Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Maxim Veksler
On 7/3/07, Gil Freund <[EMAIL PROTECTED]> wrote: On 7/3/07, Vassilii Khachaturov <[EMAIL PROTECTED]> wrote: > > Let me try explaining what is it that I find missing in Debian's > > iptables setup: > > > > If you have console access, it's a different thing. I agree that, > perhaps, a mid or low pr

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Amos Shapira
On 03/07/07, Micha Silver <[EMAIL PROTECTED]> wrote: Oded Arbel wrote: > On Tue, 2007-07-03 at 21:16 +1000, Amos Shapira wrote: > > > I think this is really bad. The only good thing in the above document > is that one of the tools suggested in the first section is shorewall which is > a brillia

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Gil Freund
On 7/3/07, Vassilii Khachaturov <[EMAIL PROTECTED]> wrote: > Let me try explaining what is it that I find missing in Debian's > iptables setup: > If you have console access, it's a different thing. I agree that, perhaps, a mid or low priority debconf option to change it to auto-save every change

Re: Fwd: ADSL connection problem

2007-07-03 Thread Gil Freund
On 7/3/07, Shlomo Solomon <[EMAIL PROTECTED]> wrote: 3 - There is obvoiusly still a problem here and I don't know if it's Bezeq or 015-Smile. I'm convinced the problem is not on my machine, since as I wrote earlier, I have the same problem on my regular Mandriva partition and a clean, non-update

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Vassilii Khachaturov
> Let me try explaining what is it that I find missing in Debian's > iptables setup: > > The most basic use case is for a sysadmin to configure rules and > expect them to survive reboot. This is the behavior he is familiar > with from nearly every enterprise FW device. Here, on Debian OTOH he's >

Re: ADSL connection problem

2007-07-03 Thread Maxim Veksler
On 7/3/07, Amos Shapira <[EMAIL PROTECTED]> wrote: On 03/07/07, shlomo solomon <[EMAIL PROTECTED]> wrote: > Sorry if this arrives twice, but my original message to [EMAIL PROTECTED] didn't arrive after waiting an hour. To the list managers - maybe an attachment to the end of messages is in order

Re: Fwd: ADSL connection problem

2007-07-03 Thread Shlomo Solomon
On Tuesday 03 July 2007 11:27, Yedidyah Bar-David wrote: > On Tue, Jul 03, 2007 at 08:18:01AM +0200, shlomo solomon wrote: > [snip] > > > I contacted 015 and after being instructed to telnet into one of their > > servers and succeeding (telnet 192.114.186.54 110) they said they had no > > idea what

Re: UPS and Linux

2007-07-03 Thread ik
Hi, Thanks every one that answered me. On 7/2/07, Vassilii Khachaturov <[EMAIL PROTECTED]> wrote: Is it for a server room or an (home?) office location? In that case, make sure you can live with the dB the UPS will put up. And listen to it yourself --- lower dB at some freqs sounds nastier than

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Nadav Har'El
On Tue, Jul 03, 2007, Amos Shapira wrote about "Re: Keeping iptables rules across reboots on Debian (lenny) ?": > Are you serious? You recommend people to edit a file with a syntax like: Oh, and I forgot to mention the most important reason why I always - and in this case as well - like to confi

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Nadav Har'El
On Tue, Jul 03, 2007, Amos Shapira wrote about "Re: Keeping iptables rules across reboots on Debian (lenny) ?": > >The approach I like better is to edit > > > >/etc/sysconfig/iptables >.. > Are you serious? You recommend people to edit a file with a syntax like: >... Yes! The "Generated

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Micha Silver
Oded Arbel wrote: On Tue, 2007-07-03 at 21:16 +1000, Amos Shapira wrote: I think this is really bad. The only good thing in the above document is that one of the tools suggested in the first section is shorewall which is a brilliant firewall management script and ever since I started worki

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Oded Arbel
On Tue, 2007-07-03 at 21:16 +1000, Amos Shapira wrote: > As a long-time debian advocate, I'm hanging my head in shame about > this - the above behaviour is the single advantage I found with FC/RH > over latest Debian. As far as I can tell, Debian Sarge used to have > some provisions for saving/res

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Oded Arbel
On Tue, 2007-07-03 at 21:24 +1000, Amos Shapira wrote: > On 03/07/07, Nadav Har'El <[EMAIL PROTECTED]> wrote: > The approach I like better is to edit /etc/sysconfig/iptables > Are you serious? You recommend people to edit a file with a syntax > like: > > # Generated by iptables-save v1

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Amos Shapira
On 03/07/07, Nadav Har'El <[EMAIL PROTECTED]> wrote: On Tue, Jul 03, 2007, Oded Arbel wrote about "Re: Keeping iptables rules across reboots on Debian (lenny) ?": > *) The SysV script offers the option of "save" to call iptables-store > for you. The standard sysadmin use case would be to setup t

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Amos Shapira
On 03/07/07, Oded Arbel <[EMAIL PROTECTED]> wrote: *) The SysV script offers the option of "save" to call iptables-store for you. The standard sysadmin use case would be to setup the needed rules, then run '/etc/init.d/iptables save' and then reboot the machine and the rules will be loaded autom

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Nadav Har'El
On Tue, Jul 03, 2007, Oded Arbel wrote about "Re: Keeping iptables rules across reboots on Debian (lenny) ?": > *) The SysV script offers the option of "save" to call iptables-store > for you. The standard sysadmin use case would be to setup the needed > rules, then run '/etc/init.d/iptables save'

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Oded Arbel
On Tue, 2007-07-03 at 12:23 +0300, Maxim Veksler wrote: > On 7/2/07, Baruch Even <[EMAIL PROTECTED]> wrote: > > * Maxim Veksler <[EMAIL PROTECTED]> [070702 03:32]: > > > On 7/2/07, Lior Kaplan <[EMAIL PROTECTED]> wrote: > > > >Maxim Veksler wrote: > > > > > > > >Use iptables-save to save your curre

Re: Fwd: ADSL connection problem

2007-07-03 Thread Oded Arbel
On Tue, 2007-07-03 at 11:27 +0300, Yedidyah Bar-David wrote: > On Tue, Jul 03, 2007 at 08:18:01AM +0200, shlomo solomon wrote: > [snip] > > I contacted 015 and after being instructed to telnet into one of their > > servers and succeeding (telnet 192.114.186.54 110) they said they had no > > idea wh

Re: Keeping iptables rules across reboots on Debian (lenny) ?

2007-07-03 Thread Maxim Veksler
On 7/2/07, Baruch Even <[EMAIL PROTECTED]> wrote: * Maxim Veksler <[EMAIL PROTECTED]> [070702 03:32]: > On 7/2/07, Lior Kaplan <[EMAIL PROTECTED]> wrote: > >Maxim Veksler wrote: > > > >Use iptables-save to save your current rules as to the iptables rules > >files. It will be loaded on the next re

Re: Fwd: ADSL connection problem

2007-07-03 Thread Yedidyah Bar-David
On Tue, Jul 03, 2007 at 08:18:01AM +0200, shlomo solomon wrote: [snip] > I contacted 015 and after being instructed to telnet into one of their > servers and succeeding (telnet 192.114.186.54 110) they said they had no > idea what to do (we don't support Linux). The only thing they suggested was >

Re: ADSL connection problem

2007-07-03 Thread Amos Shapira
On 03/07/07, shlomo solomon <[EMAIL PROTECTED]> wrote: Sorry if this arrives twice, but my original message to [EMAIL PROTECTED] didn't arrive after waiting an hour. Don't know about your problem but the linux.org.il alias was shut down a few weeks ago and only mail to cs.huji.ac.il is accept

Re: Fwd: ADSL connection problem

2007-07-03 Thread Gadi Cohen
>From my personal experience, Bezeq is absolutely useless. I've had regular conversations that go like this "Hi, is there a problem with the ADSL in my area?" "No" "But I have this problem, I haven't changed anything on my PC, and last time this happened, the problem was on your side". After con