January 2003 - WLUG - wlug.mailman3.com

Re: [Wlug] vpn behind firewall

by Michael Long

Hi Andy, I was hoping that by adding a second nic card that plugs into my router I could somehow configure the webserver to use one nic and the vpn to use the other without the 2 cards knowing about each other. From some of the responses I have gotten it appears that this was naive thinking on my part. Cheers, Mike > On Tuesday 31 December 2002 10:18 am, Michael Long wrote: > > I have gotten both vpn's coexisting nicely with each other. I can now > > connect to my desktop at work via vnc. It looks like I can now remove my > > windows partition...YEA! > > > > Now for my final issue. I have not been able to configure my cisco vpn to > > allow me access to my local lan when connected the vpn is running. This is > > proving to be most inconvenient because I do have a web server running that > > is accessable to the outside world. Unfortunately the webserver is > > unavailable when the vpn is activated. I am thinking that if I add a > > second nic card to the box and configure it properly that I should be able > > to have one card handle the webserver traffic and the other card will > > handle the vpn traffic. Does this seems like a sane configuration? If so > > can someone point me to documentation that will explain how to accomplish > > this. > > > > Thanks again, > > Mike > > Hi Mike, > > Look for a setting in your configuration that says something about > "EXCLUDE_LOCAL_LAN". The possible values are true and false. Toggle it and > see if that fixes your problem. > > If the webserver in question is running on the machine that is making the VPN > connection, then it will not be visible on the Internet while the VPN is > active. That's a feature. When you activate the VPN on your machine, you > become part of your company's network, and when you deactivate the VPN, you > go "back to normal". > > You could add another NIC to handle the web traffic, but you then create a > path from one NIC to your machine and out the other NIC to your company's > network. Do you really want to create a back door into your company's > network that way? This is a security issue to be considered. > > Later, > > Andy > > -- > Andy Stewart, Founder > Worcester Linux Users' Group > Worcester, MA USA > http://www.wlug.org > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > >

Jan. 7, 2003

Re: [Wlug] Suse Linux: Internet access

by Andy Stewart

On Sunday 05 January 2003 10:50 pm, philrmcss(a)netscape.net wrote: > I recently installed Suse Linux on my Pentium III, 600 mHz computer that > had Windows XP installed previously. Linux seems to work OK, except that I > can't access my cable modem or dial-up modem from it. If I want to go to > the internet, I have to go via windows. Hi Phil, Let's break this into two threads so people will have a chance to address each topic without confusion. Secondly, if you could provide more information regarding what you did, what you expected to happen, and what actually happened (error messages and such are really helpful), then I'm sure somebody on this list can help get you up and running smartly. Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] Zaurus or Convert iPAQ?

by Andy Stewart

On Saturday 04 January 2003 3:49 pm, Wes Allen wrote: > Hi gang, > I'm currently wrestling with getting a Zaurus or just going ahead and > converting my iPAQ to Linux. What do you guys think? > > Wes Buy the Zaurus, convert the iPAQ, and get them to talk to one another via wireless. Setup VNC servers - amaze your friends! :-) -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] vpn behind firewall

by Andy Stewart

On Tuesday 31 December 2002 10:18 am, Michael Long wrote: > I have gotten both vpn's coexisting nicely with each other. I can now > connect to my desktop at work via vnc. It looks like I can now remove my > windows partition...YEA! > > Now for my final issue. I have not been able to configure my cisco vpn to > allow me access to my local lan when connected the vpn is running. This is > proving to be most inconvenient because I do have a web server running that > is accessable to the outside world. Unfortunately the webserver is > unavailable when the vpn is activated. I am thinking that if I add a > second nic card to the box and configure it properly that I should be able > to have one card handle the webserver traffic and the other card will > handle the vpn traffic. Does this seems like a sane configuration? If so > can someone point me to documentation that will explain how to accomplish > this. > > Thanks again, > Mike Hi Mike, Look for a setting in your configuration that says something about "EXCLUDE_LOCAL_LAN". The possible values are true and false. Toggle it and see if that fixes your problem. If the webserver in question is running on the machine that is making the VPN connection, then it will not be visible on the Internet while the VPN is active. That's a feature. When you activate the VPN on your machine, you become part of your company's network, and when you deactivate the VPN, you go "back to normal". You could add another NIC to handle the web traffic, but you then create a path from one NIC to your machine and out the other NIC to your company's network. Do you really want to create a back door into your company's network that way? This is a security issue to be considered. Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] RE: Linux on a PPC chip

by Andy Stewart

On Monday 30 December 2002 12:55 pm, Sands Fish wrote: > Now, the only other tweak I have a burning desire to > make to this box is to configure the kernel to use SMP > for the dual 500Mhz processors. From what I've heard, > it should only be using the first one right now, and > that I have to rebuild the kernel with SMP support. > Sound right? I would appreciate any tips or help on > getting there, such as: > > -> how > -> where to check to -know- that it's using > one or both > -> any other useful kernel info > > anything would be great really. thanx! > > - Sands <x>< HI Sands, This command: cat /proc/cpuinfo shows both of my CPUs in operation. There should be a section for each processor. The program xosview will also show what each of the N CPUs are doing. (Its rather cool to run on a 16 processor Sun server, but I digress). Finally, check /var/log/boot.msg (is this generic or specific to SuSE?) to see something like the following: <4>Processor #0 Pentium(tm) Pro APIC version 17 <4>Processor #1 Pentium(tm) Pro APIC version 17 <4>I/O APIC #2 Version 17 at 0xFEC00000. <4>Processors: 2 Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] Notebooks...

by Andy Stewart

Hi Wes, There is alot of information at this website: http://www.linux-laptop.net/ For me, my Sony VAIO PCG-FXA36 works fine with SuSE Linux 8.1 except for the built in modem. However, I *think* there's a driver available for the modem, but I have not tried it. As Doug mentioned, the battery life stinks (a little over an hour), and at $250 for a 2nd battery, they can keep it. Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] Color matching scanned photos vs. printed output

by Andy Stewart

On Thursday 02 January 2003 10:39 pm, Skip Gaede wrote: > Hi Andy, > > I have just discovered that the GIMP can work with color profiles. > See http://www.coloraid.de/, which was referenced at > http://www.normankoren.com/color_management_3.html > > Norman Koren has a web site that discusses a lot of aspects of > digital darkroom. To calibrate things, you need a printed color > chart, an example of which is the IT8 target. I have seen them > sold by Praxisoft for $70.00, but you can get the same chart from > Germany for $10.00 US + $5.00 S&H. Check out SCARSE which is a > Linux program for scanner profiles. Hi gang, Thanks for the additional info. I'll take a look at this info shortly. I've also found some information in "Grokking the GIMP" with regard to how to use some features of the GIMP to enhance scanned images. This was most helpful when I discovered that scanning images from a magazine or calendar (printed material) caused a speckling effect to appear in the resulting image. The GIMP has a despeckling filter that removes this rather well in many cases. This entire topic has me wondering if a detailed examination of the features of the GIMP might be a good discussion for a future meeting. There seems to be much more there than originally meets the eye. Later, Andy -- Andy Stewart, Founder Worcester Linux Users' Group Worcester, MA USA http://www.wlug.org

Jan. 7, 2003

Re: [Wlug] Toshiba Laptop?

by Robert Condon

I am writing this on a Toshiba Tecra 8000. I have used it since Suse 7.2 but it is now 8.1. APM worked correctly with 8.0 but not with 8.1 so I will be reinstalling it with 8.0. Otherwise, I am happy with it though it gets hot and the battery only lasts about an hour. Bob Condon doug waud wrote: > Wesley Allen wrote: > >> What's your collective opinion of Toshiba laptops? Circuit City has >> got a decent machine (Satellite 1415-s173) for $999 and they actually >> let me boot Knoppix on it to check out hardware support (everything >> worked). > > > I have an old toshiba satellite ( 2595cdt ) which runs nicely for me on > SuSE 7.2. I have had it since 0ct/99. No problems. Have added memory and > put in a large hard drive. > >> The only thing I'm wondering about is the battery. > > > Battery life sucks. Like Andy I seem to get very poor running time. I > get an hour or less on battery so, for all practical purposes, I just > run it off the AC. > >> MY HP >> laptop doesn't let Linux read the battery info with either apm or acpi, >> and I think this is a function of an incredibly bad bios >> implementation. The demo models at Circuit City didn't have batteries, >> so I had no way of checking this bug out on that brand. Does anyone >> have experience with a Toshiba laptop t > > > I ran xapm and got a display which said I had 15% charge so I assume the > bios was readable. The 15% probably means little since the computer has > been sitting in its case inactive since the last WLUG meeting. > > doug > > PS while drafting this email the % came up to 21 so it seems the xapm is > working as expected. > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug >

Jan. 6, 2003

Re: [Wlug] looking forward to the 15th!

by brad

On Monday 06 January 2003 03:25 pm, Wes Allen wrote: > Hi gang, > I'm looking forward to the 15th of January so I can finally say good-bye > to Brother Bill on my iPAQ. I got a couple of questions..... Good, only a few more days. Once you have linux installed you can sock-it to bill in style, with xbill on the ipaq. (Here's a screen shot, since i remember you hadn't seen it before) http://131.152.105.154/~opie/screenies/port.14617.png > Has anyone used the perl-script that syncs the ipaq and evolution? Other > then the notorious, "Don't run this while Evolution is open" are there any > other problems? what were you looking to sync? Mail? Calender? I don't think syncing mail works since the mail readers are not in a working state (at least for the opie enviornment). I believe evolution using the ical standard so syncing shouldn't be a problem. If you point me to this perl script, i will give it a try and let you know. > Which CF wireless nics work with linux on the iPAQ. I'm seriously > thinking that I'm going to get the cf-plus expansion pack and a wireless > nic for my iPAQ (linux's true strength is networking, right?). So which > one's work? I've never used the expansion, so i can't say from experience. This should help though. http://handhelds.org/z/wiki/IpaqHardwareCompatibility > And, sadly, how easy is it to reverse the process? On the off-chance that > I can't stand OPIE as a working environment. I've read the howto, how hard > is it in "real life." There is a restoration proceedure. http://www.handhelds.org/projects/wincerestoration.html --brad

Jan. 6, 2003

looking forward to the 15th!

by Wes Allen

Hi gang, I'm looking forward to the 15th of January so I can finally say good-bye to Brother Bill on my iPAQ. I got a couple of questions..... Has anyone used the perl-script that syncs the ipaq and evolution? Other then the notorious, "Don't run this while Evolution is open" are there any other problems? Which CF wireless nics work with linux on the iPAQ. I'm seriously thinking that I'm going to get the cf-plus expansion pack and a wireless nic for my iPAQ (linux's true strength is networking, right?). So which one's work? And, sadly, how easy is it to reverse the process? On the off-chance that I can't stand OPIE as a working environment. I've read the howto, how hard is it in "real life." It might be fun to invite some of the people from the compaq lab to the meeting if anyone who worked on ipaq linux is based in the Worcester area.... Wes -- ------ This message may be signed using GPG, for my public key please send me a message with "Key Request" in the subject line.

Jan. 6, 2003