Re: [leaf-user] Using HOSTS file

2002-06-07 Thread Ray Olszewski
Michael, I think you have confused the issue for John. There is nothing magic about the last two pieces of a domain name; a DNS server can assert it is authoritative for a domain name that has 3 or 4 or 5 pieces. (Examples are fairly common in TLDs that end in country codes; for example, here

[leaf-user] Bering PPPD and MultiLink

2002-06-07 Thread Glyn Davies
Good day, I am trying to get 2 leased-line modems to connect using multilink. I am unsure which file does what and hope that someone has some guidance for me, please. TIA Glyn __ The information contained in this email is intended solely for the use

[leaf-user] Re: leaf-user digest, Vol 1 #937 - 14 msgs

2002-06-07 Thread James K. Wiggs
Oops. Bloody. Forgot to mention that I had that module installed, as well: # lsmod Module PagesUsed by ip_masq_h3236868 0 (unused) ip_masq_mfw 3076 0 (unused) ip_masq_portfw 2296 12 ip_masq_autofw 2356 0 (unused) ip_masq_user

[leaf-user] ppp/pppoe connection troubles

2002-06-07 Thread ja_drake
Gentlemen, My BERING box seems to be having some connection problems. I'm on aDSL using PPP PPPoE to connect. My connection will stay up for a period of time, up to a couple of days, then reconnect, last a few hours and then fail. It then requires a reboot to reconnect. Here's a logfile

Re: [leaf-user] Using HOSTS file

2002-06-07 Thread Nachman Yaakov Ziskind
Ray Olszewski wrote (on Thu, Jun 06, 2002 at 11:38:09PM -0700): | One low-tech solution that should work, BTW, is to add the hostname/IP | address pair to the hosts file on each workatation (/etc/hosts for Linux | workstations; I don't know the WinXX analog, though I do know there is | one).

[leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread George Luft
Following the instructions in http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 I added the net/ppp0/- line to the Interfaces file and commented out the eth0 line. Should I have left eth0 in? Do I need the dhcp, routefilter, and norfc1918 options added to the ppp0 line? #ZONE

RE: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread George Luft
Tom, I'm with you on all of the points below, except the dial-up. These instructions are specific to pppoe. There's a separate dial-up page, and these appear to have been copied and pasted from there and should be updated. Thanks for all of your work on Shorewall! George PS. I have since

Re: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread Tom Eastep
On Fri, 7 Jun 2002, George Luft wrote: Following the instructions in http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 I added the net/ppp0/- line to the Interfaces file and commented out the eth0 line. Should I have left eth0 in? No. Do I need the dhcp, routefilter, and

Re: [leaf-user] Combining NAT with PAT

2002-06-07 Thread Charles Steinkuehler
Another question for the list: can Linux cum Dachstein a) alias the eth0 (external) interface to multiple ip numbers (in SCO unix we use 'ifconfig alias' Yes b) pass along somehow (to ipchains or whatever) which ip number the packet arrived with? Of course...this is pretty much *ALWAYS*

[leaf-user] increasing load average

2002-06-07 Thread Boris Andratzek
Hej All! Since several Weeks I got the following problem, that doesn't seem to be normal. I use a dachstein 1.02.1 with glibc 2.1.3 on CD and the hardware is a IBM PC 330 (P-166) with 64 MBytes RAM ant two Realtek 8139 NICs. The system is stable and doing everything I want, but: After the

Re: [leaf-user] increasing load average

2002-06-07 Thread Ray Olszewski
Possible? Yeah sure, I suppose it is possible. But you'd do better to give us a more systematic profile of what the router is doing if you want good opinions. The load average numbers that various apps report are sort of odd things. They don't represent a true system load, at least not to my

Re: [leaf-user] modules needed for pppoe?

2002-06-07 Thread Eric Wolzak
Hello Georg Are these (Bering) modules necessary for pppoe? ppp_async.o AFAIK no ppp_deflate.o could be useful by decompressing AFAIK no ppp_mppe.o They don't show up in lsmod. Correct They are not loaded in the standard setup . That's nearly 70KB. Ka-ching! uncompressed that is :)

Re: [leaf-user] increasing load average

2002-06-07 Thread Brad Fritz
Boris, On Fri, 07 Jun 2002 09:28:43 PDT Ray wrote: 1. How does CPU utilization change with this change in load? If you have top available, it calculates and reports the numbers I have in mind; if not, you'll need to get the raw data from /proc/stat and do the arithmetic yourself. Looks

Re: [leaf-user] Combining NAT with PAT

2002-06-07 Thread Phillip . Watts
You most definitely want a 2.14.18 or later kernel with netfilter. The iptables tool for configuring netfilter can do, probably, anything you want. You can start with Dachstein or Bering and roll your own kernel, though Bering is probably fine as is. If you are a serious experimenter, I would

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Richard Amerman
I have been combing the list archive for info and it seems clear the configuring at least Dachstein or other than Bering with two active external interfaces is indeed a daunting task. Getting the two interfaces to work looks fairly easy, it is then all about the firewall. A fairly

Re: [leaf-user] ppp/pppoe connection troubles

2002-06-07 Thread ja_drake
Eric, Thanks for the swift response. SHOREWALL is fine, and lets everything I want in and out. It's not that the PPPoE connection goes down and comes back up again, I appreciate that is what my ISP does, it's just that the PPP connection accasionally goes down and stays down, requiring a

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Tom Eastep
On Fri, 7 Jun 2002, Richard Amerman wrote: I have been combing the list archive for info and it seems clear the configuring at least Dachstein or other than Bering with two active external interfaces is indeed a daunting task. Getting the two interfaces to work looks fairly easy, it is then

[leaf-user] puTTY/SSH keepalives?

2002-06-07 Thread George Luft
I am running Bering and connecting to it via SSH using puTTY as my client--from the outside. Everything works fine but in my syslog, exactly every minute, I get a packet dropped and logged on port 20041 from my client IP. I've poked around on the web and found some vague references to SSH, so

RE: [leaf-user] LEAF Bering- DSL with Modem fallback

2002-06-07 Thread Richard Amerman
I appreciate the reply Tom! You have just caught me digging through your Shorewall site in search of hints on this very topic. I have also just downloaded the Shorewall 1.3.1 lrp and was about to send a message to the LEAF list to see if anyone had tried using this version with the

Re: [leaf-user] PPP/PPPoE problems - continued

2002-06-07 Thread Eric Wolzak
I assume you use pap for pppoe : ? if so then you don't need provider, isp login script Here are my PPP/PPPoE scripts. Are the settings valid for a dynamically assigned aDSL connection? Provider file: # ISP pppd options file # What follows is OK for Compuserve # noauth debug

[leaf-user] How do I set up static routes with Oxygen?

2002-06-07 Thread lists-nba
Is there a suggested standard way to set up static routes with Oxygen? I'm looking for something similar to /etc/sysconf/static-routes If not, how does Bering or Dachstein do this? Thanks in advance. ___ Don't miss the 2002

Re: [leaf-user] pppoe shorewall setup ques.

2002-06-07 Thread Jacques Nilo
Le Vendredi 7 Juin 2002 15:12, George Luft a écrit : Following the instructions in http://leaf.sourceforge.net/devel/jnilo/bupppoe.html#AEN343 snip B/ The masq file (entry 7). With a dial-up modem setup it should look like: (...) #INTERFACE SUBNET ppp0eth0

[leaf-user] 2 networks behind firewall

2002-06-07 Thread Scott
Hi, I'm doing something a little different this time. I have 1 routable IP and 2 private networks which I want to masquerade from behind the firewall, but keep separate from each other. The eth1 network works great, masquerades like it's supposed to, NAT's like it's supposed to. However, my

Re: [leaf-user] 2 networks behind firewall

2002-06-07 Thread Charles Steinkuehler
I'm doing something a little different this time. I have 1 routable IP and 2 private networks which I want to masquerade from behind the firewall, but keep separate from each other. The eth1 network works great, masquerades like it's supposed to, NAT's like it's supposed to. However, my

[leaf-user] Re: leaf-user digest, Vol 1 #937 - 14 msgs

2002-06-07 Thread Erich Titl
Hi [EMAIL PROTECTED] wrote the following at 05:03 07.06.2002: To recap: The plan is to force internal network to resolve MULLAN.DNS2GO.COM to 192.168.1.128. External requests of course will already find their way to 192.168.1.128 via the INTERN_SERVERS in network.conf You are trying to masq

[Fwd: Re: [leaf-user] 2 networks behind firewall]

2002-06-07 Thread Scott
Thanks Charles, worked like a charm. However, I don't see *how* it works. This notation suggest to me that all internal traffic is going over eth1, but I know it's not because I have them physically separated on different switches. INTERN_IF=eth1 INTERN_NET=192.168.1.0/24 192.168.212.0/24

Re: Re: [leaf-user] 2 networks behind firewall]

2002-06-07 Thread Charles Steinkuehler
Thanks Charles, worked like a charm. However, I don't see *how* it works. This notation suggest to me that all internal traffic is going over eth1, but I know it's not because I have them physically separated on different switches. INTERN_IF=eth1 INTERN_NET=192.168.1.0/24 192.168.212.0/24

[leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread Brad Fritz
Boy, this seems to be the thread that never ends. :) I have to politely disagree on several of your statements, Erich. tinydns and dnscache config files for a working setup are included below as well. Re-quoted slightly for readability... On Fri, Jun 07, 2002 at 10:51:02PM +0200, Erich Titl

[leaf-user] Bandwidth Throttling

2002-06-07 Thread Jonathan Berglund
I'm running Dachstein, and I was wondering if there were an packages to throttle bandwidth. The reason I ask is that at my work we rent out space to some other people, and they share our T1. Problem is they are hogging bandwidth and even if institute some rule or policy, I still want to make sure

Re: [leaf-user] Bandwidth Throttling

2002-06-07 Thread Michael D. Schleif
Jonathan Berglund wrote: I'm running Dachstein, and I was wondering if there were an packages to throttle bandwidth. The reason I ask is that at my work we rent out space to some other people, and they share our T1. Problem is they are hogging bandwidth and even if institute some rule or

RE: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread John Mullan
Sounds like I started something!! Just to add fuel to the fire (or more hopefully, slow it down), I do know that since 'mullan.dns2go.com' is a smaller 'chunk' of names to resolve that it is possible to have the server understand that DNS2GO.COM domain gets resolved out-of-house but

Re: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread Brad Fritz
Hi, John. Sounds like you're getting close. More inline... On Fri, 07 Jun 2002 20:39:21 EDT John Mullan wrote: I have made all the required changes. I even changed the network.conf. The variable you mention seems to be CONFIG_DNS=NO Resolv.conf still gets overwritten with 'nameserver

RE: [leaf-user] Re: Using HOSTS file (was: leaf-user digest, Vol 1 #937 - 14 msgs)

2002-06-07 Thread John Mullan
UPDATE: I have found where the changes to resolv.conf are coming from. Dhclient.conf and data coming from my ISP DHCP server. I have managed to overide this behaviour with 'prepend' and 'supersede' and end up with a resolv.conf looking like this: search nimc1.on.cogeco.ca nameserver