Bezeq's ADSL and FreeBSD
Did anyone have any success making FreeBSD work with Bezeq's ADSL service? -- Nimrod. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Patching Ximian Evolution to show the weather in Israel (patch included)
Hi, If you are an Evolution user, you probably know that on the My Evolution tab you can customize the weather section. However, for some reason Evolution never showed the weather in Israel. Well, I wrote a small patch that fixes that problem, and lets Evolution display the weather in Israel as well.I submitted it to the developers, but I don't know if it will get in for v1.0 Anyway, I'm attaching it to this message, in case you want to use it. On my installation (Evo for RH7.2) the file that needs to be patched is /usr/share/evolution/Locations Comments will be greatly appreciated Sincerely, Yosi --- Locations.orig Thu Nov 15 18:48:05 2001 +++ Locations Thu Nov 15 19:02:04 2001 @@ -3,7 +3,13 @@ [ME] name=Middle East -states=DZ BH IR KW LB OM QA SA AE YE +states=DZ BH IR IL KW LB OM QA SA AE YE + +[ME_IL] +name=Israel +loc0=Ben\\ Gurion\\ International\\ Airport LLBG -- --- +loc1=Eilat LLET -- --- +loc2=Ovda LLOV -- --- [ME_AE] name=United Arab Emirates _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
test
test = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Patching Ximian Evolution to show the weather in Israel (patch included)
On Fri, Nov 16, 2001 at 08:50:09AM +, Yosi wrote: Comments will be greatly appreciated Very good initiative. Please attach this fix to bug 7568 ( http://bugzilla.ximian.com/show_bug.cgi?id=7568 ) and it will likely enter 1.0. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Patching Ximian Evolution to show the weather in Israel (patch included)
Hi Ilya, Read my original e-mail again. I already submitted the patch to the person responsible for bug 7568. However, I'm not sure it will enter to v1.0 While on the subject, if anyone on the list knows the codes to other places in Israel (Jerusalem, Haifa, Tel-Aviv...) please let me know, and I'll update the file with those locations as well. Currently only Eilat, Ben Gurion Airport and Ovda are being shown. Yosi From: Ilya Konstantinov [EMAIL PROTECTED] To: Yosi [EMAIL PROTECTED] CC: [EMAIL PROTECTED] Subject: Re: Patching Ximian Evolution to show the weather in Israel (patch included) Date: Fri, 16 Nov 2001 13:25:52 +0200 On Fri, Nov 16, 2001 at 08:50:09AM +, Yosi wrote: Comments will be greatly appreciated Very good initiative. Please attach this fix to bug 7568 ( http://bugzilla.ximian.com/show_bug.cgi?id=7568 ) and it will likely enter 1.0. _ Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Linux(2.4.x) and masqeurating
Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. also , imap client sometimes work , sometimes dosn't. and finally "secure remote" ?! anyone sucsseded to connect with nat + FWZ ? Thanks Avishay
Re: Bezeq's ADSL and FreeBSD
sure,just take mulix pptp tar and use it instead of the pptp tar in the ports collection.(put it in /usr/ports/distfiles) go to /usr/ports/net/pptp , make install clean - Original Message - From: Nimrod Mesika [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 4:29 PM Subject: Bezeq's ADSL and FreeBSD Did anyone have any success making FreeBSD work with Bezeq's ADSL service? -- Nimrod. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Bezeq's ADSL and FreeBSD
You can choose whatever you want(ppp-user or ppp-kernel) just change the PPPd_BINARY= in the Makefile to what ever ppp you want to use. Also for nat,use ipfilter(a great packet filtering for BSD'S).to enable nat , just create new /etc/ipnat.rules and put this in: map tun0 10.0.0.0/8 - 0/32 portmap tcp/udp 2:3 then invoke ipnat -CF -f /etc/inpnat.rules of course,make sure that ipfilter is compiled to the kernel Cheers Avishay - Original Message - From: Nimrod Mesika [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Sent: Friday, November 16, 2001 4:58 PM Subject: Re: Bezeq's ADSL and FreeBSD Thanks! Just wanted to make sure before I order the service. By the way, pptp seems to be running pppd and I'm kind of used to user-ppp (never did get the kernel ppp to work with my ISDN line).. Does that mean I have to enable kernel ppp support? On Fri, Nov 16, 2001 at 04:49:51PM +0200, Avishay Aton wrote: sure,just take mulix pptp tar and use it instead of the pptp tar in the ports collection.(put it in /usr/ports/distfiles) go to /usr/ports/net/pptp , make install clean -- Nimrod. = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
test
test ðñéåï = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
Avisay, 1) send a complete list of your rules + ifconfig output 2) what is secure remote? 3) when you fail to connect somewhere, there should be a message in the log containing the droped packet description (unless you have not put log rules ). That can help in catching the problem. On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. also , imap client sometimes work , sometimes dosn't. and finally secure remote ?! anyone sucsseded to connect with nat + FWZ ? Thanks Avishay = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. Does it work from the router itself? If not, it sounds like ECN problem. -- Matan Ziv-Av. [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
sure,everything works great from the router(linux/freebsd - i switch between them) but from the Lan , i can't get some sites(linuxtoday.com , alcatel.com.) from snort ouput i can see the first stage of the connection(3 hand shaking) - Original Message - From: Matan Ziv-Av [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 8:32 PM Subject: Re: Linux(2.4.x) and masqeurating On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. Does it work from the router itself? If not, it sounds like ECN problem. -- Matan Ziv-Av. [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
I didn't enable ECN in the kernel from the first place(because of past reports of problem with this feature) - Original Message - From: Matan Ziv-Av [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 8:32 PM Subject: Re: Linux(2.4.x) and masqeurating On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. Does it work from the router itself? If not, it sounds like ECN problem. -- Matan Ziv-Av. [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
Hi Avishay, Have you tried to reduce the MTU on the internal hosts to 1452? (see the bottom of the adsl howto if you don't know how). If you're using netfilter you can just use: 'iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu' instead. Sagi On Friday 16 November 2001 21:03, Avishay Aton wrote: sure,everything works great from the router(linux/freebsd - i switch between them) but from the Lan , i can't get some sites(linuxtoday.com , alcatel.com.) from snort ouput i can see the first stage of the connection(3 hand shaking) - Original Message - From: Matan Ziv-Av [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 8:32 PM Subject: Re: Linux(2.4.x) and masqeurating On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. Does it work from the router itself? If not, it sounds like ECN problem. -- Matan Ziv-Av. [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Fw: Linux(2.4.x) and masqeurating
- Original Message - From: Avishay Aton [EMAIL PROTECTED] To: Dani Arbel [EMAIL PROTECTED] Sent: Friday, November 16, 2001 9:58 PM Subject: Re: Linux(2.4.x) and masqeurating GREAT,this was the problem. i have inserted the following rule in FORWARD chain nad it works.. iptables -I FORWARD -p tcp --tcp-flags SYN,RST,SYN -j TCPMSS --clamp-mss-to-pmtu all i have to do is changing tcpmss in ipfilter on FreeBSD. Thanks - Original Message - From: Dani Arbel [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Sent: Friday, November 16, 2001 9:44 PM Subject: Re: Linux(2.4.x) and masqeurating Avishai, You are probably a victim of blackholing. go to: http://damyen.technion.ac.il/~dani/ read about the ADsL MTU issu , and see in the iptables example there the line with tcp_mss that you should add to your script. Dani On Fri, 16 Nov 2001, Avishay Aton wrote: I didn't enable ECN on my last kernel compilation(2.4.14) My configuration: uname -a Linux rasta 2.4.14-ext3 #1 Fri Nov 16 19:35:20 IST 2001 i686 unknown [root@rasta root]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:DA:1C:76:6B inet addr:10.0.0.140 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:702 errors:1 dropped:0 overruns:0 frame:2 TX packets:1001 errors:0 dropped:0 overruns:0 carrier:0 collisions:2 txqueuelen:100 RX bytes:149791 (146.2 Kb) TX bytes:121058 (118.2 Kb) Interrupt:9 Base address:0x1400 eth1 Link encap:Ethernet HWaddr 00:A0:C9:B0:0D:43 inet addr:10.0.0.141 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:90 errors:0 dropped:0 overruns:0 frame:0 TX packets:51 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:10178 (9.9 Kb) TX bytes:3007 (2.9 Kb) Interrupt:10 loLink encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:37 errors:0 dropped:0 overruns:0 frame:0 TX packets:37 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2176 (2.1 Kb) TX bytes:2176 (2.1 Kb) ppp0 Link encap:Point-to-Point Protocol inet addr:212.143.40.233 P-t-P:212.143.32.1 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1452 Metric:1 RX packets:198 errors:0 dropped:0 overruns:0 frame:0 TX packets:205 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:90908 (88.7 Kb) TX bytes:26131 (25.5 Kb) and Finally my rules [root@rasta root]# cat fw.rules #!/bin/sh ## open up pptp connection echo Connecting to the net /usr/bin/pptp 10.0.0.138 sleep 3 if ifconfig | grep -q ppp then echo looking good,now let's secure our connection! ## initialize iptables echo Firewall initialization modprobe ipt_state || exit 1 modprobe iptable_nat || exit 1 modprobe ip_conntrack_ftp || exit 1 modprobe ipt_LOG || exit 1 iptables -N block iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT iptables -A block -j DROP iptables -A INPUT -j block iptables -A FORWARD -j block echo Now for NAT - only MASQUERDAING!! iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE echo iptables is up `date` The end Thanks - Original Message - From: Dani Arbel [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 6:54 PM Subject: Re: Linux(2.4.x) and masqeurating Avisay, 1) send a complete list of your rules + ifconfig output 2) what is secure remote? 3) when you fail to connect somewhere, there should be a message in the log containing the droped packet description (unless you have not put log rules ). That can help in catching the problem. On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. also , imap client sometimes work , sometimes dosn't. and finally secure remote ?! anyone sucsseded to connect with nat + FWZ ? Thanks Avishay
Re: Linux(2.4.x) and masqeurating
sure,i will send detailed howto for freebsd in a week, for openbsd , it will take 2 weeks. Thanks Avishay - Original Message - From: Dani Arbel [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Sent: Friday, November 16, 2001 10:02 PM Subject: Re: Linux(2.4.x) and masqeurating Avishai, If you have ADSL running on FreeBSD, it would be nice if you send us the relevant info so we can add suport to it in our Linux ADSL howto. Thanks, Dani On Fri, 16 Nov 2001, Avishay Aton wrote: GREAT,this was the problem. i have inserted the following rule in FORWARD chain nad it works.. iptables -I FORWARD -p tcp --tcp-flags SYN,RST,SYN -j TCPMSS --clamp-mss-to-pmtu all i have to do is changing tcpmss in ipfilter on FreeBSD. Thanks - Original Message - From: Dani Arbel [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Sent: Friday, November 16, 2001 9:44 PM Subject: Re: Linux(2.4.x) and masqeurating Avishai, You are probably a victim of blackholing. go to: http://damyen.technion.ac.il/~dani/ read about the ADsL MTU issu , and see in the iptables example there the line with tcp_mss that you should add to your script. Dani On Fri, 16 Nov 2001, Avishay Aton wrote: I didn't enable ECN on my last kernel compilation(2.4.14) My configuration: uname -a Linux rasta 2.4.14-ext3 #1 Fri Nov 16 19:35:20 IST 2001 i686 unknown [root@rasta root]# ifconfig eth0 Link encap:Ethernet HWaddr 00:50:DA:1C:76:6B inet addr:10.0.0.140 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:702 errors:1 dropped:0 overruns:0 frame:2 TX packets:1001 errors:0 dropped:0 overruns:0 carrier:0 collisions:2 txqueuelen:100 RX bytes:149791 (146.2 Kb) TX bytes:121058 (118.2 Kb) Interrupt:9 Base address:0x1400 eth1 Link encap:Ethernet HWaddr 00:A0:C9:B0:0D:43 inet addr:10.0.0.141 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:90 errors:0 dropped:0 overruns:0 frame:0 TX packets:51 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:10178 (9.9 Kb) TX bytes:3007 (2.9 Kb) Interrupt:10 loLink encap:Local Loopback inet addr:127.0.0.1 Mask:255.0.0.0 UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:37 errors:0 dropped:0 overruns:0 frame:0 TX packets:37 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:0 RX bytes:2176 (2.1 Kb) TX bytes:2176 (2.1 Kb) ppp0 Link encap:Point-to-Point Protocol inet addr:212.143.40.233 P-t-P:212.143.32.1 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1452 Metric:1 RX packets:198 errors:0 dropped:0 overruns:0 frame:0 TX packets:205 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:3 RX bytes:90908 (88.7 Kb) TX bytes:26131 (25.5 Kb) and Finally my rules [root@rasta root]# cat fw.rules #!/bin/sh ## open up pptp connection echo Connecting to the net /usr/bin/pptp 10.0.0.138 sleep 3 if ifconfig | grep -q ppp then echo looking good,now let's secure our connection! ## initialize iptables echo Firewall initialization modprobe ipt_state || exit 1 modprobe iptable_nat || exit 1 modprobe ip_conntrack_ftp || exit 1 modprobe ipt_LOG || exit 1 iptables -N block iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A block -m state --state NEW -i ! ppp0 -j ACCEPT iptables -A block -j DROP iptables -A INPUT -j block iptables -A FORWARD -j block echo Now for NAT - only MASQUERDAING!! iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE echo iptables is up `date` The end Thanks - Original Message - From: Dani Arbel [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 6:54 PM Subject: Re: Linux(2.4.x) and masqeurating Avisay, 1) send a complete list of your rules + ifconfig output 2) what is secure remote? 3) when you fail to connect somewhere, there should be a message in the log containing the droped packet description (unless you have not put log rules ). That can help in catching the problem. On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe
Re: Linux(2.4.x) and masqeurating
Avishay Aton wrote: and finally secure remote ?! anyone sucsseded to connect with nat + FWZ ? Securemote has some option somewhere always encapsulate UDP packets. You need to check that on when you connect from a non-routable network (i.e. - behind a NAT). Thanks Avishay = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
Re: Linux(2.4.x) and masqeurating
Avishay Aton wrote: my connection is with mtu=1452 and mtu=1452 no errors and packet drops with my ifconfig -i. Avishay Not good enough. You need to actually reduce the MTU on the machines on the internal LAN, or apply an IP Tables rule that allows MSS rewriting. I have absolutely zero experience with the later, so if you want help from me, go for the former. - Original Message - From: Sagi Bashari [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, November 16, 2001 9:17 PM Subject: Re: Linux(2.4.x) and masqeurating Hi Avishay, Have you tried to reduce the MTU on the internal hosts to 1452? (see the bottom of the adsl howto if you don't know how). If you're using netfilter you can just use: 'iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu' instead. Sagi On Friday 16 November 2001 21:03, Avishay Aton wrote: sure,everything works great from the router(linux/freebsd - i switch between them) but from the Lan , i can't get some sites(linuxtoday.com , alcatel.com.) from snort ouput i can see the first stage of the connection(3 hand shaking) - Original Message - From: Matan Ziv-Av [EMAIL PROTECTED] To: Avishay Aton [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Friday, November 16, 2001 8:32 PM Subject: Re: Linux(2.4.x) and masqeurating On Fri, 16 Nov 2001, Avishay Aton wrote: Hi, i connect to the net with pptp + adsl, and i use nat on my linux box(2.4.x) for other computers on my private network. My nat rule is simple one: modprobe iptable_nat modprobe ip_conntrack_ftp iptables -t nat -A POSTROUTING -o ppp0 -j MASQUERADE I can get most of the sites , but for example www.linuxtoday.com dosn't work for me. Does it work from the router itself? If not, it sounds like ECN problem. -- Matan Ziv-Av. [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED] = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
mandrake kernel and /boot/kernel.h
Hi I'm trying to compile a recent Mandrake kernel. The system is Mandrake 7.2 . The computer did not have /boot/kernel.h . I got an error from some include file trying to include it (include/linux/rhconfig.h) . It seems to be vcreated at boot-time by the init scripts, and is used to give the parameters of the current kernel (e.g: is it SMP), because this kernel has passed the ultimate test of booting the system. However, my system did not have it. I tried to use an empty file and got some compile errors. Then I decided to copy /boot/kernel.h from another system that has a similar kernel, but more recent init scripts. However, I still get compilation errors that seem related: half-way in the compilation I get: /usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `get_pgd_fast': /usr/src/linux-2.4.13/include/asm/pgalloc.h:74: `boot_cpu_data_R65dda927' undeclared (first use in this function) /usr/src/linux-2.4.13/include/asm/pgalloc.h:74: (Each undeclared identifier is reported only once /usr/src/linux-2.4.13/include/asm/pgalloc.h:74: for each function it appears in.) /usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `free_pgd_fast': /usr/src/linux-2.4.13/include/asm/pgalloc.h:85: `boot_cpu_data_R65dda927' undeclared (first use in this function) /usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `pte_alloc_one_fast': /usr/src/linux-2.4.13/include/asm/pgalloc.h:122: `boot_cpu_data_R65dda927' undeclared (first use in this function) /usr/src/linux-2.4.13/include/asm/pgalloc.h: In function `pte_free_fast': /usr/src/linux-2.4.13/include/asm/pgalloc.h:132: `boot_cpu_data_R65dda927' undeclared (first use in this function) loop.c: In function `lo_send': loop.c:536: warning: suggest parentheses around + or - inside shift loop.c: In function `loop_set_fd': loop.c:950: warning: implicit declaration of function `kernel_thread_R7e9ebb05' make[2]: *** [loop.o] Error 1 make[2]: Leaving directory `/usr/src/linux-2.4.13/drivers/block' A web search hasn't produced useful results yet. I tried to see how I can disable this usage of the current configuration, but I can't find a simple way. Anybody here encountered this before? I rather simply disable this copying of options. Any iea how? Thanks -- Tzafrir Cohen mailto:[EMAIL PROTECTED] http://www.technion.ac.il/~tzafrir = To unsubscribe, send mail to [EMAIL PROTECTED] with the word unsubscribe in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]