Re: [masq] [masq] Problems with 2.2.0-kernel & MASQ

1999-02-01 Thread Charles Curley

At 01:00 AM 2/1/99 -0600, Fuzzy Fox wrote:
>Charles Curley <[EMAIL PROTECTED]> wrote:
>>
>> B2 (bzImage) is a fairly new compression algorithm, where GZIP
>> (zImage) is much older.  I suspect that the B2 implementation has a
>> bit of debugging to go, and that may be what you hit.
>
>As I understand it, "bzImage" and "zImage" use the same compression
>scheme (gzip, deflate, whatever you want to call it).  The difference is
>in the loader methods used.  "zImage" loads the kernel in low DOS memory
>(640K), whereas the "bzImage" loader decompresses directly to high
>extended memory.  The chief difference is that the "zImage" loader
>cannot load a kernel with a compressed size larger than about 600K or
>so.  The "bzImage" loader can load any size kernel, but does not work
>with all hardware platforms (yet).
>
>Horribly off-topic information, gleaned from the noisy linux-kernel
>mailing list.  :)

I bow to your lInux-kernel mailing list information. Thanks for the
correction.

As you say, off topic. End of discussion.


-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] [masq] Problems with 2.2.0-kernel & MASQ

1999-01-31 Thread Charles Curley

At 01:20 AM 1/30/99 +0100, Christoph Monig wrote:
>
>
>Fuzzy Fox wrote:
>
>> What type of loader format are you using?  zImage or bzImage?  Some
>> systems don't seem to work right with bzImage.
>
>I tried zImage and it worked !
>Thank you for your help. I don't understand it, though.

Glad it worked. B2 (bzImage) is a fairly new compression algorithm, where
GZIP (zImage) is much older. I suspect that the B@ implementation has a bit
of debugging to go, and that may be what you hit.


-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] UDP Packets & other fun stuff

1999-01-29 Thread Charles Curley

At 01:04 PM 1/28/99 -0600, Fran Fabrizio wrote:
>   
>Here are some things I'd like to get working thru my IP Masq gateway...
>
>1.  UDP Packets for many popular multiplayer games.  I found a link to a
>udpred.c.gz file on the IP Masq Resources page, but the resulting
>downloaded file absolutely does not want to uncompress for me.

Are you sure it is in fact compressed? Try opeing it in Emacs and see what
you actually have there.



-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] [masq] Setting time limited masq rules?

1999-01-26 Thread Charles Curley

Perhaps you should look at using masq dialer, and have your W95 client
users manually dial in and log off the ISP. It can be set up so that if two
or more users are both using the connection, no user can hang up. A user
can break his connection to the masq dialer, and the last user on the
connection can then hang up. That's the setup I have here, and if I had
PPTP over IP masq working, I'd be using it a lot more.


At 08:52 AM 1/25/99 +0100, Gildas Quiniou wrote:
>"David A. Ranch" a écrit :
>
>> I'm sure this is possible but you'd have to write a script
>> that monitors the output of "ipfwadm -M -l".  Once a
>> given timeout is hit, you can execute a new IPFWADM ruleset.
>
>Hi David,
>
>Thanks but I dont have any inactivity time information with this
>command. What I
>would like is just remove a rule when it hasn't been used for a certain
>time
>(10-15 minutes for instance).
>
>For the short story: I use dial-on-demand but it's fired up too often
>because of
>Win95 programs trying to connect to the Net even if the user doesn't
>want to do
>so. For a couple of other reasons I've set a script to add masq rules on
>a per
>user basis. But as I can't rely to them to toggle off those rules when
>they stop
>surfing the Net, I would like to run a daemon that will auto-toggle-off
>unused
>rules after a certain time. Maybe ip accounting could also help but I
>don't really
>know how...
>
>Regards,
>
>Gildas.
>
>--
>/-*-\
>| Systèmes & Technologies | Tél: +33 2 96438787 |
>| Informatiques du Ponant | Fax: +33 2 96438788 |
>| 27, rue Auguste Brizeux | email:   [EMAIL PROTECTED] |
>| 22200 Guingamp - France | web: http://www.stip.fr |
>\-*-/
>
>
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>For daily digest info, email [EMAIL PROTECTED]
>
>

-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] [masq] FTP timeout?

1999-01-19 Thread Charles Curley

It may have been another problem entirely.

I compiled ip masquerading into the kernel to speed things up. What I
didn't know is that that only compiles the basic masquerading stuff into
the kernel. There is no option to make ip_masq_ftp et alia part of the
kernel. Since (having assumed otherwise) I took the modprobe statements out
of my rc.local initialization script, they weren't loaded. Since figuring
out (with the help of another member of the list) that those modules and
the modprobe statments are necessary, I loaded the modules manually. I
think that may have solved the problem, but haven't yet tested it on a
monster file.


At 09:31 PM 1/16/99 -0700, Charles Shoemaker wrote:
>This hasn't happened to me since upgrading to kernel 2.0.  May I 
>suggest a couple of things:  
>
>You can watch the masq action with "ipfwadm -M -l" (little el) and 
>see the port timings.  
>
>You might try a large file transfer with ftp on you NT machine, and 
>see if you have the same problem.  If you do, it's in masquerade, if 
>not, it's in Netscape.
>
>Also, activate the masq ftp module in your rc.local with 
>"/sbin/modprobe ip_masq_ftp.o".
>
>Let us know.
>Charlie Shoemaker
>PS  I spaced out your patch question.  I'll get a reply to you 
>tomorrow.  (If I remember correctly, go to /usr/src/linux and type 
>"patch -p0 -l < ../patchfile".)  Better details tomorrow morning.
>
>> Date:  Sat, 16 Jan 1999 15:21:57 -0700
>> To:[EMAIL PROTECTED]
>> From:  Charles Curley <[EMAIL PROTECTED]>
>> Subject:   [masq] FTP timeout?
>
>> I have been running ip masquerading for about a month. I have noticed a
>> glitch which may be a timeout issue: when I transfer a large file (10+Mb)
>> using Netscape on NT, the whole file appears to transfer. Then the little
>> window just hangs there. If I copy the file before hitting cancel (to
>> preserve it) it is only partially intact. I can copy the same file in with
>> a direct connection with no problem, and I only have seen this when copying
>> via the IP masquerading computer.
>> 
>> Is this an IP masquerading timeout issue? If so, how can I solve it?
>> 
>> Thanks.
>> 
>> 
>> 
>>  -- C^2
>> 
>>  I have sworn upon the altar of God eternal hostility against every form of
>> tyranny over the mind of man.
>> -- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.
>> 
>> Thomas Jefferson, Patron Saint of the Internet:
>> http://w3.trib.com/~ccurley/Jefferson.html
>> -
>> To unsubscribe, e-mail: [EMAIL PROTECTED]
>> For additional commands, e-mail: [EMAIL PROTECTED]
>> For daily digest info, email [EMAIL PROTECTED]
>> 
>"Some people crave baseball - I find this unfathomable - but I can
>easily understand why a person could get excited about playing a
>bassoon."  --  Frank Zappa
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>For daily digest info, email [EMAIL PROTECTED]
>
>

-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



[masq] FTP timeout?

1999-01-19 Thread Charles Curley

I have been running ip masquerading for about a month. I have noticed a
glitch which may be a timeout issue: when I transfer a large file (10+Mb)
using Netscape on NT, the whole file appears to transfer. Then the little
window just hangs there. If I copy the file before hitting cancel (to
preserve it) it is only partially intact. I can copy the same file in with
a direct connection with no problem, and I only have seen this when copying
via the IP masquerading computer.

Is this an IP masquerading timeout issue? If so, how can I solve it?

Thanks.



-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] FTP timeout?

1999-01-19 Thread Charles Curley

At 10:02 PM 1/16/99 -0800, Fred Viles wrote:
>On 16 Jan 99, at 15:21, Charles Curley wrote about
>"[masq] FTP timeout?":
>
>| I have been running ip masquerading for about a month. I have noticed a
>| glitch which may be a timeout issue: when I transfer a large file (10+Mb)
>| using Netscape on NT, the whole file appears to transfer. Then the little
>| window just hangs there.
>
>This will happen if you are not running the ip_masq_ftp "helper" 
>module.  As you guessed, it is probably the control connection timing 
>out while the lengthy data connection is going on.
>
>Does lsmod show ip_masq_ftp running?

ip_masq_ftp is built into the kernel, not a module.


-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



[masq] IP Masq Dialer on W2K

1999-01-07 Thread Charles Curley

I just set up & ran the W95 IP Masq Dialer client on Windows 2000 Beta 2.
It ran just fine and dandy, and I got my mail from a pop server. No
surprise, as I am not aware of any changes between NT 4 and W2K that would
affect the masq dialer client or IP masquerading in general.


-- C^2

[EMAIL PROTECTED]

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] ip aliasing vs ip masqueradeing

1999-01-04 Thread Charles Curley

At 03:29 PM 1/4/99 -0600, Frank Matthews wrote:
>
>Hi,
>
>I was looking thru the IP Aliasing mini-faq and it mentions that I need IP
>Masq compiled as a module but then doesn't seem to do anything with it.
>
>it does reference IP-aliasing either compiled as a module or compiled into
>the kernel later

You can run it either way. If you compile it into the kernel, compile all
IP masquerading into the kernel, and do not insert the various \lsmod
ip-* statements into your rc.local or whatever your init script is named.

That is the way I am running my Red Hat 5.2 server (kernel is, I think,
2.0.36).


-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] No WWW with Masq.

1998-12-25 Thread Charles Curley

I'm farly new to IP masquerading, so this is a guess. But it will give you
something to try, at least.

This sounds like a local problem on the W95 box. At a guess, browser or
httpd misconfiguration. Is your browser set up to use a proxy server?

If it isn't a proxy setup on the browser, are you able to ping, etc from
the W95 box using host names or only with IP addresses? If IP addresses
work and not host names, then you have a DNS problem somewhere.

BTW, be aware that some NT servers have turned off ICMP (the protocol on
which ping and traceroute operate) because NT 4 SP3 may be vulnerable to an
ICMP attack. Use a good Unix server like Halcyon.com or Trib.com for ping
tests with hostnames.

Can you use the Linux box's browser to access the Linux box's http server?
If so, how? http:///? http://<127.0.0.1>?
http://? http://? If all four of those work then
chances are your web server is set up correctly. If so, then try from the
W95 box both by IP address and hostname. Only if both of those work and you
still can't access web servers outside your local net would I suspect an IP
masquerading problem.

I don't know what WinGate or WinRoute are or do, but I guess from the names
that they are IP routing packages. Can you check their configuration files
to see if anything jumps out at you?


At 07:02 PM 12/24/98 -0500, Burton Windle wrote:
>Hi.  I'm sure this has already been answered a thousand times before, but
>I couldn't find it anywhere.  I installed Slackware 3.6 and got it to
>recognize my eth card (RealTek 8029) and was able to get Masq. running.
>However, my 2nd box, running Win95B, can ping, FTP, IRC, and telnet to the
>internet, but no WWW access.  It can't even get to the Linux box's local
>site.  Is this a misconfiguration in Linux, or could I have something
>wrong on the Windoze machine? It was previously configured to use first
>WinGate, and then WinRoute (before I got serious and used Linux).
>
>The Linux box is 192.168.1.1, and the win machine is 192.168.1.2
>
>I have this running at bootup:
>
>ipfwadm -F -a masq -S 192.168.1.1/24 -D 0.0.0.0/0
 ^
Shouldn't you be allowing the W95 box here, not the Linux box? But if
that's what you actually have, how are you able to access the outside world
at all from the W95 box?




-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



[masq] PPTP site?

1998-12-24 Thread Charles Curley

The PPTP patch site at lowrent.org appears to have evaporated, along with
lowrent.org. Is there an alternative? Do I in fact need it to run on a
server with Red Hat 5.2, Linux kernel 2.0.36?

-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]



Re: [masq] pap login fails when nameserver traffic causes diald to bringup link

1998-12-22 Thread Charles Curley

Have you tried the Red Hat PPP list? It might be more useful. They do take
questions on ISDN. You should probabaly specify the modem you are using and
any ISDN modem-specific software you have or are using.

At 11:52 AM 12/22/98 -0800, [EMAIL PROTECTED] wrote:
>
>I'm using Redhat 5.2 with diald connecting to the outside world.
>I am now using an isdn modem with pap to login to my isp and
>having troubles that didn't occur when I was dialing in with my
>analog modem and doing a chat login.
>
>Talking to the isp, it looks like I'm terminating the connection
>just after I get the gateway.  After redailing 2-3 times, it
>eventually manages to connect, but I'm at a loss for what the
>problem might be.  It seems to happen consistantly when trying to
>lookup names that are not already known by named.
>
>Here's my diald.conf:
>   mode ppp
>   mru 560
>   mtu 560
>   connect /usr/lib/diald/connect
>   # speed = speedx4 (230k)
>   speed 57600
>   device /dev/ttyS0
>   modem
>   lock
>   crtscts
>   local 209.140.226.12
>   remote 165.227.96.17
>   nodev-retry-timeout 60
>   include /usr/lib/diald/standard.filter
>   defaultroute
>
>And my /etc/ppp/options:
>   name 
>   ipcp-accept-remote
>   lcp-restart 1
>   ipcp-restart 1
>   asyncmap 0
>   debug
>
>Any help would be appreciated!
>
>Stefen
>-
>To unsubscribe, e-mail: [EMAIL PROTECTED]
>For additional commands, e-mail: [EMAIL PROTECTED]
>For daily digest info, email [EMAIL PROTECTED]
>
>

-- C^2

I have sworn upon the altar of God eternal hostility against every form of
tyranny over the mind of man.
-- Thomas Jefferson, letter to Benjamin Rush, 1800 A.D.

Thomas Jefferson, Patron Saint of the Internet:
http://w3.trib.com/~ccurley/Jefferson.html
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
For daily digest info, email [EMAIL PROTECTED]