Re: kernel-2.4.18-19.7.x

2002-12-28 Thread Peter Robb
On Sat, 2002-12-21 at 17:28, Info wrote: > I was trying to run up2date -u to install the new kernel, but somehow, it does not >install completely. I have a partial package installed. > > [root@ns1 /]# locate vmlinuz- > /boot/vmlinuz-2.4.7-10 > /boot/vmlinuz-2.4.18-18.7.x > /boot/vmlinuz-2.4.18-19

Re: Samba and iptables

2002-11-27 Thread Peter Robb
Agreed... I've a problem with Evolution losing it's account settings, so I missed a heap of replies there... Peter. On Tue, 2002-11-26 at 02:13, Mike Burger wrote: > I would imagine that other than the -i (which I had noted, earlier), both > tcp and udp would be useful. > -- redhat-list

Re: masquerading vs NAT

2002-11-25 Thread Peter Robb
On Sun, 2002-11-24 at 15:01, Mike Burger wrote: > On Sun, 24 Nov 2002, Rikard Bostrom wrote: > > > Hi, > > > > I was wondering if anyone could try to give me a good explaination > > on the differences between NAT and MASQUERADING? > > Good sides, bad sides etc... > > The main difference is that

Re: Samba and iptables

2002-11-25 Thread Peter Robb
On Mon, 2002-11-25 at 11:51, Yoink! wrote: > On Sun, 24 Nov 2002, Will Phipps wrote: > > Does anyone know the entry that I need to put into iptables to allow > > samba access? > > iptables -I INPUT 1 -o ethX -p tcp --dport 137:139 -j ACCEPT Surely you meant -p udp and -i ethx in the INPUT chain??

Re: Problem of NAT and DNS

2002-11-23 Thread Peter Robb
On Sat, 2002-11-23 at 06:13, [EMAIL PROTECTED] wrote: > So, do you means I can modify the /etc/hosts like this : > 172.16.0.*cleints.xxx.xxx.xxxclients > > BTW, how can I modify the zone file ( ip reverse ), then the system can > reverse the ip_addres range 172.16.0.1 - 172.16.0.253 ? > >

Re: (no subject) xinetd...

2002-11-23 Thread Peter Robb
On Sat, 2002-11-23 at 06:16, Will Phipps wrote: > I had xinetd setup to startup at boot time with RH 8.0. I changed some > configs around to get imap and sendmail to work and now xinetd doesn't > startup at boot time. I am booting up in runlevel 5. Is there a reason > why the gui services tool w

Re: DUAL-homed Gateway

2002-11-23 Thread Peter Robb
On Sat, 2002-11-23 at 05:17, Simpson, Doug wrote: > I have set up a RH 7.3 box with two nics. It is acting as my gateway, > firewall, proxy server, imap/smtp, dhcp, samba, etc. > The Internal nic "eth1" is 192.168.1.1 and the external nic is "eth0" = > x.y.z.1. > >From a computer on the internal n

Re: IPTABLES

2002-11-20 Thread Peter Robb
On Mon, 2002-11-18 at 21:01, Periyasamy, Raj wrote: > Hello List, > I am running Redhat 7.3. > How do I enable ID masquerading with ip tables so that all my clients in > the network can use the Linux server as a gateway for Internet access. I > got the following two commands from the "Red Hat Linu

Re: iptables format -> ipchains ( updated )

2002-11-20 Thread Peter Robb
On Mon, 2002-11-18 at 10:00, [EMAIL PROTECTED] wrote: > Hello, > > If you know iptables and ipchains, would you mind to help me to modify > the setting ( change "the format of iptables" to "format of ipchains" ) > ? > > iptables -A INPUT -i ppp0 -p tcp --tcp-flags ALL FIN,URG,PSH -j DROP > iptabl

Re: removing ipchains from 2.4 kernel (fwd)

2002-11-20 Thread Peter Robb
On Wed, 2002-11-20 at 10:55, [EMAIL PROTECTED] wrote: > > I have installed both ipchains and iptables with my new kernel 2.4.x > > but now i want to work with iptables only but i donot know how ican > remove ipchains modules from kernel. > > i know about > > > rmmod ipchains > > which will

Re: Ipchains

2002-11-12 Thread Peter Robb
On Tue, 2002-11-12 at 13:07, RA wrote: > Hello All > > I need HELP !!! > > on my linux RH7.1 router there are 2 eth cards, eth0 whit local ip 192.168.10.1, and >eth1 whit the folowing IP Addresses > > eth1 194.250.78.242 Bcast:194.250.78.247 Mask:255.255.255.248 > eth1:0194.250.78.24

Re: A newbie SYSLOG Config question

2002-11-08 Thread Peter Robb
On Fri, 2002-11-08 at 22:11, Naman Latif wrote: > Hi, > I am trying to log messages into different files based on their Severity > Levels. > I have the following in my syslog config in that order > > *.notice ---> File 2 > *.info --->File 1 *.=info will give you ONLY info level messages (fr

Re: ipsec IKE

2002-11-08 Thread Peter Robb
IKE uses udp port 500 on both ends Regards, Peter On Fri, 2002-11-08 at 21:29, Simpson, Doug wrote: > I am trying to set up a gateway with RH7.3 and IPSEC. I have reconfigured > the kernel with the latest freeswan and x509. It boots with no problems. I > then try to connect to it with SSHSenti

Re: IPTABLES help

2002-11-06 Thread Peter Robb
My favourite iptables tutorial is http://www.netfilter.org/documentation/tutorials/blueflux/ It will answer all of your question, except the blacklisted hosts. How do you want to collect/maintain this list? Regards, Peter On Fri, 2002-11-01 at 02:52, Chad Skinner wrote: > During my update of Re

Re: What is /dev/shm

2002-10-23 Thread Peter Robb
The gcc prog uses it as dynamic memory. According to the docs, it is a dynamically allocated space, the size depending on demand for it. I have removed it from /etc/fstab without any problems because it looked like it was chewing half my ram. Haven't noticed any performance change with or without

Re: forwarding

2002-10-23 Thread Peter Robb
It's done in the /etc/sysctl.conf file Regards, Peter On Wed, 2002-10-23 at 02:53, [EMAIL PROTECTED] wrote: > How do you turn on forwarding at boot for RH7.2 > I added the echo to proc to rc.local but I am sure there is a better way. > The worst part is I have it working on my home computer but I

Re: Linux port forwarding and supplying unwanted gateway!?

2002-10-08 Thread Peter Robb
Try doing some SNAT on the output of the VPN server to the Win 2000 server. This will address the packets back to the VPN server rather than their true source. Regards, Peter Monday 07 October 2002 01:27, you wrote: > Bump, anyone? > -Original Message- > Hi, > > I have been stuck on

Re: Why doesnt iptables load the /etc/sysconfig/iptables file?

2002-09-24 Thread Peter Robb
EMAIL PROTECTED]> What script? Are you talking about the init script I mentioned, which normally resides in /etc/init.d? If so, then what I said stands...at boot time, /etc/init.d/iptables reads the last saved configuration from /etc/sysconfig/iptables. Peter Robb <[EMAIL PROTECTED]&

Fwd: Iptables question.

2002-09-23 Thread Peter Robb
If you are applying new rules via a script, you need to first flush all existing chains, then delete the additional chains, otherwise you will try to create a chain that already exists... >From the turorial at http://www.netfilter.org/documentation/tutorials/blueflux/ # # flush all the rules

Fwd: IPTables Masq TUTORIAL

2002-09-23 Thread Peter Robb
Try this tutorial... There are some major syntax differences, esp about masquerading. http://www.netfilter.org/documentation/tutorials/blueflux/ To monitor the masqueraded connections, try this... http://cv.intellos.net/ Regards, Peter -- Forwarded Message -- Subject: IPTabl

Current tutorial location...

2002-09-23 Thread Peter Robb
The up to date version of that tutorial is here... http://www.netfilter.org/documentation/tutorials/blueflux/ Regards, Peter -- Forwarded Message -- Subject: Re: Searching the archives IPTables Date: Wed, 18 Sep 2002 08:06:05 -0700 From: Jack Bowling <[EMAIL PROTECTED]> To: [E

Fwd: Re: Why doesnt iptables load the /etc/sysconfig/iptables file?

2002-09-23 Thread Peter Robb
Make sure you don't expect BOTH the script and /etc/sysconfig/iptables to work together. It will depend on which loads first and what each one overwrites. Many scripts flush and delete existing chains... Hmmm? Regards, Peter -- Forwarded Message -- Subject: Re: Why doesnt ip

Fwd: Re: Can't ssh using webmin

2002-09-23 Thread Peter Robb
In the "others" tab, up at the top left, is a 'Module Config' link. In there you can select whether to use Telnet or ssh. When Webmin connects, it is using interface "lo" Make sure your /etc/hosts.allow and /etc/hosts.deny have localhost as a permitted ip, and that your telnet or ssh servers

Fwd: RE: configuring iptables to allow gamevoice

2002-09-23 Thread Peter Robb
What rules do you have permitting NEW incoming connections in the FORWARD chain? Do you LOG dropped packets, do you see these ports in the Logs? Regards, Peter -- Forwarded Message -- Subject: RE: configuring iptables to allow gamevoice Date: Mon, 23 Sep 2002 06:06:33 -070

Fw: Cryptic message... I do need glasses !!!

2002-09-20 Thread Peter Robb
I take that back! I am blind ! A packet is returning to your server as Andreas said... Oops Peter. - Original Message - From: "Peter Robb" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September 20, 2002 2:22 PM Subject: Fw: Cryptic message... >

Fw: Cryptic message...

2002-09-20 Thread Peter Robb
The MAC address says it was originated on the local LAN... so an internal machine sent an icmp out... in response to an incoming dns reply from 204.144.132.162 Pegards, Peter - Original Message - From: "Andreas Hansson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, September