Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Kwon
> Lets be honest who needs a floppy nowdays ( I think they are very > difficult to find and very expensive ) Brand new floppies from my supplier eprom.ca: FD-PAN-144 PAN 1.44 FD (BEIGE) Yes $8.00 each FD-PAN-144-BLACK PAN 1.44 FD (BLACK) Yes $8.00 each FD-TOS-144-USB-BLK TOSHIBA 1.44 USB EXT. FD B

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
Everybody, Thanks for the advice. I found I have a supplier round the corner!. I will go out and get me one. Thanks for all the advice. Joep On Wed, 2007-07-18 at 13:05 +0200, giovanni wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > J.L. Blom wrote: > > Giovanni, > > How do you do th

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Harry Lachanas
J.L. Blom wrote: > Giovanni, > How do you do that? (short of making some hardware to connect an > USB-stick or flashcard to an IDE interface). > Joep > > On Wed, 2007-07-18 at 11:31 +0200, giovanni wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> J.L. Blom wrote: >> >>> ..

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Erich Titl
Hi Folks J.L. Blom wrote: > Giovanni, > How do you do that? (short of making some hardware to connect an > USB-stick or flashcard to an IDE interface). > Joep I have a handful of DOM's we don't need anymore. Conditions: 1) The mail cost, e.g. dont't consider this outside Europe 2) A free beer sh

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread giovanni
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: > Giovanni, > How do you do that? (short of making some hardware to connect an > USB-stick or flashcard to an IDE interface). > Joep > Usually I buy some very simple interfaces (Compact Flashes are designed to be phisically compatibl

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Luis.F.Correia
Hi there > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > J.L. Blom > Sent: Wednesday, July 18, 2007 11:46 AM > To: giovanni > Cc: leaf-user@lists.sourceforge.net; Erich Titl; Harry Lachanas > Subject: Re: [leaf-us

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
Giovanni, How do you do that? (short of making some hardware to connect an USB-stick or flashcard to an IDE interface). Joep On Wed, 2007-07-18 at 11:31 +0200, giovanni wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > J.L. Blom wrote: > > ... > > Using a floppy is the only way old sys

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread giovanni
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 J.L. Blom wrote: > ... > Using a floppy is the only way old systems can be used as a firewall > (except using a HD, which in my opinion is more vulnerable, or a CD, > which is cumbersome when you want to change things). > Joep > I used many times a Co

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread J.L. Blom
On Wed, 2007-07-18 at 09:51 +0300, Harry Lachanas wrote: > >> > >> > >> One thing I've always hated was to search netfilter.org and find patches > >> or whatever, > >> > > > > True, but there is no way around :-( > > > > Kernel 2.6 has most of the modern goodies, but it is substantially > > l

Re: [leaf-user] Extended MARK Target Question.

2007-07-18 Thread Kwon
> Lets be honest who needs a floppy nowdays ( I think they are very > difficult to find and very expensive ) I don't use a floppy to boot, but however I use a floppy to save my config files. My Leaf System: Asus P5S-VM MB, AMD-K6 400MHz, CD Rom (to boot), 128mb RAM, 3 D-Link NICs, & floppy ---

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Harry Lachanas
>> >> >> One thing I've always hated was to search netfilter.org and find patches >> or whatever, >> > > True, but there is no way around :-( > > Kernel 2.6 has most of the modern goodies, but it is substantially > larger than 2.4 and it will be very difficult to fit a working system on > a

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Erich Titl
Hi Harry Lachanas schrieb: >> iptables -t mangle -N foo >> iptables -t mangle -A foo -j MARK --and-mark 0xFF" >> >> If you get an error such as: >> > Thanks Tom, > > I've done this already and I got > > # iptables -t mangle -A foo -j MARK --and-mark 0xff > > iptables v1.3.5: MARK

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Harry Lachanas
> > iptables -t mangle -N foo > iptables -t mangle -A foo -j MARK --and-mark 0xFF" > > If you get an error such as: > Thanks Tom, I've done this already and I got # iptables -t mangle -A foo -j MARK --and-mark 0xff iptables v1.3.5: MARK target: kernel too old for --and-mark Try

Re: [leaf-user] Extended MARK Target Question.

2007-07-17 Thread Tom Eastep
Harry Lachanas wrote: > > I got a bit confused with "Extended MARK Target" > > > Is this capability available with 2.4.xx kernels ??? As I mentioned when you asked on the Shorewall list, I can't answer that one. > > > > If yes which module is required?? Extended mark support is not a sepa