Linux-Networking Digest #424, Volume #12         Tue, 31 Aug 99 10:14:17 EDT

Contents:
  Re: VMware - wow! (Kingsley G. Morse Jr.)
  Re: squid: 'run out of swap file numbers' -- fixed (Jens Grivolla)
  Re: MySQL, chroot and shared libs (Nigel Metheringham)
  Re: Telnet stopped connecting. (Memnoch)
  Re: Vmware and Linux (Peter)
  Re: Linux as a Win95 Internet server? (ivan)
  Re: Unable to change password ("Franz Steinhauser")
  Re: Need help:  POP/SMTP not working (RH5.2) ("Cowles, Steve")
  Re: I've got a PCI Winmodem... (Clemens Nijhof)
  HIS ("Pawel Skonecki p.304")
  Re: diald problems (Mike Jagdis)
  Problems with setting up a EZ2000(NE2000 compatiable ) network card on Linux ("Tony")
  linux and Novell
  Connecting Troubles!!!! (mike_the_great)
  eth0: tulip.o: init_module: device or resource busy (Robert Inskeep)
  What domain do I use? (Robert Inskeep)
  Re: kppp OK but can't ping (Randy Frosh)
  Re: Is Linux Better than FreeBSD as Router ? ("Kalle Wisch")
  Remote Admin of a Linux Box (gendro)

----------------------------------------------------------------------------

From: [EMAIL PROTECTED] (Kingsley G. Morse Jr.)
Crossposted-To: comp.os.linux.misc,comp.os.linux.setup
Subject: Re: VMware - wow!
Date: 30 Aug 1999 23:44:36 -0700

[EMAIL PROTECTED] (Doug DeJulio) writes:

[...]
>The part of this that's a shame is that it'd only take a few tweaks to
>IA32 to make virtualization really possible.  I believe a non-Intel
>vendor (eg. AMD) could do those tweaks in a way that doesn't break
>compatability with any code that isn't aware of it, and build a truely
>virtualizable x86 box.  But nobody appears to have done so.

Transmeta and Amiga?
-- 
    If email to me bounces, make sure you deleted the D from the end of my
                     username in my email address. 

------------------------------

From: [EMAIL PROTECTED] (Jens Grivolla)
Subject: Re: squid: 'run out of swap file numbers' -- fixed
Date: Tue, 31 Aug 1999 09:57:04 GMT

On Tue, 31 Aug 1999 06:45:01 GMT, I wrote:

>Hi,
>
>I'm getting messages such as this one in my squid.out:
>
>| Tue Aug 31 08:11:13 CEST 1999: Running: squid -D -s
>| FATAL: You've run out of swap file numbers.
>| /usr/lib/squid/RunCache: line 66:  1182 Aborted            squid "$@"
> [..]

adding
        store_avg_object_size 7 KB

to my squid.conf and doing squid -k reconfigure seems to have fixed it
for now.

I am still somewhat amazed that squid would completely lock up, just
because it didn't expect so many small files.  I had the harddisk
space set to the default (100M, yes, I am going to change that as soon
as I get a bigger hd for the machine) with about 90M used for the
cache.

The expected behavior would have been of squid to just kick the old
stuff to make room for new data.  It appears to me as a bug that it
just won't work anymore.

Jens

------------------------------

From: [EMAIL PROTECTED] (Nigel Metheringham)
Crossposted-To: 
comp.os.linux.development.apps,comp.os.linux.development.system,comp.os.linux.security
Subject: Re: MySQL, chroot and shared libs
Date: 31 Aug 1999 09:41:13 GMT

On Mon, 30 Aug 1999 20:16:20 -0700, Sean O'Dell <[EMAIL PROTECTED]> wrote:
>Well, your suggestion actually lead me to the actual problem I think.  I
>tried using the domain name for the mysql server and got pretty much the
>same results.  However, when I tried the plain old IP address, it worked
>just fine.  So, it's got something to do with my DNS lookup activities
>somewhere.  Gonna track that down...thanks for the info!

You appear to be making your chroot environment more and more complex,
which makes it harder and harder to fully secure.

Why not:-

  1. Static link your program.  That definitely rids you of
     needing a pile of internal library images.  It means 
     you have to recompile for even minor updates in the
     supporting libraries, but thats a similar degree of
     work to upgrading the libraries within your chroot
     jail.

  2. Don't attempt to use a named pipe connection - too
     much like hard work and a potential for desecuring
     your server

  3. Make the program do its DB connections to 127.0.0.1
     [ie loopback] - no serious performance hits since it
     doesn't hit the real network, and that IP is always 
     your local machine.  No DNS libraries needed at all
     [although they are probably linked in by step (1).]
     nor additional DNS config - ie /etc/resolv.conf &
     /etc/nsswitch.conf

        Nigel.

-- 
[ Nigel Metheringham -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- [EMAIL PROTECTED] ]
[ Playing with technology razor blades - close to the bleeding edge  ]

------------------------------

From: [EMAIL PROTECTED] (Memnoch)
Subject: Re: Telnet stopped connecting.
Date: Tue, 31 Aug 1999 09:47:46 GMT
Reply-To: [EMAIL PROTECTED]

Hmm... I seem to have the same problem...

No solution as of yet, tho...
Anyone?


Memmie

Email: [EMAIL PROTECTED]
URL: http://www.spork.tzo.org/~memnoch/

Badgers? We don't need no Steenkin' Badgers!
_-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-_
                 Memmy signing off... ;)
      "Power to the Sporks, Stick it to the Man!"
_-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-__-/\-_

------------------------------

From: [EMAIL PROTECTED] (Peter)
Subject: Re: Vmware and Linux
Date: Tue, 31 Aug 1999 10:00:20 GMT

On Mon, 30 Aug 1999 21:12:31 -0400, Mircea <[EMAIL PROTECTED]> wrote:

Thanks for the pointer, I'll check that out before giving up on the
idea.

>> 
>> If there is anyone using vmware could they answer a few of my
>> questions, I have a dual boot win98/Linux machine and would like to
>> know if it is possible to use the existing win98 partition in a vm or
>> if I have to install another copy of Windows as the instructions seem
>> to imply.
>
>You can do both, although the first one is a little tricky.
>

>> 
>> I have downloaded a 30 day trial of the program but don't see any
>> obvious way of doing what I want from the help files.
>
>You may want to lurk around the newsgroups in news.vmware.com - it's
>vmware's public news server, and some of the guys that wrote it are
>always around, you can ask them.
>
>MST


------------------------------

From: [EMAIL PROTECTED] (ivan)
Subject: Re: Linux as a Win95 Internet server?
Date: Tue, 31 Aug 1999 10:15:55 GMT

In article <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> wrote:
>Hi,
>   Is it possible to share an internet connexion between a Linux machine 
>(which has the Internet acces) and a Win95 machine? Using the Linux machine 
>as a Firewall? 

sounds like you want to check out ip-masquerading

>
>  What if my Linux machine is connected to a printer and I want to use that 
>printer with Microsoft Word 97 Via the network from the Win95 machine. Is 
>it possible?

and i think samba will help you with this one

>
>Please note that the network is already set up and it works fine under 
>Win95.
>
>Thanks...

ur welcome

ivan

>
>------------------  Posted via CNET Linux Help  ------------------
>                    http://www.searchlinux.com

------------------------------

From: "Franz Steinhauser" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup,linux.redhat.misc
Subject: Re: Unable to change password
Date: Tue, 31 Aug 1999 10:36:47 +0200

Thanx I don't know how it disapeared but it did!!

Adding the SUID bit solved my problem

Franz
BM Lam <[EMAIL PROTECTED]> heeft geschreven in bericht
<[EMAIL PROTECTED]>...
>It is just a guess: could it be that the program file
>
>/usr/bin/passwd
>
>is missing the SUID bit?
>
>Franz Steinhauser schrieb:
>>
>> Hi,
>>
>> Last week we upgraded our 5.2 system with Kernel 2.0.36 to 2.2.11
>>
>> Everything went OK (only a few solvable problems).
>>
>> Today I created a new user. He should normal first change his password to
>>
>> keep access to the system.
>>
>> But he is not allowed.
>>
>> So I tried it with my own account and got this error message:
>>
>> [f.steinhauser@popeye linux-2.2.11]$ passwd
>>
>> Changing password for f.steinhauser
>>
>> (current) UNIX password:
>>
>> New UNIX password:
>>
>> Retype new UNIX password:
>>
>> passwd: Permission denied
>>
>> In the syslog I get this message:
>>
>> Aug 30 14:33:46 popeye PAM_pwdb[24584]: cannot update default database
for
>>
>> user f.steinhauser
>>
>> Can you help me with this. As root I can change the password for a user
but
>>
>> this is not what I want (of course)
>>
>> Kind regards,
>>
>> Franz



------------------------------

From: "Cowles, Steve" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup
Subject: Re: Need help:  POP/SMTP not working (RH5.2)
Date: Tue, 31 Aug 1999 05:45:05 -0500

Gary,

If I understand your post, do the following:

1) I'm going from memory for RH5.2... edit /etc/mail/relay_allow, or
ip_allow, or name_allow and add the network address for your internal LAN.
Sendmail uses this file to determine who is allowed to relay off of this
server. By default, RH configures sendmail to NOT allow relaying except from
the localhost, which is a good thing. You don't want the spammers of the
world to find your IP address and use your server to spew 10000+ emails off
of your server.

2) If you want to relay email to your ISP's email server to perform the
final delivery of all email, edit the following line in /etc/sendmail.cf.
You don't have to though, sendmail can deliver all email for you. But as the
other poster to this thread mentioned, some sites may reject email from your
server because of a MX or in-addr.arpa mismatch. So far, I have not had any
rejected and I have been using Linux/sendmail for a couple of years now.

# "Smart" relay host (may be null)
DS

to...

# "Smart" relay host (may be null)
DSmail.isp.com

================================
Steve Cowles
SWCowles at gte dot net


Gary Helbig <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Hi, and TIA.
>
> I'm having trouble setting up my mail server.
>
> I'm using RedHat 5.2 as a firewall; The inside net is 192.168.1.0/24,
> and the firewall has a static IP to my ISP.
>
> I can get mail on the firewall; running elm in a shell works fine.
>
> If I try to send, most of it gets rejected with a "we do not relay"
> message.  How do I tell it that the inside net is OK?
>
> The real problem is that I can't get a pop connection on the inside net.
>
> If I telnet to port 110, the firewall disconnects me.  Regular telnet
> works just fine.
>
> If I try to use a pop3 client, I get a very uninformative error message,
> like "contact your system administrator".
>
> It's an 'out-of-the-box' installation, I've done very few mods other
> than add a firewalling script and a local DNS server.
>
> I can send mail _through_ the firewall to my ISP's mail server, but the
> desired goal is to have the firewall act as the local server, and
> forward mail to the ISP's server.
>
> What am I doing wrong?
>
> Gary



------------------------------

From: Clemens Nijhof <[EMAIL PROTECTED]>
Crossposted-To: 
tw.bbs.comp.linux,alt.linux,comp.os.linux,comp.os.linux.misc,comp.os.linux.questions,info.ncsa-telnet,hk.comp.os.linux,hk.comp.os.unix,hk.comp.pc,alt.os.linux,comp.protocols.ppp,comp.modems,linuxworld.forums.articles.1999-08-linmodem
Subject: Re: I've got a PCI Winmodem...
Date: Tue, 31 Aug 1999 06:42:43 -0400
Reply-To: [EMAIL PROTECTED]

Get yourself a nice high speed external modem, you will love it for
anything you install on your PC

-Clem


------------------------------

From: "Pawel Skonecki p.304" <[EMAIL PROTECTED]>
Subject: HIS
Date: Tue, 31 Aug 1999 12:53:55 +0200

I'm looking for information about HIS and Linux. (www or ps).

-- 
Pawel Skonecki
*******************************************************************************
Polecam strony o Zydach lubelskich
http://platon.man.lublin.pl/~stona/JEWS/
*******************************************************************************

------------------------------

From: [EMAIL PROTECTED] (Mike Jagdis)
Crossposted-To: alt.linux
Subject: Re: diald problems
Date: 31 Aug 1999 11:07:27 GMT
Reply-To: [EMAIL PROTECTED]

In article <mDAx3.1341$C7.33237@wards>, Howard Soper wrote:
>Thanks for these wonderful words of wisdom - they REALLY helped - Pillock !
>[...]
>
>Mike Jagdis <[EMAIL PROTECTED]> wrote in message
>news:[EMAIL PROTECTED]...
>> In article <9R_v3.645$[EMAIL PROTECTED]>, thomas wrote:
>> >i wonder if somebody out there can explain how to get diald to open my
>> >connection to my ISP only when i want to browse the Internet or get my
>mail.
>> >As it is now, it tries to connect every 10 sec, and when connected it
>stays
>> >on for ever!
>>
>> You need to hammer a six inch nail into your forehead and write
>> a driver to interface with your biological neural network.
>>
>>   If diald is continuously connecting it is because something is
>> trying to send data across the link and diald hasn't been told
>> to ignore it. Fix the source of the data or tell diald to do
>> what you want.

Sigh... The *point* is that diald does not magically know when
you "want to browse the Internet". It only knows about packets
that are routed over its link. If it sees packets that match
its filter rules it brings the link up. If it continuously
brings the link up it is because it is seeing such packets.
There are many ways of finding out what those packets are.
Two of the more obvious and useful are to use diald's excellent
debug option or to use tcpdump. The least useful is to have
some third party guess what is happening. Once you know what
the packets are and where they come from you can worry about
how to fix it.

                                Mike

-- 
    A train stops at a train station, a bus stops at a bus station.
    On my desk I have a work station...
.----------------------------------------------------------------------.
|  Mike Jagdis                  |  Internet:  mailto:[EMAIL PROTECTED]   |
|  Roan Technology Ltd.         |                                      |
|  2 Markham Mews, Broad Street |  Telephone:  +44 118 989 0403        |
|  Wokingham ENGLAND            |  Fax:        +44 118 989 1195        |
`----------------------------------------------------------------------'

------------------------------

From: "Tony" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.hardware,comp.os.linux.setup
Subject: Problems with setting up a EZ2000(NE2000 compatiable ) network card on Linux
Date: Tue, 31 Aug 1999 21:48:13 +1000

Hi

I have just got a EZ2000(NE2000 compatible) and have put it on my linux box.
When linux boots up it does not detect it.  Can you please tell me how to
set it up.

Cheers

Tony



------------------------------

From: <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.misc,comp.os.linux.setup
Subject: linux and Novell
Date: Tue, 31 Aug 1999 11:31:02 GMT

I am useing SuSe linux ver. 6.1 trying to configurate the network using 
Yast bat the network base configuration is inaccessible what shuld I do to 
solve the problem

==================  Posted via CNET Linux Help  ==================
                    http://www.searchlinux.com

------------------------------

From: mike_the_great <[EMAIL PROTECTED]>
Subject: Connecting Troubles!!!!
Date: Tue, 31 Aug 1999 04:32:09 -0700

Hi!!!
I've got a problem with my SOCKET-Connection....
I wrote a Server and a Client-Part...
Everything OK via LAN!

WAN:
I started the Server on a Host behind a Router & Firewall, 
and the Cient behind a Proxy & FireWall...works fine...
Tried it with 2 Dial-ups...works fine...
Tired the same with the Server at Dial-up and 
Client behind a Proxy & FireWall and I get NO CONNECETION...
I can ping the Host, but not connect....

I've no Idea where I should start to search the Problem....
I hope someone can help me...
Previous Thanx Mike....

* Sent from RemarQ http://www.remarq.com The Internet's Discussion Network *
The fastest and easiest way to search and participate in Usenet - Free!


------------------------------

From: Robert Inskeep <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: eth0: tulip.o: init_module: device or resource busy
Date: Tue, 31 Aug 1999 11:49:10 GMT

I try 'modprobe tulip.o' and I receive the message
'init_module: device or resource busy'.


Additionally - when booting...in 'messages'
Aug 31 06:15:39 localhost insmod: /lib/modules/2.2.5-15/net/tulip.o:
init_module: Device or resource busy 
Aug 31 06:15:39 localhost ifup: Delaying eth0 initialization. 
Aug 31 06:15:39 localhost network: Bringing up interface eth0 failed 

What does this mean?  Where do I go from here?

Robert Inskeep

------------------------------

From: Robert Inskeep <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Subject: What domain do I use?
Date: Tue, 31 Aug 1999 11:52:42 GMT

people.  I have only a small network.  One win98, One NT and trying One
Linux. I had not set the system up with a domain.  I set it up with
workgroups.  What do I use for the domain in the adapter setup?
-- 
Robert Inskeep
[EMAIL PROTECTED]

------------------------------

From: Randy Frosh <[EMAIL PROTECTED]>
Subject: Re: kppp OK but can't ping
Date: Tue, 31 Aug 1999 07:10:04 -0600



Robert_Glover wrote:

> Can you ping your gateway (204.144.246.48) ?

No I can't ping the gateway either.  Only localhost.




------------------------------

From: "Kalle Wisch" <[EMAIL PROTECTED]>
Subject: Re: Is Linux Better than FreeBSD as Router ?
Date: Tue, 31 Aug 1999 14:29:12 +0200

WHAT ???

A Cisco router is ok (we have one too), but paying over 1k$ is for s.th.
like a router is far too much !!!
We have a firewall (it is routing too of course) with RH 6.0 on a 486DX2-66
Box (32MB), which is oversized.
It is working great !!!
If you have old boxes go and get Linux...
FreeBSD is same good, but you get better infos on Linux.

Greets

Kalle


Scott Johnson <[EMAIL PROTECTED]> schrieb in im Newsbeitrag:
lnLy3.367$[EMAIL PROTECTED]
> Linux has better support for setting it up (aka lots of people to give you
> advice).. from a difference standpoint, there isn't much.
>
> Actually though... routers are getting pretty cheap.. unless you have a
ton
> of PC's sitting around, it's probably cheaper to pick up a Cisco 7000 or a
> 4700M from Ebay for about $2000 to $3000 with 6 ethernet ports on it.. It
> would definitely work / perform better in a business environment.
>
> Scott
>
> Pak,Wooguil wrote in message ...
> >Our Team plans to make routers with Linux or FreeBSD.
> >So I should select OS among Linux and FreeBSD.
> >But I don't know which is better.
> >Is Linux Better than FreeBSD as Router ?
> >
> >thanks advance.
> >
>
>



------------------------------

From: gendro <[EMAIL PROTECTED]>
Subject: Remote Admin of a Linux Box
Date: Tue, 31 Aug 1999 12:59:17 GMT

Upfront info: Very Novice in linux networking...
I have a Linux RedHat 6.0 running at home with apache HTTP server and
ftp server.

I want information about remote adminstration of my machine from
anywhere on the internet.
The objective is to be able to do most sysdmin fonctions remotely
using another machine browser's (connected to the 'Net of course) or
else.

I remember having found (on the net somewhere...) some information about
some cgi-bin/perl type of application which was doing these type of
fonctions.

If someone could help me in the research, i'd appreciate.

                   Ess Gendreau
                   Canada


Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to