Re: [leaf-user] opening port 22 on Dachstein 1.02

2003-05-31 Thread Charles Steinkuehler
Robert Chambers wrote: After doing the svi network reload I get a few error messages: EXTERN_IP: not found portfw: illegal local address/port specified M Lu wrote: - Add the following lines (or edit them if already there) into /etc/network.conf EXTERN_TCP_PORTS=0/0_ssh and

[leaf-user] about RTNETLINK no such file me

2003-05-31 Thread tmmxone
hello list :) Sorry for posting, but i spent many hours reading leaf-mailarchive, shorewall faq and htb faq to find whats wrong in my config. But no way. so you are my last chance to configure my chaping config. I am using Bering-uClibc with the Two interface shorewall template. i have access

[leaf-user] Receiving Dial up connections from a modem.

2003-05-31 Thread James Neave
Hi, Is the following possible? Can a LEAF box, without any coding required, auto-answer a modem, authenticate the caller and start a PPP interface across that connection? Once I have the box connected, the caller can initiate TCP connections to any local daemons running, yes? What if the modem

[leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread H.G. Bekker
Hello List, In my search to upgrade my LEAF box with WiFi capabilities I am running into the 1.68 Mb size limit of my Bering 1.0 floppy. I am thinking of adding a USB 1.1 PCI expansion card and a 128/256 USB memory stick to my Bering box. I will still boot from floppy though. This is just for

Re: [leaf-user] Speedtouch USB modem and Bering 1.2 - progress

2003-05-31 Thread Jacques Nilo
Le Vendredi 30 Mai 2003 13:44, Matthew Pozzi a écrit : Matthew OK let's try to simplify the process as musch as wee can: I assume that all the correct modules are loaded in /etc/modules (send me offlist a copy of that file) Now put the following statements in your /etc/interfaces file (and remove

Re: [leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread Jacques Nilo
Le Vendredi 30 Mai 2003 15:12, H.G. Bekker a écrit : Hello List, In my search to upgrade my LEAF box with WiFi capabilities I am running into the 1.68 Mb size limit of my Bering 1.0 floppy. I am thinking of adding a USB 1.1 PCI expansion card and a 128/256 USB memory stick to my Bering box.

Re: [leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread H.G. Bekker
Hello Jacques, I have a very old pc as Bering box so I am sure that it will not allow booting from USB. What I would like to know if there are PCI expansion cards for USB ports which are supported by the Bering kernel. That way I could add a USB pendrive for more memory. thanks for your

Re: [leaf-user] about RTNETLINK no such file me

2003-05-31 Thread Tom Eastep
On Fri, 30 May 2003 08:54:27 +, [EMAIL PROTECTED] wrote: run_tc qdisc del dev eth0 root Get rid of that -- Shorewall is doing it for you quietly (not complaining about errors). Since there is no queuing discipline on eth0 when your command runs, it is failing. -Tom -- Tom Eastep\

[leaf-user] RTNETLINK answers : No such file or directory

2003-05-31 Thread tmmxone
hello list :) Sorry for posting, but i spent many hours reading leaf-mailuser archive, shorewall and htb faq to find whats wrong in my config. :( so you are my last chance to configure my chaping config. I am using Bering-uClibc with the Two interface shorewall template. i have access to

[leaf-user] Creating a bootable USB device?

2003-05-31 Thread Craig Caughlin
Hi folks, Can someone tell me how to actually burn the Bering .iso image to a USB device? I have one of the little USB plug and pray drives I would like to boot Bering from. I normally use Roxio to burn my bootable CD's, but Roxio (apparently) will only burn to a CD drive. P.S. I have a RedHat box

Re: [leaf-user] VPN local to remote-dmz

2003-05-31 Thread M Lu
Thanks a lot, Tom. - The 2 subnet-subnet tunnels work perfectly following your instructions. - Now if I would like to add a road-warrior, could I just expand your instructions further as follow? In /etc/shorewall/zones I have vpn VPN VPN local-network vpn2 VPN2

AW: [leaf-user] Edit floppy directly

2003-05-31 Thread Alex Rhomberg
My router is AT form factor and I have no keyboard for it. Not a problem as I just boot the Bering disk on another system(of course I can't ssh in until I get Bering working). Is it possible to mount and edit the floppy directly on my Debian box or is booting it the only way to edit it?

AW: [leaf-user] lshd / additional users on bering - su command

2003-05-31 Thread Alex Rhomberg
basically, as root i did: chmod 4111 /usr/local/bin/su I would rather suggest chmod 4755 /usr/local/bin/su that gives you standard permissions for su (rwsr-xr-x) Regardless of what they were before - Alex --- This SF.net email is

[leaf-user] DNS from 'fw' to 'dmz'

2003-05-31 Thread M Lu
Hello, I accidentally saw the following in /var/log/messages: May 29 07:41:23 router kernel: Shorewall:all2all:REJECT:IN= OUT=eth2 SRC=192.168.2.254 DST=192.168.2.201 LEN=61 TOS=0x0 0 PREC=0x00 TTL=64 ID=61994 DF PROTO=UDP SPT=53 DPT=1028 LEN=41 My DMZ subnet is 192.168.2.x, 192.168.2.201 is

AW: [leaf-user] Creating a bootable USB device?

2003-05-31 Thread Alex Rhomberg
Craig Can someone tell me how to actually burn the Bering .iso image to a USB device? I have one of the little USB plug and pray drives I would like to boot Bering from. I normally use Roxio to burn my bootable CD's, but Roxio (apparently) will only burn to a CD drive. P.S. I have a RedHat

Re: [leaf-user] DNS from 'fw' to 'dmz'

2003-05-31 Thread Tom Eastep
On Fri, 30 May 2003 08:37:56 -0700, M Lu [EMAIL PROTECTED] wrote: Hello, I accidentally saw the following in /var/log/messages: May 29 07:41:23 router kernel: Shorewall:all2all:REJECT:IN= OUT=eth2 SRC=192.168.2.254 DST=192.168.2.201 LEN=61 TOS=0x0 0 PREC=0x00 TTL=64 ID=61994 DF PROTO=UDP

Re: [leaf-user] VPN local to remote-dmz

2003-05-31 Thread Tom Eastep
On Fri, 30 May 2003 08:21:00 -0700, M Lu [EMAIL PROTECTED] wrote: Thanks a lot, Tom. - The 2 subnet-subnet tunnels work perfectly following your instructions. - Now if I would like to add a road-warrior, could I just expand your instructions further as follow? In /etc/shorewall/zones I have

[leaf-user] Basic Routing with uClib-Bering (v1.1.1)

2003-05-31 Thread Pete Jewell
Hi I'm banging my head against a brick wall trying to work out why some simple routes I have setup on our newly installed uClib-Bering system aren't working. I'm hoping that someone will be able to point me in the right direction, based on the details I lay out here. We have a very simple

Re: [leaf-user] Basic Routing with uClib-Bering (v1.1.1)

2003-05-31 Thread Ray Olszewski
So the cosmos system is a router with two interfaces, yes? One is an address in the 192.1.1.0/24 range, on the local LAN, the other somehow connected to network 172.25.0.0/16. And it wants to route LAN traffic to private addresses in the range 172.25.0.0/16? Is that it? You want the Bering

Re: [leaf-user] opening port 22 on Dachstein 1.02

2003-05-31 Thread Robert Chambers
Thanks Charles, that was my problem. Robert Chambers Charles Steinkuehler wrote: Robert Chambers wrote: After doing the svi network reload I get a few error messages: EXTERN_IP: not found portfw: illegal local address/port specified M Lu wrote: - Add the following lines (or edit them if

Re: [leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread H.G. Bekker
Hi, That might be an alternative. However I have some problems locating the equipment in the Netherlands. But I will keep it in mind. Thanks! Chera Bekker On Fri May 30 2003 15:44, you wrote: You would probably be better off buying a IDE-CF adaptor and hooking on a CF card as a hard disk.

[leaf-user] My wife says Ipsec is going to drive her nuts.

2003-05-31 Thread Trevor-Engele
I have what I thought would be an easy problem to figure out but is not, well for me anyways. I'm hoping someone will be in a kind and generous frame of mind so as to point out the error of my ways! To begin, I am using Leaf 1.2 in an attempt to evaluate it's ipsec performance in no more than a

Re: [leaf-user] My wife says Ipsec is going to drive her nuts.

2003-05-31 Thread Charles Steinkuehler
Trevor-Engele wrote: I have what I thought would be an easy problem to figure out but is not, well for me anyways. I'm hoping someone will be in a kind and generous frame of mind so as to point out the error of my ways! To begin, I am using Leaf 1.2 in an attempt to evaluate it's ipsec

[leaf-user] Add local networks to the machine

2003-05-31 Thread Robert Everland
I am having issues with the box, I set it up on our network as a fail safe so that if something goes wrong with our Proxy server this will take over. I gave everyone a router of dress of this, my problem is now I can't ping outside of my local network. I need to find a way to tell my Bering box

[leaf-user] Problem using ftp!

2003-05-31 Thread Samuel Abreu de Paula
Hi, i have 2 station connected to each other via Orinoco Wireless cards, using Bering 1.0... But the problem is i can't list directories in ftp connections! Im not denying nothing, and the Bering 1.0 has the ip_nat_ftp modules of netfilter right??? What can be the problem??? Thanks Samuel

[leaf-wisp] Problem under high load!

2003-05-31 Thread Samuel Abreu de Paula
Hi ppl... I have a wisp station, where when i try to test with ttcp, i get strange errors! If the direction is from another station to the station with problem, i get 400 Kb/s... But if i try the command: ttcp -n512 -s -t xxx.xxx.xxx.x from the problematic station to the good one... i get the

Re: [leaf-user] Add local networks to the machine

2003-05-31 Thread Ray Olszewski
See below. At 03:43 PM 5/30/2003 -0400, Robert Everland wrote: I am having issues with the box, I set it up on our network as a fail safe so that if something goes wrong with our Proxy server this will take over. I gave everyone a router of dress of this, my problem is now I can't ping outside of

[leaf-user] Shorewall Support

2003-05-31 Thread Tom Eastep
I regret to announce that effective immediately, I will no longer be answering Shorewall questions during local business hours. I normally work from 7:00AM - 4:00PM, Pacific Time (GMT -0800). -Tom -- Tom Eastep\ Shorewall - iptables made easy Shoreline, \ http://www.shorewall.net

Re: [leaf-user] Problem using ftp!

2003-05-31 Thread Erich Titl
Hi Samuel Samuel Abreu de Paula wrote the following at 22:01 30.05.2003: Hi, i have 2 station connected to each other via Orinoco Wireless cards, using Bering 1.0... But the problem is i can't list directories in ftp connections! Im not denying nothing, and the Bering 1.0 has the ip_nat_ftp

Re: [leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread Erich Titl
Hi Apacer has the Europe headquarters in the Netherlands, you could probably get a DOM easily there and that is the most versatile storage I can think of in a LEAF box. Erich H.G. Bekker wrote the following at 19:29 30.05.2003: Hi, That might be an alternative. However I have some problems

[leaf-user] SLIP

2003-05-31 Thread glenn greenfield
You could try out my LEAF Construction kit (available on my developer page at http://leaf-project.org/mod.php?mod=userpagemenu=1402page_id=49 I use it for offline preparation for all packages. In fact, to use ou target embedded box, I put customised packages on a DoM and then make changes

[leaf-user] weblet/sed question

2003-05-31 Thread Tony
Good Evening all, I'm sorry to ask a question like this, but here goes. I want to expand weblet a little and would like some pointers. I'm currently running weblet 1.2 under Bering v1.1. I like the screens where you can view the hits by either port or sorted IP address. What I want to do is,

[leaf-user] App Layer Filtering: Kazaa blocker?

2003-05-31 Thread tmassey
Hello! As reported on /., an Application Layer (Layer 7) packet filter that can block protocols regardless of port, etc. The FAQ and HOWTO are sketchy on details: I can't tell if this is more advanced than filtering packets based on the contents of the packet: something you can already

Re: [leaf-user] SLIP

2003-05-31 Thread Ray Olszewski
At 04:29 PM 5/30/2003 -0700, glenn greenfield wrote: [...] I have recently acquired a 486 laptop and thought I might use it to ssh into my router. Can I do that through a null modem cable? You can, but offhand, I see no benefit in doing so. You can just run a regular getty on a serial port and