[leaf-user] Bering Citrix WinFrame?

2003-10-16 Thread Craig Caughlin
Hi folks, 
My wife has a computer that needs to access a server at her workplace
running Citrix WinFrame. Does anyone know: will I have to open a port on
Bering in order for the signal to pass through? I know Citrix runs on port
1494, but I'm not sure if I'll need to modify my Bering 1.2 firewall for
success. Comments???

Thank you,
Craig



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] Bering Citrix WinFrame?

2003-10-16 Thread Robert Coffman - Info From Data Corporation
If your Bering Firewall allows outbound connections it will work.  At her
workplace, they will have to make the server available for connections on
that port.

- Bob Coffman

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Craig
Caughlin
Sent: Thursday, October 16, 2003 9:39 AM
To: LEAF (LEAF)
Subject: [leaf-user] Bering  Citrix WinFrame?


Hi folks,
My wife has a computer that needs to access a server at her workplace
running Citrix WinFrame. Does anyone know: will I have to open a port on
Bering in order for the signal to pass through? I know Citrix runs on port
1494, but I'm not sure if I'll need to modify my Bering 1.2 firewall for
success. Comments???

Thank you,
Craig



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


RE: [leaf-user] Bering Citrix WinFrame?

2003-10-16 Thread Craig Caughlin
Thank you Bob!
I'm not sure I understand what you mean, though. I have the default Bering
firewall...how would I know if it allows outbound connections?

Thank you,
Craig

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert Coffman -
Info From Data Corporation
Sent: Thursday, October 16, 2003 7:16 AM
To: Craig Caughlin; LEAF (LEAF)
Subject: RE: [leaf-user] Bering  Citrix WinFrame?


If your Bering Firewall allows outbound connections it will work.  At her
workplace, they will have to make the server available for connections on
that port.

- Bob Coffman

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Craig Caughlin
Sent: Thursday, October 16, 2003 9:39 AM
To: LEAF (LEAF)
Subject: [leaf-user] Bering  Citrix WinFrame?


Hi folks,
My wife has a computer that needs to access a server at her workplace
running Citrix WinFrame. Does anyone know: will I have to open a port on
Bering in order for the signal to pass through? I know Citrix runs on port
1494, but I'm not sure if I'll need to modify my Bering 1.2 firewall for
success. Comments???

Thank you,
Craig



---
This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net
hosts over 70,000 Open Source Projects. See the people who have HELPED US
provide better services: Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net
hosts over 70,000 Open Source Projects. See the people who have HELPED US
provide better services: Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Bering Citrix WinFrame?

2003-10-16 Thread Eric Wolzak
Hello Craig 
The policy for a default firewall for outward connections is ACCEPT.
So  as long as the other side sends answers to your packets they will be 
accepted. 

Regards 
Eric Wolzak 
member of the bering Crew


 Hi folks, 
 My wife has a computer that needs to access a server at her workplace
 running Citrix WinFrame. Does anyone know: will I have to open a port on
 Bering in order for the signal to pass through? I know Citrix runs on port
 1494, but I'm not sure if I'll need to modify my Bering 1.2 firewall for
 success. Comments???
 
 Thank you,
 Craig
 
 



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Compiling for Bering 1.2 and Bering uClibc

2003-10-16 Thread JeeBak Kim
* James Neave ([EMAIL PROTECTED]) [031016 08:51]:
 Hello All,
 
 Compiling for Bering 1.2 and uClibc.
 
 Is it *only* possible to compile for Bering 1.2 with a Debian/slink
 installation?

You don't really need a separate Debian/slink installation.  The UML
build environment ( http://leaf.sourceforge.net/devel/jnilo/uml.html )
works great.

 Or can I take, say, Mandrake 9 and compile with a target OS? Just tell
 it which Glibc to use for instance. And install a different gcc.
 Will that work?

You probably could do all that you say but why bother with all the
hassle and any unforeseen compatibility issues?  Do yourself a favor and
use the UML.  You can run it within your familiar Mandrake 9 system.

 And for uClibc, compile for them instead of Glibc.

Hmm... I'm not sure if there's a UML environment for uClibc.



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Access files on internal machine

2003-10-16 Thread M Lu
Hello all,

From Bering router machine, I would like to read/write from/to some files on
an internal machine (either Linux or MS Windows-Server). What is the best
way to do that?

Thank you.

M Lu.


---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Access files on internal machine

2003-10-16 Thread Ray Olszewski
At 09:24 AM 10/16/2003 -0700, M  Lu wrote:
Hello all,

From Bering router machine, I would like to read/write from/to some files on
an internal machine (either Linux or MS Windows-Server). What is the best
way to do that?
As posed, this question is a bit too general to get a good answer.

First, the answers for Linux and Windows are likely to be quite different.

Second, what do you actually want to do?

As a general matter, you have three options that I can think of, none of 
them very attractive in the context of LEAF/Bering.

1. Mount a remote filesystem on the LEAF router in one of the usual ways 
... NFS or SMB. I don't *think* there are ready-made Bering packages for 
either (at least I can't find them in Jacques' package area), and probably 
the Bering kernel doesn't include support for these filesystems anyway. 
Were this a standard Linux-to-Linux problem, or Linux-to-Windows, I'd 
probably go this way.

2. Use an activity-specific client-server setup (like the one for remote 
syslog'ing). Whether this works for you depends on the specifics of what 
you want to do ... does a suitable pair of apps exist, and is the client 
one packaged for LEAF/Bering?

3. Use ssh to connect to the internal server from the LEAF router and do 
what you need to do. This is straightforward if you want to access those 
files from a standard command-line app (edit them with vi, for example) ... 
or at least it is straightforward for the LiEAF-to-Linux variant ... but 
messy if you want to run some other sort of updater over an ssh tunnel.





---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Access files on internal machine

2003-10-16 Thread Sean E. Covel
You could use sftp.  sftp is basically FTP over ssh.  That would get you
to/from a Linux box.  You could use Putty SFTP or some of the more GUI
ftp clients are starting to support SFTP (CuteFTP, WS_FTP Pro (not LE)).

On Thu, 2003-10-16 at 15:25, Ray Olszewski wrote:
 At 09:24 AM 10/16/2003 -0700, M  Lu wrote:
 Hello all,
 
  From Bering router machine, I would like to read/write from/to some files on
 an internal machine (either Linux or MS Windows-Server). What is the best
 way to do that?
 
 As posed, this question is a bit too general to get a good answer.
 
 First, the answers for Linux and Windows are likely to be quite different.
 
 Second, what do you actually want to do?
 
 As a general matter, you have three options that I can think of, none of 
 them very attractive in the context of LEAF/Bering.
 
 1. Mount a remote filesystem on the LEAF router in one of the usual ways 
 ... NFS or SMB. I don't *think* there are ready-made Bering packages for 
 either (at least I can't find them in Jacques' package area), and probably 
 the Bering kernel doesn't include support for these filesystems anyway. 
 Were this a standard Linux-to-Linux problem, or Linux-to-Windows, I'd 
 probably go this way.
 
 2. Use an activity-specific client-server setup (like the one for remote 
 syslog'ing). Whether this works for you depends on the specifics of what 
 you want to do ... does a suitable pair of apps exist, and is the client 
 one packaged for LEAF/Bering?
 
 3. Use ssh to connect to the internal server from the LEAF router and do 
 what you need to do. This is straightforward if you want to access those 
 files from a standard command-line app (edit them with vi, for example) ... 
 or at least it is straightforward for the LiEAF-to-Linux variant ... but 
 messy if you want to run some other sort of updater over an ssh tunnel.
 
 
 
 
 
 ---
 This SF.net email is sponsored by: SF.net Giveback Program.
 SourceForge.net hosts over 70,000 Open Source Projects.
 See the people who have HELPED US provide better services:
 Click here: http://sourceforge.net/supporters.php
 
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Access files on internal machine

2003-10-16 Thread Ray Olszewski
At 03:50 PM 10/16/2003 -0400, Sean E. Covel wrote:
You could use sftp.  sftp is basically FTP over ssh.  That would get you
to/from a Linux box.  You could use Putty SFTP or some of the more GUI
ftp clients are starting to support SFTP (CuteFTP, WS_FTP Pro (not LE)).
Did I misinterpret the original poster's use of read/write from/to some 
files, or did you? I read it to mean that he or she wanted to make changes 
to the files without actually moving them to the LEAF router before (and 
perhaps back after) doing so. If I misunderstood, then your suggestion sia 
a good one. In addition, any of regular ftp, rcp, and scp would also work 
to copy the files to and from the LEAF router.

On Thu, 2003-10-16 at 15:25, Ray Olszewski wrote:
 At 09:24 AM 10/16/2003 -0700, M  Lu wrote:
 Hello all,
 
  From Bering router machine, I would like to read/write from/to some 
files on
 an internal machine (either Linux or MS Windows-Server). What is the best
 way to do that?

 As posed, this question is a bit too general to get a good answer.
[deleted]





---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Fw: host.allow questions

2003-10-16 Thread Charles Steinkuehler
ALParada wrote:
Hello,

I am having a problem connecting to weblet. If I leave the hosts.allow
file at ALL: 192.168.63.0/255.255.255.0 it will work. If I change it to
just a host and not a subnet it fails. The smallest subnet I have been
able to use successfully is a /28. Everything smaller fails. I have
changed the weblet config file with the right IP address, I have added
the rules for shorewall to allow port 80 from loc, and inetd is
uncommented for www. Like I said with a /24 subnet it works. SSH is
working correctly from a single host and the config for www is the same.
Telnet is also not working, period. Again the config is the same for
SSH. Is there something I'm missing?
Post back to the list if the info in previous e-mails doesn't get weblet 
working for you.

I also read something about bandwidth meter of sorts but can't find it.
Is this something that is not included in the default package?
The bandwidth meter consists of a very simple script (or a tiny C 
program for a few more features) on the firewall side, and a largish 
(considering floppy size constraints) java application that runs on the 
client side (web browser running on an internal machine).

I've not worked with bering enough to know what's packaged by default, 
but probably the firewall-side stuff is setup as part of weblet, but the 
java applet is not included to save space.  If this is the case, you can 
either add the applet to your firewall (if you have space), or just copy 
it directly to your local system.

Details on installing and running the bandwidth monitor (and any pieces 
you need but don't have) can be found on the lrpStat page:
http://www.leaf-project.org/devel/hejl/

It also looks like the bering guide refers you to my weblet page for 
additional documentation:
http://leaf.sourceforge.net/devel/cstein/Packages/weblet.htm

--
Charles Steinkuehler
[EMAIL PROTECTED]


---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Compiling for Bering 1.2 and Bering uClibc

2003-10-16 Thread Erich Titl
Hi

At 17:41 16.10.2003, James Neave wrote:
Hello All,

Compiling for Bering 1.2 and uClibc.

Is it *only* possible to compile for Bering 1.2 with a Debian/slink
installation?
Or can I take, say, Mandrake 9 and compile with a target OS? Just tell
it which Glibc to use for instance. And install a different gcc.
Will that work?
Yu have several choices.

1) UML

2) Chroot to the slink environment, look at Lynn Avants' description/tool.

3) Build your own environment with the necessary compiler/library settings.

Erich

THINK
Püntenstrasse 39
8143 Stallikon
mailto:[EMAIL PROTECTED]
PGP Fingerprint: BC9A 25BC 3954 3BC8 C024  8D8A B7D4 FF9D 05B8 0A16


---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


[leaf-user] Fw: host.allow questions

2003-10-16 Thread ALParada
See below. I have made some corections to my earlier post. I guess the
game took most of my attention last night.

Thanks,

Armando

- Original Message - 
From: Ray Olszewski [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, October 16, 2003 3:50 PM
Subject: Re: [leaf-user] Fw: host.allow questions


 At 02:21 PM 10/16/2003 -0400, ALParada wrote:
 Hello,
 
 I am having a problem connecting to weblet. If I leave the
hosts.allow
 file at ALL: 192.168.63.0/255.255.255.0 it will work. If I change it
to
 just a host and not a subnet it fails.

 How do you make this change? As I recall, the only form that
hosts.allow
 and hosts.deny will work with reliably is (for example)

  ALL:192.168.63.11/255.255.255.255

 (not either 192.168.63.11 by itself or 192.168.63.11/32).

Per the Bering installation guide for the host.allow::

If you want that only 192.168.1.1 from your internal network can access
to the firewall through ssh and weblet, you will have:
ssh: 192.168.1.1/255.255.255.255
www: 192.168.1.1/255.255.255.255
stat: 192.168.1.1/255.255.255.255



of course my IP address is 192.168.63.11/255.255.255.255 which will not
work for weblet but will work for ssh, or at least I think it works for
ssh. I get a connecting to host and then starting session. It fails
after that though. Next thread I'll tackle that one.


 The smallest subnet I have been
 able to use successfully is a /28. Everything smaller fails.

 Once again, how are you trying to do this? A /29 netmask is only 8 IP
 addresses, so .1 and .11 (the addresses you are using for router and
 client) can't be on the same 29 network. So

  ALL:192.168.63.11/255.255.255.248

 should NOT work.

You are only limiting the host that can connect, not routing. I don't
think it should make a difference.


 They can be on the same /28 (or smaller netmask value) network, and
they
 are both on 192.168.63.0/28 (which may explain why /28 and smaller
values
 work). But have you tried (with or without success)

  ALL:192.168.63.8/255.255.255.248

What I meant to say was that it works with anything larger that a /28.
That would obviously give me 14 useable host but I was hoping to limit
it to a /32. I also found out that  it works as long as I enter the
network address but will not work with a host address. In other words:

ALL: 192.168.63.8/255.255.255.248 will work for weblet and ssh
ALL: 192.168.63.11/255.255.255.255 will not work for weblet but will
work for ssh

ssh:   192.168.63.11/255.255.255.255 will work
www: 192.168.63.0/255.255.255.0 will not work


 I have
 changed the weblet config file with the right IP address, I have
added
 the rules for shorewall to allow port 80 from loc, and inetd is
 uncommented for www. Like I said with a /24 subnet it works. SSH is
 working correctly from a single host and the config for www is the
same.

 Someone else should comment on this one. It is *possible* that sshd on
 Bering does not use hosts.allow or hosts.deny for access control ... I
 don't actually recall. (BTW, when you say the config is the same, do
you
 mean that you are running sshd through inetd, not standalone? If not,
in
 what sense are the it and www ... and telnet ... the same?)

I meant the syntax is the same for both and I have added them all to the
files host.allow and the shorewall rules ...etc. I did notice that the
shorewall rules don't influence the connection. I deleted both entries
for port 80 and 22 and I still connected.

 Telnet is also not working, period. Again the config is the same for
 SSH. Is there something I'm missing?

 The telnetd daemon, perhaps? I'd be surprised if stock Bering shipped
with
 it, and I don't see a telnet.lrp or telnetd.lrp package anywhere in
 Jacques' archives.

Not really important I was just wanted to test something else.

 I also read something about bandwidth meter of sorts but can't find
it.
 Is this something that is not included in the default package?
 
 I am using Bering v 1.2
 eth1 is loc 192.168.63.1
 loc host is 192.168.63.11





 ---
 This SF.net email is sponsored by: SF.net Giveback Program.
 SourceForge.net hosts over 70,000 Open Source Projects.
 See the people who have HELPED US provide better services:
 Click here: http://sourceforge.net/supporters.php
 --
--
 leaf-user mailing list: [EMAIL PROTECTED]
 https://lists.sourceforge.net/lists/listinfo/leaf-user
 SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html




---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]

Re: [leaf-user] WAP

2003-10-16 Thread C. Dummy
 I bought D-link 714 P+. There is no option to disable firewall on this 
router.From FAQ: You cannot disable the firewall on the router. D-Link 
routers use *NAT* (Network Address Translation) which allows multiple 
hosts to share a single address and make many concurrent connections. 
All D-Link routers have a DMZ option which will open all incoming ports 
to a single computer on your local network. That gives me connection to 
one computer using firewall from Bering box. I'm not sure if double NAT 
is good. There would be NAT from Bering box and than NAT from Router. 
Unless Bering box will treat router as a single IP adress and Router 
will NAT wireless machines.
Anybody has any ideas how to make all these connections. I have Bering 
(1.2) box, running 3 computers on switch. Simple two interface setup. I 
need WAP  for  2 laptops at the pick to browse internet. From what I 
read I should switch to 3 interfaces setup and put WiFi router on third 
NIC in DMZ. That would give me double NAT. Will this work? Should I try 
different setup?
Andrey

M Lu wrote:

I am not familiar to the 'scope' thing, but I am sure you do not need 
the router, you need only the access point if you connect your WAP to 
a separate NIC in the Bering router. I disable the router function in 
my D-Link 713P.

M Lu.


From: C. Dummy [EMAIL PROTECTED]
To: Steve Wright [EMAIL PROTECTED]
CC: LEAF-USER [EMAIL PROTECTED]
Subject: Re: [leaf-user] WAP
Date: Sat, 06 Sep 2003 17:00:29 -0400
better solution? But do I really need wap router in this case or


_
MSN 8 with e-mail virus protection service: 2 months FREE*  
http://join.msn.com/?page=features/virus







---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] WAP

2003-10-16 Thread Ray Olszewski
At 10:08 PM 10/16/2003 -0400, C. Dummy wrote:
 I bought D-link 714 P+. There is no option to disable firewall on this 
router.From FAQ: You cannot disable the firewall on the router. D-Link 
routers use *NAT* (Network Address Translation) which allows multiple 
hosts to share a single address and make many concurrent connections. All 
D-Link routers have a DMZ option which will open all incoming ports to a 
single computer on your local network. That gives me connection to one 
computer using firewall from Bering box. I'm not sure if double NAT is 
good. There would be NAT from Bering box and than NAT from Router. Unless 
Bering box will treat router as a single IP adress and Router will NAT 
wireless machines.
Anybody has any ideas how to make all these connections. I have Bering 
(1.2) box, running 3 computers on switch. Simple two interface setup. I 
need WAP  for  2 laptops at the pick to browse internet. From what I read 
I should switch to 3 interfaces setup and put WiFi router on third NIC in 
DMZ. That would give me double NAT. Will this work? Should I try different 
setup?
Andrey
Well ... one option that will probably work is to use the device just as a 
WAP and ignore the router part entirely. I'm assuming here that the 714 has 
both wireless and UTP ports on the internal side (I have a 713P here, and 
that's what it has). To do this, you connect the LEAF router to an internal 
UTP port on the D-Link and make sure the LEAF interface you use is on the 
same network as the wireless hosts. You also need to tell the wireless 
hosts that the LEAF router, not the D-Link, is their default gateway, whch 
may mean you cannot use the D-Link for DHCP assignment. It's not so much 
that you disable the firewall as that it is that you just don't connect 
the external interface to anything.

I haven't run this WAP recently, but when I did, this sort of configuration 
worked for me. I also used a double-NAT variant of the sort you describe, 
and that worked too (but I didn't test it with anything tricky or demanding).

As to whether to put the WAP on the LAN or on a DMZ arrangement ... that 
depends on the general security model you use with your LAN. There is no 
short, one-size-fits-all answer to that one.





---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


Re: [leaf-user] Compiling for Bering 1.2 and Bering uClibc

2003-10-16 Thread Martin Hejl
Hi James,

 Compiling for Bering 1.2 and uClibc.

 Is it *only* possible to compile for Bering 1.2 with a Debian/slink
 installation?
No - there is no need for a separate install or even UML for compiling 
things for uClibc (unlike with the regular Bering branch). Simply get 
the uClibc used for Bering uClibc 1.2 from www.uclibc.org (look for 
version 0.9.15) and the config/patches from 
http://cvs.sourceforge.net/viewcvs.py/leaf/src/bering-uclibc/configs/uclibc/0.9.15/
and you should be all set.

If you want to be really bleading edge, you can get buildtool (see 
http://lrp.hejl.de/devel/book1.html on how to get it and how to get 
started with it) - it takes a little more work for setup on compiling 
programs the first time, but it pays off in the long run (I surely found 
that out with the recent ssh updates). But that only works for Bering 
uClibc 2.0 (which uses uClibc 0.9.20 - hopefully soon the versions of 
uClibc will be the binary combatible between at least minor releases).

 Or can I take, say, Mandrake 9 and compile with a target OS? Just tell
 it which Glibc to use for instance. And install a different gcc.
 Will that work?
It should - have a look at the docs at uclibc.org for info on that - but 
be sure to use the exact same version of uclibc as in Bering uClibc 1.2 
when compiling - otherwise you'll run into trouble.

Martin



---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US provide better services:
Click here: http://sourceforge.net/supporters.php

leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html