ==================
                    http://www.searchlinux.com

------------------------------

From: "Use replyaddr. from sig." <[EMAIL PROTECTED]>
Subject: Tunneling? How..
Date: Fri, 27 Aug 1999 13:03:29 +0000

Hello...

 I've got this situation, I've got a couple of computers
with a 100Mbit crossover lan between:

+--------+             +--------+         |
| calvin | eth0 - eth1 | hobbes | eth0 ---+
+--------+   100Mbit   +--------+  10Mbit |

Calvin/eth0: 192.168.2.2 
Hobbes/eth1: 192.168.2.1
Hobbes/eth0: 192.168.1.1 /* altered for test-purpose */

Now I vould like Calvin to apear as 192.168.1.2 (since I've only got 2
IP-numbers on that network), and I can't just plug in another netcard
(I'ts an AT&T Globalyst 620, with 2 pci slots, one for netcard (3c905)
and one for the Matrox Millenium, with root on nfs).

So what I did was:

[root@hobbes /tmp]# ifconfig eth0
eth0      Link encap:Ethernet  HWaddr 00:A0:24:C4:F8:13  
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:4463 errors:0 dropped:0 overruns:0 frame:0
          TX packets:2414 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          Interrupt:11 Base address:0xfcc0 

[root@calvin /tmp]# modprobe ipip
[root@hobbes /tmp]# config tunl0 192.168.1.1 up
[root@hobbes /tmp]# route add -host 192.168.1.2 gw 192.168.2.2 tunl0
SIOCADDRT: Network is unreachable
[root@hobbes /tmp]# arp -s 192.168.1.12 00:A0:24:C4:F8:13 pub
[root@hobbes /tmp]#

[root@calvin /tmp]# modprobe ipip
[root@calvin /tmp]# ifconfig tunl0 192.168.1.2 up
[root@calvin /tmp]# route add -net 192.168.1.0 netmask 255.255.255.0 gw
192.168.2.1 tunl0
SIOCADDRT: Network is unreachable
[root@calvin /tmp]# 

This is taken from the NET-3-HOWTO (6.8.2.  A tunneled host
configuration.),
but it's no surprice that it's not working (with the unreachable
errors).
Could somebody tell me what I'm doing wrong? And please don't say that I
just
didn't understand the HOWTO...

--
  Morten B�geskov (email: [EMAIL PROTECTED])

"Men and women will get along much better when one gender realizes that
the other gender knows more. Now, which is which, I'm not saying."
And thus spoke Silent Bob.

------------------------------

From: [EMAIL PROTECTED] (John Gianni)
Subject: linux-based telnetrc tricks of the trade
Date: 28 Aug 1999 00:42:51 GMT


Q: Anyone have useful ~/.telnetrc example files?

For example, how could one automate the following pop3 commands with telnet?
  unix or pc%  telnet mail-server pop3
               >  user john         <==tell pop3 who you are
               >  pass helloWor1d   <==provide your password
               >  stat              <==get a status of mail
               >  list              <==list your email msgs
               >  retr 3            <==retrieve the third msg
               >  dele 4            <==delete the fourth msg
               >  rset              <==reset (undo deletion)
               >  uidl              <==list all message id's
               >  quit                                      

Or, for example, automating the execution of a command from a PC?
  pc%          telnet command-server 
               > login    john
               > password helloWorld
               > run-this-unix-command.csh
               > quit

Or, for another example, automating a simple web server client from a PC?
  pc%          telnet web-server 80
               > GET /index.html HTTP/1.0<CR><CR>

etc.

Why am I looking for UNIX telnetrc file examples?

Every night, I try to learn something new. 
One of the first steps is to stand on others' shoulders; & start from there.
Tonight, I picked the power of the "telnetrc" file to explore. 

But, uh, er, um... the more I searched (e.g., www.dogpile.com ), the more 
I found that, while telnet has _tons_ of commands, _nobody_ seems to have 
done anything much with .telnetrc files.

The best I have is mine, which does _nothing_ useful -- just lotsa comments:
  /usr/ucb/mail -s "send telnetrc" [EMAIL PROTECTED] < /dev/null

Do you have a useful ~/.telnetrc example file?

Please send a good example to me so that others benefit; I'll add it to 
the file above.

Thanks,
John Gianni
(please courtesy cc replies to [EMAIL PROTECTED])

------------------------------

From: "Andrew Dadmun" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.ms-windows.nt.admin.networking
Subject: Re: RJ-45 without hub?
Date: Fri, 27 Aug 1999 09:02:17 -0400

Just make (significantly less than $7) a crossover cable.  Swap 1-2 and 3-6
on one end.

Regards,

Andrew Dadmun
Network Support Specialist
http://www.mpinteractive.com
http://www.e-builder.net


Richard Webber <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Hi all,
>
> A bit of a newbie question.
> Is it possible to network two machines through an RJ-45 connection without
> a hub?
>
> I've got a nice P3 (paid for by work :-) running Win NT 4.0 pack 4 with a
> 3Com 10/100Mbps PCI card, and I want to connect it to my old 486 running
> Debian Linux with a no-name 10Mbps card. The 486 has both BNC and RJ-45
> connections, but the P3 only has an RJ-45.
>
> Would a cross-over RJ-45 cable work, and if so ... which wires do I have
> to swap? :-)
>
> Email replies please.
>
> Richard



------------------------------

Reply-To: "Jeff" <[EMAIL PROTECTED]>
From: "Jeff" <[EMAIL PROTECTED]>
Subject: Re: pap-secrets simple question
Date: Sat, 28 Aug 1999 00:48:52 GMT

# Secrets for authentication using PAP
# client(username) server(Host you connect to) secret(password)
jack    jill    upthehill

Good luck

Clifford, I thought you liked doing this...

Clifford Kite <kite@NoSpam.%inetport.com> wrote in message
news:7q76qc$[EMAIL PROTECTED]...
> Terrence Vergauwen ([EMAIL PROTECTED]) wrote:
>
> : I have a PPP server setup on linux and would like to list my
user/password
> : entries in the pap-secrets file.
> : I have read trough several howto's and other docs on the net but cannot
make
> : out how to do this, they all talk about hostname's and passwords.
>
> : How do i types a line in the pap-secrets file the username and the
password
> : for a user dialing in to my server under a mgetty/AutoPPP/PAP
configuration
> : ???
>
> Try reading "man pppd".
>
> --
> Clifford Kite <kite@inet%port.com>                    Not a guru. (tm)
> /* The wealth of a nation is created by the productive labor of its
>  * citizens. */



------------------------------

From: "news.uq.net.au" <[EMAIL PROTECTED]>
Subject: ROOT CONSOLE LOGIN PROBLEMS
Date: Fri, 27 Aug 1999 23:02:07 +1000

I have a RH 5.2 server up and running at the moment. I went on vacation for
about 1 1/2 weeks, and I believe one of the sysadmins mistakingly did
something to the server. At this point in time, the root account cannot
login to the server from the console itself!

The root account is normally disabled from being able to login remotely, but
I have never not been able to login from the console. Could anyone provide
me with how I might rectify this problem?

Also, I would like to get some information on websites and things to look at
for beefing up the security on my system. I would like to be have as tight a
system as possible, with the ability to monitor everything. Any suggestions
of things I can do, software updates, etc. would be great. Thanx for all the
help.

Mark Leck
[EMAIL PROTECTED]

=====BEGIN PGP PUBLIC KEY BLOCK=====
Version: PGP for Personal Privacy 5.0

mQGiBDY6T8wRBADT0vEz5noMEDXuHMretLZj19jYM5QSDwV66w6HUclO9iwuv+F4
+NzMOe5byk3J5/5K8J3nHOEoFgnc8eTNFC8Kn01Xlh5XPGpkcgfJruI4QKe5JgmS
NpfUlJ4mnEVH/mik9GKgwLwiquEB9HUUgyrgElCIhS+ZbzkNaF2l4wwv5wCg//dc
ahINe1+MaL++e4A8ua2eyCkD/3quqVHaPzRlVf3fXkBDXYjaBLPdYfNHspXQZyGI
wKSXDtmLyuN98io3X6dAuaFW/9hNZLfhS2rn9BEOPUqB3esKDsbhDJSwZG2JLMOk
D2/Ywljv6KAQ5vp/FguAp7oRfz6h3kdkOyTD9tQRGvYIDHgNZ4xONlRJTURMkaZt
v23wA/4lo8Z6YvaCJRmgS02TKGyvRByTkGfd/XvuYt0epf6+8w9hPIWu+eA1G54Q
dHjzqKwSojH9Dc8fg4URqbBEpNjqiMVw/oi32/hm3F7a3RUz4/tem959DP7Y4RMZ
Xudlc9Eqv5h/KrN5wiei3CuRXmSkaH0gfyaPIvSXFCoIz9b1sLQcTWFyayBILiBM
ZWNrIDxtbGVja0BpYm0ubmV0PokASwQQEQIACwUCNjpPzAQLAwECAAoJEDmX+Coa
rF8Di7QAoPAKbgV/tTmezOnF5X7zeFVnkOpfAKCt01Tz5MRbZDHYd3n/svscseIF
8rkDDQQ2Ok/NEAwAzB13VyQ4SuLE8OiOE2eXTpITYfbb6yUOF/32mPfIfHmwch04
dfv2wXPEgxEmK0Ngw+Po1gr9oSgmC66prrNlD6IAUwGgfNaroxIe+g8qzh90hE/K
8xfzpEDp19J3tkItAjbBJstoXp18mAkKjX4t7eRdefXUkk+bGI78KqdLfDL2Qle3
CH8IF3KiutapQvMF6PlTETlPtvFuuUs4INoBp1ajFOmPQFXz0AfGy0OplK33TGSG
SfgMg71l6RfUodNQ+PVZX9x2Uk89PY3bzpnhV5JZzf24rnRPxfx2vIPFRzBhznzJ
Zv8V+bv9kV7HAarTW56NoKVyOtQa8L9GAFgr5fSI/VhOSdvNILSd5JEHNmszbDgN
RR0PfIizHHxbLY7288kjwEPwpVsYjY67VYy4XTjTNP18F1dDox0YbN4zISy1Kv88
4bEpQBgRjXyEpwpy1obEAxnIByl6ypUM2Zafq9AKUJsCRtMIPWakXUGfnHy9iUsi
GSa6q6Jew1XpTDJvAAICC/4p7eZZjJFmi8F/bq1M5IN9zj+IwUgQIypxDBWL6Rc3
0V+tRlhAkTySzDTGsVVVezfAVHQqH8kg0Qg2Mm5DjsNJb/wxfpU3pMq7xLrxEYSN
RFPh4MZ9CZHv+PUokzjW6Knv3AGlVUloDKiCexh0MhZ9RM0svATAS41OeLAbFX3n
ZiHvFrsIvOJG/2lX2hy8chHoCgb0LM2VaZ2IlP6pWu1lbHTodeN01NnqxFgC38GU
h89Fs8Z7V65Jd6OzVMkZCWPxtAQeKYcLKsBYYe5siBNU46FMs05Y/JAt3lTPUrww
hZYTxFejBEd76XphWpXosR1M3uup1a8OaP29FKXmdxaAcSxQ8XmI0jIxJmRnhxLr
sMlFPIo7utQhv6FJqJe3dvtoUdVzZYygG/jh73wnmehX5Xx3Z4EH1BR3Z3Ycaqe2
az1RXcm6uGWIWV1+0QzxLedVE/MyRpXQJdAZsh9oQzqrz2G32g+0tYfZ1DqmBBWC
U9zXHq1lRQ1uiJhH4R5l4beJAD8DBRg2Ok/NOZf4KhqsXwMRApAYAJ9rnbSAwdGQ
HiwY7wTsxJmj0ruCdwCeMjfYgP1Hih61NeU5fQxcckaJ26c=
=idVR
=====END PGP PUBLIC KEY BLOCK=====





------------------------------

From: Scott Post <[EMAIL PROTECTED]>
Crossposted-To: athome.users-unix
Subject: dual ethernet, no joy
Date: Sat, 28 Aug 1999 00:30:05 GMT

I've got a linux box with the 2.0.34 kernel.  Until recently I've had
only one e-net card - a NE2000 clone.  It's worked fine to connect 
to my wife's win95 box to do IP masquerading through my PPP
connection.  

I just got cable modem service and installed a 3c900 in addition to
the NE2000.  The 3c900 is now recognized on boot, but
not the NE2000.
Both drivers are built into the kernel. I'd previously had the
following line in lilo.conf:

append="ether=5,0x240,eth0"

and the card was recognized on boot.  Since now the 3c900 is 
recognized first and assigned to eth0 I want the NE2000 to be picked
up as eth1, so I put the following in lilo.conf and did 'lilo -C
/etc/lilo.conf':

append="ether=11,0xfc80,eth0 ether=5,0x240,eth1"

I thought this is all it would take.  What gives?

Here's the result of 'cat /proc/ioports' for people who, unlike me,
know how to interpret it:

0000-001f : dma1
0020-003f : pic1
0040-005f : timer
0060-006f : keyboard
0070-007f : rtc
0080-009f : dma page reg
00a0-00bf : pic2
00c0-00df : dma2
00f0-00ff : npu
0170-0177 : ide1
01f0-01f7 : ide0
02f8-02ff : serial(auto)
0376-0376 : ide1
0378-037f : lp
03c0-03df : vga+
03e8-03ef : serial(auto)
03f0-03f5 : floppy
03f6-03f6 : ide0
03f7-03f7 : floppy DIR
03f8-03ff : serial(auto)
fc80-fc9f : 3c900

--
Scott Post  [EMAIL PROTECTED]

------------------------------

From: "Steve Cowles" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup
Subject: Re: watching mail-server acting
Date: Sat, 28 Aug 1999 01:41:15 GMT

Your friend is probably using the "tail -f /var/log/maillog" command.

>From the man pages: man tail

-f, --follow
       Loop forever trying to read more characters at the end of the file,
       on the assumption that the file is  growing.   Ignored  if  reading
       from  a pipe.  If more than one file is given, tail prints a header
       whenever it gets output from a different file,  to  indicate  which
       file that output is from.

Steve Cowles
SWCowles at gte dot net

Philipp von dem Bussche-H�nnefeld <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Hi,
> I am using my Linux box as a mail-server running Suse Linux 6.1
> I would like to watch the mail-server acting.
> A friend of mine who is also running a mail-server said, he�s using a
> programm called something like tail or taile.
> Does anybody know more about this???
>
> thanks,
> Phil.
>
> ------------------  Posted via CNET Linux Help  ------------------
>                     http://www.searchlinux.com



------------------------------

From: Raymonds Doetjes <[EMAIL PROTECTED]>
Subject: Re: Hardware required for a firewall machine
Date: Fri, 27 Aug 1999 15:25:15 +0200

Easily.

Since your bandwith to the internet is far smaller then 100Mb/sec and you
only filter on those incomming packets.
Even when you could have a solid 100Mb/sec throughput a P166 would be
sufficient enough. Professional firewalls run on far smaller CPU's a 486 or
even 386 are used in some firewalls. So the extra load that linux will add
is minimal.

What I don not understand is, why your fileserver is seprated by the
forewall from your clients. That filserver should be on the same netw ass
your clients. And if you are afraid of client attacks then you should
disable all your other ports except the ports used by the fileserver
protocoll. But hey its your network
         internet
            |
          firewall
            |
          -----------------clients---------servers------

And if you perse need a firewall protetcting your servers I suggest this

        internet
             |
        [firewall]
              |
             -----------------clients ----------[firewall]---------servers

Raymond

yan seiner wrote:

> I'd like to set up a separate firewall machine.  My proposed setup is as
> follows:
>
>             internet
>                |
>            dial-up modem
>                |
>             firewall ------- file server
>                |
>           -----------
>             clients
>
> I am running 100 base T from the file server to clients.  What sort of
> horsepower do I need in the firewall?  I need lots of throughput -
> yesterday I was working on a 58 MB file.
>
> The machine I have available is a p5/166 with 32MB RAM.   It would have
> an intelligent serial card.  Can this hardware handle sustained
> 100mb/sec network loads?
>
> I am running RH 6.0, 2.2.11 kernel, ipchains.
>
> I'd appreciate any pointers to performance testing results.
>
> Thanks,
>
> Yan


------------------------------

From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: pap-secrets simple question
Date: 27 Aug 1999 20:27:24 -0500

Jeff ([EMAIL PROTECTED]) wrote:

: # Secrets for authentication using PAP
: # client(username) server(Host you connect to) secret(password)
: jack    jill    upthehill

: Good luck

: Clifford, I thought you liked doing this...

People need to learn that the man pages are useful.  There's a lot to
be said for an answer that points the right direction and forces you
to learn new things along the way.  If I had been feeling Socratic then
I might have asked "Is there another manner of document, closer at hand
than the web of Chaos, that might enlighten you, Grasshopper?"

Something that now does need clarifying is that there is no client and no
server in a PPP connection, PPP is a peer-to-peer protocol.  The "client"
of the secrets files always means the one that is being authenticated, the
authenticatee.  The "server" always means the one doing the authentication,
the authenticator.  It doesn't matter who initiates the connection.

--
Clifford Kite <kite@inet%port.com>                    Not a guru. (tm)
/* Editing with vi is a lot better than using a huge swiss army knife.
   Use +} to wrap paragraphs in vi. */

------------------------------

From: Raymonds Doetjes <[EMAIL PROTECTED]>
Subject: Re: Two Nics Required?
Date: Fri, 27 Aug 1999 15:27:37 +0200

You can also use a ppp interface yes.
You need atleast 2 interfaces wich is logical since you have 2 internetworks that
need seperating. And thos interfaces may be anything ippp, ppp, eth, tok etc etc

Cj wrote:

>   Are 2 NICs needed to build a firewall on a home net, or can one be used with
> a modem - eth0 and ppp0 ??


------------------------------

From: "Matthew O. Persico" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup,comp.os.linux.questions
Subject: Re: Slow connection to ISP
Date: Fri, 27 Aug 1999 21:54:33 -0400

"W.G. Unruh" wrote:
> 
> Ganesh <[EMAIL PROTECTED]> writes:
> 
> >I just finished installing RH6.0, aand have sucessfully setup PPP to
> >connect to
> >my ISP. However,  I find that the connection in general is slow -
> >retrieval of pages etc. seems slower than what I see on NT.
> 
> Quite possibly an irq problem-- ie the modem uses the different irq than
> linux thinks it does, so it uses polling instead.
> setserial
> tells linux which irq etc to use.

I just went through the same problem. It turns out that my problem was the
modem init string. NT's modem config has a number of check boxes that must
be being translated into modem init strings under the covers. I couldn't
find the strings anywhere, but I went back to my modem book and spent a
good half hour pouring over the AT commands.

My conclusion? After looking at the defaults, I decided to take them, with
ONE exception - negotiation.

Assuming that the AT commands are pretty much standard (I checked with
http://styx.phy.vanderbilt.edu/~fishbone/tech/extat.html), you too can take
this advise. Look in your modem book for the 
AT+MS= command. The stuff after the = is of the form:

<n>,<automode>,<min>,<max>

This is the list of options for n and what each option can be used for:
                      n=0 V.21, 300bps 
                      n=1 V.22, 1200bps 
                      n=2 V.22bis, 1200/2400 
                      n=3 V.23 bisynch 75/1200 
                      n=9 V.32, 4800/9600 
                      n=10 V.32bis, 4800/7200/9600/12000/ 
                      14400 
                      n=11 V.34, 2400/4800/7200/9600/ 
                      12000/14400/16800/ 
                      19200/24000/26400/ 
                      28800 
                      n=64 Bell 103, 300bps 
                      n=69 Bell 212, 1200bps 
                      n=74 V.FC, 14400/16800/ 
                      19200/24000/26400/ 
                      28800  

automode is either 0 (no negotiation) or 1 (negotiation)

min and max are the allowed speeds.

Now, my modem had another mode, n=56 for KLFEX 56. However, I use v.90
since I upgraded the firmware. There was no n for v.90.

So I took a guess and set the modem string to

AT &F M0 +MS=12,1,300,57600

BAM! I connected like a shot. I think even faster than on NT. These days a
modem's defaults are set that way 'cause that's what most of the industry
uses. That's what the &F does. M0 turns off the speaker. Since my modem did
not complain about the 12 (I tried 13 just for kicks and it was an illegal
value), I'm assuming that 12 = v.90 mode. They key is probably the 1 for
negotiation allowed between your modem and the remote. The min, max values
are for completeness. Asumming you have a tru v.90 modem, try it.
Otherwise, dig up your modem book and see what the default settings are.

-- 
Matthew O. Persico
    
You'll have to pry my Emacs from my cold dead oversized
   control-pressing left pinky finger. -- Randal L. Schwartz

------------------------------

From: "RichardMAN" <[EMAIL PROTECTED]>
Subject: Win98 <--> RH5.2
Date: Sat, 28 Aug 1999 03:10:06 +0100
Reply-To: "RichardMAN" <[EMAIL PROTECTED]>

Can anyone tell me how to connect this two machine together? I'm running
Wingate on Windows machine, and would like to use the service from RH5.2. I
have setup 192.168.0.1 for Win98, and 192.168.0.2 for RH, but can't even
ping each other, only itself. I couldn't find anywhere to enter the
workgroup in RH5.2, only domain.

Thanks

Regards
RichardMAN



------------------------------

From: Raymonds Doetjes <[EMAIL PROTECTED]>
Subject: Re: firewall and icq
Date: Fri, 27 Aug 1999 15:31:03 +0200

Does ICQ use upd?
Since you only enter udp in and outgoing for port 4000
and tcp a possible random port number  (wich start from 1023 by the way).
But you don't habe a possible udp port number added.

I don't know if ICQ uses udp or tcp but in bot cases try adding thos both
protocolls and also for receiving.

Raymond

Stefan Hetzl wrote:

> Hi all,
>
> I have setup a firewall on my system (using ipchains), but have problems
> getting Licq to work on the same machine. These are the settings
> concerning icq:
>
> ipchains -A output -p udp -s $myip -d icq.mirabilis.com 4000 -i eth0 -j
> ACCEPT
> ipchains -A input -p udp -s icq.mirabilis.com 4000 -d $myip -i eth0 -j
> ACCEPT
> ipchains -A input -p tcp -s $any 1024:65535 -d $myip 1024:65535 -i eth0
> -j ACCEPT
> ipchains -A output -p tcp -s $myip 1024:65535 -d $any 1024:65535 -i eth0
> -j ACCEPT
> The default policy on all chains is REJECT.
>
> Whenever I try to start icq (and go online) it tries to connect forever
> without succes (and without error message).
>
> Has anyone got icq to work with a firewall ?
>
> Thanks
>
> Stefan


------------------------------

From: "psyfybre" <[EMAIL PROTECTED]>
Crossposted-To: 
3dfx.glide.linux,alt.linux.slakware,comp.os.linux.hardawe,comp.os.linux.redhat,comp.os.linux.security,comp.os.linux.setup,comp.os.linux.X,uk.comp.os.linux
Subject: testing ... testing ... testing ...
Date: Sat, 28 Aug 1999 03:45:49 +0100

can you test this page please with linux browsers, so  i know if it looks OK
on the linux side. I cannot fire up my linux SuSE system at the current due
to problems beyond my control.

thanks

http://www.linuxwarez.dabsol.co.uk



------------------------------

From: "Jonathan Hutchins" <[EMAIL PROTECTED]>
Crossposted-To: 
alt.os.linux,comp.os.linux.advocacy,comp.os.linux.hardware,comp.os.linux.misc,comp.os.linux.setup,roadrunner.kc.linux
Subject: Re: Linux users group in Kansas City area - can't find one
Date: Sat, 28 Aug 1999 01:48:12 GMT

> Jeff Greer <[EMAIL PROTECTED]> wrote in message
> news:37ab5478.23235937@news-server...
> > Hi,
> >
> > Does anyone know of a linux users group in the Kansas City area?

Jeff Weiss <[EMAIL PROTECTED]> wrote in message
news:7of486$9ne$[EMAIL PROTECTED]...
> There is a Linux User Group in Kansas City.  It is a special interest
group
> of Heartland Users Group (HUG).

Riiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiight.

Just like there's a special interest group for NT?

Expect a handfull of confused people worried about Y2K and complaining about
Bill Gates conspiricy to force them to upgrade their 286's running DOS 2.0




------------------------------

From: root <[EMAIL PROTECTED]>
Subject: Re: ppp problems
Date: Fri, 27 Aug 1999 20:29:32 -0500

"W.G. Unruh" wrote:

> "Dominic Tynes" <[EMAIL PROTECTED]> writes:
>
> >I am unable to connect to a ppp dial-in server.
>
> You have not set up your pap/chp files properly, and are not using the
> user <username>
> option to pppd.
> Your isp starts by asking for some weird auth options (Anyone know what
> in the world they are?) and you properly reject them. It then asks for
> chap md5 and pap and you reject them as well. You should use chap
> (set up /etc/ppp/chap-secrets
> <username> * <secret> *
> where <secret> is you password on teh remote system.
> and put
> user <username>
> as a pppd option.
>
> >Aug 25 21:58:15 localhost pppd[690]: rcvd [LCP ConfReq id=0x1 <mru 1534>
> ><asyncmap 0xa0000> <auth 0xc027 01 00 00 03 00 00 00 0e> <magic 0xc5fa16c4>
>                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> What in the world is this???
>
> >Aug 25 21:58:15 localhost pppd[690]: rcvd [LCP ConfReq id=0x2 <mru 1534>
> ><asyncmap 0xa0000> <auth 0xc027 01 00 00 02> <magic 0xc5fa16c4> <accomp>]
>                           ^^^^^^^^^^^^^^^^^  Or this??
>
> >Aug 25 21:58:15 localhost pppd[690]: rcvd [LCP ConfReq id=0x4 <mru 1534>
> ><asyncmap 0xa0000> <auth chap MD5> <magic 0xc5fa16c4> <accomp>]
>                      ^^^^^^^^^^^^^
> Here is one you can actually use, and it is better than the pap it
> offers next
>
> >Aug 25 21:58:15 localhost pppd[690]: sent [LCP ConfRej id=0x4 <auth chap
> >MD5>]
> But you reject it. At his point you have not agreed on any
> authentication scheme, and the connection is dead ( although it takes a
> while to actually die).
>
> ># Secrets for authentication using PAP
> ># client server secret   IP addresses
> >fakeuser * fakepass *
>
> >and
>
> ># Secrets for authentication using CHAP
> ># client server secret   IP addresses
> >fakeuser * fakepass *
>
> >respectively, then ran:
>
> >/usr/sbin/pppd /dev/ttyS0 57600 debug user fakeuser connect
> >"/usr/sbin/chat -v -t 20 ''  ATDT1234567 CONNECT '' TIMEOUT 5 serid:--serid:
> >fakeuser assword? fakepass"
>
> NONONO. YOudo not want to use the Userid/Password procedure if you are
> using chap. Get rid of those.
> end it with
> CONNECT '\d\c'
> as you did before.

Thanks for the replies.

I am now connected via LINUX pppd.


------------------------------

From: [EMAIL PROTECTED] (John Doe)
Subject: "user@localhost unsafe .." says .forward. Why?
Reply-To: [EMAIL PROTECTED]
Date: 27 Aug 1999 22:10:06 -0500

I would like to set up procmail and put in the line
        "|exec /usr/bin/procmail"
in  ~/.forward file.  This is the exact line from
promail man page.  My mails are being bounced back 
to the sender saying user@localhost is unsafe for sending
to a program.  

I have read procmailex man pages as well as two faqs on 
the web but still no clue as to how to tell
paranoid .forward thing that everything is safe.

Any help would be appreciated.

Please cc to 
        [EMAIL PROTECTED]


------------------------------

From: [EMAIL PROTECTED] (John Doe)
Subject: Re: "user@localhost unsafe .." says .forward. Why?
Reply-To: [EMAIL PROTECTED]
Date: 27 Aug 1999 22:15:46 -0500

I have red hat 6.0 and download my mails via fetchmail.  
I use sendmail. tia.


On 27 Aug 1999 22:10:06 -0500, John Doe <[EMAIL PROTECTED]> wrote:
>I would like to set up procmail and put in the line
>       "|exec /usr/bin/procmail"
>in  ~/.forward file.  This is the exact line from
>promail man page.  My mails are being bounced back 
^^^^^^^
I mean procmail.


>to the sender saying user@localhost is unsafe for sending
>to a program.  
>
>I have read procmailex man pages as well as two faqs on 
>the web but still no clue as to how to tell
>paranoid .forward thing that everything is safe.
>
>Any help would be appreciated.
>
>Please cc to 
>       [EMAIL PROTECTED]
>

------------------------------

From: Raymonds Doetjes <[EMAIL PROTECTED]>
Subject: Re: ip masquerading great problem
Date: Fri, 27 Aug 1999 15:32:54 +0200

This looks lie a connection time out from your Linux masquerading box.
How does this masquerading box go onto the internet, through a router? or by
dial-on-deiamnd (diald)

Raymond

Patrick wrote:

> hello,
> some computers in the LAN of our company use private IP
> and their default gateway is set to a IP-masquerading linux machine
>
> when the computer which uses private IP download a large file, say an ISO
> image
> the connection is always cut (while machine use real IP does not have this
> problem)
>
> moreover, when the computer telnet to outside and remain idle for about 5
> minutes
> the telnet connection is also cut, i ensure that this is not due to
> autologout function built in Unix
> (this problem also does not happen on the machines which use real IP)
>
> --


------------------------------

From: "Jeff" <[EMAIL PROTECTED]>
Subject: Mail is tweaked
Date: Fri, 27 Aug 1999 22:15:41 -0400

I need a little help here.
When I try to send mail to my own account on my box it comes back

user : [EMAIL PROTECTED] is unknown
sending mail to anyother account on the box works fine.
I have checked the /etc/aliases file nothing in there should be interfering.
I have tried killing and recreating the user account. still nothing.

I can;t figure it out.
Any help?

I am using Redhat 6.0 with sendmail version 8

please respond to my email [EMAIL PROTECTED] as this newsgroup become way to
hard to keep up with sometimes

Thanx
Jeff



------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to