From owner-fwtk-users@ex.tis.com Tue Aug 1 01:09 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id BAA17965 Tue, 1 Aug 2000 01:09:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id WAA09985; Mon, 31 Jul 2000 22:17:36 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 31 Jul 2000 20:14:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA08808 for fwtk-users-outgoing; Mon, 31 Jul 2000 20:14:19 -0700 (PDT) From: Stanley.Hopcroft@ipaustralia.gov.au X-Authentication-Warning: pericles.IPAustralia.gov.au: smap set sender to using -f X-Lotus-FromDomain: IP_AUSTRALIA To: "fwtk-users@ex.tis.com" Message-ID: <4A25692E.0011A2E5.00@noteshub01.aipo.gov.au> Date: Tue, 1 Aug 2000 13:12:59 +1000 Subject: ftp-gw (2.1) and passive mode (does it proxy the passive also ?) Mime-Version: 1.0 Content-Disposition: inline Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 561 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] To: "fwtk-users@ex.tis.com" cc: Dear Ladies and Gentlemen, I am writing to seek your advice about how ftp-gw from fwtk-2.1 implements passive mode. It seems to me that passive mode only takes place between the client and the gateway whereas the gateway server connection uses normal mode all the time. Please tell me to RTFM if this is in order. I apologise if it is. Thank you, Yours sincerely. From owner-fwtk-users@ex.tis.com Tue Aug 1 18:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA21642 Tue, 1 Aug 2000 18:01:39 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA14839; Tue, 1 Aug 2000 15:07:48 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 1 Aug 2000 12:35:58 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA13226 for fwtk-users-outgoing; Tue, 1 Aug 2000 12:35:48 -0700 (PDT) Date: Tue, 1 Aug 2000 21:33:15 +0200 (CEST) From: Leandro Gelasi To: "fwtk-users@ex.tis.com" Subject: Re: About using postfix on the firewall... In-Reply-To: <20000731170932.U20780@washington.cospo.osis.gov> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 889 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Thank you all for your interesting explanation. At this time I have already done the greater part of the work, now my department firewall is up and running, and all works fine. The split dns system is perfectly working. For now I am using postfix directly on the firewall, because it simplify my life, and the most important requirement is a rapid installation (holydays are coming :-) ). At September I will try to introduce smap/smapd in the configuration. See you soon LG ********************************************************************* Leandro Gelasi V year Computer Science Engineering student at Siena University gelasi@interfree.it Gilles Villeneuve will live forever ********************************************************************* From owner-fwtk-users@ex.tis.com Wed Aug 2 10:59 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA25140 Wed, 2 Aug 2000 10:58:40 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA19808; Wed, 2 Aug 2000 08:06:48 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 2 Aug 2000 06:20:34 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA18781 for fwtk-users-outgoing; Wed, 2 Aug 2000 06:20:13 -0700 (PDT) Date: Wed, 2 Aug 2000 09:19:03 -0400 From: Joseph S D Yao To: Leandro Gelasi Cc: "fwtk-users@ex.tis.com" Subject: Re: About using postfix on the firewall... Message-Id: <20000802091903.D5225@washington.cospo.osis.gov> Mail-Followup-To: Leandro Gelasi , "fwtk-users@ex.tis.com" References: <20000731170932.U20780@washington.cospo.osis.gov> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from gelasi@interfree.it on Tue, Aug 01, 2000 at 09:33:15PM +0200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 896 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Tue, Aug 01, 2000 at 09:33:15PM +0200, Leandro Gelasi wrote: ... > At this time I have already done the greater part of the work, now my > department firewall is up and running, and all works fine. > The split dns system is perfectly working. > > For now I am using postfix directly on the firewall, because it simplify > my life, and the most important requirement is a rapid installation > (holydays are coming :-) ). > At September I will try to introduce smap/smapd in the configuration. Hope you don't get hacked during hols! ;-) -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Sun Aug 6 12:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA25284 Sun, 6 Aug 2000 12:21:33 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA13097; Sun, 6 Aug 2000 09:29:02 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 6 Aug 2000 06:41:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA11998 for fwtk-users-outgoing; Sun, 6 Aug 2000 06:41:37 -0700 (PDT) Message-ID: <002301bfffab$3c095bc0$11c7c7c7@seclab.sharif.ac.ir> From: "Hossein Pourreza" To: References: <20000731170932.U20780@washington.cospo.osis.gov> <20000802091903.D5225@washington.cospo.osis.gov> Subject: Content Checker Date: Sun, 6 Aug 2000 18:05:48 +0430 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 431 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi to all I installed and worked with TIS FWTK. Now I need some utility for scanning mails body and detect file type of attachments. For example I want to give mail body, a word and an action to content checker and it applies the action on mail body. I will appreciate any suggestion Regards Pourreza From owner-fwtk-users@ex.tis.com Mon Aug 7 05:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA27452 Mon, 7 Aug 2000 05:22:21 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA19783; Mon, 7 Aug 2000 02:30:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 00:46:04 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA18868 for fwtk-users-outgoing; Mon, 7 Aug 2000 00:45:43 -0700 (PDT) X-Authentication-Warning: proxy.hundert6.de: mail set sender to using -f Message-ID: <398E68E2.1981110D@radio.hundert6.de> Date: Mon, 07 Aug 2000 09:44:34 +0200 From: Jan Muenther Organization: Radio Hundert,6 X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: Hossein Pourreza , "'fwtk-users@ex.tis.com'" Subject: Re: Content Checker References: <20000731170932.U20780@washington.cospo.osis.gov> <20000802091903.D5225@washington.cospo.osis.gov> <002301bfffab$3c095bc0$11c7c7c7@seclab.sharif.ac.ir> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 625 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, > I installed and worked with TIS FWTK. Now I need some utility for scanning > mails body and detect file type of attachments. > For example I want to give mail body, a word and an action to content > checker and it applies the action on mail body. > I will appreciate any suggestion Use the search engine of your choice and try and find amavis. You can at least specify actions for attachment types. Bye, Jan -- Radio HUNDERT,6 Medien GmbH Berlin - EDV - j.muenther@radio.hundert6.de From owner-fwtk-users@ex.tis.com Mon Aug 7 11:11 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28680 Mon, 7 Aug 2000 11:11:31 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA23829; Mon, 7 Aug 2000 08:18:23 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 06:43:23 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21169 for fwtk-users-outgoing; Mon, 7 Aug 2000 06:42:53 -0700 (PDT) Message-ID: <398EBC4C.A213F06F@piucorp.com> Date: Mon, 07 Aug 2000 09:40:28 -0400 From: Mark_Saunders X-Mailer: Mozilla 4.74 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 To: Jan Muenther CC: Hossein Pourreza , "'fwtk-users@ex.tis.com'" Subject: Re: Content Checker References: <20000731170932.U20780@washington.cospo.osis.gov> <20000802091903.D5225@washington.cospo.osis.gov> <002301bfffab$3c095bc0$11c7c7c7@seclab.sharif.ac.ir> <398E68E2.1981110D@radio.hundert6.de> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1156 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have been very pleased with this product... ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html It enables you to filter based on subject line, message body content, or file attachment name or wildcard. - Many options - Plus, you'll learn a thing or two about procmail (you'll realize you need it when you see what it can do) Jan Muenther wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > > I installed and worked with TIS FWTK. Now I need some utility for scanning > > mails body and detect file type of attachments. > > For example I want to give mail body, a word and an action to content > > checker and it applies the action on mail body. > > I will appreciate any suggestion > > Use the search engine of your choice and try and find amavis. You > can at least specify actions for attachment types. > > Bye, Jan > -- > Radio HUNDERT,6 Medien GmbH Berlin > - EDV - > j.muenther@radio.hundert6.de From owner-fwtk-users@ex.tis.com Mon Aug 7 11:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28770 Mon, 7 Aug 2000 11:33:34 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA24634; Mon, 7 Aug 2000 08:41:18 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 06:59:09 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21331 for fwtk-users-outgoing; Mon, 7 Aug 2000 06:58:56 -0700 (PDT) Date: Sat, 5 Aug 2000 11:17:05 +0530 (IST) From: Shailesh Vaman Marathe To: fwtk-users@tis.com cc: fwtk-support@tis.com Subject: problem with installation Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 794 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hello I have downloaded fwtk.tar.Z (fwtk2.1) from ftp.tis.com. I am getting following errors while building the executables 1) in fwtk/tools/server/ftpd glob.c: In function `matchdir': glob.c:231: dereferencing pointer to incomplete type 2) in fwtk/auth db.c:16: ndbm.h: No such file or directory make: *** [db.o] Error 1 kindly help thanking in anticipation shailesh Shailesh Marathe MTech - 1, IIT Bombay. Hostel No: 5, Room No: 52 **** When you believe in all you can be rather than all you cannot become, you will find your place on earth. "It's not what you are but what you don't become that hurts" **** From owner-fwtk-users@ex.tis.com Mon Aug 7 11:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28771 Mon, 7 Aug 2000 11:33:34 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA24638; Mon, 7 Aug 2000 08:41:18 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 07:00:14 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21371 for fwtk-users-outgoing; Mon, 7 Aug 2000 06:59:52 -0700 (PDT) Message-Id: <3.0.6.32.20000807144448.00b0d450@itsun1.infotech.de> X-Sender: weber@itsun1.infotech.de X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.6 (32) Date: Mon, 07 Aug 2000 14:44:48 +0200 To: fwtk-users@ex.tis.com From: Christian Weber Subject: Content Checker for News Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" Content-Length: 745 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Firewallers, I recently sought this list for some references about news (nntp) virus-checking. I just found the hints "how to plug news" - but no content checking at all. I'm not sure wether news-contents are checked by anyone but nevertheless news MAY may contain viruses as well. This seem to be ignored yet (or am I wrong ?) . So I hope anyone can give me an appropiate pointer (how to configure inn for news scanning) or even an app-gateway (like smap-smapd) for nntp? Dears -- Christian Weber mailto:Weber@InfoTech.de Tel: 02361/9130-216 For information on InfoTech visit http://www.InfoTech.de From owner-fwtk-users@ex.tis.com Mon Aug 7 11:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28776 Mon, 7 Aug 2000 11:33:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA24646; Mon, 7 Aug 2000 08:41:19 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 06:59:04 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21321 for fwtk-users-outgoing; Mon, 7 Aug 2000 06:58:53 -0700 (PDT) 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200008051634.JAA10672@noid.net> X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Date: Sat, 5 Aug 2000 09:34:28 -0700 From: Tor Perkins <965492539@noid.net> To: "fwtk-users@ex.tis.com" Subject: Re: ftp-gw (2.1) and passive mode (does it proxy the passive also ?) Mail-Followup-To: "fwtk-users@ex.tis.com" References: <4A25692E.0011A2E5.00@noteshub01.aipo.gov.au> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <4A25692E.0011A2E5.00@noteshub01.aipo.gov.au>; from Stanley.Hopcroft@ipaustralia.gov.au on Tue, Aug 01, 2000 at 01:12:59PM +1000 X-Operating-System: Linux 2.2.14-5.0smp Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 919 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Checkout patch 2.11 on the patches page: http://www.fwtk.org/fwtk/patches/patches.html - Tor On Tue, Aug 01, 2000 at 01:12:59PM +1000, Stanley.Hopcroft@ipaustralia.gov.au wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > > To: "fwtk-users@ex.tis.com" > cc: > > > Dear Ladies and Gentlemen, > > I am writing to seek your advice about how ftp-gw from fwtk-2.1 implements > passive mode. > > It seems to me that passive mode only takes place between the client and the > gateway whereas the gateway server connection uses normal mode all the time. > > Please tell me to RTFM if this is in order. I apologise if it is. > > Thank you, > > Yours sincerely. > > From owner-fwtk-users@ex.tis.com Mon Aug 7 11:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28779 Mon, 7 Aug 2000 11:33:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA24642; Mon, 7 Aug 2000 08:41:19 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 7 Aug 2000 07:00:38 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21381 for fwtk-users-outgoing; Mon, 7 Aug 2000 06:59:57 -0700 (PDT) Message-Id: <1.5.4.32.20000807101121.0070ef04@aix2.western-reserve.com> X-Sender: jwilson@aix2.western-reserve.com X-Mailer: Windows Eudora Light Version 1.5.4 (32) Mime-Version: 1.0 Date: Mon, 07 Aug 2000 05:11:21 -0500 To: Jan Muenther , fwtk-users@ex.tis.com From: Jonathan Wilson Subject: Re: Content Checker Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" Content-Length: 4305 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 09:44 AM 8/7/00 +0200, you wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >Hello, > >> I installed and worked with TIS FWTK. Now I need some utility for scanning >> mails body and detect file type of attachments. >> For example I want to give mail body, a word and an action to content >> checker and it applies the action on mail body. >> I will appreciate any suggestion Under certain circumstances Procmail is useful for this. I'm using it here to filter out certain kinds of, um, undesirable email. However, the mail gets caught on the internal mail hub, not at the firewall. Here's how: a) install procmail on mail hub b) create .forward file in each user's home directory, that forwards all incoming mail to procmail. See the procmail man page for the exact format of this file. However, it begins like: "|IFS=' '&&p=/usr/local/bin/procmail&&test -f $p&&exec $p ... c) create system-wide filtering procmail ruleset, or several different classes of filtering ruleset. For example, /etc/procmail_spam_filter (an example attached below) d) link desired procmail filter to .procmailrc in user's home directory: ln -s /etc/procmail_spam_filter /home/user/.procmailrc I know that there are better ways of doing this (Mr. Yao's patches on a current version of FWTK can do some of this), but this filled a particular need at the time. The simple mechanism used is also easy to spoof if you know what it's looking for, and you must work at it to stay ahead of new MIME types and encodings, but it successfully filters out an awful lot of gunk at our site. It is also admittedly expensive, as each incoming message can get scanned several times; there are probably more efficient ways to structure the .procmailrc to avoid this. Here is an example .procmailrc, /etc/procmail_spam_filter, which filters out most executable MIME attachments and specifically looks for the "I Love You" virus. Any infected or prohibited messages are dumped to dot-files in the user's home directory for periodic examination by me. This .procmailrc also completely filters out mail from certain less than desirable users. # /etc/procmail_spam_filter # remember that procmail's regexp engine is case-insensitive # and generally follows rules for old 'egrep'. # filter out VBscript-based viruses by simply looking for # string "MSKernel32" in the body of the message. Move such # messages to file ~/.mail_infected. :0 B * MSKernel32 .mail_infected # discourage known spamboys. Use loop detection. :0 * !^FROM_DAEMON * !^X-Loop: $LOGNAME@$HOST *From.*spammer@spamdomain.com|^From.*spammer2@spamdomain2.com | (formail -r -A"X-Loop: $LOGNAME@$HOST" ; \ echo "Die, spammer, die.") | $SENDMAIL -t # look for MIME attachments :0 B * ^Content-Type: { # catch strange Outlook-attached .exe files, move to ~/.mail_exe :0 B * ^Content-Type: application/x-msdownload .mail_exe # catch other binary stream attachments. We allow through .xls # files and CAD drawing files, along with .vcf card files. :0 B * ^Content-Type: application/octet-stream * !\.xls\" * !\.vcf\" * !\.dwg\" .mail_exe # catch mpeg attachments, save for our later viewing pleasure 8-) :0 B * ^Content-Type: video/mpeg .mail_mpg # ditto for wav files :0 B * ^Content-Type: audio/microsoft-wave .mail_wav # zip files. Note that there are lots of ways these can be # encoded ("application/Winzip", etc.), this is just the most # generic. :0 B * ^Content-Type: application/zip .mail_zip } # end procmailrc Regards, Jonathan Wilson Western Reflections LLC From owner-fwtk-users@ex.tis.com Tue Aug 8 11:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA04707 Tue, 8 Aug 2000 11:21:26 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA07602; Tue, 8 Aug 2000 08:28:15 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 06:18:38 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA05700 for fwtk-users-outgoing; Tue, 8 Aug 2000 06:18:17 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) MIME-Version: 1.0 In-Reply-To: <20000727055626.4462.qmail@nw175.netaddress.usa.net> Date: Tue, 08 Aug 2000 14:15:54 +0100 (BST) From: Tony Gale To: Maks H Subject: RE: x-gw: Connection reset by peer ?????????? Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20000808141554:17658=_" Content-Length: 2875 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20000808141554:17658=_ Content-Type: text/plain; charset=iso-8859-1 On 27-Jul-2000 Maks H wrote: > > I use OS Linux Slackware, version 2.2.13, and as a mather of fact, > when I use > TIS FWTK, version 2.1, I have following problemm. > [snip] > > > After that x-gw parent-process canselles and all windows suspendes. > The line > «read fd:134521304: Connection reset by peet» is never changed. > Digit > 134521304 is never changed too. > Did you apply the x-gw patch from www.fwtk.org? The strange number is due to a bug in x-gw/fwd.c, see attached. -tony --- E-Mail: Tony Gale So you think that money is the root of all evil. Have you ever asked what is the root of money? -- Ayn Rand The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20000808141554:17658=_ Content-Disposition: attachment; filename="fwtk-x-gw2.diff" Content-Transfer-Encoding: base64 Content-Description: fwtk-x-gw2.diff Content-Type: text/plain; charset=iso-8859-1; name=fwtk-x-gw2.diff; SizeOnDisk=1095 KioqIGZ3ZC5jLm9yaWcJVHVlIEF1ZyAgOCAxNDowODo0MyAyMDAwCi0tLSBmd2QuYwlUdWUgQXVn ICA4IDE0OjEzOjM5IDIwMDAKKioqKioqKioqKioqKioqCioqKiAzMCwzNyAqKioqCiAgCiAgCWlm KCBtYXhiIDw9MCApIHJldHVybiBic2l6ZTsKICAJc3dpdGNoKCBjbnQ9cmVhZCgqcmZkLCZwYnVm W2JzaXplXSxtYXhiKSApIHsKISAJCWNhc2UgLTE6IHNwcmludGYoYnVmLCJyZWFkIGZkOiVkIixy ZWFkZmQpOyAgCiAgCQkJIHBtc2coYnVmLDEpOwogIAkJY2FzZSAgMDogY2xlYXJfY2xvc2VfZmQo KnJmZCxyc2V0LHdzZXQpOwogIAkJCSBjbnQ9IC0xOwogIAkJCSBicmVhazsKLS0tIDMwLDM4IC0t LS0KICAKICAJaWYoIG1heGIgPD0wICkgcmV0dXJuIGJzaXplOwogIAlzd2l0Y2goIGNudD1yZWFk KCpyZmQsJnBidWZbYnNpemVdLG1heGIpICkgewohIAkJY2FzZSAtMTogc3ByaW50ZihidWYsInJl YWQgZmQ6JWQiLCpyZmQpOyAgCiAgCQkJIHBtc2coYnVmLDEpOworIAkJCSAvKiBGQUxMIFRIUk9V R0ggKi8KICAJCWNhc2UgIDA6IGNsZWFyX2Nsb3NlX2ZkKCpyZmQscnNldCx3c2V0KTsKICAJCQkg Y250PSAtMTsKICAJCQkgYnJlYWs7CioqKioqKioqKioqKioqKgoqKiogNTEsNTggKioqKgogIAlp bnQJY250OwogIAogIAlzd2l0Y2goIChjbnQ9d3JpdGUoKndmZCxwYnVmLGJzaXplKSkgKSB7CiEg CQljYXNlIC0xOiBzcHJpbnRmKGJ1Ziwid3JpdGUgZmQ6JWQiLHJlYWRmZCk7CiAgCQkJIHBtc2co YnVmLDEpOwogIAkJY2FzZSAgMDogY2xlYXJfY2xvc2VfZmQoKndmZCxyc2V0LHdzZXQpOwogIAkJ CSByZXR1cm4gLTE7CiAgCQlkZWZhdWx0OiBpZihjbnQ8YnNpemUpIHsKLS0tIDUyLDYwIC0tLS0K ICAJaW50CWNudDsKICAKICAJc3dpdGNoKCAoY250PXdyaXRlKCp3ZmQscGJ1Zixic2l6ZSkpICkg ewohIAkJY2FzZSAtMTogc3ByaW50ZihidWYsIndyaXRlIGZkOiVkIiwqd2ZkKTsKICAJCQkgcG1z ZyhidWYsMSk7CisgCQkJIC8qIEZBTEwgVEhST1VHSCAqLwogIAkJY2FzZSAgMDogY2xlYXJfY2xv c2VfZmQoKndmZCxyc2V0LHdzZXQpOwogIAkJCSByZXR1cm4gLTE7CiAgCQlkZWZhdWx0OiBpZihj bnQ8YnNpemUpIHsK --_=XFMail.1.4.4.Linux:20000808141554:17658=_-- End of MIME message From owner-fwtk-users@ex.tis.com Tue Aug 8 12:28 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA05167 Tue, 8 Aug 2000 12:28:10 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA09142; Tue, 8 Aug 2000 09:35:43 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 07:42:16 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA06895 for fwtk-users-outgoing; Tue, 8 Aug 2000 07:42:04 -0700 (PDT) Message-ID: <001101c0013f$09045460$557769a2@founder.com.cn> From: "zhuhd" To: Subject: How can I deny a destination site in http-gw rule? Date: Tue, 8 Aug 2000 21:46:16 +0800 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2314.1300 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="gb2312" Content-Length: 432 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I installed FWTK on Linux box. Now I want to deny some sites to be accessed from http-gw. I write the rule as following: http-gw: deny-hosts * -dest 202.112.*.* but it does not work correctly. Can you tell me the right rule to deny a destination IP in http-gw. Thank you for your kind help. From owner-fwtk-users@ex.tis.com Tue Aug 8 12:44 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA05335 Tue, 8 Aug 2000 12:44:44 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA09698; Tue, 8 Aug 2000 09:52:32 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 08:34:16 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA07680 for fwtk-users-outgoing; Tue, 8 Aug 2000 08:33:56 -0700 (PDT) Message-ID: <001f01c0014e$1ed498e0$fc00a8c0@k62350> From: "Larry Jackson" To: Cc: "Mario Misic" References: Subject: Re: net_flags[4] Date: Tue, 8 Aug 2000 11:34:19 -0400 Organization: Falun Technical Service, Inc. MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 637 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] From: "Mario Misic" > > I already saw that even others have problem with http-gw. > > I have http-gw V2.1 and I got this error while I am trying to access > www.xml.com . > > Network error: net_flags[4] set (read) > > I read in FAQs that it is probably bug in http-gw software, can someone > advice me where to find patch if it exist, I tried to find it somewhere but > I didn't. > > Regards! > Mario Misic I also see these error messages in my logs. Any progress on fixing the problem? From owner-fwtk-users@ex.tis.com Tue Aug 8 13:56 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA05843 Tue, 8 Aug 2000 13:56:00 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA11799; Tue, 8 Aug 2000 11:03:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 09:33:33 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA09042 for fwtk-users-outgoing; Tue, 8 Aug 2000 09:33:02 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <001f01c0014e$1ed498e0$fc00a8c0@k62350> Date: Tue, 08 Aug 2000 17:30:58 +0100 (BST) From: Tony Gale To: Larry Jackson Subject: Re: net_flags[4] Cc: Mario Misic , fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 1319 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 08-Aug-2000 Larry Jackson wrote: > From: "Mario Misic" >> >> I already saw that even others have problem with http-gw. >> >> I have http-gw V2.1 and I got this error while I am trying to >> access >> www.xml.com . >> >> Network error: net_flags[4] set (read) >> >> I read in FAQs that it is probably bug in http-gw software, can >> someone >> advice me where to find patch if it exist, I tried to find it >> somewhere > but >> I didn't. >> >> Regards! >> Mario Misic > > I also see these error messages in my logs. > Any progress on fixing the problem? I was looking at this this morning, and frankly, it aint worth the effort. Basically, the code is bad at propagating error conditions, and this message just catches this. I did try fixing it, but you just end up chasing function return values through the code. So, ignore the messages, and if they bother you comment them out of gio.c -tony --- E-Mail: Tony Gale The shortest distance between any two puns is a straight line. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Aug 8 16:13 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA06676 Tue, 8 Aug 2000 16:13:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA13943; Tue, 8 Aug 2000 13:21:32 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 11:51:06 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA12475 for fwtk-users-outgoing; Tue, 8 Aug 2000 11:50:45 -0700 (PDT) From: "Ken Long" Organization: Lectrosonics, Inc. To: , "zhuhd" Date: Tue, 8 Aug 2000 12:49:45 -0600 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Re: How can I deny a destination site in http-gw rule? Message-ID: <399001E6.12445.11DBB59@localhost> In-reply-to: <001101c0013f$09045460$557769a2@founder.com.cn> X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 741 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm no expert on this but I think it should be: http-gw: permit-hosts -dest !202.112.*.* That's the format I've used in the past but I've used names instead of IP addresses like this: http-gw: permit-hosts -dest !*.real.com Regards, Ken Long On 8 Aug 2000, at 21:46, zhuhd wrote: > Hello, > I installed FWTK on Linux box. Now I want to deny some sites to be accessed > from http-gw. I write the rule as following: > > http-gw: deny-hosts * -dest 202.112.*.* > > but it does not work correctly. Can you tell me the right rule to deny a > destination IP in http-gw. > > Thank you for your kind help. From owner-fwtk-users@ex.tis.com Wed Aug 9 04:07 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA09161 Wed, 9 Aug 2000 04:07:47 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA19922; Wed, 9 Aug 2000 01:15:35 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 8 Aug 2000 23:33:53 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA18807 for fwtk-users-outgoing; Tue, 8 Aug 2000 23:33:32 -0700 (PDT) From: Mario Misic Reply-To: mmisic@combis.hr Organization: Combis To: "Larry Jackson" , Subject: Re: net_flags[4] Date: Wed, 9 Aug 2000 08:34:57 +0000 X-Mailer: KMail [version 1.0.28] References: <001f01c0014e$1ed498e0$fc00a8c0@k62350> In-Reply-To: <001f01c0014e$1ed498e0$fc00a8c0@k62350> MIME-Version: 1.0 Message-Id: <00080908360301.01925@mmisic.combis.hr> Content-Transfer-Encoding: 8bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 855 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I just installed squid caching server and http-gw which support squid and that solve my problem, very funny but it works now! By Mario On Tue, 08 Aug 2000, Larry Jackson wrote: > From: "Mario Misic" > > > > I already saw that even others have problem with http-gw. > > > > I have http-gw V2.1 and I got this error while I am trying to access > > www.xml.com . > > > > Network error: net_flags[4] set (read) > > > > I read in FAQs that it is probably bug in http-gw software, can someone > > advice me where to find patch if it exist, I tried to find it somewhere > but > > I didn't. > > > > Regards! > > Mario Misic > > I also see these error messages in my logs. > Any progress on fixing the problem? From owner-fwtk-users@ex.tis.com Wed Aug 9 07:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA09762 Wed, 9 Aug 2000 07:33:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA22230; Wed, 9 Aug 2000 04:41:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 9 Aug 2000 03:11:05 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA20968 for fwtk-users-outgoing; Wed, 9 Aug 2000 03:10:24 -0700 (PDT) Message-ID: <51B208AA1634D411A46600400567B311247F@babylon5.pcsnc.lab> From: Pascal Cimon To: "'Tony Gale '" , "'Larry Jackson '" Cc: "'Mario Misic '" , "'fwtk-users@ex.tis.com '" Subject: RE: net_flags[4] Date: Wed, 9 Aug 2000 06:09:04 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2146 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Actually it's more then just messages in the logs. Some sites don't come up at all in the browser. When I access www.perl.com or www.xml.com with http-gw they don't come up and I get the server unavailable error int the browser and the netflag error in the fw logs. If I access the same site from my firewall it works fine so it's not an access problem. If I point my firewall to the http-gw it stops working for those sites. All other sites work fine and I've only noticed those two so far. Pascal Cimon PCSNC for Royal Canadian Mounted Police -----Original Message----- From: Tony Gale To: Larry Jackson Cc: Mario Misic; fwtk-users@ex.tis.com Sent: 8/8/00 12:30 PM Subject: Re: net_flags[4] [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 08-Aug-2000 Larry Jackson wrote: > From: "Mario Misic" >> >> I already saw that even others have problem with http-gw. >> >> I have http-gw V2.1 and I got this error while I am trying to >> access >> www.xml.com . >> >> Network error: net_flags[4] set (read) >> >> I read in FAQs that it is probably bug in http-gw software, can >> someone >> advice me where to find patch if it exist, I tried to find it >> somewhere > but >> I didn't. >> >> Regards! >> Mario Misic > > I also see these error messages in my logs. > Any progress on fixing the problem? I was looking at this this morning, and frankly, it aint worth the effort. Basically, the code is bad at propagating error conditions, and this message just catches this. I did try fixing it, but you just end up chasing function return values through the code. So, ignore the messages, and if they bother you comment them out of gio.c -tony --- E-Mail: Tony Gale The shortest distance between any two puns is a straight line. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Wed Aug 9 08:04 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA09914 Wed, 9 Aug 2000 08:04:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA22742; Wed, 9 Aug 2000 05:11:57 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 9 Aug 2000 03:53:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA21412 for fwtk-users-outgoing; Wed, 9 Aug 2000 03:53:15 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <51B208AA1634D411A46600400567B311247F@babylon5.pcsnc.lab> Date: Wed, 09 Aug 2000 11:49:26 +0100 (BST) From: Tony Gale To: Pascal Cimon Subject: RE: net_flags[4] Cc: "fwtk-users@ex.tis.com" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 3045 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] They both work for me through http-gw. If you haven't applied all the patches on www.fwtk.org, I suggest you try them, especially the quoting fix. All the net_flags message indicates is that either the server or client has *already* closed the connection, but that http-gw didn't propagate that fact properly. -tony PS to everyone. I'm always interested in sites that genuinely don't work through http-gw. Just please make sure you have applied all the patches first. On 09-Aug-2000 Pascal Cimon wrote: > Actually it's more then just messages in the logs. Some sites > don't come up > at all in the browser. When I access www.perl.com or www.xml.com > with > http-gw they don't come up and I get the server unavailable error > int the > browser and the netflag error in the fw logs. If I access the same > site from > my firewall it works fine so it's not an access problem. If I point > my > firewall to the http-gw it stops working for those sites. All other > sites > work fine and I've only noticed those two so far. > > Pascal Cimon > PCSNC for Royal Canadian Mounted Police > > > -----Original Message----- > From: Tony Gale > To: Larry Jackson > Cc: Mario Misic; fwtk-users@ex.tis.com > Sent: 8/8/00 12:30 PM > Subject: Re: net_flags[4] > > [To be removed from this list send the message "unsubscribe > fwtk-users" > in the > BODY of a mail message to majordomo@ex.tis.com.] > > > On 08-Aug-2000 Larry Jackson wrote: >> From: "Mario Misic" >>> >>> I already saw that even others have problem with http-gw. >>> >>> I have http-gw V2.1 and I got this error while I am trying to >>> access >>> www.xml.com . >>> >>> Network error: net_flags[4] set (read) >>> >>> I read in FAQs that it is probably bug in http-gw software, can >>> someone >>> advice me where to find patch if it exist, I tried to find it >>> somewhere >> but >>> I didn't. >>> >>> Regards! >>> Mario Misic >> >> I also see these error messages in my logs. >> Any progress on fixing the problem? > > I was looking at this this morning, and frankly, it aint worth the > effort. > > Basically, the code is bad at propagating error conditions, and > this > message just catches this. > > I did try fixing it, but you just end up chasing function return > values through the code. > > So, ignore the messages, and if they bother you comment them out of > gio.c > > -tony > > > --- > E-Mail: Tony Gale > The shortest distance between any two puns is a straight line. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. --- E-Mail: Tony Gale The finest eloquence is that which gets things done. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Wed Aug 9 13:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA11011 Wed, 9 Aug 2000 13:21:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA26006; Wed, 9 Aug 2000 10:30:05 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 9 Aug 2000 08:07:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA24335 for fwtk-users-outgoing; Wed, 9 Aug 2000 08:07:15 -0700 (PDT) Message-ID: <50B56D407D2DD31191DE00902771E9F401593610@ecntex.ecn.nl> From: "Overdijk, Harrie" To: "'Tony Gale'" Cc: fwtk-users@ex.tis.com Subject: RE: net_flags[4] Date: Wed, 9 Aug 2000 17:05:15 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 1272 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Tony, You wrote the following: > -----Original Message----- > From: Tony Gale [SMTP:gale@syntax.dera.gov.uk] > Sent: Wednesday, August 09, 2000 12:49 PM > To: Pascal Cimon > Cc: fwtk-users@ex.tis.com > Subject: RE: net_flags[4] > > They both work for me through http-gw. If you haven't applied all the > patches on www.fwtk.org, I suggest you try them, especially the > quoting fix. > [Harrie] Tony, I have the same problem (hmmm net_flags[5]... [Harrie] The mentioned sites are indeed inaccesible. I do [Harrie] have the quoting-bug-patch and netscape-bug-patch [Harrie] applied. Do you have other patches? [Harrie] B.t.w. I don't trust the quoting bug patch on the [Harrie] fwtk-site. The line: ! if ((*p == '"') || (*p == '\'') *p = 0; > [Harrie] definitly is wrong... Have you got a better version? Greetings, Harrie Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The Netherlands. Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of ECN. From owner-fwtk-users@ex.tis.com Wed Aug 9 13:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA11010 Wed, 9 Aug 2000 13:21:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA26002; Wed, 9 Aug 2000 10:30:05 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 9 Aug 2000 08:16:49 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA24425 for fwtk-users-outgoing; Wed, 9 Aug 2000 08:16:29 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <50B56D407D2DD31191DE00902771E9F401593610@ecntex.ecn.nl> Date: Wed, 09 Aug 2000 16:13:00 +0100 (BST) From: Tony Gale To: "Overdijk, Harrie" Subject: RE: net_flags[4] Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 1059 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 09-Aug-2000 Overdijk, Harrie wrote: >> > [Harrie] Tony, I have the same problem (hmmm net_flags[5]... > [Harrie] The mentioned sites are indeed inaccesible. I do > [Harrie] have the quoting-bug-patch and netscape-bug-patch > [Harrie] applied. Do you have other patches? > > [Harrie] B.t.w. I don't trust the quoting bug patch on the > [Harrie] fwtk-site. The line: > > ! if ((*p == '"') || (*p == '\'') *p = 0; >> > [Harrie] definitly is wrong... Have you got a better version? > That's the *old* line that is being changed by the patch! I'll send you a patch set for a clean fwtk to try. -tony --- E-Mail: Tony Gale What you don't know won't help you much either. -- D. Bennett The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Thu Aug 10 00:52 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA12967 Thu, 10 Aug 2000 00:52:00 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id WAA01510; Wed, 9 Aug 2000 22:00:19 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 9 Aug 2000 20:15:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA00414 for fwtk-users-outgoing; Wed, 9 Aug 2000 20:15:28 -0700 (PDT) Message-Id: <4.2.2.20000809230612.00b8a420@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Wed, 09 Aug 2000 23:13:06 -0400 To: Shailesh Vaman Marathe , fwtk-users@tis.com From: Rick Murphy Subject: Re: problem with installation In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1036 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 11:17 AM 8/5/00 +0530, Shailesh Vaman Marathe wrote: > I have downloaded fwtk.tar.Z (fwtk2.1) from ftp.tis.com. I am getting >following >errors while building the executables > >1) in fwtk/tools/server/ftpd >glob.c: In function `matchdir': >glob.c:231: dereferencing pointer to incomplete type Some of the 'tools' are not very portable. I don't recommend using the fwtk ftpd in any case - there are better maintained alternatives. >2) in fwtk/auth >db.c:16: ndbm.h: No such file or directory >make: *** [db.o] Error 1 See the FAQ - you're missing the Berkeley DBM library. Get it from http://www.sleepycat.com/packages/db.1.85.tar.gz (or your distribution.) There's a compatible GNU version that seems to work, renamed to various names based on the whims of the author (gdbm, gdb, db, etc..). You may be able to fix this by editing the header file to match your OS distribution. -Rick From owner-fwtk-users@ex.tis.com Fri Aug 11 11:00 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA19957 Fri, 11 Aug 2000 10:59:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA11245; Fri, 11 Aug 2000 08:07:06 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 11 Aug 2000 05:39:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA09573 for fwtk-users-outgoing; Fri, 11 Aug 2000 05:39:11 -0700 (PDT) From: Eberhard Mattes Date: Fri, 11 Aug 2000 14:37:59 +0200 (MET DST) Message-Id: <200008111237.OAA19059@azu.informatik.uni-stuttgart.de> To: Weber@InfoTech.de CC: fwtk-users@ex.tis.com In-reply-to: <3.0.6.32.20000807144448.00b0d450@itsun1.infotech.de> (message from Christian Weber on Mon, 07 Aug 2000 14:44:48 +0200) Subject: Re: Content Checker for News Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 555 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Christian Weber wrote: > So I hope anyone can give me an appropiate pointer (how > to configure inn for news scanning) or even an app-gateway > (like smap-smapd) for nntp? For a NNTP proxy try nntp-gw in http://www.fwtk.org/fwtk/patches/em-gw.tar.gz but it doesn't do content checking. However, you might be able to hack it to do so. -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Fri Aug 11 11:00 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA19956 Fri, 11 Aug 2000 10:59:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA11241; Fri, 11 Aug 2000 08:07:06 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 11 Aug 2000 05:39:30 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA09566 for fwtk-users-outgoing; Fri, 11 Aug 2000 05:39:09 -0700 (PDT) From: Eberhard Mattes Date: Fri, 11 Aug 2000 14:38:01 +0200 (MET DST) Message-Id: <200008111238.OAA19063@azu.informatik.uni-stuttgart.de> To: Mark_Saunders@piucorp.com CC: fwtk-users@ex.tis.com In-reply-to: <398EBC4C.A213F06F@piucorp.com> (message from Mark_Saunders on Mon, 07 Aug 2000 09:40:28 -0400) Subject: Re: Content Checker Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 873 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Mark_Saunders wrote: > ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html [Let me repeat a message of mine:] Have you looked at the code of procmail? It looks way too ugly. I think "procmail-security" is an oxymoron. The code _might_ happen (by accident, not by design) to be secure, but I won't try to verify that. If I cannot (or won't) verify that it's secure, I assume that it isn't. I ignored the bad taste of the code and used procmail for a while: it dumped core at least once per week. Anyway, I guess that you can't detect all attachments reliably with procmail. A specialized tool is required. [Consider MS-TNEF!] -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Fri Aug 11 17:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA21253 Fri, 11 Aug 2000 17:21:14 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA14906; Fri, 11 Aug 2000 14:29:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 11 Aug 2000 12:51:07 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA13852 for fwtk-users-outgoing; Fri, 11 Aug 2000 12:50:36 -0700 (PDT) Date: Thu, 10 Aug 2000 23:06:09 +0530 (IST) From: Shailesh Vaman Marathe To: Rick Murphy cc: fwtk-users@tis.com Subject: Re: problem with installation In-Reply-To: <4.2.2.20000809230612.00b8a420@mail.itm-inst.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1720 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi thanks for the reply... i culd compile the code.. Now i am facing one more problem.. i ran authsrv (as root) and created 2 users. they have been created succesfully i can list them. but when i try to login from authmger or telnet 7777 (authsrv has been configured to run on port 7777), i get an error "userid nonexistent" . I have given database file /usr/local/etc/fw-authdb. but this file seems to be empty . there 2 other file though fw-authdb.dir and fw-authdb.pag which contain some data (not pure ascii) what can be the problem ? thanks shailesh On Wed, 9 Aug 2000, Rick Murphy wrote: > At 11:17 AM 8/5/00 +0530, Shailesh Vaman Marathe wrote: > > I have downloaded fwtk.tar.Z (fwtk2.1) from ftp.tis.com. I am getting > >following > >errors while building the executables > > > >1) in fwtk/tools/server/ftpd > >glob.c: In function `matchdir': > >glob.c:231: dereferencing pointer to incomplete type > > Some of the 'tools' are not very portable. I don't recommend using the fwtk > ftpd in any case - there are better maintained alternatives. > > >2) in fwtk/auth > >db.c:16: ndbm.h: No such file or directory > >make: *** [db.o] Error 1 > > See the FAQ - you're missing the Berkeley DBM library. Get it from > http://www.sleepycat.com/packages/db.1.85.tar.gz (or your distribution.) > There's a compatible GNU version that seems to work, renamed to various > names based on the whims of the author (gdbm, gdb, db, etc..). You may be > able to fix this by editing the header file to match your OS distribution. > -Rick > From owner-fwtk-users@ex.tis.com Fri Aug 11 18:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA21368 Fri, 11 Aug 2000 18:57:51 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA16316; Fri, 11 Aug 2000 16:05:17 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 11 Aug 2000 14:26:30 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA14854 for fwtk-users-outgoing; Fri, 11 Aug 2000 14:26:09 -0700 (PDT) Date: Fri, 11 Aug 2000 17:25:33 -0400 From: Joseph S D Yao To: Hossein Pourreza Cc: fwtk-users@ex.tis.com Subject: Re: Content Checker Message-Id: <20000811172533.Z6034@washington.cospo.osis.gov> Mail-Followup-To: Hossein Pourreza , fwtk-users@ex.tis.com References: <20000731170932.U20780@washington.cospo.osis.gov> <20000802091903.D5225@washington.cospo.osis.gov> <002301bfffab$3c095bc0$11c7c7c7@seclab.sharif.ac.ir> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <002301bfffab$3c095bc0$11c7c7c7@seclab.sharif.ac.ir>; from pourreza@hadid.sharif.ac.ir on Sun, Aug 06, 2000 at 06:05:48PM +0430 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1030 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Sun, Aug 06, 2000 at 06:05:48PM +0430, Hossein Pourreza wrote: > I installed and worked with TIS FWTK. Now I need some utility for scanning > mails body and detect file type of attachments. > For example I want to give mail body, a word and an action to content > checker and it applies the action on mail body. To insert a utility, modify 'smap' to put the incoming mail in a different directory. Have a 'cron'-driven utility that picks up those fles, runs the scanner utility, and puts files that "pass" in the directory that 'smapd' expects - the directory in which 'smap' HAD been putting them. As for the utility - several suggestions have been made, I have none. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Aug 11 22:17 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id WAA21819 Fri, 11 Aug 2000 22:17:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id TAA18454; Fri, 11 Aug 2000 19:25:52 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 11 Aug 2000 17:51:01 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id RAA17495 for fwtk-users-outgoing; Fri, 11 Aug 2000 17:50:40 -0700 (PDT) Message-Id: <4.2.2.20000811203047.00b16b10@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Fri, 11 Aug 2000 20:37:29 -0400 To: Shailesh Vaman Marathe From: Rick Murphy Subject: Re: problem with installation Cc: fwtk-users@tis.com In-Reply-To: References: <4.2.2.20000809230612.00b8a420@mail.itm-inst.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1367 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 11:06 PM 8/10/00 +0530, Shailesh Vaman Marathe wrote: > i ran authsrv (as root) and created 2 users. they have been created >succesfully i can list them. but when i try to login from >authmger or telnet 7777 (authsrv has been configured to run on >port 7777), i get an error "userid nonexistent" . I have given database >file /usr/local/etc/fw-authdb. but this file seems to be empty . there 2 >other file though fw-authdb.dir and fw-authdb.pag which contain some data >(not pure ascii) > >what can be the problem ? The database manager uses the simple file (fw-authdb) as a locking mechanism; it's normal for that to be empty. The contents are in fw-authdb.dir and fw-authdb.pag. If I remember right, the '.dir' file is the index and the 'pag' file has the contents. Check your netperm-table; it should have something like authsrv: permit-hosts 127.0.0.1 authsrv: deny-hosts * authsrv: database /usr/local/etc/fw-authdb authsrv: badsleep 1200 authsrv: nobogus true *: authserver 127.0.0.1 7777 If the authsrv 'list' command shows a user, and it's enabled, authmgr should know about it since it uses authsrv to perform the database lookup. -Rick From owner-fwtk-users@ex.tis.com Sat Aug 12 12:28 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA23268 Sat, 12 Aug 2000 12:28:55 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA22304; Sat, 12 Aug 2000 09:35:59 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 12 Aug 2000 07:07:56 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA21220 for fwtk-users-outgoing; Sat, 12 Aug 2000 07:07:05 -0700 (PDT) Date: Sat, 12 Aug 2000 10:02:44 -0400 (EDT) From: Ted Keller To: Pascal Cimon cc: "'Tony Gale '" , "'Larry Jackson '" , "'Mario Misic '" , "'fwtk-users@ex.tis.com '" Subject: RE: net_flags[4] In-Reply-To: <51B208AA1634D411A46600400567B311247F@babylon5.pcsnc.lab> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 4742 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm wondering if this is a similar error condition I found with the Apache proxy server. I had the situation where a number of IIS 4.0 sites (but not all of them) were not displaying behind my proxy server. In investigating this situation, I noted that the TCP/IP session was never terminated with a the trailing sequence. What this translated to was the following....(loosly speaking) The proxy server issues a network read request. As each buffer was read, it was transferred to an output buffer. When the the terminating was received, the read request completed with an End of File condition. At that time the output buffer is transferred to the client. In researching the problem, I also looked at the http-gw code and noted that it used very similar logic - that is - it required the EOF condition to complete the transmission to the client machine. With out the trailing everything goes into a BIG wait status until a TCP/IP timeout occurs - or your proxy detects an application timeout. Well, you ask, why don't clients that are connected to the internet directly have this problem? I believe the clients understand the data contents of each type of item that they are downloading. For example, they detect the at athe end of an still was not satisfied until a tcp/ip timeout occurs. I worked around this by picking some arbritrary "timeout" period (120 seconds in most cases) which I would assume the other end went away - and terminated my connection. Note - the client was then fat, dumb, and happy. The proxy server had a few extra open connections (note - these can really increase significantly if a site sends no terminating s for all objects). - but my users were happy. hope this helps ted keller On Wed, 9 Aug 2000, Pascal Cimon wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Actually it's more then just messages in the logs. Some sites don't come up > at all in the browser. When I access www.perl.com or www.xml.com with > http-gw they don't come up and I get the server unavailable error int the > browser and the netflag error in the fw logs. If I access the same site from > my firewall it works fine so it's not an access problem. If I point my > firewall to the http-gw it stops working for those sites. All other sites > work fine and I've only noticed those two so far. > > Pascal Cimon > PCSNC for Royal Canadian Mounted Police > > > -----Original Message----- > From: Tony Gale > To: Larry Jackson > Cc: Mario Misic; fwtk-users@ex.tis.com > Sent: 8/8/00 12:30 PM > Subject: Re: net_flags[4] > > [To be removed from this list send the message "unsubscribe fwtk-users" > in the > BODY of a mail message to majordomo@ex.tis.com.] > > > On 08-Aug-2000 Larry Jackson wrote: > > From: "Mario Misic" > >> > >> I already saw that even others have problem with http-gw. > >> > >> I have http-gw V2.1 and I got this error while I am trying to > >> access > >> www.xml.com . > >> > >> Network error: net_flags[4] set (read) > >> > >> I read in FAQs that it is probably bug in http-gw software, can > >> someone > >> advice me where to find patch if it exist, I tried to find it > >> somewhere > > but > >> I didn't. > >> > >> Regards! > >> Mario Misic > > > > I also see these error messages in my logs. > > Any progress on fixing the problem? > > I was looking at this this morning, and frankly, it aint worth the > effort. > > Basically, the code is bad at propagating error conditions, and this > message just catches this. > > I did try fixing it, but you just end up chasing function return > values through the code. > > So, ignore the messages, and if they bother you comment them out of > gio.c > > -tony > > > --- > E-Mail: Tony Gale > The shortest distance between any two puns is a straight line. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > From owner-fwtk-users@ex.tis.com Sat Aug 12 15:33 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA23537 Sat, 12 Aug 2000 15:33:17 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA24362; Sat, 12 Aug 2000 12:41:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 12 Aug 2000 11:07:23 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA23061 for fwtk-users-outgoing; Sat, 12 Aug 2000 11:06:51 -0700 (PDT) Message-ID: <51B208AA1634D411A46600400567B3112484@babylon5.pcsnc.lab> From: Pascal Cimon To: "'Ted Keller '" Cc: "''fwtk-users@ex.tis.com ' '" Subject: RE: net_flags[4] Date: Sat, 12 Aug 2000 14:04:55 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C00487.D1ECB160" Content-Length: 12275 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C00487.D1ECB160 Content-Type: text/plain; charset="iso-8859-1" Turns out I was able to fix my problem, thanks to Tony Gale. I had applied all the patches I could find from fwtk.org which fixed some sites originally but the one mentionned in previous messages (www.perl.com, www.xml.com and www.activestate.com) who stopped working recently. Tony sent me a diff file of his http-gw that had the same patches applied to it. I went back to the distribution http-gw and applied his patch. Now wether I had not applied the patch properly originally, Tony' s diff included patches I did not have or if Tony made some modification of his own that were not at fwtk.org I don't know. I'm not experienced enough in C to review coding other then appliying the patch itself but my problem is now fixed. Thanks for the info however, we do have some IIS 4.0 servers behind our Proxy and I will verify if I we have the same symptoms you mentionned. I've icluded a copy of Tony's diff file in case you wanted to see the code. I hope Tony doesn't mind. Thanks Pascal Cimon PCSNC for RCMP -----Original Message----- From: Ted Keller To: Pascal Cimon Cc: 'Tony Gale '; 'Larry Jackson '; 'Mario Misic '; 'fwtk-users@ex.tis.com ' Sent: 8/12/00 10:02 AM Subject: RE: net_flags[4] I'm wondering if this is a similar error condition I found with the Apache proxy server. I had the situation where a number of IIS 4.0 sites (but not all of them) were not displaying behind my proxy server. In investigating this situation, I noted that the TCP/IP session was never terminated with a the trailing sequence. What this translated to was the following....(loosly speaking) The proxy server issues a network read request. As each buffer was read, it was transferred to an output buffer. When the the terminating was received, the read request completed with an End of File condition. At that time the output buffer is transferred to the client. In researching the problem, I also looked at the http-gw code and noted that it used very similar logic - that is - it required the EOF condition to complete the transmission to the client machine. With out the trailing everything goes into a BIG wait status until a TCP/IP timeout occurs - or your proxy detects an application timeout. Well, you ask, why don't clients that are connected to the internet directly have this problem? I believe the clients understand the data contents of each type of item that they are downloading. For example, they detect the at athe end of an still was not satisfied until a tcp/ip timeout occurs. I worked around this by picking some arbritrary "timeout" period (120 seconds in most cases) which I would assume the other end went away - and terminated my connection. Note - the client was then fat, dumb, and happy. The proxy server had a few extra open connections (note - these can really increase significantly if a site sends no terminating s for all objects). - but my users were happy. hope this helps ted keller On Wed, 9 Aug 2000, Pascal Cimon wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Actually it's more then just messages in the logs. Some sites don't come up > at all in the browser. When I access www.perl.com or www.xml.com with > http-gw they don't come up and I get the server unavailable error int the > browser and the netflag error in the fw logs. If I access the same site from > my firewall it works fine so it's not an access problem. If I point my > firewall to the http-gw it stops working for those sites. All other sites > work fine and I've only noticed those two so far. > > Pascal Cimon > PCSNC for Royal Canadian Mounted Police > > > -----Original Message----- > From: Tony Gale > To: Larry Jackson > Cc: Mario Misic; fwtk-users@ex.tis.com > Sent: 8/8/00 12:30 PM > Subject: Re: net_flags[4] > > [To be removed from this list send the message "unsubscribe fwtk-users" > in the > BODY of a mail message to majordomo@ex.tis.com.] > > > On 08-Aug-2000 Larry Jackson wrote: > > From: "Mario Misic" > >> > >> I already saw that even others have problem with http-gw. > >> > >> I have http-gw V2.1 and I got this error while I am trying to > >> access > >> www.xml.com . > >> > >> Network error: net_flags[4] set (read) > >> > >> I read in FAQs that it is probably bug in http-gw software, can > >> someone > >> advice me where to find patch if it exist, I tried to find it > >> somewhere > > but > >> I didn't. > >> > >> Regards! > >> Mario Misic > > > > I also see these error messages in my logs. > > Any progress on fixing the problem? > > I was looking at this this morning, and frankly, it aint worth the > effort. > > Basically, the code is bad at propagating error conditions, and this > message just catches this. > > I did try fixing it, but you just end up chasing function return > values through the code. > > So, ignore the messages, and if they bother you comment them out of > gio.c > > -tony > > > --- > E-Mail: Tony Gale > The shortest distance between any two puns is a straight line. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > ------_=_NextPart_000_01C00487.D1ECB160 Content-Type: application/octet-stream; name="fwtk-trg20000809.diff" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="fwtk-trg20000809.diff" diff -rc fwtk.dist/fwtk/http-gw/auth.c fwtk/fwtk/http-gw/auth.c *** fwtk.dist/fwtk/http-gw/auth.c Fri Nov 22 16:21:05 1996 --- fwtk/fwtk/http-gw/auth.c Mon Jul 24 17:15:07 2000 *************** *** 23,29 **** }; =20 struct res_chars res_chars[] =3D { ! { TYPE_HTTP, "()%:+/;?=3D&\r\n"}, { 0, NULL} }; =20 --- 23,32 ---- }; =20 struct res_chars res_chars[] =3D { ! /* Do not unescape "reserved", "unsafe" or "special" characters from = RFC1738 ! * TRG - 20000714 ! */ ! { TYPE_HTTP, ";/?:@=3D&$-_.+!*'(), <>\"#%{}|\\^~[]`\r\n"}, { 0, NULL} }; =20 diff -rc fwtk.dist/fwtk/http-gw/ftp.c fwtk/fwtk/http-gw/ftp.c *** fwtk.dist/fwtk/http-gw/ftp.c Sat Jan 18 20:17:37 1997 --- fwtk/fwtk/http-gw/ftp.c Wed Jun 9 12:42:55 1999 *************** *** 216,221 **** --- 216,222 ---- int ftp_setup(sockfd, rfd, ftp_listen) int sockfd, rfd, *ftp_listen; { int siteinfo =3D ftp_siteinfo; + int reply; =20 ftp_siteinfo =3D -1; if( get_ftp_reply(rfd) !=3D '2') *************** *** 225,243 **** say(rfd,"USER anonymous"); else say(rfd, ftp_user); ! if( get_ftp_reply(rfd) !=3D '3') ! goto broken; !=20 ! if( ftp_pass[0] =3D=3D '\0') ! sprintf(ftp_reply_buf,"PASS http-gw@%s", ourname); ! else ! strcpy(ftp_reply_buf, ftp_pass); ! say(rfd, ftp_reply_buf); =20 ! ftp_siteinfo =3D siteinfo; =20 ! if( get_ftp_reply(rfd) !=3D '2') ! goto broken; =20 if( ftp_repcnt > 2){ ftp_gensitedir =3D 1; --- 226,249 ---- say(rfd,"USER anonymous"); else say(rfd, ftp_user); ! reply =3D get_ftp_reply(rfd); ! if (reply !=3D '2') { ! if( reply !=3D '3') ! goto broken; =20 ! if( ftp_pass[0] =3D=3D '\0') ! sprintf(ftp_reply_buf,"PASS http-gw@%s", ourname); ! else ! strcpy(ftp_reply_buf, ftp_pass); ! say(rfd, ftp_reply_buf); =20 ! ftp_siteinfo =3D siteinfo; ! =09 ! if( get_ftp_reply(rfd) !=3D '2') ! goto broken; ! } else { ! ftp_siteinfo =3D siteinfo; ! } =20 if( ftp_repcnt > 2){ ftp_gensitedir =3D 1; diff -rc fwtk.dist/fwtk/http-gw/hmain.c fwtk/fwtk/http-gw/hmain.c *** fwtk.dist/fwtk/http-gw/hmain.c Fri Feb 6 23:32:16 1998 --- fwtk/fwtk/http-gw/hmain.c Wed Jun 9 16:18:17 1999 *************** *** 857,869 **** if(html_read(fd,(char *)&buf[x],1) !=3D 1) goto done; =20 ! /* get \r\n - read a char and throw it away */ ! if(buf[x] =3D=3D '\r') { if(html_read(fd,(char *)&buf[x],1) !=3D 1) goto done; - buf[x] =3D '\0'; - ret =3D x; - goto done; } =20 if(buf[x] =3D=3D '\n') { --- 857,866 ---- if(html_read(fd,(char *)&buf[x],1) !=3D 1) goto done; =20 ! /* eat all \r from the stream */ ! while(buf[x] =3D=3D '\r') { if(html_read(fd,(char *)&buf[x],1) !=3D 1) goto done; } =20 if(buf[x] =3D=3D '\n') { *************** *** 945,953 **** char *s; int n; { ! if(net_write(fd,s,n) !=3D n) ! return(1); ! return(net_write(fd,"\r\n",2) !=3D 2); } =20 =20 --- 942,958 ---- char *s; int n; { ! char *buff; ! int retval; !=20 ! if ( (buff =3D malloc(n+2)) =3D=3D NULL) ! return(0); ! memcpy(buff, s, n); ! buff[n]=3D'\r'; ! buff[n+1]=3D'\n'; ! retval =3D net_write(fd,buff,n+2); ! free(buff); ! return(retval); } =20 =20 diff -rc fwtk.dist/fwtk/http-gw/http-gw.c fwtk/fwtk/http-gw/http-gw.c *** fwtk.dist/fwtk/http-gw/http-gw.c Fri Feb 6 23:32:25 1998 --- fwtk/fwtk/http-gw/http-gw.c Fri Oct 29 10:28:54 1999 *************** *** 1362,1367 **** --- 1362,1383 ---- }else break; } + /* Check if there is a CRLF left in the buffer. + * Netscape sends CRLF on the end of POST commands. + * TRG - 19990817 + */ + { + char str[2]; + int count; + if (ioctl(rfd, FIONREAD, &count) =3D=3D 0) { + if (count =3D=3D 2) { + if (recv(rfd, str, 2, MSG_PEEK) =3D=3D 2) { + if ((str[0] =3D=3D '\r') && (str[1] =3D=3D '\n')) + read(rfd, str, 2); + } + } + } + } } return 0; } *************** *** 2285,2292 **** seek_and_destroy(value); =20 /* Quote at end removed to avoid double write*/ ! p =3D value + strlen(value) - 1; ! if ((*p =3D=3D '"') || (*p =3D=3D '\'')) *p =3D 0; =20 /* write out the saved (or rewritten) field now */ if (!in_blocked) --- 2301,2316 ---- seek_and_destroy(value); =20 /* Quote at end removed to avoid double write*/ ! /* p =3D value + strlen(value) - 1; ! if ((*p =3D=3D '"') || (*p =3D=3D '\'')) *p =3D 0; */ !=20 ! if (*value =3D=3D '"' || *value =3D=3D '\'') = {=20 ! /* leave single quote intact */=20 ! if (strlen(value) > 1) {=20 ! char *p2 =3D value + strlen(value) - 1;=20 ! if (*value =3D=3D *p2) *p2 =3D 0;=20 ! }=20 ! }=20 =20 /* write out the saved (or rewritten) field now */ if (!in_blocked) diff -rc fwtk.dist/fwtk/x-gw/sig.c fwtk/fwtk/x-gw/sig.c *** fwtk.dist/fwtk/x-gw/sig.c Fri Feb 6 00:10:56 1998 --- fwtk/fwtk/x-gw/sig.c Wed Jun 9 12:45:37 1999 *************** *** 83,95 **** { int ret; list_t *p=3Dpidlist; =20 while(p) {=20 if( (ret=3Dhandle_sigpid(p->id))>=3D -1 && cb)=20 ret=3Dcb(p->id,data,ret); ! if( ret>=3D -1)=20 pidlist=3D(list_t*)deleteListItem(pidlist,p->id); ! p=3Dp->next; }=20 return pidlist; } --- 83,100 ---- { int ret; list_t *p=3Dpidlist; + list_t *ptemp; =20 while(p) {=20 if( (ret=3Dhandle_sigpid(p->id))>=3D -1 && cb)=20 ret=3Dcb(p->id,data,ret); ! if( ret>=3D -1) { ! ptemp=3Dp->next; pidlist=3D(list_t*)deleteListItem(pidlist,p->id); ! p=3Dptemp; ! } else { ! p=3Dp->next; ! } }=20 return pidlist; } ------_=_NextPart_000_01C00487.D1ECB160-- From owner-fwtk-users@ex.tis.com Sat Aug 12 16:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA23576 Sat, 12 Aug 2000 16:51:09 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA25732; Sat, 12 Aug 2000 13:59:04 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 12 Aug 2000 12:32:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA24201 for fwtk-users-outgoing; Sat, 12 Aug 2000 12:32:14 -0700 (PDT) Message-ID: <001701c00494$33d76940$fc00a8c0@k62350> From: "Larry Jackson" To: Cc: "Ted Keller" References: Subject: Re: net_flags[4] errors in http-gw Date: Sat, 12 Aug 2000 15:33:32 -0400 Organization: Falun Technical Service, Inc. MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 4770 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Is there a way to patch http-gw to fix this condition? Or is this a HTTP server problem? LarryJackson@iName.com From: "Ted Keller" To: "Pascal Cimon" Cc: "'Tony Gale '" ; "'Larry Jackson '" ; "'Mario Misic '" ; Sent: Saturday, August 12, 2000 10:02 AM Subject: RE: net_flags[4] > I'm wondering if this is a similar error condition I found with > the Apache proxy server. > > I had the situation where a number of IIS 4.0 sites (but not all of them) > were not displaying behind my proxy server. In investigating this > situation, I noted that the TCP/IP session was never terminated with a the > trailing sequence. > > What this translated to was the following....(loosly speaking) > > The proxy server issues a network read request. As each buffer was read, > it was transferred to an output buffer. When the the terminating > was received, the read request completed with an End of File condition. > At that time the output buffer is transferred to the client. > > In researching the problem, I also looked at the http-gw code and noted > that it used very similar logic - that is - it required the EOF condition > to complete the transmission to the client machine. > > With out the trailing everything goes into a BIG wait status until > a TCP/IP timeout occurs - or your proxy detects an application timeout. > > Well, you ask, why don't clients that are connected to the internet > directly have this problem? > > I believe the clients understand the data contents of each type of item > that they are downloading. For example, they detect the at athe > end of an hence don't look for the terminating EOF character. The same thing goes > for gif, jpeg, .... other type of files. > > How to get around this.... > > In apache - I created a set of patches to specifically NOT buffer input > and output read/write requests. That is, each time I recieved a block of > characters, I wrote them without buffering to the client. I think a > similar thing can be implemented in http-gw. > > Note - the final read (waiting for the still was not satisfied until > a tcp/ip timeout occurs. I worked around this by picking some arbritrary > "timeout" period (120 seconds in most cases) which I would assume the > other end went away - and terminated my connection. > > Note - the client was then fat, dumb, and happy. The proxy server had a > few extra open connections (note - these can really increase significantly > if a site sends no terminating s for all objects). - but my users > were happy. > > hope this helps > > ted keller > > > On Wed, 9 Aug 2000, Pascal Cimon wrote: > > > Actually it's more then just messages in the logs. Some sites don't come up > > at all in the browser. When I access www.perl.com or www.xml.com with > > http-gw they don't come up and I get the server unavailable error int the > > browser and the netflag error in the fw logs. If I access the same site from > > my firewall it works fine so it's not an access problem. If I point my > > firewall to the http-gw it stops working for those sites. All other sites > > work fine and I've only noticed those two so far. > > > > Pascal Cimon > > PCSNC for Royal Canadian Mounted Police > > > > > > From: Tony Gale > > To: Larry Jackson > > Cc: Mario Misic; fwtk-users@ex.tis.com > > Sent: 8/8/00 12:30 PM > > Subject: Re: net_flags[4] > > > > On 08-Aug-2000 Larry Jackson wrote: > > > From: "Mario Misic" > > >> > > >> I already saw that even others have problem with http-gw. > > >> > > >> I have http-gw V2.1 and I got this error while I am trying to > > >> access www.xml.com . > > >> > > >> Network error: net_flags[4] set (read) > > >> > > >> I read in FAQs that it is probably bug in http-gw software, > > >> can someone advice me where to find patch if it exist, > > >> I tried to find it somewhere but I didn't. > > >> > > >> Regards! > > >> Mario Misic > > > > > > I also see these error messages in my logs. > > > Any progress on fixing the problem? > > > > I was looking at this this morning, and frankly, > > it aint worth the effort. > > > > Basically, the code is bad at propagating error conditions, > > and this message just catches this. > > > > I did try fixing it, but you just end up chasing function return > > values through the code. > > > > So, ignore the messages, and if they bother you > > comment them out of gio.c > > > > Tony Gale From owner-fwtk-users@ex.tis.com Sun Aug 13 20:27 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA25809 Sun, 13 Aug 2000 20:27:04 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA03687; Sun, 13 Aug 2000 17:34:39 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 13 Aug 2000 15:07:10 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA02444 for fwtk-users-outgoing; Sun, 13 Aug 2000 15:06:49 -0700 (PDT) Date: Sun, 13 Aug 2000 18:05:10 -0400 (EDT) From: Ted Keller To: Larry Jackson cc: fwtk-users@ex.tis.com Subject: Re: net_flags[4] errors in http-gw In-Reply-To: <001701c00494$33d76940$fc00a8c0@k62350> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 6030 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Larry, This is a server problem - however - you can patch http-gw to get around the symptoms and show your users generally good response. In taking a quick look at the code (note - I haven't analyzed it heavily) - I would probably start off by adding an fflush after each net_write call in the http-gw program. That way, you shouldn't have data hanging around in the buffers not sent to the client. By doing this, a couple of things will happen.... first - the client, once it thinks it has seen everything, will hang up on this connection. You will have some dangling processes until a timeout occurs. Seceond - the default timeout is probaby not appropriate. It should be reduced down to something smaller - say 120 seconds or so. Third - Get ready for a lot of processes in a wait state when you hit a site with a number of objects that you get stuck in the timeout process. Your system should handle it - you will just see a lot of them. ted keller On Sat, 12 Aug 2000, Larry Jackson wrote: > Is there a way to patch http-gw to fix this condition? > Or is this a HTTP server problem? > > LarryJackson@iName.com > > From: "Ted Keller" > To: "Pascal Cimon" > Cc: "'Tony Gale '" ; > "'Larry Jackson '" ; > "'Mario Misic '" ; > Sent: Saturday, August 12, 2000 10:02 AM > Subject: RE: net_flags[4] > > > > I'm wondering if this is a similar error condition I found with > > the Apache proxy server. > > > > I had the situation where a number of IIS 4.0 sites (but not all of them) > > were not displaying behind my proxy server. In investigating this > > situation, I noted that the TCP/IP session was never terminated with a the > > trailing sequence. > > > > What this translated to was the following....(loosly speaking) > > > > The proxy server issues a network read request. As each buffer was read, > > it was transferred to an output buffer. When the the terminating > > was received, the read request completed with an End of File condition. > > At that time the output buffer is transferred to the client. > > > > In researching the problem, I also looked at the http-gw code and noted > > that it used very similar logic - that is - it required the EOF condition > > to complete the transmission to the client machine. > > > > With out the trailing everything goes into a BIG wait status until > > a TCP/IP timeout occurs - or your proxy detects an application timeout. > > > > Well, you ask, why don't clients that are connected to the internet > > directly have this problem? > > > > I believe the clients understand the data contents of each type of item > > that they are downloading. For example, they detect the at athe > > end of an > hence don't look for the terminating EOF character. The same thing goes > > for gif, jpeg, .... other type of files. > > > > How to get around this.... > > > > In apache - I created a set of patches to specifically NOT buffer input > > and output read/write requests. That is, each time I recieved a block of > > characters, I wrote them without buffering to the client. I think a > > similar thing can be implemented in http-gw. > > > > Note - the final read (waiting for the still was not satisfied until > > a tcp/ip timeout occurs. I worked around this by picking some arbritrary > > "timeout" period (120 seconds in most cases) which I would assume the > > other end went away - and terminated my connection. > > > > Note - the client was then fat, dumb, and happy. The proxy server had a > > few extra open connections (note - these can really increase significantly > > if a site sends no terminating s for all objects). - but my users > > were happy. > > > > hope this helps > > > > ted keller > > > > > > On Wed, 9 Aug 2000, Pascal Cimon wrote: > > > > > Actually it's more then just messages in the logs. Some sites don't > come up > > > at all in the browser. When I access www.perl.com or www.xml.com with > > > http-gw they don't come up and I get the server unavailable error int > the > > > browser and the netflag error in the fw logs. If I access the same site > from > > > my firewall it works fine so it's not an access problem. If I point my > > > firewall to the http-gw it stops working for those sites. All other > sites > > > work fine and I've only noticed those two so far. > > > > > > Pascal Cimon > > > PCSNC for Royal Canadian Mounted Police > > > > > > > > > From: Tony Gale > > > To: Larry Jackson > > > Cc: Mario Misic; fwtk-users@ex.tis.com > > > Sent: 8/8/00 12:30 PM > > > Subject: Re: net_flags[4] > > > > > > On 08-Aug-2000 Larry Jackson wrote: > > > > From: "Mario Misic" > > > >> > > > >> I already saw that even others have problem with http-gw. > > > >> > > > >> I have http-gw V2.1 and I got this error while I am trying to > > > >> access www.xml.com . > > > >> > > > >> Network error: net_flags[4] set (read) > > > >> > > > >> I read in FAQs that it is probably bug in http-gw software, > > > >> can someone advice me where to find patch if it exist, > > > >> I tried to find it somewhere but I didn't. > > > >> > > > >> Regards! > > > >> Mario Misic > > > > > > > > I also see these error messages in my logs. > > > > Any progress on fixing the problem? > > > > > > I was looking at this this morning, and frankly, > > > it aint worth the effort. > > > > > > Basically, the code is bad at propagating error conditions, > > > and this message just catches this. > > > > > > I did try fixing it, but you just end up chasing function return > > > values through the code. > > > > > > So, ignore the messages, and if they bother you > > > comment them out of gio.c > > > > > > Tony Gale > > From owner-fwtk-users@ex.tis.com Tue Aug 15 17:05 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA03059 Tue, 15 Aug 2000 17:04:59 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA21029; Tue, 15 Aug 2000 14:13:25 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 15 Aug 2000 12:39:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA19781 for fwtk-users-outgoing; Tue, 15 Aug 2000 12:39:18 -0700 (PDT) Date: Tue, 15 Aug 2000 15:38:24 -0400 From: Joseph S D Yao To: fwtk-users@lists.nai.com Subject: [yli@simplexity.com: fwd: Joke] Message-Id: <20000815153824.M24810@washington.cospo.osis.gov> Mail-Followup-To: fwtk-users@lists.nai.com Mime-Version: 1.0 X-Mailer: Mutt 1.0i Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1123 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] ----- In a message from Yibing Li ----- From: "Yibing Li" To: "Fwtk-Users@Lists. Nai. Com" Subject: fwd: Joke Date: Tue, 15 Aug 2000 10:05:55 -0400 X-Priority: 3 (Normal) X-Msmail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-Mimeole: Produced By Microsoft MimeOLE V5.00.2314.1300 [-- Attachment #1 --] [-- Type: text/plain, Encoding: 7bit, Size: 0.1K --] [-- Attachment #2: Very Funny.vbs --] [-- Type: application/octet-stream, Encoding: quoted-printable, Size: 10K --] ... ----- End forwarded message ----- As if anybody needed any MORE reasons not to (1) ever read a joke sent on the Internet, or (2) use Microstuffed mail programs. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Aug 16 21:32 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA07960 Wed, 16 Aug 2000 21:32:23 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA02984; Wed, 16 Aug 2000 18:39:29 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 16 Aug 2000 16:17:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA01505 for fwtk-users-outgoing; Wed, 16 Aug 2000 16:17:19 -0700 (PDT) Message-ID: <399B2127.ACDD61F8@quanta.co.nz> Date: Thu, 17 Aug 2000 11:17:59 +1200 From: Scott Newton Organization: Quanta Systems Ltd X-Mailer: Mozilla 4.7 [en] (WinNT; I) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@ex.tis.com Subject: Mail relaying (one direction only) Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 690 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi We have a situation where we have a mail server internal to the firewall and want to be able to relay all mail from the server through the firewall (running smap + yao patches) to our ISP, but block any messages coming in that are not for our domain. I am able to allow both directions on the firewall or deny both directions on the firewall, but can not find the correct combination of hosts/domains to allow out but not in. Can someone please help Thanks Scott -- Regards Scott Newton Quanta Systems Limited Phone: (09) 302 3760 Fax : (09) 302 3784 From owner-fwtk-users@ex.tis.com Thu Aug 17 15:04 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA11053 Thu, 17 Aug 2000 15:04:15 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA09280; Thu, 17 Aug 2000 12:12:06 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 17 Aug 2000 10:29:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA07984 for fwtk-users-outgoing; Thu, 17 Aug 2000 10:29:37 -0700 (PDT) X-Authentication-Warning: gatekeeper.infoamerica-inc.com: shutdown set sender to using -f Message-ID: <009701c00870$62092620$a60a0ac0@infoamerica.com> From: "Reid Hayhow" To: Subject: Http-gw slowness Date: Thu, 17 Aug 2000 11:26:35 -0600 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2919.6600 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1790 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I have inherited a Firewall using FWTK and recently it has started to have some problems, mainly slooooow web and email response times. First, here is configuration information, I am using a Linux box, 486, 16 meg RAM, 2 ethernet cards. The kernel is 2.2. From the log files it appears that it is using v2.0 beta executables. The problems: 1) At first we experienced intermittent slowdowns through http-gw (once a month), but for the last three weeks the slowdown has persisted. Pages can take minutes to load instead of 2-5 seconds. The log files show a bunch of "Host address lookup failed" warnings. From reading the FWTK archives I saw that this might be a DNS problem. But I also have downloaded 'tinyproxy' (a simple web proxy) and connections through it are very fast. I am hoping this rules out DNS problems. Another thing that seems kind of quirky, the slowdown seems to happen during the connect. Once the page starts to load it goes fairly quickly (graphics experience a similar initial delay and quick eventual load). 2) Email connections are slow through plug-gw. I have set my timeout to 3 minutes because it appears to take about 2.5 minutes to simply connect to our email server. As above, once the connect happens the authentication and email download is fast. It just takes 2+ minutes to find and connect to the email server on the other side of the firewall. I have downloaded the latest source and done a build. I set up the new http-gw on a different port and ran it with the same slowness. So I don't think it is an executable specific problem. Any thoughts or suggestions would be appreciated. Reid From owner-fwtk-users@ex.tis.com Thu Aug 17 17:18 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA11381 Thu, 17 Aug 2000 17:18:30 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA11336; Thu, 17 Aug 2000 14:25:54 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 17 Aug 2000 12:56:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA09761 for fwtk-users-outgoing; Thu, 17 Aug 2000 12:56:11 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: <009701c00870$62092620$a60a0ac0@infoamerica.com> References: <009701c00870$62092620$a60a0ac0@infoamerica.com> Date: Thu, 17 Aug 2000 15:48:32 -0400 To: "Reid Hayhow" From: Mark C Farone Subject: Re: Http-gw slowness Cc: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 1332 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 11:26 AM -0600 8/17/00, Reid Hayhow wrote: >I have inherited a Firewall using FWTK and recently it has started to >have some problems, mainly slooooow web and email response times. First, >here is configuration information, I am using a Linux box, 486, 16 meg RAM, >2 ethernet cards. The kernel is 2.2. From the log files it appears that it >is using v2.0 beta executables. You might be having the classic SYN-ACK problem if you are using a kernel earlier than 2.2.11. I've at least seen it cause problems with smap. You'll want to consider running 2.2.12 or higher to avoid those bugs and security holes (take a look at http://www.kernelnotes.org/kpatch22.html and the fixes for tcp). The problem was (essentially) that the linux box doesn't understand the ack properly and never responds. tcpdump might be helpful to identify if this is your problem. Also, if your generating oodles of logged errors, with that small amount of RAM you might want to run 'free' and see if you're paging memory to the disk and that disk is close to full. Hope this helps, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Thu Aug 17 20:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA11717 Thu, 17 Aug 2000 20:12:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA14193; Thu, 17 Aug 2000 17:20:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 17 Aug 2000 15:49:59 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA12410 for fwtk-users-outgoing; Thu, 17 Aug 2000 15:49:38 -0700 (PDT) Message-Id: <4.2.2.20000817183649.00b1e200@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Thu, 17 Aug 2000 18:39:52 -0400 To: "Reid Hayhow" , From: Rick Murphy Subject: Re: Http-gw slowness In-Reply-To: <009701c00870$62092620$a60a0ac0@infoamerica.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1008 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 11:26 AM 8/17/00 -0600, Reid Hayhow wrote: > I have inherited a Firewall using FWTK and recently it has started to >have some problems, mainly slooooow web and email response times. First, >here is configuration information, I am using a Linux box, 486, 16 meg RAM, >2 ethernet cards. The kernel is 2.2. From the log files it appears that it >is using v2.0 beta executables. The easiest way to eliminate DNS problems is to try it on the firewall. nslookup a.b.com where 'a.b.com' is the site you're trying to get to. nslookup 1.2.3.4 Where '1.2.3.4' is the IP address of that site nslookup 5.6.7.8 where '5.6.7.8' is the IP address of your client machine If any of these are slow, you've got a DNS problem. Reverse lookups for the internal network are a frequently seen misconfiguration that can lead to very slow response times. -Rick From owner-fwtk-users@ex.tis.com Thu Aug 17 20:12 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA11720 Thu, 17 Aug 2000 20:12:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA14197; Thu, 17 Aug 2000 17:20:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 17 Aug 2000 16:02:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA12643 for fwtk-users-outgoing; Thu, 17 Aug 2000 16:02:25 -0700 (PDT) Reply-To: From: "Nico Baggus" To: "'Mark C Farone'" , "'Reid Hayhow'" Cc: Subject: RE: Http-gw slowness Date: Fri, 18 Aug 2000 00:58:53 +0200 Message-ID: <000001c0089e$b7d1d150$1106a8c0@niconet.adenc.nl> MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 In-Reply-To: Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 440 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > You'll want to consider running 2.2.12 or higher to avoid those bugs > and security holes (take a look at You probably want kernel V 2.2.16 It fixes a huge hole where someone can disable the SUID capability, causing a suid program to not change identity. i.e. it will stay root..... regards, Nico Baggus From owner-fwtk-users@ex.tis.com Fri Aug 18 08:55 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA13476 Fri, 18 Aug 2000 08:55:51 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA19075; Fri, 18 Aug 2000 06:03:05 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 18 Aug 2000 03:40:21 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA17942 for fwtk-users-outgoing; Fri, 18 Aug 2000 03:40:00 -0700 (PDT) From: Eberhard Mattes Date: Fri, 18 Aug 2000 12:38:33 +0200 (MET DST) Message-Id: <200008181038.MAA02521@azu.informatik.uni-stuttgart.de> To: mtavasso@sellbuysector.com CC: fwtk-users@lists.nai.com In-reply-to: <3985A208.C80A1E@sellbuysector.com> (message from Masih Tavassoli on Mon, 31 Jul 2000 16:58:00 +0100) Subject: Re: plug-gw and http access log Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 594 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Masih Tavassoli wrote: > I recently installed plug-gw to relay all the http requests coming from > the internet to be forwarded to our webserver which exists on our > private network. > > It is all working well and good, except in the access_log of apache > everything seems to be coming from the firewall. Try http-in of http://www.fwtk.org/fwtk/patches/em-gw.tar.gz -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Wed Aug 23 08:04 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA01325 Wed, 23 Aug 2000 08:04:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA18038; Wed, 23 Aug 2000 05:11:51 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 23 Aug 2000 02:42:15 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA16849 for fwtk-users-outgoing; Wed, 23 Aug 2000 02:41:55 -0700 (PDT) Message-ID: From: "Randal, Phil" To: "'Overdijk, Harrie'" , fwtk-users@tis.com Subject: RE: smap/smapd/postfix: malformed sender addesses Date: Wed, 23 Aug 2000 10:40:36 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 3464 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I've just discovered this one for myself (a few months late). Exchange creates SMTP from: strings of the form "From: SIZE=9999" Dodgy in the least... But the fix is to patch SMAP to terminate the From: string at the trailing space. In the main loop in smap.c, the code should look like this: /* Skip over "from:" and any spaces. */ q += 5; while(isspace(*q)) q++; + + /* Terminate string at first space to clean up + MS Exchange "From: SIZE=nnn" + nonsense - pr 20000821 */ + + tmpstr = strchr(q,' '); + if (tmpstr != (char *)NULL) + *tmpstr = '\0'; /* ** If we already had an ruser ["should never ** happen"], free the staorage space. */ if(ruser != (char *)0) free(ruser); I'd post a proper diff, but my SMAP is V2.1 + YAO + assorted patches. Phil ------------------------------------------------------------ Phil Randal Network Engineer Herefordshire Council, UK > -----Original Message----- > From: Overdijk, Harrie [mailto:overdijk@ecn.nl] > Sent: 07 June 2000 13:35 > To: fwtk-users@tis.com > Subject: smap/smapd/postfix: malformed sender addesses > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Dear FWTK-guru's > > The time has come to get rid of ouw good old mail-gateway > and replace it by a system running the smap/smapd combo from > fwtk 2.1 with the Joseph Yao Antirelay/AntiSPAM patches. As > a replacement for sendmail I have chosen for postfix in send > only mode and configured it for use on a firewall. I have > tested it local from several systems using telnet to simulate > a SMTP session and all looks well. > > So the time has come to let our Microsoft Exchange server > version 5.5 send the messages via the described system to > the outside world. I was very scared when I saw the > following type of messages in the log: > > -----8<----- > Jun 7 13:26:10 ecnwall postfix/sendmail[2427]: warning: -f > option specified > malformed sender: SIZE=1639 > -----8<----- > > That does not look good... especially not when I saw: > > -----8<----- > Jun 7 13:26:11 ecnwall postfix/pickup[2149]: 0B0DD2F: uid=5 > from= > Jun 7 13:26:11 ecnwall postfix/cleanup[2425]: 0B0DD2F: > message-id=<20000607112610.0B0DD2F@ecnwall.ecn.nl> > Jun 7 13:26:11 ecnwall postfix/qmgr[1738]: 0B0DD2F: > from=, size=1979 (queue active) > -----8<----- > > The 'sender' address has become instead of > . Most messages were accepted by the remote > system, but I don't feel good about it. I think there are > remote systems that will not accept these types of sender > addresses... So... I switched back to the old mailgateway > and wait for a response on my following question: > > Has anyone seen this before? And (even better) has anyone a > patch to fight this type of Gatesware functionallity? > > Thanks in advance for your help! > > Harrie. > > Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The > Netherlands. > Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 > Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 > ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manage > r of ECN. > From owner-fwtk-users@ex.tis.com Wed Aug 23 21:29 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA04022 Wed, 23 Aug 2000 21:29:52 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA23358; Wed, 23 Aug 2000 18:38:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 23 Aug 2000 16:55:17 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA22310 for fwtk-users-outgoing; Wed, 23 Aug 2000 16:55:06 -0700 (PDT) From: "Luis Fernando Barrera" To: Subject: Using Microsoft Instant Messager Date: Wed, 23 Aug 2000 17:54:31 -0600 Message-ID: MIME-Version: 1.0 X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id QAA22305 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 360 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, Does anyone know how to let pass the Microsoft Instant Messager through the firewall? I know I have to use the plug-gw, but I don't know which ports I have to let pass through... Luis Fernando Barrera luba@assist.com.gt From owner-fwtk-users@ex.tis.com Thu Aug 24 14:45 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA07485 Thu, 24 Aug 2000 14:45:17 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA29591; Thu, 24 Aug 2000 11:52:59 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 24 Aug 2000 09:28:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA27599 for fwtk-users-outgoing; Thu, 24 Aug 2000 09:28:41 -0700 (PDT) From: Bernard_Lee@Raytheon.com Subject: FTP proxy and Checkpoint FW-1 4.0 SP7 To: fwtk-users@ex.tis.com Date: Thu, 24 Aug 2000 09:26:12 -0700 Message-ID: X-MIMETrack: Serialize by Router on RESMAIL70/SRV/Raytheon/CA(Release 5.0.3 |March 21, 2000) at 08/24/2000 09:26:23 AM MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 601 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi there, The ftp-gw worked fine before I upgraded the Checkpoint FW-1 4.0 from SP4 to SP7. The ftp-gw resides on the DMZ. It hangs everytime at the point I issue "user anonoymous@ftp.xxx.com". When I look at it with a sniffer, I've found the ftp-gw is able to log on to the ftp site but when the ftp-gw passes the welcome banner to the the firewall, the firewall just resets the connection. Any idea why that happens and is there any solution to that ? Thanks Bernard From owner-fwtk-users@ex.tis.com Thu Aug 24 14:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA07497 Thu, 24 Aug 2000 14:50:50 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA29695; Thu, 24 Aug 2000 11:59:29 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 24 Aug 2000 10:37:49 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA28294 for fwtk-users-outgoing; Thu, 24 Aug 2000 10:37:39 -0700 (PDT) Message-Id: <200008241341.JAA25935@voyager.eagletrim.com> From: "Wes Szumera" Organization: Eagle Trim Inc. To: fwtk-users@ex.tis.com Date: Thu, 24 Aug 2000 13:37:35 -0400 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Problems with Ford 3270 access using plug-gw X-mailer: Pegasus Mail for Win32 (v3.01d) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 1687 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Has anyone used plug-gw to allow access to ford motor companies 3270 emulator? The tell me that the java app that I am downloading from their web page will connect on port 4095 to web.3270.ford.com I set plug-gw to listen to port 4095 and plug to the ip web.3270.ford.com . My hosts file resolves the name and points to internal interface on firewall. They are using a product called OC Connect which is what chrysler uses also. I got Chrysler to work fine with only a little head banging. Any help would be welcome. Wes Wes Szumera Plant Engineer Eagle Trim Inc. 0829 US 131 NW Kalkaska, MI 49646-0460 voice 231 258 4150 ext 3024 fax 231 258 4153 From owner-fwtk-users@ex.tis.com Fri Aug 25 11:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA18346 Fri, 25 Aug 2000 11:01:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA07971; Fri, 25 Aug 2000 08:10:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 06:20:43 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA06302 for fwtk-users-outgoing; Fri, 25 Aug 2000 06:20:33 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" , "Fwtk Users2" Subject: inetd.conf Date: Fri, 25 Aug 2000 14:21:53 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 513 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all When i am finished configuring the net-permtable do i uncomment telnet,ftp,finger,etc...... in the inetd.conf file - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Fri Aug 25 11:01 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA18345 Fri, 25 Aug 2000 11:01:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA07967; Fri, 25 Aug 2000 08:10:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 06:20:58 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA06316 for fwtk-users-outgoing; Fri, 25 Aug 2000 06:20:47 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" , "Fwtk Users2" Subject: inetd.conf Date: Fri, 25 Aug 2000 14:21:53 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 513 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all When i am finished configuring the net-permtable do i uncomment telnet,ftp,finger,etc...... in the inetd.conf file - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Fri Aug 25 15:24 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA24791 Fri, 25 Aug 2000 15:24:38 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA11598; Fri, 25 Aug 2000 12:33:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 10:21:08 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA09729 for fwtk-users-outgoing; Fri, 25 Aug 2000 10:20:47 -0700 (PDT) From: Darren Reed Message-Id: <200008251251.WAA13438@avalon.reed.wattle.id.au> Subject: Re: FTP proxy and Checkpoint FW-1 4.0 SP7 In-Reply-To: from "Bernard_Lee@Raytheon.com" at "Aug 24, 0 09:26:12 am" To: Bernard_Lee@Raytheon.com Date: Fri, 25 Aug 2000 22:51:23 +1000 (EST) Cc: fwtk-users@ex.tis.com X-Mailer: ELM [version 2.4ME+ PL37 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 1694 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] In some email I received from Bernard_Lee@Raytheon.com, sie wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi there, > > The ftp-gw worked fine before I upgraded the Checkpoint FW-1 4.0 from SP4 to > SP7. The ftp-gw resides on the DMZ. It hangs everytime at the point I issue > "user anonoymous@ftp.xxx.com". When I look at it with a sniffer, I've found > the ftp-gw is able to log on to the ftp site but when the ftp-gw passes the > welcome banner to the the firewall, the firewall just resets the connection. > Any idea why that happens and is there any solution to that ? In a recent post on bugtraq about FW-1, it was mentioned that there were problems with its FTP "proxy", so 10:1 they've made a change in the best interests of security but actually verified it doesn't break something else (why care about interoperability with a competitor's product ? ;->) Dealing with FTP in a packet level "proxy" is a real PITA. What if you take ftp-gw out of the equation, does the problem still persist? It maybe something as simple as it doesn't like the idea of multiple commands/lines per packet. There is at least one web `client' around which is a very nasty ftp client - links. To retrieve anonymous FTP things, it sends: USER anonymous\r\nPASS foo@\r\nCWD /path/to/foo\r\nPASV\r\nRETR foo.txt\r\n in one go to the FTP server. In the WWW view of the world, that is probably how you would treat FTP, but FTP isn't a transaction orientated protocol. Darren From owner-fwtk-users@ex.tis.com Fri Aug 25 15:32 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA24960 Fri, 25 Aug 2000 15:31:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA11766; Fri, 25 Aug 2000 12:40:41 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 11:22:24 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA10359 for fwtk-users-outgoing; Fri, 25 Aug 2000 11:22:03 -0700 (PDT) Date: Fri, 25 Aug 2000 14:20:58 -0400 From: Joseph S D Yao To: TJ O Connor Cc: Fwtk Users Subject: Re: inetd.conf Message-Id: <20000825142058.R17721@washington.cospo.osis.gov> Mail-Followup-To: TJ O Connor , Fwtk Users References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from toconnor@comnitel.com on Fri, Aug 25, 2000 at 02:21:53PM +0100 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 747 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Fri, Aug 25, 2000 at 02:21:53PM +0100, TJ O Connor wrote: ... > When i am finished configuring the net-permtable do > i uncomment telnet,ftp,finger,etc...... in the inetd.conf file It's better done before you start it. ;-) Keep the crackers off the system while you are configuring and testing it. OBTW - both FWTK lists are one. NAI bought TIS. ;-( We all got two copies of this. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Aug 25 17:31 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA28059 Fri, 25 Aug 2000 17:30:48 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA14051; Fri, 25 Aug 2000 14:39:35 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 13:06:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA12125 for fwtk-users-outgoing; Fri, 25 Aug 2000 13:06:11 -0700 (PDT) Message-Id: <4.2.2.20000825154956.00b0a5e0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Fri, 25 Aug 2000 15:52:14 -0400 To: "TJ O Connor" , "Fwtk Users 1" From: Rick Murphy Subject: Re: inetd.conf In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 672 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 02:21 PM 8/25/00 +0100, TJ O Connor wrote: [Twice. Hint: just send mail to fwtk-users@lists.nai.com, *OR* fwtk-users@ex.tis.com. They both go to the same list.] >Hi all >When i am finished configuring the net-permtable do >i uncomment telnet,ftp,finger,etc...... in the inetd.conf file That depends. Did you edit your inetd.conf to invoke the tn-gw rather than telnetd? Then you uncomment it. If you're running tn-gw as a daemon, then you don't want inetd to also be using the telnet port. The same goes for ftp, etc. -Rick From owner-fwtk-users@ex.tis.com Fri Aug 25 19:27 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA01659 Fri, 25 Aug 2000 19:27:20 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA15791; Fri, 25 Aug 2000 16:35:46 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 25 Aug 2000 15:02:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA14363 for fwtk-users-outgoing; Fri, 25 Aug 2000 15:02:38 -0700 (PDT) Message-ID: <039901c00ee1$202ceee0$120a0a0a@fox> From: "Victor Belei" To: Subject: fwtk and SunOS 8 Date: Fri, 25 Aug 2000 15:09:23 -0700 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="koi8-r" Content-Length: 247 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear All: Does anybody use fwtk on SunOS 8? Please share your experience. Thank you Victor Belei victor@belei.com From owner-fwtk-users@ex.tis.com Sat Aug 26 08:37 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA25289 Sat, 26 Aug 2000 08:37:56 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA19782; Sat, 26 Aug 2000 05:46:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 26 Aug 2000 04:02:38 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA18903 for fwtk-users-outgoing; Sat, 26 Aug 2000 04:02:17 -0700 (PDT) From: Eberhard Mattes Date: Sat, 26 Aug 2000 13:01:16 +0200 (MET DST) Message-Id: <200008261101.NAA06155@azu.informatik.uni-stuttgart.de> To: keller@bfg.com CC: fwtk-users@ex.tis.com In-reply-to: (message from Ted Keller on Sat, 12 Aug 2000 10:02:44 -0400 (EDT)) Subject: Re: net_flags[4] Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 994 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Ted Keller wrote: > I had the situation where a number of IIS 4.0 sites (but not all of them) > were not displaying behind my proxy server. In investigating this > situation, I noted that the TCP/IP session was never terminated with a the > trailing sequence. With HTTP/1.1, a transaction doesn't have to end with FIN. > Well, you ask, why don't clients that are connected to the internet > directly have this problem? They obey Content-Length. I think there are two solutions: - let the proxy send "Connection: Close" to the server - make sure that all data is sent to the client after processing all octets as indicated by Content-Length My squid-gw does both. Can you give some examples of URLs which show the problem, so that I can verify if this really helps? -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Sun Aug 27 09:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA13385 Sun, 27 Aug 2000 09:51:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA27380; Sun, 27 Aug 2000 06:59:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 27 Aug 2000 04:31:11 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA25345 for fwtk-users-outgoing; Sun, 27 Aug 2000 04:30:50 -0700 (PDT) Date: Sun, 27 Aug 2000 07:29:17 -0400 (EDT) From: Ted Keller To: Eberhard Mattes cc: fwtk-users@ex.tis.com Subject: Re: net_flags[4] In-Reply-To: <200008261101.NAA06155@azu.informatik.uni-stuttgart.de> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1513 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Sure www.rati.com support.dell.com www.nai.com It's been a while since I looked at the dumps... but I don't remember a content length in the data streams coming back. If memory server me correctly (and it's very early on a Sunday am which means it's quite fuzzy) I only saw content lengths listed in http 0.9 versions - not in the 1.0 or 1.1 versions. May be wrong here. Let me know what you find. tnx tek On Sat, 26 Aug 2000, Eberhard Mattes wrote: > Ted Keller wrote: > > > I had the situation where a number of IIS 4.0 sites (but not all of them) > > were not displaying behind my proxy server. In investigating this > > situation, I noted that the TCP/IP session was never terminated with a the > > trailing sequence. > > With HTTP/1.1, a transaction doesn't have to end with FIN. > > > Well, you ask, why don't clients that are connected to the internet > > directly have this problem? > > They obey Content-Length. > > I think there are two solutions: > > - let the proxy send "Connection: Close" to the server > > - make sure that all data is sent to the client after processing all > octets as indicated by Content-Length > > My squid-gw does both. Can you give some examples of URLs which show > the problem, so that I can verify if this really helps? > > -- > Eberhard Mattes > From owner-fwtk-users@ex.tis.com Sun Aug 27 09:51 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA13384 Sun, 27 Aug 2000 09:51:41 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA27384; Sun, 27 Aug 2000 06:59:24 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 27 Aug 2000 04:34:55 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA25390 for fwtk-users-outgoing; Sun, 27 Aug 2000 04:34:34 -0700 (PDT) Date: Sun, 27 Aug 2000 07:33:45 -0400 (EDT) From: Ted Keller To: Wes Szumera cc: fwtk-users@ex.tis.com Subject: Re: Problems with Ford 3270 access using plug-gw In-Reply-To: <200008241341.JAA25935@voyager.eagletrim.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2207 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Wes, The last time I tried this stuff - I noted that the applet was attempting to make direct connections to the remote site. In turning on the navigator debugging features, it complained about no route to host. Are you seeing similar things? ted keller On Thu, 24 Aug 2000, Wes Szumera wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Has anyone used plug-gw to allow access to ford motor companies > 3270 emulator? The tell me that the java app that I am downloading > from their web page will connect on port 4095 to web.3270.ford.com > > I set plug-gw to listen to port 4095 and plug to the ip > web.3270.ford.com . > > My hosts file resolves the name and points to internal interface on > firewall. > > They are using a product called OC Connect which is what chrysler > uses also. I got Chrysler to work fine with only a little head banging. > > Any help would be welcome. > > Wes > > > > > > > > > > > > > > > > Wes Szumera > > Plant Engineer > Eagle Trim Inc. > 0829 US 131 NW > Kalkaska, MI 49646-0460 > > voice 231 258 4150 ext 3024 > fax 231 258 4153 > From owner-fwtk-users@ex.tis.com Sun Aug 27 10:21 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA14418 Sun, 27 Aug 2000 10:21:16 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA27942; Sun, 27 Aug 2000 07:29:34 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 27 Aug 2000 06:06:15 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA26410 for fwtk-users-outgoing; Sun, 27 Aug 2000 06:05:54 -0700 (PDT) Message-Id: <200008270911.FAA02247@voyager.eagletrim.com> From: "Wes Szumera" Organization: Eagle Trim Inc. To: Ted Keller , fwtk-users@ex.tis.com Date: Sun, 27 Aug 2000 09:06:01 -0400 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Re: Problems with Ford 3270 access using plug-gw References: <200008241341.JAA25935@voyager.eagletrim.com> In-reply-to: X-mailer: Pegasus Mail for Win32 (v3.01d) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 3273 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I don't know how to turn on navigator debugging features but I do see that it is trying to make a direct connection to the ip of web.3270.ford.com . I run a netstat -a -n and catch it trying to establish the link. Other apps such as terra term will connect to my firewall if I type in web.3270.ford.com since the host file causes it to resolve the ip of my firewall which is what should be happing. If I telnet to my firewall on port 4095, the one ford wants me to have open, I see plug-gw launches and connects to the ford ip address:4095 so I am thinking they have hardwired the address in the applet. The guy I have been sending e-mail, forwarded my problem to someone higher up the ladder at ford. I was copied but haven't received a response yet. Thanks, Wes > Wes, > > The last time I tried this stuff - I noted that the applet was attempting > to make direct connections to the remote site. In turning on the > navigator debugging features, it complained about no route to host. Are > you seeing similar things? > > ted keller > > > On Thu, 24 Aug 2000, Wes Szumera wrote: > > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > Has anyone used plug-gw to allow access to ford motor companies > > 3270 emulator? The tell me that the java app that I am downloading > > from their web page will connect on port 4095 to web.3270.ford.com > > > > I set plug-gw to listen to port 4095 and plug to the ip > > web.3270.ford.com . > > > > My hosts file resolves the name and points to internal interface on > > firewall. > > > > They are using a product called OC Connect which is what chrysler > > uses also. I got Chrysler to work fine with only a little head banging. > > > > Any help would be welcome. > > > > Wes > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Wes Szumera > > > > Plant Engineer > > Eagle Trim Inc. > > 0829 US 131 NW > > Kalkaska, MI 49646-0460 > > > > voice 231 258 4150 ext 3024 > > fax 231 258 4153 > > Wes Szumera Plant Engineer Eagle Trim Inc. 0829 US 131 NW Kalkaska, MI 49646-0460 voice 231 258 4150 ext 3024 fax 231 258 4153 From owner-fwtk-users@ex.tis.com Mon Aug 28 10:13 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA18515 Mon, 28 Aug 2000 10:13:40 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA05477; Mon, 28 Aug 2000 07:21:27 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 04:49:28 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA04257 for fwtk-users-outgoing; Mon, 28 Aug 2000 04:49:18 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" Subject: plug-gw Date: Mon, 28 Aug 2000 12:50:03 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Importance: Normal Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 477 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all If i want to use pop3, what would be my entry in the inetd.conf file cheers TJ - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Mon Aug 28 12:19 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA18831 Mon, 28 Aug 2000 12:19:18 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA07736; Mon, 28 Aug 2000 09:27:26 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 07:56:10 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA05783 for fwtk-users-outgoing; Mon, 28 Aug 2000 07:55:49 -0700 (PDT) From: "Ken Long" Organization: Lectrosonics, Inc. To: "TJ O Connor" Date: Mon, 28 Aug 2000 08:54:43 -0600 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Re: plug-gw CC: fwtk-users@lists.nai.com Message-ID: <39AA28D0.4882.7BBCCC@localhost> In-reply-to: X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 689 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is what is in mine: # pop server to pick up the mail pop3 stream tcp nowait root /usr/local/etc/netacl ipop3d Ken On 28 Aug 2000, at 12:50, TJ O Connor wrote: > Hi all > > If i want to use pop3, what would be my entry in the inetd.conf file > > cheers > TJ > > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Mon Aug 28 13:05 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA18955 Mon, 28 Aug 2000 13:05:54 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA09069; Mon, 28 Aug 2000 10:14:12 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 08:52:30 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA06738 for fwtk-users-outgoing; Mon, 28 Aug 2000 08:52:19 -0700 (PDT) X-Authentication-Warning: proxy.hundert6.de: mail set sender to using -f Message-ID: <39AA8A90.768061B4@radio.hundert6.de> Date: Mon, 28 Aug 2000 17:51:44 +0200 From: Jan Muenther Organization: Radio Hundert,6 X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.0-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: "'fwtk-users@ex.tis.com'" Subject: whois Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 532 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello there, I am truly embarassed, but could anybody point me at how to get whois running with the plug-gw...?? I assume it runs on port 43... ;o)) All my trials so far were in vain... But still, when I get it running, how will clients on the internal net be able to use it... Don't you have to specify a proxy host then...? -- Radio HUNDERT,6 Medien GmbH Berlin - EDV - j.muenther@radio.hundert6.de From owner-fwtk-users@ex.tis.com Mon Aug 28 13:22 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA19046 Mon, 28 Aug 2000 13:22:20 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA09586; Mon, 28 Aug 2000 10:30:09 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 09:03:35 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA07003 for fwtk-users-outgoing; Mon, 28 Aug 2000 09:03:24 -0700 (PDT) Message-ID: From: Malcolm Tester To: fwtk-users@lists.nai.com Subject: RE: plug-gw Date: Mon, 28 Aug 2000 10:14:42 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1435 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, on this same topic, can anyone recommend a good (free) pop3 server? What I need is to be able to sit at a client on the inside, and pull pop3 mail from and send it to the outside world through the fw. The firewall itself would not be performing any mail activities. If I use plug-gw to plug it, would it be plug-to internal address for incoming mail and plug-to external machine for outgoing? Or some other way? Thanks, Malcolm -----Original Message----- From: Ken Long [mailto:ken@lectrosonics.com] Sent: Monday, August 28, 2000 8:55 AM To: TJ O Connor Cc: fwtk-users@lists.nai.com Subject: Re: plug-gw [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is what is in mine: # pop server to pick up the mail pop3 stream tcp nowait root /usr/local/etc/netacl ipop3d Ken On 28 Aug 2000, at 12:50, TJ O Connor wrote: > Hi all > > If i want to use pop3, what would be my entry in the inetd.conf file > > cheers > TJ > > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Mon Aug 28 14:17 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA19271 Mon, 28 Aug 2000 14:17:22 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA11206; Mon, 28 Aug 2000 11:25:37 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 10:01:23 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA08650 for fwtk-users-outgoing; Mon, 28 Aug 2000 10:01:13 -0700 (PDT) Message-ID: From: "MONIER Jean-Christophe (EURIWARE S.A.)" To: "'fwtk-users@ex.tis.com'" Subject: A modified plug-gw to support a many-to-many configuration Date: Mon, 28 Aug 2000 18:33:12 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 510 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi guys, I'm looking for a patch or modified plug-gw that can support a many-to-many configuration (the stock one only support many-to-one configuration). It's for doing a Lotus Notes replication proxy where the same server replicate through the proxy to 3 or 4 (more than 1 !) server. Does someone have that ? PS : Excuse my poor english language ... Jean-Christophe MONIER From owner-fwtk-users@ex.tis.com Mon Aug 28 19:24 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA19987 Mon, 28 Aug 2000 19:24:24 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA14739; Mon, 28 Aug 2000 16:32:22 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 28 Aug 2000 14:56:33 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA13534 for fwtk-users-outgoing; Mon, 28 Aug 2000 14:56:12 -0700 (PDT) Message-ID: <11384177.967499709328.JavaMail.imail@dotty.excite.com> Date: Mon, 28 Aug 2000 14:55:09 -0700 (PDT) From: "T. Esting" Reply-To: To: "MONIER Jean-Christophe (EURIWARE S.A.)" , "'fwtk-users@ex.tis.com'" Subject: Re: A modified plug-gw to support a many-to-many configuration Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-Mailer: Excite Inbox X-Sender-Ip: 63.73.213.5 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1801 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Jean-Christophe - plug-gw was not designed to support multiplexing in this fashion. Since it can't see inside the payload of a packet, it can only make routing decisions based on the stuff in layers 3 and 4. In the case of plug-gw, it most typically uses source IP and destination port, and sometimes destination IP (if you have the ipbind patch). In the case of Notes, what you may want to consider doing is setting up a passthru server on the "dirty" side of your firewall (and potentially a counterpart on the "clean" side) and then configure plug-gw to forward connections to it. Notes Passthru is an application-level proxy and can perform the multiplexing you require. There should be some notes in the FWTK FAQs and mailing list archives on some special considerations for setting up connection documents that support running Lotus through plug-gw. Good luck / bonne chance .... On Mon, 28 Aug 2000 18:33:12 +0200, MONIER Jean-Christophe (EURIWARE S.A.) wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi guys, > > I'm looking for a patch or modified plug-gw that can support a many-to-many > configuration (the stock one only support many-to-one configuration). It's > for doing a Lotus Notes replication proxy where the same server replicate > through the proxy to 3 or 4 (more than 1 !) server. Does someone have that ? > > PS : Excuse my poor english language ... > > Jean-Christophe MONIER > > > _______________________________________________________ Say Bye to Slow Internet! http://www.home.com/xinbox/signup.html From owner-fwtk-users@ex.tis.com Tue Aug 29 06:36 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA21584 Tue, 29 Aug 2000 06:36:30 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA19261; Tue, 29 Aug 2000 03:44:40 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 01:58:05 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA18032 for fwtk-users-outgoing; Tue, 29 Aug 2000 01:57:54 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" Subject: Ftp proxy Date: Tue, 29 Aug 2000 09:58:59 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 858 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all I seem to have a problem with ftp-proxy. When i ftp to my firewall from the outside it asks me for a username and then it asks me to enter an authentication password for toconnor. This is fine as it says "230 User authenticated to proxy" so now i am logged in to the proxy. Now when i try to connect to a pc within i get this message: 500 must be connected to remote server ftp: bind: Address already in use Does anyone know how to solve this cheers TJ - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Tue Aug 29 07:55 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA21753 Tue, 29 Aug 2000 07:55:07 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA20558; Tue, 29 Aug 2000 05:03:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 03:32:06 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA19024 for fwtk-users-outgoing; Tue, 29 Aug 2000 03:31:36 -0700 (PDT) Message-ID: <39AB8F64.42706D1A@mts.co.uk> Date: Tue, 29 Aug 2000 11:24:36 +0100 From: Derek Smith Organization: Millennium Travel Systems Ltd. X-Mailer: Mozilla 4.73 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Wes Szumera CC: Ted Keller , fwtk-users@ex.tis.com Subject: Re: Problems with Ford 3270 access using plug-gw References: <200008241341.JAA25935@voyager.eagletrim.com> <200008270911.FAA02247@voyager.eagletrim.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2973 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, I had a similar problem to this with a hotel booking system that ha the IP coded into the app - I ended up faking the IP as an extra interface on a local machine, and plugging the ports from there to my firewall - The extra hop didn't seem to slow it down too much. It may help, if you can't get any clues from ford. Cheers, Derek Wes Szumera wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I don't know how to turn on navigator debugging features but I do > see that it is trying to make a direct connection to the ip of > web.3270.ford.com . I run a netstat -a -n and catch it trying to > establish the link. > > Other apps such as terra term will connect to my firewall if I type in > web.3270.ford.com since the host file causes it to resolve the ip of > my firewall which is what should be happing. If I telnet to my firewall > on port 4095, the one ford wants me to have open, I see plug-gw > launches and connects to the ford ip address:4095 so I am thinking > they have hardwired the address in the applet. > > The guy I have been sending e-mail, forwarded my problem to > someone higher up the ladder at ford. I was copied but haven't > received a response yet. > > Thanks, > > Wes > > > Wes, > > > > The last time I tried this stuff - I noted that the applet was attempting > > to make direct connections to the remote site. In turning on the > > navigator debugging features, it complained about no route to host. Are > > you seeing similar things? > > > > ted keller > > > > > > On Thu, 24 Aug 2000, Wes Szumera wrote: > > > > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > > > BODY of a mail message to majordomo@ex.tis.com.] > > > > > > Has anyone used plug-gw to allow access to ford motor companies > > > 3270 emulator? The tell me that the java app that I am downloading > > > from their web page will connect on port 4095 to web.3270.ford.com > > > > > > I set plug-gw to listen to port 4095 and plug to the ip > > > web.3270.ford.com . > > > > > > My hosts file resolves the name and points to internal interface on > > > firewall. > > > > > > They are using a product called OC Connect which is what chrysler > > > uses also. I got Chrysler to work fine with only a little head banging. > > > > > > Any help would be welcome. > > > > > > Wes > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > Wes Szumera > > > > > > Plant Engineer > > > Eagle Trim Inc. > > > 0829 US 131 NW > > > Kalkaska, MI 49646-0460 > > > > > > voice 231 258 4150 ext 3024 > > > fax 231 258 4153 > > > > > Wes Szumera > > Plant Engineer > Eagle Trim Inc. > 0829 US 131 NW > Kalkaska, MI 49646-0460 > > voice 231 258 4150 ext 3024 > fax 231 258 4153 From owner-fwtk-users@ex.tis.com Tue Aug 29 11:45 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA22804 Tue, 29 Aug 2000 11:45:29 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA25341; Tue, 29 Aug 2000 08:53:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 06:37:16 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21700 for fwtk-users-outgoing; Tue, 29 Aug 2000 06:37:05 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" Subject: tn-gw Date: Tue, 29 Aug 2000 14:38:19 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 390 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Tue Aug 29 11:45 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA22807 Tue, 29 Aug 2000 11:45:42 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA25345; Tue, 29 Aug 2000 08:53:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 06:42:02 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA21788 for fwtk-users-outgoing; Tue, 29 Aug 2000 06:41:51 -0700 (PDT) From: "TJ O Connor" To: "Fwtk Users 1" Subject: tn-gw Date: Tue, 29 Aug 2000 14:43:07 +0100 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 933 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi again When i telnet to the firewall from outside i get the proxy prompt for username and password and i cant log in without any problems : Password: ########## Login Accepted but when i try to connect to an internal server from the firewall i get this message: tn-gw-> c xxx.xxx.xxx.xxx port 23 Not permitted to connect to xxx.xxx.xxx.xxx Also when i telnet to the firewall do i need include the port number the whole time? Is there any way around this? If anyone has a solution to these problems could they please e-mail me cheers TJ - -- _ T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 toconnor@comnitel.com \_/ Fax: +353 21 7305624 From owner-fwtk-users@ex.tis.com Tue Aug 29 14:53 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA23653 Tue, 29 Aug 2000 14:53:04 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA28348; Tue, 29 Aug 2000 12:01:52 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 10:25:14 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA26725 for fwtk-users-outgoing; Tue, 29 Aug 2000 10:24:53 -0700 (PDT) Date: Tue, 29 Aug 2000 13:22:39 -0400 (EDT) From: Ted Keller To: TJ O Connor cc: Fwtk Users 1 Subject: Re: tn-gw In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1279 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] TJ Verify that you allow xxx.xxx.xxx.xxx in your destinations on the tn-gw netperm-table line. ted keller On Tue, 29 Aug 2000, TJ O Connor wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi again > > When i telnet to the firewall from outside i get the proxy prompt for > username and password > and i cant log in without any problems : > > Password: ########## > Login Accepted > > but when i try to connect to an internal server from the firewall i get this > message: > > tn-gw-> c xxx.xxx.xxx.xxx port 23 > Not permitted to connect to xxx.xxx.xxx.xxx > > Also when i telnet to the firewall do i need include the port number the > whole time? Is there > any way around this? > > If anyone has a solution to these problems could they please e-mail me > > cheers > TJ > - -- _ > T.J.O'Connor _/ \_ 2200 Cork Airport Business Park, > SysAdmin / \_/ \ Kinsale Rd., Cork, Ireland. > Comnitel Technologies \_/ \_/ Ph: +353 21 7305620 > toconnor@comnitel.com \_/ Fax: +353 21 7305624 > From owner-fwtk-users@ex.tis.com Tue Aug 29 21:19 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA24735 Tue, 29 Aug 2000 21:18:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA01867; Tue, 29 Aug 2000 18:27:38 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 29 Aug 2000 16:42:12 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA00686 for fwtk-users-outgoing; Tue, 29 Aug 2000 16:41:52 -0700 (PDT) Message-Id: <4.2.2.20000829192005.00b3ddf0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Tue, 29 Aug 2000 19:23:56 -0400 To: "TJ O Connor" , "Fwtk Users 1" From: Rick Murphy Subject: Re: tn-gw In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 462 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 02:43 PM 8/29/00 +0100, TJ O Connor wrote: >Also when i telnet to the firewall do i need include the port number the >whole time? Is there >any way around this? By default, tn-gw will use the port it's listening on. If you let tn-gw listen on port 23, you don't have to specify a port number for the destination. -Rick From owner-fwtk-users@ex.tis.com Wed Aug 30 09:35 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA27012 Wed, 30 Aug 2000 09:35:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA06025; Wed, 30 Aug 2000 06:43:53 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 04:56:42 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA05004 for fwtk-users-outgoing; Wed, 30 Aug 2000 04:56:31 -0700 (PDT) 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Message-Id: <200008300318.UAA11852@noid.net> X-Mini-Diatribe: To fix America: 1. Cut Government in half 2. Wait thirty years 3. Repeat as necessary Date: Tue, 29 Aug 2000 20:18:13 -0700 From: Tor Perkins <967604325@noid.net> To: fwtk-users@ex.tis.com Subject: http-gw 'handoff' feature like in Guantlet v.3+ ? Mail-Followup-To: fwtk-users@ex.tis.com Mime-Version: 1.0 X-Mailer: Mutt 1.0i X-Operating-System: Linux 2.2.17pre19 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 671 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] It's my recollection that it was in Guantlet v.3 that netperm-table syntax like this was added: http-gw: handoff 127.0.0.1:3128 I do not remember the exact syntax... Anyway, it lets you chain proxies together. They do not necessarily need to be on localhost. It's my understanding that FWTK's http-gw can not do this. Am I right? And if so, is there a patch out there? Thanks! - Tor -- } __o } _(\<._ Tor Perkins Send me e-mail with subject "get } (_)/ (_) 967604538@noidDoTnet pgp key" for automatic response. From owner-fwtk-users@ex.tis.com Wed Aug 30 12:28 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA27644 Wed, 30 Aug 2000 12:28:43 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA08242; Wed, 30 Aug 2000 09:36:44 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 07:23:03 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA06433 for fwtk-users-outgoing; Wed, 30 Aug 2000 07:22:53 -0700 (PDT) Message-ID: <20000830142158.15010.qmail@web4107.mail.yahoo.com> Date: Wed, 30 Aug 2000 07:21:58 -0700 (PDT) From: J A Shamsi Subject: authsrv To: fwtk-users@ex.tis.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 542 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi all I have TIS FWTK running on redhat linux. I want to use authsrv. I have auth.h file and other related files but I don't have authsrv. Do I need to re build TIS fwtk or is there any other way around that I can build authsrv.. thankyou for earlieast reply jas __________________________________________________ Do You Yahoo!? Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Aug 30 13:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA27842 Wed, 30 Aug 2000 13:57:12 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA09878; Wed, 30 Aug 2000 11:05:03 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 09:36:08 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA08216 for fwtk-users-outgoing; Wed, 30 Aug 2000 09:35:57 -0700 (PDT) Message-ID: <20000830163434.5739.qmail@web4101.mail.yahoo.com> Date: Wed, 30 Aug 2000 09:34:34 -0700 (PDT) From: J A Shamsi Subject: authsrv To: fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 542 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi all I have TIS FWTK running on redhat linux. I want to use authsrv. I have auth.h file and other related files but I don't have authsrv. Do I need to re build TIS fwtk or is there any other way around that I can build authsrv.. thankyou for earlieast reply jas __________________________________________________ Do You Yahoo!? Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Aug 30 15:26 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA28152 Wed, 30 Aug 2000 15:26:23 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA12096; Wed, 30 Aug 2000 12:32:55 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 11:01:59 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA09799 for fwtk-users-outgoing; Wed, 30 Aug 2000 11:01:48 -0700 (PDT) Message-ID: From: Chris Thuet To: fwtk-users@ex.tis.com Subject: plug-gw on Linux Redhat Version 6.1 Date: Wed, 30 Aug 2000 13:11:32 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2232.9) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1104 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] All I am trying to move my firewall from FreeBSD to Redhat Linux Version 6.1. All the services for the Firewall Toolkit work except for the plug-gw. I set it up exactly like the FreeBSD system but it still gets denied. Example inetd.conf: weblogic stream tcp nowait root /usr/local/etc/plug-gw plug-gw weblogic services: weblogic 9764/tcp netperm-table: plug-gw: port weblogic permit-hosts 198.31.*.* -plug-to eagle.strata-group.com error: Aug 25 11:23:20 firewall plug-gw[2313]: deny host=unknown/198.31.118.248 service=weblogic Everything appears to be set up properly but everytime I use the plug-gw it fails with a denial of service. Does anyone have any ideas? Thanks for you help in advance. Christopher J. Thuet System Administrator Strata Group 314/770-9642 314/770-9699 fax cjt@strata-group.com From owner-fwtk-users@ex.tis.com Wed Aug 30 16:27 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA28325 Wed, 30 Aug 2000 16:27:35 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA14179; Wed, 30 Aug 2000 13:35:46 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 12:05:32 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA11202 for fwtk-users-outgoing; Wed, 30 Aug 2000 12:05:11 -0700 (PDT) Message-ID: From: Malcolm Tester To: Chris Thuet , fwtk-users@ex.tis.com Subject: RE: plug-gw on Linux Redhat Version 6.1 Date: Wed, 30 Aug 2000 13:16:25 -0600 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1884 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] In your inetd.conf, I think if you change it from: weblogic stream tcp nowait root /usr/local/etc/plug-gw plug-gw weblogic to: weblogic stream tcp nowait root /usr/local/etc/plug-gw weblogic weblogic it will stop denying. one of the FAQ's on the fwtk.org site discusses this. Regards, Malcolm -> -----Original Message----- -> From: Chris Thuet [mailto:cjt@strata-group.com] -> Sent: Wednesday, August 30, 2000 12:12 PM -> To: fwtk-users@ex.tis.com -> Subject: plug-gw on Linux Redhat Version 6.1 -> -> -> [To be removed from this list send the message "unsubscribe -> fwtk-users" in the -> BODY of a mail message to majordomo@ex.tis.com.] -> -> All -> -> I am trying to move my firewall from FreeBSD to Redhat -> Linux Version 6.1. -> All the services for the Firewall Toolkit work except for -> the plug-gw. I set -> it up exactly like the FreeBSD system but it still gets denied. -> -> Example -> -> inetd.conf: -> weblogic stream tcp nowait root -> /usr/local/etc/plug-gw plug-gw -> weblogic -> -> services: -> weblogic 9764/tcp -> -> netperm-table: -> plug-gw: port weblogic permit-hosts 198.31.*.* -plug-to -> eagle.strata-group.com -> -> error: -> Aug 25 11:23:20 firewall plug-gw[2313]: deny -> host=unknown/198.31.118.248 -> service=weblogic -> -> Everything appears to be set up properly but everytime I use -> the plug-gw it -> fails with a denial of service. Does anyone have any ideas? -> -> Thanks for you help in advance. -> -> -> Christopher J. Thuet -> System Administrator -> Strata Group -> 314/770-9642 -> 314/770-9699 fax -> cjt@strata-group.com -> From owner-fwtk-users@ex.tis.com Wed Aug 30 17:02 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA28425 Wed, 30 Aug 2000 17:02:58 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA15548; Wed, 30 Aug 2000 14:11:30 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 12:50:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA12429 for fwtk-users-outgoing; Wed, 30 Aug 2000 12:50:26 -0700 (PDT) Message-ID: <20000830194903.20263.qmail@web4105.mail.yahoo.com> Date: Wed, 30 Aug 2000 12:49:03 -0700 (PDT) From: J A Shamsi Subject: authsrv To: fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 506 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] HI I am trying to build authsrv for TIS FWTK and in /auth directory after typing 'make' I am getting the message that make *** No amke rule to make target '../libfwall.a' needed by 'authmgr' .Stop any idea abt prob?? pls jas __________________________________________________ Do You Yahoo!? Yahoo! Mail - Free email you can access from anywhere! http://mail.yahoo.com/ From owner-fwtk-users@ex.tis.com Wed Aug 30 17:03 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA28430 Wed, 30 Aug 2000 17:03:06 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA15543; Wed, 30 Aug 2000 14:11:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 12:51:45 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA12464 for fwtk-users-outgoing; Wed, 30 Aug 2000 12:51:24 -0700 (PDT) From: Eberhard Mattes Date: Wed, 30 Aug 2000 21:50:46 +0200 (MET DST) Message-Id: <200008301950.VAA05064@azu.informatik.uni-stuttgart.de> To: keller@bfg.com CC: fwtk-users@ex.tis.com In-reply-to: (message from Ted Keller on Sun, 27 Aug 2000 07:29:17 -0400 (EDT)) Subject: Re: net_flags[4] Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 323 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Ted Keller wrote: > www.rati.com > support.dell.com > www.nai.com These seem to work with squid-gw and Squid. -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Wed Aug 30 17:09 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id RAA28453 Wed, 30 Aug 2000 17:09:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id OAA15869; Wed, 30 Aug 2000 14:17:50 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 13:01:37 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA12835 for fwtk-users-outgoing; Wed, 30 Aug 2000 13:01:16 -0700 (PDT) Mime-Version: 1.0 X-Sender: farone@mail.gvillesun.com Message-Id: In-Reply-To: References: Date: Wed, 30 Aug 2000 15:55:48 -0400 To: Chris Thuet From: Mark C Farone Subject: Re: plug-gw on Linux Redhat Version 6.1 Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 1115 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 1:11 PM -0500 8/30/00, Chris Thuet wrote: > I am trying to move my firewall from FreeBSD to Redhat Linux Version 6.1. >All the services for the Firewall Toolkit work except for the plug-gw. I set >it up exactly like the FreeBSD system but it still gets denied. > >Example > >inetd.conf: >weblogic stream tcp nowait root /usr/local/etc/plug-gw plug-gw >weblogic > >services: >weblogic 9764/tcp > >netperm-table: >plug-gw: port weblogic permit-hosts 198.31.*.* -plug-to >eagle.strata-group.com If you're using v2.1 of the toolkit, here's the syntax which works for me: plug-gw: port weblogic 198.31.*.* -plug-to eagle.strata-group.com although, on occasion, I've had some redhat machines have problems with resolving service numbers and resort to a line like this: plug-gw: port 9764 198.31.*.* -plug-to eagle.strata-group.com Best, Mark -- Mark C. Farone In the future, Systems Analyst, Gainesville Sun everything will work. From owner-fwtk-users@ex.tis.com Thu Aug 31 01:20 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id BAA29673 Thu, 31 Aug 2000 01:20:02 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id WAA25162; Wed, 30 Aug 2000 22:28:28 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 30 Aug 2000 20:27:29 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA23751 for fwtk-users-outgoing; Wed, 30 Aug 2000 20:27:18 -0700 (PDT) Message-ID: <39ADD192.C7C28BE8@starwon.com.au> Date: Thu, 31 Aug 2000 11:31:30 +0800 From: Laurence Moore X-Mailer: Mozilla 4.7 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@ex.tis.com Subject: [Fwd: Re: plug-gw on Linux Redhat Version 6.1] Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1282 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi Chris, Here is my suggestion. It is based upon FWTK-V2.1 and RH6.0 whereby I permit vnc through using plug-gw. I have rewritten my entries for your weblogic service. In /etc/inetd.conf replace your service line with this; weblogic: stream tcp nowait root /usr/local/etc/netacl weblogic In /usr/local/etc/netperm-table; Add: netacl-weblogic: permit-hosts 198.31.*.* -exec /usr/local/etc/plug-gw weblogic Remove: plug-gw: port weblogic permit-hosts 198.31.*.* -plug-to eagle.strata-group.com Add after "rlogin-gw" entry: weblogic: permit-hosts 198.31.*.* weblogic: permit-service weblogic weblogic: timeout 600 weblogic: port weblogic 198.31.*.* -plug-to eagle.strata-group.com The key here is the "permit-service" entry. It took me a while to figure this one out. If someone can point me to where it is documented I would be pleased to know as I could not find it in the FAQ or any other doucmentation on-line. I ended up looking at the source to determine this option that is required for plug-gw, at least for users specific services. Don't forget to send inetd signal 1 i.e. killall -1 inetd before testing. Cheers, and good luck, Larry. From owner-fwtk-users@ex.tis.com Thu Aug 31 05:46 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA00493 Thu, 31 Aug 2000 05:46:24 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA27615; Thu, 31 Aug 2000 02:54:37 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 01:19:48 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA26573 for fwtk-users-outgoing; Thu, 31 Aug 2000 01:19:18 -0700 (PDT) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <200008301950.VAA05064@azu.informatik.uni-stuttgart.de> Date: Thu, 31 Aug 2000 09:18:18 +0100 (BST) From: Tony Gale To: Eberhard Mattes Subject: Re: net_flags[4] Cc: fwtk-users@ex.tis.com, keller@bfg.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 657 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 30-Aug-2000 Eberhard Mattes wrote: > > Ted Keller wrote: > >> www.rati.com >> support.dell.com >> www.nai.com > > These seem to work with squid-gw and Squid. > And they work for me with http-gw -tony --- E-Mail: Tony Gale There is hopeful symbolism in the fact that flags do not wave in a vacuum. -- Arthur C. Clarke The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Thu Aug 31 09:15 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA01069 Thu, 31 Aug 2000 09:15:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA00330; Thu, 31 Aug 2000 06:23:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 04:43:51 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA28689 for fwtk-users-outgoing; Thu, 31 Aug 2000 04:43:21 -0700 (PDT) Message-Id: <4.2.2.20000830212535.00b0fa70@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Pro Version 4.2.2 Date: Wed, 30 Aug 2000 21:27:21 -0400 To: J A Shamsi , fwtk-users@lists.nai.com From: Rick Murphy Subject: Re: authsrv In-Reply-To: <20000830194903.20263.qmail@web4105.mail.yahoo.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 686 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 12:49 PM 8/30/00 -0700, J A Shamsi wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >HI >I am trying to build authsrv for TIS FWTK >and in /auth directory after typing > 'make' > >I am getting the message that > >make *** No amke rule to make target '../libfwall.a' >needed by 'authmgr' .Stop Start "make" from the toplevel directory, which will build all of the FWTK. You can also "make" in the fwtk/lib directory, then fwtk/auth. -Rick From owner-fwtk-users@ex.tis.com Thu Aug 31 09:15 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA01068 Thu, 31 Aug 2000 09:15:32 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA00334; Thu, 31 Aug 2000 06:23:11 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 04:48:22 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA28737 for fwtk-users-outgoing; Thu, 31 Aug 2000 04:47:21 -0700 (PDT) From: ark@eltex.ru Date: Thu, 31 Aug 2000 14:30:17 +0400 Message-Id: <200008311030.OAA14319@paranoid.alpha.int> In-Reply-To: from "Chris Thuet " Organization: "Klingon Imperial Intelligence Service" Subject: Re: plug-gw on Linux Redhat Version 6.1 To: cjt@strata-group.com Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1046 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] -----BEGIN PGP SIGNED MESSAGE----- nuqneH, Chris Thuet said : > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > All > > I am trying to move my firewall from FreeBSD to Redhat Linux Version 6.1. What for?! _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.1i iQCVAwUBOa4zuaH/mIJW9LeBAQHThgQAn8hSHxT4nxi6zLrRa2rc7ZDWb8dcbRsm 3v20LWHo5hrxBVXhAJyyZY1djV/LAIvkO6wAGzHnyH9KptP54lXt9KGx45XSGTFH uliRaQhZYIVeivKjui7K27zmuYOK7GOfejfZ7sVyuZGlkPu8bgBjUvGOOw4UN1bK 6jmbAubj+Lc= =c0CN -----END PGP SIGNATURE----- From owner-fwtk-users@ex.tis.com Thu Aug 31 14:58 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA02211 Thu, 31 Aug 2000 14:58:27 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA29459; Thu, 31 Aug 2000 12:06:44 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 09:46:22 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA19112 for fwtk-users-outgoing; Thu, 31 Aug 2000 09:46:11 -0700 (PDT) Message-ID: <39AE8BA6.252CD094@lclcan.com> Date: Thu, 31 Aug 2000 12:45:26 -0400 From: Don X-Mailer: Mozilla 4.75 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: test Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/html; charset=us-ascii Content-Length: 219 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Newbie test From owner-fwtk-users@ex.tis.com Thu Aug 31 18:57 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA02644 Thu, 31 Aug 2000 18:57:45 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA21804; Thu, 31 Aug 2000 16:06:07 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 14:28:58 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA13271 for fwtk-users-outgoing; Thu, 31 Aug 2000 14:28:48 -0700 (PDT) Date: Thu, 31 Aug 2000 23:24:04 +0200 (CEST) From: Leandro Gelasi To: fwtk-users@ex.tis.com Subject: Ftp'ing from outside to inside via Netscape Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 978 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I am using FWTk 2.1 and all works fine. Now I would like to set up a link on my web server that point to our anonymous ftp server. The anon ftp server is into the dmz and it's correctly reachable (from outside) using a ftp client this way : ftp firewall.myrealdomain.it user ftp@anonserver password email@emailsrv.domain There is an URL that permit to connect to the server from the outside? I tried ftp://ftp@anonserver:email@emailsrv.domain@firewall.myrealdomain.it following the ftp://user:password@server.domain syntax but it didn't worked. Any hints? TIA LG ********************************************************************* Leandro Gelasi V year Computer Science Engineering student at Siena University gelasi@interfree.it Gilles Villeneuve will live forever ********************************************************************* From owner-fwtk-users@ex.tis.com Thu Aug 31 18:58 EDT 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA02647 Thu, 31 Aug 2000 18:58:08 -0400 (EDT) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA21813; Thu, 31 Aug 2000 16:06:14 -0700 (PDT) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 31 Aug 2000 14:33:36 -0700 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA13421 for fwtk-users-outgoing; Thu, 31 Aug 2000 14:33:16 -0700 (PDT) Date: Thu, 31 Aug 2000 17:32:11 -0400 From: Joseph S D Yao To: Don Cc: fwtk-users@lists.nai.com Subject: Re: test Message-Id: <20000831173211.S21909@washington.cospo.osis.gov> Mail-Followup-To: Don , fwtk-users@lists.nai.com References: <39AE8BA6.252CD094@lclcan.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <39AE8BA6.252CD094@lclcan.com>; from don@lclcan.com on Thu, Aug 31, 2000 at 12:45:26PM -0400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 467 Status: RO [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, Aug 31, 2000 at 12:45:26PM -0400, Don wrote: Bad test. Nothing in it but some HTML. ;-( -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies.