Linux-Networking Digest #559, Volume #12         Sun, 12 Sep 99 08:13:18 EDT

Contents:
  Re: Browsers and Linux (Richard Steiner)
  Re: Browsers and Linux (Richard Steiner)
  Re: Problems with NFS client (James Ranson)
  Re: Browsers and Linux ("Ernest")
  Re: Browsers and Linux ("Ernest")
  Help needed to start on NFS (Nishad)
  Re: Problem with ISP and DNS (Lew Pitcher)
  Demand Dialing with chat/pppd (Dave Elkan)
  Inetd nowait.max=40; no re-opening of telnetd service. (Maarten Afman)
  Homes section in Samba (Steven Sykes)
  kppp and new modem ? (frenomulax)
  IP Chains not working... ("Alan Latteri")
  Unresponsive DHCP server? (rich)
  SAMBA slowness (Neil A Fraser)
  Re: 3c59x in half-duplex (Jan-Albert van Ree)
  Re: route doesn't work with kernel 2.2.9 (Villy Kruse)
  Re: help!!! with 3com EtherLink PCI III/XL (Maarten Afman)
  Re: Using redir to expose a web-server behind firewall? ("Jens Hilligs�e")

----------------------------------------------------------------------------

From: [EMAIL PROTECTED] (Richard Steiner)
Crossposted-To: alt.os.linux,comp.os.linux.setup
Subject: Re: Browsers and Linux
Reply-To: [EMAIL PROTECTED]
Date: Sun, 12 Sep 1999 02:49:30 -0500

Here in comp.os.linux.setup, "Ernest" <[EMAIL PROTECTED]>
spake unto us, saying:

>Richard Steiner <[EMAIL PROTECTED]> wrote in message
>news:[EMAIL PROTECTED]...
>
>> Here in comp.os.linux.setup, "Ernest" <[EMAIL PROTECTED]>
>> spake unto us, saying:
>>
>> >There seems to be some confusion here. This newsgroup insists that you
>> >may only post at the bottom. No matter the length of the thread!! Read
>> >again BOTTOM ONLY!! What has the thread length got to do with
>> >consistency?
>>
>> Hmmm.  How could you possibly know beforehand how many follow-ups will
>> appear in a given thread?
>
>That is my point. So, if you agree with me, do you insist I post only
>in one style?

If you were to post using only one quoting style, I think it would make
things easier for other people to respond to your messages.

We'd know what to expect.

I also think, however, that it is desireable for everyone posting in the
same forum to use the same general quoting method.

Otherwise, people would have to perform some manual editing for the few
folks who choose to use a different style of quoting instead of letting
their newsreading software handle the quote positioning automatically.

Why introduce more work into the system when it's not necessary?

You seemed to indicate that you sometimes quote above the response and
sometimes below depending on context.  To me, this seems like it makes
more work for everyone.  An I misunderstanding?

-- 
   -Rich Steiner  >>>--->  [EMAIL PROTECTED]  >>>---> Bloomington, MN
     OS/2 + Linux + BeOS + FreeBSD + Solaris + WinNT4 + Win95 + DOS
      + VMWare + Fusion + vMac + Executor = PC Hobbyist Heaven! :-)
                  A Wise Man Once Said: I Don't Know.

------------------------------

From: [EMAIL PROTECTED] (Richard Steiner)
Crossposted-To: alt.os.linux,comp.os.linux.setup
Subject: Re: Browsers and Linux
Reply-To: [EMAIL PROTECTED]
Date: Sun, 12 Sep 1999 03:16:14 -0500

Here in comp.os.linux.setup, "Ernest" <[EMAIL PROTECTED]>
spake unto us, saying:

>Richard Steiner <[EMAIL PROTECTED]> wrote in message
>news:[EMAIL PROTECTED]...
>
>> By using your style, you make it more difficult for others (IMhO).
>
>Please explain what do you mean by 'my' style.

Read your own newspostings at the beginning of this thread.  You were
writing responses and then appending the quoted text to the bottom.

That is the style I am referring to.  None of the newsreaders I have
ever used have allowed that method, so I'm calling it yours.  :-)

-- 
   -Rich Steiner  >>>--->  [EMAIL PROTECTED]  >>>---> Bloomington, MN
     OS/2 + Linux + BeOS + FreeBSD + Solaris + WinNT4 + Win95 + DOS
      + VMWare + Fusion + vMac + Executor = PC Hobbyist Heaven! :-)
                    I NEVER repeat myself.  Never.

------------------------------

From: James Ranson <[EMAIL PROTECTED]>
Subject: Re: Problems with NFS client
Date: Sat, 11 Sep 1999 17:03:00 -0600

=====BEGIN PGP SIGNED MESSAGE=====
Hash: SHA1


Well, the messages mean that init cannot run the programs it needs to set
up the login screens on your virtual terminals.  This usually means that
something has gone wrong with the boot, but check the "getty" section of
/etc/inittab just to make sure the programs it is trying to load are
actually visible to your client.


James Ranson
http://www.cs.uregina.ca/~ranson/
My PGP userid is "James F. Ranson <[EMAIL PROTECTED]>"
My PGP public key can be found at http://pgp5.ai.mit.edu/

On Thu, 2 Sep 1999, Bernt Christopher Rosland wrote:

> I'm running RH 6.0 and am trying to set up a disk-less client using NFS,
> 
> but I'm having problems booting the client. When it gets to starting
> local in rc it stopps after this comes up:
> 
> INIT: Id "1" respawning too fast: disabled for 5 minutes
>    "      2                    "
>    "      3                    "
>    "      4                    "
>    "      5                    "
>    "      6                    "
> INIT: no more processes left in this runlevel
> 
> Can anyone tell me what this is?
> 
> -Bernt

=====BEGIN PGP SIGNATURE=====
Version: PGP 6.5.1

iQA/AwUBN9rfqaoGP3E3c87GEQLiqQCgmRVNQOh7IKIvAOBkbN5SG5cGkSkAoNky
AD5yGPyRLVlJc4dy9/xtK1/n
=3bCh
=====END PGP SIGNATURE=====


------------------------------

From: "Ernest" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.setup
Subject: Re: Browsers and Linux
Date: Sun, 12 Sep 1999 11:37:34 +0200


Richard Steiner <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> Here in comp.os.linux.setup, "Ernest" <[EMAIL PROTECTED]>
> spake unto us, saying:
>
> >> Do you agree that a consistent method of quoting increases
> >> readability in long threads?
> >
> >There seems to be some confusion here. This newsgroup insists that you may
> >only post at the bottom. No matter the length of the thread!! Read again
> >BOTTOM ONLY!! What has the thread length got to do with consistency?
>
> Hmmm.  How could you possibly know beforehand how many follow-ups will
> appear in a given thread?

That is my point. So, if you agree with me, do you insist I post only in one
style?

> I agree that your quote-below-the-reply style is fine as long as you
> know that a thread will end with your response.

Please, please it is not my style. It is the style that I am forced to adopt
if I am allowed to post in this NG. All I am asking again. Why force me to use
one style only "post at the bottom!!!!!!!!!!!!!!!!" That is the only style I
am allowed.







------------------------------

From: "Ernest" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.setup
Subject: Re: Browsers and Linux
Date: Sun, 12 Sep 1999 11:43:27 +0200


Richard Steiner <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...

> I agree that your quote-below-the-reply style is fine as long as you
> know that a thread will end with your response.
>
> However, if someone is wanting to answer a posting which follows yours,
> your quote-below-posting style means that a lot of block-shifting will
> have to be done in order to place your quote in a conversational
> context (see my two-level nested quote above for an example).
>
> By using your style, you make it more difficult for others (IMhO).

Please explain what do you mean by 'my' style.



------------------------------

From: Nishad <[EMAIL PROTECTED]>
Subject: Help needed to start on NFS
Date: Sun, 12 Sep 1999 07:45:12 GMT


Hi,
We are a group a students who want to start  a project on NFS
It would be helpful if you give us some direction on HOw to start.

Thanks you for the time and Energy.

nishad



------------------------------

From: [EMAIL PROTECTED] (Lew Pitcher)
Subject: Re: Problem with ISP and DNS
Reply-To: [EMAIL PROTECTED]
Date: Wed, 08 Sep 1999 15:35:40 GMT

At worst case, you can run your own caching DNS; read the DNS-HOWTO for
details. What you would be doing is replacing your ISP's DNS with your own.
Your DNS would work exactly the same way your ISP's DNS does; if it can't
resolve a name from a list of 'local' hosts, it traces the name through
the top-level DNS servers.


On Wed, 08 Sep 1999 10:15:59 -0500, "Lynn R. Ziegler" <[EMAIL PROTECTED]> wrote:

>
>--------------5BD26AB469AE349C5E8BC58E
>Content-Type: text/plain; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
>My ISP just changed their connection so that it  dynamically assigns not
>only the IP number but also the
>DNS server's IP. The problem is that I don't know how to handle this
>and, in fact, the PPP HowTo (dated
>1997!) says that linux CANNOT handle dynamic DNS assignment. I hope this
>is no longer true as I really
>do not wish to change ISP's. Can someone:
>
>1. Tell me how to fix it. (Best)
>2. Tell me about a newer PPP HowTo or other document that explains how
>to fix it. (Good)
>3. Flame me. (Send it to /dev/null)
>
>--
>Dr. Lynn R. Ziegler         Email Address: [EMAIL PROTECTED]
>Dept. of Comp. Sci.         Home Page: http://www.cs.csbsju.edu/~lziegler/
>College of St. Benedict/    Phone: (320) 363-3083
>St. John's University       CSB/SJU Home Page: http://www.csbsju.edu/
>Collegeville, MN 56321      Dept. Home Page: http://www.cs.csbsju.edu/cs
>
>
>
>--------------5BD26AB469AE349C5E8BC58E
>Content-Type: text/html; charset=us-ascii
>Content-Transfer-Encoding: 7bit
>
><!doctype html public "-//w3c//dtd html 4.0 transitional//en">
><html>
>My ISP just changed their connection so that it&nbsp; dynamically assigns
>not only the IP number but also the
><br>DNS server's IP. The problem is that I don't know how to handle this
>and, in fact, the PPP HowTo (dated
><br>1997!) says that linux CANNOT handle dynamic DNS assignment. I hope
>this is no longer true as I really
><br>do not wish to change ISP's. Can someone:
><p>1. Tell me how to fix it. (Best)
><br>2. Tell me about a newer PPP HowTo or other document that explains
>how to fix it. (Good)
><br>3. Flame me. (Send it to /dev/null)
><pre>--&nbsp;
>Dr. Lynn R. Ziegler&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Email Address: 
>[EMAIL PROTECTED]
>Dept. of Comp. Sci.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Home Page: <A 
>HREF="http://www.cs.csbsju.edu/~lziegler/">http://www.cs.csbsju.edu/~lziegler/</A>
>College of St. Benedict/&nbsp;&nbsp;&nbsp; Phone: (320) 363-3083&nbsp;
>St. John's University&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; CSB/SJU Home Page: <A 
>HREF="http://www.csbsju.edu/">http://www.csbsju.edu/</A>&nbsp;&nbsp;
>Collegeville, MN 56321&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Dept. Home Page: <A 
>HREF="http://www.cs.csbsju.edu/cs">http://www.cs.csbsju.edu/cs</A></pre>
>&nbsp;</html>
>
>--------------5BD26AB469AE349C5E8BC58E--
>


Lew Pitcher
System Consultant
Toronto Dominion Financial Group

([EMAIL PROTECTED])


(Opinions expressed are my own, not my employer's.)

------------------------------

From: Dave Elkan <[EMAIL PROTECTED]>
Subject: Demand Dialing with chat/pppd
Date: Sun, 12 Sep 1999 19:32:38 +1000
Reply-To: [EMAIL PROTECTED]

I recently had problems getting Demand dialing working properally,
upon the command pppd :10.0.0.2 to spawn the demand facility, the linux
box would dial for an un apparent reason shortly after sending this
command..
The problem was the DNS server I had running, I turned it off and it all
works perfectly now..

Hope this helps someone out in a similar situation to as what I was..

Cya
Dave


------------------------------

Date: Sun, 12 Sep 1999 12:01:01 +0200
From: Maarten Afman <[EMAIL PROTECTED]>
Subject: Inetd nowait.max=40; no re-opening of telnetd service.

Hello, all!

I messed up my system with the following: (from BugtraQ)

telnet localhost | telnet localhost | ...
(and that 50x)

Inetd has a built-in limit of connections per connection type.
Slackware's default is 40 per 60 seconds. The problem is that on my
system inetd doesn't open up those ports again! 

It has been 20 hours since and still I get: 

$ telnet localhost
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
telnetd: All network ports in use.
Connection closed by foreign host.
$ _

I killalled (and killall -HUP'd as well as killall -9) inetd but nothing
helps! Someone from BugtraQ said that a kill of inetd should help.

Perhaps there is some sort of obscure problem with the kernel when 50
connections are made within an interval of say 20 ms? I say this because
I went down to single user mode but still inetd refuses connections to
the telnet port. This is speculation.

I am using linux-2.2.11 w/RAID0.9 patches, my distribution is a
Glibc-2.1.1 Slackware-current.

I appreciate any help!

--
 ((    Maarten Afman                         )) 
  ))   email:    [EMAIL PROTECTED]   ((
 ((    homepage: http://delft.dyndns.org     ))
  ))                                         
 ((    xxxx

------------------------------

From: Steven Sykes <[EMAIL PROTECTED]>
Subject: Homes section in Samba
Date: Sun, 12 Sep 1999 19:57:46 +1200

Hi everyone,

On my system I am using the 'homes' section in smb.conf so that users on
the system can get to their home directory without me having to have
configuration sections for each person (the whole point of the 'homes'
section really!)

Anyway, under Windows when looking in the Network Neighbourhood the
Samba server appears fine, but when I double click on the server name,
as well as the printers section appearing there are two directories,
both of which relate to the users home directory.

One of these is called 'homes', the other is the name of their login,
e.g 'steven'. The smb.conf man page leads me to believe that Samba is
meant to replace the name 'homes' with their UNIX login name *only*, but
it seems to have their name, *and* 'homes'.

I'm using Samba 2.0.5a, and any help would be appreciated.

Cheers,

-- 
Steven

Webmaster of WACC - Wellington Acorn Computer Club
WACC pages: http://homepages.paradise.net.nz/~pbrowne/WACC/
Phone: (03) 358-5601 or (025) 908-448
My pages: http://homepages.paradise.net.nz/~acorn/

... Start slow and taper off.



------------------------------

From: [EMAIL PROTECTED] (frenomulax)
Subject: kppp and new modem ?
Date: Sun, 12 Sep 1999 09:55:57 GMT

I have been using a 14.4 external modem for my Linux dialup access. I
have just bought a CNet Single Point 56k V.90 external fax modem. It
is a Plug and Play modem. 

The modem works correctly in Win95. 

When I am in Linux, If I go to the Mini Terminal in kppp setup and
enter  ATDT and the phone number, it will dial in and connect to the
shell account w/  no problem. So, it seems the system sees the modem
OK. 

Using kppp setup I have created a dialup configuration for 56k. 

When I try to connect w/ kppp I now get this in the Login Script Debug
Window: 
ATM0L0 
OK 
ATDT and the phone number
NO CARRIER 
This comes up almost instantly. After that nothing more happens. 

This is with COL2.2. 

Anyone have any suggestions how to go about getting ppp to work again?

Thanks
--
arnie sherman
[EMAIL PROTECTED]

------------------------------

From: "Alan Latteri" <[EMAIL PROTECTED]>
Subject: IP Chains not working...
Date: Sun, 12 Sep 1999 03:57:27 -0700

Hi,

I just installed OpenLinux 2.2 off CDROM.  When I to do IP Masquerade i get
the following result.

[root@ham /root]# ipchains -P forward DENY
ipchains: Protocol not available

IP Forward is enable for the ethernet devices so I am at a loss.  Anyone
have an idea??

Alan




------------------------------

From: [EMAIL PROTECTED] (rich)
Subject: Unresponsive DHCP server?
Reply-To: [EMAIL PROTECTED]
Date: Sun, 12 Sep 1999 10:53:34 GMT

Hi Folks        
        I know variations of this question are being asked on a daily
basis, but after reading through this group for a while, I haven't
been able to find a specific solution to my problem

I'm running linux mandrake 6.0, and attempting to connect to the
internet with a cable modem, my isp (videotron in montreal, canada)
uses DHCP.

I know for certain that my NIC is working properly in linux because
I've been able to set up a sygate proxy on a win98 box, and use that
as a gateway to get onto the net and surf with the linux box, but that
isn't how I want things set up.

I've tried installing the dhcpcd rpm package that came with mandrake
(version 1.3.1 7pl2), but with no luck.

and have also tried using the ICS DHCP package (version 2.0) from
www.isc.org.  (experimented with dhcrelay as well)

my problem is that no matter what i do, the interface won't initialize
when i set it to DHCP, i just get the message 
"Determining ip information for eth0... Operation failed." 
on bootup, or any time i do an ifup eth0.  
The cable modem's transmission lights flash, but they don't seem to
get a response back.

I've been reading any HOW-TOs, FAQs, man pages for DHCP
that i can find, I've spent the last 3 days working on it...

Any help would be GREATLY appreciated

Thanks in advance,
Rich



------------------------------

From: [EMAIL PROTECTED] (Neil A Fraser)
Subject: SAMBA slowness
Date: Sun, 12 Sep 1999 11:07:44 GMT
Reply-To: [EMAIL PROTECTED]

I am running Samba 2.0.3 under RedHat Linux 6.0 on a Celeron 333MHz with 32MB 
memory.  Its sole purpose is to provide file and print services to Win98 
clients in a single workgroup on a small 4-client network.

It works fine logically, but it's slow.  If I compare the time taken to 
copy 20 MBytes of files to the Samba PC with the time taken to copy the same 
files to one of the Win 98 PCs, the ratio of time taken is about 4:1.  And 
that's with noone logged onto the Samba PC, which is otherwise idling.

If two Win 98 clients access the same set of files on the Samba PC (e.g. for 
the accounting system), I sit back and reorganize my desk while I wait for the 
system to load.

I did a straight swap from the PC booting and running Win95 to the 
ame PC running Linux/SAMBA.  Both work, but the Win95 peer-peer networking 
seemed quite a lot faster. Otherwise nothing changed, so I cannot suspect 
networking hardware problems.

I'm determined to fix whatever is causing the Samba slowness, and would 
appreciate any comments about what I should be looking for.


Neil

------------------------------

From: Jan-Albert van Ree <[EMAIL PROTECTED]>
Subject: Re: 3c59x in half-duplex
Date: Sun, 12 Sep 1999 13:20:46 +0200

Ian Wehrman schreef:
> 
> hello all,
> i'm trying to get my friend's 3com 3c905b up and running on our net, and
> am having some difficulties. the 3c59x module doesn't show any problems
> loading and getting an address from the dhcp server, and at first glance
> the thing almost appears to work. however, it tends to show about 40%
> packet loss, especially on large files, independent of the server at the
> other end. i personally am running a 3c900 in half-duplex mode just
> fine, and have read various things that lead me to believe the card
> would work better on resnet in half-duplex, 10baseT mode. i am trying to
> use the 'options' flag with insmod to get the 3c59x module to go
> half-duplex, but can't seem to find a combination that's doing it (i'm
> checking this with donald becker's vortex-diag program). has anyone else
> had a similar problem? does anyone have a clue about how to get the
> 3c905 into half-duplex? am i on the right track?

Setting the card in half-duplex is done using the disks that came with it.
Under DOS, run  3c90xcfg.exe and you'll be able to set it to auto, full or
half duplex. Running full-duplex here with no problems so far. I guess it
depends on the hub you use.
-- 
Jan-Albert "Sliver" van Ree | [EMAIL PROTECTED]
3D Sims Archive maintainer  | http://www.3dgamers.com

------------------------------

From: [EMAIL PROTECTED] (Villy Kruse)
Subject: Re: route doesn't work with kernel 2.2.9
Date: 12 Sep 1999 13:22:05 +0200

In article <7rfb8b$8km$[EMAIL PROTECTED]>,  <[EMAIL PROTECTED]> wrote:
>i'm running RH 5.0 with kernel 2.0.31
>everything was working perfectly..then I upgraded to kernel 2.2.9 and
>now, for some reason, i cannot edit my kernel routing table normally.
> ...snip



Maybe it is time to upgrade the utility functions such as route.
For example redhat has upgrade rpms required on RH5.2 before the
2.2 kernel works properly.


Villy

------------------------------

From: Maarten Afman <[EMAIL PROTECTED]>
Subject: Re: help!!! with 3com EtherLink PCI III/XL
Date: Sun, 12 Sep 1999 13:46:14 +0200

[EMAIL PROTECTED] wrote:
> 
> I am trying to intall linux on a Dell OptiPlex GX1 which comes with
> a 3Com Fast Etherlink card.  I have compiled the kernel with the driver
> for the card (or so I think) 3c59x.c but on booting I get the following
> messages:
> 
> 3c59x.c:v0.99H 11/17/98 Donald Becker
> http://cesdis.gsfc.nasa.gov/linux/drivers/vortex.html
>   A 3Com network adapter is powered down!  Setting the power state
> 0003->0000.
>   Setting the IRQ to 0, IOADDR to 0x5800.
>   The PCI BIOS has not enabled the device at 0/112. Updating PCI command
> 0000->0005.
> eth0: 3Com 3c905B Cyclone 100baseTx at 0x5800,  00:50:04:7e:fb:41, IRQ 0
>  *** Warning: IRQ 0 is unlikely to work! ***

That IRQ is wrong. 11 or 10 should do it.

>   8K byte-wide RAM 5:3 Rx:Tx split, autoselect/Autonegotiate interface.
>   MII transceiver found at address 24, status 786d.
>   MII transceiver found at address 0, status 786d.
>   Enabling bus-master transmits and whole-frame receives.
> eth0: Overriding PCI latency timer (CFLT) setting of 0, new value is 32.
> 
> could anyone give me suggestions?

Have you tried to determine which IRQ is available and settint it? You can use the pci 
utilities for
that. (lspci and setpci), or your BIOS. Or the module!

Success

-- 
 ((    Maarten Afman                         )) 
  ))   email:    [EMAIL PROTECTED]   ((
 ((    homepage: http://delft.dyndns.org     ))
  ))                                         
 ((    xxxx

------------------------------

From: "Jens Hilligs�e" <[EMAIL PROTECTED]>
Subject: Re: Using redir to expose a web-server behind firewall?
Date: Sun, 12 Sep 1999 14:07:03 +0200


Jason Rosenberg <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
>
>
> David Crooke wrote:
> >
> > Jason Rosenberg wrote:
> > >
> > > I was considering having that NT machine be my proxy-firewall
> > > server (using something like WinGate).
> >
> > That's possible, but all advocacy and religion aside, this is one of
> > those things that Linux really does do better than NT ;-)
> >
>
> I am definitely willing to believe this, I just want to make sure that
> everything will connect, and it's beginning to sound like it will...
>
> > >
> > > Alternatively, I would like to consider using the linux
> > > machine as my proxy-firewall.  But I wonder whether this
> > > is possible.  Can I still have a web-server behind the
> > > firewall remain externally visible?
> >
> > Yes, absolutely. You just need to forward the appropriate port(s) to the
> > NT box.
> > Linux makes a great low impact firewall / masq server.
> >
>
> Can you refresh me a little on ports.  Is there a master list available
> as to what the excepted conventions are for port number assignments, etc.
> Is 80 the excepted port for web-server requests?  What about ftp, etc.?

In linux you will find this information in /etc/services
NT keeps this in \winnt\system32\drivers\etc\services

>
> It sounds like I would be limited to having only 1 web-server machine
> behind the firewall, if the convention is that 80 is always used for
> webservers, and if I can only redirect based on port number.  I could
> only ever be redirecting to 1 webserver.  Which is ok, for now, but
> may become a restriction later....
>
> I was just looking at a Windows product called SyGate, which looks a
> hell of a lot better than WinGate.  It does vaguely claim to support
> webservers behind the fire-wall, but so far I haven't been able to
> get any details.  Anyone know if SyGate on Windows will support multiple
> webservers behind the firewall?

It does! You are able to define rules, that descripe which ports on your
server you want to point on other servers on behind SyGate. It is the best
Win software I found doing this job.

But maybe you should consider using IP Masquarading on Linux...

>
> > >
> > > I still would need to have IIS server external internet
> > > requests.  Can the redir facility be used to direct
> > > specific incoming requests to my NT machine?
> > >
> > > Also, how secure would files be on the fire-wall linux machine?
> >
> > No more or less secure than they would be if it wasn't acting as a
> > firewall. This depends on the "face" it is presenting to the outside
> > world. For good security, set it up to block incoming connections on all
> > ports except the ones you actually need (like 80 for the webserver)
> >
>
> Sounds reasonable.  I would still want to be able to pass through
connections
> from known ip-addresses, so that I could telnet in if I had to?  Is this
> also possible?  I realize it would be a bit less secure.
>
> Jason



------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.networking) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Networking Digest
******************************

Reply via email to