WLUG

Download

By thread

wlug@lists.wlug.org

1 participants
11224 messages

OS X firewall ?

by Richard Goodman

I put the question to the list because I think its related enough to be of interest. My wife just got a top-of-the-line iBook with OS X from school. Connects to the network at school instantly as it should. (I am brand new on OS X) At home I run an network based on a RH7.0 box with IpMasq and some servers going to a static-IP DSL line. About 10 machines, mixed Win and Mac, mixed static and DHCP. When she starts up the iBook: a) the DHCP server on the Linux box shows the normal DHCPREQUEST and DHCPACK lines. b) the Network panel on the iBook shows all the values I would expect to have been handed off by DHCP, 192.168.1.x IP, 255.255.255.0 mask, 192.168.1.1 gateway c) but unable to connect to the internet I found "Terminal" and was able to: d) ping the linux box e) do a nslookup against the name server on the linux box, resolving outside domain names f) bring up web pages running on the Apache server on the linux box But I don't seem to be able to get outside I thought the first thing to try would be to disable the IP Firewall that's being started on the iBook, but haven't been able to figure out how (or where its files are). BTW I run a fairly strict firewall on the linux box and the log shows no hits related to the iBook attempting to get outside. Or I could be totally off base, in which case I would be open to other avenues towards fixing this. Less related: There is an Apple Select 360 appletalk laserwriter on the network, connected thru an Asante appletalk/ethernet bridge which my wife has used with her G3. She can select it through the chooser on the iBook, and we can read and set printer config info, but although everything appears normal when printing for an application in OS9 classic, nothing gets to the printer (and no blinking green light indicating data transfer). Dick

Oct. 20, 2002

Re: [Wlug] OS X firewall ?

by Theo Van Dinter

On Sun, Oct 20, 2002 at 01:48:17PM -0500, Richard Goodman wrote: > But I don't seem to be able to get outside > I thought the first thing to try would be to disable the IP Firewall > that's being started on the iBook, but haven't been able to figure > out how (or where its files are). BTW I run a fairly strict firewall > on the linux box and the log shows no hits related to the iBook > attempting to get outside. I would run a packet sniffer (ethereal, tcpdump, etc) on the Linux box and see what the iBook is putting out. To look at the firewall settings though (at least in 10.2.x): System Preferences -> Sharing -> Firewall You can also use the BSD standard ipfw, although I haven't used it at all so ... It looks like "ipfw list" will tell you what you want as well. For me (I don't use the firewall on my TiBook) it's wide open: felicity% sudo ipfw list 65535 allow ip from any to any -- Randomly Generated Tagline: "... you are a very evil man. Evil, evil, evil... It's my job. It pays well and I get to work my own hours." - J. Michael Straczynski

Oct. 20, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Brian J.Conway

> > Is the php module ready for 2.x? I've been thinking about giving RH > > 8.0 a try to see if I can make use of my usb ports! > > I'm confused, why would you change distributions, just to try and get > USB working? This is mostly functinality provided by the kernel: just > upgrade your kernel. I was curious about this as well, have you tried any of the Mandrake forums, newsgroups, or mailing lists? I have 9.0 running on my Dell laptop without issue and plugging in my dad's digital camera worked quite well (I don't have any USB devices of my own, so I don't have too much experience playing around with it). Just my two cents. Brian J. Conway bconway(a)alum.wpi.edu "LINUX is obsolete" - Andrew S. Tanenbaum, creator of Minix - Jan 29, 1992

Oct. 20, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Josh Huber

Wes Allen <wallen(a)charter.net> writes: > Is the php module ready for 2.x? I've been thinking about giving RH > 8.0 a try to see if I can make use of my usb ports! I'm confused, why would you change distributions, just to try and get USB working? This is mostly functinality provided by the kernel: just upgrade your kernel. WRT usb, you may need to play around with hotplug, etc...which may require package upgrades. In most cases, getting new hardware support does not require upgrading your distribution (not counting video in X :), but instead requires upgrading your kernel. -- Josh Huber

Oct. 20, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Wes Allen

Cool, if mandrake doesn't come out with a fix I'll have to try it! On Friday 18 October 2002 13:46, Peter Gutowski wrote: > On 10/18/2002 1:23 PM, Wes Allen <wallen(a)charter.net> wrote: > >On Friday 18 October 2002 11:03, Peter Gutowski wrote: > >> I'd suggest that you consider upgrading to 8.0. I've been very > >>impressed with the........ > > ...snip... > > >Is the php module ready for 2.x? I've been thinking about giving > >RH 8.0 a try > >to see if I can make use of my usb ports! > > RHL8.0 includes PHP 4.2.2, plus various modules (libphp4.so for apache, > imap, mysql, etc....) You might need to rework portions of the /etc/php.ini > file, but it seems to be a straight shot. > > -PG > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- ------ This message may be signed using GPG, for my public key please send me a message with "Key Request" in the subject line.

Oct. 18, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Peter Gutowski

On 10/18/2002 1:23 PM, Wes Allen <wallen(a)charter.net> wrote: >On Friday 18 October 2002 11:03, Peter Gutowski wrote: >> I'd suggest that you consider upgrading to 8.0. I've been very >>impressed with the........ ...snip... >Is the php module ready for 2.x? I've been thinking about giving >RH 8.0 a try >to see if I can make use of my usb ports! RHL8.0 includes PHP 4.2.2, plus various modules (libphp4.so for apache, imap, mysql, etc....) You might need to rework portions of the /etc/php.ini file, but it seems to be a straight shot. -PG

Oct. 18, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Wes Allen

On Friday 18 October 2002 11:03, Peter Gutowski wrote: > I'd suggest that you consider upgrading to 8.0. I've been very impressed > with the changes in 8.0 primarily in the area of user interface. > > I've experienced problems with RHL upgrades in the past. But I believe the > bulk of those problems owed to the fact that I was attempting to upgrade > where the disk setup was just too "tight". Perhaps in contrast to to 7.0, > both 7.3 and 8.0 put a lot of files into /usr/share. You'll may make things > easier for yourself if /usr/share is on its own partition. > > Aside from the be prepared for a general tightening of security. If you use > sendmail, you'll probably have to add a "sendmail: ALL" into > /etc/hosts.allow as the default is to only do mail handling from localhost. > RHL 8.0 uses apache 2.x whereas RHL7.3 still uses the 1.3.x versions. Is the php module ready for 2.x? I've been thinking about giving RH 8.0 a try to see if I can make use of my usb ports! > > Having installations on hard disks with enough hard drive space has made > both upgrades, 7.3 and 8.0, pretty painless. As Charles Anderson ;) may > likely suggest to you, be sure to read (and digest) the README files on the > install disks... probably before you start to alleviate too many surprizes. > (Foolish boy that I was, I *didn't*. And to my embarassment, he > [rightfully] rubbed my nose in it. But, hey, I learned my lesson.) > > FYI, this may not be totally meaningful without know how much and just what > exactly in installed. But, that said, I'd characterize my installation as > medium -- neither slim nor fat. Here's some pertinent partition usages: > > Filesystem 1K Blocks Used Available % Mounted on > /dev/hda3 497861 80662 391495 18% / > /dev/hda1 31079 6419 23056 22% /boot > /dev/hda11 2063504 98612 1860072 6% /home > /dev/hda7 2063504 1209760 748924 62% /usr > /dev/hda9 521748 113052 382192 23% /usr/local > /dev/hda8 2063504 729108 1229576 38% /usr/share > /dev/hda10 521748 154348 340896 32% /usr/src > /dev/hda5 497829 76114 396013 17% /var > > -PG > > On 10/18/2002 9:53 AM, Richard Goodman <dick(a)goodman1.net> wrote: > >I have four RH servers, two 7.0 and two new 7.3 servers just put up > >last 6 > >weeks or less > >How painless would an upgrade of the older servers from 7.0->7.3 > >be? Any > >surprises I should know about? Any comments or advice? I've never > >done a > >version upgrade before. > > > >I already have a CD with the most important security upgrades I used > >on the > >7.3 servers after I had worm (Slapper/Cinik) problems. > > > >Dick > > > > Richard Goodman dick(a)goodman1.net > > > > > > > > > >_______________________________________________ > >Wlug mailing list > >Wlug(a)mail.wlug.org > >http://mail.wlug.org/mailman/listinfo/wlug > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- ------ This message may be signed using GPG, for my public key please send me a message with "Key Request" in the subject line.

Oct. 18, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Theo Van Dinter

On Fri, Oct 18, 2002 at 11:54:47AM -0400, Charles R. Anderson wrote: > I wouldn't recommend running servers on 8.0 at the moment, since there are > some kinks that haven't been worked out yet, the major one being rpm hangs. Ah, as is standard: X.0 = avoid, X.1 = better, X.2 = rocks 7.3 is the only X.3 in recent times from RH so it's not in the standard yet. ;) -- Randomly Generated Tagline: "Real programmers scorn floating point arithmetic. The decimal point was invented for pansy bedwetters who are unable to 'think big'." - Unknown

Oct. 18, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Charles R. Anderson

On Fri, Oct 18, 2002 at 09:53:47AM -0400, Richard Goodman wrote: dick> I have four RH servers, two 7.0 and two new 7.3 servers just put up last 6 dick> weeks or less dick> How painless would an upgrade of the older servers from 7.0->7.3 be? Any dick> surprises I should know about? Any comments or advice? I've never done a dick> version upgrade before. I've had excellent results with upgrading servers. I've done upgrades from 4.0 through to 7.3 on my system, and 6.2 through to 7.3 on servers at work. Just be sure to read the README and RELEASE-NOTES on the new release before upgrading. I recommend making a backup copy of /etc that you can refer to in case something in the upgrade changes a file: cp -av /etc /etc.rh70 You will need to at least check over some config files after the upgrade. You can find all the ones that were changed or for which there are new ones available by doing this: find /etc -name '*.rpm*' -ls .rpmsave are backups of your original configs which were replaced during the upgrade. .rpmnew are new versions of config files that might need to be configured and put in place over your originals. /root/upgrade.log will also have a log of every package upgrade and if they replaced any config files or provided new config files. I wouldn't recommend running servers on 8.0 at the moment, since there are some kinks that haven't been worked out yet, the major one being rpm hangs. -- Charles R. Anderson <cra(a)wpi.edu> / http://angus.ind.wpi.edu/~cra/ PGP Key ID: 49BB5886 Fingerprint: EBA3 A106 7C93 FA07 8E15 3AC2 C367 A0F9 49BB 5886

Oct. 18, 2002

Re: [Wlug] RH 7.0->7.3 upgrade

by Peter Gutowski

I'd suggest that you consider upgrading to 8.0. I've been very impressed with the changes in 8.0 primarily in the area of user interface. I've experienced problems with RHL upgrades in the past. But I believe the bulk of those problems owed to the fact that I was attempting to upgrade where the disk setup was just too "tight". Perhaps in contrast to to 7.0, both 7.3 and 8.0 put a lot of files into /usr/share. You'll may make things easier for yourself if /usr/share is on its own partition. Aside from the be prepared for a general tightening of security. If you use sendmail, you'll probably have to add a "sendmail: ALL" into /etc/hosts.allow as the default is to only do mail handling from localhost. RHL 8.0 uses apache 2.x whereas RHL7.3 still uses the 1.3.x versions. Having installations on hard disks with enough hard drive space has made both upgrades, 7.3 and 8.0, pretty painless. As Charles Anderson ;) may likely suggest to you, be sure to read (and digest) the README files on the install disks... probably before you start to alleviate too many surprizes. (Foolish boy that I was, I *didn't*. And to my embarassment, he [rightfully] rubbed my nose in it. But, hey, I learned my lesson.) FYI, this may not be totally meaningful without know how much and just what exactly in installed. But, that said, I'd characterize my installation as medium -- neither slim nor fat. Here's some pertinent partition usages: Filesystem 1K Blocks Used Available % Mounted on /dev/hda3 497861 80662 391495 18% / /dev/hda1 31079 6419 23056 22% /boot /dev/hda11 2063504 98612 1860072 6% /home /dev/hda7 2063504 1209760 748924 62% /usr /dev/hda9 521748 113052 382192 23% /usr/local /dev/hda8 2063504 729108 1229576 38% /usr/share /dev/hda10 521748 154348 340896 32% /usr/src /dev/hda5 497829 76114 396013 17% /var -PG On 10/18/2002 9:53 AM, Richard Goodman <dick(a)goodman1.net> wrote: >I have four RH servers, two 7.0 and two new 7.3 servers just put up >last 6 >weeks or less >How painless would an upgrade of the older servers from 7.0->7.3 >be? Any >surprises I should know about? Any comments or advice? I've never >done a >version upgrade before. > >I already have a CD with the most important security upgrades I used >on the >7.3 servers after I had worm (Slapper/Cinik) problems. > >Dick > > Richard Goodman dick(a)goodman1.net > > > > >_______________________________________________ >Wlug mailing list >Wlug(a)mail.wlug.org >http://mail.wlug.org/mailman/listinfo/wlug > >

Oct. 18, 2002

Jump to page: