Linux-Networking Digest #434, Volume #12 Wed, 1 Sep 99 03:13:30 EDT
Contents:
Re: Home network and cable modem (Seth)
Re: Linux as router. (Tom Eastep)
Re: Need help: POP/SMTP not working (RH5.2) (Gary Helbig)
Can't install 3c509 on RH5.2 (Andrew J Perrin)
Re: Linux as router. (R. Christopher Harshman)
booting w/o a keyboard... (Damon Brent Verner)
Re: NFS Daemon Failed to load: nfssvc not Implemented ([EMAIL PROTECTED])
disable NNTP ([EMAIL PROTECTED])
Re: GUI for ppp? (Mohd H Misnan)
Setting up Masquerading under RH6.0 (Stephen Torri)
Re: what is the max number of network interfaces (haze)
Re: Networking ("William B. Cattell")
Re: looking for a webhosting administration software for linux ("Stephan Scheufen")
Problems with ISDN and Linux ("Stephan Scheufen")
----------------------------------------------------------------------------
From: Seth <[EMAIL PROTECTED]>
Crossposted-To:
alt.linux,alt.solaris.x86,athome.users-general,athome.users-unix,athome.users-win95,cableinet.cable_modems,comp.os.ms-windows.networking
Subject: Re: Home network and cable modem
Date: Tue, 31 Aug 1999 20:14:09 -0700
Matt Blair wrote:
> sorry .. made a typo .. you need to edit the file nsswitch.conf to read:
>
> hosts: files dns
>
> Matt
>
> Matt Blair wrote in message ...
> >You need to add the word "nameserver" infront of the listing for your DNS
> >Servere in the /etc/resolv.conf for the DNS lookup to work properly. In
> the
> >etc/hosts file, you need to change the line that has hosts to
> >hosts: files dns
> >You also need to add the file defaultrouter to the /etc/ directory and just
> >put in the gateway's IP address.
> >to check on the fly if you can reach your gateway, type in the following:
> >
> ># route add default my.gateway.ip.address
> >
> >This will do a 1 time gateway addition so that you can test out the
> setting.
> >If the route add default ... line does not work, then probably either your
> >subnet mask is improperly set up or your NIC is not setup / working
> >properly.
> >
> >
> >Matt Blair
> >[EMAIL PROTECTED]
> >
> >s wrote in message <[EMAIL PROTECTED]>...
> >>i dont know if u need a cross over cable between the hub and the up link
> >>but i could be wrong try using a regulur calbe and make sure none of the
> >>box have the same ip
> >>
> >>[EMAIL PROTECTED]
> >>and if u can pleas help me set up my at home i cant ping the gate way or
> >>my DNS i have @home cable serves
> >>
> >>hi i have @home and cant ping my gate way 24.7.63.1 or my DNS
> >>24.0.200.33 or 24.0.200.34
> >>
> >>netmask 24.0.200.33 or 24.0.200.34
> >>my ip 24.7.63.1 I can ping my own ip but thats all
> >>network card is up and running fine but ndc400 nic card retek chipset
> >>RTL8029(AS)
> >>
> >>resolv.conf
> >>domain stana1.occa.home.com
> >>24.0.200.33
> >>24.0.200.34
> >>
> >>
> >>"my @home install data sheet"
> >>
> >>DHCP 24.1.8.70
> >>dns 24.0.200.33 and 24.0.200.34
> >>netmask 255.255.255.128
> >>subdomian stana1.occa.home.com
> >>broadcast "none"
> >>ip 24.7.63.9
> >>login schairez
> >>dns name or computer name = CC1003148-A
> >>mail server = mail
> >>directory server = directory
> >>news server =news
> >>web Proxy server name http://proxy:8080
> >>
> >>help my pleas thanks a lot
> >>
> >>
> >>
> >>
> >>hac wrote:
> >>>
> >>> Steven D. Nakhla wrote:
> >>> >
> >>> > I recently signed up for cable modem service. Now, we have 2
> >computers, so
> >>> > I ordered an extra IP address for the other, and attempted to setup a
> >>> > network so the other computer could have access. The other computer
> >uses
> >>> > only Win98 and my computer uses Win98, Linux, and Solaris.
> >>> >
> >>> > I bought the Intel InBusiness 5-Port 10 Mbps hub for our network. I
> >was
> >>> > told to plug the cable modem into the uplink port on the hub.
> However,
> >the
> >>> > hub doesn't have an uplink port. It has only 5 standard ethernet
> >ports.
> >>> > So, using a crossover cable, I plugged the cable modem into one of the
> >>> > ports, and the other 2 computers into the next 2 ports. I am able to
> >access
> >>> > the internet through either computer. The problem is, I can't use
> both
> >at
> >>> > the same time. Is this common? Whenever I try and access the
> internet
> >when
> >>> > the other computer is on, I get network errors. How can I set it up
> so
> >that
> >>> > both computers can access the internet at the same time?
> >>> >
> >>> > Could it be a problem with how I have the hub set up? Has anyone had
> >>> > experience with this hub? I could REALLY use any help that you all
> >could
> >>> > give me in setting this up. Thanks!
> >>> >
> >>> There have been many reports of the MSO's failing to configure the
> >>> modems to use two IP's at the same time. Your trouble sounds at lot
> >>> like the other reports. Call and have them reconfigure the modem.
> >>>
> >>> --
> >>> Howard Christeller Irvine, CA [EMAIL PROTECTED]
> >
> >
HI,
I think your problem is on the client side. The subnet mask should probably be
255.255.255.0
yours ended in 128. If your server is not setting the environment
(read:network) for less nodes you should default to .0 (subnetmask)
Hope I was of help,
Seth
------------------------------
From: Tom Eastep <[EMAIL PROTECTED]>
Subject: Re: Linux as router.
Date: Wed, 01 Sep 1999 02:42:57 +0000
"R. Christopher Harshman" wrote:
>
> Yes.
>
> I think it's a routing problem. The network looks sort of like
> this:
>
> *** internet <---> sprawl [192.168.0.1] <---+---> 192.168.0.0 network
> |
> |
> [eth1:192.168.0.150] <--+
> jump-gate [eth0:192.168.3.1] <--+
> |
> |
> +---> 192.168.3.0 network
>
> Now, if I put a static route into sprawl pointing at, say, my
> machine [192.168.3.100] everything works as it should:
>
> sprawl:~# route add 192.168.3.100 gw 192.168.0.150
>
> But hand-coding routes to every potential host is obviously
> less than ideal. However, when I try to simply add a net
> route, I don't seem to be able to:
>
> sprawl:~# route add -net 192.168.3.0 gw 192.168.0.150
> SIOCADDRT: Invalid argument
>
> Eh?
Er - I would think that you'd need to specify a netmask for a net route
(e.g., route add -net 192.168.3.0 -netmask 255.255.255.0 gw
192.168.0.150).
-Tom
--
Tom Eastep \ Opinions expressed here
[EMAIL PROTECTED] \ are my own and not
Shoreline, Washington USA \ those of my employer
Work: [EMAIL PROTECTED] \________________________
------------------------------
From: Gary Helbig <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup
Subject: Re: Need help: POP/SMTP not working (RH5.2)
Date: Tue, 31 Aug 1999 22:27:27 -0700
Hi,
Loading IMAP fixed the POP3 side. (Thanks, Stuart)
I am still dead sending mail.
More details on my configuration: I'm running ipfw on a RH5.2 box to
connect my inside net to the outside world. The goal is that every
computer in the inside (192.168.1.0/24) gets EVERY service from the
firewall box. This box has two cards, one is 192.168.1.254, and the
other has a static IP to my ISP. I'm running local DNS services also
(bind 8.1), one server for the inside, one on the wall, and one that
forwards/caches off my ISP's server. (OK, I'm not running an NNTP
server; can't afford the bandwidth)
The mail get rejected when the client (Netscape on an internal box)
tries to send it to 192.168.1.254. The dreaded "We do not relay"
message. I know it's important to filter relays; some guy out there
constantly tries to bounce mail off of me. I can see messages in the
firewall log saying that I'm denying his connection.
There are a couple of files in /etc/mail; ip_allow, name_allow, and
relay_allow. I have no idea what the structure of these files should
be, they were all empty at install.
So.... How do I get my local server to accept messages, and ONLY ones
from me?
If I'm in a shell on the wall, I can send mail, so I think the sendmail
part is working.
Gary.
Scott Johnson wrote:
>
> Go into your /etc/inetd.conf file and enable POP3 support to fix the no
> answer problem..
>
> as for the Do not relay message.. that's from your ISP.. looks like you are
> trying to bounce an Email off their SMTP server.. Most ISP's (including us)
> will shut that down in a heartbeat.. LOL.
>
> Seriously.. make sure that Sendmail is configured and your DNS resolution is
> setup right.. Sendmail will burst the email out to the Internet without
> needing to go through a relay site.. Some sites will reject connections from
> you unless you have an MX entry for your domain in a reverse domain lookup
> query, but that's really kind of uncommon and there isn't a way around it
> unless you have your own static IPs, dedicated link, and 2 domain servers to
> host your domain. If you happen to have your own domain already though,
> odds are your ISP would make an MX entry in the DNS tables for you.
>
> SJ
>
> Gary Helbig wrote in message <[EMAIL PROTECTED]>...
> >Hi, and TIA.
> >
> >I'm having trouble setting up my mail server.
> >
> >I'm using RedHat 5.2 as a firewall; The inside net is 192.168.1.0/24,
> >and the firewall has a static IP to my ISP.
> >
> >I can get mail on the firewall; running elm in a shell works fine.
> >
> >If I try to send, most of it gets rejected with a "we do not relay"
> >message. How do I tell it that the inside net is OK?
> >
> >The real problem is that I can't get a pop connection on the inside net.
> >
> >If I telnet to port 110, the firewall disconnects me. Regular telnet
> >works just fine.
> >
> >If I try to use a pop3 client, I get a very uninformative error message,
> >like "contact your system administrator".
> >
> >It's an 'out-of-the-box' installation, I've done very few mods other
> >than add a firewalling script and a local DNS server.
> >
> >I can send mail _through_ the firewall to my ISP's mail server, but the
> >desired goal is to have the firewall act as the local server, and
> >forward mail to the ISP's server.
> >
> >What am I doing wrong?
> >
> >Gary
------------------------------
From: Andrew J Perrin <[EMAIL PROTECTED]>
Subject: Can't install 3c509 on RH5.2
Date: Tue, 31 Aug 1999 21:19:18 -0700
Greetings.
I'm installing RH5.2 at home, and for some reason it's not recognizing
my 3c509 network card. Oddly enough, though, it *used* the card during
setup to do the install via FTP.
Here's what I know:
- Card is installed correctly, no hardware conflicts, and its LED lights
up.
- upon /etc/rc.d/init.d/network start, returns "Delaying start eth0".
- ifconfig eth0 returns "eth0: unknown interface".
- insmod 3c509.o returns several (ca. 10) unresolvable symbol errors.
Any advice?
Thanks-
Andy Perrin
--
=============================================================
Andrew Perrin - NT/Unix/Access Consulting -
[EMAIL PROTECTED]
http://www.geocities.com/SiliconValley/Grid/7544/
=============================================================
------------------------------
From: R. Christopher Harshman <[EMAIL PROTECTED]>
Subject: Re: Linux as router.
Date: Wed, 01 Sep 1999 05:15:58 GMT
I'm doing a dance for joy at everything now working,
whilst smacking myself in the forehead for being so
stupid. Thank you, thank you, thank you.
- Chris
In article <[EMAIL PROTECTED]>,
Tom Eastep <[EMAIL PROTECTED]> wrote:
> Er - I would think that you'd need to specify a netmask for a net
route
> (e.g., route add -net 192.168.3.0 -netmask 255.255.255.0 gw
> 192.168.0.150).
>
--
R. Christopher Harshman http://ebhon.jnst.uor.edu/~harshman
Going for a B.S. : "Information Systems and Media Production" (JNST-UOR)
Celeron 300a | i440BX | Mystique 220 + RRStudio | SB Live! | Win98
PIII-450 | i440BX-2 | Fusion AGP 3Dfx Banshee | Yamaha PCI | Linux / NT
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: Damon Brent Verner <[EMAIL PROTECTED]>
Subject: booting w/o a keyboard...
Date: Wed, 01 Sep 1999 01:41:55 -0400
ok, i've dug around the web for about four hours now, so here i am...
i have a compaq presario 4112 that i am using for a firewall. i'd like
to be able to boot it w/o a keyboard. the bios does not have the nice
'Halt on errors' option like modern bios' do. does anyone in the NG
know how to fool the box into thinking that it has a keyboard plugged
in? surely there is a way to 'short' the ps/2 connector (i've tried
w/o success, though).
thanks.
brent
------------------------------
From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.setup
Subject: Re: NFS Daemon Failed to load: nfssvc not Implemented
Date: Wed, 01 Sep 1999 05:31:32 GMT
root wrote:
>
> When upgrading my RedHat 6.0 to kernels 2.2.10 and 2.2.12, the
> NFS Daemon does not load properly.
>
> At boot, I get FAILED, and when trying to run /usr/sbin/rpc.nfsd
> manually, I get;
> nfssvc: Function not implemented
>
Hi,
First, don't use root...
I had the same problem in the same environment when I tried to compile
nfs server as a module. When I compiled it right into the kernel, the
problem went away and now I can use it.
Vilmos
Ps. Please don't crosspost it into som many newsgroups.
--
Looking for a job in British Columbia.
http://members.home.net/vilmossoti/resume.html
------------------------------
From: [EMAIL PROTECTED]
Subject: disable NNTP
Date: Wed, 01 Sep 1999 06:13:52 GMT
I commented out the NNTP entry in inetd.conf and did a killall -HUP
inetd but when I do a port scan, NNTP is still running. I looked thru
the rc directory but can't find anything relating to NNTP execpt
in.nntp or something like that. How can I disable NNTP? Oh yeah, it's
a Red Hat 5.2 box
Thanks
Colin
Sent via Deja.com http://www.deja.com/
Share what you know. Learn what you don't.
------------------------------
From: [EMAIL PROTECTED] (Mohd H Misnan)
Crossposted-To:
comp.os.linux.networking,comp.os.linux.misc,comp.os.linux.setup,comp.os.linux.x
Subject: Re: GUI for ppp?
Date: 31 Aug 1999 01:05:06 GMT
On Mon, 30 Aug 1999 15:15:11 -0400, [EMAIL PROTECTED] wrote:
>Is there a way to configure the ppp client to pipe output received by a
>remote ppp server to an xterm? I need to loginto the remote server
>using a secure ID password which changes every 30 seconds. It is
>impossible to use a scripting method with this password. I need to
>physically type a new password at the remote prompt every time I log
>in.?????
You may want to try out kppp and using the Prompt or PWPrompt command to enter
the secure ID number that you need to enter it in (and do it in less than 30
secs :).
--
|Mohd Hamid Misnan | [EMAIL PROTECTED] / [EMAIL PROTECTED] |
|iMac/233RevB/MacOS 8.6 | [EMAIL PROTECTED] |
|AMDK6-2/300/Linux2.2.12 | http://www.geocities.com/SiliconValley/3319/ |
-The irony of life is that no one gets out alive.
------------------------------
From: Stephen Torri <[EMAIL PROTECTED]>
Crossposted-To: comp.security.firewalls
Subject: Setting up Masquerading under RH6.0
Date: Wed, 01 Sep 1999 02:19:51 -0400
I have a need to setup a dial-out server using PPP. I have the PPP
scripts all installed and tested. The dail out server can surf the web
and all that stuff. Now I want to be able to masquerade the internal
network we have here with the Internet. Below is the firewall script I
wrote down. There are a few requirements:
1.) Firewall doesn't restrict ANY internel traffic. Clients should be
able to use samba, ftp, etc.
2.) Firewall forwards packets to destinations not located on the
internel network. Reverse is true, return packets are sent to the
request machine.
Simple rules.
Problems are:
1.) Can't resolve domain names from dial out server.
2.) Can't ping from clients (i.e. another computer tries to ping to
www.yahoo.com through dial out server).
3.) Can't ping from clients to the IP assigned by my ISP.
Here is the script:
=======================================================
#!/bin/sh
# Flush old policy
/sbin/ipchains -P input REJECT
/sbin/ipchains -P output REJECT
/sbin/ipchains -P forward REJECT
/sbin/ipchains -F input
/sbin/ipchains -F output
/sbin/ipchains -F forward
# Load masquerade modules
/sbin/depmod -a
/sbin/modprobe ip_masq_ftp
#------------------------------------
# Variables
#------------------------------------
LOOPBACK_IP="127.0.0.1"
INTERNET="0.0.0.0"
NETWORK="10.0.0.0"
ETHERNET_BROADCAST="10.0.0.255"
UNPRIVPORTS="1024:65535"
#------------------------------------
# Devices
#------------------------------------
# External interface to the Internet
PPP_INT="ppp0"
# We need to get the IP address this way because Stratos issues IP
# addresses from a pool and not DHCP.
PPP_IP=`/sbin/ifconfig | grep -A 4 $PPP_INT | awk '/inet/ { print $2 }'
| sed -e s/addr://`
DEFAULT_GATEWAY=$PPP_IP
# Internal interface to the local network
INTERFACE_DEV="eth0"
INTERFACE_IP="10.0.0.6"
#------------------------------------
# Default Policies
#------------------------------------
/sbin/ipchains -P input REJECT
/sbin/ipchains -P output REJECT
/sbin/ipchains -P forward REJECT
/sbin/ipchains -M -S 7200 10 60
#------------------------------------
# Local Traffic Rules
#------------------------------------
/sbin/ipchains -A input -j ACCEPT -i $INTERFACE_DEV -s $INTERFACE_IP/24
-d $NETWORK/0
/sbin/ipchains -A input -j ACCEPT -i $LOOPBACK_IP -s $NETWORK/0 -d
$NETWORK/0
/sbin/ipchains -A output -j ACCEPT -i $INTERFACE_DEV -s $INTERFACE_IP/24
-d $NETWORK/0
/sbin/ipchains -A output -j ACCEPT -i $LOOPBACK_IP -s $NETWORK/0 -d
$NETWORK/0
#------------------------------------
# Input Rules for packets from the Internet to the local network
#------------------------------------
/sbin/ipchains -A input -j ACCEPT -p icmp -s $UNIVERSE/0 -d
$INTERFACE_IP/32
/sbin/ipchains -A input -j ACCEPT -p tcp -s $UNIVERSE/0 -d
$INTERFACE_IP/32 $UNPRIVPORTS
/sbin/ipchains -A input -j ACCEPT -p udp -s $UNIVERSE/0 -d
$INTERFACE_IP/32 $UNPRIVPORTS
#------------------------------------
# Output Rules for packets from the local network to the Internet
#------------------------------------
/sbin/ipchains -A forward -s $INTERFACE_IP/255.255.255.0 -j MASQ
/sbin/ipchains -A forward -s $LOOPBACK_IP/255.255.255.0 -j MASQ
===================================================================
Thanks,
Stephen
------------------------------
From: haze <[EMAIL PROTECTED]>
Subject: Re: what is the max number of network interfaces
Date: Wed, 01 Sep 1999 06:31:14 GMT
given the slot limitations 8 is the max you can have unless you start make
devices in linux not sure how but each dev is only a file so i don't see why
you couldn't do it
HAZE
Sagolsem C wrote:
> Well, I have rarely seen machines with more than 7-8 empty slots for
> ethernet cards. I think you can add more than 8 if u have slots. Never
> really bothered about a situation like this. If you get the concrete answer
> to it let me know.
>
> Sagolsem C
>
> Pak,Wooguil <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]...
> > How Many ethernet cards can I install in Linux ?
> > In /drivers/net/Space.c I saw "eth7".
> > The Max number is 8. Isn't it?
> >
------------------------------
From: "William B. Cattell" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Crossposted-To: redhat.networking.general
Subject: Re: Networking
Date: Wed, 01 Sep 1999 06:49:50 GMT
Scott Berry wrote:
>
> Question on running Linux as a DNS server. I understand that it is the
> best platform for DNSing. Opinion on this matter?
>
> Secondly, which build do I pick? I was thinking RH6 soley because of how
> commercial it is and that RH is the only build I have ever used. Ideas on
> this?
>
> Any comments are much apprecaited.
>
> ------------------ Posted via CNET Linux Help ------------------
> http://www.searchlinux.com
I used Linux boxes as DNS/Firewalls a couple years ago(I
left, they're still there). I think it was a RedHat 5.2
distro I used. It really won't matter which distribution
you use - Linux is Linux. Red Hat just packages extraneous
stuff in their distribution that you probably won't need
anyway
--
==============================================================
http://members.home.com/wcattell
==============================================================
Park not thy Harley in the darkness of thine garage, that it
may collect dust for want of being oft ridden. Ride thy
Harley
with thy brethren, and rejoice in the spirit of the road.
==============================================================
------------------------------
From: "Stephan Scheufen" <[EMAIL PROTECTED]>
Crossposted-To:
alt.www.webmaster,comp.infosystems.www.misc,comp.infosystems.www.servers.misc,comp.infosystems.www.servers.unix
Subject: Re: looking for a webhosting administration software for linux
Date: Wed, 1 Sep 1999 08:40:41 +0100
Hi Ralf,
i have the same configuration an i work with webmin 0.73. It�s Freeware!!!
download at www.webmin.com
have fun
Stephan
Ralf Huelsmann wrote in message <7qbmdh$u28$[EMAIL PROTECTED]>...
>hi !
>
>i�m looking for software to do the administration for a linux webserver.
>
>we use suse 6.2 and apache
>
>what should it do:
>
>- set up new domains / users... (virtual host , hosts, adduser, ftp,
>directories, quota)
>- kill old users
>- help with billing (billing for fixed, premiumservices and traffic)
>
>and so on...
>
>any idea ?
>
>answer per email would be nice...
>
>thanx
>
>ralf
>
>
------------------------------
From: "Stephan Scheufen" <[EMAIL PROTECTED]>
Subject: Problems with ISDN and Linux
Date: Wed, 1 Sep 1999 08:43:34 +0100
Hi all!
i�m running SuSe 6.1 and have set my defaultroute to ippp0. I want, that
only specified users/maschines have the possibility to create a
connection...HOW?
And, please tell me what i have to do...
Thanks
Stephan
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************