Re: [Leaf-user] remote access to dachstein

2002-01-18 Thread Julian Church
Hi All At 13:35 17/01/02 -0800, Victor McAllisteer wrote: There was a post here recently from someone who got libz.lrp and sshd.lrp to fit on a single floppy. He stripped the pretty version of weblet and used one without graphics if I remember correctly. Unfortunately the search feature

Re: [Leaf-user] Filtering Web content

2002-01-18 Thread Matt Schalit
Pär Johansson wrote: Hello My 8 year old boy is getting verry interested in the internet, but i have some considerations (porn etc.) connecting his computer to the net. Is it possible to add some web filtering to dachstein, can squid or some other package do this? Regards Pär

Re: [Leaf-user] Suspicious 'last'

2002-01-18 Thread Matt Schalit
Jon Clausen wrote: Hi list I've been monitoring the list for a while now. Seems there are some very knowledgeable people here. Originally I was going to ask about some vpn-stuff, but then this happened: Running Dachstein on a three-way box with LAN (192.*.*.*) and DMZ (10.*.*.*), at a

[Leaf-user] @home to Cox conversion problems

2002-01-18 Thread Jon Pike
Hello all.. Very long time no talk to... I've been having a problem with my LRP box and my cable service. Use Cox/@home in the Orange County, Southern CA area, and it's been working fine for 2 years. We are finally getting ours, in the Exicte@home demise, and they have changed something,

Re: [Leaf-user] Speed Survey

2002-01-18 Thread Matt Schalit
Paul Rimmer wrote: ** Speed 2325(down)/1034(up) kbps ** ** Speed 2925(down)/947(up) kbps ** P133 64MB RAM DCDv1.01 with brand new Motorola cable modem (old one was definitely slower). I'd be curious to see what other cable modem users are getting and what their config is. @home in

Re: [Leaf-user] @home to Cox conversion problems

2002-01-18 Thread Michael D. Schleif
Jon Pike wrote: Very long time no talk to... I've been having a problem with my LRP box and my cable service. Use Cox/@home in the Orange County, Southern CA area, and it's been working fine for 2 years. We are finally getting ours, in the Exicte@home demise, and they have changed

Re: [Leaf-user] @home to Cox conversion problems

2002-01-18 Thread guitarlynn
On Friday 18 January 2002 09:00, Michael D. Schleif wrote: We are finally getting ours, in the Exicte@home demise, and they have changed something, we're on a whole new IP network now. And suddenly, no service.. It seems the handshaking for the DHCP is not the same anymore, the

Re: [Leaf-user] OT: ipchains

2002-01-18 Thread Charles Steinkuehler
If you want to take the time to help me out that would be great, but if not that's cool. thanks for any help, -Alex Fore We have two internal DNS servers one internal smtp server, many internal webservers. ipchains commands snipped Assumptions: eth0 = internal network = good eth1 = DMZ

Re: [Leaf-user] 2.2.16/tulip/build How?

2002-01-18 Thread Charles Steinkuehler
I'd suggest upgrading to the 2.2.19 kernel. You don't have to upgrade your whole distribution to do this...just replace the kernel file on the floppy (the file named linux) and the modules in modules.lrp. You can even cheat and start with the files from a Dachstein relese (just make a

Re: [Leaf-user] OT: ipchains

2002-01-18 Thread Charles Steinkuehler
ipsec -Lvn --line-numbers is your friend. Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) Pay special attention to the ^ ^^^ Did you mean `ipchains -nvL --line-numbers' ??? Notice, the `L' cannot precede the `nv' . . .

Re: [Leaf-user] D/DCD busybox gzip/gunzip problem???

2002-01-18 Thread Charles Steinkuehler
I was wondering if anybody else is, like me, having some problem with the gzip/gunzip commands provided by the busybox currently used on Dachstein... I sometimes have problems decompressing (gunzip) files which where packed by gzip (both being the busybox ones). I have had this problem

Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread Charles Steinkuehler
When LEAF leaves the single floppy behind, the entire project target changes and all the indications point to the change happening in the next 6 months or so. It seems that the primary developers are trying to keep the original target (floppy), and for that I commend them, it would be easy

[Leaf-user] oxygen + snort + kernel panic

2002-01-18 Thread dyp
Hi! I am using Oxygen May 2000 and snort1.8. The router routes the packets when snort is not installed. But when snort is up, I get the following message and the system hangs. None of the special keys work. error message : $ kernel panic: skput: over c014e7cb : 1006 put : 1006 dev : eth0 In

Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread Kenneth Hadley
- Original Message - From: Charles Steinkuehler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 18, 2002 8:29 AM Subject: Re: [Leaf-user] glibc pppoe... When LEAF leaves the single floppy behind, the entire project target changes and all the indications point to the

Re: [Leaf-user] OpenSSL and fswcert

2002-01-18 Thread Charles Steinkuehler
Hmm. I follow your suggestion about maintaining certs on a separate system. Actually, that is my intent but it looked like OpenSSH was going to be necessary to do the format changing (DER, pem etc.). I've found a compiled Windows version and, since I'll be maintaining certs on a Windows

RE: [Leaf-user] OpenSSL and fswcert

2002-01-18 Thread Keith Laidlaw
Will advise... Many, many thanks (again), kind sir. Keith Laidlaw Manager of Engineering Dakins Engineering Group Ltd. tel: (905) 814-6024 fax: (905) 814-6029 -Original Message- From: Charles Steinkuehler [mailto:[EMAIL PROTECTED]] Sent: Friday, January 18, 2002 12:11 PM To:

Re: [Leaf-devel] Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread Kenneth Hadley
Kenneth Hadley PC Network Specialist McCormick Selph Inc. 831-637-3731 x363 [EMAIL PROTECTED] - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, January 18, 2002 11:18 AM Subject: Re: [Leaf-devel] Re: [Leaf-user] glibc pppoe...

Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread guitarlynn
On Friday 18 January 2002 13:21, Charles Steinkuehler wrote: Well, I *have* effectevly abandoned the 1440 floppy format (for anything other than the config floppy for a CD-ROM install), but I really want to keep a workable firewall running on a 1680K floppy. Note the new Dachstein

Re: [Leaf-user] remote access to dachstein

2002-01-18 Thread Mike Noyes
At 2002-01-18 10:25 +, Julian Church wrote: That was me actually, and it really isn't that hard. A standard Dachstein 1680K floppy has about 275KB of free space anyway, while libz.lrp and sshd.lrp total around 330KB - you've only got to find about 55 KB. Here's exactly what I did: If

Re: [Leaf-user] Suspicious 'last'

2002-01-18 Thread Jon Clausen
On Friday 18 January 2002 12:18, you wrote: Hey Jon, I can't say for sure, but these three look too similar to be co-inkydinks: USER TTY PID TIMEON FROM root ttyp0 153221794 UNKNOWN root ttyp0 154021791 10.*.*.* root ttyp0 155421785

Re: [Leaf-user] remote access to dachstein

2002-01-18 Thread Ewald Wasscher
Julian Church wrote: Hi All At 13:35 17/01/02 -0800, Victor McAllisteer wrote: There was a post here recently from someone who got libz.lrp and sshd.lrp to fit on a single floppy. He stripped the pretty version of weblet and used one without graphics if I remember correctly.

Re: [Leaf-user] remote access to dachstein

2002-01-18 Thread Larry Platzek
Please do flesh it out! It is good to share one's knowledge. Thank you for offering to flesh it out. Larry Platzek [EMAIL PROTECTED] On Fri, 18 Jan 2002, Julian Church wrote: Date: Fri, 18 Jan 2002 10:25:58 + From: Julian Church [EMAIL PROTECTED] To: leaf-user [EMAIL PROTECTED]

RE: [Leaf-user] Diald, ppp and firewall rules

2002-01-18 Thread Richard Doyle
I'm a little confused about how to set up the network.conf to work with diald and ppp. Diald sets up a proxy interface called 'sl0' to monitor for network traffic. This is the default route until diald starts up ppp. Then the default route switches to 'ppp0'. My question is how does

[leaf-user] Memory, Floppy-Drive or other problem

2002-01-18 Thread Joris Kempen
Hi, I'm having some problems with my dachstein diskimage firewall. It refuses to load, backup etc. The error I generally get is: Segmentation fault. Other thing I see quit often is when loading my lrp modules like, etc dhclient etc. : unable to handle kernel paging request at virtual address

Re: [Leaf-user] oxygen + snort + kernel panic

2002-01-18 Thread Matt Schalit
dyp wrote: Hi! I am using Oxygen May 2000 and snort1.8. The router routes the packets when snort is not installed. But when snort is up, I get the following message and the system hangs. None of the special keys work. error message : $ kernel panic: skput: over

Re: [leaf-user] Memory, Floppy-Drive or other problem

2002-01-18 Thread Charles Steinkuehler
I'm having some problems with my dachstein diskimage firewall. It refuses to load, backup etc. The error I generally get is: Segmentation fault. Other thing I see quit often is when loading my lrp modules like, etc dhclient etc. : unable to handle kernel paging request at virtual address I

Re: [Leaf-user] floppy base (wasglibc pppoe... )

2002-01-18 Thread speck
On Fri, 18 January 2002, Kenneth Hadley wrote: If they had to buy a flash or DOC, then they might as well buy a Linksys. With the LEAF floppy systems, I have found that half the folks get more interested in networking and Linux, which I regard as a plus. -sp $0.02 I totally

Re: [Leaf-devel] Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread Ray Olszewski
At 11:44 AM 1/18/02 -0800, Kenneth Hadley wrote: [...] I totally understand and agree with most of what you have said, but when I look at new CDROM drives going for the same price tag of a new 1.44MB Floppy Drive it seams a more than a little funny that a old floppy drive is a more important

Re: [Leaf-user] floppy base (wasglibc pppoe... )

2002-01-18 Thread Charles Steinkuehler
I like the idea of a more powerful and flexible system avaible on CD, with config files on a floppy, BUT, I think that maintaining a simpler floppy base distribution is a good goal (even 1.68MB). It enforces build disipline (ie, no wasted crap on base installs) and it provides a

[Leaf-user] Announcement: LEAF 2.4.16 + Shorewall 1.2.2

2002-01-18 Thread Jacques Nilo
With the help of Eric Wolzak I have updated my LEAF 2.4.x / Shorewall based distro. Many new features are available on the floppy: a.. Kernel 2.4.16 now used. New kernel config file. Includes in particular support for PCMCIA, PPP, PPP/PPPOE, ISDN, USB and bridging b.. Use shorewall 1.2.2

Re: [Leaf-devel] Re: [Leaf-user] glibc pppoe...

2002-01-18 Thread Robert Chambers
32x cd rom drive at Computer geeks $14.00 Ray Olszewski wrote: At 11:44 AM 1/18/02 -0800, Kenneth Hadley wrote:[...] I totally understand and agree with most of what you have said, but when Ilook at new CDROM drives going for the same price tag of a new 1.44MB FloppyDrive it seams a

Re: [Leaf-user] floppy base (wasglibc pppoe... )

2002-01-18 Thread Mark Plowman
snip Agreed...especially the point about floppy use enforcing build discipline. IMHO, it should continue to be possible to create a firewall system that functions on a single floppy, with perhaps two floppies (or other larger media) required for more advanced setups (ie sshd, IPSec gateway).

[Leaf-user] dachstein and port forwarding (again)

2002-01-18 Thread David Goodrich
earlier... I am running the most recent version of dachstein, and i cannot figure out how to forward ports (most notably port 80) to machines on my internal net. i.e. send http request on port 80 to [static ip] and have the firewall send the request to [internal webserver] while still looking

Re: [Leaf-user] many packets, different T

2002-01-18 Thread Mike Sussman
Folks, Since I posted my earlier message, I have begun to see this kind of thing repeatedly. For the past 24 hours, my logs contain over 1000 lines of such packets! By that I mean, if I discard all lines that are identical to one another except for the T= field, my file goes from 1177 denied

[Leaf-user] DCD PPPoE documentation needs fixing

2002-01-18 Thread Victor McAllister
Kenneth the documentation here has an error. http://leaf.sourceforge.net/devel/khadley/pppoe-cd.html 7) Uncomment the modules you need for your NICs and add this to your /etc/network.conf: # Serial Support slhc ppp ppp_deflate bsd_comp 7) Uncomment the modules you need for

Re: [Leaf-user] Announcement: LEAF 2.4.16 + Shorewall 1.2.2

2002-01-18 Thread Jacques Nilo
From: [EMAIL PROTECTED] Does USB support include networking? My brother-in-law has DSL, but the modem he got with the service is USB only, and the service uses PPPoE on top of that. Will this let me finally share his connection out to the rest of the house? USB networking should work.