Re: [leaf-user] Suitable hardware for own appliance

: - iptables (with small rule set) - squid (without cache, only for acls). - about 10 LAN users. Please, can you give me pointers to hardware vendors or projects with such especifications. Hej Tom, we made nice experinces with the alix systems from pcengines.ch. Boris

[leaf-user] Roadwarrior with OpenVPN and secured Web-Access through VPN

\\rightkey.key comp-lzo verb 3 What happens? I can bring the vpn up and have no longer access to the internet from the client. I can ping IP adresses in the LAN, but have no name service for the LAN. I have name service from the internet. So what is missing? Thanks, Boris

Re: [leaf-user] Roadwarrior with OpenVPN and secured Web-Access through VPN

Hej Erich, thanks for your comment! Erich Titl schrieb: Boris Boris schrieb: Hej all, I'm trying to find out how to setup a special thing and need help at this point. Hope to find it here M... this is completely OpenVPN related, so the best answer canprobebly be found

Re: [leaf-user] [OT] Windows 2003 SBS behind leaf router

for the server, primary th server itself, but it let me understand a bit how it works and it seems to work. And it was quick done without touching the server. Thanks again, Boris Trev Peterson schrieb: Hello, For Active Directory (AD) to work you need a DNS server that accepts dynamic changes. BIND

[leaf-user] difficulites requesting leaf.sourceforge.net

Hej all, I've got difficulties in requesting http://leaf.sourceforge.net/ . The answer I get is Unable to load database indicated by configuration file. What's that? Regards, Boris - This SF.Net email is sponsored

[leaf-user] remote WOL

is not routable to the target PC. So the next idea is to build a web frontend on the leaf box. I don't know yet about the capabilities of mhttpd. Is it possible (protection etc.)? Any more ideas? Is there perhaps already a solution for this topic? Thanks, Boris

Re: [leaf-user] remote WOL

Charles Steinkuehler schrieb: Boris wrote: Hej listmembers, I need a user-usable (not shell) possibility to switch on a PC behind a leaf router in a remote LAN and I'm thinking of how to do. First idea was to create the magic paket by a protected webfrontend on a server in a different

[leaf-user] add user and backup

. So how can I do that? Thanks, Boris - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two

Re: [leaf-user] add user and backup

Erich Titl schrieb: Boris Boris wrote: Hej all, I'm still working on the remote WakeOnLAN thing (wake up a PC in a LAN behind a leaf box from anywhere). I decided to do it by executing a script by ssh-logon on the leaf box. I will do the ssh-logon with keys, so the user with his laptop

[leaf-user] backup suid-bit

in advance! Boris - This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK win great prizes Grand prize is a trip for two to an Open Source event

Re: [leaf-user] backup suid-bit

Erich Titl schrieb: Boris schrieb: Erich Titl schrieb: Boris ... I have gate# less /var/lib/lrpkg/local.local var/lib/lrpkg/local.local root/.ssh home home/wolagent usr/sbin/ether-wake But still the suid-bit on ether-wake nor the changed owner on directory wolagent (in /home: chown

Re: [leaf-user] backup suid-bit

Erich Titl schrieb: Boris schrieb: Erich Titl schrieb: Boris schrieb: Erich Titl schrieb: Boris ... I have With chown wolagent:wolagent wolagent I have gate# l drwxr-xr-x3 root root 60 Dec 3 20:12 . drwxrwxrwt 17 root root 360 Dec 3 20:12 .. drwxr

Re: [leaf-user] backup suid-bit

Erich Titl schrieb: Boris Boris wrote: Erich Titl schrieb: Boris ... To have it backuped, I wrote its name to /var/lib/lrpkg/local.local. Executing this file brings me the bits. Last question: Hwo do I make it autoexecuted on startup? I think I have to place somehow a symlink int

Re: [leaf-user] backup suid-bit

Giovanni Franza schrieb: Boris wrote: ... I made this big script: RCDLINKS=2,S80 sleep 60 chmod u+s /usr/sbin/ether-wake chown wolagent:wolagent /home/wolagent The chown work, but the chmod doesn't! As you can see, I tried to solve this by delaying the execution - with no success

[leaf-user] [solved] Re: backup suid-bit

Erich Titl schrieb: Hi Boris M ... I must admit I _never_ use the character based chmod command, I somehow got used to the octal representation. Put some debugging output in your script, it will tell you what happens. Hej Erich, hej all, first once mor thank you for caring about my

[leaf-user] declare another (second) gateway

? In the meantime, I use for local purpose route add -net 192.168.22.0 netmask 255.255.255.0 gateway 192.168.23.254 . I'd like this route to be configured automatically on my PC and on router 1 (and router 2 reverse). Thanks a lot! Boris

[leaf-user] timing problem with openntpd at boot

that but I wasn't successful searching it. Any ideas? Thanks, Boris -- ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See

[leaf-user] special thing with shorewall

/zones there is vpntun+ This seems allright, because tun0 and tun1 are definded dynamically. So: How to handle?? Thanks, Boris -- This SF.net Dev2Dev email is sponsored by: Show off your parallel programming

Re: [leaf-user] special thing with shorewall

Tom Eastep schrieb: On 9/5/10 11:03 AM, Boris wrote: Hej all, I know there are shorewall gurus inside here and my appliance is absed on leaf, so I'm going to ask the following here in this list: I have a leaf box (R1) that is openvpn (tun0) client (on non-standard port 1195) to another

[leaf-user] LEAF as Accesspoint: no way out....

is-at 00:22:43:14:ca:9a (oui Unknown) , but I'm not good in interpreting that Don't know what to try next... any ideas? Thanks in advance, Boris -- Special Offer-- Download ArcSight Logger for FREE (a $49 USD value

[leaf-user] [solved] Re: LEAF as Accesspoint: no way out....

Hej Trev, hej all, thanks for answering! And thank you for solving this issue!! It could all be so easy if one would do it right It might be a good idea to add this hint to the howto!? Regards Boris Trev Peterson schrieb: Hey Boris, Are you NATing the wlan segment? I see you're

[leaf-user] tcpdump scp...

?? Thank you, Boris -- All the data continuously generated in your IT infrastructure contains a definitive record of customers, application performance, security threats, fraudulent activity and more. Splunk takes this data

Re: [leaf-user] tcpdump scp...

Charles Steinkuehler schrieb: On 9/21/2011 11:46 AM, Boris wrote: How do I pipe the output of tcpdump to a ssh-server in the LAN? Something like this...: tcpdump -i eth0 scp user@server No, something like this, run from your lan-server system: lan-server$ ssh u...@firewall.net tcpdump

Re: [leaf-user] shorewall challenge

hostlist and with disclaiming the best paractice) is it possible to use the rule like ACCEPTloc:192.168.20.1 net:233.122.78.0/24 tcp 80,99 ??? Thanks, Boris Am 29.07.2013 23:35, schrieb Trev Peterson: To be perfectly honest you probably don't want to put a rule like that in any

[leaf-user] dns phenomen and how to handle

realize at other hosts: boris@nl-tp-boris:~$ nslookup www.gmx.de Server: 192.168.25.254 Address:192.168.25.254#53 Non-authoritative answer: www.gmx.de canonical name = www.g-ha.gmx.net. Name: www.g-ha.gmx.net Address: 82.165.230.18 boris@nl-tp-boris:~$ nslookup www.gmx.de

Re: [leaf-user] dns phenomen and how to handle

Hej Erich, thanks a lot for taking part! Am 09.07.2015 um 18:45 schrieb Erich Titl: Hi Boris Am 09.07.2015 um 18:13 schrieb Boris: Hej LEAF-user, no troubles since years (thank you all!!) but now I found a new phenomen and do not know how to handle - hope to find some help in here

Re: [leaf-user] dns phenomen and how to handle

Hej Erich (sorry for PM), thanks once more! Am 09.07.2015 um 19:41 schrieb Erich Titl: Hi Boris Am 09.07.2015 um 19:24 schrieb Boris: Hej Erich, .. You could try to assemble a list of IP addresses for the service you want to access. I would not recommend that. Better you should use

[leaf-user] successful migration - thanks!

is connected to a physical interface. Any suggestions on that? Did anybody already do something like this? Thanks again, Boris -- Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM

[leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

found What's wrong? Did I miss something? Thanks and regards, Boris -- Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monito

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Am 13.02.2016 um 22:40 schrieb Erich Titl: > Hi > > Am 13.02.2016 um 22:17 schrieb Boris: >> Hej all, >> >> >> I hope to get some help with openvpn in Bering-uClibc 5.2.4: >> Following the doc >> "http://bering-uclibc.zetam.org/wiki

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Thank you Erich and Mark, Am 14.02.2016 um 01:08 schrieb Erich Titl: > Hi Boris > > Am 14.02.2016 um 00:46 schrieb Boris: >> Am 13.02.2016 um 22:40 schrieb Erich Titl: > ... > >> >> thanks for caring! >> >> Yes, a typo, but only in the mail...

Re: [leaf-user] got difficulties with openvpn in Bering-uClibc 5.2.4

Hej Erich, Am 15.02.2016 um 14:02 schrieb Erich Titl: > Hi Boris > > > I used easyrsa when I first installed openvpn. I found it unsatisfactory > for a production system and the idea of having the CA and the keys on > the same machine is just plain wrong. > > I then

Re: [leaf-user] [closed] Re: automatic upgrade from 5.2.4

Hej Erich and Andrew, thanks for your comments! I'm going to open another thread on this! Boris Am 02.01.2017 um 22:48 schrieb Andrew: > hi. > syslinux supports multiboot too... > > On 02.01.2017 22:20, Erich Titl wrote: >> Hi Boris >> >> Am 27.12.2016 um 1

[leaf-user] build-key missing

. Thanks for ideas! Merry Christmas! Boris -- Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support

[leaf-user] automatic upgrade from 5.2.4

9M 22% /mnt Is there a chance to make upgrade work and how to do so? Thanks, Boris -- Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one yea

Re: [leaf-user] automatic upgrade from 5.2.4

Hej Andrew (sorry fpr PM) and hej list, thanks for your answer! Is that working for upgrade to next major release (6.x), too? Boris Am 26.12.2016 um 19:48 schrieb Andrew: > Just replace all files on CF by new one, leaving configdb untouched. > > Better way - do after this 'apkg -u

[leaf-user] [closed] Re: automatic upgrade from 5.2.4

concerning the syslinunx.cfg and the different entries on initXXX - thanks! 1. is finished and 2. is what I am working on. I tried 3. and there will be questions about the autostoring of individual created files. I'm going to open a new thread on that an close this one. Regards, Boris Am

[leaf-user] solved: Re: build-key missing

Hej Robert and Marko, thank you very much for your hints! pkitool was the thing I was looking for! Have good christmas time! Boris Am 23.12.2016 um 23:31 schrieb Mark Berndt: > Robert & Boris > > line 2 exports the variables, so you can override them in memory rather tha

[leaf-user] Telekom BNG

no success starting pppoe. Possibly Telekom switched to BNG !? With BNG the router shall tag the WAN interface with VLAN 7. Is there any knowledge about that?? Thanks in advance, Boris -- Check out the vibrant tech community

Re: [leaf-user] Telekom BNG

Am 31.05.2017 um 16:39 schrieb kp kirchdoerfer: > Hi Boris; > > Am Mittwoch, 31. Mai 2017, 11:12:01 schrieb Boris: >> Hej Leaflist, >> >> >> does anybody use a leafbox connected to a Telekom BNG - Account? >> >> One of my locations lost connectio

Re: [leaf-user] sourceforge message

Am 10.06.2017 um 03:07 schrieb Victor McAllister: > got a link from sourceforge to click if want to continue getting e-mails > from LEAF. I distrust clicking on links. Is this legitimate? > > Victor > Never experienced sourceforge do

Re: [leaf-user] sourceforge message

Am 10.06.2017 um 08:15 schrieb Boris: > Am 10.06.2017 um 03:07 schrieb Victor McAllister: >> got a link from sourceforge to click if want to continue getting e-mails >> from LEAF. I distrust clicking on links. Is this legitimate? >> >> Victor >> > >

[leaf-user] increasing load average

of IBM PC (P-75). Everything stays the same. Is it possible that this high load comes from requesting my apache behind the firewall quite frequently (WebCam)? Thanks for help! Boris Boris Andratzek Gartenstraße 27 24103 Kiel Tel.: 0431-5199600 Mobil: 0171-6868273 mailto:[EMAIL PROTECTED