WLUG
By thread
wlug@lists.wlug.org
By month
Messages by month
- ----- 2026 -----
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2005 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2004 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2003 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2002 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2001 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2000 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- 1 participants
- 11227 messages
RE: [Wlug] OS X Firewall? (#2)
by Adam Keck
Easier way ;-)
1) Login
2) Open a terminal
3) run "sudo passwd"
4) type in your password
5) give root a new password
To items of note:
1)
My Mac OS has been much happier since I starting installing
software at an administrator rather than as root. I am not sure why this
is, but I have heard similar stories from other people.
2)
You probably have to be an administrator to use sudo.
-Adam
On Sun, 20 Oct 2002, Skip Gaede wrote:
> My daughter has an iMac, and we managed to bring it up single user and
> change the root password. I forget how we did it, but I think it involved
> holding down one of the keys on the keyboard at boot time.
>
> --Skip
>
> > -----Original Message-----
> > From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On
> > Behalf Of Richard Goodman
> > Sent: Sunday, October 20, 2002 4:29 PM
> > To: wlug(a)mail.wlug.org
> > Subject: [Wlug] OS X Firewall? (#2)
> >
> >
> > >I would run a packet sniffer (ethereal, tcpdump, etc) on
> > the Linux box
> > >and see what the iBook is putting out
> >
> > BTW the iBook is running 10.2 (brand new)
> >
> > Could not check the ipfw list as it appears that we don't
> > currently have
> > administrator privileges on the iBook.
> >
> > checking the preferences/sharing/firewall showed the firewall
> > off, however
> > I was concerned about the following entries from the iBook's
> > /var/msg/system.log:
> >
> > IP packet filtering initialized, divert enabled, rule-based
> > forwarding
> > enabled, default to accept, logging disabled
> > IP firewall loaded
> > arplookup <IP of my linux box> failed: host is not on localnetwork
> >
> > I have never run a packet sniffer before, so cannot interpret
> > it, but I
> > fired up tcpdump and did
> > a) ping yahoo.com
> > b) attempt to load yahoo.com in IE5
> >
> > and got the following two dumps (assume I've snipped enough)
> >
> > tcpdump host 192.168.1.49
> > Kernel filter, protocol ALL, datagram packet socket
> > tcpdump: listening on all devices
> > 15:55:16.232303 eth1 < host49.goodman1.net.49174 >
> > bach.goodman1.net.domain: 49847+ A? yahoo.com. (2
> > 7)
> > 15:55:16.373034 eth1 > bach.goodman1.net.domain >
> > host49.goodman1.net.49174: 49847* 2/5/5 A w1.rc.vi
> > p.dcx.yahoo.com, A w1.rc.vip.scd.yahoo.com (229)
> > 15:55:16.476477 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:17.476548 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:18.476633 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:19.476745 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:20.476828 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:21.476890 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:22.476949 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:23.477008 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > 15:55:24.477084 eth1 < host49.goodman1.net >
> > w1.rc.vip.dcx.yahoo.com: icmp:
> > echo request
> > <<continued similarly many more lines>
> >
> > tcpdump host 192.168.1.49
> > Kernel filter, protocol ALL, datagram packet socket
> > tcpdump: listening on all devices
> > 16:01:00.340200 eth1 < host49.goodman1.net.49174 >
> > bach.goodman1.net.domain: 45963+ A? www.yahoo.com
> > . (31)
> > 16:01:00.558192 eth1 > bach.goodman1.net.domain >
> > host49.goodman1.net.49174: 45963 13/10/3 CNAME www
> > .yahoo.akadns.net., A www9.dcx.yahoo.com, A w9.dcx.yahoo.com, (504)
> > 16:01:00.563859 eth1 < host49.goodman1.net.49153 >
> > www9.dcx.yahoo.com.www:
> > S 1383754426:1383754426(0
> > ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8687 0> (DF)
> > 16:01:01.247337 eth1 < host49.goodman1.net.49153 >
> > w9.dcx.yahoo.com.www: S
> > 2642071908:2642071908(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8688 0> (DF)
> > 16:01:01.962006 eth1 < host49.goodman1.net.49153 >
> > w3.dcx.yahoo.com.www: S
> > 3424625619:3424625619(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8689 0> (DF)
> > 16:01:02.719348 eth1 < host49.goodman1.net.49153 >
> > www10.dcx.yahoo.com.www:
> > S 715459341:715459341(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8691 0> (DF)
> > 16:01:03.433706 eth1 < host49.goodman1.net.49153 >
> > w2.dcx.yahoo.com.www: S
> > 3613744425:3613744425(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8692 0> (DF)
> > 16:01:04.115338 eth1 < host49.goodman1.net.49153 >
> > w6.dcx.yahoo.com.www: S
> > 941366980:941366980(0) wi
> > n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8694 0> (DF)
> > 16:01:04.796809 eth1 < host49.goodman1.net.49153 >
> > w8.dcx.yahoo.com.www: S
> > 1223626321:1223626321(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8695 0> (DF)
> > 16:01:05.480085 eth1 < host49.goodman1.net.49153 >
> > w1.dcx.yahoo.com.www: S
> > 1755119059:1755119059(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8696 0> (DF)
> > 16:01:05.550034 eth1 > arp who-has host49.goodman1.net tell
> > localhost.localdomain (0:80:19:35:ad:39)
> > 16:01:05.550329 eth1 < arp reply host49.goodman1.net is-at
> > 0:3:93:c5:39:7c
> > (0:80:19:35:ad:39)
> > 16:01:06.163479 eth1 < host49.goodman1.net.49153 >
> > www7.dcx.yahoo.com.www:
> > S 2895506991:2895506991(0
> > ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8698 0> (DF)
> > 16:01:06.846666 eth1 < host49.goodman1.net.49153 >
> > www8.dcx.yahoo.com.www:
> > S 3434260281:3434260281(0
> > ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8699 0> (DF)
> > 16:01:07.529897 eth1 < host49.goodman1.net.49155 >
> > www9.dcx.yahoo.com.www:
> > S 2654995975:2654995975(0
> > ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8701 0> (DF)
> > 16:01:09.379617 eth1 < host49.goodman1.net.49155 >
> > w9.dcx.yahoo.com.www: S
> > 607986242:607986242(0) wi
> > n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8704 0> (DF)
> > 16:01:11.231084 eth1 < host49.goodman1.net.49155 >
> > w3.dcx.yahoo.com.www: S
> > 1683897864:1683897864(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8708 0> (DF)
> > 16:01:13.079138 eth1 < host49.goodman1.net.49155 >
> > www10.dcx.yahoo.com.www:
> > S 3195269927:3195269927(
> > 0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8712 0> (DF)
> > 16:01:14.929941 eth1 < host49.goodman1.net.49155 >
> > w2.dcx.yahoo.com.www: S
> > 1831211410:1831211410(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8715 0> (DF)
> > 16:01:16.778674 eth1 < host49.goodman1.net.49155 >
> > w6.dcx.yahoo.com.www: S
> > 3961536773:3961536773(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8719 0> (DF)
> > 16:01:18.628462 eth1 < host49.goodman1.net.49155 >
> > w8.dcx.yahoo.com.www: S
> > 4286238440:4286238440(0)
> > win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8723 0> (DF)
> >
> > Does this provide enough information?
> >
> > Dick
> >
> > _______________________________________________
> > Wlug mailing list
> > Wlug(a)mail.wlug.org
> > http://mail.wlug.org/mailman/listinfo/wlug
> >
>
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
"lingua machinationis creo, ergo sum"
_____________________________________________
Adam Keck The Mathworks
508-647-7298 Natick, Ma
www.mathworks.com
FreeNIX/Backup/Unix Administrator
_____________________________________________
Oct. 21, 2002
RE: [Wlug] OS X Firewall? (#2)
by Skip Gaede
My daughter has an iMac, and we managed to bring it up single user and
change the root password. I forget how we did it, but I think it involved
holding down one of the keys on the keyboard at boot time.
--Skip
> -----Original Message-----
> From: wlug-admin(a)mail.wlug.org [mailto:wlug-admin@mail.wlug.org]On
> Behalf Of Richard Goodman
> Sent: Sunday, October 20, 2002 4:29 PM
> To: wlug(a)mail.wlug.org
> Subject: [Wlug] OS X Firewall? (#2)
>
>
> >I would run a packet sniffer (ethereal, tcpdump, etc) on
> the Linux box
> >and see what the iBook is putting out
>
> BTW the iBook is running 10.2 (brand new)
>
> Could not check the ipfw list as it appears that we don't
> currently have
> administrator privileges on the iBook.
>
> checking the preferences/sharing/firewall showed the firewall
> off, however
> I was concerned about the following entries from the iBook's
> /var/msg/system.log:
>
> IP packet filtering initialized, divert enabled, rule-based
> forwarding
> enabled, default to accept, logging disabled
> IP firewall loaded
> arplookup <IP of my linux box> failed: host is not on localnetwork
>
> I have never run a packet sniffer before, so cannot interpret
> it, but I
> fired up tcpdump and did
> a) ping yahoo.com
> b) attempt to load yahoo.com in IE5
>
> and got the following two dumps (assume I've snipped enough)
>
> tcpdump host 192.168.1.49
> Kernel filter, protocol ALL, datagram packet socket
> tcpdump: listening on all devices
> 15:55:16.232303 eth1 < host49.goodman1.net.49174 >
> bach.goodman1.net.domain: 49847+ A? yahoo.com. (2
> 7)
> 15:55:16.373034 eth1 > bach.goodman1.net.domain >
> host49.goodman1.net.49174: 49847* 2/5/5 A w1.rc.vi
> p.dcx.yahoo.com, A w1.rc.vip.scd.yahoo.com (229)
> 15:55:16.476477 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:17.476548 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:18.476633 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:19.476745 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:20.476828 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:21.476890 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:22.476949 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:23.477008 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> 15:55:24.477084 eth1 < host49.goodman1.net >
> w1.rc.vip.dcx.yahoo.com: icmp:
> echo request
> <<continued similarly many more lines>
>
> tcpdump host 192.168.1.49
> Kernel filter, protocol ALL, datagram packet socket
> tcpdump: listening on all devices
> 16:01:00.340200 eth1 < host49.goodman1.net.49174 >
> bach.goodman1.net.domain: 45963+ A? www.yahoo.com
> . (31)
> 16:01:00.558192 eth1 > bach.goodman1.net.domain >
> host49.goodman1.net.49174: 45963 13/10/3 CNAME www
> .yahoo.akadns.net., A www9.dcx.yahoo.com, A w9.dcx.yahoo.com, (504)
> 16:01:00.563859 eth1 < host49.goodman1.net.49153 >
> www9.dcx.yahoo.com.www:
> S 1383754426:1383754426(0
> ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8687 0> (DF)
> 16:01:01.247337 eth1 < host49.goodman1.net.49153 >
> w9.dcx.yahoo.com.www: S
> 2642071908:2642071908(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8688 0> (DF)
> 16:01:01.962006 eth1 < host49.goodman1.net.49153 >
> w3.dcx.yahoo.com.www: S
> 3424625619:3424625619(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8689 0> (DF)
> 16:01:02.719348 eth1 < host49.goodman1.net.49153 >
> www10.dcx.yahoo.com.www:
> S 715459341:715459341(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8691 0> (DF)
> 16:01:03.433706 eth1 < host49.goodman1.net.49153 >
> w2.dcx.yahoo.com.www: S
> 3613744425:3613744425(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8692 0> (DF)
> 16:01:04.115338 eth1 < host49.goodman1.net.49153 >
> w6.dcx.yahoo.com.www: S
> 941366980:941366980(0) wi
> n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8694 0> (DF)
> 16:01:04.796809 eth1 < host49.goodman1.net.49153 >
> w8.dcx.yahoo.com.www: S
> 1223626321:1223626321(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8695 0> (DF)
> 16:01:05.480085 eth1 < host49.goodman1.net.49153 >
> w1.dcx.yahoo.com.www: S
> 1755119059:1755119059(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8696 0> (DF)
> 16:01:05.550034 eth1 > arp who-has host49.goodman1.net tell
> localhost.localdomain (0:80:19:35:ad:39)
> 16:01:05.550329 eth1 < arp reply host49.goodman1.net is-at
> 0:3:93:c5:39:7c
> (0:80:19:35:ad:39)
> 16:01:06.163479 eth1 < host49.goodman1.net.49153 >
> www7.dcx.yahoo.com.www:
> S 2895506991:2895506991(0
> ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8698 0> (DF)
> 16:01:06.846666 eth1 < host49.goodman1.net.49153 >
> www8.dcx.yahoo.com.www:
> S 3434260281:3434260281(0
> ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8699 0> (DF)
> 16:01:07.529897 eth1 < host49.goodman1.net.49155 >
> www9.dcx.yahoo.com.www:
> S 2654995975:2654995975(0
> ) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8701 0> (DF)
> 16:01:09.379617 eth1 < host49.goodman1.net.49155 >
> w9.dcx.yahoo.com.www: S
> 607986242:607986242(0) wi
> n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8704 0> (DF)
> 16:01:11.231084 eth1 < host49.goodman1.net.49155 >
> w3.dcx.yahoo.com.www: S
> 1683897864:1683897864(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8708 0> (DF)
> 16:01:13.079138 eth1 < host49.goodman1.net.49155 >
> www10.dcx.yahoo.com.www:
> S 3195269927:3195269927(
> 0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8712 0> (DF)
> 16:01:14.929941 eth1 < host49.goodman1.net.49155 >
> w2.dcx.yahoo.com.www: S
> 1831211410:1831211410(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8715 0> (DF)
> 16:01:16.778674 eth1 < host49.goodman1.net.49155 >
> w6.dcx.yahoo.com.www: S
> 3961536773:3961536773(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8719 0> (DF)
> 16:01:18.628462 eth1 < host49.goodman1.net.49155 >
> w8.dcx.yahoo.com.www: S
> 4286238440:4286238440(0)
> win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8723 0> (DF)
>
> Does this provide enough information?
>
> Dick
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
>
Oct. 20, 2002
OS X Firewall? (#2)
by Richard Goodman
>I would run a packet sniffer (ethereal, tcpdump, etc) on the Linux box
>and see what the iBook is putting out
BTW the iBook is running 10.2 (brand new)
Could not check the ipfw list as it appears that we don't currently have
administrator privileges on the iBook.
checking the preferences/sharing/firewall showed the firewall off, however
I was concerned about the following entries from the iBook's
/var/msg/system.log:
IP packet filtering initialized, divert enabled, rule-based forwarding
enabled, default to accept, logging disabled
IP firewall loaded
arplookup <IP of my linux box> failed: host is not on localnetwork
I have never run a packet sniffer before, so cannot interpret it, but I
fired up tcpdump and did
a) ping yahoo.com
b) attempt to load yahoo.com in IE5
and got the following two dumps (assume I've snipped enough)
tcpdump host 192.168.1.49
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on all devices
15:55:16.232303 eth1 < host49.goodman1.net.49174 >
bach.goodman1.net.domain: 49847+ A? yahoo.com. (2
7)
15:55:16.373034 eth1 > bach.goodman1.net.domain >
host49.goodman1.net.49174: 49847* 2/5/5 A w1.rc.vi
p.dcx.yahoo.com, A w1.rc.vip.scd.yahoo.com (229)
15:55:16.476477 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:17.476548 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:18.476633 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:19.476745 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:20.476828 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:21.476890 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:22.476949 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:23.477008 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
15:55:24.477084 eth1 < host49.goodman1.net > w1.rc.vip.dcx.yahoo.com: icmp:
echo request
<<continued similarly many more lines>
tcpdump host 192.168.1.49
Kernel filter, protocol ALL, datagram packet socket
tcpdump: listening on all devices
16:01:00.340200 eth1 < host49.goodman1.net.49174 >
bach.goodman1.net.domain: 45963+ A? www.yahoo.com
. (31)
16:01:00.558192 eth1 > bach.goodman1.net.domain >
host49.goodman1.net.49174: 45963 13/10/3 CNAME www
.yahoo.akadns.net., A www9.dcx.yahoo.com, A w9.dcx.yahoo.com, (504)
16:01:00.563859 eth1 < host49.goodman1.net.49153 > www9.dcx.yahoo.com.www:
S 1383754426:1383754426(0
) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8687 0> (DF)
16:01:01.247337 eth1 < host49.goodman1.net.49153 > w9.dcx.yahoo.com.www: S
2642071908:2642071908(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8688 0> (DF)
16:01:01.962006 eth1 < host49.goodman1.net.49153 > w3.dcx.yahoo.com.www: S
3424625619:3424625619(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8689 0> (DF)
16:01:02.719348 eth1 < host49.goodman1.net.49153 > www10.dcx.yahoo.com.www:
S 715459341:715459341(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8691 0> (DF)
16:01:03.433706 eth1 < host49.goodman1.net.49153 > w2.dcx.yahoo.com.www: S
3613744425:3613744425(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8692 0> (DF)
16:01:04.115338 eth1 < host49.goodman1.net.49153 > w6.dcx.yahoo.com.www: S
941366980:941366980(0) wi
n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8694 0> (DF)
16:01:04.796809 eth1 < host49.goodman1.net.49153 > w8.dcx.yahoo.com.www: S
1223626321:1223626321(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8695 0> (DF)
16:01:05.480085 eth1 < host49.goodman1.net.49153 > w1.dcx.yahoo.com.www: S
1755119059:1755119059(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8696 0> (DF)
16:01:05.550034 eth1 > arp who-has host49.goodman1.net tell
localhost.localdomain (0:80:19:35:ad:39)
16:01:05.550329 eth1 < arp reply host49.goodman1.net is-at 0:3:93:c5:39:7c
(0:80:19:35:ad:39)
16:01:06.163479 eth1 < host49.goodman1.net.49153 > www7.dcx.yahoo.com.www:
S 2895506991:2895506991(0
) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8698 0> (DF)
16:01:06.846666 eth1 < host49.goodman1.net.49153 > www8.dcx.yahoo.com.www:
S 3434260281:3434260281(0
) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8699 0> (DF)
16:01:07.529897 eth1 < host49.goodman1.net.49155 > www9.dcx.yahoo.com.www:
S 2654995975:2654995975(0
) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8701 0> (DF)
16:01:09.379617 eth1 < host49.goodman1.net.49155 > w9.dcx.yahoo.com.www: S
607986242:607986242(0) wi
n 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8704 0> (DF)
16:01:11.231084 eth1 < host49.goodman1.net.49155 > w3.dcx.yahoo.com.www: S
1683897864:1683897864(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8708 0> (DF)
16:01:13.079138 eth1 < host49.goodman1.net.49155 > www10.dcx.yahoo.com.www:
S 3195269927:3195269927(
0) win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8712 0> (DF)
16:01:14.929941 eth1 < host49.goodman1.net.49155 > w2.dcx.yahoo.com.www: S
1831211410:1831211410(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8715 0> (DF)
16:01:16.778674 eth1 < host49.goodman1.net.49155 > w6.dcx.yahoo.com.www: S
3961536773:3961536773(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8719 0> (DF)
16:01:18.628462 eth1 < host49.goodman1.net.49155 > w8.dcx.yahoo.com.www: S
4286238440:4286238440(0)
win 32768 <mss 1460,nop,wscale 0,nop,nop,timestamp 8723 0> (DF)
Does this provide enough information?
Dick
Oct. 20, 2002
OS X firewall ?
by Richard Goodman
I put the question to the list because I think its related enough to
be of interest.
My wife just got a top-of-the-line iBook with OS X from school.
Connects to the network at school instantly as it should. (I am brand
new on OS X)
At home I run an network based on a RH7.0 box with IpMasq and some
servers going to a static-IP DSL line. About 10 machines, mixed Win
and Mac, mixed static and DHCP. When she starts up the iBook:
a) the DHCP server on the Linux box shows the normal DHCPREQUEST and
DHCPACK lines.
b) the Network panel on the iBook shows all the values I would expect
to have been handed off by DHCP, 192.168.1.x IP, 255.255.255.0 mask,
192.168.1.1 gateway
c) but unable to connect to the internet
I found "Terminal" and was able to:
d) ping the linux box
e) do a nslookup against the name server on the linux box, resolving
outside domain names
f) bring up web pages running on the Apache server on the linux box
But I don't seem to be able to get outside
I thought the first thing to try would be to disable the IP Firewall
that's being started on the iBook, but haven't been able to figure
out how (or where its files are). BTW I run a fairly strict firewall
on the linux box and the log shows no hits related to the iBook
attempting to get outside.
Or I could be totally off base, in which case I would be open to
other avenues towards fixing this.
Less related:
There is an Apple Select 360 appletalk laserwriter on the network,
connected thru an Asante appletalk/ethernet bridge which my wife has
used with her G3. She can select it through the chooser on the iBook,
and we can read and set printer config info, but although everything
appears normal when printing for an application in OS9 classic,
nothing gets to the printer (and no blinking green light indicating
data transfer).
Dick
Oct. 20, 2002
Re: [Wlug] OS X firewall ?
by Theo Van Dinter
On Sun, Oct 20, 2002 at 01:48:17PM -0500, Richard Goodman wrote:
> But I don't seem to be able to get outside
> I thought the first thing to try would be to disable the IP Firewall
> that's being started on the iBook, but haven't been able to figure
> out how (or where its files are). BTW I run a fairly strict firewall
> on the linux box and the log shows no hits related to the iBook
> attempting to get outside.
I would run a packet sniffer (ethereal, tcpdump, etc) on the Linux box
and see what the iBook is putting out.
To look at the firewall settings though (at least in 10.2.x):
System Preferences -> Sharing -> Firewall
You can also use the BSD standard ipfw, although I haven't used it at all
so ... It looks like "ipfw list" will tell you what you want as well.
For me (I don't use the firewall on my TiBook) it's wide open:
felicity% sudo ipfw list
65535 allow ip from any to any
--
Randomly Generated Tagline:
"... you are a very evil man. Evil, evil, evil...
It's my job. It pays well and I get to work my own hours."
- J. Michael Straczynski
Oct. 20, 2002
Re: [Wlug] RH 7.0->7.3 upgrade
by Brian J.Conway
> > Is the php module ready for 2.x? I've been thinking about giving RH
> > 8.0 a try to see if I can make use of my usb ports!
>
> I'm confused, why would you change distributions, just to try and get
> USB working? This is mostly functinality provided by the kernel: just
> upgrade your kernel.
I was curious about this as well, have you tried any of the Mandrake
forums, newsgroups, or mailing lists? I have 9.0 running on my Dell
laptop without issue and plugging in my dad's digital camera worked quite
well (I don't have any USB devices of my own, so I don't have too much
experience playing around with it). Just my two cents.
Brian J. Conway
bconway(a)alum.wpi.edu
"LINUX is obsolete"
- Andrew S. Tanenbaum, creator of Minix - Jan 29, 1992
Oct. 20, 2002
Re: [Wlug] RH 7.0->7.3 upgrade
by Josh Huber
Wes Allen <wallen(a)charter.net> writes:
> Is the php module ready for 2.x? I've been thinking about giving RH
> 8.0 a try to see if I can make use of my usb ports!
I'm confused, why would you change distributions, just to try and get
USB working? This is mostly functinality provided by the kernel: just
upgrade your kernel.
WRT usb, you may need to play around with hotplug, etc...which may
require package upgrades.
In most cases, getting new hardware support does not require upgrading
your distribution (not counting video in X :), but instead requires
upgrading your kernel.
--
Josh Huber
Oct. 20, 2002
Re: [Wlug] RH 7.0->7.3 upgrade
by Wes Allen
Cool, if mandrake doesn't come out with a fix I'll have to try it!
On Friday 18 October 2002 13:46, Peter Gutowski wrote:
> On 10/18/2002 1:23 PM, Wes Allen <wallen(a)charter.net> wrote:
> >On Friday 18 October 2002 11:03, Peter Gutowski wrote:
> >> I'd suggest that you consider upgrading to 8.0. I've been very
> >>impressed with the........
>
> ...snip...
>
> >Is the php module ready for 2.x? I've been thinking about giving
> >RH 8.0 a try
> >to see if I can make use of my usb ports!
>
> RHL8.0 includes PHP 4.2.2, plus various modules (libphp4.so for apache,
> imap, mysql, etc....) You might need to rework portions of the /etc/php.ini
> file, but it seems to be a straight shot.
>
> -PG
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
--
------
This message may be signed using GPG, for my public key please
send me a message with "Key Request" in the subject line.
Oct. 18, 2002
Re: [Wlug] RH 7.0->7.3 upgrade
by Peter Gutowski
On 10/18/2002 1:23 PM, Wes Allen <wallen(a)charter.net> wrote:
>On Friday 18 October 2002 11:03, Peter Gutowski wrote:
>> I'd suggest that you consider upgrading to 8.0. I've been very
>>impressed with the........
...snip...
>Is the php module ready for 2.x? I've been thinking about giving
>RH 8.0 a try
>to see if I can make use of my usb ports!
RHL8.0 includes PHP 4.2.2, plus various modules (libphp4.so for apache, imap, mysql, etc....) You might need to rework portions of the /etc/php.ini file, but it seems to be a straight shot.
-PG
Oct. 18, 2002
Re: [Wlug] RH 7.0->7.3 upgrade
by Wes Allen
On Friday 18 October 2002 11:03, Peter Gutowski wrote:
> I'd suggest that you consider upgrading to 8.0. I've been very impressed
> with the changes in 8.0 primarily in the area of user interface.
>
> I've experienced problems with RHL upgrades in the past. But I believe the
> bulk of those problems owed to the fact that I was attempting to upgrade
> where the disk setup was just too "tight". Perhaps in contrast to to 7.0,
> both 7.3 and 8.0 put a lot of files into /usr/share. You'll may make things
> easier for yourself if /usr/share is on its own partition.
>
> Aside from the be prepared for a general tightening of security. If you use
> sendmail, you'll probably have to add a "sendmail: ALL" into
> /etc/hosts.allow as the default is to only do mail handling from localhost.
> RHL 8.0 uses apache 2.x whereas RHL7.3 still uses the 1.3.x versions.
Is the php module ready for 2.x? I've been thinking about giving RH 8.0 a try
to see if I can make use of my usb ports!
>
> Having installations on hard disks with enough hard drive space has made
> both upgrades, 7.3 and 8.0, pretty painless. As Charles Anderson ;) may
> likely suggest to you, be sure to read (and digest) the README files on the
> install disks... probably before you start to alleviate too many surprizes.
> (Foolish boy that I was, I *didn't*. And to my embarassment, he
> [rightfully] rubbed my nose in it. But, hey, I learned my lesson.)
>
> FYI, this may not be totally meaningful without know how much and just what
> exactly in installed. But, that said, I'd characterize my installation as
> medium -- neither slim nor fat. Here's some pertinent partition usages:
>
> Filesystem 1K Blocks Used Available % Mounted on
> /dev/hda3 497861 80662 391495 18% /
> /dev/hda1 31079 6419 23056 22% /boot
> /dev/hda11 2063504 98612 1860072 6% /home
> /dev/hda7 2063504 1209760 748924 62% /usr
> /dev/hda9 521748 113052 382192 23% /usr/local
> /dev/hda8 2063504 729108 1229576 38% /usr/share
> /dev/hda10 521748 154348 340896 32% /usr/src
> /dev/hda5 497829 76114 396013 17% /var
>
> -PG
>
> On 10/18/2002 9:53 AM, Richard Goodman <dick(a)goodman1.net> wrote:
> >I have four RH servers, two 7.0 and two new 7.3 servers just put up
> >last 6
> >weeks or less
> >How painless would an upgrade of the older servers from 7.0->7.3
> >be? Any
> >surprises I should know about? Any comments or advice? I've never
> >done a
> >version upgrade before.
> >
> >I already have a CD with the most important security upgrades I used
> >on the
> >7.3 servers after I had worm (Slapper/Cinik) problems.
> >
> >Dick
> >
> > Richard Goodman dick(a)goodman1.net
> >
> >
> >
> >
> >_______________________________________________
> >Wlug mailing list
> >Wlug(a)mail.wlug.org
> >http://mail.wlug.org/mailman/listinfo/wlug
>
> _______________________________________________
> Wlug mailing list
> Wlug(a)mail.wlug.org
> http://mail.wlug.org/mailman/listinfo/wlug
--
------
This message may be signed using GPG, for my public key please
send me a message with "Key Request" in the subject line.
Oct. 18, 2002