December 2002 - WLUG - wlug.mailman3.com

Re: [Wlug] vpn behind firewall
by Michael Long 26 Dec '02

26 Dec '02

Thanks Charles, Resolving the issue in part 1 concerning my wifes vpn was resolved by upgrading the linksys firmware. After the upgrade IPSec passthrough was turned off and everything works well. The next step is to get the vpn to my office working. Mike > Well, my editor ate that one... Let's try this again. > > On Tue, Dec 24, 2002 at 05:58:15PM -0500, Michael Long wrote: > mlong> it if anyone could give me some clues or at least some intelligent > mlong> questions to ask so that I might make this thing work. It is sometimes > mlong> necessary to "help" the help desk in order that they can help you. :) > > "VPN" can mean many things... but usually it means a PPTP or IPsec > encrypted tunnel. IPsec uses port 500/udp for ISAKMP key exchange, and > IP Protocol number 50/51 for ESP/AH encryption/authentication (i.e., not > TCP or UDP). > > IPsec wasn't designed to work with the hack that is NAT (Network Address > Translation, Internet Connection Sharing), so if you are sharing one > real IP address to multiple computers with a Linksys, you can run into > issues. Basically, vendors like Linksys have hacked around the IPsec > limitation to make it sort of work through the NAT. Make sure you have > turned on the "IPsec passthrough" features of your router (NOT IPsec/VPN > endpoint). You should also look for an upgrade to the Linksys firmware > to see if it addresses your issue... It is hit-or-miss often times with > these SOHO routers. Good luck. > > mlong> Part 2: I am planning to fire up a vpn connection to my employer on > mlong> Thursday for the first time. Are there any issues running 2 vpn > mlong> connections behind a firewall. > > The IPsec through NAT hack I mentioned above usually only works with ONE > IPsec session at a time, so if both VPN's use IPsec, you may be out of > luck unless you take turns using the VPN software. On the other hand, > some vendors have figured out a way to allow multiple IPsec sessions to > work through NAT at once... > > It could be that one or both VPN's are using a technology other than > IPsec, in which case, the issues are completely different. PPTP usually > works fine through NAT, for example. There are other protocols as well, > which may or may not work through NAT. > > In addition, if they are using IPsec with a Nortel Networks Contivity > VPN switch on their end, it may have a feature called "NAT Traversal" > which wraps the entire IPsec flow in UDP packets (the administrator > chooses the port number, but Nortel recommends 10001/udp). If this is > the case, it might make sense to turn OFF any IPsec-passthrough features > of your router, so that the NAT Traversal kicks in. > > -- > Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ > PGP Key ID: 49BB5886 > Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886 > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > >

1 0

vpn behind firewall
by Michael Long 25 Dec '02

25 Dec '02

Happy Holidays to all, I have a 2 part question concerning my particular use of vpns. I have a home network behind a Linksys firewall/router and am technically incompetent when it comes to vpn's. Part 1: The company my wife works for has upgraded her vpn software and it no longer plays well with firewalls at the client end. I have an appointment with her tech support Thursday morning but would appreciate it if anyone could give me some clues or at least some intelligent questions to ask so that I might make this thing work. It is sometimes necessary to "help" the help desk in order that they can help you. :) Part 2: I am planning to fire up a vpn connection to my employer on Thursday for the first time. Are there any issues running 2 vpn connections behind a firewall. Thanks, Mike

2 2

trusted user?
by Bill Mills-Curran 24 Dec '02

24 Dec '02

How do I control "trusted user" to allow regular user accounts access to things like the mailq command or reviewing system logs? TIA, Bill

3 2

X-server minutiae
by Gregory Avedissian 24 Dec '02

24 Dec '02

Now that I have X working again, some colors are different. The outline box that appears when opening a window in fvwm2 has changed from yellow to purple, which is nice because it's easier to see, but my cursor is very pale gray. Anyone know how to change a cursor color? Am I nuts to even think about messing with it? Greg

1 1

[redhat-announce-list-admin@redhat.com: Announcing a beta release of Red Hat Linux: Phoebe]
by Charles R. Anderson 23 Dec '02

23 Dec '02

If anyone wants this and the mirrors are overloaded, you can get it here: ftp://angus.ind.wpi.edu/pub/mirrors/redhat/linux/beta/phoebe/en ----- Forwarded message from redhat-announce-list-admin(a)redhat.com ----- From: redhat-announce-list-admin(a)redhat.com To: redhat-watch-list(a)redhat.com Date: Mon, 23 Dec 2002 08:07:33 -0500 Subject: Announcing a beta release of Red Hat Linux: Phoebe Reply-To: redhat-announce-list(a)redhat.com Precedence: bulk X-Spam-Status: No, hits=0.5 required=10.0 tests=NO_REAL_NAME version=2.31 X-Spam-Level: "You know, Chandler, you being here is the best gift I could ask for Christmas." "Aww. Thanks Pheebs." "Ok, now where's my real present?" Red Hat, Inc. has a holiday gift for you - PHOEBE, a new beta release of Red Hat Linux. PHOEBE is 6 CDs of software (3 binary, 3 source), including, among other things: - the latest in bleeding-edge desktop and XFree86 technology - Mozilla 1.2.1, with Xft antialiased fonts - glibc-2.3.1, with the new Native POSIX Thread Library (NPTL), for performant and scalable threading PHOEBE is, of course, not intended for use on mission critical or other production systems. As always, we do not recommend the use of beta software on mission critical or production systems. In fact, we may laugh at those who try. Problems with PHOEBE should be reported via bugzilla, at: http://bugzilla.redhat.com/bugzilla PHOEBE can be found at redhat.com. Specifically: ftp://ftp.redhat.com/pub/redhat/linux/beta/phoebe/ or, at the following mirrors (list courtesy Warren Togami): Europe Austria ftp://gd.tuwien.ac.at/opsys/linux/redhat.com/dist/linux/beta/phoebe/ http://gd.tuwien.ac.at/opsys/linux/redhat.com/dist/linux/beta/phoebe/ rsync://gd.tuwien.ac.at/redhat/dist/linux/beta/phoebe/ Belgium ftp://ftp.belnet.be/packages/redhat/linux/beta/phoebe/ Britain ftp://ftp.g-int.net/Mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoebe/ http://ftp.g-int.net/Mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoebe/ Czech Republic ftp://sunsite.mff.cuni.cz/pub/redhat/linux/beta/phoebe/ rsync://sunsite.mff.cuni.cz/redhat/redhat/linux/beta/phoebe/ ftp://ftp.fi.muni.cz/pub/linux/redhat/linux/beta/phoebe/ http://ftp.fi.muni.cz/pub/linux/redhat/linux/beta/phoebe/ rsync://ftp.fi.muni.cz/pub/linux/redhat/linux/beta/phoebe/ Finland ftp://ftp.funet.fi/pub/linux/mirrors/redhat/redhat/linux/beta/phoebe/ ftp://ftp.ipv6.funet.fi/pub/linux/mirrors/redhat/redhat/linux/beta/phoebe/ France ftp://fr2.rpmfind.net/linux/redhat/beta/phoebe/ http://fr2.rpmfind.net/linux/redhat/beta/phoebe/ ftp://ftp.crihan.fr/mirrors/ftp.redhat.com/redhat/linux/beta/phoebe/ http://ftp.crihan.fr/mirrors/ftp.redhat.com/redhat/linux/beta/phoebe/ ftp://ftp.free.fr/pub/Distributions_Linux/RedHat/redhat/linux/beta/phoebe/ Germany ftp://ftp-stud.fht-esslingen.de/pub/redhat/linux/beta/phoebe/ ftp://ftp.tu-chemnitz.de/pub/linux/redhat-ftp/redhat/linux/beta/phoebe/ http://ftp.tu-chemnitz.de/pub/linux/redhat-ftp/redhat/linux/beta/phoebe/ ftp://ftp.informatik.uni-frankfurt.de/pub/linux/Mirror/ftp.redhat.com/linux… ftp://ftp.uni-bayreuth.de/pub/redhat/linux/beta/phoebe/ ftp://ftp.tu-chemnitz.de/pub/linux/redhat-ftp/redhat/linux/beta/phoebe/ ftp://ftp.gmd.de/mirrors/redhat.com/redhat/linux/beta/phoebe/ ftp://ftp.uni-koeln.de/redhat/linux/beta/phoebe/ ftp://ftp.join.uni-muenster.de/pub/linux/distributions/redhat/linux/beta/phoebe/ Italy ftp://ftp.edisontel.com/pub/RedHat_Mirror/linux/beta/phoebe/ Ireland ftp://ftp.esat.net/mirrors/ftp.redhat.com/redhat/linux/beta/phoebe/ ftp://ftp.heanet.ie/mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoebe/ http://ftp.heanet.ie/mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoebe/ ftp://ftp.ipv6.heanet.ie/mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoeb… http://ftp.ipv6.heanet.ie/mirrors/ftp.redhat.com/pub/redhat/linux/beta/phoe… Netherlands ftp://alviss.et.tudelft.nl/pub/redhat/beta/phoebe/ ftp://ftp.quicknet.nl/pub/Linux/ftp.redhat.com/beta/phoebe/ ftp://ftp.nluug.nl/pub/os/Linux/distr/RedHat/ftp/redhat/linux/beta/phoebe/ ftp://ftp.surfnet.nl/pub/os/Linux/distr/RedHat/ftp/redhat/linux/beta/phoebe/ ftp://ftp.eu.uu.net/pub/linux/redhat/linux/beta/phoebe/ Norway ftp://ftp.uninett.no/pub/linux/RedHat/redhat/beta/phoebe/ Poland ftp://sunsite.icm.edu.pl/pub/Linux/redhat/linux/beta/phoebe/ rsync://sunsite.icm.edu.pl/ftp/pub/Linux/redhat/linux/beta/phoebe/ ftp://ftp.pbone.net/pub/redhat/linux/beta/phoebe/ Spain ftp://ftp.rediris.es/pub/Linux/distributions/redhat/redhat/ http://ftp.rediris.es/pub/Linux/distributions/redhat/redhat/linux/beta/phoe… Romania ftp://ftp.iasi.roedu.net/pub/mirrors/ftp.redhat.com/pub/redhat/linux/beta/p… Atlantic Iceland ftp://ftp.linux.is/pub/redhat/linux/beta/phoebe/ Puerto Rico ftp://mirrors.hpcf.upr.edu/pub/Mirrors/redhat/ftp.redhat.com/linux/beta/pho… Asia Japan ftp://ftp.kddlabs.co.jp/Linux/packages/RedHat/redhat/linux/beta/phoebe/ Korea ftp://ftp.kreonet.re.kr/pub/Linux/RedHat/beta/phoebe/ Russia ftp://ftp.chg.ru/pub/Linux/redhat/linux/beta/phoebe/ http://ftp.chg.ru/pub/Linux/redhat/linux/beta/phoebe/ Canada ftp://ftp.nrc.ca/pub/systems/linux/redhat/ftp.redhat.com/linux/beta/phoebe/ USA East ftp://ftp.rutgers.edu/pub/redhat/linux/beta/phoebe/ ftp://mirror.eas.muohio.edu/mirrors/redhat/linux/beta/phoebe/ ftp://ftp.gtlib.cc.gatech.edu/pub/redhat/linux/beta/ http://www.gtlib.cc.gatech.edu/pub/redhat/linux/beta/phoebe/ ftp://redhat.dulug.duke.edu/pub/redhat/linux/beta/phoebe/ ftp://mirror.hiwaay.net/redhat/redhat/linux/beta/phoebe/ http://mirror.hiwaay.net/redhat/redhat/linux/beta/phoebe/ ftp://mirror.cs.princeton.edu/pub/mirrors/redhat/linux/beta/phoebe/ ftp://rpmfind.net/linux/redhat/beta/phoebe/ ftp://chuck.ucs.indiana.edu/pub/linux/redhat/redhat/linux/beta/phoebe/ ftp://mirror.pa.msu.edu/linux/redhat/linux/beta/phoebe/ ftp://ftp.cse.buffalo.edu/pub/Linux/redhat/redhat/linux/beta/phoebe/ ftp://kickstart.linux.ncsu.edu/pub/redhat/linux/beta/phoebe/ USA Central ftp://linux.nssl.noaa.gov/linux/redhat/linux/beta/phoebe/ ftp://csociety-ftp.ecn.purdue.edu/pub/redhat/linux/beta/phoebe/ http://csociety-ftp.ecn.purdue.edu/pub/redhat/linux/beta/phoebe/ rsync://csociety-ftp.ecn.purdue.edu/pub/redhat/linux/beta/phoebe/ ftp://mirror.cs.wisc.edu/pub/mirrors/linux/redhat/beta/phoebe/ ftp://mirror.mcs.anl.gov/pub/redhat/redhat/linux/beta/phoebe/ http://mirror.mcs.anl.gov/redhat/linux/beta/phoebe/ http://redhat.netnitco.net/redhat/linux/beta/phoebe/ USA West ftp://limestone.uoregon.edu/redhat/beta/phoebe/ Pacific Australia ftp://planetmirror.com/pub/redhat/linux/beta/phoebe/ ftp://mirror.pacific.net.au/linux/redhat/redhat/linux/beta/phoebe/ http://redhat.pacific.net.au/redhat/linux/beta/phoebe/ Hawaii ftp://videl.ics.hawaii.edu/mirrors/redhat/linux/beta/phoebe/ For discussion of PHOEBE, send mail to: phoebe-list-request(a)redhat.com with subscribe in the subject line. You can leave the body empty. Or see: https://listman.redhat.com/mailman/listinfo/phoebe-list/ _______________________________________________ redhat-announce-list mailing list redhat-announce-list(a)redhat.com https://listman.redhat.com/mailman/listinfo/redhat-announce-list ----- End forwarded message ----- -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

2 2

kernel saga continues
by avedis＠rcn.com 23 Dec '02

23 Dec '02

I managed to get my online connection working again. Just had to change "ippp0" to "ppp0" in my firewall config file. I was also able to make a lilo boot floppy from command line, and it worked, exept for my initial menu. I rebooted back and forth a few times between the two floppies, and they both seemed to be working, and then when I went into x-session, I had no mouse. WTF??? Why did I lose kernel support for other stuff when all I messed with was "sound"? Then I made the mistake of going into XF86Setup. Now, I can't get into x at all. Questions 1. Can anyone tell me where the problem is? (other than "user") 2. Is there someplace in make xconfig or make menuconfig to provide support for xfree? At one point, I got an error message about not being able to load a module when trying to get into x. 3. Would it make sense to go back to the distribution disks, remove and re-insall xfree? Thanks. Greg

3 4

Linux top gun
by Chuck Haines 23 Dec '02

23 Dec '02

I just saw this article and thought to myself, "wouldn't this be something interesting for WLUG and WPILA to put on." Its a competition where teams take turns attacking and defending a linux server. This particular server happens to be running apache, but it could be anything really. I think this would be a neat little event to run. What does everyone else think? The URL for reference is: http://linuxtopgun.org/ -- --------------------------------------------------------- | Chuck Haines | AIM: CyberGrex | | chaines(a)wpi.edu | Yahoo: CyberGrex_27 | | http://www.linux-xtreme.net | ICQ: 3707881 | --------------------------------------------------------- | ECE Sytems Administrator | Box 1531 | | WPILA Lab Manager | 100 Institute Road | | GDC Developer | Worcester, MA 01609 | | Tau Kappa Epsilon Fraternity | | --------------------------------------------------------- GNU Privacy Guard Key Fingerprint E12E 09BE 14B2 4AA4 EA36 27EB 72A4 FDDD 8E3E 741D

2 1

Linux too much like windows?
by Chuck Haines 23 Dec '02

23 Dec '02

I found this article while reading my daily dose of slashdot. It brings some questions to mind. Is linux becoming too much like windows? Does it need to in order to compete in the desktop business? One of my friends was commenting that for servers, linux is the best, however it just loses when it comes to the desktop market. What do you guys think about that? I'm not a gamer and primarily do systems administration work as well as php development and I love my redhat 8.0 with gnome2. What do others out there feel? Just my thoughts, -- --------------------------------------------------------- | Chuck Haines | AIM: CyberGrex | | chaines(a)wpi.edu | Yahoo: CyberGrex_27 | | http://www.linux-xtreme.net | ICQ: 3707881 | --------------------------------------------------------- | ECE Sytems Administrator | Box 1531 | | WPILA Lab Manager | 100 Institute Road | | GDC Developer | Worcester, MA 01609 | | Tau Kappa Epsilon Fraternity | | --------------------------------------------------------- GNU Privacy Guard Key Fingerprint E12E 09BE 14B2 4AA4 EA36 27EB 72A4 FDDD 8E3E 741D

2 1

kernel - Help!
by avedis＠rcn.com 22 Dec '02

22 Dec '02

I'm in windows right now, which is where I automatically boot to if I don't use the floppy. I only get a choice of boots with floppy. Tried recompiling the kernel with sound, added the lbn32(?) line to /etc/lilo and the cylinder error went away, but somehow I lost support for ipchains and lost the suse firewall. Also lost support for vfat. I went back into make xconfig and started messing around with ppp support, vfat and dos support. Got my vfat back ok. Also had to go in and re-edit /etc/rc.config and /etc/rc.config.d/firewall- somethingorother.config. I think I need to review my selections in those files. At first, I could dialup and as soon as it would connect, it would disconnect, and pppd would give error message 4, no support for ppp in kernel. I went back in and selected netfilter with ipchains support, and ppp with async support. Now it will connect and stay connected, but I can't send or receive anything (mail or web). Oh, and I removed the sound support from the kernel, but I'm still getting error messages about trying to load the sound modules. Let me know if I did something obvious. Meanwhile, I'll review what I did. Thanks, Greg

1 0

"LN" question
by Michael LaPointe 21 Dec '02

21 Dec '02

I just recently upgraded my hosting plan to include sub domains, shell access and a few other goodies. My original site had all of the images in an images directory. To avoid copying all of the images to each new sub domain/directory I created an images directory for each sub directory and ran ln *.* /path/to/sub/images from within the real images directory. This worked great but is it only a one shot deal? I.E. if I add another image to the main directory do I need to run ln again? Server is FreeBSD 4.7 with Apache/1.3.27 I didnt try hard linking the directories since my books say that you need to be root to do so but I think that is what I really needed. Thank you, ~ Michael LaPointe

2 1