Bezeq's ADSL and FreeBSD

2001-11-16 Thread Nimrod Mesika

Did anyone have any success making FreeBSD work with Bezeq's ADSL
service?

-- 
Nimrod.



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Patching Ximian Evolution to show the weather in Israel (patch included)

2001-11-16 Thread Yosi

Hi,

If you are an Evolution user, you probably know that on the My Evolution 
tab
you can customize the weather section. However, for some reason Evolution 
never
showed the weather in Israel. Well, I wrote a small patch that fixes that
problem, and lets Evolution display the weather in Israel as well.I 
submitted
it to the developers, but I don't know if it will get in for v1.0
Anyway, I'm attaching it to this message, in case you want to use it.
On my installation (Evo for RH7.2) the file that needs to be patched is
/usr/share/evolution/Locations

Comments will be greatly appreciated

Sincerely,
Yosi

--- Locations.orig  Thu Nov 15 18:48:05 2001
+++ Locations   Thu Nov 15 19:02:04 2001
@@ -3,7 +3,13 @@

[ME]
name=Middle East
-states=DZ BH IR KW LB OM QA SA AE YE
+states=DZ BH IR IL KW LB OM QA SA AE YE
+
+[ME_IL]
+name=Israel
+loc0=Ben\\ Gurion\\ International\\ Airport LLBG -- ---
+loc1=Eilat LLET -- ---
+loc2=Ovda LLOV -- ---

[ME_AE]
name=United Arab Emirates



_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




test

2001-11-16 Thread Game Wizard

test



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Patching Ximian Evolution to show the weather in Israel (patch included)

2001-11-16 Thread Ilya Konstantinov

On Fri, Nov 16, 2001 at 08:50:09AM +, Yosi wrote:
 Comments will be greatly appreciated

Very good initiative. Please attach this fix to bug 7568
( http://bugzilla.ximian.com/show_bug.cgi?id=7568 ) and it will likely
enter 1.0.

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Patching Ximian Evolution to show the weather in Israel (patch included)

2001-11-16 Thread Yosi

Hi Ilya,

Read my original e-mail again. I already submitted the patch
to the person responsible for bug 7568. However, I'm not sure it
will enter to v1.0

While on the subject, if anyone on the list knows the codes to
other places in Israel (Jerusalem, Haifa, Tel-Aviv...) please
let me know, and I'll update the file with those locations as
well. Currently only Eilat, Ben Gurion Airport and Ovda are
being shown.

Yosi

From: Ilya Konstantinov [EMAIL PROTECTED]
To: Yosi [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: Re: Patching Ximian Evolution to show the weather in Israel (patch 
included)
Date: Fri, 16 Nov 2001 13:25:52 +0200
On Fri, Nov 16, 2001 at 08:50:09AM +, Yosi wrote:
  Comments will be greatly appreciated

Very good initiative. Please attach this fix to bug 7568
( http://bugzilla.ximian.com/show_bug.cgi?id=7568 ) and it will likely
enter 1.0.


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Linux(2.4.x) and masqeurating

2001-11-16 Thread Avishay Aton



Hi,
i connect to the net with pptp + adsl, and i use 
nat on my linux box(2.4.x) for other computers on
my private network.
My nat rule is simple one: 

modprobe iptable_nat
modprobe ip_conntrack_ftp
iptables -t nat -A POSTROUTING -o ppp0 -j 
MASQUERADE


I can get most of the sites , but for example www.linuxtoday.com dosn't work for 
me.
also , imap client sometimes work , sometimes dosn't.
and finally "secure remote" ?! anyone sucsseded to connect with nat + FWZ 
?
Thanks
Avishay


Re: Bezeq's ADSL and FreeBSD

2001-11-16 Thread Avishay Aton

sure,just take mulix pptp tar
and use it instead of the pptp tar in the ports collection.(put it in
/usr/ports/distfiles)
go to /usr/ports/net/pptp , make install clean

- Original Message - 
From: Nimrod Mesika [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 4:29 PM
Subject: Bezeq's ADSL and FreeBSD


 Did anyone have any success making FreeBSD work with Bezeq's ADSL
 service?
 
 -- 
 Nimrod.
 
 
 
 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]
 
 


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Bezeq's ADSL and FreeBSD

2001-11-16 Thread Avishay Aton

You can choose whatever you want(ppp-user or ppp-kernel)
just change the PPPd_BINARY= in the Makefile to what ever ppp you want to
use.
Also for nat,use ipfilter(a great packet filtering for BSD'S).to enable nat
, just create new
/etc/ipnat.rules
and put this in:
map tun0 10.0.0.0/8 - 0/32 portmap tcp/udp 2:3

then invoke ipnat -CF -f /etc/inpnat.rules
of course,make sure that ipfilter is compiled to the kernel
Cheers
Avishay

- Original Message -
From: Nimrod Mesika [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 4:58 PM
Subject: Re: Bezeq's ADSL and FreeBSD


 Thanks!

 Just wanted to make sure before I order the service.

 By the way, pptp seems to be running pppd and I'm kind of used to
 user-ppp (never did get the kernel ppp to work with my ISDN
 line).. Does that mean I have to enable kernel ppp support?

 On Fri, Nov 16, 2001 at 04:49:51PM +0200, Avishay Aton wrote:
  sure,just take mulix pptp tar
  and use it instead of the pptp tar in the ports collection.(put it in
  /usr/ports/distfiles)
  go to /usr/ports/net/pptp , make install clean

 --
 Nimrod.





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




test

2001-11-16 Thread Game Wizard

test
ðñéåï



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Dani Arbel

Avisay,
1) send a complete list of your rules + ifconfig output
2) what is secure remote?
3) when you fail to connect somewhere, there should be a message in the
log containing the droped packet description (unless you have not put log
rules ). That can help in catching the problem.


On Fri, 16 Nov 2001, Avishay Aton wrote:

 Hi,
 i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for 
other computers on
 my private network.
 My nat rule is simple one:

 modprobe iptable_nat
 modprobe ip_conntrack_ftp
 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE


 I can get most of the sites , but for example www.linuxtoday.com dosn't work for me.
 also , imap client sometimes work , sometimes dosn't.
 and finally secure remote ?! anyone sucsseded to connect with nat + FWZ ?
 Thanks
 Avishay



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Matan Ziv-Av

On Fri, 16 Nov 2001, Avishay Aton wrote:

 Hi,
 i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for 
other computers on
 my private network.
 My nat rule is simple one:
 
 modprobe iptable_nat
 modprobe ip_conntrack_ftp
 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 
 
 I can get most of the sites , but for example www.linuxtoday.com dosn't work for me.

Does it work from the router itself?
If not, it sounds like ECN problem.


-- 
Matan Ziv-Av. [EMAIL PROTECTED]



=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Avishay Aton

sure,everything works great from the router(linux/freebsd - i switch between
them)
but from the Lan , i can't get some sites(linuxtoday.com ,
alcatel.com.)
from snort ouput i can see the first stage of the connection(3 hand shaking)
- Original Message -
From: Matan Ziv-Av [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 8:32 PM
Subject: Re: Linux(2.4.x) and masqeurating


 On Fri, 16 Nov 2001, Avishay Aton wrote:

  Hi,
  i connect to the net with pptp + adsl, and i use nat on my linux
box(2.4.x) for other computers on
  my private network.
  My nat rule is simple one:
 
  modprobe iptable_nat
  modprobe ip_conntrack_ftp
  iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 
 
  I can get most of the sites , but for example www.linuxtoday.com dosn't
work for me.

 Does it work from the router itself?
 If not, it sounds like ECN problem.


 --
 Matan Ziv-Av. [EMAIL PROTECTED]





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Avishay Aton

I didn't enable ECN in the kernel from the first place(because of past
reports of problem
with this feature)

- Original Message -
From: Matan Ziv-Av [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 8:32 PM
Subject: Re: Linux(2.4.x) and masqeurating


 On Fri, 16 Nov 2001, Avishay Aton wrote:

  Hi,
  i connect to the net with pptp + adsl, and i use nat on my linux
box(2.4.x) for other computers on
  my private network.
  My nat rule is simple one:
 
  modprobe iptable_nat
  modprobe ip_conntrack_ftp
  iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
 
 
  I can get most of the sites , but for example www.linuxtoday.com dosn't
work for me.

 Does it work from the router itself?
 If not, it sounds like ECN problem.


 --
 Matan Ziv-Av. [EMAIL PROTECTED]





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Sagi Bashari

Hi Avishay,

Have you tried to reduce the MTU on the internal hosts to 1452? (see the 
bottom of the adsl howto if you don't know how).

If you're using netfilter you can just use: 'iptables -A FORWARD -p tcp 
--tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu' instead.

Sagi


On Friday 16 November 2001 21:03, Avishay Aton wrote:
 sure,everything works great from the router(linux/freebsd - i switch
 between them)
 but from the Lan , i can't get some sites(linuxtoday.com ,
 alcatel.com.)
 from snort ouput i can see the first stage of the connection(3 hand
 shaking) - Original Message -
 From: Matan Ziv-Av [EMAIL PROTECTED]
 To: Avishay Aton [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Sent: Friday, November 16, 2001 8:32 PM
 Subject: Re: Linux(2.4.x) and masqeurating

  On Fri, 16 Nov 2001, Avishay Aton wrote:
   Hi,
   i connect to the net with pptp + adsl, and i use nat on my linux

 box(2.4.x) for other computers on

   my private network.
   My nat rule is simple one:
  
   modprobe iptable_nat
   modprobe ip_conntrack_ftp
   iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
  
  
   I can get most of the sites , but for example www.linuxtoday.com dosn't

 work for me.

  Does it work from the router itself?
  If not, it sounds like ECN problem.
 
 
  --
  Matan Ziv-Av. [EMAIL PROTECTED]

 =
 To unsubscribe, send mail to [EMAIL PROTECTED] with
 the word unsubscribe in the message body, e.g., run the command
 echo unsubscribe | mail [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Fw: Linux(2.4.x) and masqeurating

2001-11-16 Thread Avishay Aton


- Original Message -
From: Avishay Aton [EMAIL PROTECTED]
To: Dani Arbel [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 9:58 PM
Subject: Re: Linux(2.4.x) and masqeurating


 GREAT,this was the problem. i have inserted the following rule in FORWARD
 chain
 nad it works..
 iptables -I FORWARD -p tcp --tcp-flags SYN,RST,SYN -j
 TCPMSS --clamp-mss-to-pmtu

 all i have to do is changing  tcpmss in ipfilter on FreeBSD.

 Thanks
 - Original Message -
 From: Dani Arbel [EMAIL PROTECTED]
 To: Avishay Aton [EMAIL PROTECTED]
 Sent: Friday, November 16, 2001 9:44 PM
 Subject: Re: Linux(2.4.x) and masqeurating


  Avishai,
  You are probably a victim of blackholing. go to:
  http://damyen.technion.ac.il/~dani/
  read about the ADsL MTU issu , and see in the iptables example there the
  line with tcp_mss that you should add to your script.
  Dani
 
  On Fri, 16 Nov 2001, Avishay Aton wrote:
 
   I didn't enable ECN on my last kernel compilation(2.4.14)
   My configuration:
   uname -a
   Linux rasta 2.4.14-ext3 #1 Fri Nov 16 19:35:20 IST 2001 i686 unknown
  
  
   [root@rasta root]# ifconfig
   eth0  Link encap:Ethernet  HWaddr 00:50:DA:1C:76:6B
 inet addr:10.0.0.140  Bcast:10.255.255.255  Mask:255.0.0.0
 UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
 RX packets:702 errors:1 dropped:0 overruns:0 frame:2
 TX packets:1001 errors:0 dropped:0 overruns:0 carrier:0
 collisions:2 txqueuelen:100
 RX bytes:149791 (146.2 Kb)  TX bytes:121058 (118.2 Kb)
 Interrupt:9 Base address:0x1400
  
   eth1  Link encap:Ethernet  HWaddr 00:A0:C9:B0:0D:43
 inet addr:10.0.0.141  Bcast:10.255.255.255  Mask:255.0.0.0
 UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
 RX packets:90 errors:0 dropped:0 overruns:0 frame:0
 TX packets:51 errors:0 dropped:0 overruns:0 carrier:0
 collisions:0 txqueuelen:100
 RX bytes:10178 (9.9 Kb)  TX bytes:3007 (2.9 Kb)
 Interrupt:10
  
   loLink encap:Local Loopback
 inet addr:127.0.0.1  Mask:255.0.0.0
 UP LOOPBACK RUNNING  MTU:16436  Metric:1
 RX packets:37 errors:0 dropped:0 overruns:0 frame:0
 TX packets:37 errors:0 dropped:0 overruns:0 carrier:0
 collisions:0 txqueuelen:0
 RX bytes:2176 (2.1 Kb)  TX bytes:2176 (2.1 Kb)
  
   ppp0  Link encap:Point-to-Point Protocol
 inet addr:212.143.40.233  P-t-P:212.143.32.1
 Mask:255.255.255.255
 UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1452  Metric:1
 RX packets:198 errors:0 dropped:0 overruns:0 frame:0
 TX packets:205 errors:0 dropped:0 overruns:0 carrier:0
 collisions:0 txqueuelen:3
 RX bytes:90908 (88.7 Kb)  TX bytes:26131 (25.5 Kb)
  
  
  
   and Finally my rules
  
  
   [root@rasta root]# cat fw.rules
   #!/bin/sh
   ## open up pptp connection
   echo Connecting to the net
   /usr/bin/pptp 10.0.0.138
   sleep 3
   if ifconfig | grep -q ppp
   then
   echo looking good,now let's secure our connection!
  
   ## initialize iptables
   echo Firewall initialization
  
   modprobe  ipt_state || exit 1
   modprobe iptable_nat || exit 1
   modprobe ip_conntrack_ftp || exit 1
   modprobe ipt_LOG || exit 1
  
  
   iptables -N block
   iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
   iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT
   iptables -A block -j DROP
   iptables -A INPUT -j block
   iptables -A FORWARD -j block
  
   echo Now for NAT - only MASQUERDAING!!
   iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
   echo iptables is up `date`
  
   The end
   Thanks
  
  
   - Original Message -
   From: Dani Arbel [EMAIL PROTECTED]
   To: Avishay Aton [EMAIL PROTECTED]
   Cc: [EMAIL PROTECTED]
   Sent: Friday, November 16, 2001 6:54 PM
   Subject: Re: Linux(2.4.x) and masqeurating
  
  
Avisay,
1) send a complete list of your rules + ifconfig output
2) what is secure remote?
3) when you fail to connect somewhere, there should be a message in
 the
log containing the droped packet description (unless you have not
put
 log
rules ). That can help in catching the problem.
   
   
On Fri, 16 Nov 2001, Avishay Aton wrote:
   
 Hi,
 i connect to the net with pptp + adsl, and i use nat on my linux
   box(2.4.x) for other computers on
 my private network.
 My nat rule is simple one:

 modprobe iptable_nat
 modprobe ip_conntrack_ftp
 iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE


 I can get most of the sites , but for example www.linuxtoday.com
 dosn't
   work for me.
 also , imap client sometimes work , sometimes dosn't.
 and finally secure remote ?! anyone sucsseded to connect with
nat
 +
   FWZ ?
 Thanks
 Avishay

   
   

Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Avishay Aton

sure,i will send  detailed howto for freebsd in a week,
for openbsd , it will take 2 weeks.
Thanks
Avishay


- Original Message -
From: Dani Arbel [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 10:02 PM
Subject: Re: Linux(2.4.x) and masqeurating


 Avishai,
 If you have ADSL running on FreeBSD, it would be nice if you send us the
 relevant info so we can add suport to it in our Linux ADSL howto.
 Thanks,
 Dani

 On Fri, 16 Nov 2001, Avishay Aton wrote:

  GREAT,this was the problem. i have inserted the following rule in
FORWARD
  chain
  nad it works..
  iptables -I FORWARD -p tcp --tcp-flags SYN,RST,SYN -j
  TCPMSS --clamp-mss-to-pmtu
 
  all i have to do is changing  tcpmss in ipfilter on FreeBSD.
 
  Thanks
  - Original Message -
  From: Dani Arbel [EMAIL PROTECTED]
  To: Avishay Aton [EMAIL PROTECTED]
  Sent: Friday, November 16, 2001 9:44 PM
  Subject: Re: Linux(2.4.x) and masqeurating
 
 
   Avishai,
   You are probably a victim of blackholing. go to:
   http://damyen.technion.ac.il/~dani/
   read about the ADsL MTU issu , and see in the iptables example there
the
   line with tcp_mss that you should add to your script.
   Dani
  
   On Fri, 16 Nov 2001, Avishay Aton wrote:
  
I didn't enable ECN on my last kernel compilation(2.4.14)
My configuration:
uname -a
Linux rasta 2.4.14-ext3 #1 Fri Nov 16 19:35:20 IST 2001 i686 unknown
   
   
[root@rasta root]# ifconfig
eth0  Link encap:Ethernet  HWaddr 00:50:DA:1C:76:6B
  inet addr:10.0.0.140  Bcast:10.255.255.255  Mask:255.0.0.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:702 errors:1 dropped:0 overruns:0 frame:2
  TX packets:1001 errors:0 dropped:0 overruns:0 carrier:0
  collisions:2 txqueuelen:100
  RX bytes:149791 (146.2 Kb)  TX bytes:121058 (118.2 Kb)
  Interrupt:9 Base address:0x1400
   
eth1  Link encap:Ethernet  HWaddr 00:A0:C9:B0:0D:43
  inet addr:10.0.0.141  Bcast:10.255.255.255  Mask:255.0.0.0
  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
  RX packets:90 errors:0 dropped:0 overruns:0 frame:0
  TX packets:51 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:100
  RX bytes:10178 (9.9 Kb)  TX bytes:3007 (2.9 Kb)
  Interrupt:10
   
loLink encap:Local Loopback
  inet addr:127.0.0.1  Mask:255.0.0.0
  UP LOOPBACK RUNNING  MTU:16436  Metric:1
  RX packets:37 errors:0 dropped:0 overruns:0 frame:0
  TX packets:37 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:2176 (2.1 Kb)  TX bytes:2176 (2.1 Kb)
   
ppp0  Link encap:Point-to-Point Protocol
  inet addr:212.143.40.233  P-t-P:212.143.32.1
  Mask:255.255.255.255
  UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1452  Metric:1
  RX packets:198 errors:0 dropped:0 overruns:0 frame:0
  TX packets:205 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:3
  RX bytes:90908 (88.7 Kb)  TX bytes:26131 (25.5 Kb)
   
   
   
and Finally my rules
   
   
[root@rasta root]# cat fw.rules
#!/bin/sh
## open up pptp connection
echo Connecting to the net
/usr/bin/pptp 10.0.0.138
sleep 3
if ifconfig | grep -q ppp
then
echo looking good,now let's secure our connection!
   
## initialize iptables
echo Firewall initialization
   
modprobe  ipt_state || exit 1
modprobe iptable_nat || exit 1
modprobe ip_conntrack_ftp || exit 1
modprobe ipt_LOG || exit 1
   
   
iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT
iptables -A block -j DROP
iptables -A INPUT -j block
iptables -A FORWARD -j block
   
echo Now for NAT - only MASQUERDAING!!
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
echo iptables is up `date`
   
The end
Thanks
   
   
- Original Message -
From: Dani Arbel [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 6:54 PM
Subject: Re: Linux(2.4.x) and masqeurating
   
   
 Avisay,
 1) send a complete list of your rules + ifconfig output
 2) what is secure remote?
 3) when you fail to connect somewhere, there should be a message
in
  the
 log containing the droped packet description (unless you have not
put
  log
 rules ). That can help in catching the problem.


 On Fri, 16 Nov 2001, Avishay Aton wrote:

  Hi,
  i connect to the net with pptp + adsl, and i use nat on my linux
box(2.4.x) for other computers on
  my private network.
  My nat rule is simple one:
 
  modprobe 

Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Shachar Shemesh

Avishay Aton wrote:

 and finally secure remote ?! anyone sucsseded to connect with nat + 
 FWZ ?

Securemote has some option somewhere always encapsulate UDP packets. 
You need to check that on when you connect from a non-routable network 
(i.e. - behind a NAT).

 Thanks

 Avishay





=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




Re: Linux(2.4.x) and masqeurating

2001-11-16 Thread Shachar Shemesh

Avishay Aton wrote:

my connection is with mtu=1452 and mtu=1452
no errors and packet drops with my ifconfig -i.
Avishay

Not good enough. You need to actually reduce the MTU on the machines on 
the internal LAN, or apply an IP Tables rule that allows MSS rewriting. 
I have absolutely zero experience with the later, so if you want help 
from me, go for the former.



- Original Message -
From: Sagi Bashari [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 9:17 PM
Subject: Re: Linux(2.4.x) and masqeurating


Hi Avishay,

Have you tried to reduce the MTU on the internal hosts to 1452? (see the
bottom of the adsl howto if you don't know how).

If you're using netfilter you can just use: 'iptables -A FORWARD -p tcp
--tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu' instead.

Sagi


On Friday 16 November 2001 21:03, Avishay Aton wrote:

sure,everything works great from the router(linux/freebsd - i switch
between them)
but from the Lan , i can't get some sites(linuxtoday.com ,
alcatel.com.)
from snort ouput i can see the first stage of the connection(3 hand
shaking) - Original Message -
From: Matan Ziv-Av [EMAIL PROTECTED]
To: Avishay Aton [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, November 16, 2001 8:32 PM
Subject: Re: Linux(2.4.x) and masqeurating

On Fri, 16 Nov 2001, Avishay Aton wrote:

Hi,
i connect to the net with pptp + adsl, and i use nat on my linux

box(2.4.x) for other computers on

my private network.
My nat rule is simple one:

modprobe iptable_nat
modprobe ip_conntrack_ftp
iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE


I can get most of the sites , but for example www.linuxtoday.com

dosn't

work for me.

Does it work from the router itself?
If not, it sounds like ECN problem.


--
Matan Ziv-Av. [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]







=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]




mandrake kernel and /boot/kernel.h

2001-11-16 Thread Tzafrir Cohen

Hi

I'm trying to compile a recent Mandrake kernel. The system is Mandrake 7.2
.

The computer did not have /boot/kernel.h . I got an error from some
include file trying to include it (include/linux/rhconfig.h) . It seems to
be vcreated at boot-time by the init scripts, and is used to give the
parameters of the current kernel (e.g: is it SMP), because this kernel has
passed the ultimate test of booting the system.

However, my system did not have it. I tried to use an empty file and got
some compile errors. Then I decided to copy /boot/kernel.h from another
system that has a similar kernel, but more recent init scripts.

However, I still get compilation errors that seem related: half-way in the
compilation I get:



/usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `get_pgd_fast':
/usr/src/linux-2.4.13/include/asm/pgalloc.h:74: `boot_cpu_data_R65dda927' undeclared 
(first use in this function)
/usr/src/linux-2.4.13/include/asm/pgalloc.h:74: (Each undeclared identifier is 
reported only once
/usr/src/linux-2.4.13/include/asm/pgalloc.h:74: for each function it appears in.)
/usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `free_pgd_fast':
/usr/src/linux-2.4.13/include/asm/pgalloc.h:85: `boot_cpu_data_R65dda927' undeclared 
(first use in this function)
/usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `pte_alloc_one_fast':
/usr/src/linux-2.4.13/include/asm/pgalloc.h:122: `boot_cpu_data_R65dda927' undeclared 
(first use in this function)
/usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `pte_free_fast':
/usr/src/linux-2.4.13/include/asm/pgalloc.h:132: `boot_cpu_data_R65dda927'
undeclared (first use in this function)
loop.c: In function `lo_send':
loop.c:536: warning: suggest parentheses around + or - inside shift
loop.c: In function `loop_set_fd':
loop.c:950: warning: implicit declaration of function `kernel_thread_R7e9ebb05'
make[2]: *** [loop.o] Error 1
make[2]: Leaving directory `/usr/src/linux-2.4.13/drivers/block'


A web search hasn't produced useful results yet. I tried to see how I can
disable this usage of the current configuration, but I can't find a simple
way.

Anybody here encountered this before? I rather simply disable this copying
of options. Any iea how?

Thanks

-- 
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir


=
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word unsubscribe in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]