Re: [Leaf-user] Re: Weblet... yet again ...again

2002-01-26 Thread Jon Clausen
Hi all http://bund.dk/~jon/weblethowo-pub.html O.K. spent some more time reading and trying out stuff. This 'problem' persists: at the top of the page. The only way I could get the print-link inside the two hr /'s was to make it a paragraph, which renders as if there were br /'s

[Leaf-user] OT: ssh keys

2002-01-26 Thread Charles Baker
I generated a ssh key on a machine behind my lrp box and placed that key on a remote machine so that I could do key-based authentication instead of password authentication. However, when I try to ssh to the remote box, it doesn't recognize me, the host names don't match because the connection is

RE: [Leaf-user] LRP and DOC

2002-01-26 Thread John Mullan
Charles FINALLY! It works. And it works great. I think the latest and greates SYSLINUX (version 1.66) did it for me. Once I re-did the boot loader with that, it worked. For informational purposes ONLY, if you or any list member would like to see what it took, I have made a ZIP of all

FW: [Leaf-user] LRP and DOC

2002-01-26 Thread John Mullan
Sorry, forgot to leave the link for the file... http://mullan.dns2go.com/files/MullanStein.zip -Original Message- From: John Mullan [mailto:[EMAIL PROTECTED]] Sent: Saturday, January 26, 2002 8:51 AM To: 'Charles Steinkuehler'; '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: RE:

[Leaf-user] Beowulf channel bonding

2002-01-26 Thread David McBride
this looks like a way to bond multiple ehternet channels into one single bandwidth. This has been discussed many times on the baord, but not sure if Beowulf has ever ben discussed indepth or tried. I has been on the board for a while, but still consider myself at newbie status. Could someone

[Leaf-user] Re: OT: ssh keys

2002-01-26 Thread Erich Titl
Hi [EMAIL PROTECTED] wrote the following at 14:54 26.01.2002: Message: 12 Date: Sat, 26 Jan 2002 04:57:29 -0800 (PST) From: Charles Baker [EMAIL PROTECTED] To: leaf-user [EMAIL PROTECTED] Subject: [Leaf-user] OT: ssh keys I generated a ssh key on a machine behind my lrp box and placed that

Re: [Leaf-user] Internal Network

2002-01-26 Thread Jack Coates
Been there done that :-) Make sure you have proper tc rules for _both_ directions, and try tcpdump on all three boxes. Not sure if you already knew this, but tcpdump has a ton of command line options to make it just show the packets you're looking for. Also double-check your NAT and the routing

Re: [Leaf-user] Beowulf channel bonding

2002-01-26 Thread Jack Coates
On Sat, 26 Jan 2002, David McBride wrote: this looks like a way to bond multiple ehternet channels into one single bandwidth. This has been discussed many times on the baord, but not sure if Beowulf has ever ben discussed indepth or tried. I has been on the board for a while, but still

Re: [Leaf-user] How to add hub functions into Dachstein floppyversion firewall?

2002-01-26 Thread Jeff Newmiller
On Fri, 25 Jan 2002, Mark Plowman wrote: From: Jeff Newmiller [EMAIL PROTECTED] Date: Fri, 25 Jan 2002 02:39:41 -0800 (PST) On Thu, 24 Jan 2002, WS Wong wrote: I am a newbie to Linux firewall. I downloaded the Dachstein image and installed in a P100 PC with 64MB RAM and two

Re: [Leaf-user] Leaf 2.4.16 view firewall rules

2002-01-26 Thread Jacques Nilo
From: Larry Platzek [EMAIL PROTECTED] Is it just my copy view firewall rules that only has zero for packacts and bytes fields? Are you using weblet ? What command are you using ? Any output to show ? also when using PPP to my isp and they hang up the line after 240 minutes that why does not

Re: [Leaf-user] OT: ssh keys

2002-01-26 Thread Ewald Wasscher
Charles Baker wrote: Perhaps comp.securtity.ssh is a better place to ask. But give us some more information and perhaps we could help. I generated a ssh key on a machine behind my lrp box and placed that key on a remote machine so that I could do key-based authentication instead of password

Re: [Leaf-user] Leaf 2.4.16 view firewall rules

2002-01-26 Thread Larry Platzek
view Firewall (p1 of 9) LEAF Firewall ::Packet Filter:: Shorewall-1.2.2 Chain at - Fri Jan 25 16:13:32 UTC 2002 Chain INPUT (policy DROP 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 rfc1918all

[Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Martin Hejl
Hi everybody, today, I successfully set up a Dachstein box. On the router, I'm running tinydns and dnscache to replace our (private) DNS server (which was Bind - I guess I don't need to tell anybody why I wanted to switch). Thanks to Jacques' excellent documentation, setting tinydns up was

Re: [Leaf-user] Leaf 2.4.16 view firewall rules

2002-01-26 Thread Jacques Nilo
Is it just my copy view firewall rules that only has zero for packacts and bytes fields? Ok. So it's because you are viewing your firewall rules through weblet. When Shorewall is started, the following /etc/shorewall/start script is executed. BOF shorewall show /var/sh-www/data/firewall chown

Re: [Leaf-user] cpu utilization measurement

2002-01-26 Thread Matt Schalit
dyp wrote: I am looking for a cpu utilization measurement tool for lrp oxygen. Any pointers !!! -Dharmin. Like top or something? I looked, and top's not in pub/oxygen/packages, which leads me to believe that top may not be able to interface with Oxygen's busybox ps and kernel. Either

Re: FW: [Leaf-user] LRP and DOC

2002-01-26 Thread Patrick Nixon
John, Congrats on getting this working. I'm currently spending most of my weekend attempting to get it working and like charles mentioned, I'm running into a 'insufficent low memory error'. How did you get around that? When I attempted to syslinux the DOC using 1.66 it whined about

Re: [Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Michael D. Schleif
Martin Hejl wrote: today, I successfully set up a Dachstein box. On the router, I'm running tinydns and dnscache to replace our (private) DNS server (which was Bind - I guess I don't need to tell anybody why I wanted to switch). Thanks to Jacques' excellent documentation, setting tinydns

Re: [Leaf-user] cpu utilization measurement

2002-01-26 Thread Martin Hejl
dyp wrote: I am looking for a cpu utilization measurement tool for lrp oxygen. Any pointers !!! if you're looking for something that displays cpu-usage graphically, you may want to take a look at lrpStat from http://leaf.sourceforge.net/devel/hejl/ - when used with the c-program on the server

Re: [Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Jacques Nilo
One thing that took us quite a while was to figure out why reverse lookups didn't work on the internal net. The way we finally got it to work was to declare all entries in /etc/tinydns-private/root/data as PTRs. For example =example1.private.network:192.168.1.1 instead of

Re: [Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Martin Hejl
Jacques Nilo wrote: This is correct. +example1.private.network:192.168.1.1 only creates a A record =example1.private.network:192.168.1.1 creates a A and a PTR record Your PTR record shows example1.private.network as the name of 1.1.168.192.in-addr.arpa if ip is 192.168.1.1 You definitively

[Leaf-user] Annoucement: Openssh 3.0.2p1 available

2002-01-26 Thread Jacques Nilo
This is a maintenance package. Statically compiled against libnsl and openssl-0.9.6c Dynamically against zlib 1.1.3 One more FAQ in the doc. See: http://leaf.sourceforge.net/devel/jnilo/openssh.html Jacques http://leaf.sourceforge.net/devel/jnilo ___

Re: [Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Matt Schalit
Martin Hejl wrote: Hi everybody, today, I successfully set up a Dachstein box. On the router, I'm running tinydns and dnscache to replace our (private) DNS server (which was Bind - I guess I don't need to tell anybody why I wanted to switch). Thanks to Jacques' excellent documentation,

Re: [Leaf-user] setting up tinydns.lrp

2002-01-26 Thread Martin Hejl
Hi Matt, Martin, you figured it out correctly, but you may not understand what you did fully. Yep, that's exactly what happened - and exactly why I asked the list for clarification. And as always, the replies were quick and very helpful. Host fqdn with IP address ip. tinydns-data

Re: [Leaf-user] Annoucement: Openssh 3.0.2p1 available

2002-01-26 Thread Jacques Nilo
From: Michael Leone [EMAIL PROTECTED] On Sat, 2002-01-26 at 15:04, Jacques Nilo wrote: This is a maintenance package. Statically compiled against libnsl and openssl-0.9.6c Dynamically against zlib 1.1.3 One more FAQ in the doc. See: http://leaf.sourceforge.net/devel/jnilo/openssh.html

Re: [Leaf-user] Annoucement: Openssh 3.0.2p1 available

2002-01-26 Thread Jacques Nilo
To extract the package one should read: lrpkg -i sshd Sorry for the typo. Jacques ___ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user

Re: [Leaf-user] LRP and DOC

2002-01-26 Thread Charles Steinkuehler
FINALLY! It works. And it works great. I think the latest and greates SYSLINUX (version 1.66) did it for me. Once I re-did the boot loader with that, it worked. For informational purposes ONLY, if you or any list member would like to see what it took, I have made a ZIP of all files

[Leaf-user] Getting cable modem status

2002-01-26 Thread Paul Rimmer
I'd like to be able to access my cable modem's built in web server through my DCD v1.01 firewall. Unfortunately the cable modem's IP is 192.168.100.1. Is there something I can add to my firewall scripts that will allow me to get at this IP from the internal (192.168.1.x) network? Cheers, Paul

Re: [Leaf-user] Internal Network

2002-01-26 Thread Reginald R. Richardson
Jack../Charles we starting to see some light, but i guess that the lack of some Linux Firewall knowledge holding us back over here... but here's what.. On my BOX3 Non NAT/Firewall Box if i add a default route on this box, via the CABLE Router (Box1), then all HTTP traffic goes out to the

[Leaf-user] DCD, busybox date -d ???

2002-01-26 Thread Michael D. Schleif
I have reviewed http://www.busybox.net/downloads/BusyBox.html#item_date; but, I cannot get date -d to work: date date [OPTION]... [+FORMAT] Displays the current time in the given FORMAT, or sets the system date. Options: -R

Re: [Leaf-user] DCD, ipsec leftrsasig only in /etc/ipsec.secrets ???

2002-01-26 Thread Michael D. Schleif
Michael D. Schleif wrote: http://freeswan.org/freeswan_trees/freeswan-1.91/doc/config.html#handy ``On the left gateway, we can omit leftrsasig. That gateway uses the private key stored in ipsec.secrets(5) and has no need for its own public key.'' When I do that, I get this: # ipsec

Re: [Leaf-user] DCD, ipsec leftrsasig only in /etc/ipsec.secrets ???

2002-01-26 Thread Charles Steinkuehler
``On the left gateway, we can omit leftrsasig. That gateway uses the private key stored in ipsec.secrets(5) and has no need for its own public key.'' When I do that, I get this: # ipsec auto --add trout-bluetrout ipsec_auto: fatal error in trout-bluetrout: connection has no

Re: [Leaf-user] Internal Network

2002-01-26 Thread Jack Coates
On Sat, 26 Jan 2002, Reginald R. Richardson wrote: Jack../Charles we starting to see some light, but i guess that the lack of some Linux Firewall knowledge holding us back over here... but here's what.. On my BOX3 Non NAT/Firewall Box if i add a default route on this box, via the CABLE

[Leaf-user] DS 1.0.2

2002-01-26 Thread Jack Coates
Finally got a couple of hours to upgrade my router to Dachstein 1.0.2 -- very nice improvement over ES2B. Thanks Charles! One thing that hasn't changed with DS is that there are a ton of places to tweak in order to get a working config. Next time I get a couple of hours, I'm going to take a

Re: [Leaf-user] DCD, ipsec leftrsasig only in /etc/ipsec.secrets ???

2002-01-26 Thread Michael D. Schleif
Charles Steinkuehler wrote: ``On the left gateway, we can omit leftrsasig. That gateway uses the private key stored in ipsec.secrets(5) and has no need for its own public key.'' When I do that, I get this: # ipsec auto --add trout-bluetrout ipsec_auto: fatal error in

Re: [Leaf-user] DS 1.0.2

2002-01-26 Thread guitarlynn
On Saturday 26 January 2002 17:42, Jack Coates wrote: Finally got a couple of hours to upgrade my router to Dachstein 1.0.2 -- very nice improvement over ES2B. Thanks Charles! One thing that hasn't changed with DS is that there are a ton of places to tweak in order to get a working config.

Re: [Leaf-user] DCD, ipsec leftrsasig only in /etc/ipsec.secrets ???

2002-01-26 Thread Charles Steinkuehler
I suppose, there's a FreeS/WAN List Service? Several: http://www.freeswan.org/mail.html Charles Steinkuehler http://lrp.steinkuehler.net http://c0wz.steinkuehler.net (lrp.c0wz.com mirror) ___ Leaf-user mailing list [EMAIL PROTECTED]

[Leaf-user] LRP Oxygen CD and floppy disk boot question

2002-01-26 Thread malik menzong
Hi everyone. I am now using the lrp oxygen version 1.8.0 that can boot from a cd. I got it to boot on a pentium 3 machine and run into a few pbs. if anyone has had experience with it maybe these will sound familiar. 1) I only needed the cd to boot. it did work. However I made a boot disk prior

[Leaf-user] NFS hanging up

2002-01-26 Thread Lonnie Cumberland
Hello All, I have just installed an EigerStein LRP firewall and it seems to be working good, but I have 6 machines which were NFS mounting and exporting various directories before I put them behind the firewall so that they could cross communicate. They worked just fine at that time with

Re: [Leaf-user] DS 1.0.2

2002-01-26 Thread Jack Coates
On Sat, 26 Jan 2002, guitarlynn wrote: On Saturday 26 January 2002 17:42, Jack Coates wrote: Finally got a couple of hours to upgrade my router to Dachstein 1.0.2 -- very nice improvement over ES2B. Thanks Charles! One thing that hasn't changed with DS is that there are a ton of

Re: [Leaf-user] NFS hanging up

2002-01-26 Thread Ray Olszewski
Lonnie -- it just seems to hang is a bit too imprecise to make a good starting point. So I'll just take a wild shot at it -- might you have left in /etc/exports an entry for a hostname or IP address that is now unresolvable? If so, that would introduce a 3-minute delay at the point where you say