Re: [leaf-user] Qmail questions

2003-12-22 Thread Ray Olszewski
Sorry to disagree with Lynn, but the magic words here are quite a while. This strongly suggests to me that an earlier guess, that the observed failures actually are DNS-based delays, is the right guess ... and that quite a while is around 3 minutes. What to do about it? First, maybe your mail

[leaf-user] Re - Bash Shell in Bering uClibc

2003-12-22 Thread Robert Sabine von Knobloch
Thanks to Erich Titl K.P. for their useful suggestions. Commenting out line 14 in /etc/init.d/dnscache (UID=1001) works fine, dnscache ezipupdate are now working together with the bash shell. Robert von Knobloch. --- This SF.net email is

[leaf-user] Static DNS entry

2003-12-22 Thread Robert Sabine von Knobloch
Does anyone know a simple way to set a couple of static dns entries on my LEAF Bering (uClib) box? I'm running DNSCACHE for resolving Internet names and have an MS Win2000 Domain controller as internal DNS (it needs it's own dynamic DNS for active directory). All this works just fine until I power

[leaf-user] OpenVPN

2003-12-22 Thread Informtica. Cabildo de La Gomera
Im trying to connect several offices, and I decided to use Bering uClib because it seems to be the most up to date branch. After several problems with network drivers its starting to work, but now I have to decide about security: ipsec or openvpn. It seems that openvpn is easier to

Re: [leaf-user] OpenVPN

2003-12-22 Thread Etienne Charlier
Hello, I use openvpn since 1 year with bering ( glibc) to connect 2 subnets through adsl ( pppoe) lines It's a wonderfull product. ( the easiest one to configure if both ends of the tunnel are connected with changing extrnal addresses). I only used static keys so far. I'm working on building a

Re: [leaf-user] Static DNS entry

2003-12-22 Thread Erich Titl
Hi At 09:52 22.12.2003 +0100, you wrote: Does anyone know a simple way to set a couple of static dns entries on my LEAF Bering (uClib) box? I'm running DNSCACHE for resolving Internet names and have an MS Win2000 Domain controller as internal DNS (it needs it's own dynamic DNS for active

[leaf-user] Bash Bering uClibc

2003-12-22 Thread Robert Sabine von Knobloch
Hello LEAF World! My earlier mail was too hasty, another problem has emerged when using bash. Backup of any or all package (backup... c... L...)results in each package reporting a line number and terminated ticker. A reboot produces simply a kernel panic and everything is completely dead.

Re: [leaf-user] Bash Bering uClibc

2003-12-22 Thread Erich Titl
Robert At 14:57 22.12.2003 +0100, Robert Sabine von Knobloch wrote: Hello LEAF World! My earlier mail was too hasty, another problem has emerged when using bash. Backup of any or all package (backup... c... L...)results in each package reporting a line number and terminated ticker. A reboot

[leaf-user] NIC driver for Netgear FA310TX / Bering-uClibc 2.0?

2003-12-22 Thread Craig Caughlin
Hi folks, I can't get my NICs to initialize. I'm using Bering-uClibc (from Bering-uClibc_2.0_img_bering-uclibc-1680.exe) and 3 Netgear FA310TX (Rev-D2)cards. I've tried using both the natsemi.o tulip.o drivers by themselves and with the pci-scan.o driver, none of which work. I would be happy to

[leaf-user] ISDN package fo Bering uClibc

2003-12-22 Thread jakub urban
hi i'm looking for isdn.lrp package for bering uClibc distribution, can anybody help me please? thanks jakub urban --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up

Re: [leaf-user] Static DNS entry

2003-12-22 Thread Richard Doyle
On Mon, 2003-12-22 at 05:05, Erich Titl wrote: Hi At 09:52 22.12.2003 +0100, you wrote: Does anyone know a simple way to set a couple of static dns entries on my LEAF Bering (uClib) box? I don't see how these entries would solve the problem you describe below. They would help the LEAF box

[leaf-user] zebra.lrp?

2003-12-22 Thread jakub urban
hi all does anybody have last version of zebra (0.94) or quagga (0.96.4) compiled for bering-glibc distro? when I try to compile this on my UML debian/slink machine, I've got segmentation fault messages ;-( (immediately after running .\configure) thanks jakub urban

Re: [leaf-user] NIC driver for Netgear FA310TX / Bering-uClibc 2.0?

2003-12-22 Thread Victor McAllister
Craig Caughlin wrote: Hi folks, I can't get my NICs to initialize. I'm using Bering-uClibc (from Bering-uClibc_2.0_img_bering-uclibc-1680.exe) and 3 Netgear FA310TX (Rev-D2)cards. I've tried using both the natsemi.o tulip.o drivers by themselves and with the pci-scan.o driver, none of which

[leaf-user] e1000 module (version 4.3.15) for Dachstein?

2003-12-22 Thread Miguel De Avila
Does anyone have the compiled e1000 module (version 4.3.15) for the Intel Pro/1000 MT Dual Port nic? I believe that the 4.3.15 version of the driver is the most recent one for 2.2 kernels. I'm using Dachstein v1.0.2, which has version 3.0.16. Unfortunately when I try and load the module I get

Re: [leaf-user] e1000 module (version 4.3.15) for Dachstein?

2003-12-22 Thread Tony
I don't have specific info for that card, but when I've had cards that have been acting that way, it's either been that the card was conflicting with another device, or that the module needs the io address specified. Hope that helps somewhat. Tony - Original Message - From: Miguel De

[leaf-user] sftp gives /usr/bin/ssh: Permission denied

2003-12-22 Thread Axel B. Bregnsbo
Hi there, I have problems making a sftp/scp from my LEAF Bering 1.2 to a local host. Connecting from a sftp client on the host to router works fine. When connecting from router (192.168.22.1) to host (192.168.22.3) I get the error message shown below. firewall: -root- # sftp 192.168.22.3

Re: [leaf-user] zebra.lrp?

2003-12-22 Thread K.-P. Kirchdörfer
Am Montag, 22. Dezember 2003 19:12 schrieb jakub urban: hi all does anybody have last version of zebra (0.94) or quagga (0.96.4) compiled for bering-glibc distro? look for zebra.lrp (which is in fact quagga) at: http://leaf.sourceforge.net/mod.php?mod=userpagemenu=91017page_id=51 when I

Re: [leaf-user] zebra.lrp?

2003-12-22 Thread jakub urban
does anybody have last version of zebra (0.94) or quagga (0.96.4) compiled for bering-glibc distro? look for zebra.lrp (which is in fact quagga) at: http://leaf.sourceforge.net/mod.php?mod=userpagemenu=91017page_id=51 i know this, but this is zebra.lrp for Bering-uClibc, but i looking for

Re: [leaf-user] e1000 module (version 4.3.15) for Dachstein?

2003-12-22 Thread Charles Steinkuehler
Miguel De Avila wrote: Does anyone have the compiled e1000 module (version 4.3.15) for the Intel Pro/1000 MT Dual Port nic? I believe that the 4.3.15 version of the driver is the most recent one for 2.2 kernels. I'm using Dachstein v1.0.2, which has version 3.0.16. Unfortunately when I try and

[leaf-user] re:Opening UDP ports problem solved

2003-12-22 Thread Dalziel, Josh
This email is just an FYI to Ray and Tom who where helping me out last week. I was able to solve my problem from last week with traffic not being forwarded over port 27015. You guys were correct that some traffic was passing but only a small amount about 1 in 5 if I did my math correct. Once I

[leaf-user] How to debug boot up?

2003-12-22 Thread Craig Caughlin
Hi folks, I'm trying to set up a new Bering-uClibc v 2.0 firewall, and I'm getting an error message(s) that I think are related to dnscache (which, of course, scroll by so quickly I can't be sure :-). How do find out which package(s) I'm having problems with? I wrote the dmesg to a file, and then

Re: [leaf-user] re:Opening UDP ports problem solved

2003-12-22 Thread Tom Eastep
On Monday 22 December 2003 03:20 pm, Dalziel, Josh wrote: the rule I had was.. DNATnet loc:192.186.1.3:27015 udp 27015 I changed the rule to.. DNATall loc:192.186.1.3:27015 udp 27015 And everything started to work. Now look at the output of shorewall status and

Re: [leaf-user] How to debug boot up?

2003-12-22 Thread Lynn Avants
On Monday 22 December 2003 05:46 pm, Craig Caughlin wrote: Hi folks, I'm trying to set up a new Bering-uClibc v 2.0 firewall, and I'm getting an error message(s) that I think are related to dnscache (which, of course, scroll by so quickly I can't be sure :-). How do find out which package(s)

Re: [leaf-user] Qmail questions

2003-12-22 Thread Kory Krofft
Michael, Thanks for the response. See below... Kory Krofft [EMAIL PROTECTED] [2003:12:21:12:53:56-0500] scribed: Snip I now need to get Qmail up and running so I can host my own email. I followed the qmail LEAF/LRP user's guide but I am missing something. If I use a windows mail client to send

Re: [leaf-user] Qmail questions

2003-12-22 Thread Kory Krofft
Ray, See below snipped failures actually are DNS-based delays, is the right guess ... and that quite a while is around 3 minutes. It takes about a minute and a half to get a response with telnet. What to do about it? First, maybe your mail server can be configured not to do reverse

[leaf-user] Firewall compromised-V2.0 uClibc-0. image Bering-uClibc_2.0_img_bering-uclibc-1680.exe

2003-12-22 Thread Ken
Hello All, Please be patient with me, I am new to the Linux world and I am not a security expert. I built a uClibc firewall version 2.0 Linux firewall kernel 2.4.20 from the image Bering-uClibc_2.0_img_bering-uclibc-1680.exe and I have been compromised. I have included a lot of information here

[leaf-user] first beta build of WISP-Dist with Atheros support released

2003-12-22 Thread Vladimir Ivaschenko
I have finally released a new WISP-Dist build 2634 with beta Atheros support (using madwifi driver). I was waiting for madwifi to mature, and it is finally stable under my tests (so far). On a 100 Mhz Soekris board I'm able to get around 16 megabits/sec. I didn't test it on more powerful

Re: [leaf-user] Firewall compromised-V2.0 uClibc-0. image Bering-uClibc_2.0_img_bering-uclibc-1680.exe

2003-12-22 Thread Tom Eastep
On Mon, 22 Dec 2003, Ken wrote: Please be patient with me, I am new to the Linux world and I am not a security expert. Then big red flashing lights should have been going off in your head before you posted. I'm not going to respond -- when you can provide conslusive evidence that your

Re: [leaf-user] Qmail questions

2003-12-22 Thread Michael D Schleif
Kory Krofft [EMAIL PROTECTED] [2003:12:22:20:24:44-0500] scribed: snip / I believe as Ray has mentioned that the major issue may be a reverse lookup that qmail is doing which causes the timeout error on the mail client. I am still looking into what dns settings I need to change to fix that

Re: [leaf-user] Qmail questions

2003-12-22 Thread Michael D Schleif
Kory Krofft [EMAIL PROTECTED] [2003:12:22:20:24:44-0500] scribed: snip / What is in these files: /var/qmail/control/defaultdomain kroffts.com /var/qmail/control/locals kroffts.com /var/qmail/control/rcpthosts kroffts.com Try watching output from the following while you attempt to

Re: [leaf-user] Qmail questions

2003-12-22 Thread Ray Olszewski
At 09:47 PM 12/22/2003 -0600, Michael D Schleif wrote: [...] Currently, you are *NOT* authoritative and *CANNOT* assume authority for the kroffts.com domain: Actually, he can ... in a limited sense. In a way that matters, DNS is just a shared delusion, and as long as he lies about it only when

Re: [leaf-user] Qmail questions

2003-12-22 Thread Kory Krofft
Lynn, See below I believe as Ray has mentioned that the major issue may be  a reverse lookup that qmail is doing which causes the timeout error on the mail client. I am still looking into what dns settings I need to change to fix that possibility. I was assuming that all the qmail doc I've

Re: [leaf-user] Qmail questions

2003-12-22 Thread Kory Krofft
Michael, cat /etc/tcp.smtp gives 127.:allow,RELAYCLIENT= 192.168.:allow,RELAYCLIENT= Kory On Mon, 22 Dec 2003 21:51:31 -0600, Michael D Schleif wrote: Kory Krofft [EMAIL PROTECTED] [2003:12:22:20:24:44-0500] scribed: snip / What is in these files: /var/qmail/control/defaultdomain

Re: [leaf-user] Qmail questions

2003-12-22 Thread Kory Krofft
I understand much better now. I will try your suggestions tomorrow and report back. So the DMZ domain should NOT match the internet domain since the name itself ti registered at dnsexit. I take it then that the domain on the dmz could be kroffts.dmz as well as anything else I could choose to

Re: [leaf-user] Firewall compromised-V2.0 uClibc-0. image Bering-uClibc_2.0_img_bering-uclibc-1680.exe

2003-12-22 Thread Lynn Avants
On Monday 22 December 2003 08:16 pm, Ken wrote: Hello All, Please be patient with me, I am new to the Linux world and I am not a security expert. I built a uClibc firewall version 2.0 Linux firewall kernel 2.4.20 from the image Bering-uClibc_2.0_img_bering-uclibc-1680.exe and I have been

Re: [leaf-user] Qmail questions

2003-12-22 Thread Michael D Schleif
Ray Olszewski [EMAIL PROTECTED] [2003:12:22:20:08:14-0800] scribed: At 09:47 PM 12/22/2003 -0600, Michael D Schleif wrote: [...] Currently, you are *NOT* authoritative and *CANNOT* assume authority for the kroffts.com domain: Actually, he can ... in a limited sense. In a way that matters,

Re: [leaf-user] Qmail questions

2003-12-22 Thread Michael D Schleif
Kory Krofft [EMAIL PROTECTED] [2003:12:22:23:30:12-0500] scribed: I understand much better now. I will try your suggestions tomorrow and report back. So the DMZ domain should NOT match the internet domain since the name itself ti registered at dnsexit. I take it then that the domain on the

Re: [leaf-user] Firewall compromised-V2.0 uClibc-0. image Bering-uClibc_2.0_img_bering-uclibc-1680.exe

2003-12-22 Thread Ray Olszewski
Preliminary comment: Tom is right. You've provided here nothing to indicate that your router/firewall has been compromised, so there is no way we (or anyone) can tell you how they did it. Some more specific comments appear inline. I hope you consider them patient ... you are unlikely to get