Re: disappearing resolv.conf

2000-10-01 Thread Jaap Lutz

 * On Wednesday 27 September, Web Administration account wrote:

> I have this weird, intermittent problem with my /etc/resolv.conf . It seems
> to just not exist at odd intervals. Its a simple fix but it sux to have to
> cp the backup into place when we start getting "can't locate blah" errors.
> Its on a box running Woody. It was last updated about a week ago. Its
> running bind 8.2.2p5-11.  We use it as a dialup gateway and LAN forwarding
> nameserver so it causes all manner of problems re DNS locally.
> 
> Any ideas about how or why this is happening?

I'm suppose you're using PPP and pppconfig for the dialup connection.
If so, check your pppconfig setup for that connection. Make sure that
"Nameservers" (advanced options) is set to "None". If set to "Dynamic"
or "Static", a script in /etc/ppp/ip-up.d messes with your resolv.conf
when the connection comes up. Likewise, a script in /etc/ppp/ip-down.d
messes with it when the connection is brought down. Note that the latter
script is also run at boot time from /etc/init.d/dns-clean.

I haven't really had problems with the way this works, but in your
particular situation this might cause problems.

HTH, 
-Jaap


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: firewall (fwd)

2000-10-01 Thread Adrian Minta

digncc> Hello All,
digncc> Has anyone found making a debian machine with firewall support useful?
digncc> What are firewalls useful for? Do they simply prevent packets from passing
digncc> through the firewall into the rest of the network? Would a firewall
digncc> necessarly have to be also configured to be a router? Any info you guys
digncc> can provide would be useful. I was thinking about making one of my debian
digncc> machies a firewall, but don't really know what I would do with it:)

Yes a firewall is very useful, because by filtering packets, prevent
an outside intruder to access resources inside your network. Inside
you may have services running that could be easily hacked, like
telnet, dhcp, or Windoze disks sharing.

So the firewall separate and link your network to the Internet.
Obviously if don't have a network to protect you don't need a
firewall :-)

For more informations about firewalls look at:
http://www.clark.net/pub/mjr/pubs/fwfaq/
http://www.interhack.net/pubs/fwfaq/

About firewalls and routing...
There are two types of firewalls:
1. Network level
2. Application level
A network level firewall is a router with packet filtering capabilities.
Application level firewalls generally are hosts running proxy servers.
-- 
Best regards,
  Minta Adrian - YO3GIH phone: +401.683.66.52
 mailto:[EMAIL PROTECTED]http://www.csit-sun.pub.ro/~gygy/



--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




VPN

2000-10-01 Thread tps

'Lo Folks,
  In an effort to expand our VPN services, I'm looking at any opensource
VPN solution I can find to replace our Shiva box. What I'd love to see
is to be able to set up a Linux box with the VPN server software running
on it, and to have IPSec compliant clients (wintel, linux, slowaris, mac)
connect and have to do authentication via radius (We use CiscoSecure backended
by Cryptocards Cryptoadmin server for OTP signon). Is there anything 
like this out there? I've not been able to find it as of yet... pointers?

Thanks,
Tim

-- 
   ><
   >> Tim Sailer (at home) ><  Coastal Internet, Inc.  <<
   >> Network and Systems Operations   ><  PO Box 671  <<
   >> http://www.buoy.com  ><  Ridge, NY 11961 <<
   >> [EMAIL PROTECTED][EMAIL PROTECTED] ><  (631) 476-3031  <<
   ><


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]




Re: VPN

2000-10-01 Thread Luca Filipozzi

Tim,

Take a look at http://www.xs4all.nl/~freeswan/ 
It's an open source ipsec compliant VPN server. You apply it as a patch
to the Linux kernel. It's not packaged because it's a kernel patch, not
just a binary.

Luca

These links will help:
http://www.freeswan.org/freeswan_trees/freeswan-1.5/doc/compatibility.html
http://jixen.tripod.com/

On Sun, Oct 01, 2000 at 09:20:42PM -0400, [EMAIL PROTECTED] wrote:
>   In an effort to expand our VPN services, I'm looking at any opensource
> VPN solution I can find to replace our Shiva box. What I'd love to see
> is to be able to set up a Linux box with the VPN server software running
> on it, and to have IPSec compliant clients (wintel, linux, slowaris, mac)
> connect and have to do authentication via radius (We use CiscoSecure backended
> by Cryptocards Cryptoadmin server for OTP signon). Is there anything 
> like this out there? I've not been able to find it as of yet... pointers?

-- 
Luca Filipozzi
[dpkg] We are the apt. Resistance is futile. You will be packaged.


--  
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]