- WLUG - wlug.mailman3.com

Re: [Wlug] Firewalls

by Theo Van Dinter

On Mon, Apr 02, 2001 at 09:36:43PM -0400, Michael Long wrote: > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would define "VPN connections". do you mean IPSec, or some third-party (ie: proprietary) VPN connection? If you want IPSec, you can look at FreeS/WAN which interoperates with several different vendor's IPSec implementations. (http://www.xs4all.nl/~freeswan/) As was mentioned, PPP over SSH works (klugy, but I've done it and it works fairly decently) as well. ipchains/iptables will take care of your firewalling needs. VPN is a completely different puppy though. -- Randomly Generated Tagline: "So Lone Star ... Now you see that evil will always triumph because good is dumb." - Space Balls

April 3, 2001

Re: [Wlug] Firewalls

by Leon Do

you may want to look into the compact Coyote Linux solution. They are easy to configure and the entire package is on a single floppy disk provide more secure to your network. They are available for free or commercial Here are their features: DHCP Connections Static IP Connections PPP Dialup PPPoE Connections DHCP Server IP Chains Firewalling IP Auto-forwarding Linux Floppy Builder PPTP Client Support Their web site is http://www.coyotelinux.com "Brian J. Conway" wrote: > > > After spending many hours this past week trying to understand ipchains and > > firewalling in general I have come to the conclusion that I am spending a lot > > of time trying to recreate something that probably already exists. Does > > anyone have any experience with either open source or commercial firewalling > > products that can be configured to work in a small office network and allow > > VPN connections to larger networks. I do not have a very big budget but would > > be willing to pay for the appropriate solution. > > The approach I use for my home network is with masquerading a set of > 10.x IPs. For a configurable office solution I would recommend > something commercial or at least far more complex than what I have in > use, but my ipchains setup is as follows, for reference: > > /sbin/ipchains -F > /sbin/ipchains -P forward DENY > /sbin/ipchains -A forward -j MASQ -s 10.0.0.254/24 > /sbin/ipchains -M -S 43200 120 300 > /sbin/modprobe ip_masq_ftp > /sbin/modprobe ip_masq_cuseeme > /sbin/modprobe ip_masq_irc > /sbin/modprobe ip_masq_quake > /sbin/modprobe ip_masq_raudio > /sbin/modprobe ip_masq_vdolive > /sbin/modprobe ip_masq_user > /sbin/modprobe ip_masq_icq > /sbin/modprobe ip_masq_msn > > For VPN-type connectivity I use ppp-over-ssh (search google, there are > plenty of howto's on it), but that's more of a hack than a useful > solution, though a clever one at that. =) > > Brian J. Conway > dogbert(a)clue4all.net > Geek for hire: http://clue4all.net/resume > > Men may control the free world, but women control the boobs. > (http://www.pvponline.com/archive.php3?archive=20001024) > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug -- Leon Do Lucent Technologies eServices Group 200 Lucent Lane Cary, NC 27511 email: leondo(a)lucent.com fax : (919) 463-4379 ph : (919) 463-3149

April 3, 2001

Volunteers needed!

by Andy Stewart

HI gang, I have been asked to be the guest speaker at the Delphi Developers Group meeting in Newton, MA on Monday, April 23rd (http://www.discom.com/delphi) They are interested in Linux due to the recent product announcement of Borland Kylix (http://www.borland.com/kylix) These folks are a group of software developers living in the Windows world. I had planned to prepare a 45 - 60 minute talk, Q/A, and then demonstrate some apps for them, such as: StarOffice Netscape Developer tools and utilities VmWare LILO Desktops - KDE, Gnome, enlightenment, etc. Installation of Linux The above list was suggested to me by their representative as a list of things that would be interesting to their developers group. I am seeking 2 or 3 people would like to volunteer to demo some of these tools at the meeting, and who can provide support for the questions which I can't answer. I'm looking for folks with systems or laptops that they are willing to bring to this meeting for the demos. I would also appreciate a volunteer or two who would be willing to critique my presentation slides before the meeting. You would not need to actually attend the meeting. I'd e-mail the slides to you and request your written feedback. The Delphi group representative will also get a sneak preview. If you are interested in either of these opportunities, please contact me this week if at all possible. Thanks in advance! Andy -- Andy Stewart, Founder -o) | Harris's Lament: All the good ones are Worcester Linux Users' Group /\ | taken. Worcester, MA, USA _\_v | http://www.wlug.org |

April 3, 2001

Re: [Wlug] Firewalls

by Brian J. Conway

> After spending many hours this past week trying to understand ipchains and > firewalling in general I have come to the conclusion that I am spending a lot > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would > be willing to pay for the appropriate solution. The approach I use for my home network is with masquerading a set of 10.x IPs. For a configurable office solution I would recommend something commercial or at least far more complex than what I have in use, but my ipchains setup is as follows, for reference: /sbin/ipchains -F /sbin/ipchains -P forward DENY /sbin/ipchains -A forward -j MASQ -s 10.0.0.254/24 /sbin/ipchains -M -S 43200 120 300 /sbin/modprobe ip_masq_ftp /sbin/modprobe ip_masq_cuseeme /sbin/modprobe ip_masq_irc /sbin/modprobe ip_masq_quake /sbin/modprobe ip_masq_raudio /sbin/modprobe ip_masq_vdolive /sbin/modprobe ip_masq_user /sbin/modprobe ip_masq_icq /sbin/modprobe ip_masq_msn For VPN-type connectivity I use ppp-over-ssh (search google, there are plenty of howto's on it), but that's more of a hack than a useful solution, though a clever one at that. =) Brian J. Conway dogbert(a)clue4all.net Geek for hire: http://clue4all.net/resume Men may control the free world, but women control the boobs. (http://www.pvponline.com/archive.php3?archive=20001024)

April 3, 2001

Firewalls

by Michael Long

After spending many hours this past week trying to understand ipchains and firewalling in general I have come to the conclusion that I am spending a lot of time trying to recreate something that probably already exists. Does anyone have any experience with either open source or commercial firewalling products that can be configured to work in a small office network and allow VPN connections to larger networks. I do not have a very big budget but would be willing to pay for the appropriate solution. Mike

April 3, 2001

Re: [Wlug] Firewalls

by Doctor Orbitz

ipchains/iptables will do what you want. I forget the actual syntax, but you just canmaek a script (traditionally caleld rc.firewall) in your startup scripts and have ti run ipchains/iptables with the correct info. I can find out what the correct syntax is if you ened it. You can prolly do ipchains --help or iptables --help (for 2.4.x) These are free solutions btw. Orbitz Michael Long wrote: > After spending many hours this past week trying to understand ipchains and > firewalling in general I have come to the conclusion that I am spending a lot > of time trying to recreate something that probably already exists. Does > anyone have any experience with either open source or commercial firewalling > products that can be configured to work in a small office network and allow > VPN connections to larger networks. I do not have a very big budget but would > be willing to pay for the appropriate solution. > > Mike > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

April 2, 2001

Re: [Wlug] Startup issues

by Michael Long

Thanks, making it executable seems to have done the trick. On Monday 02 April 2001 00:55, you wrote: > > From: Michael Long <michaellong(a)charter.net> > > > > I have been playing with my network settings today and have made a > > change that has caused my system to be unable to read this file > > during boot up. Also any script that tries to read from it is unable > > to. Unfortunately I have no idea what I did to cause this. The > > following is the out put from 'ls -l' > > > > -rw-r--r-- 1 root root 235 Jan 30 19:59/ > > etc/rc.config.d/idedma.rc.config > > Looks readable to me. Can you 'cat' it? (or 'more' or 'less' it?) > Are you sure the script is not trying to _execute_ it? > > > I am running SuSE 7.0. > > I'm not, so I don't have that file. Or even that directory.

April 2, 2001

Re: [Wlug] Startup issues

by Keith Wright

> From: Michael Long <michaellong(a)charter.net> > > I have been playing with my network settings today and have made a > change that has caused my system to be unable to read this file > during boot up. Also any script that tries to read from it is unable > to. Unfortunately I have no idea what I did to cause this. The > following is the out put from 'ls -l' > > -rw-r--r-- 1 root root 235 Jan 30 19:59/ etc/rc.config.d/idedma.rc.config Looks readable to me. Can you 'cat' it? (or 'more' or 'less' it?) Are you sure the script is not trying to _execute_ it? > I am running SuSE 7.0. I'm not, so I don't have that file. Or even that directory. -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

April 2, 2001

Startup issues

by Michael Long

I have been playing with my network settings today and have made a change that has caused my system to be unable to read this file during boot up. Also any script that tries to read from it is unable to. Unfortunately I have no idea what I did to cause this. The following is the out put from 'ls -l' -rw-r--r-- 1 root root 235 Jan 30 19:59/ etc/rc.config.d/idedma.rc.config I am running SuSE 7.0. Thanks, mike

April 1, 2001

Richard Stallman will be speaking at Holy Cross

by Andy Stewart

Hi WLUG members, Richard Stallman will be speaking at Holy Cross soon. See the details below in an e-mail which I recently received. Later, Andy -- Andy Stewart, Founder -o) | Being stoned on marijuana isn't very Worcester Linux Users' Group /\ | different from being stoned on gin. -- Worcester, MA, USA _\_v | Ralph Nader http://www.wlug.org | -------- Original Message -------- Subject: GNU/Linux Event at Holy Cross Date: Thu, 22 Mar 2001 14:51:33 -0500 (EST) From: Andrew Hwang <ahwang(a)mathcs.holycross.edu> Reply-To: Andrew Hwang <ahwang(a)mathcs.holycross.edu> To: astewart(a)world.std.com As part of an ongoing series of talks on Computer Science and Ethics, Richard Stallman of the Free Software Foundation will be speaking on Wednesday, April 18, at the College of the Holy Cross. The title of his talk is "The Free Software movement, and the GNU/Linux operating system" The talk will start at 3:30 and will run for about 2 hours (including Q&A). The location is 112 O'Neill Hall. The event is open to the public, and GNU software will be for sale. If you have questions about this event, please send me email at the address below. Hope to see you there! Andrew D. Hwang ahwang(a)mathcs.holycross.edu Department of Math and CS http://mathcs.holycross.edu/~ahwang College of the Holy Cross (508) 793-2458 (Office: 331 Swords Hall) Worcester, MA, 01610 (508) 793-3530 (fax)

March 23, 2001

Re: [Wlug] Help with NIS

by Brian J. Conway

> I have my NIS server running on a redhat box. Can somebody help me how > to setup my win machines to use linux NIS server? Windows machines can use NIS? I've set up Samba servers in the past masquerading as NT domain login machines, but I wasn't aware there was a better solution (minus Hummingbird, which I'm not even sure of the extent of NFS and NIS features). Anyone have a good explanation on what can be done? Brian J. Conway dogbert(a)clue4all.net Geek for hire: http://clue4all.net/resume Men may control the free world, but women control the boobs. (http://www.pvponline.com/archive.php3?archive=20001024)

March 19, 2001

Help with NIS

by Leon Do

I have my NIS server running on a redhat box. Can somebody help me how to setup my win machines to use linux NIS server? Thanks -- Leon Do

March 19, 2001

Problems

by Doctor Orbitz

I have Slackware 7.1 running on a an AMD 133Mhz box with 32Megs RAM. This is my webserver, shell server, Ip MASQ box, and it locks up alot. It seems to lock up when I'm downloading on a box in my network behind it. I am runnign Kernel 2.4.0 on an ADSL line. I have had this problem with all kernel compiles I have done. I used to run FreeBSD, then OpenBSD on this box with no trouble. I did not, however, have ADSL then, so those boxes were just using a dial-up. I think IP MASQ is lockign the box up at some point. There are no messages in /var/log/messages, it just stops cold. My PPPOE client, when running top, never appears to use more than 10% of my CPU. I do not think the problem is in the pppoe client because the box does not seem to lock up when I'm downloading on it. (as in ssh'ing in and using lynx). Does anyone have any ideas on this? Orbitz

March 16, 2001

Looking for someone to assist in setting up a server

by David Dondero

Hello all, My name is David Dondero and I am looking for someone who can help me set up a Red Hat Linux server that can: Use the apache webserver to set up hosting customer's webpages as well as my own Run RealServer basic for streaming audio and video live and on demand Run Darwin Streaming server for streaming audio and video live and on demand in QuickTime Run a Shoutcast server for live audio streaming I currently have a Duron 650 with a 15 and 20 gig hard drive 7200rpm with 128 megs of PC100 memory. Anyone interested please get in touch by either e-mail: daviddondero(a)radio521.com or phone H) 781-934-7978 W) 781-934-7035 thanks, David Dondero

March 15, 2001

Re: [Wlug] REMINDER: Meeting on Wednesday, March 14th at 7 PM

by Jeremy

Would anyone be interested in seeing a wireless network in place? I have an Apple Airport working great at home that I could sudo-demo at the meeting... I have the 3com AirConnect PC Card also working on my laptop, which shows how to setup a PC card network adapter under linux as well. The Airport is connected to an IDSL in my apt and pretty easy to configure.. They do have a WIN/MAC client to configure it (my laptop is win/linux dual boot), but I also believe that they have a JAVA client (=linux) but I have not tried using that one yet either. Its about a $400 solution (base and PC CARD - kinda pricey for most college bound) but wicked convient for the home laptop and multiple computers (i.e. laptops and work stations) The airport does takes the place of using a linux box as a router / gateway though :-) It does NAT and a DHCP server - wicked simple and reliable. Just shows another angle / solution. This is low priority so if there is not enough time / interest no biggie... -Jeremy --- Andy Stewart <andystewart(a)mediaone.net> wrote: > > HI everyone, > > This is a friendly reminder: the next WLUG meeting will be held on > Wednesday, > March 14th at 7 PM in Kinnicutt Hall at WPI in Worcester, MA. Directions can > be > found on the WLUG website: > > http://www.wlug.org > > WLUG members Doug Waud, Stephen Daukas, and Chuck Anderson have been working > together on the presentation for this meeting (at least that's the story I've > been given). They will be discussing their experiences with home networking. > > Check out the WLUG website for a more detailed description of the focus of > their > talk. I expect that this will be a good meeting for someone who might not > have > setup a home network but is considering it. > > After the presentation, if time allows, we'll open the floor for a general > question and answer session. > > At the conclusion of the meeting, a group of us will head over to the Boynton > Restaurant for some pizza and beer. > > As always, the meeting and the post-meeting festivities are open to anybody > who > is interested in Linux. No secret handshake is required. :-) > > See ya later, > > Andy > > -- > Andy Stewart, Founder -o) | Aquadextrous, adj.: Possessing the > > Worcester Linux Users' Group /\ | ability to turn the bathtub faucet on > and > Worcester, MA, USA _\_v | off with your toes. -- Rich Hall, > > http://www.wlug.org | "Sniglets" > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug ===== - __________________________________________________ Do You Yahoo!? Yahoo! Auctions - Buy the things you want at great prices. http://auctions.yahoo.com/

March 13, 2001

REMINDER: Meeting on Wednesday, March 14th at 7 PM

by Andy Stewart

HI everyone, This is a friendly reminder: the next WLUG meeting will be held on Wednesday, March 14th at 7 PM in Kinnicutt Hall at WPI in Worcester, MA. Directions can be found on the WLUG website: http://www.wlug.org WLUG members Doug Waud, Stephen Daukas, and Chuck Anderson have been working together on the presentation for this meeting (at least that's the story I've been given). They will be discussing their experiences with home networking. Check out the WLUG website for a more detailed description of the focus of their talk. I expect that this will be a good meeting for someone who might not have setup a home network but is considering it. After the presentation, if time allows, we'll open the floor for a general question and answer session. At the conclusion of the meeting, a group of us will head over to the Boynton Restaurant for some pizza and beer. As always, the meeting and the post-meeting festivities are open to anybody who is interested in Linux. No secret handshake is required. :-) See ya later, Andy -- Andy Stewart, Founder -o) | Aquadextrous, adj.: Possessing the Worcester Linux Users' Group /\ | ability to turn the bathtub faucet on and Worcester, MA, USA _\_v | off with your toes. -- Rich Hall, http://www.wlug.org | "Sniglets"

March 13, 2001

Re: [Wlug] Open Source XML Programming Tutorial

by Doug Chamberlin

At 3/7/2001 04:33 PM (Wednesday), Steve Litt wrote: >Because most XML books and websites force the you to recite Microsoft >incantations, I wrote an all Open Source XML programming tutorial using Linux >and Xerces-Java from Apache Software Foundation. It thoroughly covers coding >of DOM, SAX, and DTD's. > >http://www.troubleshooters.com/tpromag/200103/200103.htm Thanks for doing that, Steve. XML - The ASCII of the 21st Century!

March 7, 2001

Open Source XML Programming Tutorial

by Steve Litt

Hi all, Because most XML books and websites force the you to recite Microsoft incantations, I wrote an all Open Source XML programming tutorial using Linux and Xerces-Java from Apache Software Foundation. It thoroughly covers coding of DOM, SAX, and DTD's. http://www.troubleshooters.com/tpromag/200103/200103.htm Enjoy! SteveT Steve Litt Webmaster, Troubleshooters.Com http://www.troubleshooters.com slitt(a)troubleshooters.com

March 7, 2001

Set Date/Time

by Peter Nikolla

I would like to thank everyone that helped me with the setting of date/time. I think the hwclock command did the trick. thanx Peter N.

March 5, 2001

Re: [Wlug] Set Date/Time

by Keith Wright

> From: "Peter Nikolla" <petern(a)hvnnet.com> > > I am having a problem setting the date/time on my Linux box. If you are not dual booting, set the proper time in UCT (Greenwich) in the ROM bios. Once that is right, it will become clear what is wrong. If you are dual booting, you may be forced to set the hardware clock to local civil time. That is no disaster, but you have to think harder to get it right. I think 'hwclock' should only be used to make small adjustments if the clock drifts after being set correctly. I am not sure what 'date' is for in SET! mode (as opposed to DISPLAY mode). Maybe in case you need to back-date some documents without re-booting. > I set it using date 030310152001 for 3/3/2001 10:15. I almost wrote back "thou fool, hast permuted fields", but the 'man date' page seems to agree with you. Can anybody think of a more obtuse way to write a date? Sometimes Unix is embarrasing. > until I reboot the box. At that time it changes to some other time. Calculate the amount of change and meditate upon that number. > I checked my CMOS and the time is correct. What am I doing wrong? Correct local or correct UCT? -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

March 4, 2001

Re: [Wlug] Set Date/Time

by Bill Mills-Curran

On Sat, 3 Mar 2001, Keith Wright wrote: > Date: Sat, 3 Mar 2001 20:50:27 -0500 > From: Keith Wright <kwright(a)gis.net> > Reply-To: wlug(a)mail.wlug.org > To: wlug(a)mail.wlug.org > Subject: Re: [Wlug] Set Date/Time > > > From: "Peter Nikolla" <petern(a)hvnnet.com> > > > > Hi, > > > > I am having a problem setting the date/time on my Linux box. > > > > I set it using date 030310152001 for 3/3/2001 10:15. Everyting seems fine > > until I reboot the box. At that time it changes to some other time. I > > checked my CMOS and the time is correct. What am I doing wrong? > > > > Check /etc/adjtime and if it has big numbers in it, delete it. > Read "man hwclock" to understand why. > > -- > -- Keith Wright <kwright(a)free-comp-shop.com> > > Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> > --- Food, Shelter, Source code. --- > _______________________________________________ <snip> I'm not sure that's the right approach. The adjtime file needs a rational setting, which it gets by noting the drift in hwclock time v. "real" time, which assumes that the real (system) time is accurate (nntp service?). This may help... 1. Get you system time set correctly. 2. run hwclock --systohc --utc (you determine if the --utc is right for you. 3. Wait a day or 2 while you system is still up. Don't reboot. 4. Check you system time & make sure it's right. 5. Do step #2 again. Any hwclock time drift will be reflected in the adjtime file. Bill

March 4, 2001

Re: [Wlug] Set Date/Time

by Keith Wright

> From: "Peter Nikolla" <petern(a)hvnnet.com> > > Hi, > > I am having a problem setting the date/time on my Linux box. > > I set it using date 030310152001 for 3/3/2001 10:15. Everyting seems fine > until I reboot the box. At that time it changes to some other time. I > checked my CMOS and the time is correct. What am I doing wrong? > Check /etc/adjtime and if it has big numbers in it, delete it. Read "man hwclock" to understand why. -- -- Keith Wright <kwright(a)free-comp-shop.com> Programmer in Chief, Free Computer Shop <http://www.free-comp-shop.com> --- Food, Shelter, Source code. ---

March 4, 2001

Re: [Wlug] Set Date/Time

by Mike Gorse

Oops; discard my previous message; I was not thinking at all or reading carefully... Could your time zone be set incorrectly? Make sure /etc/localtime is linked to the correct file (/usr/share/zoneinfo/US/Eastern, for instance), and be sure that your os isn't configured to use gmt when you don't have your clock set to gmt or vice versa. --Michael Gorse, WPI CS '01 / ICQ:22583968 / http://www.wpi.edu/~mgorse/ --

March 3, 2001

Re: [Wlug] Set Date/Time

by Mike Gorse

Peter, Using date to set the date doesn't automatically modify the cmos clock. Try running hwclock --systohc after running date to set the hardware clock. Read the hwclock manpage for more information. --Michael Gorse, WPI CS '01 / ICQ:22583968 / http://www.wpi.edu/~mgorse/ --

March 3, 2001

Set Date/Time

by Peter Nikolla

Hi, I am having a problem setting the date/time on my Linux box. I set it using date 030310152001 for 3/3/2001 10:15. Everyting seems fine until I reboot the box. At that time it changes to some other time. I checked my CMOS and the time is correct. What am I doing wrong? thanx for your help. Peter N.

March 3, 2001