RE: [leaf-user] QOS setup under Bering 1.2

2003-12-16 Thread Erich Titl
Joey I am using tc only (not qos-htb) with the wondershaper as documented on the shorewall site. To start with, it failed too with IIRC similar problems. I finally had to dig into the wondershaper code and found ash arithmetic problems settting up the tc commands. So I believe it is not tc

Re: [leaf-user] CABLE + WIFI + IPSEC + WINDOWS + BERING = ???

2003-12-15 Thread Erich Titl
Sean At 10:02 15.12.2003 -0500, Sean E. Covel wrote: Please stop me before I go running off down the wrong road!!! Here's the situation: My sister-in-law is dying to get herself a laptop and WIFI. They already have a cable modem and a virus-laden P2P, chat, teenager PC in the house. They have

Re: [leaf-user] Static route

2003-12-12 Thread Erich Titl
HI At 15:14 12.12.2003 +0100, you wrote: Hallo LEAF World ! Can someone tell me where I should put a static route so that it survives a reboot ? I have a subnet in the internal network - all works fine with Shorewall masquerading but I am not familiar enough with this Linux to know the best

[leaf-user] [ot] pcengines purchase pooling

2003-12-11 Thread Erich Titl
Hi Folks Sorry it you consider this abusive, please don't flame.. slight commercial I am faced with the decision to buy a batch of small router hardware (the pcengines http://www.pcengines.ch/wrap.htm stuff I was flaming about lately on the developers list). Of course OEM prices vary a lot

RE: [leaf-user] pppoe internet connection terminates -- howto restart/redial

2003-12-11 Thread Erich Titl
Alex At 09:02 11.12.2003 +0100, you wrote: I'm curious how to get pppd to auto redial when my connection dies. snipalot Just respawning the pppd is not sufficient, I had times when pppd ran and the ppp0 interface was visible but did not have an IP address. IMHO the pppd should be changed that

Re: [leaf-user] Re: Bering/IPSec/WiFi/Win2K/Shorewall (update)

2003-12-10 Thread Erich Titl
Lynn, Christopher At 21:51 09.12.2003 -0600, Lynn Avants wrote: On Saturday 06 December 2003 05:37 pm, Christopher Harewood wrote: Lynn: I've read about the differing subnets; in fact, it was your doc that has helped to get me thus far. However, changing the laptop IP to 192.168.3.9

Re: [leaf-user] PPPoE Bering qpopper = unable to get emails.

2003-12-10 Thread Erich Titl
Hi At 21:15 10.12.2003, Dmitri Gofmekler wrote: Hi, Encountered some strange problem, when I'm using Bering and his pppoe package, all connections to my mail server (qpopper installed, server filtered by his own ipchains, opened only 25 and 110 incoming ports) are timed out, seems that

Re: [leaf-user] (Fwd) IPSEC route question war : Problem with manual IP route commands in

2003-12-10 Thread Erich Titl
Simon Eric Wolzak wrote the following at 22:39 10.12.2003: Hello SImon, I am not that experienced with the ipsec so U forward this to the list again --- Forwarded message follows --- From: Simon Chalk [EMAIL PROTECTED] To: Eric Wolzak [EMAIL

Re: [leaf-user] open socket

2003-12-05 Thread Erich Titl
Felix At 09:28 05.12.2003 +0100, you wrote: Hi Erich, my server is out side. I make connection in my c prog. like this rc = connect(sd, (struct sockaddr *) servAddr, sizeof(servAddr)); before this I called 1. gethostbyname was ok 2. socket also ok 3. bind port was also ok Just the connect is

Re: [leaf-user] open socket

2003-12-04 Thread Erich Titl
Felix At 15:01 04.12.2003 +0100, you wrote: Hi Everyone, I've a problem to open a socket from my Bering-Box to my server via IP and Port 90. I can ping to my Server from my Bering-Box. But if I start open the socket I just get connection refused... Does someone can help me? Probably blocked by

Re: [leaf-user] DNS Redirection

2003-12-04 Thread Erich Titl
Joey Joey Officer wrote the following at 15:45 04.12.2003: I am setting up a wireless card under Bering and I wanted to provide limited access to it. But because I know that eventually the WEP will be cracked and someone will get an IP address from the DHCPd server, I want to know if I can

Re: [leaf-user] lrpstat and shorewall

2003-11-21 Thread Erich Titl
Al At 23:53 20.11.2003 -0500, you wrote: I'm trying to get weblet w/lrpstat to work on a Bering 1.2. I have weblet working and I can access the netmon.html page correctly. However, it has no data. If I shutdown Shorewall data starts coming in. I thought they both used the same tcp 80 port but I

Re: [leaf-user] cdrom boot problem

2003-11-19 Thread Erich Titl
Al At 18:50 18.11.2003 -0500, ALParada wrote: Looks like I finally got it booting from the floppies. I do however, have two errors: I am getting an error just before the login prompt: cp: unable to close '/etc/dnscache/root/servers/@' : No space left on device. When I try to restart dnscache I

Re: [leaf-user] cdrom boot problem

2003-11-18 Thread Erich Titl
Al At 19:23 17.11.2003 -0500, ALParada wrote: Hello, I'm trying to get Bering 1.2 to boot from the CD. I would also like to keep a few packages on the floppy since I'm not finished with them yet and i'm still making changes. I have gotten as far as getting the CD to boot and I have a working

RE: [leaf-user] VPN shorewall options

2003-11-17 Thread Erich Titl
Troy At 19:45 16.11.2003 -0600, Troy Aden wrote: Hello yet again, Sorry to be a bother. I have searched the Freeswan docs for any reference to the fswcert command with no luck. I need to know what command I should be using instead of the fswcert command. I did find a reference to it here

[leaf-user] Bering and traffic control

2003-11-17 Thread Erich Titl
Hi everybody Has anyone succeeded using traffic shaping in Bering 1.2 I am using the wondershaper and try to load it in shorewall. Here is what I get right from the start tc qdisc add dev eth1 root handle 1: htb default 20 RTNETLINK answers: invalid argument Is this tc compatible with the

[leaf-user] shorewall set up, was Bering 1.0 - 1.2 Upgrade (continues) 1/2

2003-11-16 Thread Erich Titl
Hi At 19:45 16.11.2003, Richard Doyle wrote: Paul's original problem was a Shorewall misconfiguration. Bering Shorewall is configured for two ethernet connections: an external connection on eth0 and an internal connection on eth1. Paul has an external connection on ppp0 and an internal

RE: [leaf-user] VPN shorewall options

2003-11-13 Thread Erich Titl
Troy At 21:35 13.11.2003, Troy Aden wrote: Thanks for getting back to me. I have run into problems with one command in the IPSec procedure. Snip Make your ipsec server certificate # openssl req -newkey rsa:2048 -keyout serverKey.pem -out serverReq.pem # openssl ca -policy policy_anything -in

Re: [leaf-user] LEAF on compact flash

2003-11-08 Thread Erich Titl
Brock this is kind of late, being off the list for a while... At 23:30 30.10.2003, Brock Nanson wrote: Lynn, I now use the dd command regularly. Once I have a working image, I dd it off the CF for safekeeping, in case I ever need to create another (RSA keys are a PITA to cut and paste etc.)

Re: [leaf-user] many non contiguous subnets on the same interface

2003-10-25 Thread Erich Titl
At 19:40 23.10.2003, Lynn Avants wrote: On Thursday 23 October 2003 02:50 am, Erich Titl wrote: [...] There is no NAT on the inner firewall, but then there is no NETBIOS traffic either through the firewall. Hmmm... so it is running proxy-arp on the inner firewall (assuming this is the only way

Re: [leaf-user] Thompson SpeedTouch 330 USB and Bering

2003-10-24 Thread Erich Titl
Michelle Michelle Konzack wrote the following at 23:51 23.10.2003: Hello, I have tried to make Bering usabel for the Thompson SpeedTouch 330 USB but the Floppy is too small !!! I have only 120 kByte free on the Floppy. Does anyone has done this and HOW ? Need only the ADSL/USB-Stuff with

Re: [leaf-user] many non contiguous subnets on the same interface

2003-10-23 Thread Erich Titl
Lynn At 23:56 22.10.2003 -0500, Lynn Avants wrote: On Wednesday 22 October 2003 02:26 am, Erich Titl wrote: Hi I am deploying Bering 1.2 systems as firewalls/VPN tunnel endpoints to build what they call extruded subnets in freeswan jargon Here a little bit of ASCII art client net

[leaf-user] many non contiguous subnets on the same interface

2003-10-22 Thread Erich Titl
Hi I am deploying Bering 1.2 systems as firewalls/VPN tunnel endpoints to build what they call extruded subnets in freeswan jargon Here a little bit of ASCII art client net 10.230.60.0/24 (for historical reasons) ¦ 10.230.60.1 Bering / customer VPN endpoint xx.xx.xx.xx (any old public address)

Re: [leaf-user] Problem IPSec with Bering

2003-10-19 Thread Erich Titl
Mikael At 14:29 17.10.2003 +0200, Mikaël PLOUHINEC wrote: ... # connection de test entre Bic et Exodus conn Bic-Exodus left=%defaultroute leftsubnet=192.168.1.0/24 leftnexthop= leave away or enter sensible value... right=172.16.10.4 rightsubnet=10.0.0.0/8

Re: [leaf-user] Compiling for Bering 1.2 and Bering uClibc

2003-10-16 Thread Erich Titl
Hi At 17:41 16.10.2003, James Neave wrote: Hello All, Compiling for Bering 1.2 and uClibc. Is it *only* possible to compile for Bering 1.2 with a Debian/slink installation? Or can I take, say, Mandrake 9 and compile with a target OS? Just tell it which Glibc to use for instance. And install a

Re: [leaf-user] Kernel development (module compile)

2003-10-11 Thread Erich Titl
Hi Sebastian At 08:14 11.10.2003, Sebastian A. Aresca wrote: ... debian:/usr/src/super-freeswan-1.99.6.2# make menugo ok all right. but then what? if i copy the bzImage to the floppy the system start but i want to compile the module using the kernel 2.4.20. cd /src/linux ; make modules HTH Erich

Re: [leaf-user] Re: ncurses5.lrp in Bering 1.2 (Ray Olszewski)

2003-10-10 Thread Erich Titl
Felix At 09:36 10.10.2003, Felix Theodor wrote: Hallo Ray, actually I just want to implemented a small programm that allowed the user easyly to change the provider information suchs MSN, REMMSN, USER and PWD. So I started with... #include stdio.h #include stdlib.h #include curses.h int main()

Re: [leaf-user] running a externel program after LEAF ist starting

2003-10-06 Thread Erich Titl
Hi At 09:33 06.10.2003 +, Phuoc Nguen wrote: Hallo! I have another question. ist it possible to start a external programm after starting LEAF? if possible how can I do this? You could run it from an /etc/init.d/whatever script. HTH Erich THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL

Re: [leaf-user] running a externel program after LEAF ist starting

2003-10-06 Thread Erich Titl
Hi At 15:44 06.10.2003, Phuoc Nguen wrote: Hi Erich, can you give me a Example? I'm absolute beginer... One that looks pretty basic to me is /etc/init.d/ntpdate... This is used to run the ntpdate program once at system start. You can find it in the ntpdate.lrp package tar tzf ntpdate.lrp

Re: [leaf-user] Segmentation Fault on Back-Up Attempt?

2003-10-05 Thread Erich Titl
Joe could that be a HW problem on the floppy drive? HTH Erich At 00:28 02.10.2003 -0500, you wrote: Hi all. I've got the most annoying problem, and I think I'm...well, screwed. Just today I was trying to back up my Bering floppy, when lrcfg's back up floppy submenu failed on a segmentation

Re: [leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-10-01 Thread Erich Titl
kp Thanks, I have a copy of your message. The thing I'd like to improve is the recovery mechanism. I somehow hate having to run a cron job to check if a connection was broken due to IP change. I believe there must be a way for IpSec to detect that the other endpoint is not reachable and to

[leaf-user] IPSEC/shorewall with 2 dynamic IP's

2003-09-30 Thread Erich Titl
Hi Has anyone successfully set up an IPSec tunnel with 2 dynamic endpoints. Would you mind to share the shorewall and up/down scripts. I seem to have a problem setting it up because 1) shorewall needs to be up to get the IP address of the remote gateway and 2) shorewall needs the address

RE: [leaf-user] Modefied script RESOLVED : Bering lost it's NICs

2003-09-29 Thread Erich Titl
Francois you are right to look for a generiic solution, I just happened to stumble accross this post... At 20:09 29.09.2003, Francois BERGERET wrote: But, may be the better way is to do as this FreeSWan user, to modify the ip-up.local file to render it more universal without fixed IP and

Re: [leaf-user] Static Route Setup for Bering Firewall

2003-09-29 Thread Erich Titl
Simon At 17:11 26.09.2003, Simon Chalk wrote: Hi All, Has anyone setup Static routes on Bering 1.2? I am trying to add the following to the /etc/network/interfaces file up route -net 1.2.3.4 netmask 255.255.255.248 gw 4.5.6.7 When I do a ip route, I don't see the route above. I have also

RE: [leaf-user] Modefied script RESOLVED : Bering lost it's NICs

2003-09-29 Thread Erich Titl
Francois Interesting, only I am puzzled by the fact that you have to run this from cron. I am currently listening on the freeswan list and found something which might interest you: [EMAIL PROTECTED] .. I've never had this difficulty. I've lost 'net connectivity over my pppoe connection

Re: [leaf-user] Kernel compilation errors

2003-09-29 Thread Erich Titl
Thomas At 11:36 27.09.2003, Thomas Wille wrote: .. So my questions, maybe a little bit OT: where can I find the call for md5sum, so that I can correct it? why is it called? If this was related to a crime I'd suggest to 'follow the money trail' here it is easier, just follow the 'make' trail

Re: [leaf-user] Kernel compilation errors

2003-09-25 Thread Erich Titl
Thomas At 23:01 24.09.2003 +0200, Thomas Wille wrote: Erich, I did all the things I normally do when compiling a new kernel: - untar the kernel (in this case into my home dirctory) - as root adjust the link /usr/src/linux so that it points to the kernel source to be compiled - exit from beeing

Re: [leaf-user] openssh 3.7.1p1

2003-09-25 Thread Erich Titl
At 18:48 24.09.2003 -0300, Brian Fisher wrote: Hi All, I have updated my bering with the new ssh suite. Here's a bug that I want to pass along. I use putty to ssh into my bering box and all is good except when I want to 'break' or end a command. for example, if I start to

[leaf-user] IPSEc tunnel drops on wireless link

2003-09-23 Thread Erich Titl
Hi I have 2 Bering 1.0_stable stations with FreeSwan 1.99 running over a wireless link. Occasionally (especially on rainy and stormy days) the tunnel breaks down. If I stop ipsec on one end and ping the remote ipsec gateway I get good results. Starting the tunnel again removes the capability

Re: [leaf-user] ppp filter? (was: Bering (ppp): How to ignore UDP Traffic (135/137)?)

2003-09-16 Thread Erich Titl
Alex At 11:37 16.09.2003 +0200, Alex Rhomberg wrote: after an uptime of 43 Days ;-)) I go crazy, I must shutdown die Internet connection every time by hand, because the IDLE 300 does not work. I have deconected the Ether-Cabel from my internal Network, but my Bering-PPP-Box does not

Re: [leaf-user] Re: ppp filter? (was: Bering (ppp): How to ignore UDP Traffic (135/137)?)

2003-09-16 Thread Erich Titl
MIchelle At 15:46 16.09.2003 +0200, Michelle Konzack wrote: On 2003-09-16 11:37:27, Alex Rhomberg wrote: You need to insert an active-filter line in your /etc/ppp/options. I know, but only on Kernel 2.4.xx :-/ Bering is based on 2.4.xx, hard to get around that. HTH Erich THINK Püntenstrasse 39

Re: [leaf-user] Compile module Bering 1.2 how to

2003-09-15 Thread Erich Titl
Sebastian Sebastian A. Aresca wrote the following at 20:59 15.09.2003: Anybody knows about a Bering 1.2 kernel distribution to compile modules HOW TO. I just use a separate directory (not /usr/src) and gcc 2.95.x. My native compiler is gcc 3.x., so I placed a copy of 2.95.x in /usr/local/bin and

Re: [leaf-user] ez-ipupd not firing in response to DHCP lease change

2003-09-11 Thread Erich Titl
Eric At 20:16 10.09.2003 -0700, you wrote: I'm running Bering 1.2 on an SBC DSL connection. I use ez-ipupd to export the dynamic IP address I'm assigned. Or at least I'd like to. While ez-ipupd used to work for me (and still works at other [comcast-based] locations I maintain), now when SBC

Re: [leaf-user] Wisp and CS5530 /DoC

2003-09-10 Thread Erich Titl
Ray group Discard my previous mail, CS5530 does not come as a module. It looks extremely hidden in the configuration tree, actually the .config (from Bering) file shows # CONFIG_BLK_DEV_CS5530 is not set I am curious how this is set it at all, browsed menuconfig to no avail. Sorry about the

RE: [leaf-user] Wisp and CS5530 /DoC

2003-09-10 Thread Erich Titl
Ray At 23:32 10.09.2003 +0930, you wrote: Erich, thanks for replying - I did the install from a Dos formatted hardrive and used the dos based DoC tools, so, How do I get into the LRP / Cfs files from dos to specify that the kernel needs to laod the module - or do I need to load it explicitly in

RE: [leaf-user] reduce load on a bering box

2003-09-03 Thread Erich Titl
Ronny For high performance, as your case seems to be, you should probably compile your own kernel to make it as slim as possible. Unnecessary features can be removed that way. Necessary stuff could be compiled into the kernel instead of loading it as a module. cheers Erich At 09:12 03.09.2003

RE: [leaf-user] Bering lost it's NICs

2003-09-02 Thread Erich Titl
Hi At 09:44 02.09.2003 +0300, J. James wrote: Hi It's nice to see someone else also having the same problem... I'm sorry: I ust read about a pop star visiting a local jail and the first thing he aid to the audience was nice to see so many of you here today ;-) I have the same problem from

Re: [leaf-user] Bering floppy basics

2003-08-28 Thread Erich Titl
Hi Bino, Steve At 08:35 28.08.2003 +0700, bino-psn wrote: Dear All Just exactly like Steve said. And Eric .. Yes I got 10 or more Flash-IDE (a.k.a DOM) unused. I see, for an embedded system I did not even consider a hard disk as an option. Should you consider swappping DOM's for CF's I might be

RE: [leaf-user] Bering 1.2 dhcpd doesn't start with wlan/hostap or other too late interface up

2003-08-26 Thread Erich Titl
Francois At 18:19 25.08.2003, Francois BERGERET wrote: Hi Erich, Thanks for your response. I have read quickly your script. I am not so good to evaluate if this will be ok for my problem. I am using Eth interfaces with 'eth0' and 'eth1' label and two wlan nics with 'wlan0' and 'wlan1' labels.

RE: [leaf-user] Bering floppy basics

2003-08-25 Thread Erich Titl
Hi Steve At 08:50 24.08.2003 +1200, Steve Wright wrote: On Sun, 2003-08-24 at 03:28, Dave Hunt wrote: Look up www.pcengines.ch. Dave, have you used pcengines embedded PCs ? I got one of the pre production models to port Bering to it. It basically works with one major problem still open, the

Re: [leaf-user] Bering UclibC development

2003-08-25 Thread Erich Titl
Hi kp Thanks for the info... At 01:41 23.08.2003 +0200, K.-P. Kirchdörfer wrote: Am Freitag, 22. August 2003 13:51 schrieb Erich Titl: . Anyway, what you are asking for is already available: Point you're browser to: http://www.uclibc.org/ look for 30 June March 2003, dev systems updated

Re: [leaf-user] Operation not supported by device

2003-08-22 Thread Erich Titl
Darcy At 10:00 21.08.2003, Darcy Parker wrote: Good day listers, I ma trying to set up a leaf-bering (1.2) FW. I have the following two NICs You better read http://www.scyld.com/network/vortex.html this is IMHO the definite information source on that driver. HTH Erich THINK

RE: [leaf-user] Bering UclibC development

2003-08-22 Thread Erich Titl
Hi At 09:06 22.08.2003 +0100, Luis.F.Correia wrote: ... The current uClibc development does not use UML. What is the minimal environment then for: a) Kernel compile Is it really different from the Bering standard kernel enviroonment? I always thought Kernels are library independent...? b)

Re: [leaf-user] comparison passive ftp clients Dachstein vs Bering

2003-08-21 Thread Erich Titl
Victor At 12:12 20.08.2003 -0700, you wrote: My friend is still troubleshooting why Dachstein works with an internal passive ftp client SENDING a file and Bering fails. System is PPPoE He ran tdpdump in passive ftp mode . Dachstein showns the mss at differnt stages of the ftp as 1460 and 1412

Re: [leaf-user] Access to FTP to get LRP

2003-08-14 Thread Erich Titl
Sebastian At 04:40 10.08.2003, Sebastián Aresca wrote: Thanks Erich, i bulid a script that use wget (realy i modified your script =) ) You probably could have done that with just specifying another download method in the lrp.conf file. If that is not possible, would you mind to tell me what you

Re: [leaf-user] Last package won't load (Bering v 1.2 on CD)

2003-08-14 Thread Erich Titl
Jeremy At 01:36 13.08.2003 -0500, Jeremy A Tourville wrote: Ok, I've followed the directions regarding creating a lrpkg.cfg file and when the CD boots I get a *.lrp (nf!) error. I've tried to add a carriage return at the end of the lrpkg.cfg file and still no luck. I've tried switching the

Re: [leaf-user] Compile ADM8211 Linux driver

2003-08-14 Thread Erich Titl
Sebastian Actually any Linux system with an appropriate gcc compiler should do. Kernels can be cross compiled. If you are interested I have a Makefile which makes compiling a Bering kernel a piece of cake. It's still quite beta but works in my environment which is an old patched up SuSe 6.3

Re: [leaf-user] Last package won't load (Bering v 1.2 on CD)

2003-08-14 Thread Erich Titl
Hi At 19:04 13.08.2003, [EMAIL PROTECTED] wrote: Erich, Thank you for your reply. I have confirmed all packages that are listed in my lrpkg.cfg are on the CD. Let me state again the LAST package listed won't load properly. (makes no difference which one) That is the part that confuses me.

Re: [leaf-user] COMING SOON: WDIST on floppy!!

2003-08-14 Thread Erich Titl
Sebastian At 01:49 11.08.2003 -0300, Sebastián Aresca wrote: Wait, wait, i still working to make WDIST to boot on 3 1/2 floppy disk. The idea is to make a simple boot with wget.lrp and root.lrp. After booting it will connect to http or ftp server to download the package needed. Then install it

Re: [leaf-user] Re: package list problem

2003-08-14 Thread Erich Titl
Ted Theodore Wynnychenko wrote the following at 22:30 09.08.2003: Erich: thanks for the reply. anyway, about switching from fd0 to fd1. the packages are loaded at boot, and syslinux.cfg is configured to use both drives, so everything works as it should without me at a console. (i am not sure

Re: [leaf-user] Access to FTP to get LRP

2003-08-14 Thread Erich Titl
Sebastian At 07:15 09.08.2003, Sebastián Aresca wrote: Anybody thinks about it? ... This is a wonderfull idea ... now i forgot about this fu.. kbytes in the floppy. My Bering Router Disk only has the package root, libm and ftp Then i download it from ftp and it work fine. I have squid2 (350kb),

RE: [leaf-user] followup to interfaces / shorewall assist

2003-08-03 Thread Erich Titl
Greg Greg Playle wrote the following at 17:31 03.08.2003: Erich: The output was something like this: Variables eth /proc/net/dev 60 NICS = 1 Count = 0 Count updated 1 Devs = 1 expr [ 1 -eq 60 -o 1 -eq 1 ] OK, the loop breaks here because we expect exactly one eth device and we found

RE: [leaf-user] followup to interfaces / shorewall assist

2003-07-31 Thread Erich Titl
Greg At 19:32 30.07.2003 -0600, Greg Playle wrote: This is essentially what I ended up doing. As Mr. Sturdevant observed, card services do not come up in time. I added a script at the end of the boot sequence in rc2.d that restarts networking, dhcpd and shorewall, and suddenly Bob's your Uncle!

Re: [leaf-user] Re: VPN: How to establish connection with .p12?

2003-07-29 Thread Erich Titl
Tim At 09:39 29.07.2003 -0400, [EMAIL PROTECTED] wrote: ... If it were only that easy... I'm connecting my Bering firewall to XYZ firewall, having only been given a .p12 file... ... Thank you very much for the suggestions. Unfortunately, there are two things complicating this: 1) I only have

Re: [leaf-user] VPN: How to establish connection with .p12?

2003-07-28 Thread Erich Titl
Tim you may also want to look into http://www.drh-consultancy.demon.co.uk/pkcs12faq.html At 17:14 25.07.2003 -0400, [EMAIL PROTECTED] wrote: ... My biggest problem right now is how to set up Bering to accept the certificates. With SSH Sentinel, I have been given a single .p12 file. With that,

Re: [leaf-user] Win32 -- Bering Network file access.

2003-07-28 Thread Erich Titl
Hi James At 11:32 28.07.2003 +0100, James Neave wrote: Hi, Without using Samba2, what secure ways are there to gain access to files on our corporate Bering box? SSH allows us to administer it, but at the moment the only way we can make print-outs of the rules is hacking it out of the floppy with

Re: [leaf-user] followup to interfaces / shorewall assist

2003-07-27 Thread Erich Titl
Greg At 18:14 27.07.2003, Greg Playle wrote: Tom, Steve and George: Thank you; the information you gave was helpful. I checked a bit more; in short, eth0 does not come up on boot, but seems to take a while--perhaps longer than Erich Titl's script allows. I've got to check more

Re: [leaf-user] wireless LAN security

2003-07-18 Thread Erich Titl
Steve At 11:24 18.07.2003 +1200, Steve Wright wrote: Hi Folks, What are we using to secure single point-to-point links? - viz WEP, but actually secure.. AIUI, Ad-Hoc mode must be used for backbones, but this leaves security to be done at the IP level - not really good enough. I have read-up

Re: [leaf-user] Making DNSCache start before Shorewall

2003-07-09 Thread Erich Titl
James At 13:05 09.07.2003 +0100, you wrote: Hello all, I'm trying to make DNSCache start before shorewall. This is because I need DNS lookups in the shorewall rules file. I spoke to a friend of mine and we changed the RCDLINKS in the init.d files to the following DNSCache RCDLINKS=2,S45 3,S45

Re: [leaf-user] Safe transparent proxying via DS1.02 and Squid

2003-07-02 Thread Erich Titl
Vic At 15:02 02.07.2003 +0800, Victor Berdin wrote: Hello Everyone, I needed to perform transparent proxying wherein web clients from both public and private net can access my internal web site. Transparent proxying AFAIK is nothing but redirection of packets to the relevant port(s) to a proxy

[leaf-user] package remote install

2003-07-01 Thread Erich Titl
Hi everybody I uploaded the package remote install scripts to my CVS repository under http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/leaf/devel/etitl/bering In order to use it you need rload.lrp from the packages directory. Additionally you will need to patch /etc/lrp.conf and

Re: [leaf-user] Re: Trouble getting started

2003-06-25 Thread Erich Titl
Chris Somerlot, Chris wrote the following at 17:21 25.06.2003: Still can't get it going. I have loaded the module for the 3c509 driver, (I'm using 2 ISA 3c509B cards) but only get 1 showing up in ip addr: 1: lo: LOOPBACK,UP mtu 16436 qdisc noqueue link/loopback 00:00:00:00:00:00 brd

Re: [leaf-user] Long time ago...

2003-06-25 Thread Erich Titl
Michelle At 03:37 24.06.2003 +0200, you wrote: I will try to get an 128kBit ADSL connection to put my Network online... But need to find a dyn-DNS Provider where I can have up to three Domains and very much more HOSTS... If possibel, with my own master-DNS I use zoneedit, works OK for me, up

Re: [leaf-user] Long time ago...

2003-06-25 Thread Erich Titl
Michelle At 03:37 24.06.2003 +0200, you wrote: I will try to get an 128kBit ADSL connection to put my Network online... But need to find a dyn-DNS Provider where I can have up to three Domains and very much more HOSTS... If possibel, with my own master-DNS I use zoneedit, works OK for me, up

Re: [leaf-user] Problems using vlan.lrp and bridge.lrp

2003-06-24 Thread Erich Titl
Jose I do not understand much about bridges, so I am surprised that you would assign the same subnet 192.168.1.x on the eth1 adapters on both bridges. I do not know how this could work so please someone enlighten me. How could you prevent address collisions ths way? Erich At 09:02 24.06.2003

Re: [leaf-user] Trouble getting started

2003-06-24 Thread Erich Titl
Chris please read this and provide the information requested there http://leaf.sourceforge.net/mod.php?mod=userpagemenu=11page_id=4 thanks Erich At 06:09 24.06.2003 -0700, you wrote: I'm using a P75 w/ 32mb ram and 2 3Com509 cards to try and setup a Bering 1.2 router box. I have one computer

Re: [leaf-user] Booting and installing Bering using PXE

2003-06-19 Thread Erich Titl
Hi Jacques/Lynn I was wondering if we could do some kind of hybrid set up which would fetch packages from a server (whatever method) after booting from floppy. I believe it should be possible to start a minimal LEAF installation, get up the NIC's and then load the big packages from the

RE: [leaf-user] URGENT- Network Card Help

2003-06-18 Thread Erich Titl
Hi At 09:38 18.06.2003 +0100, you wrote: Many thanks for all your help but having a BIG problem writing the Win32 disk images to floppy, just keep getting an error. That applies to Bering 1.2, 1.1 and the stable release basically all the ones I've tried. Ran the image.exe on win2K and XP. Have

Re: [leaf-user] File downloads using weblet

2003-06-17 Thread Erich Titl
Hi Lee I did this a few years back and had to do a refresh cycle on my memory... It is important that echo treats all its parameters so the disposition needs quotes... --- #!/bin/sh echo MIME-Version: 1.0 (just a fake) echo Content-type: application/octet-stream ;

Re: [leaf-user] DHCP on PCMCIA interface?

2003-06-15 Thread Erich Titl
Greg Greg Playle wrote the following at 22:47 14.06.2003: This is a followup to earlier traffic, shown below. My problem now seems to be the DHCP daemon wants to activate before the PCMCIA card is available, so it cannot find interface eth0. Running dhcpd at the command line promptly fires it

Re: [leaf-user] Image file too long

2003-06-15 Thread Erich Titl
Jose Jose Luis Abuelo Sebio wrote the following at 23:24 15.06.2003: Hey, what´s up? I am using a normal bering 1.2 boot disk, but now I need to add one module and another package (nicstar.o and atmtools.lrp) and when I try to back up any package or the floppy I don´t have space enough because

RE: [leaf-user] boot floppy to boot Bering cdrom

2003-06-11 Thread Erich Titl
Hi At 09:13 11.06.2003 +0200, you wrote: As far as I know, you can't. But you can always make an ISO-image yourself, which contains those settings. Do a search on building an ISO in the archives of this list, it has been discussed many times. -Original Message- From: wing newton

Re: [leaf-user] boot floppy to boot Bering cdrom

2003-06-10 Thread Erich Titl
Hi At 17:00 09.06.2003 -0700, you wrote: Greetings, I don't have space on a single floppy for all the packages. So, I create a bootable ISO Bering CD but my pc does not support CDROM boot. Is there a floppy image available to just allow me to boot up from the floppy which then in turn to boot up

[leaf-user] LEAF etherboot

2003-06-06 Thread Erich Titl
Henning Henning Jebsen wrote the following at 10:39 05.06.2003: Trying to load an etherboot which enables pcmcia and network drivers to load the final initrd/OS from a tftp server. My LEAF box is a notebook with only PCMCIA NIC's. Hi Erich, I did this before Not with pcmcia cards but

Re: [leaf-user] Improving wireless link

2003-06-05 Thread Erich Titl
Charles As Steve pointed out, distance is one key element. Could you tell us a bit more on your installation like distance, antennas used e.t.c. My installation does not really apply, although I have fine bandwidth with Lucent/Avaya cards and 14 dB external antennas. Distance in my case is

Re: [leaf-user] syslinux question: putting bering on a diskonchip

2003-06-05 Thread Erich Titl
Steve Steve Wright wrote the following at 20:40 04.06.2003: Erich Titl wrote: Have you ever tried that on a PCMCIA card? Putting an lzdsk boot image on one ? no. haven't. What are you thinking ? Trying to load an etherboot which enables pcmcia and network drivers to load the final initrd/OS

Re: [leaf-user] bering IDE driver problem

2003-06-05 Thread Erich Titl
Marc Marc E. Fiuczynski wrote the following at 18:35 04.06.2003: I followed the instructions to put the IDE drivers into initrd.lrp of the bering floppy. Unfortunately, this doesn't seem to work with my disk-on-chip IDE drive (even though this drive can be accessed just fine via a linux rescue

RE: [leaf-user] syslinux question: putting bering on a diskonchip

2003-06-04 Thread Erich Titl
Hi Marc Marc E. Fiuczynski wrote the following at 19:27 03.06.2003: I am using a linux rescue disk to copy over a bering distribution to the disk-on-chip device. If the system reconizes the disk as an IDE device, I would believe it. Some time ago I had difficulties running syslinux on my bering

Fwd: Re: [leaf-user] syslinux question: putting bering on a diskonchip

2003-06-04 Thread Erich Titl
From [EMAIL PROTECTED] Tue Jun 3 23:06:08 2003 Date: Wed, 04 Jun 2003 09:05:59 +1200 From: Steve Wright [EMAIL PROTECTED] User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.9) Gecko/20020513 X-Accept-Language: en-us, en To: Erich Titl [EMAIL PROTECTED] Subject: Re: [leaf-user] syslinux

Re: [leaf-user] Kernel panic-syslinux.cfg no good

2003-06-02 Thread Erich Titl
Glenn First of all, which distribution are you referring to? glenn greenfield wrote the following at 02:27 01.06.2003: I thought I had followed the instructions but I apparently missed something here. VFS Can't find Minix blah...on dev 02:00 LINUXRC: Installing - root: root(nf!) etc(nf!)

Re: [leaf-user] Problem using ftp!

2003-05-31 Thread Erich Titl
Hi Samuel Samuel Abreu de Paula wrote the following at 22:01 30.05.2003: Hi, i have 2 station connected to each other via Orinoco Wireless cards, using Bering 1.0... But the problem is i can't list directories in ftp connections! Im not denying nothing, and the Bering 1.0 has the ip_nat_ftp

Re: [leaf-user] add PCI USB expansion card, USB memory stick to Bering box

2003-05-31 Thread Erich Titl
Hi Apacer has the Europe headquarters in the Netherlands, you could probably get a DOM easily there and that is the most versatile storage I can think of in a LEAF box. Erich H.G. Bekker wrote the following at 19:29 30.05.2003: Hi, That might be an alternative. However I have some problems

Re: [leaf-user] Problem with iptables

2003-05-27 Thread Erich Titl
Tom At 15:31 27.05.2003, Tom Eastep wrote: On Tue, 27 May 2003 15:14:32 +0200, Erich Titl [EMAIL PROTECTED] wrote: Christophe At 15:05 27.05.2003 +0200, you wrote: On Tue, 27 May 2003 14:52:40 +0200 Erich Titl [EMAIL PROTECTED] wrote: I am not aware that you can use a parameter in the rules

Re: [leaf-user] ipsec.lrp and KLIPS

2003-04-06 Thread Erich Titl
Hi You will have to load ipsec.o from the corresponding module tree. Maybe another request to put this into ipsec.lrp helps. HTH Erich Charles Steinkuehler wrote the following at 18:53 05.04.2003: Steve Bihari wrote: Hi All, When I try to load ipsec.lrp I get a message about the kernel not

[leaf-user] orinoco stuff for 2.4.18

2003-04-06 Thread Erich Titl
Hi has anyone compiled the (latest) orinoco drivers (hermes.c orinoco.c orinoco_cs.c) for Bering1.0-stable kernel 2.4.18. I believe I need the latest drivers for the 8.72 firmware. Thanks Erich THINK Püntenstrasse 39 8143 Stallikon mailto:[EMAIL PROTECTED] PGP Fingerprint: BC9A 25BC 3954

Re: [leaf-user] Booting VIA EPIA Mobo with Isolinux

2003-04-04 Thread Erich Titl
Julian Julian Church wrote the following at 17:24 04.04.2003: At 00:06 04/04/03 +0200, Erich Titl wrote: ... Victor McAlistair pointed me at a post he produced about a month ago that explains another method for making a Bering boot CD - I think that should work. The syslinux guys will certainly

Re: [leaf-user] Bering Ipsec and Shorewall rules

2003-04-03 Thread Erich Titl
Simon At 14:07 03.04.2003 +0100, you wrote: Please can someone confirm whether the Shorewall Tunnels file internally manages the UDP Port 500 and Protocols 50 and 51? Or do I need to create rules? I have created the tunnel files as per documentation on the Bering site and Shorewall. But I am

RE: [leaf-user] Bering Ipsec and Shorewall rules

2003-04-03 Thread Erich Titl
Simon Simon Chalk wrote the following at 22:33 03.04.2003: Hi Erich, I did not want to go into detail, until I understood the operation of both shorewall and ipsec. I am still a little confused about shorewall, but the key seems to be the tunnels file. ipsec was failing and I assumed it was

Re: [leaf-user] Booting VIA EPIA Mobo with Isolinux

2003-04-03 Thread Erich Titl
Julian Julian Church wrote the following at 16:37 03.04.2003: Hi All I'm attempting to put together a CD-based Bering firewall on a computer based around a VIA EPIA 5000 motherboard. To try out my new motherboard, I tried an existing Bering CD from another firewall I use (Bering 1.0 I think).

RE: [leaf-user] Bering Ipsec and Shorewall rules

2003-04-02 Thread Erich Titl
Simon Tom has really written a very nice documentation, read more Simon Chalk wrote the following at 23:54 02.04.2003: Hi Tom, I had read this doc prior to posting. It reads a) Open the firewall so that the IPSEC tunnel can be established (allow the ESP and AH protocols and UDP Port 500).

<    4   5   6   7   8   9   10   11   >