[leaf-user] DNAT:ssh how to restrict ?

2003-08-02 Thread Hein Bauer
Dear List, I just dnatted my ssh port of Bering 1.0 to a sshd-server inside my localnet. Works fine :-). But I am concerned about security I would like to restrict ssh-logins from a list of MAC-Addresses. I had a look into /etc/shorewall/rules and tried net:~00-00-00-00-00-00 (-- somethin´

[leaf-user] Bering 1.0 IDE cdrom Device not found

2003-08-02 Thread Hein Bauer
Dear list ! I am trying to use two IDE-CDrom drives, I recently connected to my Bering 1.0-Box loading of moduls succeeded, both drives are found while loading the moduls. Manufacturer name and other stuff is recognized correctly. How do I access the devices ? mount /dev/hd[ab] /mnt results: no

[leaf-user] DHCP client

2003-08-02 Thread Alexander Borghgraef
Ok, I finally got the via-rhine driver installed, but now I can't get the dhcp client running (I've got a cable modem internet connection). After some browsing through the docs I noticed dhclient.lrp is not standard included in Bering, which seems strange since the default network setup is eth0

[leaf-user] Bering's features of stateful inspection

2003-08-02 Thread Henning Jebsen
Dear List, what features does Bering have thinking of stateful inspection ? Every (commercial) FW does have a feature named stateful inspection. Whats about Bering ? To prevent a discussion about What ist stateful inspection ? As far as I know, it is nothing strictly defined, more a marketing name

Re: [leaf-user] Bering 1.0 IDE cdrom Device not found

2003-08-02 Thread Charles Steinkuehler
Hein Bauer wrote: Dear list ! I am trying to use two IDE-CDrom drives, I recently connected to my Bering 1.0-Box loading of moduls succeeded, both drives are found while loading the moduls. Manufacturer name and other stuff is recognized correctly. How do I access the devices ? mount /dev/hd[ab]

Re: [leaf-user] DNAT:ssh how to restrict ?

2003-08-02 Thread Tom Eastep
On Mon, 2003-07-28 at 12:40, Hein Bauer wrote: Dear List, I just dnatted my ssh port of Bering 1.0 to a sshd-server inside my localnet. Works fine :-). But I am concerned about security I would like to restrict ssh-logins from a list of MAC-Addresses. I had a look into

Re: [leaf-user] Bering's features of stateful inspection

2003-08-02 Thread Tom Eastep
On Sat, 2003-08-02 at 04:11, Henning Jebsen wrote: Dear List, what features does Bering have thinking of stateful inspection ? Every (commercial) FW does have a feature named stateful inspection. Whats about Bering ? To prevent a discussion about What ist stateful inspection ? As far as I

Re: [leaf-user] Bering's features of stateful inspection

2003-08-02 Thread franco segna
Henning Jebsen wrote: Dear List, what features does Bering have thinking of stateful inspection ? Every (commercial) FW does have a feature named stateful inspection. Whats about Bering ? To prevent a discussion about What ist stateful inspection ? As far as I know, it is nothing strictly

Re: [leaf-user] DHCP client

2003-08-02 Thread M Lu
Bering uses pump.lrp by default. From: Alexander Borghgraef [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [leaf-user] DHCP client Date: Sat, 2 Aug 2003 11:08:48 +0200 (CEST) Ok, I finally got the via-rhine driver installed, but now I can't get the dhcp client running (I've got a cable modem

Re: [leaf-user] DHCP client

2003-08-02 Thread George Metz
To clarify, however... Bering is indeed setup to use pump.lrp by default, and it works extremely well. HOWEVER, since Bering is set up so that you can use DHCP, PPP, or PPPoE with the default image, pump.lrp is NOT loaded by default in syslinux.cfg. So, if you open up syslinux.cfg and add

[leaf-user] using dyndns as a proxy for incoming packets [leaf-user]

2003-08-02 Thread Henning Jebsen
Tom Eastep wrote: Unless the client is on the same network as you are, MAC matching won't work. Yes, I do fairly remember, MAC adresses is restricted to my LAN (on the same cable). OK. -- changing topic to DYNDNS -- Currently my FW accepts TCP connections only from myprivatnet.dyndns.info. So

[leaf-user] NAT Trouble

2003-08-02 Thread Mike Koceja
I have another problem. My son is trying to access an online gaming site and is running into a brick wall. The site requires UDP port 2213 which I opened up with no trouble. Whoever when he connects he gets the following error message... Your internet address changed! It was

Re: [leaf-user] NAT Trouble

2003-08-02 Thread Ray Olszewski
At 03:29 PM 8/2/2003 -0700, Mike Koceja wrote: I have another problem. My son is trying to access an online gaming site and is running into a brick wall. The site requires UDP port 2213 which I opened up with no trouble. Whoever when he connects he gets the following error message... Your

[leaf-user] Question: Bering static DHCP configuration

2003-08-02 Thread Greg Playle
Thank you to all that have helped me learn a bit as I go. My question now is: I'd like to configure the internal network to ONLY assign IP addresses to certain machines. I don't seem to have it correctly configured. Could someone point me to something to read / learn about this? I've

RE: [leaf-user] NAT Trouble

2003-08-02 Thread S Mohan
Maybe this app requires more than one port like H323. Port forwarding might then solve the problem. Mohan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ray Olszewski Sent: Sunday, August 03, 2003 5:22 AM To: leaf Subject: Re: [leaf-user] NAT Trouble At