RE: [leaf-user] How to use ipchains.forward

2002-05-20 Thread MLU
Here is the only command I have in my /etc/ipchains.forward (credited to Charles Steinkuehler) to route between 192.168.9.x and 192.168.3.x internal subnets $IPCH -A forward -j ACCEPT -s 192.168.9.0/24 -d 192.168.3.0/24 -b -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [leaf-user] Forwarding

2002-05-20 Thread Jeff Newmiller
Comments below. On Sun, 19 May 2002, David Smead wrote: Jeff, Thanks for you reply. I figured out the return route as the problem based on the output of tcpdump, but your reply is much appreciated by me and I'm sure others trying to learn more about networking will appreciate the

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread Stephen Lee
On Sun, 2002-05-19 at 12:28, David Douthitt wrote: On Saturday 18 May 2002 11:14 am, Stephen Lee wrote: I tunnel imap and smtp all the time except I use stunnel. Presumably you are pointing your host1 mail client to localhost:110 or localhost:143 and then ssh tunnelling those

[leaf-user] Bering LEAF from hard disk/PCengines CF adapter

2002-05-20 Thread Erich Titl
Hi folks Message: 9 Date: Sat, 18 May 2002 20:04:24 -0700 From: Victor McAllister [EMAIL PROTECTED] To: leaf-user [EMAIL PROTECTED] CC: David Ondzes [EMAIL PROTECTED] Subject: Re: [leaf-user] Bering LEAF from hard disk added list back in in case others are interested. They carry three types

[leaf-user] hda driver

2002-05-20 Thread Mohd Nazri Bin Ab Hamid
hi all, my bering notice hda driver not present at boot. (bering on cdrom) Where i can find the driver? but the cd can boot and got the login prompt and all services work fine... just wonder about the notice hda driver not present. tq

[leaf-user] Re: [Shorewall-users] Losing Connectivity on Static NAT'd System

2002-05-20 Thread Brian Credeur
Hi Tom, Thanks for the response. Yes, I did have the setup you described. To do some packet captures for early testing, I had moved the external interface of the LEAF router and the internal interface of my DSL modem to a hub that was on the same LAN as my internal network. I moved things

Re: [leaf-user] hda driver

2002-05-20 Thread Larry Platzek
Have you loked at the LEAF Bering user's guide? I would think chapter 7 would help solve the problem (7. Creating a bootable BERING CD-ROM). I know I have told you to look at this chapter before, in a off list email. If this does not help. tell the list what you have tried, and with what

[leaf-user] Bandwith control over Bering

2002-05-20 Thread Roberto Pereyra
Hi I can do bandwith control ( with cbq, iproute, tc ) in the lastest Bering version ? Is there a howto over this topic ? Thans a lot Roberto Pereyra Gualeguaychu Argentina http://www.linux-net.com.ar GnuPG keyID: BB43E337 http://pgp.mit.edu

Re: [leaf-user] Bandwith control over Bering

2002-05-20 Thread Tom Eastep
On Mon, 20 May 2002, Roberto Pereyra wrote: Hi I can do bandwith control ( with cbq, iproute, tc ) in the lastest Bering version ? Is there a howto over this topic ? Not really a HOWTO but there is some information at: http://www.shorewall.net/traffic_shaping.htm. -Tom -- Tom

Re: [leaf-user] Squid and Bering

2002-05-20 Thread Mike Noyes
On Sun, 2002-05-19 at 17:24, Shawn wrote: Does anyone know if there's a Squid package for Bering or if the squid.lrp package available for the other LEAF branches (e.g., Oxygen) is compatible with Bering? Shawn, There are a few squid packages listed here:

[leaf-user] LaBrea - Nightmare

2002-05-20 Thread Joey Officer
This weekend I received a call from the service provider of one of my office locations, rather shitty call from the (alleged) owner. At any rate, after getting past his extremely rude behavior we determined the LaBrea was doing exactly what it was written for, which is to virtually sit on unused

Re: [leaf-user] Forwarding

2002-05-20 Thread Tom Eastep
On Sun, 19 May 2002, David Smead wrote: Thanks again for your suggestion - tcpdump showed the problem - no return route. I'm learning, albeit slowly. Nothing wrong with that -Tom -- Tom Eastep\ Shorewall - iptables made easy AIM: tmeastep \ http://www.shorewall.net ICQ: #60745924 \

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread David Douthitt
On Monday 20 May 2002 02:53 am, Stephen Lee wrote: On Sun, 2002-05-19 at 12:28, David Douthitt wrote: On Saturday 18 May 2002 11:14 am, Stephen Lee wrote: I tunnel imap and smtp all the time except I use stunnel. Presumably you are pointing your host1 mail client to localhost:110 or

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread Stephen Lee
On Mon, 2002-05-20 at 10:13, David Douthitt wrote: Maybe I should try stunnel - I just fumbled my way through using cyrus-sasl to generate some sort of *.pem file. Now if I only knew for sure if cyrus-imap was using it You could always rename the pem file and see if it complains.

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread David Douthitt
On Monday 20 May 2002 03:28 pm, Stephen Lee wrote: On Mon, 2002-05-20 at 10:13, David Douthitt wrote: Maybe I should try stunnel - I just fumbled my way through using cyrus-sasl to generate some sort of *.pem file. Now if I only knew for sure if cyrus-imap was using it You could

[leaf-user] LRP with NET msgs

2002-05-20 Thread Omar D. Samuels
Hey I got my LRP up and running just great. I think I'm running on Eigerstein 2. I had to make a few modifications to tune it to my needs, but it went pretty smoothly overall... a real no-brainer. The only thing that really gave me some trouble was getting my network cards to work. I am

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread Stephen Lee
On Mon, 2002-05-20 at 13:43, David Douthitt wrote: Actually, the *.pem file was used, but an error generated: May 20 13:54:47 lena imapd[80986]: TLS engine: cannot load CA data May 20 13:54:47 lena imapd[80986]: error initializing TLS: [CA_file: ] [CA_path: ] [cert_file:

[leaf-user] Re: leaf-user digest, Vol 1 #892 - 10 msgs

2002-05-20 Thread Erich Titl
Hi folks ssh -L 110:host2:110 -L 143:host2:143 user@host2 (I am trying to use IMAP only - but it's hard) Maybe I am just dense but I am wondering why you don't just use SSL/TLS to connect to your IMAP service. I believe this is a documented feature of an IMAP server and an IMAP

RE: [leaf-user] How to use ipchains.forward

2002-05-20 Thread Lee Kimber
At 11:19 PM 5/19/2002 -0700, MLU wrote: Here is the only command I have in my /etc/ipchains.forward (credited to Charles Steinkuehler) to route between 192.168.9.x and 192.168.3.x internal subnets $IPCH -A forward -j ACCEPT -s 192.168.9.0/24 -d 192.168.3.0/24 -b That solved it. Thanks. Lee

Re: [leaf-user] Re: using IMAP, SSH, stunnel, and SSL

2002-05-20 Thread David Douthitt
On Monday 20 May 2002 04:52 pm, you wrote: ssh -L 110:host2:110 -L 143:host2:143 user@host2 (I am trying to use IMAP only - but it's hard) Maybe I am just dense but I am wondering why you don't just use SSL/TLS to connect to your IMAP service. I believe this is a documented

Re: [leaf-user] Re: using IMAP, SSH, stunnel, and SSL

2002-05-20 Thread Stephen Lee
On Mon, 2002-05-20 at 20:11, David Douthitt wrote: On Monday 20 May 2002 04:52 pm, you wrote: ssh -L 110:host2:110 -L 143:host2:143 user@host2 (I am trying to use IMAP only - but it's hard) Maybe I am just dense but I am wondering why you don't just use SSL/TLS to

Re: [leaf-user] Misconfigured routing (?) and ssh tunnels

2002-05-20 Thread David Douthitt
On Monday 20 May 2002 04:37 pm, Stephen Lee wrote: On Mon, 2002-05-20 at 13:43, David Douthitt wrote: Actually, the *.pem file was used, but an error generated: May 20 13:54:47 lena imapd[80986]: TLS engine: cannot load CA data May 20 13:54:47 lena imapd[80986]: error initializing TLS:

[leaf-user] Re: why this error + /sbin/ifup: interface eth2 already configured?

2002-05-20 Thread Eric House
I asked: I'm using Bering rc2 in a box with two wired NICs and one wireless. When the box boots, the wireless network (eth2) fails to come up. (And dhcpd and shorewall fail too as a result.) But when I run '/etc/init.d/pcmcia restart' from the console there's no problem. And then dhcpd