From owner-fwtk-users@ex.tis.com Fri Dec 1 00:17 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA22720 Fri, 1 Dec 2000 00:17:10 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id VAA15976; Thu, 30 Nov 2000 21:16:09 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 30 Nov 2000 19:43:25 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id TAA10198 for fwtk-users-outgoing; Thu, 30 Nov 2000 19:43:14 -0800 (PST) Date: Fri, 1 Dec 2000 05:41:57 +0200 (EET) From: Yaroslav Gaskevich X-Sender: yarik@sleipnir.carrier.kiev.ua To: fwtk-users@lists.nai.com Subject: http auth Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 582 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello! I'm using fwtk version 2.1 and want to authenticate users, who try to make http-connections from local network to remote servers. http-gw is running on port 3129. When there is no authentication rules, everything is ok, http-gw is working as proxy. But when the following configuration line is used, local client gets no content. (netperm-table) <--- http-gw: permit-hosts * -authall ---> Any help will be appreciated. -- Yarik From owner-fwtk-users@ex.tis.com Fri Dec 1 00:44 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id AAA22796 Fri, 1 Dec 2000 00:44:13 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id VAA17104; Thu, 30 Nov 2000 21:42:54 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 30 Nov 2000 20:27:52 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id UAA13717 for fwtk-users-outgoing; Thu, 30 Nov 2000 20:27:10 -0800 (PST) Message-Id: <5.0.2.1.0.20001130230939.01d18260@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Thu, 30 Nov 2000 23:11:32 -0500 To: Tony Gale , Ross Bergman From: Rick Murphy Subject: RE: http://www.fwtk.org/fwtk/faq/faq.html#2.4.5 Cc: fwtk-users@ex.tis.com, support@netscape.com In-Reply-To: References: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 715 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 10:33 AM 11/30/00 +0000, Tony Gale wrote: >Ouch. This is gonna hurt. > >www.boston.com is running Netscape-Enterprise/3.6 SP3 > >It is possibly the most broken server I've ever seen. If it doesn't >receive the GET request and a Host header in the *same packet* it >will simply reset the connection. I've actually seen systems like this in the past where they really weren't a web server, they were a shell script or perl program that tried to emulate one. Anything that's as broken as Tony describes isn't going to work with http-gw as it's currently designed. -Rick From owner-fwtk-users@ex.tis.com Fri Dec 1 09:25 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA24183 Fri, 1 Dec 2000 09:25:46 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA18847; Fri, 1 Dec 2000 06:25:03 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 04:48:35 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA10320 for fwtk-users-outgoing; Fri, 1 Dec 2000 04:48:24 -0800 (PST) Message-Id: <4.3.2.7.1.20001201132200.00de7c30@pophost> X-Sender: ohe4pop3@pophost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Fri, 01 Dec 2000 13:38:45 +0100 To: fwtk-users@ex.tis.com From: Olivier Hislaire Subject: Problem using nntp-gw Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1578 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I added the nntp-gw subdirectory to the fwtk tree, compiled and installed it without any trouble. The trouble starts when I try to use it: Dec 1 12:42:34 skimmer nntp-gw[951]: Starting daemon mode on port 119 Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 Dec 1 12:42:59 skimmer nntp-gw[956]: permit host=charlie.be.msg-i.com/192.168.32.194 use of gateway Dec 1 12:43:00 skimmer nntp-gw[956]: command: MODE READER Dec 1 12:43:00 skimmer nntp-gw[956]: Assertion failed: f != NULL, file emo.c, line 176 Would anybody know about what it means ? accordingly to fwtk/libem/emo.c, 'f' seems to be a file descriptor, may be the connection to the server Since, I've checked that the server was available (telnet on port 119). Any idea or advice appreciated. Olivier. ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire@msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------ From owner-fwtk-users@ex.tis.com Fri Dec 1 09:25 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA24186 Fri, 1 Dec 2000 09:25:49 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA18841; Fri, 1 Dec 2000 06:24:55 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 04:55:06 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA10606 for fwtk-users-outgoing; Fri, 1 Dec 2000 04:54:02 -0800 (PST) Message-ID: <20001130223358.5003.qmail@ww156.netaddress.usa.net> Date: 30 Nov 00 16:33:57 CST From: Rogelio Bazan Reyes To: Adrian Florea Subject: Re: [fwtk & Red Hat Linux] CC: fwtk-users@ex.tis.com X-Mailer: USANET web-mailer (34WB1.4.03) Mime-Version: 1.0 Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by relay2.nai.com id OAA12313 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 903 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Adrian Florea wrote: [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I'm a begginer in network administration and I want to ask about how is fwtk working under Linux. I'm currently using IP-Masquerading and tools like IP-Chains for firewalling for 2 subnetworks. Thanks, Adi -------------------------------------------------------- Hi Adrian, i'm a network administrator and i'm working with the tis firewall toolkit, and everything is perfect, never we have received an crackers in the subnet ____________________________________________________________________ Get your own FREE, personal Netscape WebMail account today at http://home.netscape.com/webmail From owner-fwtk-users@ex.tis.com Fri Dec 1 09:25 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA24192 Fri, 1 Dec 2000 09:25:57 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA18893; Fri, 1 Dec 2000 06:25:14 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 05:11:12 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA11691 for fwtk-users-outgoing; Fri, 1 Dec 2000 05:10:50 -0800 (PST) From: ark@eltex.ru Date: Fri, 1 Dec 2000 16:25:48 +0300 Message-Id: <200012011325.QAA05888@paranoid.alpha.int> In-Reply-To: from ""Luis Fernando Barrera" " Organization: "Klingon Imperial Intelligence Service" Subject: RE: smap: spam-block To: luba@assist.com.gt Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1362 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] -----BEGIN PGP SIGNED MESSAGE----- nuqneH, First it contains fwtk code with copyrights removed (sic!) which i consider extremely unethical. Second it looks much better for outside view than from inside. It contains some code like Dante i'd never put on my firewall. "Luis Fernando Barrera" said : > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Once I've got into the T-Rex firewall site and it seems > this firewall is from the "new school". > It has a lot of features and it seems well documented. > > Does anyone has try it? _ _ _ _ _ _ _ {::} {::} {::} CU in Hell _| o |_ | | _|| | / _||_| |_ |_ |_ (##) (##) (##) /Arkan#iD |_ o _||_| _||_| / _| | o |_||_||_| [||] [||] [||] Do i believe in Bible? Hell,man,i've seen one! -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.1i iQCVAwUBOiem26H/mIJW9LeBAQF87QQApx9+8wxV3bBoDfdhJgkH3+Ep7VjV5lwB ihiuZxygzj04pYmhydRkDZIfHb6jEvK1mtZR++yaIGXHg/0aGaycyyn2JS44wqKL zoHw43mRIo21L3XZiC3s4ILGLJ8Ip2KwL8YDwmY2Sv/Q/KdjDGQxygxhquqe3zbw S1b0wVYyy+0= =3aND -----END PGP SIGNATURE----- From owner-fwtk-users@ex.tis.com Fri Dec 1 09:26 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA24197 Fri, 1 Dec 2000 09:26:06 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA18855; Fri, 1 Dec 2000 06:25:03 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 04:55:05 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA10607 for fwtk-users-outgoing; Fri, 1 Dec 2000 04:54:02 -0800 (PST) From: David Lang To: Tony Gale Cc: Adrian Florea , fwtk-users@ex.tis.com Date: Thu, 30 Nov 2000 15:04:07 -0800 (PST) Subject: RE: fwtk & Red Hat Linux In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1682 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] If you are going to be running a LOT of proxies seriously look at the 2.4 kernel. I just implemented a firewall running >1200 plug-gw proxies (don't ask) and saw a very dramatic performace improvement moving from 2.2.17 to 2.4.0-test11 David Lang On Thu, 30 Nov 2000, Tony Gale wrote: > Date: Thu, 30 Nov 2000 08:59:05 -0000 (GMT) > From: Tony Gale > To: Adrian Florea > Cc: fwtk-users@ex.tis.com > Subject: RE: fwtk & Red Hat Linux > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > > It works fine - check the FAQ at www.fwtk.org and apply the patches > that are on there. > > -tony > > > > On 30-Nov-2000 Adrian Florea wrote: > > [To be removed from this list send the message "unsubscribe > > fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > > > > > Hello, > > > > I'm a begginer in network administration and I want to ask about > > how is > > fwtk working under Linux. I'm currently using IP-Masquerading and > > tools > > like IP-Chains for firewalling for 2 subnetworks. > > > > > > > > Thanks, > > > > Adi > > --- > E-Mail: Tony Gale > Nothing is so firmly believed as that which we least know. > -- Michel de Montaigne > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > From owner-fwtk-users@ex.tis.com Fri Dec 1 12:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA24882 Fri, 1 Dec 2000 12:06:23 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA11813; Fri, 1 Dec 2000 09:05:12 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 07:35:10 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA28512 for fwtk-users-outgoing; Fri, 1 Dec 2000 07:34:49 -0800 (PST) Message-ID: <3A27C582.40BDD6D8@v-one.com> Date: Fri, 01 Dec 2000 10:36:34 -0500 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Yaroslav Gaskevich CC: fwtk-users@lists.nai.com Subject: Re: http auth References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 647 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Yaroslav Gaskevich wrote: > > I'm using fwtk version 2.1 and want to authenticate users, who try to make > http-connections from local network to remote servers. > http-gw is running on port 3129. > > When there is no authentication rules, everything is ok, http-gw is > working as proxy. Yarik, Actually, http-gw doesn't allow for authentication. See the FAQ for more info: http://www.fwtk.org/fwtk/faq/faq.html#2.4.3 -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Fri Dec 1 12:15 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA24900 Fri, 1 Dec 2000 12:15:03 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA13254; Fri, 1 Dec 2000 09:14:02 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 07:57:28 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA01938 for fwtk-users-outgoing; Fri, 1 Dec 2000 07:57:07 -0800 (PST) Date: Fri, 1 Dec 2000 17:50:51 +0200 (EET) From: Yaroslav Gaskevich X-Sender: yarik@sleipnir.carrier.kiev.ua To: Keith Young cc: fwtk-users@lists.nai.com Subject: Re: http auth In-Reply-To: <3A27C582.40BDD6D8@v-one.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 675 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Fri, 1 Dec 2000, Keith Young wrote: > > I'm using fwtk version 2.1 and want to authenticate users, who try to make > > http-connections from local network to remote servers. > > http-gw is running on port 3129. > > > > When there is no authentication rules, everything is ok, http-gw is > > working as proxy. > > > Yarik, > > Actually, http-gw doesn't allow for authentication. > > See the FAQ for more info: > http://www.fwtk.org/fwtk/faq/faq.html#2.4.3 I'm sorry for the lameness, already found it myself. Thanks! -- Yarik From owner-fwtk-users@ex.tis.com Fri Dec 1 15:41 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA25757 Fri, 1 Dec 2000 15:41:09 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA13654; Fri, 1 Dec 2000 12:40:26 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 10:31:53 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA26651 for fwtk-users-outgoing; Fri, 1 Dec 2000 10:31:32 -0800 (PST) Message-ID: <20001201183147.15052.qmail@web1803.mail.yahoo.com> Date: Fri, 1 Dec 2000 10:31:47 -0800 (PST) From: Naresh Narang Subject: Re: Problem using nntp-gw To: Olivier Hislaire Cc: fwtk-users@ex.tis.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2131 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I used plug-gw with auth for this. NKN --- Olivier Hislaire wrote: > [To be removed from this list send the message > "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hi, > > I added the nntp-gw subdirectory to the fwtk tree, > compiled and installed > it without any trouble. The trouble starts when I > try to use it: > > Dec 1 12:42:34 skimmer nntp-gw[951]: Starting daemon > mode on port 119 > Dec 1 12:42:59 skimmer kernel: SCSLog: connect - > Name: nntp-gw | UID: 9 | > EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 > Dec 1 12:42:59 skimmer kernel: SCSLog: connect - > Name: nntp-gw | UID: 9 | > EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 > Dec 1 12:42:59 skimmer nntp-gw[956]: permit > host=charlie.be.msg-i.com/192.168.32.194 use of > gateway > Dec 1 12:43:00 skimmer nntp-gw[956]: command: MODE > READER > Dec 1 12:43:00 skimmer nntp-gw[956]: Assertion > failed: f != NULL, file > emo.c, line 176 > > Would anybody know about what it means ? accordingly > to fwtk/libem/emo.c, > 'f' seems to be a file descriptor, may be the > connection to the server > Since, I've checked that the server was available > (telnet on port 119). > > Any idea or advice appreciated. > > Olivier. > ------------------------------------------------------------------------------------------------ > Olivier Hislaire > > MSG International Email: > O.Hislaire@msg-i.com > 97 Avenue de Tervuren Phone: +32 (0)2 > 735.91.59 Ext. 55 > 1040 Brussels Fax: +32 > (0)2 732.12.19 > Belgium > http://www.msg-i.com > ------------------------------------------------------------------------------------------------ > > > ===== -- Naresh __________________________________________________ Do You Yahoo!? Yahoo! Shopping - Thousands of Stores. Millions of Products. http://shopping.yahoo.com/ From owner-fwtk-users@ex.tis.com Fri Dec 1 18:27 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA26178 Fri, 1 Dec 2000 18:27:45 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA14611; Fri, 1 Dec 2000 15:27:01 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 1 Dec 2000 13:44:23 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA22527 for fwtk-users-outgoing; Fri, 1 Dec 2000 13:44:12 -0800 (PST) From: "Ken Long" Organization: Lectrosonics, Inc. To: fwtk-users@ex.tis.com Date: Fri, 1 Dec 2000 14:43:20 -0700 MIME-Version: 1.0 Content-transfer-encoding: 7BIT Subject: Re: smap: spam-block Message-ID: <3A27B907.14994.1B30D8A@localhost> In-reply-to: <200011291612.JAA04884@lectrosonics.com> References: <3A228A6F.29432.D392BC@localhost> X-mailer: Pegasus Mail for Win32 (v3.12c) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=US-ASCII Content-Length: 901 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Spam-block is working here now. Here's what was done to fix it. 1. PROTECTINBOUND had to be defined in the make file and smap recompiled. 3. Need wildcards before and after: smap: spam-block deny *klong@compuserve.com* *kenny@lectrosonics.com* There is something about brackets <> around the address that comes into play here. I was tipped off to this when I used telnet to test it and was properly blocked when I forgot to enclose the MAIL FROM: address in brackets but allowed when I used them. The fix was to wildcard everything. Ken Long ken@lectrosonics.com Lectrosonics, Inc. Rio Rancho, NM - USA On 29 Nov 2000, at 9:12, Ken Long wrote: > Ok, is anyone using spam-block successfully? I'm beginning to wonder if this > feature is working at all. From owner-fwtk-users@ex.tis.com Sat Dec 2 16:12 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA28541 Sat, 2 Dec 2000 16:12:21 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA16649; Sat, 2 Dec 2000 12:57:57 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Sat, 2 Dec 2000 10:40:59 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAB14057 for fwtk-users-outgoing; Sat, 2 Dec 2000 10:40:38 -0800 (PST) Date: Sat, 2 Dec 2000 13:39:04 -0500 (EST) From: Ted Keller To: Ken Long cc: fwtk-users@ex.tis.com Subject: Re: smap: spam-block In-Reply-To: <200011291612.JAA04884@lectrosonics.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 2191 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Ken, I've developed independently a version of spam blocking that parrallels they Yao patches. It is not the same - but it does work. It, in addition, also has content spam checking and blocks accordingly. The code now looks in the message headers for matches agains the from, to, subject lines as well as the first 10 lines of the message text. If you desire, I can make this availble to you. ted keller On Wed, 29 Nov 2000, Ken Long wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Ok, is anyone using spam-block successfully? I'm beginning to wonder if this > feature is working at all. > > (BTW, this list has really dropped in volume. What's everyone using these > days? Netfilter?) > > Ken > > On 27 Nov 00, at 16:23, Ken Long wrote: > > > I added this to the Makefile > > > > CFLAGS= -I.. $(COPT) -DPROTECTINBOUND > > > > but smap still isn't blocking defined addresses. They just sail on through > > like a knife through butter! > > > > The output of the make command was: > > > > lectro7:/usr/src/fwtk/smap# make > > cc -I.. -g -DLINUX -DPROTECTINBOUND -c smap.c -o smap.o > > cc -I.. -g -DLINUX -DPROTECTINBOUND -c arpadate.c -o arpadate.o > > cc -g -static -o smap smap.o arpadate.o ../libfwall.a > > > > I can post my entire netperm-table if necessary. > > > > Thanks, > > Ken > > > > On 22 Nov 2000, at 21:43, Rick Murphy wrote: > > > > > At 04:36 PM 11/22/00 -0700, Ken Long wrote: > > > >I'm trying to get the spam-block option working. I'm using smap 2.1 with the > > > >Yao patches (V2.1/2.1+anti-relay+anti-spam). > > > > > > Make sure you compile smap with PROTECTINBOUND defined; otherwise, > > > spam-block doesn't do anything. It's not defined in the default source. > > > > > > The form of the block entry is your second example: > > > smap: spam-block deny sender@outside.address.org recipient@inside.address.com > > > > > > I've never used 'spam-block', however, so good luck :-) > > > -Rick > From owner-fwtk-users@ex.tis.com Sun Dec 3 06:53 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA29706 Sun, 3 Dec 2000 06:53:15 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA28777; Sun, 3 Dec 2000 03:52:35 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 3 Dec 2000 02:17:03 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA27463 for fwtk-users-outgoing; Sun, 3 Dec 2000 02:16:53 -0800 (PST) From: Andreas Priebe Message-Id: <200012031013.LAA10753@dimon.promos-consult.de> Subject: ftp-gw: 501 User name too large To: fwtk-users@ex.tis.com Date: Sun, 3 Dec 2000 11:13:17 +0100 (CET) X-Mailer: ELM [version 2.4ME+ PL66 (25)] Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1015 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, when connecting to my ftp-gw and giving a (not so) long destination, e.g. to machines in sus-sub-domains I get the "501 User name too large": Name (zerberus:priebe): ftp@server.denver.ibm.com 501 User name too large Login failed. ftp> The message obviously comes from a simple check in cmd_authorize() in ftp-gw/ftp-gw.c in line 771 (note: i have the enhanced PASV support - so yours may vary): if(strlen(av[1]) > 24) return(sayn(0,nbad,sizeof(nbad)-1)); Any chance to increase this without breaking others thinks or standards? TIA Andreas -- **************************************************************************** * Andreas Priebe E-Mail: Andreas.Priebe@promos-consult.de * * Promos consult GmbH & Co KG Tel/FAX: 030 243 117 -13 / -29 * **************************************************************************** From owner-fwtk-users@ex.tis.com Sun Dec 3 09:34 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA29914 Sun, 3 Dec 2000 09:34:05 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA01511; Sun, 3 Dec 2000 06:33:33 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 3 Dec 2000 05:07:05 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA29724 for fwtk-users-outgoing; Sun, 3 Dec 2000 05:06:54 -0800 (PST) From: Andreas Priebe Message-Id: <200012031304.OAA12255@dimon.promos-consult.de> Subject: Problem with data-port in enhanced pasv support To: fwtk-users@ex.tis.com Date: Sun, 3 Dec 2000 14:04:02 +0100 (CET) X-Mailer: ELM [version 2.4ME+ PL66 (25)] Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 1073 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, I have the ftp-gw with enhanced pasv support (cf. http://www.fwtk.org/fwtk/patches/patches.html#2.11). The problem comes, when I use the data-port diretive, e.g. ftp-gw: pasv true -portonly ftp-gw: data-port 62345 this makes a fwtksyserr: bind failed: Address already in use in the logs and tries a different source port. This failes due to my filter settings. For now I can of course allow any connections initiated on the firewall from higher ports to external higher ports. But this isn't the idea of a more secure featrue :-) Anybody with similiar problems for the enhanced pasv support? TIA, Andreas -- **************************************************************************** * Andreas Priebe E-Mail: Andreas.Priebe@promos-consult.de * * Promos consult GmbH & Co KG Tel/FAX: 030 243 117 -13 / -29 * **************************************************************************** From owner-fwtk-users@ex.tis.com Mon Dec 4 10:50 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA03265 Mon, 4 Dec 2000 10:50:41 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA02462; Mon, 4 Dec 2000 07:49:29 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Dec 2000 05:32:53 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA16412 for fwtk-users-outgoing; Mon, 4 Dec 2000 05:32:23 -0800 (PST) Message-Id: <5.0.2.1.0.20001203091203.01d13ec0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Sun, 03 Dec 2000 09:17:15 -0500 To: Andreas Priebe , fwtk-users@ex.tis.com From: Rick Murphy Subject: Re: ftp-gw: 501 User name too large In-Reply-To: <200012031013.LAA10753@dimon.promos-consult.de> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 875 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 11:13 AM 12/3/00 +0100, Andreas Priebe wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >Hi, > >when connecting to my ftp-gw and giving a (not so) long destination, >e.g. to machines in sus-sub-domains I get the "501 User name too large": > >Name (zerberus:priebe): ftp@server.denver.ibm.com >501 User name too large >Login failed. >ftp> You're authenticating this connection (inferred since you're getting into cmd_authorize().) You should be providing just your firewall authentication username at the "Name" prompt. Authenticate to the proxy, then connect to the destination using 'user ftp@server.denver.ibm.com'. -Rick From owner-fwtk-users@ex.tis.com Mon Dec 4 10:50 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA03271 Mon, 4 Dec 2000 10:50:53 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA02495; Mon, 4 Dec 2000 07:49:34 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Dec 2000 05:50:53 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA17184 for fwtk-users-outgoing; Mon, 4 Dec 2000 05:50:22 -0800 (PST) Date: Mon, 4 Dec 2000 14:06:44 +0700 (JAVT) From: Moh Riky S To: Keith Young cc: Yaroslav Gaskevich , fwtk-users@lists.nai.com Subject: Re: http auth In-Reply-To: <3A27C582.40BDD6D8@v-one.com> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 939 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] use Squid for http auth, it's good for you On Fri, 1 Dec 2000, Keith Young wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Yaroslav Gaskevich wrote: > > > > I'm using fwtk version 2.1 and want to authenticate users, who try to make > > http-connections from local network to remote servers. > > http-gw is running on port 3129. > > > > When there is no authentication rules, everything is ok, http-gw is > > working as proxy. > > > Yarik, > > Actually, http-gw doesn't allow for authentication. > > See the FAQ for more info: > http://www.fwtk.org/fwtk/faq/faq.html#2.4.3 > > -- > --Keith Young > -Director of Customer Care/Support, V-ONE Corp. > -kyoung@v-one.com > From owner-fwtk-users@ex.tis.com Mon Dec 4 16:23 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA04242 Mon, 4 Dec 2000 16:23:07 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA03096; Mon, 4 Dec 2000 13:22:28 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Dec 2000 12:02:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id MAA18912 for fwtk-users-outgoing; Mon, 4 Dec 2000 12:02:17 -0800 (PST) Message-ID: <010301c05e2b$9c368fc0$fc00a8c0@k62350> From: "Larry Jackson" To: Cc: "Tony Gale" References: Subject: Re: http://www.fwtk.org/fwtk/faq/faq.html#2.4.5 Date: Mon, 4 Dec 2000 14:51:34 -0500 Organization: Falun Technical Service, Inc. MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1609 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm having the same problem with http://www.newsmax.com It worked yesterday, but today I'm getting Network error: net_flags[4] set (read) LarryJackson@iName.com ----- Original Message ----- From: "Tony Gale" > > The error discussed in the FAQ is due to improper propagation of an > error condition. The real issue is, why was the connection closed in > the first place? > > I'll have a look into what is failing. I have an even wierder one to > look into anyway. > > > On 29-Nov-2000 Ross Bergman wrote: > > > > We've been running FWTK for a number of years now, and recently > > I've > > received complaints from users trying to access www.boston.com and > > odt.jamestower.com that they're unable to do so. The error logged > > is > > described in the FAQ, as you've pointed out in numerous emails over > > the years. > > > > Is there a patch for this supposed "bug in the http-gw code"? > > > > Thank you. > > > > -------------------------------------------------------------------- > > ----------- > > Ross E. Bergman Director of Information > > Technologies > > Ross.Bergman@PerkinElmer.com PerkinElmer Detection > > Systems > > -------------------------------------------------------------------- > > ----------- > > --- > E-Mail: Tony Gale > Virtue does not always demand a heavy sacrifice -- only the willingness > to make it when necessary. > -- Frederick Dunn > From owner-fwtk-users@ex.tis.com Mon Dec 4 16:23 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA04245 Mon, 4 Dec 2000 16:23:12 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA03122; Mon, 4 Dec 2000 13:22:33 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Dec 2000 11:51:03 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA16547 for fwtk-users-outgoing; Mon, 4 Dec 2000 11:50:41 -0800 (PST) From: Eberhard Mattes Date: Mon, 4 Dec 2000 20:49:59 +0100 (MET) Message-Id: <200012041949.UAA04580@azu.informatik.uni-stuttgart.de> To: O.Hislaire@msg-i.com CC: fwtk-users@ex.tis.com In-reply-to: <4.3.2.7.1.20001201132200.00de7c30@pophost> (message from Olivier Hislaire on Fri, 01 Dec 2000 13:38:45 +0100) Subject: Re: Problem using nntp-gw Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 392 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > Dec 1 12:43:00 skimmer nntp-gw[956]: Assertion failed: f != NULL, file > emo.c, line 176 > > Would anybody know about what it means ? It means that you should upgrade to version 0.5 of nntp-gw. -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Mon Dec 4 18:58 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA04647 Mon, 4 Dec 2000 18:58:11 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA27959; Mon, 4 Dec 2000 15:57:54 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 4 Dec 2000 14:32:21 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA13916 for fwtk-users-outgoing; Mon, 4 Dec 2000 14:32:10 -0800 (PST) From: "Tri D. Hoang" To: Subject: FWTK source code documentation Date: Mon, 4 Dec 2000 15:33:35 -0700 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 261 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi all, Where can I find information (no matter how little) on the source code and/or design of FWTK? Tri tdhoang@ultramain.com From owner-fwtk-users@ex.tis.com Tue Dec 5 07:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA06942 Tue, 5 Dec 2000 07:18:56 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA04870; Tue, 5 Dec 2000 04:18:47 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 02:43:54 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA00990 for fwtk-users-outgoing; Tue, 5 Dec 2000 02:43:33 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <010301c05e2b$9c368fc0$fc00a8c0@k62350> Date: Tue, 05 Dec 2000 10:42:57 -0000 (GMT) From: Tony Gale To: Larry Jackson Subject: Re: http://www.fwtk.org/fwtk/faq/faq.html#2.4.5 Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 668 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This site looks ok to me. Make sure you have the JavaScript quoting fix installed from the FAQ. -tony On 04-Dec-2000 Larry Jackson wrote: > I'm having the same problem with http://www.newsmax.com > It worked yesterday, but today I'm getting > Network error: net_flags[4] set (read) > --- E-Mail: Tony Gale A man who turns green has eschewed protein. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Dec 5 07:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA06941 Tue, 5 Dec 2000 07:18:56 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA04866; Tue, 5 Dec 2000 04:18:47 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 02:50:22 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id CAA01225 for fwtk-users-outgoing; Tue, 5 Dec 2000 02:49:52 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <5.0.2.1.0.20001130230939.01d18260@mail.itm-inst.com> Date: Tue, 05 Dec 2000 10:49:07 -0000 (GMT) From: Tony Gale To: Rick Murphy Subject: RE: http://www.fwtk.org/fwtk/faq/faq.html#2.4.5 Cc: fwtk-users@ex.tis.com, Ross Bergman Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 748 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On 01-Dec-2000 Rick Murphy wrote: > > Anything that's as broken as Tony describes isn't going to work > with > http-gw as it's currently designed. Thats true, but it doesn't look like a huge amount of work to re-implement. I alrealy have all the code to do it in another piece of (my) software. However, it isn't a 2 line patch. -tony --- E-Mail: Tony Gale The way some people find fault, you'd think there was some kind of reward. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Dec 5 09:20 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA07431 Tue, 5 Dec 2000 09:20:01 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA11854; Tue, 5 Dec 2000 06:19:24 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 04:55:35 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id EAA06490 for fwtk-users-outgoing; Tue, 5 Dec 2000 04:55:14 -0800 (PST) Message-Id: <5.0.2.1.0.20001204205639.01d05090@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Mon, 04 Dec 2000 20:58:31 -0500 To: "Tri D. Hoang" , From: Rick Murphy Subject: Re: FWTK source code documentation In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 682 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 03:33 PM 12/4/00 -0700, Tri D. Hoang wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >Hi all, > Where can I find information (no matter how little) on the >source code and/or design of FWTK? There are documents distributed as part of the FWTK kit; there's also some documents on the history of the toolkit on the NAI web site (at least there used to be :-) Look around ftp:/ftp.tis.com/pub/firewalls (or ftp.tislabs.com, perhaps.) -Rick From owner-fwtk-users@ex.tis.com Tue Dec 5 11:18 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA07866 Tue, 5 Dec 2000 11:18:56 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA01001; Tue, 5 Dec 2000 08:18:29 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 06:18:10 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA11704 for fwtk-users-outgoing; Tue, 5 Dec 2000 06:17:59 -0800 (PST) Message-Id: Mime-Version: 1.0 Date: Tue, 5 Dec 2000 15:16:16 -0800 To: fwtk-users@lists.nai.com From: heim@sip.medizin.uni-ulm.de (Stefan Heim, Dipl.-Ing.) Subject: lpr jobs through the FW Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii" Content-Length: 543 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, How do I plug lpr-jobs through the FW ? Thanks! /--------------------------------o00-----00o-------------------------\ Stefan Heim Uni Ulm Sektion Informatik in der Psychotherapie Am Hochstraess 8 89081 Ulm Germany E-Mail: heim@sip.Medizin.Uni-Ulm.de http://sip.medizin.uni-ulm.de Tel: +49-(0)731-50-25702 Fax: +49-(0)731-50-25662 \-------------------------------ooo0-----0ooOo---------------------/ From owner-fwtk-users@ex.tis.com Tue Dec 5 11:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA07869 Tue, 5 Dec 2000 11:19:14 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA00995; Tue, 5 Dec 2000 08:18:28 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 06:55:43 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA16612 for fwtk-users-outgoing; Tue, 5 Dec 2000 06:55:12 -0800 (PST) Message-ID: <3A2D024E.BA2D4C1C@v-one.com> Date: Tue, 05 Dec 2000 09:57:19 -0500 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: Rick Murphy CC: "Tri D. Hoang" , fwtk-users@ex.tis.com Subject: Re: FWTK source code documentation References: <5.0.2.1.0.20001204205639.01d05090@mail.itm-inst.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 749 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Rick Murphy wrote: > > > Where can I find information (no matter how little) on the > >source code and/or design of FWTK? > There are documents distributed as part of the FWTK kit; there's also some > documents on the history of the toolkit on the NAI web site (at least there > used to be :-) > Look around ftp:/ftp.tis.com/pub/firewalls (or ftp.tislabs.com, perhaps.) Also, "http://www.fwtk.org/fwtk/docs/" has alot of the history, and includes the PS man pages converted into PDF. It also has Marcus's presentation from SANS. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Tue Dec 5 15:58 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA08813 Tue, 5 Dec 2000 15:58:17 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA10051; Tue, 5 Dec 2000 12:57:31 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 5 Dec 2000 11:27:31 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA28176 for fwtk-users-outgoing; Tue, 5 Dec 2000 11:27:08 -0800 (PST) Date: Tue, 5 Dec 2000 14:26:16 -0500 From: Joseph S D Yao To: "Tri D. Hoang" Cc: fwtk-users@ex.tis.com Subject: Re: FWTK source code documentation Message-Id: <20001205142616.J24259@washington.cospo.osis.gov> Mail-Followup-To: "Tri D. Hoang" , fwtk-users@ex.tis.com References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from tdhoang@ultramain.com on Mon, Dec 04, 2000 at 03:33:35PM -0700 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 877 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Mon, Dec 04, 2000 at 03:33:35PM -0700, Tri D. Hoang wrote: > Where can I find information (no matter how little) on the > source code and/or design of FWTK? In case you weren't aware, the entire source code comes as part of FWTK. See www.fwtk.org for how to get this from NAI/TIS. (Sorry if you knew this, but it's not clear from your request.) Be aware that NAI/TIS d o e s own and copyright the code. It's not open for just any old use or re-use. Please read the licensing agreement before agreeing to it. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Dec 6 06:17 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id GAA10808 Wed, 6 Dec 2000 06:17:15 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id DAA25380; Wed, 6 Dec 2000 03:16:40 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 01:43:05 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA23235 for fwtk-users-outgoing; Wed, 6 Dec 2000 01:42:54 -0800 (PST) Message-ID: <3A2E0AD4.F00E4A2F@med.unipi.it> Date: Wed, 06 Dec 2000 10:45:56 +0100 From: ilaria X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.16 i586) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: address Content-Transfer-Encoding: 8bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 330 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Messaggio x Simone Nulchis: Ciao, sono ilaria. Inizio ad avere qualche problema col firewall che ho installato. Mi daresti una mano? Ho cambiato hard disk e non ho pi il tuo indirizzo Thanks. Ilaria From owner-fwtk-users@ex.tis.com Wed Dec 6 10:02 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA11373 Wed, 6 Dec 2000 10:02:16 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA06586; Wed, 6 Dec 2000 07:01:38 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 05:33:16 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA28850 for fwtk-users-outgoing; Wed, 6 Dec 2000 05:33:05 -0800 (PST) Message-ID: From: "Nixon, Anthony" To: fwtk-users@ex.tis.com Subject: Using the directory function with http-gw Date: Wed, 6 Dec 2000 08:32:32 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 684 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have FWTK running on RH6.2 and created a cache directory for http-gw's use. Everything works great except when trying to use the directory command in netperm-table. I keep getting access denied even though the proxy has accepted the request. Commenting out the "http-gw: directory /cache" line fixes the problem. I have tried giving http-gw a userid and placed the appropriate rights on the directory /cache and have even tried giving the directory world read-writable privileges (777), but nothing seems to work. Could someone please help? Shon Nixon From owner-fwtk-users@ex.tis.com Wed Dec 6 10:08 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA11401 Wed, 6 Dec 2000 10:08:00 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA07179; Wed, 6 Dec 2000 07:07:19 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 05:53:37 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA00077 for fwtk-users-outgoing; Wed, 6 Dec 2000 05:53:26 -0800 (PST) Message-ID: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Date: Wed, 06 Dec 2000 14:52:25 +0100 From: Gerd Schering Organization: TUB X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.14-15mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: FWTK Mailing Liste Subject: Problems starting smap as daemon Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms83E5BFAC30737236405830B7" Content-Length: 2803 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a cryptographically signed message in MIME format. --------------ms83E5BFAC30737236405830B7 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Hi, I got the following problem with smap. When I try to start it as a daemon via smap -daemon 1025, I face the following effects: - smap doesn't put itself into the background (and of course never detaches from the controlling tty as a real daemon should). - it listens on port 25 instead of 1025 - it runs as root, despite the fact it was told not to so by a corresponding netperm-table entry. Having a look at the source I got the impression that - it never will put itself into background - it always runs on port 25 regardless what you tell it - only childs will change userid and groupid if smap is startet with "-daemon". So whats wrong - the description in the man page, my source or me, i.e. did I get something wrong? Gerd ------------------------------------------------------ -- Gerd Schering -- Email: Schering@zrz.TU-Berlin.DE ------------------------------------------------------ --------------ms83E5BFAC30737236405830B7 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIDvwYJKoZIhvcNAQcCoIIDsDCCA6wCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC AiMwggIfMIIBiKADAgECAgIA2zANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJERTESMBAG A1UEChMJVFUtQmVybGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwMB4X DTAwMDgyMTExNDcyNVoXDTAyMDIxMjExNDcyNVowcTELMAkGA1UEBhMCREUxEjAQBgNVBAoT CVRVLUJlcmxpbjEMMAoGA1UECxMDWlJaMRYwFAYDVQQDEw1HZXJkIFNjaGVyaW5nMSgwJgYJ KoZIhvcNAQkBFhlTY2hlcmluZ0B6cnouVFUtQmVybGluLkRFMFwwDQYJKoZIhvcNAQEBBQAD SwAwSAJBAMzO07BsdY4ao1jwlxpa3z6t32gF+XfuOORFv5n8cg4vBbjipcmd8xujpYDGY9GY gZa24RA34B4ZHwKv7Af1XOECAwEAAaM2MDQwEQYJYIZIAYb4QgEBBAQDAgCgMB8GA1UdIwQY MBaAFAbN8qubZqQJJpbjkE+k2mOXQCqPMA0GCSqGSIb3DQEBBAUAA4GBAFmom4WWG42yDme4 Thl+NXRjM+tCqbmE6L70TkL0IU8D0LaJb2KcfvU1FCK+xZWvHn7q1wSUioAFn2Kg4jD/hPww 40E7WMDT+0RNWDWqd94z6+UCBp453jdqwuq4gw+d6vYC7coCdnoW/6VQw+ZaFQs0RFnObEtM 132MBEUbQ0nyMYIBZDCCAWACAQEwSzBFMQswCQYDVQQGEwJERTESMBAGA1UEChMJVFUtQmVy bGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwAgIA2zAJBgUrDgMCGgUA oIGxMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAwMTIwNjEz NTIyOFowIwYJKoZIhvcNAQkEMRYEFGu8NOv+speTKhbviJQGTJnVURGNMFIGCSqGSIb3DQEJ DzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgFAMA0GCCqGSIb3DQMCAgEoMA0GCSqGSIb3DQEBAQUABEAx+gOnFNmZFkrt/afwoM8y5Ry6 jgKj9y3vnEo1dduaWw70EK3eyblUol8s6/SqcpMGuhbtIMfhblCgkjVisoyL --------------ms83E5BFAC30737236405830B7-- From owner-fwtk-users@ex.tis.com Wed Dec 6 12:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA11738 Wed, 6 Dec 2000 12:06:40 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA26259; Wed, 6 Dec 2000 09:05:28 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 07:08:25 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA07296 for fwtk-users-outgoing; Wed, 6 Dec 2000 07:08:14 -0800 (PST) Message-Id: <4.3.2.7.1.20001206121352.00de5730@pophost> X-Sender: ohe4pop3@pophost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Wed, 06 Dec 2000 12:27:06 +0100 To: fwtk-users@ex.tis.com From: Olivier Hislaire Subject: Re: Problem using nntp-gw In-Reply-To: <200012041949.UAA04580@azu.informatik.uni-stuttgart.de> References: <4.3.2.7.1.20001201132200.00de7c30@pophost> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 2538 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 08:49 PM 12/4/00 +0100, you wrote: >>Hi, >> >>I added the nntp-gw subdirectory to the fwtk tree, compiled and installed it without any trouble. The trouble starts when I try to use it: >>Dec 1 12:42:34 skimmer nntp-gw[951]: Starting daemon mode on port 119 >>Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 >>Dec 1 12:42:59 skimmer kernel: SCSLog: connect - Name: nntp-gw | UID: 9 | EUID: 9 | PID: 956 | IP: 195.72.74.1 | Port: 53 >>Dec 1 12:42:59 skimmer nntp-gw[956]: permit host=charlie.be.msg-i.com/192.168.32.194 use of gateway >>Dec 1 12:43:00 skimmer nntp-gw[956]: command: MODE READER >>Dec 1 12:43:00 skimmer nntp-gw[956]: Assertion failed: f != NULL, file >> emo.c, line 176 >> >> Would anybody know about what it means ? >It means that you should upgrade to version 0.5 of nntp-gw. > >-- > Eberhard Mattes It is version 0.5 :-(( It looks like the nntp-gw program expects to be already connected to the server when it receives the 'MODE READER' command from the client. Since I do not have the SERVER directive in the configuration file (using more than one news server), nntp-gw cannot connect immediately to the server; instead, it waits for the AUTHINFO USER command to retrieve the server name and connect. When I connect to nntp-gw using 'telnet nntp-proxy 119', then issue the 'AUTHINFO USER news.software.ibm.com PASS ', I receive IBM's news server banner (that learnt to me those folks use INN). Working fine. But although configured properly (news server = nntp-proxy, user = news.software.ibm.com, pass = ), my newsreader (free agent 1.21) seems to send the MODE READER command first. Is the problem coming from Agent ? I am trying with netscape, but still am unable to find the right place to put my 'username' ... Again, any help appreciated. Olivier ------------------------------------------------------------------------------------------------ Olivier Hislaire MSG International Email: O.Hislaire@msg-i.com 97 Avenue de Tervuren Phone: +32 (0)2 735.91.59 Ext. 55 1040 Brussels Fax: +32 (0)2 732.12.19 Belgium http://www.msg-i.com ------------------------------------------------------------------------------------------------ From owner-fwtk-users@ex.tis.com Wed Dec 6 14:23 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA12047 Wed, 6 Dec 2000 14:23:43 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA16504; Wed, 6 Dec 2000 11:22:36 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 09:54:09 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA03981 for fwtk-users-outgoing; Wed, 6 Dec 2000 09:53:38 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) MIME-Version: 1.0 In-Reply-To: Date: Wed, 06 Dec 2000 17:52:52 -0000 (GMT) From: Tony Gale To: Tony Gale Subject: patch candidate (was RE: http://www.fwtk.org/fwtk/faq/faq.html#2 Cc: Ross Bergman , fwtk-users@ex.tis.com, Rick Murphy Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20001206175252:16241=_" Content-Length: 7087 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Type: text/plain; charset=iso-8859-1 Here's an initial effort at solving the problem with broken web servers as discussed previously. *** WARNING: This patch could do untold harm to you, your system, and your outlook on life. I post if here for review and comments. No warranty, implied or otherwise with this patch. It buffers the client request and headers as much as possible and then writes them out at the end. TODO: o say() / sayn() / net_write() should handle incomplete write()'s correctly o sort out the indenting Thanks -tony --- E-Mail: Tony Gale Passionate hatred can give meaning and purpose to an empty life. -- Eric Hoffer The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Disposition: attachment; filename="p1.diff" Content-Transfer-Encoding: 7bit Content-Description: p1.diff Content-Type: text/plain; charset=iso-8859-1; name=p1.diff; SizeOnDisk=5730 --- /fwtk.dist/fwtk/http-gw/http-gw.c Fri Feb 6 23:32:25 1998 +++ http-gw.c Wed Dec 6 17:45:04 2000 @@ -568,7 +568,7 @@ if( (rem_type & TYPE_HTTP) ){ int hlen = 0; if( http_protocol[0] != '\0'){ - copy_http_headers( -1, sockfd, 0, &hlen, G_NOPERM); + copy_http_headers( NULL, -1, sockfd, 0, &hlen, G_NOPERM); } } if( rem_type & TYPE_FTP){ @@ -1178,8 +1178,8 @@ }else{ sprintf(go_request,"%s%s", http_method, buf); } - if( rfd != -1)say(rfd, go_request); - +/* if( rfd != -1)say(rfd, go_request); */ + frominternal: if( http_protocol[0]){ /* Was there http protocol info? */ int hlen = 0; @@ -1187,7 +1187,7 @@ if( (permissions & G_PLUS) == 0) rfd = -1; - if( copy_http_headers(rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) & & + if( copy_http_headers(go_request, rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) && (rem_type&TYPE_WRITE)){ rfd = rsaved; trans_html_file(rfd, sockfd, "http", hlen); @@ -1198,12 +1198,15 @@ return 0; } rfd = rsaved; - } - + } else { + if( rfd != -1) + say(rfd, go_request); + } + /* Get possible response line (maybe an old server)*/ if( get_http_response(sockfd, rfd)){ - if( copy_http_headers(sockfd, rfd, 1, NULL, logging)){ + if( copy_http_headers(NULL, sockfd, rfd, 1, NULL, logging)){ trans_html_file(sockfd, rfd, "http", -1); } }else if( rem_type & TYPE_HEAD){ @@ -1230,7 +1233,10 @@ return 0; } -int copy_http_headers(sockfd, rfd,expect_data, lptr, logging) +#define REQ_BUFF_LEN 8192 /* SECURITY: Must be bigger than MAX_URL_LEN */ + +int copy_http_headers(request, sockfd, rfd,expect_data, lptr, logging) +char *request; int sockfd, rfd; int expect_data, *lptr, logging; { int len, cnt; @@ -1238,12 +1244,26 @@ int n; static char content_len[80]; static char content_type[513]; + static char request_buff[REQ_BUFF_LEN]; + int request_buff_len; int tmpX; char *tmpP; + request_buff_len = 0; + if ( request && (strlen(request) > REQ_BUFF_LEN-3)) { + goto broken; + } + + if (request) { + strncpy(request_buff, request, strlen(request)); + request_buff_len += strlen(request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; + } + content_len[0] = '\0'; content_type[0]= '\0'; - + if( lptr) *lptr = 0; @@ -1263,7 +1283,16 @@ }else if( checkBrowserType && !strncasecmp(go_request, "user-agent:", 11) ) { if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if (nojava == 2) for (tmpX=0; @@ -1287,7 +1316,16 @@ cpystr(content_type, go_request, 512); content_type[511] = '\0'; if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if( logging & G_CONTYPE){ syslog(LLEV,"content-type=%.512s", &go_request[13]); @@ -1299,11 +1337,29 @@ if( dont_touch(p) == 0){ sprintf(errbuf, "Location: http://%s:%u/%s", ourname, ourport, p); if( sockfd != -1){ - say(sockfd, errbuf) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, errbuf, strlen(errbuf)); + request_buff_len += strlen(errbuf); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, errbuf) ; */ } }else{ if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request) ); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } }else if( !strncasecmp(go_request, "connection:", 11)){ @@ -1312,10 +1368,23 @@ continue; }else { if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } } + if ( sockfd != -1) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + } len = -1; if( content_len[0]){ p = index(content_len, ':'); --_=XFMail.1.4.4.Linux:20001206175252:16241=_-- End of MIME message From owner-fwtk-users@ex.tis.com Wed Dec 6 16:39 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA12494 Wed, 6 Dec 2000 16:39:35 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA21629; Wed, 6 Dec 2000 13:38:23 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 11:48:08 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA19706 for fwtk-users-outgoing; Wed, 6 Dec 2000 11:47:36 -0800 (PST) Date: Wed, 6 Dec 2000 14:01:11 -0500 (EST) From: Ross Bergman To: Tony Gale cc: fwtk-users@ex.tis.com, Rick Murphy Subject: Re: patch candidate (was RE: http://www.fwtk.org/fwtk/faq/faq.html#2 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-ID: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: MULTIPART/Mixed; BOUNDARY="_=XFMail.1.4.4.Linux:20001206175252:16241=_" Content-Length: 8265 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Content-ID: I've applied this patch and it does appear to be doing the trick! thank you very much, Tony. It appears that there was a lot of work in order to make this work. P.S. There were two lines in your diff file which had carriage returns inserted by your mailer (or some other intervening program). Any line that doesn't begin with one of (regexp) ^[ +-@] should be attached to the preceding line. On Wed, 6 Dec 2000, Tony Gale wrote: > > Here's an initial effort at solving the problem with broken web > servers as discussed previously. > > *** WARNING: This patch could do untold harm to you, your system, and > your outlook on life. I post if here for review and comments. No > warranty, implied or otherwise with this patch. > > It buffers the client request and headers as much as possible and > then writes them out at the end. > > TODO: > o say() / sayn() / net_write() should handle incomplete write()'s > correctly > o sort out the indenting > > Thanks > > -tony > > > --- > E-Mail: Tony Gale > Passionate hatred can give meaning and purpose to an empty life. > -- Eric Hoffer > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > ------------------------------------------------------------------------------- Ross E. Bergman Director of Information Technologies Ross.Bergman@PerkinElmer.com PerkinElmer Detection Systems ------------------------------------------------------------------------------- --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Type: TEXT/PLAIN; CHARSET=iso-8859-1; NAME="p1.diff"; SIZEONDISK=5730 Content-ID: Content-Description: p1.diff Content-Disposition: ATTACHMENT; FILENAME="p1.diff" --- /fwtk.dist/fwtk/http-gw/http-gw.c Fri Feb 6 23:32:25 1998 +++ http-gw.c Wed Dec 6 17:45:04 2000 @@ -568,7 +568,7 @@ if( (rem_type & TYPE_HTTP) ){ int hlen = 0; if( http_protocol[0] != '\0'){ - copy_http_headers( -1, sockfd, 0, &hlen, G_NOPERM); + copy_http_headers( NULL, -1, sockfd, 0, &hlen, G_NOPERM); } } if( rem_type & TYPE_FTP){ @@ -1178,8 +1178,8 @@ }else{ sprintf(go_request,"%s%s", http_method, buf); } - if( rfd != -1)say(rfd, go_request); - +/* if( rfd != -1)say(rfd, go_request); */ + frominternal: if( http_protocol[0]){ /* Was there http protocol info? */ int hlen = 0; @@ -1187,7 +1187,7 @@ if( (permissions & G_PLUS) == 0) rfd = -1; - if( copy_http_headers(rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) & & + if( copy_http_headers(go_request, rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) && (rem_type&TYPE_WRITE)){ rfd = rsaved; trans_html_file(rfd, sockfd, "http", hlen); @@ -1198,12 +1198,15 @@ return 0; } rfd = rsaved; - } - + } else { + if( rfd != -1) + say(rfd, go_request); + } + /* Get possible response line (maybe an old server)*/ if( get_http_response(sockfd, rfd)){ - if( copy_http_headers(sockfd, rfd, 1, NULL, logging)){ + if( copy_http_headers(NULL, sockfd, rfd, 1, NULL, logging)){ trans_html_file(sockfd, rfd, "http", -1); } }else if( rem_type & TYPE_HEAD){ @@ -1230,7 +1233,10 @@ return 0; } -int copy_http_headers(sockfd, rfd,expect_data, lptr, logging) +#define REQ_BUFF_LEN 8192 /* SECURITY: Must be bigger than MAX_URL_LEN */ + +int copy_http_headers(request, sockfd, rfd,expect_data, lptr, logging) +char *request; int sockfd, rfd; int expect_data, *lptr, logging; { int len, cnt; @@ -1238,12 +1244,26 @@ int n; static char content_len[80]; static char content_type[513]; + static char request_buff[REQ_BUFF_LEN]; + int request_buff_len; int tmpX; char *tmpP; + request_buff_len = 0; + if ( request && (strlen(request) > REQ_BUFF_LEN-3)) { + goto broken; + } + + if (request) { + strncpy(request_buff, request, strlen(request)); + request_buff_len += strlen(request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; + } + content_len[0] = '\0'; content_type[0]= '\0'; - + if( lptr) *lptr = 0; @@ -1263,7 +1283,16 @@ }else if( checkBrowserType && !strncasecmp(go_request, "user-agent:", 11) ) { if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if (nojava == 2) for (tmpX=0; @@ -1287,7 +1316,16 @@ cpystr(content_type, go_request, 512); content_type[511] = '\0'; if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if( logging & G_CONTYPE){ syslog(LLEV,"content-type=%.512s", &go_request[13]); @@ -1299,11 +1337,29 @@ if( dont_touch(p) == 0){ sprintf(errbuf, "Location: http://%s:%u/%s", ourname, ourport, p); if( sockfd != -1){ - say(sockfd, errbuf) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, errbuf, strlen(errbuf)); + request_buff_len += strlen(errbuf); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, errbuf) ; */ } }else{ if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request) ); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } }else if( !strncasecmp(go_request, "connection:", 11)){ @@ -1312,10 +1368,23 @@ continue; }else { if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } } + if ( sockfd != -1) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + } len = -1; if( content_len[0]){ p = index(content_len, ':'); --_=XFMail.1.4.4.Linux:20001206175252:16241=_-- From owner-fwtk-users@ex.tis.com Wed Dec 6 18:40 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA12778 Wed, 6 Dec 2000 18:40:51 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA14963; Wed, 6 Dec 2000 15:39:54 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 13:42:30 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA21661 for fwtk-users-outgoing; Wed, 6 Dec 2000 13:41:49 -0800 (PST) From: David Lang To: Tony Gale Cc: Ross Bergman , fwtk-users@ex.tis.com, Rick Murphy Date: Wed, 6 Dec 2000 13:29:36 -0800 (PST) Subject: Re: patch candidate (was RE: http://www.fwtk.org/fwtk/faq/faq.html#2 In-Reply-To: Message-ID: MIME-Version: 1.0 Content-ID: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: MULTIPART/Mixed; boundary="_=XFMail.1.4.4.Linux:20001206175252:16241=_" Content-Length: 8623 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Type: TEXT/PLAIN; charset=US-ASCII Content-ID: As this is running https it should be routed through the http proxy on nFirewall assuming that the code was developed useing the libraries that support proxies. We need to check with the product team to see if this is possible. If it is possible we need to find out how to configure it to talk through a proxy. Initially we will want to talk to the FWD on helium and then hit the HTTP proxy on nFirewall. Eventually it will hit a HTTP proxy on greenlantern, then a HTTP proxy on nFirwewall which will be a different configuration on the webserver. If the software does not support proxies then we need to push development to get it to support proxies and in the meantime put in the GSP they origionally requested. David Lang On Wed, 6 Dec 2000, Tony Gale wrote: > Date: Wed, 06 Dec 2000 17:52:52 -0000 (GMT) > From: Tony Gale > To: Tony Gale > Cc: Ross Bergman , fwtk-users@ex.tis.com, > Rick Murphy > Subject: patch candidate (was RE: http://www.fwtk.org/fwtk/faq/faq.html#2 > > > Here's an initial effort at solving the problem with broken web > servers as discussed previously. > > *** WARNING: This patch could do untold harm to you, your system, and > your outlook on life. I post if here for review and comments. No > warranty, implied or otherwise with this patch. > > It buffers the client request and headers as much as possible and > then writes them out at the end. > > TODO: > o say() / sayn() / net_write() should handle incomplete write()'s > correctly > o sort out the indenting > > Thanks > > -tony > > > --- > E-Mail: Tony Gale > Passionate hatred can give meaning and purpose to an empty life. > -- Eric Hoffer > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > > --_=XFMail.1.4.4.Linux:20001206175252:16241=_ Content-Type: TEXT/PLAIN; charset=iso-8859-1; name="p1.diff"; SizeOnDisk=5730 Content-ID: Content-Description: p1.diff Content-Disposition: attachment; filename="p1.diff" --- /fwtk.dist/fwtk/http-gw/http-gw.c Fri Feb 6 23:32:25 1998 +++ http-gw.c Wed Dec 6 17:45:04 2000 @@ -568,7 +568,7 @@ if( (rem_type & TYPE_HTTP) ){ int hlen = 0; if( http_protocol[0] != '\0'){ - copy_http_headers( -1, sockfd, 0, &hlen, G_NOPERM); + copy_http_headers( NULL, -1, sockfd, 0, &hlen, G_NOPERM); } } if( rem_type & TYPE_FTP){ @@ -1178,8 +1178,8 @@ }else{ sprintf(go_request,"%s%s", http_method, buf); } - if( rfd != -1)say(rfd, go_request); - +/* if( rfd != -1)say(rfd, go_request); */ + frominternal: if( http_protocol[0]){ /* Was there http protocol info? */ int hlen = 0; @@ -1187,7 +1187,7 @@ if( (permissions & G_PLUS) == 0) rfd = -1; - if( copy_http_headers(rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) & & + if( copy_http_headers(go_request, rfd, sockfd, (rem_type&TYPE_WRITE), &hlen, G_NOPERM) && (rem_type&TYPE_WRITE)){ rfd = rsaved; trans_html_file(rfd, sockfd, "http", hlen); @@ -1198,12 +1198,15 @@ return 0; } rfd = rsaved; - } - + } else { + if( rfd != -1) + say(rfd, go_request); + } + /* Get possible response line (maybe an old server)*/ if( get_http_response(sockfd, rfd)){ - if( copy_http_headers(sockfd, rfd, 1, NULL, logging)){ + if( copy_http_headers(NULL, sockfd, rfd, 1, NULL, logging)){ trans_html_file(sockfd, rfd, "http", -1); } }else if( rem_type & TYPE_HEAD){ @@ -1230,7 +1233,10 @@ return 0; } -int copy_http_headers(sockfd, rfd,expect_data, lptr, logging) +#define REQ_BUFF_LEN 8192 /* SECURITY: Must be bigger than MAX_URL_LEN */ + +int copy_http_headers(request, sockfd, rfd,expect_data, lptr, logging) +char *request; int sockfd, rfd; int expect_data, *lptr, logging; { int len, cnt; @@ -1238,12 +1244,26 @@ int n; static char content_len[80]; static char content_type[513]; + static char request_buff[REQ_BUFF_LEN]; + int request_buff_len; int tmpX; char *tmpP; + request_buff_len = 0; + if ( request && (strlen(request) > REQ_BUFF_LEN-3)) { + goto broken; + } + + if (request) { + strncpy(request_buff, request, strlen(request)); + request_buff_len += strlen(request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; + } + content_len[0] = '\0'; content_type[0]= '\0'; - + if( lptr) *lptr = 0; @@ -1263,7 +1283,16 @@ }else if( checkBrowserType && !strncasecmp(go_request, "user-agent:", 11) ) { if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if (nojava == 2) for (tmpX=0; @@ -1287,7 +1316,16 @@ cpystr(content_type, go_request, 512); content_type[511] = '\0'; if( sockfd != -1){ - say(sockfd, go_request); + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request); */ } if( logging & G_CONTYPE){ syslog(LLEV,"content-type=%.512s", &go_request[13]); @@ -1299,11 +1337,29 @@ if( dont_touch(p) == 0){ sprintf(errbuf, "Location: http://%s:%u/%s", ourname, ourport, p); if( sockfd != -1){ - say(sockfd, errbuf) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, errbuf, strlen(errbuf)); + request_buff_len += strlen(errbuf); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, errbuf) ; */ } }else{ if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request) ); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } }else if( !strncasecmp(go_request, "connection:", 11)){ @@ -1312,10 +1368,23 @@ continue; }else { if( sockfd != -1){ - say(sockfd, go_request) ; + if (strlen(go_request)+2 > REQ_BUFF_LEN) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + request_buff_len = 0; + } + strncpy(request_buff+request_buff_len, go_request, strlen(go_request)); + request_buff_len += strlen(go_request); + strncpy(request_buff+request_buff_len, "\r\n", 2); + request_buff_len += 2; +/* say(sockfd, go_request) ; */ } } } + if ( sockfd != -1) { + request_buff[request_buff_len-2] = '\0'; + say(sockfd, request_buff); + } len = -1; if( content_len[0]){ p = index(content_len, ':'); --_=XFMail.1.4.4.Linux:20001206175252:16241=_-- From owner-fwtk-users@ex.tis.com Wed Dec 6 19:37 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA12881 Wed, 6 Dec 2000 19:37:16 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA27178; Wed, 6 Dec 2000 16:36:41 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 14:44:00 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA24659 for fwtk-users-outgoing; Wed, 6 Dec 2000 14:42:54 -0800 (PST) Date: Wed, 6 Dec 2000 17:37:34 -0500 From: Joseph S D Yao To: Gerd Schering Cc: FWTK Mailing Liste Subject: Re: Problems starting smap as daemon Message-Id: <20001206173734.E4614@washington.cospo.osis.gov> Mail-Followup-To: Gerd Schering , FWTK Mailing Liste References: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE>; from Schering@zrz.tu-berlin.de on Wed, Dec 06, 2000 at 02:52:25PM +0100 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 2014 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Wed, Dec 06, 2000 at 02:52:25PM +0100, Gerd Schering wrote: > Hi, > I got the following problem with smap. > > When I try to start it as a daemon via > > smap -daemon 1025, > > I face the following effects: > > - smap doesn't put itself into the background (and of course > never detaches from the controlling tty as a real daemon should). > > - it listens on port 25 instead of 1025 > > - it runs as root, despite the fact it was told not to so > by a corresponding netperm-table entry. > > Having a look at the source I got the impression that > - it never will put itself into background > - it always runs on port 25 regardless what you tell it > - only childs will change userid and groupid if smap is startet with > "-daemon". > > So whats wrong - the description in the man page, my source or me, > i.e. did I get something wrong? > > Gerd > ------------------------------------------------------ > -- Gerd Schering > -- Email: Schering@zrz.TU-Berlin.DE > ------------------------------------------------------ Which version of FWTK are you using? That will affect the answer. For 'smap' in FWTK 2.1, The "-daemon" flag should have the desired effect. You have to spell it correctly. I haven't done this, but others have. The daemon listening to the port will run as root, but the forked-off children that actually do the work will run with the given UID and GID. (It may not put itself into background mode - you may have to do this with shell syntax.) The "-port" flag is needed to change the port number. I.e., smap -daemon -port 1025 Making this change, of course, means that many MTAs will not be able to use this. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Wed Dec 6 19:53 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA12916 Wed, 6 Dec 2000 19:53:45 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA29306; Wed, 6 Dec 2000 16:53:06 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 15:29:50 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA10447 for fwtk-users-outgoing; Wed, 6 Dec 2000 15:28:52 -0800 (PST) Date: Wed, 6 Dec 2000 10:28:58 -0500 (EST) From: Ted Keller To: Gerd Schering cc: FWTK Mailing Liste Subject: Re: Problems starting smap as daemon In-Reply-To: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1522 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Gerd, It appears that smap hardcodes the port to port 25. Hence it is always listening there. If I remember correctly, the chuid occurs after a new connection is made and the smap program forks off a new copy. You should see the child process run under the netperm table entry. For daemon mode - execute smap with the & character to detach it from the terminal. ted keller On Wed, 6 Dec 2000, Gerd Schering wrote: > Hi, > I got the following problem with smap. > > When I try to start it as a daemon via > > smap -daemon 1025, > > I face the following effects: > > - smap doesn't put itself into the background (and of course > never detaches from the controlling tty as a real daemon should). > > - it listens on port 25 instead of 1025 > > - it runs as root, despite the fact it was told not to so > by a corresponding netperm-table entry. > > Having a look at the source I got the impression that > - it never will put itself into background > - it always runs on port 25 regardless what you tell it > - only childs will change userid and groupid if smap is startet with > "-daemon". > > So whats wrong - the description in the man page, my source or me, > i.e. did I get something wrong? > > Gerd > ------------------------------------------------------ > -- Gerd Schering > -- Email: Schering@zrz.TU-Berlin.DE > ------------------------------------------------------ From owner-fwtk-users@ex.tis.com Wed Dec 6 20:44 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id UAA13072 Wed, 6 Dec 2000 20:44:29 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id RAA05500; Wed, 6 Dec 2000 17:43:52 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 16:18:24 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id QAA24048 for fwtk-users-outgoing; Wed, 6 Dec 2000 16:18:12 -0800 (PST) Message-ID: <91A5926EFF44D3118B1200104B7276EB654E54@hart-exchange.hartwellcorp.com> From: "Michael St. Laurent" To: "'fwtk-users@ex.tis.com'" Subject: Trouble 'chroot'ing Date: Wed, 6 Dec 2000 16:27:01 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 409 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm having trouble getting the padded cell configuration correct for my fwtk proxies. If anyone else has already done this and wouldn't mind sharing the list of files and directories you used I would appreciate it. -------------------- Michael St. Laurent Hartwell Corporation From owner-fwtk-users@ex.tis.com Wed Dec 6 21:43 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id VAA13206 Wed, 6 Dec 2000 21:43:52 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id SAA09343; Wed, 6 Dec 2000 18:43:06 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 17:22:09 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id RAA03030 for fwtk-users-outgoing; Wed, 6 Dec 2000 17:21:48 -0800 (PST) Message-Id: <5.0.2.1.0.20001206172414.01d6da20@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 06 Dec 2000 20:10:11 -0500 To: Gerd Schering , FWTK Mailing Liste From: Rick Murphy Subject: Re: Problems starting smap as daemon In-Reply-To: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1070 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 02:52 PM 12/6/00 +0100, Gerd Schering wrote: >Hi, >I got the following problem with smap. > >When I try to start it as a daemon via > > smap -daemon 1025, > >I face the following effects: > >- smap doesn't put itself into the background (and of course >never detaches from the controlling tty as a real daemon should). >- it listens on port 25 instead of 1025 The -daemon argument doesn't accept a port number. It would be easy to read the port number if you wanted. You're right, though, that it's fixed to port 25. >- it runs as root, despite the fact it was told not to so >by a corresponding netperm-table entry. As you discovered, only smap's children change their user id. This permits the children to 'follow' changes to the netperm-table right away. The problem with smap not detaching from it's controlling terminal is fixed (I think) in Joe Yao's smap patch. It's fixed in my source, in any case. -Rick From owner-fwtk-users@ex.tis.com Thu Dec 7 04:08 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA13907 Thu, 7 Dec 2000 04:07:50 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA25215; Thu, 7 Dec 2000 01:07:46 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 6 Dec 2000 23:36:18 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id XAA22533 for fwtk-users-outgoing; Wed, 6 Dec 2000 23:35:57 -0800 (PST) Message-ID: <3A2F3D97.F9F665DD@zrz.TU-Berlin.DE> Date: Thu, 07 Dec 2000 08:34:47 +0100 From: Gerd Schering Organization: TUB X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.14-15mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: Rick Murphy CC: fwtk-users Subject: Re: Problems starting smap as daemon References: <5.0.2.1.0.20001206172414.01d6da20@mail.itm-inst.com> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms20F5F5825D8693F044D71060" Content-Length: 2442 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a cryptographically signed message in MIME format. --------------ms20F5F5825D8693F044D71060 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Rick Murphy wrote: > The problem with smap not detaching from it's controlling terminal is fixed > (I think) in Joe Yao's smap patch. It's fixed in my source, in any case. Is this source publicly available :-) ? BTW, is/was there any reason not to use the library function do_daemon, that comes with the fwtk and is used to daemonize other proxies as plu-gw for example ? Gerd ------------------------------------------------------ -- Gerd Schering -- Email: Schering@zrz.TU-Berlin.DE ------------------------------------------------------ --------------ms20F5F5825D8693F044D71060 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIDvwYJKoZIhvcNAQcCoIIDsDCCA6wCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC AiMwggIfMIIBiKADAgECAgIA2zANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJERTESMBAG A1UEChMJVFUtQmVybGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwMB4X DTAwMDgyMTExNDcyNVoXDTAyMDIxMjExNDcyNVowcTELMAkGA1UEBhMCREUxEjAQBgNVBAoT CVRVLUJlcmxpbjEMMAoGA1UECxMDWlJaMRYwFAYDVQQDEw1HZXJkIFNjaGVyaW5nMSgwJgYJ KoZIhvcNAQkBFhlTY2hlcmluZ0B6cnouVFUtQmVybGluLkRFMFwwDQYJKoZIhvcNAQEBBQAD SwAwSAJBAMzO07BsdY4ao1jwlxpa3z6t32gF+XfuOORFv5n8cg4vBbjipcmd8xujpYDGY9GY gZa24RA34B4ZHwKv7Af1XOECAwEAAaM2MDQwEQYJYIZIAYb4QgEBBAQDAgCgMB8GA1UdIwQY MBaAFAbN8qubZqQJJpbjkE+k2mOXQCqPMA0GCSqGSIb3DQEBBAUAA4GBAFmom4WWG42yDme4 Thl+NXRjM+tCqbmE6L70TkL0IU8D0LaJb2KcfvU1FCK+xZWvHn7q1wSUioAFn2Kg4jD/hPww 40E7WMDT+0RNWDWqd94z6+UCBp453jdqwuq4gw+d6vYC7coCdnoW/6VQw+ZaFQs0RFnObEtM 132MBEUbQ0nyMYIBZDCCAWACAQEwSzBFMQswCQYDVQQGEwJERTESMBAGA1UEChMJVFUtQmVy bGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwAgIA2zAJBgUrDgMCGgUA oIGxMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAwMTIwNzA3 MzQ0OVowIwYJKoZIhvcNAQkEMRYEFO9e1cdZgeHpndPVKsnohShLhuCBMFIGCSqGSIb3DQEJ DzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgFAMA0GCCqGSIb3DQMCAgEoMA0GCSqGSIb3DQEBAQUABEAD4SQzl87LMhLJgkoP02qWzwYH /ds9iP0qhpsxXHjTdOke/zQTnkRC/OHIU6foAq8wwp1YldU4LrfcS1yqAFfQ --------------ms20F5F5825D8693F044D71060-- From owner-fwtk-users@ex.tis.com Thu Dec 7 14:22 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA15850 Thu, 7 Dec 2000 14:22:22 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA17767; Thu, 7 Dec 2000 11:22:19 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Dec 2000 08:50:20 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA23730 for fwtk-users-outgoing; Thu, 7 Dec 2000 08:50:09 -0800 (PST) Message-ID: <91A5926EFF44D3118B1200104B7276EB654E55@hart-exchange.hartwellcorp.com> From: "Michael St. Laurent" To: "'fwtk-users@ex.tis.com'" Subject: RE: Trouble 'chroot'ing Date: Thu, 7 Dec 2000 08:58:55 -0800 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1064 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Never mind, I found the problem. I needed to copy the libresolv.so.2 library into the directory structure. I still don't understand why it was necessary as 'ldd' reported that the proxy binaries were all statically linked. -------------------- Michael St. Laurent Hartwell Corporation > -----Original Message----- > From: Michael St. Laurent [mailto:mikes@hartwellcorp.com] > Sent: Wednesday, December 06, 2000 4:27 PM > To: 'fwtk-users@ex.tis.com' > Subject: Trouble 'chroot'ing > > > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I'm having trouble getting the padded cell configuration > correct for my fwtk > proxies. If anyone else has already done this and wouldn't > mind sharing the > list of files and directories you used I would appreciate it. > > > -------------------- > Michael St. Laurent > Hartwell Corporation > From owner-fwtk-users@ex.tis.com Thu Dec 7 14:22 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA15849 Thu, 7 Dec 2000 14:22:21 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA17761; Thu, 7 Dec 2000 11:22:18 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Dec 2000 09:14:00 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA26904 for fwtk-users-outgoing; Thu, 7 Dec 2000 09:13:39 -0800 (PST) Date: Thu, 7 Dec 2000 12:12:10 -0500 From: Joseph S D Yao To: Gerd Schering Cc: FWTK Mailing Liste Subject: Re: Problems starting smap as daemon Message-Id: <20001207121210.I14284@washington.cospo.osis.gov> Mail-Followup-To: Gerd Schering , FWTK Mailing Liste References: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from keller@bfg.com on Wed, Dec 06, 2000 at 10:28:58AM -0500 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 512 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I forgot to refer you to which refers to my patch set ... I think Ted's is also in there somewhere. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Thu Dec 7 14:22 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA15851 Thu, 7 Dec 2000 14:22:22 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA17745; Thu, 7 Dec 2000 11:22:15 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Dec 2000 09:18:49 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA27540 for fwtk-users-outgoing; Thu, 7 Dec 2000 09:18:28 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) MIME-Version: 1.0 In-Reply-To: Date: Thu, 07 Dec 2000 17:17:50 -0000 (GMT) From: Tony Gale To: Ross Bergman Subject: Re: patch candidate 2 (was RE: http://www.fwtk.org/fwtk/faq/faq. Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20001207171750:10387=_" Content-Length: 9048 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20001207171750:10387=_ Content-Type: text/plain; charset=iso-8859-1 Version .2 Changes: o Try harder to send data to remote connections - This patch in hmain.c may conflict with existing patches, but it is quite easy to sort out. o Sort out indenting (should not have a wrap problem this time) Thanks -tony --- E-Mail: Tony Gale There is hopeful symbolism in the fact that flags do not wave in a vacuum. -- Arthur C. Clarke The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20001207171750:10387=_ Content-Disposition: attachment; filename="p2.diff" Content-Transfer-Encoding: base64 Content-Description: p2.diff Content-Type: application/octet-stream; name=p2.diff; SizeOnDisk=5867 LS0tIC9md3RrLmRpc3QvZnd0ay9odHRwLWd3L2htYWluLmMJRnJpIEZlYiAgNiAyMzozMjoxNiAx OTk4CisrKyBobWFpbi5jCVRodSBEZWMgIDcgMTY6NTI6NDUgMjAwMApAQCAtOTQ1LDkgKzk0Miwy OCBAQAogY2hhcgkqczsKIGludAluOwogewotCWlmKG5ldF93cml0ZShmZCxzLG4pICE9IG4pCi0J CXJldHVybigxKTsKLQlyZXR1cm4obmV0X3dyaXRlKGZkLCJcclxuIiwyKSAhPSAyKTsKKwljaGFy ICpidWZmLCAqYnVmZnB0cjsKKwlpbnQgcmV0dmFsOworCWludCBsZW5ndGg7CisKKwlpZiAoIChi dWZmID0gbWFsbG9jKG4rMikpID09IE5VTEwpCisJCXJldHVybigwKTsKKwltZW1jcHkoYnVmZiwg cywgbik7CisJYnVmZltuXT0nXHInOworCWJ1ZmZbbisxXT0nXG4nOworCWxlbmd0aCA9IG4rMjsK KwlidWZmcHRyID0gYnVmZjsKKwl3aGlsZSAobGVuZ3RoID4gMCkgeworCQlyZXR2YWwgPSBuZXRf d3JpdGUoZmQsYnVmZnB0cixsZW5ndGgpOworCQlpZiAocmV0dmFsID4gMCkgeworCQkJbGVuZ3Ro IC09IHJldHZhbDsKKwkJCWJ1ZmZwdHIgKz0gcmV0dmFsOworCQl9IGVsc2UgeworCQkJYnJlYWs7 CisJCX0KKwl9CisJZnJlZShidWZmKTsKKwlyZXR1cm4ocmV0dmFsKTsKIH0KIAogCi0tLSAvZnd0 ay5kaXN0L2Z3dGsvaHR0cC1ndy9odHRwLWd3LmMJRnJpIEZlYiAgNiAyMzozMjoyNSAxOTk4Cisr KyBodHRwLWd3LmMJVGh1IERlYyAgNyAxNjoyNjowOSAyMDAwCkBAIC01NjgsNyArNTY4LDcgQEAK IAlpZiggKHJlbV90eXBlICYgVFlQRV9IVFRQKSApewogCQlpbnQgaGxlbiA9IDA7CiAJCWlmKCBo dHRwX3Byb3RvY29sWzBdICE9ICdcMCcpewotIAkJCWNvcHlfaHR0cF9oZWFkZXJzKCAtMSwgc29j a2ZkLCAwLCAmaGxlbiwgR19OT1BFUk0pOworIAkJCWNvcHlfaHR0cF9oZWFkZXJzKCBOVUxMLCAt MSwgc29ja2ZkLCAwLCAmaGxlbiwgR19OT1BFUk0pOwogCQl9CiAJfQogCWlmKCByZW1fdHlwZSAm IFRZUEVfRlRQKXsKQEAgLTExNzgsOCArMTE3OCw3IEBACiAJfWVsc2V7CiAJCXNwcmludGYoZ29f cmVxdWVzdCwiJXMlcyIsIGh0dHBfbWV0aG9kLCBidWYpOwogCX0KLQlpZiggcmZkICE9IC0xKXNh eShyZmQsIGdvX3JlcXVlc3QpOwotCisgIAogZnJvbWludGVybmFsOgogCWlmKCBodHRwX3Byb3Rv Y29sWzBdKXsJLyogV2FzIHRoZXJlIGh0dHAgcHJvdG9jb2wgaW5mbz8gKi8KIAkJaW50IGhsZW4g PSAwOwpAQCAtMTE4Nyw3ICsxMTg2LDcgQEAKIAogCQlpZiggKHBlcm1pc3Npb25zICYgR19QTFVT KSA9PSAwKQogCQkJcmZkID0gLTE7Ci0gCQlpZiggY29weV9odHRwX2hlYWRlcnMocmZkLCBzb2Nr ZmQsIChyZW1fdHlwZSZUWVBFX1dSSVRFKSwgJmhsZW4sIEdfTk9QRVJNKSAmJgorIAkJaWYoIGNv cHlfaHR0cF9oZWFkZXJzKGdvX3JlcXVlc3QsIHJmZCwgc29ja2ZkLCAocmVtX3R5cGUmVFlQRV9X UklURSksICZobGVuLCBHX05PUEVSTSkgJiYKIAkJCShyZW1fdHlwZSZUWVBFX1dSSVRFKSl7CiAJ CQlyZmQgPSByc2F2ZWQ7CiAJCQl0cmFuc19odG1sX2ZpbGUocmZkLCBzb2NrZmQsICJodHRwIiwg aGxlbik7CkBAIC0xMTk4LDEyICsxMTk3LDE1IEBACiAJCQlyZXR1cm4gMDsKIAkJfQogCQlyZmQg PSByc2F2ZWQ7CisJfSBlbHNlIHsKKwkJaWYoIHJmZCAhPSAtMSkKKwkJCXNheShyZmQsIGdvX3Jl cXVlc3QpOwogCX0KLQorICAgIAogLyogR2V0IHBvc3NpYmxlIHJlc3BvbnNlIGxpbmUgKG1heWJl IGFuIG9sZCBzZXJ2ZXIpKi8KIAlpZiggZ2V0X2h0dHBfcmVzcG9uc2Uoc29ja2ZkLCByZmQpKXsK IAotCQlpZiggY29weV9odHRwX2hlYWRlcnMoc29ja2ZkLCByZmQsIDEsIE5VTEwsIGxvZ2dpbmcp KXsKKwkJaWYoIGNvcHlfaHR0cF9oZWFkZXJzKE5VTEwsIHNvY2tmZCwgcmZkLCAxLCBOVUxMLCBs b2dnaW5nKSl7CiAJCQl0cmFuc19odG1sX2ZpbGUoc29ja2ZkLCByZmQsICJodHRwIiwgLTEpOwog CQl9CiAJfWVsc2UgaWYoIHJlbV90eXBlICYgVFlQRV9IRUFEKXsKQEAgLTEyMzAsNyArMTIzMiwx MCBAQAogCXJldHVybiAwOwogfQogCi1pbnQgY29weV9odHRwX2hlYWRlcnMoc29ja2ZkLCByZmQs ZXhwZWN0X2RhdGEsIGxwdHIsIGxvZ2dpbmcpCisjZGVmaW5lIFJFUV9CVUZGX0xFTiA4MTkyIC8q IFNFQ1VSSVRZOiBNdXN0IGJlIGJpZ2dlciB0aGFuIE1BWF9VUkxfTEVOICovCisKK2ludCBjb3B5 X2h0dHBfaGVhZGVycyhyZXF1ZXN0LCBzb2NrZmQsIHJmZCxleHBlY3RfZGF0YSwgbHB0ciwgbG9n Z2luZykKK2NoYXIgKnJlcXVlc3Q7CiBpbnQgc29ja2ZkLCByZmQ7CiBpbnQgZXhwZWN0X2RhdGEs ICpscHRyLCBsb2dnaW5nOwogewlpbnQgbGVuLCBjbnQ7CkBAIC0xMjM4LDEyICsxMjQzLDI2IEBA CiAJaW50IG47CiAJc3RhdGljIGNoYXIgY29udGVudF9sZW5bODBdOwogCXN0YXRpYyBjaGFyIGNv bnRlbnRfdHlwZVs1MTNdOworCXN0YXRpYyBjaGFyIHJlcXVlc3RfYnVmZltSRVFfQlVGRl9MRU5d OworCWludCByZXF1ZXN0X2J1ZmZfbGVuOwogCWludAl0bXBYOwogCWNoYXIJKnRtcFA7CiAKKwly ZXF1ZXN0X2J1ZmZfbGVuID0gMDsKKwlpZiAoIHJlcXVlc3QgJiYgKHN0cmxlbihyZXF1ZXN0KSA+ IFJFUV9CVUZGX0xFTi0zKSkgeworCQlnb3RvIGJyb2tlbjsKKwl9CisgIAorCWlmIChyZXF1ZXN0 KSB7CisJCXN0cm5jcHkocmVxdWVzdF9idWZmLCByZXF1ZXN0LCBzdHJsZW4ocmVxdWVzdCkpOwor CQlyZXF1ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihyZXF1ZXN0KTsKKwkJc3RybmNweShyZXF1ZXN0 X2J1ZmYrcmVxdWVzdF9idWZmX2xlbiwgIlxyXG4iLCAyKTsKKwkJcmVxdWVzdF9idWZmX2xlbiAr PSAyOworCX0KKyAgCiAJY29udGVudF9sZW5bMF0gPSAnXDAnOwogCWNvbnRlbnRfdHlwZVswXT0g J1wwJzsKLQorICAKIAlpZiggbHB0cikKIAkJKmxwdHIgPSAwOwogCkBAIC0xMjYzLDcgKzEyODIs MTUgQEAKIAkJfWVsc2UgaWYoIGNoZWNrQnJvd3NlclR5cGUgJiYKIAkJICAgICAgIXN0cm5jYXNl Y21wKGdvX3JlcXVlc3QsICJ1c2VyLWFnZW50OiIsIDExKSApIHsKIAkJCWlmKCBzb2NrZmQgIT0g LTEpewotCQkJCSBzYXkoc29ja2ZkLCBnb19yZXF1ZXN0KTsKKwkJCQlpZiAoc3RybGVuKGdvX3Jl cXVlc3QpKzIgPiBSRVFfQlVGRl9MRU4pIHsKKwkJCQkJcmVxdWVzdF9idWZmW3JlcXVlc3RfYnVm Zl9sZW4tMl0gPSAnXDAnOworCQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOworCQkJCQly ZXF1ZXN0X2J1ZmZfbGVuID0gMDsKKwkJCQl9CisJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVx dWVzdF9idWZmX2xlbiwgZ29fcmVxdWVzdCwgc3RybGVuKGdvX3JlcXVlc3QpKTsKKwkJCQlyZXF1 ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihnb19yZXF1ZXN0KTsKKwkJCQlzdHJuY3B5KHJlcXVlc3Rf YnVmZityZXF1ZXN0X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCXJlcXVlc3RfYnVmZl9sZW4g Kz0gMjsKIAkJCX0KIAkJCWlmIChub2phdmEgPT0gMikKIAkJCSAgICBmb3IgKHRtcFg9MDsKQEAg LTEyODcsNyArMTMxNCwxNSBAQAogCQkJY3B5c3RyKGNvbnRlbnRfdHlwZSwgZ29fcmVxdWVzdCwg NTEyKTsKIAkJCWNvbnRlbnRfdHlwZVs1MTFdID0gJ1wwJzsKIAkJCWlmKCBzb2NrZmQgIT0gLTEp ewotCQkJCSBzYXkoc29ja2ZkLCBnb19yZXF1ZXN0KTsKKwkJCQlpZiAoc3RybGVuKGdvX3JlcXVl c3QpKzIgPiBSRVFfQlVGRl9MRU4pIHsKKwkJCQkJcmVxdWVzdF9idWZmW3JlcXVlc3RfYnVmZl9s ZW4tMl0gPSAnXDAnOworCQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOworCQkJCQlyZXF1 ZXN0X2J1ZmZfbGVuID0gMDsKKwkJCQl9CisJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVz dF9idWZmX2xlbiwgZ29fcmVxdWVzdCwgc3RybGVuKGdvX3JlcXVlc3QpKTsKKwkJCQlyZXF1ZXN0 X2J1ZmZfbGVuICs9IHN0cmxlbihnb19yZXF1ZXN0KTsKKwkJCQlzdHJuY3B5KHJlcXVlc3RfYnVm ZityZXF1ZXN0X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0g MjsKIAkJCX0KIAkJCWlmKCBsb2dnaW5nICYgR19DT05UWVBFKXsKIAkJCQlzeXNsb2coTExFViwi Y29udGVudC10eXBlPSUuNTEycyIsICZnb19yZXF1ZXN0WzEzXSk7CkBAIC0xMjk5LDExICsxMzM0 LDI3IEBACiAJCQlpZiggZG9udF90b3VjaChwKSA9PSAwKXsKIAkJCQlzcHJpbnRmKGVycmJ1Ziwg IkxvY2F0aW9uOiBodHRwOi8vJXM6JXUvJXMiLCBvdXJuYW1lLCBvdXJwb3J0LCBwKTsKIAkJCQlp Ziggc29ja2ZkICE9IC0xKXsKLQkJCQkJc2F5KHNvY2tmZCwgZXJyYnVmKSA7CisJCQkJCWlmIChz dHJsZW4oZ29fcmVxdWVzdCkrMiA+IFJFUV9CVUZGX0xFTikgeworCQkJCQkJcmVxdWVzdF9idWZm W3JlcXVlc3RfYnVmZl9sZW4tMl0gPSAnXDAnOworCQkJCQkJc2F5KHNvY2tmZCwgcmVxdWVzdF9i dWZmKTsKKwkJCQkJCXJlcXVlc3RfYnVmZl9sZW4gPSAwOworCQkJCQl9CisJCQkJCXN0cm5jcHko cmVxdWVzdF9idWZmK3JlcXVlc3RfYnVmZl9sZW4sIGVycmJ1Ziwgc3RybGVuKGVycmJ1ZikpOwor CQkJCQlyZXF1ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihlcnJidWYpOworCQkJCQlzdHJuY3B5KHJl cXVlc3RfYnVmZityZXF1ZXN0X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCQlyZXF1ZXN0X2J1 ZmZfbGVuICs9IDI7CiAJCQkJfQogCQkJfWVsc2V7CiAJCQkJaWYoIHNvY2tmZCAhPSAtMSl7Ci0g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAkgc2F5KHNvY2tmZCwgZ29fcmVxdWVzdCkg OworCQkJCQlpZiAoc3RybGVuKGdvX3JlcXVlc3QpKzIgPiBSRVFfQlVGRl9MRU4pIHsKKwkJCQkJ CXJlcXVlc3RfYnVmZltyZXF1ZXN0X2J1ZmZfbGVuLTJdID0gJ1wwJzsKKwkJCQkJCXNheShzb2Nr ZmQsIHJlcXVlc3RfYnVmZik7CisJCQkJCQlyZXF1ZXN0X2J1ZmZfbGVuID0gMDsKKwkJCQkJfQor CQkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1ZXN0X2J1ZmZfbGVuLCBnb19yZXF1ZXN0LCBz dHJsZW4oZ29fcmVxdWVzdCkpOworCQkJCQlyZXF1ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihnb19y ZXF1ZXN0KTsKKwkJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xlbiwgIlxy XG4iLCAyKTsKKwkJCQkJcmVxdWVzdF9idWZmX2xlbiArPSAyOwogCQkJCX0KIAkJCX0KIAkJfWVs c2UgaWYoICFzdHJuY2FzZWNtcChnb19yZXF1ZXN0LCAiY29ubmVjdGlvbjoiLCAxMSkpewpAQCAt MTMxMiwxMCArMTM2MywyMiBAQAogCQkJY29udGludWU7CiAJCX1lbHNlIHsKIAkJCWlmKCBzb2Nr ZmQgIT0gLTEpewotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgc2F5KHNvY2tmZCwg Z29fcmVxdWVzdCkgOworCQkJCWlmIChzdHJsZW4oZ29fcmVxdWVzdCkrMiA+IFJFUV9CVUZGX0xF TikgeworCQkJCQlyZXF1ZXN0X2J1ZmZbcmVxdWVzdF9idWZmX2xlbi0yXSA9ICdcMCc7CisJCQkJ CXNheShzb2NrZmQsIHJlcXVlc3RfYnVmZik7CisJCQkJCXJlcXVlc3RfYnVmZl9sZW4gPSAwOwor CQkJCX0KKwkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1ZXN0X2J1ZmZfbGVuLCBnb19yZXF1 ZXN0LCBzdHJsZW4oZ29fcmVxdWVzdCkpOworCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gc3RybGVu KGdvX3JlcXVlc3QpOworCQkJCXN0cm5jcHkocmVxdWVzdF9idWZmK3JlcXVlc3RfYnVmZl9sZW4s ICJcclxuIiwgMik7CisJCQkJcmVxdWVzdF9idWZmX2xlbiArPSAyOwogCQkJfQogCQl9CiAJfQor CWlmICggc29ja2ZkICE9IC0xKSB7CisJCXJlcXVlc3RfYnVmZltyZXF1ZXN0X2J1ZmZfbGVuLTJd ID0gJ1wwJzsKKwkJc2F5KHNvY2tmZCwgcmVxdWVzdF9idWZmKTsKKwl9CiAJbGVuID0gLTE7CiAJ aWYoIGNvbnRlbnRfbGVuWzBdKXsKIAkJcCA9IGluZGV4KGNvbnRlbnRfbGVuLCAnOicpOwo= --_=XFMail.1.4.4.Linux:20001207171750:10387=_-- End of MIME message From owner-fwtk-users@ex.tis.com Thu Dec 7 14:22 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA15852 Thu, 7 Dec 2000 14:22:25 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA17777; Thu, 7 Dec 2000 11:22:22 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 7 Dec 2000 09:06:37 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA25907 for fwtk-users-outgoing; Thu, 7 Dec 2000 09:06:06 -0800 (PST) Date: Thu, 7 Dec 2000 12:04:40 -0500 From: Joseph S D Yao To: Ted Keller Cc: Gerd Schering , FWTK Mailing Liste Subject: Re: Problems starting smap as daemon Message-Id: <20001207120440.F14284@washington.cospo.osis.gov> Mail-Followup-To: Ted Keller , Gerd Schering , FWTK Mailing Liste References: <3A2E4499.CF9D8FAE@zrz.TU-Berlin.DE> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from keller@bfg.com on Wed, Dec 06, 2000 at 10:28:58AM -0500 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 801 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Wed, Dec 06, 2000 at 10:28:58AM -0500, Ted Keller wrote: > It appears that smap hardcodes the port to port 25. Hence it is always > listening there. Hmmn??? I'm sorry! My reference copy has the so-called "Yao patch" collection. This gives you the "-port" option. The "-daemon" option is in the base version, but [IMHO] incorrectly implemented. Hrmm. This appears to be some code I actually added. Otherwise, I can't attribute it. ;-] -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Dec 8 13:32 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA19772 Fri, 8 Dec 2000 13:32:11 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA01474; Fri, 8 Dec 2000 10:31:55 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 8 Dec 2000 08:51:32 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA17649 for fwtk-users-outgoing; Fri, 8 Dec 2000 08:51:11 -0800 (PST) Date: Fri, 8 Dec 2000 11:18:56 -0500 (EST) From: Ross Bergman To: Tony Gale cc: fwtk-users@ex.tis.com Subject: Re: patch candidate 2 (was RE: http://www.fwtk.org/fwtk/faq/faq. In-Reply-To: Message-ID: MIME-Version: 1.0 Content-ID: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Content-Length: 1190 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Installed and working, with the exception you noted in hmain.c. On Thu, 7 Dec 2000, Tony Gale wrote: > > Version .2 > > Changes: > o Try harder to send data to remote connections > - This patch in hmain.c may conflict with existing patches, > but it is quite easy to sort out. > > o Sort out indenting > > (should not have a wrap problem this time) > > Thanks > > -tony > > > --- > E-Mail: Tony Gale > There is hopeful symbolism in the fact that flags do not wave in a vacuum. > -- Arthur C. Clarke > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > ------------------------------------------------------------------------------- Ross E. Bergman Director of Information Technologies Ross.Bergman@PerkinElmer.com PerkinElmer Detection Systems ------------------------------------------------------------------------------- From owner-fwtk-users@ex.tis.com Mon Dec 11 01:03 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id BAA25763 Mon, 11 Dec 2000 01:03:49 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id WAA09064; Sun, 10 Dec 2000 22:02:58 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Sun, 10 Dec 2000 19:42:17 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id TAA04767 for fwtk-users-outgoing; Sun, 10 Dec 2000 19:42:06 -0800 (PST) Message-ID: <3A344D77.D2F3524A@v-one.com> Date: Sun, 10 Dec 2000 22:43:51 -0500 From: Keith Young Organization: V-ONE X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: Large fwtk.org site update done References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 674 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Well, after being home for a week with a nasty virus, I had enough free time to do a fairly large (61 new additional pieces of information completed) update to www.fwtk.org. All but some minor changes are done. If I am missing something, or you would like to add something, please send me an e-mail here or to the account listed on the site. Mirrors may take up to a week to download the new information. Thank you (especially Tony G ;) for your patience. -- --Keith Young -Director of Customer Care/Support, V-ONE Corp. -kyoung@v-one.com From owner-fwtk-users@ex.tis.com Mon Dec 11 05:36 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA26554 Mon, 11 Dec 2000 05:36:34 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA16765; Mon, 11 Dec 2000 02:36:05 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 11 Dec 2000 01:10:31 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id BAA14631 for fwtk-users-outgoing; Mon, 11 Dec 2000 01:10:19 -0800 (PST) Message-ID: <003d01c06352$e403db60$0601a8c0@wen> From: "wen" To: Subject: how to set up FTP and DNS server behind fwtk box Date: Mon, 11 Dec 2000 17:15:10 +0800 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.00.2615.200 X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2615.200 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----=_NextPart_000_0038_01C06395.EAB0B4E0" Content-Length: 3895 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a multi-part message in MIME format. ------=_NextPart_000_0038_01C06395.EAB0B4E0 Content-Type: text/plain; charset="gb2312" Content-Transfer-Encoding: base64 aGksZXZlcnlvbmU6DQogICAgSSBoYXZlIGluc3RhbGxlZCBmd3RrMi4xIGluIG15IHN5c3RlbSBi b3ggd2hpY2ggd2FzIGluc3RhbGxlZCByZWRoYXQ2LjEuIG5vdyBJIHdhbnQgdG8gc2V0IHVwIEZU UCBzZXZlciBhbmQgRE5TIHNlcnZlciBiZWhpbmQgZnd0ayBib3guIEkgaGF2ZSB0cmllZCBuZXh0 Og0KaW4gbXkgbmV0LXBlcm0gZmlsZSBJIGFkZCANCiAgICAgICAgcGx1Zy1ndzogcG9ydCAyMSAq IC1wbHVnLXRvIHBvcnQgMjEgICBteS1mdHAtc2VydmVyLmlwDQogICAgICAgIHBsdWctZ3cxOnBv cnQgMjAgICogLXBsdWctdG8gcG9ydCAyMCAgIG15LWZ0cC1zZXJ2ZXIuaXANCmZvciBETlMgc2Vy dmVyDQogICAgICAgIHBsdWctZ3cyOiBwb3J0IDUzICogLXBsdWctdG8gcG9ydCA1MyBteS1ETlMt c2VydmVyLmlwDQoNCkkgaGF2ZSBjaGFuZ2VkIHBsdWctZ3cuYyBpbiBvcmRlciB0byBtYWtlIHBs dWctZ3cgZGFlbW9uIHdoaWNoIG9ubHkga293bnMgcGx1Zy1ndyBwcmVmaXggIGtvd25zIGFib3Zl IHJ1bGUgcHJlZml4Lg0KDQpidXQgbm93IGZ0cCBzZXJ2ZXIgYW5kIEROUyBzZXJ2ZXIgZG9uJ3Qg d29yay4gd2h5Pw0KDQpoZXJlIEkgdGhpbmsgd2hlbiBmdHAgaXMgd29ya2luZyBwb3J0IDIwIGFu ZCAyMSBhcmUgY29ycmVzcG9uZCxidXQgcGx1Zy1ndyBkYWVtb24gY2FuIG5vdCBkbyB3aXRoIHRo ZXNlLiBmb3IgRE5TIHNlcnZlcixpdCBpcyB0aGUgc2FtZSBwcm9ibGVtLGJlY2Fuc2UgRE5TIHNl cnZlciBuZWVkIHRjcCBwb3J0IDUzIGFuZCB1ZHAgcG9ydCA1My4NCmJ1dCBJIGRvIG5vdCBrbm93 IGhvdyB0byBkbyB0byByZXNvbHYgdGhpcyBwcm9ibGVtLiBzb21lIGFkdmljZSBhcHByZWNpYXRl Lg0K ------=_NextPart_000_0038_01C06395.EAB0B4E0 Content-Type: text/html; charset="gb2312" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PWdi MjMxMiIgaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBjb250ZW50PSJNU0hUTUwgNS4w MC4yNjE0LjM1MDAiIG5hbWU9R0VORVJBVE9SPg0KPFNUWUxFPjwvU1RZTEU+DQo8L0hFQUQ+DQo8 Qk9EWSBiZ0NvbG9yPSNmZmZmZmY+DQo8RElWPjxGT05UIHNpemU9Mj5oaSxldmVyeW9uZTo8L0ZP TlQ+PC9ESVY+DQo8RElWPjxGT05UIHNpemU9Mj4mbmJzcDsmbmJzcDsmbmJzcDsgSSBoYXZlIGlu c3RhbGxlZCBmd3RrMi4xIGluIG15IHN5c3RlbSBib3ggDQp3aGljaCB3YXMgaW5zdGFsbGVkIHJl ZGhhdDYuMS4gbm93IEkgd2FudCB0byBzZXQgdXAgRlRQIHNldmVyIGFuZCBETlMgc2VydmVyIA0K YmVoaW5kIGZ3dGsgYm94LiBJIGhhdmUgdHJpZWQgbmV4dDo8L0ZPTlQ+PC9ESVY+DQo8RElWPjxG T05UIHNpemU9Mj5pbiBteSBuZXQtcGVybSBmaWxlIEkgYWRkIDwvRk9OVD48L0RJVj4NCjxESVY+ PEZPTlQgc2l6ZT0yPiZuYnNwOyZuYnNwOyZuYnNwOyAmbmJzcDsmbmJzcDsmbmJzcDsgcGx1Zy1n dzogcG9ydCAyMSAqIA0KLXBsdWctdG8gcG9ydCAyMSZuYnNwOyZuYnNwOyBteS1mdHAtc2VydmVy LmlwPC9GT05UPjwvRElWPg0KPERJVj48Rk9OVCBzaXplPTI+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZu YnNwOyZuYnNwOyZuYnNwOyBwbHVnLWd3MTpwb3J0IA0KMjAmbmJzcDsmbmJzcDsqIC1wbHVnLXRv IHBvcnQgMjAmbmJzcDsmbmJzcDsgbXktZnRwLXNlcnZlci5pcDwvRk9OVD48L0RJVj4NCjxESVY+ PEZPTlQgc2l6ZT0yPmZvciBETlMgc2VydmVyPC9GT05UPjwvRElWPg0KPERJVj48Rk9OVCBzaXpl PTI+Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZuYnNwOyZuYnNwOyZuYnNwOyBwbHVnLWd3MjogcG9ydCA1 MyAqIA0KLXBsdWctdG8gcG9ydCA1MyBteS1ETlMtc2VydmVyLmlwPC9GT05UPjwvRElWPg0KPERJ Vj4mbmJzcDs8L0RJVj4NCjxESVY+PEZPTlQgc2l6ZT0yPkkgaGF2ZSBjaGFuZ2VkIHBsdWctZ3cu YyBpbiBvcmRlciB0byBtYWtlIHBsdWctZ3cgZGFlbW9uIHdoaWNoIA0Kb25seSBrb3ducyBwbHVn LWd3IHByZWZpeCZuYnNwOyBrb3ducyBhYm92ZSBydWxlIHByZWZpeC48L0ZPTlQ+PC9ESVY+DQo8 RElWPiZuYnNwOzwvRElWPg0KPERJVj48Rk9OVCBzaXplPTI+YnV0IG5vdyBmdHAgc2VydmVyIGFu ZCBETlMgc2VydmVyIGRvbid0IHdvcmsuIA0Kd2h5PzwvRk9OVD48L0RJVj4NCjxESVY+Jm5ic3A7 PC9ESVY+DQo8RElWPjxGT05UIHNpemU9Mj5oZXJlIEkgdGhpbmsgd2hlbiBmdHAgaXMgd29ya2lu ZyBwb3J0IDIwIGFuZCAyMSBhcmUgDQpjb3JyZXNwb25kLGJ1dCBwbHVnLWd3IGRhZW1vbiBjYW4g bm90IGRvIHdpdGggdGhlc2UuIGZvciBETlMgc2VydmVyLGl0IGlzIHRoZSANCnNhbWUgcHJvYmxl bSxiZWNhbnNlIEROUyBzZXJ2ZXIgbmVlZCB0Y3AgcG9ydCA1MyBhbmQgdWRwIHBvcnQgNTMuPC9G T05UPjwvRElWPg0KPERJVj48Rk9OVCBzaXplPTI+YnV0IEkgZG8gbm90IGtub3cgaG93IHRvIGRv IHRvIHJlc29sdiB0aGlzIHByb2JsZW0uIHNvbWUgDQphZHZpY2UgYXBwcmVjaWF0ZS48L0ZPTlQ+ PC9ESVY+PC9CT0RZPjwvSFRNTD4NCg== ------=_NextPart_000_0038_01C06395.EAB0B4E0-- From owner-fwtk-users@ex.tis.com Mon Dec 11 07:48 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA26917 Mon, 11 Dec 2000 07:48:19 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA20466; Mon, 11 Dec 2000 04:47:40 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 11 Dec 2000 03:22:42 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA17956 for fwtk-users-outgoing; Mon, 11 Dec 2000 03:22:22 -0800 (PST) Message-Id: <5.0.2.1.0.20001211060821.01d47910@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Mon, 11 Dec 2000 06:15:05 -0500 To: "wen" , From: Rick Murphy Subject: Re: how to set up FTP and DNS server behind fwtk box In-Reply-To: <003d01c06352$e403db60$0601a8c0@wen> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1542 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 05:15 PM 12/11/00 +0800, wen wrote: >hi,everyone: > I have installed fwtk2.1 in my system box which was installed > redhat6.1. now I want to set up FTP sever and DNS server behind fwtk box. > I have tried next: >in my net-perm file I add > plug-gw: port 21 * -plug-to port 21 my-ftp-server.ip > plug-gw1:port 20 * -plug-to port 20 my-ftp-server.ip >for DNS server > plug-gw2: port 53 * -plug-to port 53 my-DNS-server.ip > >I have changed plug-gw.c in order to make plug-gw daemon which only kowns >plug-gw prefix kowns above rule prefix. > >but now ftp server and DNS server don't work. why? There are two problems with your setup. FTP uses destination port 21 for it's control connection, but it uses *source* port 20 for the data connection (by default). To connect to a ftp server, you must use ftp-gw since ftp-gw understands the ftp protocol. There is a patch (if I remember correctly) for ftp-gw to permit you to force the destination address to a single ftp server. DNS usually uses UDP port 53 for name queries (TCP is used only for queries that return a large number of names, but UDP 53 dominates.) You can't use plug-gw to forward UDP. Typically, people run their externally-visible DNS on the firewall. If you must run an internal DNS server, set up a ipchains rule on your firewall to permit forwarding UDP port 53 to the DNS server. -Rick From owner-fwtk-users@ex.tis.com Mon Dec 11 18:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA28912 Mon, 11 Dec 2000 18:19:27 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA06109; Mon, 11 Dec 2000 15:18:38 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 11 Dec 2000 13:41:57 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA22301 for fwtk-users-outgoing; Mon, 11 Dec 2000 13:41:37 -0800 (PST) From: Eberhard Mattes Date: Mon, 11 Dec 2000 22:40:52 +0100 (MET) Message-Id: <200012112140.WAA14238@azu.informatik.uni-stuttgart.de> To: Hislaire@msg-i.com CC: fwtk-users@ex.tis.com In-reply-to: message from Olivier Hislaire on 6 Dec 2000 21:58:30 +0100 Subject: Re: Problem using nntp-gw Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text Content-Length: 864 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] > It is version 0.5 :-(( Are you sure that the *running* nntp-gw is version 0.5? > It looks like the nntp-gw program expects to be already connected to the > server when it receives the 'MODE READER' command from the client. Yes. If it is not connected to the server, version 0.5 will respond with 450 Authorization required for this command > Since I do not have the SERVER directive in the configuration file > (using more than one news server), nntp-gw cannot connect immediately > to the server; instead, it waits for the AUTHINFO USER command to > retrieve the server name and connect. You might want to run multiple copies of nntp-gw on different ports. -- Eberhard Mattes From owner-fwtk-users@ex.tis.com Tue Dec 12 09:01 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA01127 Tue, 12 Dec 2000 09:01:24 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA16808; Tue, 12 Dec 2000 06:00:53 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 03:50:08 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA12466 for fwtk-users-outgoing; Tue, 12 Dec 2000 03:49:57 -0800 (PST) Message-ID: <3A360E72.EA0DAFAC@ordix.de> Date: Tue, 12 Dec 2000 12:39:30 +0100 From: Markus Schreier X-Mailer: Mozilla 4.7 [de]C-CCK-MCD QXW03237 (WinNT; I) X-Accept-Language: de,en MIME-Version: 1.0 To: fwtk-users@ex.tis.com Subject: ntp through FWTK Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 634 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello FWTK-Gurus, i'm just setting up FWTK to protect our Network. Up to now we used xntpd to get current time from some Internet-Servers. Is there a special ntp-Proxy to use with the fwtk arround? If not, I tend to install xntpd on my fwtk-server to get time out of the internet and let all other hosts from the inner network ask the fwtk-server. Is there anything to take care of? Are there better ways to get ntp through the fwtk? Thanks for your help and your ideas. Markus Schreier ORDIX AG From owner-fwtk-users@ex.tis.com Tue Dec 12 11:31 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA01633 Tue, 12 Dec 2000 11:31:34 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA05243; Tue, 12 Dec 2000 08:31:14 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 07:07:24 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA21997 for fwtk-users-outgoing; Tue, 12 Dec 2000 07:07:12 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338702@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: internal DNS issue Date: Mon, 11 Dec 2000 16:54:53 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 538 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, can you please share some information on the following: 1. does the fwtk require the machine it's installed on to have two separate DNS servers specified, one for external (internet) DNS resolution and the other to resolve our internal network machine names? 2. if i only setup external DNS is configured, will the machine try to resolve internal machine names using the external DNS? thanks From owner-fwtk-users@ex.tis.com Tue Dec 12 11:31 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA01637 Tue, 12 Dec 2000 11:31:43 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA05278; Tue, 12 Dec 2000 08:31:24 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 07:06:37 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA21893 for fwtk-users-outgoing; Tue, 12 Dec 2000 07:06:06 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE37148013386FE@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: long delay in getting prompt Date: Mon, 11 Dec 2000 16:21:23 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 511 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi here, i have FWTK (v2.1) installed on a solaris (v5.6) machine, some times when i try using ftp or telnet services, it takes a long time for me to get a login prompt, and it just stays with the following: ws1% ftp proxy3 Connected to proxy3 some times is very fast, at times it can take up to 6 or 8 minutes to get the prompt to login. any help would be appreciated. thanks. From owner-fwtk-users@ex.tis.com Tue Dec 12 11:31 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA01638 Tue, 12 Dec 2000 11:31:43 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA05239; Tue, 12 Dec 2000 08:31:13 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 07:15:44 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA23137 for fwtk-users-outgoing; Tue, 12 Dec 2000 07:15:23 -0800 (PST) Message-ID: <3A3640C1.FBED8288@zrz.TU-Berlin.DE> Date: Tue, 12 Dec 2000 16:14:09 +0100 From: Gerd Schering Organization: TUB X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.14-15mdk i686) X-Accept-Language: en MIME-Version: 1.0 To: Markus Schreier CC: FWTK Mailing Liste Subject: Re: ntp through FWTK References: <3A360E72.EA0DAFAC@ordix.de> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms58B3A4EFAC680659F763F414" Content-Length: 2247 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This is a cryptographically signed message in MIME format. --------------ms58B3A4EFAC680659F763F414 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Markus Schreier wrote: > > Is there a special ntp-Proxy to use with the fwtk arround? > Look for a link to a programm named "udprelay-xx" in the patches section of www.fwtk.org. Gerd ------------------------------------------------------ -- Gerd Schering -- Email: Schering@zrz.TU-Berlin.DE ------------------------------------------------------ --------------ms58B3A4EFAC680659F763F414 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIDvwYJKoZIhvcNAQcCoIIDsDCCA6wCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC AiMwggIfMIIBiKADAgECAgIA2zANBgkqhkiG9w0BAQQFADBFMQswCQYDVQQGEwJERTESMBAG A1UEChMJVFUtQmVybGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwMB4X DTAwMDgyMTExNDcyNVoXDTAyMDIxMjExNDcyNVowcTELMAkGA1UEBhMCREUxEjAQBgNVBAoT CVRVLUJlcmxpbjEMMAoGA1UECxMDWlJaMRYwFAYDVQQDEw1HZXJkIFNjaGVyaW5nMSgwJgYJ KoZIhvcNAQkBFhlTY2hlcmluZ0B6cnouVFUtQmVybGluLkRFMFwwDQYJKoZIhvcNAQEBBQAD SwAwSAJBAMzO07BsdY4ao1jwlxpa3z6t32gF+XfuOORFv5n8cg4vBbjipcmd8xujpYDGY9GY gZa24RA34B4ZHwKv7Af1XOECAwEAAaM2MDQwEQYJYIZIAYb4QgEBBAQDAgCgMB8GA1UdIwQY MBaAFAbN8qubZqQJJpbjkE+k2mOXQCqPMA0GCSqGSIb3DQEBBAUAA4GBAFmom4WWG42yDme4 Thl+NXRjM+tCqbmE6L70TkL0IU8D0LaJb2KcfvU1FCK+xZWvHn7q1wSUioAFn2Kg4jD/hPww 40E7WMDT+0RNWDWqd94z6+UCBp453jdqwuq4gw+d6vYC7coCdnoW/6VQw+ZaFQs0RFnObEtM 132MBEUbQ0nyMYIBZDCCAWACAQEwSzBFMQswCQYDVQQGEwJERTESMBAGA1UEChMJVFUtQmVy bGluMQwwCgYDVQQLEwNaUloxFDASBgNVBAMTC1RDIFRVQiAyMDAwAgIA2zAJBgUrDgMCGgUA oIGxMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAwMTIxMjE1 MTQxMVowIwYJKoZIhvcNAQkEMRYEFEq92LtR1tK7OiARYU7ydsOCGfQLMFIGCSqGSIb3DQEJ DzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgFAMA0GCCqGSIb3DQMCAgEoMA0GCSqGSIb3DQEBAQUABEDJzawr7tjNtKsO3hYzoPyOEVfm AFhavMsckmEVe5TuM+qf2ljQbCHtjw/n4CLeFxFJuC8F1qhd/yCJuJvCyhYW --------------ms58B3A4EFAC680659F763F414-- From owner-fwtk-users@ex.tis.com Tue Dec 12 11:31 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA01636 Tue, 12 Dec 2000 11:31:40 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA05235; Tue, 12 Dec 2000 08:31:09 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 07:07:34 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA21996 for fwtk-users-outgoing; Tue, 12 Dec 2000 07:07:08 -0800 (PST) From: David Lang To: Markus Schreier Cc: fwtk-users@ex.tis.com Date: Tue, 12 Dec 2000 06:17:53 -0800 (PST) Subject: Re: ntp through FWTK In-Reply-To: <3A360E72.EA0DAFAC@ordix.de> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1280 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] NTP uses UDP which the toolkit does not deal with, the reccomended method in 'building internet firewalls' is to do exactly as you propose and run NTP on the firewall and have the machines on the inside point at it. just keep your eyes open for any bugs found in ntp :-) David Lang On Tue, 12 Dec 2000, Markus Schreier wrote: > Date: Tue, 12 Dec 2000 12:39:30 +0100 > From: Markus Schreier > To: fwtk-users@ex.tis.com > Subject: ntp through FWTK > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello FWTK-Gurus, > i'm just setting up FWTK to protect our Network. Up to now we used xntpd > to get current time from some Internet-Servers. > > Is there a special ntp-Proxy to use with the fwtk arround? > > If not, I tend to install xntpd on my fwtk-server to get time out of the > internet and let all other hosts from the inner network ask the > fwtk-server. > > Is there anything to take care of? > > Are there better ways to get ntp through the fwtk? > > Thanks for your help and your ideas. > > > Markus Schreier > > ORDIX AG > From owner-fwtk-users@ex.tis.com Tue Dec 12 12:47 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA01970 Tue, 12 Dec 2000 12:47:28 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA21161; Tue, 12 Dec 2000 09:47:01 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 08:23:20 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA03890 for fwtk-users-outgoing; Tue, 12 Dec 2000 08:22:58 -0800 (PST) Message-ID: From: Malcolm Tester To: "Barreira, Fernando [IT]" , "'fwtk-users@tis.com'" Subject: RE: internal DNS issue Date: Tue, 12 Dec 2000 09:19:33 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 1340 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have an internal DNS server (not on the firewall) for internal name resolution. I have it set up to use the firewall as a "forwarder" for external name resolution. The firewall has an external DNS server on it, but it has _NO_ knowledge of the internal DNS and can't resolve internal names unless they are specifically defined in the "hosts" file. Which is not recommended. Regards, Malcolm -> -----Original Message----- -> From: Barreira, Fernando [IT] [mailto:fernando.barreira@ssmb.com] -> Sent: Monday, December 11, 2000 2:55 PM -> To: 'fwtk-users@tis.com' -> Subject: internal DNS issue -> -> -> [To be removed from this list send the message "unsubscribe -> fwtk-users" in the -> BODY of a mail message to majordomo@ex.tis.com.] -> -> hi there, -> -> can you please share some information on the following: -> -> 1. does the fwtk require the machine it's installed on to -> have two separate -> DNS servers specified, one for external (internet) DNS -> resolution and the -> other to resolve our internal network machine names? -> -> 2. if i only setup external DNS is configured, will the -> machine try to -> resolve internal machine names using the external DNS? -> -> thanks -> From owner-fwtk-users@ex.tis.com Tue Dec 12 13:00 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA02030 Tue, 12 Dec 2000 13:00:40 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA23108; Tue, 12 Dec 2000 10:00:23 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 08:45:24 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA08047 for fwtk-users-outgoing; Tue, 12 Dec 2000 08:45:13 -0800 (PST) X-Authentication-Warning: spider.usrconsult.be: mail set sender to using -f Message-ID: <3A3654F3.4790E053@peaktime.be> Date: Tue, 12 Dec 2000 17:40:19 +0100 From: Michel Bardiaux Organization: Peaktime Belgium S.A. X-Mailer: Mozilla 4.73 [en] (WinNT; I) X-Accept-Language: en,fr MIME-Version: 1.0 To: "'fwtk-users@tis.com'" Subject: Re: internal DNS issue References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1306 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Malcolm Tester wrote: > > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I have an internal DNS server (not on the firewall) for internal name > resolution. I have it set up to use the firewall as a "forwarder" for > external name resolution. > > The firewall has an external DNS server on it, but it has _NO_ knowledge of > the internal DNS and can't resolve internal names unless they are > specifically defined in the "hosts" file. Which is not recommended. > > Regards, > Malcolm > Why is it not recommended? The FWTK attempts to reverse-lookup *all* connection attempts, whether they come from outside or from the internal net. Seems to me that implies FWTK expects *some* resolver for the internal hosts, and /etc/hosts seems to me safer (not to mention easier) than trying to setup one's own DNS map. If /etc/hosts is a security risk, then the FWTK should not attempt reverse-lookup on internal addresses, is there a netperm-table command for that? -- Michel Bardiaux Peaktime Belgium S.A. Rue Margot, 37 B-1457 Nil St Vincent Tel : +32 10 65.44.15 Fax : +32 10 65.44.10 From owner-fwtk-users@ex.tis.com Tue Dec 12 13:00 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA02032 Tue, 12 Dec 2000 13:00:53 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA23104; Tue, 12 Dec 2000 10:00:23 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 08:45:34 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA08048 for fwtk-users-outgoing; Tue, 12 Dec 2000 08:45:13 -0800 (PST) Message-ID: <3A365CA3.8A5633CA@dreamwvr.com> Date: Tue, 12 Dec 2000 10:13:08 -0700 From: dreamwvr X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-5.0 i686) X-Accept-Language: en MIME-Version: 1.0 To: Markus Schreier CC: fwtk-users@ex.tis.com Subject: Re: ntp through FWTK References: <3A360E72.EA0DAFAC@ordix.de> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 969 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi Markus, updrelay is known to work although YMMV.. might be a idea once you have done this write some documentation for FWTK.. Markus Schreier wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello FWTK-Gurus, > i'm just setting up FWTK to protect our Network. Up to now we used xntpd > to get current time from some Internet-Servers. > > Is there a special ntp-Proxy to use with the fwtk arround? > > If not, I tend to install xntpd on my fwtk-server to get time out of the > internet and let all other hosts from the inner network ask the > fwtk-server. > > Is there anything to take care of? > > Are there better ways to get ntp through the fwtk? > > Thanks for your help and your ideas. > > Markus Schreier > > ORDIX AG From owner-fwtk-users@ex.tis.com Tue Dec 12 14:16 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA02297 Tue, 12 Dec 2000 14:16:08 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA06511; Tue, 12 Dec 2000 11:15:37 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 09:51:32 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA21950 for fwtk-users-outgoing; Tue, 12 Dec 2000 09:51:12 -0800 (PST) Message-ID: From: Malcolm Tester To: Michel Bardiaux , "'fwtk-users@tis.com'" Subject: RE: internal DNS issue Date: Tue, 12 Dec 2000 10:47:52 -0700 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2448.0) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 2708 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Section 3.1 of the Docs ( http://www.fwtk.org/fwtk/docs/documentation.html#3.1 ): ... Set up external DNS on the FWTK machine. This DNS server is the one that the InterNIC points to for your DNS. Create full DNS records for the host(s) you have directly connected to the Internet. Do not give out information on your internal network here! SOA - source of authority ... ... The EXTERNAL DNS (the one the Internet sees) is the primary DNS as far as InterNIC is concerned. This server should have a cache file to leads to the root level servers. Note: This server only contains info I want the world to know about. e.g. MX records and the addr of our external web and FTP servers. ... /etc/hosts is queried by DNS, thus that is why. At least on Solaris machines. perhaps it is different for other OS's, but the guy did say he's using Solaris 2.6. If the FWTK can't resolve an internal IP, it'll simply list it as "unknown". Depending on what you need, this may or may not work. You're right. There is a less risk to using /etc/hosts than using the full DNS server. You have more control over what "hostname" is valid and can be queried. But if you can avoid it, you should. In my case, I actually have a more complex setup than most companies, I would wager. There are only two machines on my internal network than can even see the firewall. One is a unix "proxy" server, and the other is an NT machine running Proxy Server 2.0. (MS's replacement for that in 3.0 sucks still). Those two machines relay everything to and from the firewall to all clients internally. So the firewall only sees two other IP addresses on the inside. So having reverse lookups to those two ip addresses is not a big deal for me. Malcolm -> -----Original Message----- -> From: Michel Bardiaux [mailto:mbardiaux@peaktime.be] -> Sent: Tuesday, December 12, 2000 9:40 AM -> To: 'fwtk-users@tis.com' -> Subject: Re: internal DNS issue -> -> Why is it not recommended? The FWTK attempts to reverse-lookup *all* -> connection attempts, whether they come from outside or from -> the internal -> net. Seems to me that implies FWTK expects *some* resolver for the -> internal hosts, and /etc/hosts seems to me safer (not to -> mention easier) -> than trying to setup one's own DNS map. If /etc/hosts is a security -> risk, then the FWTK should not attempt reverse-lookup on internal -> addresses, is there a netperm-table command for that? -> -> -- -> Michel Bardiaux -> Peaktime Belgium S.A. Rue Margot, 37 B-1457 Nil St Vincent -> Tel : +32 10 65.44.15 Fax : +32 10 65.44.10 -> From owner-fwtk-users@ex.tis.com Tue Dec 12 14:43 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA02353 Tue, 12 Dec 2000 14:43:38 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA10788; Tue, 12 Dec 2000 11:43:08 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 10:27:32 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA27734 for fwtk-users-outgoing; Tue, 12 Dec 2000 10:27:09 -0800 (PST) Date: Tue, 12 Dec 2000 13:26:26 -0500 From: Joseph S D Yao To: "Barreira, Fernando [IT]" Cc: "'fwtk-users@tis.com'" Subject: Re: internal DNS issue Message-Id: <20001212132626.N17735@washington.cospo.osis.gov> Mail-Followup-To: "Barreira, Fernando [IT]" , "'fwtk-users@tis.com'" References: <3D6CFAEE245FD411938A00508BE3714801338702@exchnj01.sbi.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <3D6CFAEE245FD411938A00508BE3714801338702@exchnj01.sbi.com>; from fernando.barreira@ssmb.com on Mon, Dec 11, 2000 at 04:54:53PM -0500 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1668 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Mon, Dec 11, 2000 at 04:54:53PM -0500, Barreira, Fernando [IT] wrote: ... > 1. does the fwtk require the machine it's installed on to have two separate > DNS servers specified, one for external (internet) DNS resolution and the > other to resolve our internal network machine names? It's best to have an internal DNS server for internal names and an external DNS server for external names. There's no need to have them both on the firewall, and there is some thought that having neither on the firewall might be best. You will need to run DNS on the firewall, even if without any authoritative zones at all, to proxy internal requests for Internet information. > 2. if i only setup external DNS is configured, will the machine try to > resolve internal machine names using the external DNS? The machine will try to resolve names using whatever YOU tell it to do. You should specify the INTERNAL name server in the firewall's /etc/resolv.conf file. The internal name server should forward all unresolved queries to the firewall. The "DNS and BIND" book by Albitz & Liu [3rd ed., "soon" to be 4th] is the best reference so far. However, you should use BIND 8.2.2-P7 or later, and the documention for everything past 8.1.2 needs to be found in the BIND package. This includes some uses of forwarding. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Tue Dec 12 15:13 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA02542 Tue, 12 Dec 2000 15:13:54 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA15107; Tue, 12 Dec 2000 12:13:33 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 10:53:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA02389 for fwtk-users-outgoing; Tue, 12 Dec 2000 10:53:28 -0800 (PST) Message-ID: From: "Nixon, Anthony" To: "'fwtk-users@ex.tis.com'" Subject: fwtk-summ.pl Date: Tue, 12 Dec 2000 13:52:59 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 642 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I need to get reports concerning the http proxy traffic generated similar to the other reporting provided by the toolkit (like today-report.sh). I have tried http-summ.sh and fwtk-summ.pl and can get neither one to work. I am running the FWTK on an intel RH6.2 box. Has anyone other than the author (who I have tried to email) got either of these to work? I would prefer fwtk-summ.pl due to the information is outputs, but it hangs when used. Any and all help will be greatly appreciated. Regards, Shon Nixon From owner-fwtk-users@ex.tis.com Tue Dec 12 18:40 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA03103 Tue, 12 Dec 2000 18:40:11 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA09299; Tue, 12 Dec 2000 15:39:35 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 14:10:11 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id OAA00166 for fwtk-users-outgoing; Tue, 12 Dec 2000 14:09:40 -0800 (PST) Date: Tue, 12 Dec 2000 17:08:35 -0500 From: Joseph S D Yao To: Malcolm Tester Cc: Michel Bardiaux , "'fwtk-users@tis.com'" Subject: Re: internal DNS issue Message-Id: <20001212170835.D17735@washington.cospo.osis.gov> Mail-Followup-To: Malcolm Tester , Michel Bardiaux , "'fwtk-users@tis.com'" References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from MTester@cambric.com on Tue, Dec 12, 2000 at 10:47:52AM -0700 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1090 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Tue, Dec 12, 2000 at 10:47:52AM -0700, Malcolm Tester wrote: > /etc/hosts is queried by DNS, thus that is why. At least on Solaris > machines. perhaps it is different for other OS's, but the guy did say he's > using Solaris 2.6. Most name servers run the BIND software package. This includes the 'named' name daemon, which NEVER looks at /etc/hosts. It also includes the resolver libraries. The resolver libraries may be called by gethostbyname(), etc. These latter routines may look at /etc/hosts, or do a NIS lookup, or do a Hesiod lookup, or just use pure DNS. Most systems nowadays [like Solaris] have some configurable way to determine what lookups are done, and in which order. So ... "DNS" never queries /etc/hosts. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Tue Dec 12 19:48 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA03256 Tue, 12 Dec 2000 19:48:48 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA14706; Tue, 12 Dec 2000 16:48:21 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 12 Dec 2000 15:26:26 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA08301 for fwtk-users-outgoing; Tue, 12 Dec 2000 15:26:04 -0800 (PST) Message-Id: <5.0.2.1.0.20001212181744.01d6dbf0@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 12 Dec 2000 18:19:01 -0500 To: "Nixon, Anthony" , "'fwtk-users@ex.tis.com'" From: Rick Murphy Subject: Re: fwtk-summ.pl In-Reply-To: Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 542 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 01:52 PM 12/12/00 -0500, Nixon, Anthony wrote: >I would prefer >fwtk-summ.pl due to the information is outputs, but it hangs when used. Any >and all help will be greatly appreciated. A guess: Many of the log summary scripts expect a syslog stream as their standard input. What happens if you use "fwtk-summ.pl Mime-Version: 1.0 X-Mailer: Mutt 1.0.1i X-Mailer: Mutt 1.0.1i X-Operating-System: Linux grobi 2.2.14-5.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 956 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear List, I am giving training classes for which I receive money covering Linux Firewalling in Germany. I would like to include the TIS FWTK in these classes. Reading the License I do not really know how far I am allowed to go. May I mention the TIS FWTK in class and courseware? May I explain how to use the TIS FWTK in class and courseware? How to install, configure, troubleshoot the Kit. May I use the TIS FWTK in class to implement to above explainations? So that the students can install, configure and troubleshoot themselves. Anybody there that can shed some light? Kind Regards, Ralf Spenneberg -- Ralf Spenneberg MCSE+I, MCT, RHCE, RHCX, LCP, Linux-Consultant Waldring 34 48565 Steinfurt Fon: +49(0)2552 638 755 Fax: +49(0)2552 638 757 Mobil: +49(0)177 567 27 40 http://www.spenneberg.com/.net/.org/.de From owner-fwtk-users@ex.tis.com Wed Dec 13 07:55 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA05148 Wed, 13 Dec 2000 07:55:08 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA17182; Wed, 13 Dec 2000 04:54:31 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 13 Dec 2000 03:24:26 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA13446 for fwtk-users-outgoing; Wed, 13 Dec 2000 03:24:05 -0800 (PST) Message-Id: <5.0.2.1.0.20001213061354.01e67170@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Wed, 13 Dec 2000 06:20:55 -0500 To: spenneb@spenneberg.de, fwtk-users@ex.tis.com From: Rick Murphy Subject: Re: FWTK-License and Training In-Reply-To: <20001213070443.A22378@grobi> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 1865 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] First, a disclaimer. I don't speak for NAI. Any "official" word on their policy would have to come from them. At 07:04 AM 12/13/00 +0100, spenneb@spenneberg.de wrote: >I am giving training classes for which I receive money covering Linux >Firewalling in Germany. I would like to include the TIS FWTK in these >classes. Reading the License I do not really know how far I am allowed to go. >May I mention the TIS FWTK in class and courseware? That's not a problem. In fact, I've done this myself in a firewalls course. >May I explain how to use the TIS FWTK in class and courseware? > How to install, configure, troubleshoot the Kit. This is still probably OK if the FWTK is a small part of the overall course. That is, the purpose of the course is not to sell training on how to use FWTK. If the purpose is to teach students on how to build a firewall with FWTK providing a few additional features (like authenticated Telnet), that's probably OK. You're coming close to the edge of prohibited activity, though. >May I use the TIS FWTK in class to implement to above explainations? > So that the students can install, configure and troubleshoot > themselves. Yes, also probably OK. The same caveats exist as above. The purpose of the FWTK license is to restrict people from making a business around FWTK. This was brought upon us by the morons who installed firewalls using FWTK, then told their "customers" that fwtk-support@tis.com was who they turned to for support. It doesn't seem to me that what you're doing rises anywhere near that level of abuse. I'd send an e-mail to NAI saying what you're going to do with a "silence means permission" clause. Save the mail and go teach. -Rick From owner-fwtk-users@ex.tis.com Wed Dec 13 12:07 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06049 Wed, 13 Dec 2000 12:06:51 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA05633; Wed, 13 Dec 2000 09:06:28 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 13 Dec 2000 07:01:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA23653 for fwtk-users-outgoing; Wed, 13 Dec 2000 07:00:48 -0800 (PST) Message-Id: <5.0.2.1.0.20001212171438.01d53e10@mail.itm-inst.com> X-Sender: rmurphy@mail.itm-inst.com X-Mailer: QUALCOMM Windows Eudora Version 5.0.2 Date: Tue, 12 Dec 2000 17:15:38 -0500 To: "Barreira, Fernando [IT]" , "'fwtk-users@tis.com'" From: Rick Murphy Subject: Re: long delay in getting prompt In-Reply-To: <3D6CFAEE245FD411938A00508BE37148013386FE@exchnj01.sbi.com> Mime-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 922 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] At 04:21 PM 12/11/00 -0500, Barreira, Fernando [IT] wrote: >[To be removed from this list send the message "unsubscribe fwtk-users" in the >BODY of a mail message to majordomo@ex.tis.com.] > >hi here, > >i have FWTK (v2.1) installed on a solaris (v5.6) machine, some times when i >try using ftp or telnet services, it takes a long time for me to get a login >prompt, and it just stays with the following: > >ws1% ftp proxy3 >Connected to proxy3 > >some times is very fast, at times it can take up to 6 or 8 minutes to get >the prompt to login. That's almost always because the firewall is taking a long time in a DNS lookup - probably looking up the PTR record for the host you're coming from. Verify that both forward and reverse lookups for the source host work correctly. -Rick From owner-fwtk-users@ex.tis.com Wed Dec 13 12:07 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06048 Wed, 13 Dec 2000 12:06:48 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA05613; Wed, 13 Dec 2000 09:06:25 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 13 Dec 2000 07:01:46 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA23668 for fwtk-users-outgoing; Wed, 13 Dec 2000 07:00:57 -0800 (PST) X-Authentication-Warning: spider.usrconsult.be: mail set sender to using -f Message-ID: <3A374176.E5C85BB9@peaktime.be> Date: Wed, 13 Dec 2000 10:29:26 +0100 From: Michel Bardiaux Organization: Peaktime Belgium S.A. X-Mailer: Mozilla 4.73 [en] (WinNT; I) X-Accept-Language: en,fr MIME-Version: 1.0 To: "'fwtk-users@tis.com'" CC: Joseph S D Yao , Malcolm Tester Subject: Re: internal DNS issue References: <20001212170835.D17735@washington.cospo.osis.gov> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1897 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Joseph S D Yao wrote: > > On Tue, Dec 12, 2000 at 10:47:52AM -0700, Malcolm Tester wrote: > > /etc/hosts is queried by DNS, thus that is why. At least on Solaris > > machines. perhaps it is different for other OS's, but the guy did say he's > > using Solaris 2.6. > > Most name servers run the BIND software package. This includes the > 'named' name daemon, which NEVER looks at /etc/hosts. It also includes > the resolver libraries. The resolver libraries may be called by > gethostbyname(), etc. These latter routines may look at /etc/hosts, or > do a NIS lookup, or do a Hesiod lookup, or just use pure DNS. Most > systems nowadays [like Solaris] have some configurable way to determine > what lookups are done, and in which order. > > So ... "DNS" never queries /etc/hosts. > I am confused by the sentence "It also includes the resolver libraries" Does "it" refer to named or the BIND package? In other words, does named use the resolver libraries? If no, then one can configure resolver to use /etc/hosts *and* DNS for the use of FWTK reverse-lookup, while only the named configuration will be visible from the 'net, and Malcolm's concerns disappear. *But* if named uses the resolver, then if we give /etc/hosts to the resolver we export internal network topology to the world; and if we don't give it, then FWTK can not issue log messages with resolved IP addresses. The first is bad, the 2nd is a pain. There simply does not seem to be any good solution - apart maybe from using patched resolver libraries with the FW apps, patched to use a different resolver configuration file from the rest of the system. Greetings. -- Michel Bardiaux Peaktime Belgium S.A. Rue Margot, 37 B-1457 Nil St Vincent Tel : +32 10 65.44.15 Fax : +32 10 65.44.10 From owner-fwtk-users@ex.tis.com Wed Dec 13 12:53 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06250 Wed, 13 Dec 2000 12:52:40 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA10788; Wed, 13 Dec 2000 09:52:42 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 13 Dec 2000 08:33:45 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA02162 for fwtk-users-outgoing; Wed, 13 Dec 2000 08:33:14 -0800 (PST) Date: Wed, 13 Dec 2000 11:31:35 -0500 From: Joseph S D Yao To: Michel Bardiaux Cc: "'fwtk-users@tis.com'" , Malcolm Tester Subject: Re: internal DNS issue Message-Id: <20001213113135.B27143@washington.cospo.osis.gov> Mail-Followup-To: Michel Bardiaux , "'fwtk-users@tis.com'" , Malcolm Tester References: <20001212170835.D17735@washington.cospo.osis.gov> <3A374176.E5C85BB9@peaktime.be> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <3A374176.E5C85BB9@peaktime.be>; from mbardiaux@peaktime.be on Wed, Dec 13, 2000 at 10:29:26AM +0100 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 954 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Wed, Dec 13, 2000 at 10:29:26AM +0100, Michel Bardiaux wrote: > I am confused by the sentence "It also includes the resolver libraries" > Does "it" refer to named or the BIND package? In other words, does named > use the resolver libraries? If no, then one can configure resolver to > use /etc/hosts *and* DNS for the use of FWTK reverse-lookup, while only > the named configuration will be visible from the 'net, and Malcolm's > concerns disappear. Apologies. The BIND package includes the resolver libraries. The 'named' name daemon, also part of BIND, does NOT use the resolver libraries. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Thu Dec 14 14:10 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id OAA10558 Thu, 14 Dec 2000 14:10:30 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id LAA00483; Thu, 14 Dec 2000 11:10:02 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 14 Dec 2000 08:57:11 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA09516 for fwtk-users-outgoing; Thu, 14 Dec 2000 08:56:59 -0800 (PST) Date: Thu, 14 Dec 2000 15:07:29 +0100 (MET) From: Andreas Lamprecht X-Sender: andi@sunnix To: fwtk-users@lists.nai.com Subject: Possible bug in smap Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1328 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello! I'm new to this list so please forgive me if this is an old and known problem. I use fwtk for many years now and especially the smap/smapd is used here in combination with procmail/sendmail and a virus scanner on our main mail machine for about 7000 Mails/hour. This combo runs for over two years now without main problems but recently people were complaining about lost mails. I was scanning through the source of smap and found the line if (link(tmpf, p) && (errno != EEXIST)) where smap links the received mail from filename xmaXXXXXX which is generated through mkstemp to the same filename, first char changed to "s". And, thats the nasty bit, if this file is already existent, ignores the error and deletes the xmaXXXXXX file, so the mail is gone. The tricky thing is in the mkstemp function which generates a filename with the calling pid and on my solaris box. And since im running smap through inet, the chance of getting the same pid after a short time is very high, especially on a high loaded machine. So i have changed the above line to a piece of code which tries to find a unused filename and links to it. Seems to work so far ... Any comments? Greetings from Austria From owner-fwtk-users@ex.tis.com Thu Dec 14 15:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA10701 Thu, 14 Dec 2000 15:19:22 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA11155; Thu, 14 Dec 2000 12:18:49 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 14 Dec 2000 10:56:41 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA28156 for fwtk-users-outgoing; Thu, 14 Dec 2000 10:56:18 -0800 (PST) Date: Thu, 14 Dec 2000 13:52:52 -0500 (EST) From: Ted Keller To: Andreas Lamprecht cc: fwtk-users@lists.nai.com Subject: Re: Possible bug in smap In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1971 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Andreas, I noted that a few years ago and agree with your assessment. I modified the smap/smapd routines to create smaXXXXX files directly - and making them available for delivery based on the permissions going to 700. Thgis way, mkstemp always recates a unique file. I think there are other race conditions also in the way smap was originally implmeneted. These are corrected also. ted keller On Thu, 14 Dec 2000, Andreas Lamprecht wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello! > > I'm new to this list so please forgive me if this is an old and known > problem. > > I use fwtk for many years now and especially the smap/smapd is used here > in combination with procmail/sendmail and a virus scanner on our main mail > machine for about 7000 Mails/hour. This combo runs for over two years now > without main problems but recently people were complaining about lost > mails. I was scanning through the source of smap and found the line > > if (link(tmpf, p) && (errno != EEXIST)) > > where smap links the received mail from filename xmaXXXXXX which is > generated through mkstemp to the same filename, first char changed to "s". > And, thats the nasty bit, if this file is already existent, ignores the > error and deletes the xmaXXXXXX file, so the mail is gone. > The tricky thing is in the mkstemp function which generates a filename > with the calling pid and on my solaris box. And since im running smap > through inet, the chance of getting the same pid after a short time is > very high, especially on a high loaded machine. > So i have changed the above line to a piece of code which tries to find a > unused filename and links to it. Seems to work so far ... > > Any comments? > > Greetings from Austria > > From owner-fwtk-users@ex.tis.com Thu Dec 14 18:08 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id SAA11102 Thu, 14 Dec 2000 18:08:12 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id PAA05310; Thu, 14 Dec 2000 15:08:19 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 14 Dec 2000 13:42:23 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id NAA22627 for fwtk-users-outgoing; Thu, 14 Dec 2000 13:42:01 -0800 (PST) Date: Thu, 14 Dec 2000 16:40:52 -0500 From: Joseph S D Yao To: Andreas Lamprecht Cc: fwtk-users@lists.nai.com Subject: Re: Possible bug in smap Message-Id: <20001214164052.Q5351@washington.cospo.osis.gov> Mail-Followup-To: Andreas Lamprecht , fwtk-users@lists.nai.com References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from andi@sunnix.sie.siemens.at on Thu, Dec 14, 2000 at 03:07:29PM +0100 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1799 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Thu, Dec 14, 2000 at 03:07:29PM +0100, Andreas Lamprecht wrote: ... > I use fwtk for many years now and especially the smap/smapd is used here > in combination with procmail/sendmail and a virus scanner on our main mail > machine for about 7000 Mails/hour. This combo runs for over two years now > without main problems but recently people were complaining about lost > mails. I was scanning through the source of smap and found the line > > if (link(tmpf, p) && (errno != EEXIST)) > > where smap links the received mail from filename xmaXXXXXX which is > generated through mkstemp to the same filename, first char changed to "s". > And, thats the nasty bit, if this file is already existent, ignores the > error and deletes the xmaXXXXXX file, so the mail is gone. > The tricky thing is in the mkstemp function which generates a filename > with the calling pid and on my solaris box. And since im running smap > through inet, the chance of getting the same pid after a short time is > very high, especially on a high loaded machine. > So i have changed the above line to a piece of code which tries to find a > unused filename and links to it. Seems to work so far ... > > Any comments? > > Greetings from Austria This is probably a good change. Could you submit a patch in 'diff -c' format? What is the original version from which you started? Note that the code above is changed by some of the other patches on www.fwtk.org ... -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Fri Dec 15 04:59 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA13236 Fri, 15 Dec 2000 04:59:34 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA05289; Fri, 15 Dec 2000 01:59:41 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 15 Dec 2000 00:23:24 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA01998 for fwtk-users-outgoing; Fri, 15 Dec 2000 00:23:13 -0800 (PST) Date: Fri, 15 Dec 2000 09:07:03 +0100 (MET) From: Andreas Lamprecht X-Sender: andi@sunnix To: fwtk-users@lists.nai.com Subject: Fix to smap.c Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: MULTIPART/MIXED; BOUNDARY="-559023410-758783491-976867623=:314" Content-Length: 5486 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. ---559023410-758783491-976867623=:314 Content-Type: TEXT/PLAIN; charset=US-ASCII Attached is a patch to smap.c which solved my problem with lost mails so far. I'm sure there 1000 better ways of doing it but this should do it for a while ... One guy wrote that he changed smap to create smaXXXXXX files with mkstemp and does a chmod for making it accessible to smapd. This seems to be a much better idea. Greetings from cold Vienna. Andreas Lamprecht ---559023410-758783491-976867623=:314 Content-Type: TEXT/PLAIN; charset=US-ASCII; name=diff Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: patch in diff -c format Content-Disposition: attachment; filename=diff KioqIHNtYXAuYy5vcmlnCUZyaSBEZWMgMTUgMDc6NDI6MTUgMjAwMA0KLS0t IHNtYXAuYwlGcmkgRGVjIDE1IDA4OjU4OjUxIDIwMDANCioqKioqKioqKioq KioqKg0KKioqIDksMTUgKioqKg0KICAvKg0KICAgKglBdXRob3I6IE1hcmN1 cyBKLiBSYW51bSwgVHJ1c3RlZCBJbmZvcm1hdGlvbiBTeXN0ZW1zLCBJbmMu DQogICAqLw0KISBzdGF0aWMJY2hhcglSY3NJZFtdID0gIiRIZWFkZXI6IC9o b21lL3JtdXJwaHkvZnd0ay9md3RrL3NtYXAvUkNTL3NtYXAuYyx2IDEuMjIg MTk5OC8wMS8xMyAyMjo1NjowNiBybXVycGh5IEV4cCAkIjsNCiAgDQogIA0K ICAjaW5jbHVkZQk8c3lzL3R5cGVzLmg+DQotLS0gOSwxNSAtLS0tDQogIC8q DQogICAqCUF1dGhvcjogTWFyY3VzIEouIFJhbnVtLCBUcnVzdGVkIEluZm9y bWF0aW9uIFN5c3RlbXMsIEluYy4NCiAgICovDQohIHN0YXRpYwljaGFyCVJj c0lkW10gPSAiJEhlYWRlcjogL2hvbWUvcm11cnBoeS9md3RrL2Z3dGsvc21h cC9SQ1Mvc21hcC5jLHYgMS4yMl8xIDE5OTgvMDEvMTMgMjI6NTY6MDYgcm11 cnBoeSBFeHAgJCI7DQogIA0KICANCiAgI2luY2x1ZGUJPHN5cy90eXBlcy5o Pg0KKioqKioqKioqKioqKioqDQoqKiogNzE1LDcyNSAqKioqDQotLS0gNzE1 LDczNSAtLS0tDQogIHsNCiAgCXN0cnVjdCBmaWxlX2xpc3QgKmZsID0gKHN0 cnVjdCBmaWxlX2xpc3QgKikgbWFsbG9jKHNpemVvZihzdHJ1Y3QgZmlsZV9s aXN0KSk7DQogIAljaGFyICpwID0gKGNoYXIgKiltYWxsb2Moc3RybGVuKHRt cGYpICsgMSk7DQorICAgICAgICAgY2hhciAqbGFzdGNoYXI7DQorICAgICAg ICAgY2hhciBvbGRsYXN0Y2hhcjsNCiAgDQorIA0KICAJaWYgKHAgPT0gKGNo YXIgKikwIHx8IGZsID09IChzdHJ1Y3QgZmlsZV9saXN0ICopMCkNCiAgCQlz bWFwX2V4aXQoMSk7DQogIA0KICAJc3RyY3B5KHAsIHRtcGYpOw0KKyANCisg ICAgICAgICBmb3IobGFzdGNoYXIgPSBwOyAqbGFzdGNoYXIgIT0gJ1wwJzsg bGFzdGNoYXIrKykNCisgCQk7DQorIA0KKyAJbGFzdGNoYXIgLS07DQorIAlv bGRsYXN0Y2hhciA9ICpsYXN0Y2hhcjsNCisgDQogIAlmbC0+bmV4dCA9IGZp bGVsaXN0Ow0KICAJZmwtPnRtcGZpbGUgPSBwOw0KICAJZmlsZWxpc3QgPSBm bDsNCioqKioqKioqKioqKioqKg0KKioqIDcyNiw3MzcgKioqKg0KICANCiAg CS8qIHVzZSBsaW5rIHRvIG1ha2UgaXQgdmlzaWJsZSB0byBzbWFwZCBrZWVw aW5nIG9yaWdpbmFsIGFzIHdlbGwgKi8NCiAgCXBbMF0gPSAncyc7DQohIAlp ZiAobGluayh0bXBmLCBwKSAmJiAoZXJybm8gIT0gRUVYSVNUKSkgew0KISAJ CXN5c2xvZyhMTEVWLCAibGluayBmcm9tICUuMTAwcyB0byAlLjEwMHMgZmFp bGVkLCAlbSIsIHRtcGYsIHApOw0KISAJCXBbMF0gPSAneCc7DQohIAkJc21h cF9leGl0KDEpOw0KISAJfQ0KICAJcFswXSA9ICd4JzsNCiAgfQ0KICANCiAg c3RhdGljIHZvaWQNCi0tLSA3MzYsNzczIC0tLS0NCiAgDQogIAkvKiB1c2Ug bGluayB0byBtYWtlIGl0IHZpc2libGUgdG8gc21hcGQga2VlcGluZyBvcmln aW5hbCBhcyB3ZWxsICovDQogIAlwWzBdID0gJ3MnOw0KISANCiEgICAgICAg ICBpZiAoIGxpbmsodG1wZiwgcCkgKSB7DQohICAgICAgICAgICAgICAgICBp ZiggZXJybm8gPT0gRUVYSVNUKSAgew0KISAgICAgICAgICAgICAgICAgICAg ICAgICBzeXNsb2coTExFViwgImxpbmsgZnJvbSAlcyB0byAlcyBmYWlsZWQs ICVtLCB0cnlpbmcgb3RoZXIgZmlsZW5hbWVzIC4uLiIsIHRtcGYsIHApOw0K ISAgICAgICAgICAgICAgICAgICAgICAgICAqbGFzdGNoYXIgPSAnYSc7IC8q IHRyeSBjaGFuZ2luZyBsYXN0IGNoYXIgZnJvbSBhIC0geiAqLw0KISAgICAg ICAgICAgICAgICAgICAgICAgICB3aGlsZSAoIGxpbmsodG1wZiwgcCkgKSB7 DQohICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYoZXJybm8g IT0gRUVYSVNUKSB7DQohICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBzeXNsb2coTExFViwgImxpbmsgZnJvbSAlcyB0byAlcyBm YWlsZWQsICVtLCBnaXZpbmcgdXAhIiwgdG1wZiwgcCk7DQohICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBwWzBdID0gJ3gnOw0K ISAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgKmxh c3RjaGFyID0gb2xkbGFzdGNoYXI7DQohICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBzbWFwX2V4aXQoMSk7DQohICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfQ0KISAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIGlmKCpsYXN0Y2hhciA9PSAneicpIHsNCiEgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHN5c2xvZyhM TEVWLCAibGluayBmcm9tICVzIHRvICVzIGZhaWxlZDogY291bGRudCBmaW5k IGEgZnJlZSBzbG90LCAlbSIsIHRtcGYsIHApOw0KISAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgcFswXSA9ICd4JzsNCiEgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICpsYXN0Y2hh ciA9IG9sZGxhc3RjaGFyOw0KISAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgc21hcF9leGl0KDEpOw0KISAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIH0NCiEgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAqbGFzdGNoYXIgKys7IC8qIGhvcGVmdWxseSBBU0NJSSAu Li4uICovDQohICAgICAgICAgICAgICAgICAgICAgICAgIH0NCiEgICAgICAg ICAgICAgICAgICAgICAgICAgc3lzbG9nKExMRVYsICJzdWNjZWVkZWQgbGlu a2luZyAlcyB0byAlcyIsIHRtcGYsIHApOw0KISAgICAgICAgICAgICAgICAg fSBlbHNlIHsNCiEgICAgICAgICAgICAgICAgICAgICAgICAgc3lzbG9nKExM RVYsICJsaW5rIGZyb20gJXMgdG8gJXMgZmFpbGVkLCAlbSIsIHRtcGYsIHAp Ow0KISAgICAgICAgICAgICAgICAgICAgICAgICBwWzBdID0gJ3gnOw0KISAg ICAgICAgICAgICAgICAgICAgICAgICAqbGFzdGNoYXIgPSBvbGRsYXN0Y2hh cjsNCiEgICAgICAgICAgICAgICAgICAgICAgICAgc21hcF9leGl0KDEpOw0K ISAgICAgICAgICAgICAgICAgfQ0KISAgICAgICAgIH0NCiEgDQogIAlwWzBd ID0gJ3gnOw0KKyAgICAgICAgICpsYXN0Y2hhciA9IG9sZGxhc3RjaGFyOw0K KyANCiAgfQ0KICANCiAgc3RhdGljIHZvaWQNCg== ---559023410-758783491-976867623=:314-- From owner-fwtk-users@ex.tis.com Mon Dec 18 15:15 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA24172 Mon, 18 Dec 2000 15:15:01 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA04833; Mon, 18 Dec 2000 12:14:43 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 18 Dec 2000 10:41:22 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id KAA19337 for fwtk-users-outgoing; Mon, 18 Dec 2000 10:40:51 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338739@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: how to disable reverse lookup on fwtk? Date: Fri, 15 Dec 2000 18:37:26 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 246 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] is there a way to prevent the fwtk from performing a reverse lookup on a host that is trying to use ftp-gw? thanks. From owner-fwtk-users@ex.tis.com Mon Dec 18 15:15 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id PAA24175 Mon, 18 Dec 2000 15:15:11 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id MAA04837; Mon, 18 Dec 2000 12:14:44 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 18 Dec 2000 09:58:54 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA13402 for fwtk-users-outgoing; Mon, 18 Dec 2000 09:58:31 -0800 (PST) Date: Mon, 18 Dec 2000 12:57:54 -0500 From: Joseph S D Yao To: Charles Robinson Cc: fwtk-users@ex.tis.com Subject: Re: TIS FWTK Message-Id: <20001218125754.J29025@washington.cospo.osis.gov> Mail-Followup-To: Charles Robinson , fwtk-users@ex.tis.com References: <000201c068c4$80998f80$0df0c040@babygirl> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <000201c068c4$80998f80$0df0c040@babygirl>; from cerobinson@telocity.com on Sat, Dec 16, 2000 at 12:39:43AM -0500 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1525 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Sat, Dec 16, 2000 at 12:39:43AM -0500, Charles Robinson wrote: > > Sorry to bother you, but I was wondering if you could help me with a big problem I'm having. > I can't seem to get the source compiled for the tis fwtk ftp-gw. I need ftp to have passive support & my version of the gw doesn't. I as wondering if you know where I can get a working binary or if you had some tips about compiling my version. > > error > ftp-gw.c: In function `trap_sigurg': > ftp-gw.c:441: `SIOCATMARK' undeclared (first use in this function) > ftp-gw.c:441: (Each undeclared identifier is reported only once > ftp-gw.c:441: for each function it appears in.) > Any help is greatly appreciated...... > Many many thanks, When you ask this kind of question, ask the list. There is no FWTK support person, but many on the list take time out from their regularly scheduled work to help. On what kind of system are you compiling this? What OS? What version? Which C compiler? Which version? What configuration of FWTK? Which version of FWTK? Can I assume that you have looked for this as a FAQ on www.fwtk.org? Did you configure first, or just try to compile ftp-gw by itself? -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Mon Dec 18 19:37 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA24939 Mon, 18 Dec 2000 19:37:31 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA11594; Mon, 18 Dec 2000 16:37:14 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 18 Dec 2000 15:07:49 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA02555 for fwtk-users-outgoing; Mon, 18 Dec 2000 15:07:28 -0800 (PST) Date: Mon, 18 Dec 2000 18:06:53 -0500 From: Joseph S D Yao To: "Barreira, Fernando [IT]" Cc: "'fwtk-users@tis.com'" Subject: Re: how to disable reverse lookup on fwtk? Message-Id: <20001218180653.A29025@washington.cospo.osis.gov> Mail-Followup-To: "Barreira, Fernando [IT]" , "'fwtk-users@tis.com'" References: <3D6CFAEE245FD411938A00508BE3714801338739@exchnj01.sbi.com> Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: <3D6CFAEE245FD411938A00508BE3714801338739@exchnj01.sbi.com>; from fernando.barreira@ssmb.com on Fri, Dec 15, 2000 at 06:37:26PM -0500 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 673 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Fri, Dec 15, 2000 at 06:37:26PM -0500, Barreira, Fernando [IT] wrote: > is there a way to prevent the fwtk from performing a reverse lookup on a > host that is trying to use ftp-gw? I would discourage this, but of course, you can always go into the ftp-gw source and remove the check. Why do you want to do this? -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Tue Dec 19 04:44 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA26451 Tue, 19 Dec 2000 04:44:51 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA02482; Tue, 19 Dec 2000 01:44:33 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 00:11:07 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA29346 for fwtk-users-outgoing; Tue, 19 Dec 2000 00:10:56 -0800 (PST) X-Authentication-Warning: firewall.strathom.com: nobody set sender to using -f Message-ID: <319DB26BA2E818469512F920DCE19E18013AAB@futuna.agences.strathom> From: Frederic Le Bastard To: "'fwtk-users@tis.com'" Subject: suppress .vbs attachements Date: Tue, 19 Dec 2000 09:10:27 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 363 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, We have recentely been infected with a loveletter.vbs-like worm. I was wondering on how to setup smap/smapd or sendmail so that .vbs attachments would automatically be rejected. Any pointers on this ? Thanks in advance Fred From owner-fwtk-users@ex.tis.com Tue Dec 19 04:57 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id EAA26512 Tue, 19 Dec 2000 04:57:29 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id BAA02866; Tue, 19 Dec 2000 01:57:02 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 00:44:26 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA00345 for fwtk-users-outgoing; Tue, 19 Dec 2000 00:43:55 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) MIME-Version: 1.0 In-Reply-To: <20001218180653.A29025@washington.cospo.osis.gov> Date: Tue, 19 Dec 2000 08:42:49 -0000 (GMT) From: Tony Gale To: Joseph S D Yao Subject: Re: how to disable reverse lookup on fwtk? Cc: "fwtk-users@tis.com" Cc: "fwtk-users@tis.com" , "Barreira, Fernando [IT]" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20001219084249:11237=_" Content-Length: 5310 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20001219084249:11237=_ Content-Type: text/plain; charset=iso-8859-1 There's no reason not to do this. It makes no sense in many environments, and trusting DNS is never a good idea. Doing access control on DNS information is not a good habit to get into. Those who follow such things may have noticed an increase in the interest of DNS cache poisoning, DNS faking, etc. over the last year. Anyway, the enclosed patch will disable this for all FWTK proxies. -tony On 18-Dec-2000 Joseph S D Yao wrote: > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > On Fri, Dec 15, 2000 at 06:37:26PM -0500, Barreira, Fernando [IT] > wrote: >> is there a way to prevent the fwtk from performing a reverse >> lookup on a >> host that is trying to use ftp-gw? > > I would discourage this, but of course, you can always go into the > ftp-gw source and remove the check. > > Why do you want to do this? --- E-Mail: Tony Gale The first marriage is the triumph of imagination over intelligence, and the second the triumph of hope over experience. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20001219084249:11237=_ Content-Disposition: attachment; filename="fwtk-pname.diff" Content-Transfer-Encoding: base64 Content-Description: fwtk-pname.diff Content-Type: application/octet-stream; name=fwtk-pname.diff; SizeOnDisk=2588 ZGlmZiAtYyAtciAtTiBmd3RrLmRpc3QvZnd0ay9saWIvcG5hbWUuYyBmd3RrL2Z3dGsvbGliL3Bu YW1lLmMKKioqIGZ3dGsuZGlzdC9md3RrL2xpYi9wbmFtZS5jCVNhdCBKYW4gMTggMTk6MjA6NTcg MTk5NwotLS0gZnd0ay9md3RrL2xpYi9wbmFtZS5jCVdlZCBKdW4gIDkgMTI6NDI6NTUgMTk5OQoq KioqKioqKioqKioqKioKKioqIDUzLDEzMyAqKioqCiAgCXN0cm5jcHkoc25hbWUsaW5ldF9udG9h KGEuc2luX2FkZHIpLHopOwogIAlzbmFtZVt6IC0gMV0gPSAnXDAnOwogIAotICNpZmRlZiBJUF9P UFRJT05TCi0gCXsKLSAJCXVuc2lnbmVkIGNoYXIJb3B0YnVmWzEwMjQgLyAzXTsKLSAJCXVuc2ln bmVkIGNoYXIJKmNwOwotIAkJY2hhcgkJbGJ1ZlsxMDI0XTsKLSAJCWNoYXIJCSpscDsKLSAJCWlu dAkJb3B0c2l6ZTsKLSAJCWludAkJaXBwcm90bzsKLSAJCXN0cnVjdCBwcm90b2VudAkqaXA7Ci0g Ci0gCQlpZigoaXAgPSBnZXRwcm90b2J5bmFtZSgiaXAiKSkgIT0gKHN0cnVjdCBwcm90b2VudCAq KTApCi0gCQkJaXBwcm90byA9IGlwLT5wX3Byb3RvOwotIAkJZWxzZQotIAkJCWlwcHJvdG8gPSBJ UFBST1RPX0lQOwotIAkJb3B0c2l6ZSA9IHNpemVvZihvcHRidWYpOwotIAkJaWYoZ2V0c29ja29w dChmZCxpcHByb3RvLElQX09QVElPTlMsKGNoYXIgKilvcHRidWYsJm9wdHNpemUpID09IDAgJiYg b3B0c2l6ZSAhPSAwKSB7Ci0gCQkJbHAgPSBsYnVmOwotIAkJCWZvcihjcCA9IG9wdGJ1Zjsgb3B0 c2l6ZSA+IDA7IGNwKyssIG9wdHNpemUtLSwgbHAgKz0gMykKLSAJCQkJc3ByaW50ZihscCwiICUy LjJ4IiwqY3ApOwotIAkJCXN5c2xvZyhMTEVWLCJzZWN1cml0eWFsZXJ0OiBDb25uZWN0aW9uIHJl Y2VpdmVkIHVzaW5nIElQIG9wdGlvbnMgKGlnbm9yZWQpOiUuMTAwcyIsbGJ1Zik7Ci0gCQkJaWYo c2V0c29ja29wdChmZCxpcHByb3RvLElQX09QVElPTlMsKGNoYXIgKikwLG9wdHNpemUpICE9IDAp IHsKLSAJCQkJc3lzbG9nKExMRVYsInNldHNvY2tvcHQgSVBfT1BUSU9OUyBOVUxMOiAlbSIpOwot IAkJCQlnb3RvIGJhZGd1eTsKLSAJCQl9Ci0gCQl9Ci0gCX0KLSAjZW5kaWYKLSAJcCA9IGdldGhv c3RieWFkZHIoKGNoYXIgKikmYS5zaW5fYWRkcixzaXplb2YoYS5zaW5fYWRkciksQUZfSU5FVCk7 Ci0gCWlmIChwID09IChzdHJ1Y3QgaG9zdGVudCAqKTApIHsKLSAJCXN5c2xvZyhMTEVWLCIlLjUx MnMgaG9zdCBhZGRyZXNzIGxvb2t1cCBmYWlsZWQiLHNuYW1lKTsKLSAJfSBlbHNlIHsKLSAJCWNo YXIJKng7Ci0gCi0gCQlzdHJuY3B5KGxuYW1lLHAtPmhfbmFtZSx6KTsKLSAJCWxuYW1lW3ogLSAx XSA9ICdcMCc7Ci0gCi0gCQlwID0gZ2V0aG9zdGJ5bmFtZShsbmFtZSk7Ci0gCQlpZihwID09IChz dHJ1Y3QgaG9zdGVudCAqKTApIHsKLSAJCQlzeXNsb2coTExFViwiJS41MTJzLyUuMjBzIGhvc3Qg bmFtZSBsb29rdXAgZmFpbGVkIixsbmFtZSxzbmFtZSk7Ci0gCQkJZ290byBiYWRndXk7Ci0gCQl9 Ci0gCi0gCQl0cCA9IHAtPmhfYWRkcl9saXN0OwotIAkJd2hpbGUoKHBfYWRkciA9IChzdHJ1Y3Qg aW5fYWRkciAqKSpwLT5oX2FkZHJfbGlzdCsrKSAhPSAoc3RydWN0IGluX2FkZHIgKikwKSB7Ci0g CQkJaWYocC0+aF9sZW5ndGggPiBzaXplb2YoYS5zaW5fYWRkci5zX2FkZHIpKSB7Ci0gCQkJCXN5 c2xvZyhMTEVWLCJzZWN1cml0eWFsZXJ0OiBpbnZhbGlkIGhvc3QgYWRkcmVzcyBsZW5ndGggKCVk KSBob3N0bmFtZSAlLjUxMnMiLHAtPmhfbGVuZ3RoLCBsbmFtZSk7Ci0gCQkJCWdvdG8gYmFkZ3V5 OwotIAkJCX0KLSAJCQlpZihiY21wKHBfYWRkciwoY2hhciAqKSZhLnNpbl9hZGRyLHAtPmhfbGVu Z3RoKSA9PSAwKSB7Ci0gCQkJCWVxID0gMTsKLSAJCQkJYnJlYWs7Ci0gCQkJfQotIAkJfQotIAkJ aWYoIWVxKSB7Ci0gCQkJcC0+aF9hZGRyX2xpc3QgPSB0cDsKLSAJCQlpZihwLT5oX2xlbmd0aCA+ IHNpemVvZihhLnNpbl9hZGRyLnNfYWRkcikpIHsKLSAJCQkJc3lzbG9nKExMRVYsInNlY3VyaXR5 YWxlcnQ6IGludmFsaWQgaG9zdCBhZGRyZXNzIGxlbmd0aCAoJWQpIGhvc3RuYW1lICUuNTEycyIs cC0+aF9sZW5ndGgsIGxuYW1lKTsKLSAJCQkJZ290byBiYWRndXk7Ci0gCQkJfQotICNpZmRlZiBT WVNWCi0gCQkJYmNvcHkocC0+aF9hZGRyX2xpc3QsJmEuc2luX2FkZHIscC0+aF9sZW5ndGgpOwot ICNlbHNlCi0gCQkJYmNvcHkocC0+aF9hZGRyLCZhLnNpbl9hZGRyLHAtPmhfbGVuZ3RoKTsKLSAj ZW5kaWYKLSAJCQlzeXNsb2coTExFViwic2VjdXJpdHlhbGVydDogcG9zc2libGUgc3Bvb2YgJS41 MTJzLyUuMjBzICE9ICUuNTEycyBuYW1lIGxvb2t1cCBtaXNtYXRjaCIsbG5hbWUsc25hbWUsaW5l dF9udG9hKGEuc2luX2FkZHIpKTsKLSAJCQlnb3RvIGJhZGd1eTsKLSAJCX0KLSAKLSAKLSAJCWZv cih4ID0gbG5hbWU7ICp4ICE9ICdcMCc7IHgrKykKLSAJCQlpZihpc3VwcGVyKCh1bnNpZ25lZCBj aGFyKSp4KSkKLSAJCQkJKnggPSB0b2xvd2VyKCh1bnNpZ25lZCBjaGFyKSp4KTsKLSAJCXJldHVy bigwKTsKLSAJfQotIGJhZGd1eToKICAJc3RyY3B5KGxuYW1lLHVua25vd24pOwogIAlyZXR1cm4o MCk7CiAgfQotLS0gNTMsNTggLS0tLQo= --_=XFMail.1.4.4.Linux:20001219084249:11237=_-- End of MIME message From owner-fwtk-users@ex.tis.com Tue Dec 19 11:03 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA27926 Tue, 19 Dec 2000 11:03:34 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA24747; Tue, 19 Dec 2000 08:03:15 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 06:34:26 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA13104 for fwtk-users-outgoing; Tue, 19 Dec 2000 06:34:04 -0800 (PST) X-Authentication-Warning: proxy.hundert6.de: mail set sender to using -f Message-ID: <3A3F7FAB.9CB862FA@radio.hundert6.de> Date: Tue, 19 Dec 2000 15:32:59 +0000 From: Jan Muenther Organization: Radio Hundert,6 X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.2-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: Frederic Le Bastard , "'fwtk-users@ex.tis.com'" Subject: Re: suppress .vbs attachements References: <319DB26BA2E818469512F920DCE19E18013AAB@futuna.agences.strathom> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 478 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi, > We have recentely been infected with a loveletter.vbs-like worm. > I was wondering on how to setup smap/smapd or sendmail so that .vbs > attachments would automatically be rejected. > Any pointers on this ? Try using something like amavis along with smap/sendmail. -- Radio HUNDERT,6 Medien GmbH Berlin - EDV - j.muenther@radio.hundert6.de From owner-fwtk-users@ex.tis.com Tue Dec 19 11:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA27947 Tue, 19 Dec 2000 11:06:29 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA25352; Tue, 19 Dec 2000 08:06:22 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 06:55:33 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA15134 for fwtk-users-outgoing; Tue, 19 Dec 2000 06:55:22 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338740@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: ftp-gw hungs Date: Mon, 18 Dec 2000 13:35:54 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 959 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, i am running fwtk 2.1 on a solaris 5.6 machine and am experiencing the following: 1. when users go to his specific site (ftp1.lewcosec.com) and perform "get" for retireving samall files (6-10 K bytes), the files transfers but the session appears to go into a hung state (i don't get the ftp prompt or any message indicating the transfer was successfull). 2. if i wait long enough several minutes, then i get disconnected and a message indicating the session was timed out. i check the local machine and the file is there. 3. i don't see the same problem when going through a machine with fwtk version 2.0, i also did not have any problems on the nachine running version 2.1 until about a week ago. also keep in mind all other sites are OK, the problem only involves ftp1.lewcosec.com any help would be appreciated. From owner-fwtk-users@ex.tis.com Tue Dec 19 11:35 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA28056 Tue, 19 Dec 2000 11:35:50 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA00513; Tue, 19 Dec 2000 08:35:44 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 07:22:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA18542 for fwtk-users-outgoing; Tue, 19 Dec 2000 07:22:26 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE371480133874A@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: ftp-gw not passing "Fin=1" for data Date: Tue, 19 Dec 2000 09:50:03 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 792 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, i have a machine running fwtk 2.1 on a solaris 5.6 platform, we have a problem when we try getting files from a particular ftp site. when we issue the "get" command, the session appears to hung (we never get the ftp prompt back). after looking into some data that i captured, i verified that fwtk gets the Fin=1 from the remote ftp site (server) but never passes it to the ftp client, thus the client keeps the data session open until the control session expires and we get disconnected. we only have this problem with this particular site ftp1.lewcosec.com does anybody have experienced a similar situation and have a workaround for this? thanks. From owner-fwtk-users@ex.tis.com Tue Dec 19 12:32 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA28248 Tue, 19 Dec 2000 12:32:02 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA10429; Tue, 19 Dec 2000 09:31:47 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 08:10:57 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA26031 for fwtk-users-outgoing; Tue, 19 Dec 2000 08:10:36 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <3D6CFAEE245FD411938A00508BE371480133874A@exchnj01.sbi.com> Date: Tue, 19 Dec 2000 16:09:58 -0000 (GMT) From: Tony Gale To: "Barreira, Fernando [IT]" Subject: RE: ftp-gw not passing "Fin=1" for data Cc: "fwtk-users@tis.com" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 1385 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Could you do a netstat and see what state the sockets are in for the connections concerned. -tony On 19-Dec-2000 Barreira, Fernando [IT] wrote: > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi there, > > i have a machine running fwtk 2.1 on a solaris 5.6 platform, we > have a > problem when we try getting files from a particular ftp site. when > we issue > the "get" command, the session appears to hung (we never get the > ftp prompt > back). > > after looking into some data that i captured, i verified that fwtk > gets the > Fin=1 from the remote ftp site (server) but never passes it to the > ftp > client, thus the client keeps the data session open until the > control > session expires and we get disconnected. > we only have this problem with this particular site > ftp1.lewcosec.com > > > does anybody have experienced a similar situation and have a > workaround for > this? > thanks. --- E-Mail: Tony Gale If wishes were horses, then beggars would be thieves. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Dec 19 13:26 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA28628 Tue, 19 Dec 2000 13:26:00 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA18118; Tue, 19 Dec 2000 10:25:29 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 09:09:15 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA06591 for fwtk-users-outgoing; Tue, 19 Dec 2000 09:08:54 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <3D6CFAEE245FD411938A00508BE371480133874B@exchnj01.sbi.com> Date: Tue, 19 Dec 2000 17:08:18 -0000 (GMT) From: Tony Gale To: "Barreira, Fernando [IT]" Subject: RE: ftp-gw not passing "Fin=1" for data Cc: fwtk-users@tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 3406 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] The kernel should set the state to CLOSE_WAIT if it had "seen" a fin (and ack'ed it) from the remote end and was waiting for ftp-gw to close it's end. Does it ack the fin? Does the fwtk server have any packet filtering turned on? -tony On 19-Dec-2000 Barreira, Fernando [IT] wrote: > tony, > > when i do a netstat on the fwtk machine, both the control and data > sessions > remain active between the (ftp-gw and client) and (ftp-gw and > server), pls > take a look: > > (ftp-gw to client) > ftpproxy03.ftp 172.16.53.131.2808 7890 0 8760 0 > ESTABLISHED > ftpproxy03.48327 172.16.53.131.2809 7678 0 8760 0 > ESTABLISHED > > (ftp-gw to server) > ftpproxy03.48325 ftp1.lewcosec.com.ftp 17446 0 8760 > 0 > ESTABLISHED > ftpproxy03.48326 ftp1.lewcosec.com.ftp-data 17520 0 8760 > 0 > ESTABLISHED > > on the client side it apears the connection stays hung because the > ftp > prompt comes back only after about 8 minutes when the control > session times > out and the following messages is displayed: > 200 PORT command successfull. > 150 Opening BINARY mode data connection for kimtest (2542 bytes) > -> ftp get:connection timed out > > also why does the ftp-gw use a ramdom port other than 20 for the > ftp-data > connection to the client? > > any feedback is appreciated. thanks. > >> ---------- >> From: Tony Gale[SMTP:gale@syntax.dera.gov.uk] >> Sent: Tuesday, December 19, 2000 11:09 AM >> To: Barreira, Fernando [IT] >> Cc: fwtk-users@tis.com >> Subject: RE: ftp-gw not passing "Fin=1" for data >> >> >> Could you do a netstat and see what state the sockets are in for >> the >> connections concerned. >> >> -tony >> >> >> >> On 19-Dec-2000 Barreira, Fernando [IT] wrote: >> > [To be removed from this list send the message "unsubscribe >> > fwtk-users" in the >> > BODY of a mail message to majordomo@ex.tis.com.] >> > >> > hi there, >> > >> > i have a machine running fwtk 2.1 on a solaris 5.6 platform, we >> > have a >> > problem when we try getting files from a particular ftp site. >> > when >> > we issue >> > the "get" command, the session appears to hung (we never get the >> > ftp prompt >> > back). >> > >> > after looking into some data that i captured, i verified that >> > fwtk >> > gets the >> > Fin=1 from the remote ftp site (server) but never passes it to >> > the >> > ftp >> > client, thus the client keeps the data session open until the >> > control >> > session expires and we get disconnected. >> > we only have this problem with this particular site >> > ftp1.lewcosec.com >> > >> > >> > does anybody have experienced a similar situation and have a >> > workaround for >> > this? >> > thanks. >> >> --- >> E-Mail: Tony Gale >> If wishes were horses, then beggars would be thieves. >> >> The views expressed above are entirely those of the writer >> and do not represent the views, policy or understanding of >> any other person or official body. >> --- E-Mail: Tony Gale The truth is rarely pure, and never simple. -- Oscar Wilde The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Tue Dec 19 16:05 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA29322 Tue, 19 Dec 2000 16:05:22 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA10988; Tue, 19 Dec 2000 13:05:16 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 11:03:47 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA22896 for fwtk-users-outgoing; Tue, 19 Dec 2000 11:03:36 -0800 (PST) X-Authentication-Warning: localhost.localdomain: smap set sender to using -f From: "Dirk Breeuwer" To: Subject: Need to Ping outside the FireWall Date: Tue, 19 Dec 2000 12:57:39 -0600 Message-ID: MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.00.3018.1300 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="iso-8859-1" Content-Length: 457 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] How can I keep track of Routers that are behind my "FireWall". Every thing is OK when polling inside the FW, but no luck outside it. Scenario: *Windows 2000 Srvr. *FireWall based on Linux Server with TIS FWToolKit *Polling Successfully Routers in the Inner network *Intending to Poll Routers in the Outer Network Thanks From owner-fwtk-users@ex.tis.com Tue Dec 19 16:05 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA29325 Tue, 19 Dec 2000 16:05:32 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA10984; Tue, 19 Dec 2000 13:05:16 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 11:30:32 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA27228 for fwtk-users-outgoing; Tue, 19 Dec 2000 11:30:11 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE371480133874B@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'Tony Gale'" Cc: fwtk-users@tis.com Subject: RE: ftp-gw not passing "Fin=1" for data Date: Tue, 19 Dec 2000 11:41:30 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 2698 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] tony, when i do a netstat on the fwtk machine, both the control and data sessions remain active between the (ftp-gw and client) and (ftp-gw and server), pls take a look: (ftp-gw to client) ftpproxy03.ftp 172.16.53.131.2808 7890 0 8760 0 ESTABLISHED ftpproxy03.48327 172.16.53.131.2809 7678 0 8760 0 ESTABLISHED (ftp-gw to server) ftpproxy03.48325 ftp1.lewcosec.com.ftp 17446 0 8760 0 ESTABLISHED ftpproxy03.48326 ftp1.lewcosec.com.ftp-data 17520 0 8760 0 ESTABLISHED on the client side it apears the connection stays hung because the ftp prompt comes back only after about 8 minutes when the control session times out and the following messages is displayed: 200 PORT command successfull. 150 Opening BINARY mode data connection for kimtest (2542 bytes) -> ftp get:connection timed out also why does the ftp-gw use a ramdom port other than 20 for the ftp-data connection to the client? any feedback is appreciated. thanks. > ---------- > From: Tony Gale[SMTP:gale@syntax.dera.gov.uk] > Sent: Tuesday, December 19, 2000 11:09 AM > To: Barreira, Fernando [IT] > Cc: fwtk-users@tis.com > Subject: RE: ftp-gw not passing "Fin=1" for data > > > Could you do a netstat and see what state the sockets are in for the > connections concerned. > > -tony > > > > On 19-Dec-2000 Barreira, Fernando [IT] wrote: > > [To be removed from this list send the message "unsubscribe > > fwtk-users" in the > > BODY of a mail message to majordomo@ex.tis.com.] > > > > hi there, > > > > i have a machine running fwtk 2.1 on a solaris 5.6 platform, we > > have a > > problem when we try getting files from a particular ftp site. when > > we issue > > the "get" command, the session appears to hung (we never get the > > ftp prompt > > back). > > > > after looking into some data that i captured, i verified that fwtk > > gets the > > Fin=1 from the remote ftp site (server) but never passes it to the > > ftp > > client, thus the client keeps the data session open until the > > control > > session expires and we get disconnected. > > we only have this problem with this particular site > > ftp1.lewcosec.com > > > > > > does anybody have experienced a similar situation and have a > > workaround for > > this? > > thanks. > > --- > E-Mail: Tony Gale > If wishes were horses, then beggars would be thieves. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > From owner-fwtk-users@ex.tis.com Tue Dec 19 19:28 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id TAA29816 Tue, 19 Dec 2000 19:28:06 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id QAA03491; Tue, 19 Dec 2000 16:27:50 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 15:01:38 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id PAA25544 for fwtk-users-outgoing; Tue, 19 Dec 2000 15:01:18 -0800 (PST) Date: Tue, 19 Dec 2000 17:59:40 -0500 (EST) From: Ted Keller To: Frederic Le Bastard cc: "'fwtk-users@tis.com'" Subject: Re: suppress .vbs attachements In-Reply-To: <319DB26BA2E818469512F920DCE19E18013AAB@futuna.agences.strathom> Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1252 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Frederic, I've done this using two methods - 1. Implemented the sendmail filters as posted by Bennett Samowich 2. Implemented content filtering in the smap code. The sendmail filters listed above are basic C code - using the still somewhat experimental filtering features in sendmail 8.10.x and higher releases. I use this type of technology to eliminate both various extentions (.vbs) as well as specific other nusance viruses (natividad.exe). I tend to run the sendmail filters on an internal e-mail hub - thus keeping the firewall simple and sweet. But there is nothing preventing running these on the firewall system. hope this helps ted keller On Tue, 19 Dec 2000, Frederic Le Bastard wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > We have recentely been infected with a loveletter.vbs-like worm. > I was wondering on how to setup smap/smapd or sendmail so that .vbs > attachments would automatically be rejected. > Any pointers on this ? > > Thanks in advance > > Fred > From owner-fwtk-users@ex.tis.com Wed Dec 20 03:00 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id DAA00934 Wed, 20 Dec 2000 03:00:52 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id AAA21993; Wed, 20 Dec 2000 00:00:25 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 19 Dec 2000 22:31:22 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id WAA19966 for fwtk-users-outgoing; Tue, 19 Dec 2000 22:31:12 -0800 (PST) Date: Wed, 20 Dec 2000 14:32:37 +0800 From: auther Reply-To: auther_bin@263.net To: "fwtk-users@ex.tis.com" Subject: urgent for help!!! X-mailer: FoxMail 3.1 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Message-Id: <20001220063748.07530205D0@smtp.263.net> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 1290 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hello dear friends: Here's my problem when I am useing fwtk: When I use http-gw to be the proxy of our subnet. But when I going to some www pages, it cause something wrong. And the next lins is the environment: The pages I want to go is need to "post" some message back to the www server. If there is need to post a passwd item the error come out. Sometime it can getinto the site, sometimes can't. But the success is more less than failed. Just like to use the webmail. I signed on my username and passwd, and then press "OK" and it comes to the position. I have analyze the logs on my box, It says like this: 1:Dec 21 13:33:30 server http-gw[6542]: Network connection closed during write Dec 21 13:33:30 server http-gw[6542]: exit host=unknown/192.168.1.166 code=1 Dec 21 13:33:32 server http-gw[6545]: Network connection closed during write ( I permit the unknown user in netperm-table) 2:Dec 21 14:26:15 server http-gw[7825]: Network error: net_flags[4] set (read) Dec 21 14:26:15 server http-gw[7825]: exit host=unknown/192.137.1.166 code=1 Who can give me some advice!! I am almost crazy about this and my angry workmates. From owner-fwtk-users@ex.tis.com Wed Dec 20 05:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id FAA01303 Wed, 20 Dec 2000 05:06:23 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id CAA25819; Wed, 20 Dec 2000 02:05:57 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 00:42:21 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id AAA23336 for fwtk-users-outgoing; Wed, 20 Dec 2000 00:41:59 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 3 (Normal) Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <20001220063748.07530205D0@smtp.263.net> Date: Wed, 20 Dec 2000 08:41:24 -0000 (GMT) From: Tony Gale To: auther Subject: RE: urgent for help!!! Cc: "fwtk-users@ex.tis.com" Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=iso-8859-1 Content-Length: 1956 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Install the jumbo patch at: http://www.fwtk.org/fwtk/patches/patches.html#1.1 If that doesn't work, give us some info about the actual site that doesn't work. -tony On 20-Dec-2000 auther wrote: > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hello dear friends: > > Here's my problem when I am useing fwtk: > When I use http-gw to be the proxy of our subnet. But when I > going to some www pages, it cause something wrong. And the next > lins is the environment: > > The pages I want to go is need to "post" some message back to the > www server. If there is need to post a passwd item the error come > out. Sometime it can getinto the site, sometimes can't. But the > success is more less than failed. Just like to use the webmail. I > signed on my username and passwd, and then press "OK" and it comes > to the position. I have analyze the logs on my box, It says like > this: > > 1:Dec 21 13:33:30 server http-gw[6542]: Network connection closed > during write > Dec 21 13:33:30 server http-gw[6542]: exit > host=unknown/192.168.1.166 code=1 > Dec 21 13:33:32 server http-gw[6545]: Network connection closed > during write > ( I permit the unknown user in netperm-table) > 2:Dec 21 14:26:15 server http-gw[7825]: Network error: > net_flags[4] set (read) > Dec 21 14:26:15 server http-gw[7825]: exit > host=unknown/192.137.1.166 code=1 > > Who can give me some advice!! I am almost crazy about this and my > angry workmates. --- E-Mail: Tony Gale His mind is like a steel trap: full of mice. -- Foghorn Leghorn The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. From owner-fwtk-users@ex.tis.com Wed Dec 20 09:48 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA01973 Wed, 20 Dec 2000 09:48:22 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA09237; Wed, 20 Dec 2000 06:48:38 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 05:22:21 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA02836 for fwtk-users-outgoing; Wed, 20 Dec 2000 05:22:09 -0800 (PST) Date: Wed, 20 Dec 2000 21:23:46 +0800 From: auther Reply-To: auther_bin@263.net To: "fwtk-users@ex.tis.com" Subject: Re: RE: urgent for help!!! X-mailer: FoxMail 3.1 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Message-Id: <20001220133251.B4AA11C65210A@smtp.263.net> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 431 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Mr. Tony: Sorry I forget an important thing about this problem: If I let all users in our subnet to change the MS IE 5.0 configrations, make the item:"use http1.1 from proxy" work, we can get into the site then! Maybe this is also a http1.1 problem just as just talked about at Jul this year. From owner-fwtk-users@ex.tis.com Wed Dec 20 09:48 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id JAA01974 Wed, 20 Dec 2000 09:48:23 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id GAA09241; Wed, 20 Dec 2000 06:48:39 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 05:17:23 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA02563 for fwtk-users-outgoing; Wed, 20 Dec 2000 05:17:12 -0800 (PST) Date: Wed, 20 Dec 2000 21:18:46 +0800 From: auther Reply-To: auther_bin@263.net To: "fwtk-users@ex.tis.com" Subject: Re: RE: urgent for help!!! X-mailer: FoxMail 3.1 [cn] Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Message-Id: <20001220132751.AAE611C5892AB@smtp.263.net> Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="GB2312" Content-Length: 786 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Thanks for your help Tony Gale: My program worked! Now I am testing the box for details and I will send the last resalt to you. And now I can get into that site, but here is also something not such perfectly, that is a webmail site, and who I came into it, the page was divided into two "farm" And when I read the source file of it I find these lines: Your browser does not support frame. We do not currently support non-frame option yet. SORRY! The site is not in english mybe you can test it. http://www.sina.com.cn the username and passwd is just on the head of the main page. Very thanks again to you my friend. From owner-fwtk-users@ex.tis.com Wed Dec 20 10:19 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA02231 Wed, 20 Dec 2000 10:19:21 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA12989; Wed, 20 Dec 2000 07:19:36 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 06:07:16 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA05342 for fwtk-users-outgoing; Wed, 20 Dec 2000 06:07:03 -0800 (PST) X-Authentication-Warning: stargate.diomass.org: smap set sender to using -f Message-ID: <51D4F81EFAF7D111B33600805FBB11253095D4@HQ_APPS> From: "Hodges, Michael" To: fwtk-users@ex.tis.com Subject: RE: urgent for help!!! Date: Wed, 20 Dec 2000 09:05:48 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C06A8D.F45B1AC0" Content-Length: 7498 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C06A8D.F45B1AC0 Content-Type: text/plain; charset="iso-8859-1" Is anyone else continuing to have problems getting onto boston.com after installing the jumbo patch for http-gw, or did that fix it? Michael -----Original Message----- From: Tony Gale [mailto:gale@syntax.dera.gov.uk] Sent: Wednesday, December 20, 2000 3:41 AM To: auther Cc: fwtk-users@ex.tis.com Subject: RE: urgent for help!!! [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Install the jumbo patch at: http://www.fwtk.org/fwtk/patches/patches.html#1.1 If that doesn't work, give us some info about the actual site that doesn't work. -tony On 20-Dec-2000 auther wrote: > [To be removed from this list send the message "unsubscribe > fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hello dear friends: > > Here's my problem when I am useing fwtk: > When I use http-gw to be the proxy of our subnet. But when I > going to some www pages, it cause something wrong. And the next > lins is the environment: > > The pages I want to go is need to "post" some message back to the > www server. If there is need to post a passwd item the error come > out. Sometime it can getinto the site, sometimes can't. But the > success is more less than failed. Just like to use the webmail. I > signed on my username and passwd, and then press "OK" and it comes > to the position. I have analyze the logs on my box, It says like > this: > > 1:Dec 21 13:33:30 server http-gw[6542]: Network connection closed > during write > Dec 21 13:33:30 server http-gw[6542]: exit > host=unknown/192.168.1.166 code=1 > Dec 21 13:33:32 server http-gw[6545]: Network connection closed > during write > ( I permit the unknown user in netperm-table) > 2:Dec 21 14:26:15 server http-gw[7825]: Network error: > net_flags[4] set (read) > Dec 21 14:26:15 server http-gw[7825]: exit > host=unknown/192.137.1.166 code=1 > > Who can give me some advice!! I am almost crazy about this and my > angry workmates. --- E-Mail: Tony Gale His mind is like a steel trap: full of mice. -- Foghorn Leghorn The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. ------_=_NextPart_001_01C06A8D.F45B1AC0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable RE: urgent for help!!!

Is anyone else continuing to have problems getting = onto boston.com after installing the jumbo patch for http-gw, or did = that fix it?

Michael

-----Original Message-----
From: Tony Gale [mailto:gale@syntax.dera.gov.uk]
Sent: Wednesday, December 20, 2000 3:41 AM
To: auther
Cc: fwtk-users@ex.tis.com
Subject: RE: urgent for help!!!


[To be removed from this list send the message = "unsubscribe fwtk-users" in the
BODY of a mail message to = majordomo@ex.tis.com.]


Install the jumbo patch at:

http://www.fwtk.org/fwtk/patches/patches.html#1.1<= /FONT>

If that doesn't work, give us some info about the = actual site that
doesn't work.

-tony


On 20-Dec-2000 auther wrote:
> [To be removed from this list send the message = "unsubscribe
> fwtk-users" in the
> BODY of a mail message to = majordomo@ex.tis.com.]
>
> hello dear friends:
>
>    Here's my problem when I am = useing fwtk:
>    When I use http-gw to be the = proxy of our subnet. But when I
> going to some www pages, it cause something = wrong. And the next
> lins is the environment:
>
>   The pages I want to go is need to = "post" some message back to the
> www server. If there is need to post a passwd = item the error come
> out. Sometime it can getinto the site, = sometimes can't. But the
> success is more less than failed. Just like to = use the webmail. I
> signed on my username and passwd, and then = press "OK" and it comes
> to the position. I have analyze the logs on my = box, It says like
> this:
>
>   1:Dec 21 13:33:30 server = http-gw[6542]: Network connection closed
> during write
>     Dec 21 13:33:30 server = http-gw[6542]: exit
> host=3Dunknown/192.168.1.166 code=3D1
>     Dec 21 13:33:32 server = http-gw[6545]: Network connection closed
> during write
>       ( I permit = the unknown user in netperm-table)
>   2:Dec 21 14:26:15 server = http-gw[7825]: Network error:
> net_flags[4] set (read)
>     Dec 21 14:26:15 server = http-gw[7825]: exit
> host=3Dunknown/192.137.1.166 code=3D1
>
> Who can give me some advice!! I am almost crazy = about this and my
> angry workmates.

---
E-Mail: Tony Gale = <gale@syntax.dera.gov.uk>
His mind is like a steel trap: full of mice.
        =         -- Foghorn = Leghorn

The views expressed above are entirely those of the = writer
and do not represent the views, policy or = understanding of
any other person or official body.

------_=_NextPart_001_01C06A8D.F45B1AC0-- From owner-fwtk-users@ex.tis.com Wed Dec 20 11:11 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA02625 Wed, 20 Dec 2000 11:11:32 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA21918; Wed, 20 Dec 2000 08:11:16 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 06:48:59 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA09264 for fwtk-users-outgoing; Wed, 20 Dec 2000 06:48:48 -0800 (PST) From: jianun@21cn.com Content-Transfer-Encoding: 8bit MIME-Version: 1.0 Message-ID: <9J998779907993.25402@webmail1.inner-21cn.com> Date: Wed, 20 Dec 2000 09:20:06 +0800 (CST) To: fwtk-users@ex.tis.com Subject: network error X-Priority: 3 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 670 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi ,every kind man: when i used http-gw to visit some websites which need username and password ,I often couldn't connect that web.In the log file ,it said: Network error: net_flags[7] set (read) I don't know what had happened,and when will it happen,because not all webs which need username and password will meet the same name . Is there anyone know the reason ? for the sake of the God ,help me !! ---------------------------------------------- " " 21CN "" Մ http://www.21cn.com Thank you for using 21cn.com Email system From owner-fwtk-users@ex.tis.com Wed Dec 20 12:51 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA02939 Wed, 20 Dec 2000 12:51:02 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA07828; Wed, 20 Dec 2000 09:50:28 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 08:26:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA24205 for fwtk-users-outgoing; Wed, 20 Dec 2000 08:26:03 -0800 (PST) Message-ID: X-Mailer: XFMail 1.4.4 on Linux X-Priority: 2 (High) MIME-Version: 1.0 In-Reply-To: <51D4F81EFAF7D111B33600805FBB11253095D4@HQ_APPS> Date: Wed, 20 Dec 2000 16:25:17 -0000 (GMT) From: Tony Gale To: "Hodges, Michael" To: "Hodges, Michael" , Ross Bergman Subject: boston.com (was RE: urgent for help!!!) Cc: fwtk-users@ex.tis.com Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="_=XFMail.1.4.4.Linux:20001220162517:10479=_" Content-Length: 12719 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format --_=XFMail.1.4.4.Linux:20001220162517:10479=_ Content-Type: text/plain; charset=iso-8859-1 The enclosed patch is on top of jumbo and should sort out boston.com (et al). This patch MUST be used in preference to the (buggy and dangerous) ones I sent out earlier (sorry about that). That means you Ross :-) Thanks -tony On 20-Dec-2000 Hodges, Michael wrote: > Is anyone else continuing to have problems getting onto boston.com > after > installing the jumbo patch for http-gw, or did that fix it? > > Michael > --- E-Mail: Tony Gale Documentation is the castor oil of programming. Managers know it must be good because the programmers hate it so much. The views expressed above are entirely those of the writer and do not represent the views, policy or understanding of any other person or official body. --_=XFMail.1.4.4.Linux:20001220162517:10479=_ Content-Disposition: attachment; filename="fwtk-broken-web.diff" Content-Transfer-Encoding: base64 Content-Description: fwtk-broken-web.diff Content-Type: application/octet-stream; name=fwtk-broken-web.diff; SizeOnDisk=8420 T25seSBpbiBmd3RrLmRpc3QvZnd0azogTWFrZWZpbGUuY29uZmlnCk9ubHkgaW4gZnd0ay5wYXRj aGVkL2Z3dGsvaHR0cC1ndzogYXV0aC5jLnJlagpPbmx5IGluIGZ3dGsucGF0Y2hlZC9md3RrL2h0 dHAtZ3c6IGZ0cC5jLnJlagpkaWZmIC11ciBmd3RrLmRpc3QvZnd0ay9odHRwLWd3L2htYWluLmMg Znd0ay5wYXRjaGVkL2Z3dGsvaHR0cC1ndy9obWFpbi5jCi0tLSBmd3RrLmRpc3QvZnd0ay9odHRw LWd3L2htYWluLmMJV2VkIERlYyAyMCAxNDo1ODowNyAyMDAwCisrKyBmd3RrLnBhdGNoZWQvZnd0 ay9odHRwLWd3L2htYWluLmMJV2VkIERlYyAyMCAxNDo1MzoyOSAyMDAwCkBAIC05NDIsMjQgKzk0 MiwzNSBAQAogY2hhcgkqczsKIGludAluOwogewotCWNoYXIgKmJ1ZmY7CisJLyogQXR0ZW1wdCB0 byB3cml0ZSB0aGUgbWVzc2FnZSBpbiBvbmUgcGFja2V0CisJICogRmFpbGluZyB0aGF0LCB0cnkg YW5kIG1ha2Ugc3VyZSBpdCBhbGwgZ2V0cyBzZW50CisgICAgICAgICAqIFRSRyAtIDIwMDAxMjIw CisgICAgICAgICAqLworIAljaGFyICpidWZmLCAqYnVmZnB0cjsKIAlpbnQgcmV0dmFsOwotCi0J LyogQXR0ZW1wdCB0byBzZW5kIG1lc3NhZ2UgaW4gb25lIHBhY2tldAotCSAqIFNvbWUgRlRQIHNl cnZlcnMgZG9uJ3QgbGlrZSBzcGxpdCBtZXNzYWdlcwotCSAqIFRSRyAtIDIwMDAxMTE0Ci0JICov Ci0JaWYgKCAoYnVmZiA9IG1hbGxvYyhuKzIpKSA9PSBOVUxMKSB7CisgCWludCBsZW5ndGg7Cisg CisgCWlmICggKGJ1ZmYgPSBtYWxsb2MobisyKSkgPT0gTlVMTCkgewogCQlpZihuZXRfd3JpdGUo ZmQscyxuKSAhPSBuKQogCQkJcmV0dXJuKDEpOwogCQlyZXR1cm4obmV0X3dyaXRlKGZkLCJcclxu IiwyKSAhPSAyKTsKIAl9Ci0JbWVtY3B5KGJ1ZmYsIHMsIG4pOwotCWJ1ZmZbbl09J1xyJzsKLQli dWZmW24rMV09J1xuJzsKLQlyZXR2YWwgPSBuZXRfd3JpdGUoZmQsYnVmZixuKzIpOwotCWZyZWUo YnVmZik7Ci0JcmV0dXJuKHJldHZhbCk7CisgCW1lbWNweShidWZmLCBzLCBuKTsKKyAJYnVmZltu XT0nXHInOworIAlidWZmW24rMV09J1xuJzsKKyAJbGVuZ3RoID0gbisyOworIAlidWZmcHRyID0g YnVmZjsKKyAJd2hpbGUgKGxlbmd0aCA+IDApIHsKKyAJCXJldHZhbCA9IG5ldF93cml0ZShmZCxi dWZmcHRyLGxlbmd0aCk7CisgCQlpZiAocmV0dmFsID4gMCkgeworIAkJCWxlbmd0aCAtPSByZXR2 YWw7CisgCQkJYnVmZnB0ciArPSByZXR2YWw7CisgCQl9IGVsc2UgeworIAkJCWJyZWFrOworIAkJ fQorIAl9CisgCWZyZWUoYnVmZik7CisgCXJldHVybihyZXR2YWwpOwogfQogCiAKT25seSBpbiBm d3RrLnBhdGNoZWQvZnd0ay9odHRwLWd3OiBobWFpbi5jLm9yaWcKT25seSBpbiBmd3RrLnBhdGNo ZWQvZnd0ay9odHRwLWd3OiBobWFpbi5jLnJlagpkaWZmIC11ciBmd3RrLmRpc3QvZnd0ay9odHRw LWd3L2h0dHAtZ3cuYyBmd3RrLnBhdGNoZWQvZnd0ay9odHRwLWd3L2h0dHAtZ3cuYwotLS0gZnd0 ay5kaXN0L2Z3dGsvaHR0cC1ndy9odHRwLWd3LmMJV2VkIERlYyAyMCAxNDo1ODowNyAyMDAwCisr KyBmd3RrLnBhdGNoZWQvZnd0ay9odHRwLWd3L2h0dHAtZ3cuYwlXZWQgRGVjIDIwIDE2OjEzOjQ5 IDIwMDAKQEAgLTU2OCw3ICs1NjgsNyBAQAogCWlmKCAocmVtX3R5cGUgJiBUWVBFX0hUVFApICl7 CiAJCWludCBobGVuID0gMDsKIAkJaWYoIGh0dHBfcHJvdG9jb2xbMF0gIT0gJ1wwJyl7Ci0gCQkJ Y29weV9odHRwX2hlYWRlcnMoIC0xLCBzb2NrZmQsIDAsICZobGVuLCBHX05PUEVSTSk7CisgCQkJ Y29weV9odHRwX2hlYWRlcnMoIE5VTEwsIC0xLCBzb2NrZmQsIDAsICZobGVuLCBHX05PUEVSTSk7 CiAJCX0KIAl9CiAJaWYoIHJlbV90eXBlICYgVFlQRV9GVFApewpAQCAtMTE3OCw4ICsxMTc4LDcg QEAKIAl9ZWxzZXsKIAkJc3ByaW50Zihnb19yZXF1ZXN0LCIlcyVzIiwgaHR0cF9tZXRob2QsIGJ1 Zik7CiAJfQotCWlmKCByZmQgIT0gLTEpc2F5KHJmZCwgZ29fcmVxdWVzdCk7Ci0KKyAgCiBmcm9t aW50ZXJuYWw6CiAJaWYoIGh0dHBfcHJvdG9jb2xbMF0pewkvKiBXYXMgdGhlcmUgaHR0cCBwcm90 b2NvbCBpbmZvPyAqLwogCQlpbnQgaGxlbiA9IDA7CkBAIC0xMTg3LDcgKzExODYsNyBAQAogCiAJ CWlmKCAocGVybWlzc2lvbnMgJiBHX1BMVVMpID09IDApCiAJCQlyZmQgPSAtMTsKLSAJCWlmKCBj b3B5X2h0dHBfaGVhZGVycyhyZmQsIHNvY2tmZCwgKHJlbV90eXBlJlRZUEVfV1JJVEUpLCAmaGxl biwgR19OT1BFUk0pICYmCisgCQlpZiggY29weV9odHRwX2hlYWRlcnMoZ29fcmVxdWVzdCwgcmZk LCBzb2NrZmQsIChyZW1fdHlwZSZUWVBFX1dSSVRFKSwgJmhsZW4sIEdfTk9QRVJNKSAmJgogCQkJ KHJlbV90eXBlJlRZUEVfV1JJVEUpKXsKIAkJCXJmZCA9IHJzYXZlZDsKIAkJCXRyYW5zX2h0bWxf ZmlsZShyZmQsIHNvY2tmZCwgImh0dHAiLCBobGVuKTsKQEAgLTExOTgsMTIgKzExOTcsMTUgQEAK IAkJCXJldHVybiAwOwogCQl9CiAJCXJmZCA9IHJzYXZlZDsKKwl9IGVsc2UgeworCQlpZiggcmZk ICE9IC0xKQorCQkJc2F5KHJmZCwgZ29fcmVxdWVzdCk7CiAJfQotCisgICAgCiAvKiBHZXQgcG9z c2libGUgcmVzcG9uc2UgbGluZSAobWF5YmUgYW4gb2xkIHNlcnZlcikqLwogCWlmKCBnZXRfaHR0 cF9yZXNwb25zZShzb2NrZmQsIHJmZCkpewogCi0JCWlmKCBjb3B5X2h0dHBfaGVhZGVycyhzb2Nr ZmQsIHJmZCwgMSwgTlVMTCwgbG9nZ2luZykpeworCQlpZiggY29weV9odHRwX2hlYWRlcnMoTlVM TCwgc29ja2ZkLCByZmQsIDEsIE5VTEwsIGxvZ2dpbmcpKXsKIAkJCXRyYW5zX2h0bWxfZmlsZShz b2NrZmQsIHJmZCwgImh0dHAiLCAtMSk7CiAJCX0KIAl9ZWxzZSBpZiggcmVtX3R5cGUgJiBUWVBF X0hFQUQpewpAQCAtMTIzMCw3ICsxMjMyLDE2IEBACiAJcmV0dXJuIDA7CiB9CiAKLWludCBjb3B5 X2h0dHBfaGVhZGVycyhzb2NrZmQsIHJmZCxleHBlY3RfZGF0YSwgbHB0ciwgbG9nZ2luZykKKy8q IGNvcHlfaHR0cF9oZWFkZXJzIGJ1ZmZlcnMgaXRzIG91dHB1dCBpbiBhbiBhdHRlbXB0IHRvIHdv cmthcm91bmQKKyAqIHNvbWUgYnJva2VuIHdlYiBzZXJ2ZXJzIHRoYXQgY2FuJ3QgaGFuZGxlIHJl Y2VpdmluZyByZXF1ZXN0cyB0aGF0IGFyZQorICogc3BsaXQgb3ZlciBtdWx0aXBsZSBwYWNrZXRz CisgKiBUUkcgLSAyMDAwMTIyMAorICovCisKKyNkZWZpbmUgUkVRX0JVRkZfTEVOIChNQVhfVVJM X0xFTioyKSAvKiBTRUNVUklUWTogTXVzdCBiZSBiaWdnZXIgdGhhbiBNQVhfVVJMX0xFTiAqLwor CitpbnQgY29weV9odHRwX2hlYWRlcnMocmVxdWVzdCwgc29ja2ZkLCByZmQsZXhwZWN0X2RhdGEs IGxwdHIsIGxvZ2dpbmcpCitjaGFyICpyZXF1ZXN0OwogaW50IHNvY2tmZCwgcmZkOwogaW50IGV4 cGVjdF9kYXRhLCAqbHB0ciwgbG9nZ2luZzsKIHsJaW50IGxlbiwgY250OwpAQCAtMTIzOCwxMiAr MTI0OSwyNiBAQAogCWludCBuOwogCXN0YXRpYyBjaGFyIGNvbnRlbnRfbGVuWzgwXTsKIAlzdGF0 aWMgY2hhciBjb250ZW50X3R5cGVbNTEzXTsKKwlzdGF0aWMgY2hhciByZXF1ZXN0X2J1ZmZbUkVR X0JVRkZfTEVOXTsKKwlpbnQgcmVxdWVzdF9idWZmX2xlbjsKIAlpbnQJdG1wWDsKIAljaGFyCSp0 bXBQOwogCisJcmVxdWVzdF9idWZmX2xlbiA9IDA7CisJaWYgKCByZXF1ZXN0ICYmIChzdHJsZW4o cmVxdWVzdCkgPiBSRVFfQlVGRl9MRU4tMykpIHsKKwkJZ290byBicm9rZW47CisJfQorICAKKwlp ZiAocmVxdWVzdCkgeworICAgICAgICAgICAgICAgIHJlcXVlc3RfYnVmZl9sZW4gPSBzdHJsZW4o cmVxdWVzdCk7CisJCXN0cm5jcHkocmVxdWVzdF9idWZmLCByZXF1ZXN0LCByZXF1ZXN0X2J1ZmZf bGVuKTsKKwkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xlbiwgIlxyXG4iLCAy KTsKKwkJcmVxdWVzdF9idWZmX2xlbiArPSAyOworCX0KKyAgCiAJY29udGVudF9sZW5bMF0gPSAn XDAnOwogCWNvbnRlbnRfdHlwZVswXT0gJ1wwJzsKLQorICAKIAlpZiggbHB0cikKIAkJKmxwdHIg PSAwOwogCkBAIC0xMjYzLDcgKzEyODgsMTUgQEAKIAkJfWVsc2UgaWYoIGNoZWNrQnJvd3NlclR5 cGUgJiYKIAkJICAgICAgIXN0cm5jYXNlY21wKGdvX3JlcXVlc3QsICJ1c2VyLWFnZW50OiIsIDEx KSApIHsKIAkJCWlmKCBzb2NrZmQgIT0gLTEpewotCQkJCSBzYXkoc29ja2ZkLCBnb19yZXF1ZXN0 KTsKKwkJCQlpZiAoKHN0cmxlbihnb19yZXF1ZXN0KStyZXF1ZXN0X2J1ZmZfbGVuKzIpID4gUkVR X0JVRkZfTEVOLTEpIHsKKwkJCQkJcmVxdWVzdF9idWZmW3JlcXVlc3RfYnVmZl9sZW4tMl0gPSAn XDAnOworCQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOworCQkJCQlyZXF1ZXN0X2J1ZmZf bGVuID0gMDsKKwkJCQl9CisJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xl biwgZ29fcmVxdWVzdCwgc3RybGVuKGdvX3JlcXVlc3QpKTsKKwkJCQlyZXF1ZXN0X2J1ZmZfbGVu ICs9IHN0cmxlbihnb19yZXF1ZXN0KTsKKwkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1ZXN0 X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gMjsKIAkJCX0K IAkJCWlmIChub2phdmEgPT0gMikKIAkJCSAgICBmb3IgKHRtcFg9MDsKQEAgLTEyODcsNyArMTMy MCwxNSBAQAogCQkJY3B5c3RyKGNvbnRlbnRfdHlwZSwgZ29fcmVxdWVzdCwgNTEyKTsKIAkJCWNv bnRlbnRfdHlwZVs1MTFdID0gJ1wwJzsKIAkJCWlmKCBzb2NrZmQgIT0gLTEpewotCQkJCSBzYXko c29ja2ZkLCBnb19yZXF1ZXN0KTsKKwkJCQlpZiAoKHN0cmxlbihnb19yZXF1ZXN0KStyZXF1ZXN0 X2J1ZmZfbGVuKzIpID4gUkVRX0JVRkZfTEVOLTEpIHsKKwkJCQkJcmVxdWVzdF9idWZmW3JlcXVl c3RfYnVmZl9sZW4tMl0gPSAnXDAnOworCQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOwor CQkJCQlyZXF1ZXN0X2J1ZmZfbGVuID0gMDsKKwkJCQl9CisJCQkJc3RybmNweShyZXF1ZXN0X2J1 ZmYrcmVxdWVzdF9idWZmX2xlbiwgZ29fcmVxdWVzdCwgc3RybGVuKGdvX3JlcXVlc3QpKTsKKwkJ CQlyZXF1ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihnb19yZXF1ZXN0KTsKKwkJCQlzdHJuY3B5KHJl cXVlc3RfYnVmZityZXF1ZXN0X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCXJlcXVlc3RfYnVm Zl9sZW4gKz0gMjsKIAkJCX0KIAkJCWlmKCBsb2dnaW5nICYgR19DT05UWVBFKXsKIAkJCQlzeXNs b2coTExFViwiY29udGVudC10eXBlPSUuNTEycyIsICZnb19yZXF1ZXN0WzEzXSk7CkBAIC0xMjk5 LDExICsxMzQwLDI3IEBACiAJCQlpZiggZG9udF90b3VjaChwKSA9PSAwKXsKIAkJCQlzcHJpbnRm KGVycmJ1ZiwgIkxvY2F0aW9uOiBodHRwOi8vJXM6JXUvJXMiLCBvdXJuYW1lLCBvdXJwb3J0LCBw KTsKIAkJCQlpZiggc29ja2ZkICE9IC0xKXsKLQkJCQkJc2F5KHNvY2tmZCwgZXJyYnVmKSA7CisJ CQkJCWlmICgoc3RybGVuKGVycmJ1ZikrcmVxdWVzdF9idWZmX2xlbisyKSA+IFJFUV9CVUZGX0xF Ti0xKSB7CisJCQkJCQlyZXF1ZXN0X2J1ZmZbcmVxdWVzdF9idWZmX2xlbi0yXSA9ICdcMCc7CisJ CQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOworCQkJCQkJcmVxdWVzdF9idWZmX2xlbiA9 IDA7CisJCQkJCX0KKwkJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xlbiwg ZXJyYnVmLCBzdHJsZW4oZXJyYnVmKSk7CisJCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gc3RybGVu KGVycmJ1Zik7CisJCQkJCXN0cm5jcHkocmVxdWVzdF9idWZmK3JlcXVlc3RfYnVmZl9sZW4sICJc clxuIiwgMik7CisJCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gMjsKIAkJCQl9CiAJCQl9ZWxzZXsK IAkJCQlpZiggc29ja2ZkICE9IC0xKXsKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg CSBzYXkoc29ja2ZkLCBnb19yZXF1ZXN0KSA7CisJCQkJCWlmICgoc3RybGVuKGdvX3JlcXVlc3Qp K3JlcXVlc3RfYnVmZl9sZW4rMikgPiBSRVFfQlVGRl9MRU4tMSkgeworCQkJCQkJcmVxdWVzdF9i dWZmW3JlcXVlc3RfYnVmZl9sZW4tMl0gPSAnXDAnOworCQkJCQkJc2F5KHNvY2tmZCwgcmVxdWVz dF9idWZmKTsKKwkJCQkJCXJlcXVlc3RfYnVmZl9sZW4gPSAwOworCQkJCQl9CisJCQkJCXN0cm5j cHkocmVxdWVzdF9idWZmK3JlcXVlc3RfYnVmZl9sZW4sIGdvX3JlcXVlc3QsIHN0cmxlbihnb19y ZXF1ZXN0KSk7CisJCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gc3RybGVuKGdvX3JlcXVlc3QpOwor CQkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1ZXN0X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOwor CQkJCQlyZXF1ZXN0X2J1ZmZfbGVuICs9IDI7CiAJCQkJfQogCQkJfQogCQl9ZWxzZSBpZiggIXN0 cm5jYXNlY21wKGdvX3JlcXVlc3QsICJjb25uZWN0aW9uOiIsIDExKSl7CkBAIC0xMzEyLDcgKzEz NjksMTUgQEAKIAkJCWNvbnRpbnVlOwogCQl9ZWxzZSB7CiAJCQlpZiggc29ja2ZkICE9IC0xKXsK LSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHNheShzb2NrZmQsIGdvX3JlcXVlc3Qp IDsKKwkJCQlpZiAoKHN0cmxlbihnb19yZXF1ZXN0KStyZXF1ZXN0X2J1ZmZfbGVuKzIpID4gUkVR X0JVRkZfTEVOLTEpIHsKKwkJCQkJcmVxdWVzdF9idWZmW3JlcXVlc3RfYnVmZl9sZW4tMl0gPSAn XDAnOworCQkJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOworCQkJCQlyZXF1ZXN0X2J1ZmZf bGVuID0gMDsKKwkJCQl9CisJCQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xl biwgZ29fcmVxdWVzdCwgc3RybGVuKGdvX3JlcXVlc3QpKTsKKwkJCQlyZXF1ZXN0X2J1ZmZfbGVu ICs9IHN0cmxlbihnb19yZXF1ZXN0KTsKKwkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1ZXN0 X2J1ZmZfbGVuLCAiXHJcbiIsIDIpOworCQkJCXJlcXVlc3RfYnVmZl9sZW4gKz0gMjsKIAkJCX0K IAkJfQogCX0KQEAgLTEzNDIsMTEgKzE0MDcsMjAgQEAKIC8qIG5vdCBhbiBodG1sIGZpbGU/IHNv IGp1c3QgYmxvY2sgY29weSAqLwogCQlpZiggY29udGVudF9sZW5bMF0pewogCQkJaWYoIHNvY2tm ZCAhPSAtMSl7Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBzYXkoc29ja2ZkLGNv bnRlbnRfbGVuKSA7CisJCQkJaWYgKChzdHJsZW4oY29udGVudF9sZW4pK3JlcXVlc3RfYnVmZl9s ZW4rMikgPiBSRVFfQlVGRl9MRU4tMSkgeworCQkJCQlyZXF1ZXN0X2J1ZmZbcmVxdWVzdF9idWZm X2xlbi0yXSA9ICdcMCc7CisJCQkJCXNheShzb2NrZmQsIHJlcXVlc3RfYnVmZik7CisJCQkJCXJl cXVlc3RfYnVmZl9sZW4gPSAwOworCQkJCX0KKwkJCQlzdHJuY3B5KHJlcXVlc3RfYnVmZityZXF1 ZXN0X2J1ZmZfbGVuLCBjb250ZW50X2xlbiwgc3RybGVuKGNvbnRlbnRfbGVuKSk7CisJCQkJcmVx dWVzdF9idWZmX2xlbiArPSBzdHJsZW4oY29udGVudF9sZW4pOworCQkJCXN0cm5jcHkocmVxdWVz dF9idWZmK3JlcXVlc3RfYnVmZl9sZW4sICJcclxuIiwgMik7CisJCQkJcmVxdWVzdF9idWZmX2xl biArPSAyOwogCQkJfQogCQl9CiAJCWlmKCBzb2NrZmQgIT0gLTEpewotICAgICAgICAgICAgICAg ICAgICAgICAgIHNheShzb2NrZmQsIiIpIDsKKwkJCXJlcXVlc3RfYnVmZltyZXF1ZXN0X2J1ZmZf bGVuXSA9ICdcMCc7CisJCQlzYXkoc29ja2ZkLCByZXF1ZXN0X2J1ZmYpOwogCQl9CiAKIAkJaWYo ZXhwZWN0X2RhdGEgJiYgKHJlbV90eXBlICYgVFlQRV9IRUFEKT09MCl7CkBAIC0xMzg0LDExICsx NDU4LDIwIEBACiBpc2h0bWw6CiAJaWYoIGxwdHIpewkvKiBpdHMgYSBQT1NUIHNvIG5lZWQgY29u dGVudC1sZW5ndGg6ICovCiAJCWlmKGNvbnRlbnRfbGVuWzBdICYmIHNvY2tmZCAhPSAtMSl7Ci0J CQkgc2F5KHNvY2tmZCwgY29udGVudF9sZW4pIDsKKwkJCQlpZiAoKHN0cmxlbihjb250ZW50X2xl bikrcmVxdWVzdF9idWZmX2xlbisyKSA+IFJFUV9CVUZGX0xFTi0xKSB7CisJCQkJCXJlcXVlc3Rf YnVmZltyZXF1ZXN0X2J1ZmZfbGVuLTJdID0gJ1wwJzsKKwkJCQkJc2F5KHNvY2tmZCwgcmVxdWVz dF9idWZmKTsKKwkJCQkJcmVxdWVzdF9idWZmX2xlbiA9IDA7CisJCQkJfQorCQkJCXN0cm5jcHko cmVxdWVzdF9idWZmK3JlcXVlc3RfYnVmZl9sZW4sIGNvbnRlbnRfbGVuLCBzdHJsZW4oY29udGVu dF9sZW4pKTsKKwkJCQlyZXF1ZXN0X2J1ZmZfbGVuICs9IHN0cmxlbihjb250ZW50X2xlbik7CisJ CQkJc3RybmNweShyZXF1ZXN0X2J1ZmYrcmVxdWVzdF9idWZmX2xlbiwgIlxyXG4iLCAyKTsKKwkJ CQlyZXF1ZXN0X2J1ZmZfbGVuICs9IDI7CiAJCX0KIAl9CiAJaWYoIHNvY2tmZCAhPSAtMSl7Ci0J CXNheShzb2NrZmQsIiIpIDsKKwkJcmVxdWVzdF9idWZmW3JlcXVlc3RfYnVmZl9sZW5dID0gJ1ww JzsKKwkJc2F5KHNvY2tmZCwgcmVxdWVzdF9idWZmKTsKIAl9CiAJaWYoIHJlbV90eXBlICYgVFlQ RV9IRUFEKXsKIAkJcmV0dXJuIDA7CS8qIGZsYWcgYXMgZG9uZSAqLwo= --_=XFMail.1.4.4.Linux:20001220162517:10479=_-- End of MIME message From owner-fwtk-users@ex.tis.com Wed Dec 20 16:21 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA03753 Wed, 20 Dec 2000 16:21:20 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA04898; Wed, 20 Dec 2000 13:19:58 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 11:11:07 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA13814 for fwtk-users-outgoing; Wed, 20 Dec 2000 11:10:36 -0800 (PST) Date: Wed, 20 Dec 2000 11:46:19 -0500 (EST) From: Ross Bergman To: Tony Gale cc: "Hodges, Michael" , fwtk-users@ex.tis.com Subject: Re: boston.com (was RE: urgent for help!!!) In-Reply-To: Message-ID: MIME-Version: 1.0 Content-ID: Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; CHARSET=US-ASCII Content-Length: 1335 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Received, applied -- zero problems! Thanks!! On Wed, 20 Dec 2000, Tony Gale wrote: > > The enclosed patch is on top of jumbo and should sort out boston.com > (et al). > > This patch MUST be used in preference to the (buggy and dangerous) > ones I sent out earlier (sorry about that). That means you Ross :-) > > Thanks > > -tony > > > > > On 20-Dec-2000 Hodges, Michael wrote: > > Is anyone else continuing to have problems getting onto boston.com > > after > > installing the jumbo patch for http-gw, or did that fix it? > > > > Michael > > > > --- > E-Mail: Tony Gale > Documentation is the castor oil of programming. > Managers know it must be good because the programmers hate it so much. > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > ------------------------------------------------------------------------------- Ross E. Bergman Director of Information Technologies Ross.Bergman@PerkinElmer.com PerkinElmer Detection Systems ------------------------------------------------------------------------------- From owner-fwtk-users@ex.tis.com Wed Dec 20 16:21 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id QAA03752 Wed, 20 Dec 2000 16:21:20 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id NAA04890; Wed, 20 Dec 2000 13:19:58 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 20 Dec 2000 11:28:41 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id LAA14043 for fwtk-users-outgoing; Wed, 20 Dec 2000 11:28:21 -0800 (PST) Date: Wed, 20 Dec 2000 14:27:27 -0500 From: Joseph S D Yao To: Dirk Breeuwer Cc: fwtk-users@tis.com Subject: Re: Need to Ping outside the FireWall Message-Id: <20001220142727.H16408@washington.cospo.osis.gov> Mail-Followup-To: Dirk Breeuwer , fwtk-users@tis.com References: Mime-Version: 1.0 X-Mailer: Mutt 1.0i In-Reply-To: ; from dbreeuwer@campero.com.gt on Tue, Dec 19, 2000 at 12:57:39PM -0600 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 1303 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] On Tue, Dec 19, 2000 at 12:57:39PM -0600, Dirk Breeuwer wrote: ... > How can I keep track of Routers that are behind my "FireWall". Every > thing is OK when polling inside the FW, but no luck outside it. > > Scenario: > > *Windows 2000 Srvr. > *FireWall based on Linux Server with TIS FWToolKit > *Polling Successfully Routers in the Inner network > *Intending to Poll Routers in the Outer Network Linux has several mechanisms for allowing it to filter through IP. I believe that the latest non-beta one was ip-chains. There has also been ip-filter and ip-fw, and a new one is coming out "soon". I have not played with these, as I do not LIKE my firewall to be letting through such things. However, if you look for a LINUX-FIREWALL HOWTO, it should tell you how. Be sure to set the configuration EXACTLY the way you want it, because otherwise this might allow penetration. E.g., don't just allow 'ping's blindly through any which way. -- Joe Yao jsdy@cospo.osis.gov - Joseph S. D. Yao COSPO/OSIS Computer Support EMT-B ----------------------------------------------------------------------- This message is not an official statement of COSPO policies. From owner-fwtk-users@ex.tis.com Thu Dec 21 10:47 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA06365 Thu, 21 Dec 2000 10:47:37 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA04076; Thu, 21 Dec 2000 07:46:54 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 21 Dec 2000 06:11:34 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA24881 for fwtk-users-outgoing; Thu, 21 Dec 2000 06:10:53 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338750@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'Tony Gale'" Cc: fwtk-users@tis.com Subject: RE: ftp-gw not passing "Fin=1" for data Date: Wed, 20 Dec 2000 15:12:39 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset="ISO-8859-1" Content-Length: 6689 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] tony, it looks like the fwtk machine aknowledges the fin but the remote end sends 2 packets one after the other and the second packet has "\r\n5DTD1115WA0106 " in the FTP-DATA field, this second packet looks like a retransmission of the previous one (same seq and ack numbers) but has Push=1 not Fin=1. here is the entire TCP capture for the data transfer session when it hungs, (the fwtk machine has the source port=34223, the remote site ftp1.lewcosec.com port=20), i only include the flags that are equal to 1, also the fwtk is not filtering any packets. Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347512880 TCP: Acknowledgement number = 0 TCP: .... ..1. = Syn TCP: Window = 17520 TCP: Source port = 34223 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 2001988995 TCP: Acknowledgement number = 347512881 TCP: ...1 .... = Acknowledgement TCP: .... ..1. = Syn TCP: Window = 8760 TCP: Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347512880 TCP: Acknowledgement number = 0 TCP: .... ..1. = Syn TCP: Window = 17520 TCP: Source port = 34223 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 2001988996 TCP: Acknowledgement number = 347512881 TCP: ...1 .... = Acknowledgement TCP: Window = 8760 TCP: Source port = 34223 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 2001988995 TCP: Acknowledgement number = 347512881 TCP: ...1 .... = Acknowledgement TCP: Window = 8760 Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347512881 TCP: Acknowledgement number = 2001988996 TCP: ...1 .... = Acknowledgement TCP: Window = 17520 Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347512881 TCP: Acknowledgement number = 2001988996 TCP: ...1 .... = Acknowledgement TCP: Window = 17520 Source port = 34223 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 2001988996 TCP: Acknowledgement number = 347514341 TCP: ...1 .... = Acknowledgement TCP: Window = 8760 TCP: Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347515423 TCP: Acknowledgement number = 2001988996 TCP: ...1 .... = Acknowledgement TCP: .... ...1 = Fin TCP: Window = 17520 Source port = 20 TCP: Destination port = 34223 TCP: Sequence number = 347514341 TCP: Acknowledgement number = 2001988996 TCP: ...1 .... = Acknowledgement TCP: .... 1... = Push TCP: Window = 17520 FTP-DATA: ----- FTP-DATA: ----- FTP-DATA: FTP-DATA: " \r\n5DTD1115WA0106 " Source port = 34223 TCP: Destination port = 20 (FTP-DATA) TCP: Sequence number = 2001988996 TCP: Acknowledgement number = 347515423 TCP: ...1 .... = Acknowledgement TCP: Window = 8760 > ---------- > From: Tony Gale[SMTP:gale@syntax.dera.gov.uk] > Sent: Tuesday, December 19, 2000 12:08 PM > To: Barreira, Fernando [IT] > Cc: fwtk-users@tis.com > Subject: RE: ftp-gw not passing "Fin=1" for data > > > The kernel should set the state to CLOSE_WAIT if it had "seen" a fin > (and ack'ed it) from the remote end and was waiting for ftp-gw to > close it's end. Does it ack the fin? > > Does the fwtk server have any packet filtering turned on? > > -tony > > > On 19-Dec-2000 Barreira, Fernando [IT] wrote: > > tony, > > > > when i do a netstat on the fwtk machine, both the control and data > > sessions > > remain active between the (ftp-gw and client) and (ftp-gw and > > server), pls > > take a look: > > > > (ftp-gw to client) > > ftpproxy03.ftp 172.16.53.131.2808 7890 0 8760 0 > > ESTABLISHED > > ftpproxy03.48327 172.16.53.131.2809 7678 0 8760 0 > > ESTABLISHED > > > > (ftp-gw to server) > > ftpproxy03.48325 ftp1.lewcosec.com.ftp 17446 0 8760 > > 0 > > ESTABLISHED > > ftpproxy03.48326 ftp1.lewcosec.com.ftp-data 17520 0 8760 > > 0 > > ESTABLISHED > > > > on the client side it apears the connection stays hung because the > > ftp > > prompt comes back only after about 8 minutes when the control > > session times > > out and the following messages is displayed: > > 200 PORT command successfull. > > 150 Opening BINARY mode data connection for kimtest (2542 bytes) > > -> ftp get:connection timed out > > > > also why does the ftp-gw use a ramdom port other than 20 for the > > ftp-data > > connection to the client? > > > > any feedback is appreciated. thanks. > > > >> ---------- > >> From: Tony Gale[SMTP:gale@syntax.dera.gov.uk] > >> Sent: Tuesday, December 19, 2000 11:09 AM > >> To: Barreira, Fernando [IT] > >> Cc: fwtk-users@tis.com > >> Subject: RE: ftp-gw not passing "Fin=1" for data > >> > >> > >> Could you do a netstat and see what state the sockets are in for > >> the > >> connections concerned. > >> > >> -tony > >> > >> > >> > >> On 19-Dec-2000 Barreira, Fernando [IT] wrote: > >> > [To be removed from this list send the message "unsubscribe > >> > fwtk-users" in the > >> > BODY of a mail message to majordomo@ex.tis.com.] > >> > > >> > hi there, > >> > > >> > i have a machine running fwtk 2.1 on a solaris 5.6 platform, we > >> > have a > >> > problem when we try getting files from a particular ftp site. > >> > when > >> > we issue > >> > the "get" command, the session appears to hung (we never get the > >> > ftp prompt > >> > back). > >> > > >> > after looking into some data that i captured, i verified that > >> > fwtk > >> > gets the > >> > Fin=1 from the remote ftp site (server) but never passes it to > >> > the > >> > ftp > >> > client, thus the client keeps the data session open until the > >> > control > >> > session expires and we get disconnected. > >> > we only have this problem with this particular site > >> > ftp1.lewcosec.com > >> > > >> > > >> > does anybody have experienced a similar situation and have a > >> > workaround for > >> > this? > >> > thanks. > >> > >> --- > >> E-Mail: Tony Gale > >> If wishes were horses, then beggars would be thieves. > >> > >> The views expressed above are entirely those of the writer > >> and do not represent the views, policy or understanding of > >> any other person or official body. > >> > > --- > E-Mail: Tony Gale > The truth is rarely pure, and never simple. > -- Oscar Wilde > > The views expressed above are entirely those of the writer > and do not represent the views, policy or understanding of > any other person or official body. > From owner-fwtk-users@ex.tis.com Thu Dec 21 12:47 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA06685 Thu, 21 Dec 2000 12:47:48 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA19378; Thu, 21 Dec 2000 09:44:20 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Thu, 21 Dec 2000 08:22:02 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA08571 for fwtk-users-outgoing; Thu, 21 Dec 2000 08:21:50 -0800 (PST) Message-Id: <200012211620.LAA23306@fw-nyc-02.proexam.org> Date: Thu, 21 Dec 2000 11:20:53 -0500 (EST) From: Charles Robinson Reply-To: Charles Robinson To: fwtk-users@lists.nai.com MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 882 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I'm having a problem with ftp-gw. The client can ftp into my server using both passive & active ftp. but now after a file is attempted to transfer... file transfers fine but right after the process seems to hang for a minute or two then restart the file transfer again as if it has failed. My guess is that the process hangs because its waiting for the end of file control signal. Since it doesn't get the control signal is restarts the process thinking that the ftp was a failure although it wasn't. the full file was transferred correctly when I checked. In my netperm im using something like ftp-gw: permit hosts* -plug-to x.x.x.x Is there any fix for this!!!! All responses are appreciated. ~~~~~~~~~~~~~~~~ Charles ~~~~~~~~~~~~~~~~ From owner-fwtk-users@ex.tis.com Fri Dec 22 11:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA09357 Fri, 22 Dec 2000 11:06:48 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA15347; Fri, 22 Dec 2000 08:06:13 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 22 Dec 2000 06:52:28 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA06835 for fwtk-users-outgoing; Fri, 22 Dec 2000 06:52:16 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338756@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: "'fwtk-users@tis.com'" Subject: MS FTP services hungs Date: Thu, 21 Dec 2000 12:21:22 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 402 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, does anyone know if there is a microsoft specific problem with a ftp session between a microsoft ftp server and the ftp-gw on the fwtk? it's that when the data session starts, the session seems to hung due to the data session not being properly ended. thanks. From owner-fwtk-users@ex.tis.com Fri Dec 22 11:06 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA09358 Fri, 22 Dec 2000 11:06:48 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA15351; Fri, 22 Dec 2000 08:06:13 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 22 Dec 2000 06:53:39 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA07015 for fwtk-users-outgoing; Fri, 22 Dec 2000 06:53:18 -0800 (PST) From: David Lang To: fwtk-users@lists.nai.com Date: Thu, 21 Dec 2000 12:48:03 -0800 (PST) Subject: URLs getting mangled by HTTP-GW Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 402 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] I have a situation where some url-encoded strings need to be sent through the http-gw (data value contains <>) and it appears as if going through http-gw expands these back to the normal characters, which causes problems on the target server. any suggestions? David Lang From owner-fwtk-users@ex.tis.com Fri Dec 22 11:07 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA09364 Fri, 22 Dec 2000 11:07:25 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA15398; Fri, 22 Dec 2000 08:06:22 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 22 Dec 2000 05:56:42 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA02904 for fwtk-users-outgoing; Fri, 22 Dec 2000 05:56:01 -0800 (PST) Message-ID: <92D6AAE888CED411A16A00508BB0B8274E7598@ecntex.ecn.nl> From: "Overdijk, Harrie" To: "'Tony Gale'" Cc: fwtk-users@ex.tis.com, "Hodges, Michael" , Ross Bergman Subject: RE: boston.com (was RE: urgent for help!!!) Date: Fri, 22 Dec 2000 14:53:29 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 1658 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Dear Tony, This is great! Really! Thank you very much! You wrote the following: > -----Original Message----- > From: Tony Gale [SMTP:gale@syntax.dera.gov.uk] > Sent: Wednesday, December 20, 2000 5:25 PM > To: Hodges, Michael; Hodges, Michael; Ross Bergman > Cc: fwtk-users@ex.tis.com > Subject: boston.com (was RE: urgent for help!!!) > Importance: High > > > The enclosed patch is on top of jumbo and should sort out boston.com > (et al). > > This patch MUST be used in preference to the (buggy and dangerous) > ones I sent out earlier (sorry about that). That means you Ross :-) > > << File: fwtk-broken-web.diff >> > [Harrie] With these patches applied on the original [Harrie] http-gw in the fwtk 2.1 distribution not only [Harrie] the sites: [Harrie] [Harrie] http://www.xml.com/ [Harrie] http://www.perl.com/ [Harrie] http://www.boston.com/ [Harrie] [Harrie] are accessible, but also the socalled Aleph sites [Harrie] (see my mail with subject "Strange http problems [Harrie] with Aleph sites..." on "Wed 10/20/99 3:05 PM" in [Harrie] the archives is SOLVED! Again, thank you very much for your work! You couldn't have given a better Xmas present to me. ;-) Yours sincerly, Harrie Overdijk Harrie Overdijk, ECN, Postbox 1, 1755 ZG Petten (NH), The Netherlands. Internet: overdijk@ecn.nl Noisenet: +31 224 56 4597 Fidonet : 2:500/43.1902 (At home!) FAXnet : +31 224 56 1864 ICP/Postmaster/UseNet-News-manager/WWW-manager/Security-manager of ECN. From owner-fwtk-users@ex.tis.com Fri Dec 22 11:33 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id LAA09535 Fri, 22 Dec 2000 11:32:54 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id IAA18697; Fri, 22 Dec 2000 08:33:14 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 22 Dec 2000 07:18:48 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA09694 for fwtk-users-outgoing; Fri, 22 Dec 2000 07:18:27 -0800 (PST) X-Authentication-Warning: proxy.hundert6.de: mail set sender to using -f Message-ID: <3A437EA6.FDC0F74@radio.hundert6.de> Date: Fri, 22 Dec 2000 16:17:42 +0000 From: Jan Muenther Organization: Radio Hundert,6 X-Mailer: Mozilla 4.72 [en] (X11; I; FreeBSD 4.2-STABLE i386) X-Accept-Language: en MIME-Version: 1.0 To: "Barreira, Fernando [IT]" , "'fwtk-users@ex.tis.com'" Subject: Re: MS FTP services hungs References: <3D6CFAEE245FD411938A00508BE3714801338756@exchnj01.sbi.com> Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 572 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hi. > does anyone know if there is a microsoft specific problem with a ftp session > between a microsoft ftp server and the ftp-gw on the fwtk? > > it's that when the data session starts, the session seems to hung due to the > data session not being properly ended. Yes, there's a patch available for this thing. Get it from fwtk.org. Bye, have a nice Xmas. Jan -- Radio HUNDERT,6 Medien GmbH Berlin - EDV - j.muenther@radio.hundert6.de From owner-fwtk-users@ex.tis.com Mon Dec 25 08:53 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id IAA15296 Mon, 25 Dec 2000 08:53:28 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id FAA16910; Mon, 25 Dec 2000 05:53:42 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 25 Dec 2000 03:37:28 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA15804 for fwtk-users-outgoing; Mon, 25 Dec 2000 03:37:18 -0800 (PST) Date: Mon, 25 Dec 2000 12:34:11 +0100 (CET) From: Alex X-Sender: alex@tux.sudb.com To: fwtk-users@lists.nai.com Subject: Problem running plug-gw in inetd Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 976 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Hello, I've succesfully installed fwtk on my 486 Debian 2.2 box and I have trouble when I want to run plug-gw (nntp proxy) into inetd, Although on daemon mode it works fine. my inetd.conf: #:PROXY HTTP webcache stream tcp nowait root /usr/local/etc/http-gw http-gw #:PROXY NNTP nntp stream tcp nowait root /usr/local/etc/plug-gw plug-gw nntp (the http proxy is ok) syslog output when I start plug-gw -daemon 119: plug-gw[651]: connect host=my.host.client/192.168.0.2 destination=193.252.19.141/119 :-) syslog ouput when I start plug-gw in inetd: plug-gw[657]: deny host=my.host.client/192.168.0.2 service=nntp :-( /usr/local/etc/netperm-table: plug-gw: port nntp 192.168.0.* -plug-to 193.252.19.141 -port nntp plug-gw: port nntp 193.252.19.141 -plug-to 192.168.0.* -port nntp Someone can help me? Alex From owner-fwtk-users@ex.tis.com Mon Dec 25 10:16 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id KAA15358 Mon, 25 Dec 2000 10:15:56 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id HAA18184; Mon, 25 Dec 2000 07:16:19 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Mon, 25 Dec 2000 05:55:52 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id FAA16932 for fwtk-users-outgoing; Mon, 25 Dec 2000 05:55:31 -0800 (PST) Date: Mon, 25 Dec 2000 08:53:31 -0500 (EST) From: Ted Keller To: Alex cc: fwtk-users@lists.nai.com Subject: Re: Problem running plug-gw in inetd In-Reply-To: Message-ID: MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1551 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Alex, change the plug-gw: to nntp: Version 2.1 of the plug-gw changed the format of the netperm-table lines a bit. I think your line should look like... inetd: nntp stream tcp nowait root /usr/local/etc/plug-gw nntp and netperm-table: nntp: port nntp 192.168.0.* -plug-to 193.252.19.141 -port nntp ted keller On Mon, 25 Dec 2000, Alex wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > Hello, > > I've succesfully installed fwtk on my 486 Debian 2.2 box and I have > trouble when I want to run plug-gw (nntp proxy) into inetd, Although > on daemon mode it works fine. > > my inetd.conf: > #:PROXY HTTP > webcache stream tcp nowait root /usr/local/etc/http-gw > http-gw > #:PROXY NNTP > nntp stream tcp nowait root /usr/local/etc/plug-gw plug-gw > nntp > > (the http proxy is ok) > > syslog output when I start plug-gw -daemon 119: > plug-gw[651]: connect host=my.host.client/192.168.0.2 > destination=193.252.19.141/119 > :-) > > syslog ouput when I start plug-gw in inetd: > plug-gw[657]: deny host=my.host.client/192.168.0.2 > service=nntp > :-( > > > > /usr/local/etc/netperm-table: > plug-gw: port nntp 192.168.0.* -plug-to 193.252.19.141 -port nntp > plug-gw: port nntp 193.252.19.141 -plug-to 192.168.0.* -port nntp > > Someone can help me? > > Alex > > From owner-fwtk-users@ex.tis.com Tue Dec 26 12:11 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA17530 Tue, 26 Dec 2000 12:11:21 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA13639; Tue, 26 Dec 2000 09:11:13 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 26 Dec 2000 07:05:58 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id HAA05190 for fwtk-users-outgoing; Tue, 26 Dec 2000 07:05:47 -0800 (PST) X-Authentication-Warning: spider.usrconsult.be: mail set sender to using -f Message-ID: <3A4865A5.848C81EC@peaktime.be> Date: Tue, 26 Dec 2000 10:32:21 +0100 From: Michel Bardiaux Organization: Peaktime Belgium S.A. X-Mailer: Mozilla 4.73 [en] (WinNT; I) X-Accept-Language: en,fr MIME-Version: 1.0 To: fwtk-users@lists.nai.com Subject: Re: Problem running plug-gw in inetd References: Content-Transfer-Encoding: 7bit Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 659 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Alex wrote: > /usr/local/etc/netperm-table: > plug-gw: port nntp 192.168.0.* -plug-to 193.252.19.141 -port nntp I assume you are using 192.168.xx.xx addresses for your internal net, and 193.252.19.141 is your News server. Right? > plug-gw: port nntp 193.252.19.141 -plug-to 192.168.0.* -port nntp > Then I don't see what this 2nd line is supposed to do. Could you clarify? Season greetings! -- Michel Bardiaux Peaktime Belgium S.A. Rue Margot, 37 B-1457 Nil St Vincent Tel : +32 10 65.44.15 Fax : +32 10 65.44.10 From owner-fwtk-users@ex.tis.com Tue Dec 26 12:11 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id MAA17533 Tue, 26 Dec 2000 12:11:29 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id JAA13619; Tue, 26 Dec 2000 09:10:47 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Tue, 26 Dec 2000 06:56:06 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id GAA04819 for fwtk-users-outgoing; Tue, 26 Dec 2000 06:55:35 -0800 (PST) From: gale@dfhnet.dera.gov.uk Date: Mon, 25 Dec 2000 10:38:16 +0000 To: David Lang Cc: fwtk-users@lists.nai.com Subject: Re: URLs getting mangled by HTTP-GW Message-ID: <20001225103816.A14153@dfhnet.dera.gov.uk> References: Mime-Version: 1.0 Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: ; from david.lang@digitalinsight.com on Thu, Dec 21, 2000 at 12:48:03PM -0800 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain; charset=us-ascii Content-Length: 707 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] The jumbo patch on www.fwtk.org contains some character escaping fixes. -tony On Thu, Dec 21, 2000 at 12:48:03PM -0800, David Lang wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > I have a situation where some url-encoded strings need to be sent through > the http-gw (data value contains <>) and it appears as if going through > http-gw expands these back to the normal characters, which causes problems > on the target server. > > any suggestions? > > David Lang From owner-fwtk-users@ex.tis.com Wed Dec 27 07:57 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id HAA20052 Wed, 27 Dec 2000 07:57:31 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id EAA24393; Wed, 27 Dec 2000 04:57:27 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Wed, 27 Dec 2000 03:19:49 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id DAA22473 for fwtk-users-outgoing; Wed, 27 Dec 2000 03:19:39 -0800 (PST) Message-ID: <51DB621A5EEED211929400508B2C01750C721A@sthsrv03.cc.sigma.se> From: Marcus Ossiann To: "'fwtk-users@lists.nai.com'" Subject: Newbie quiz!! DCOM Date: Wed, 27 Dec 2000 12:24:27 +0100 Importance: high X-Priority: 1 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C06FF7.9285EE70" Content-Length: 1330 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01C06FF7.9285EE70 Content-Type: text/plain; charset="iso-8859-1" Hi I haven't really understod how I setup the Fwtk to filter the DCOM traffic I need to allow a port range on the forthe traffic and it's 9000-9120 is this possible. thanks ---------------------------------------------------------------------------- ------------ Marcus Ossiann Security Sigma Corporate Communication AB Vasagatan 36 2 fl SE-111 20 STOCKHOLM SWEDEN Ph: +46 8 553 912 69 Mobile: +46 703 790 580 <> ------_=_NextPart_000_01C06FF7.9285EE70 Content-Type: application/octet-stream; name="Marcus Ossiann.vcf" Content-Disposition: attachment; filename="Marcus Ossiann.vcf" BEGIN:VCARD VERSION:2.1 N:Ossiann;Marcus FN:Marcus Ossiann ORG:Sigma Corporate Communications AB TEL;WORK;VOICE:+46 703 790 580 ADR;WORK:;Vasagatan;;Stockholm;;;Sweden LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Vasagatan=0D=0AStockholm=0D=0ASweden EMAIL;PREF;INTERNET:marcus.ossiann@cc.sigma.se REV:20001220T073300Z END:VCARD ------_=_NextPart_000_01C06FF7.9285EE70-- From owner-fwtk-users@ex.tis.com Fri Dec 29 13:17 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA28428 Fri, 29 Dec 2000 13:17:46 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA25966; Fri, 29 Dec 2000 10:17:30 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 29 Dec 2000 08:01:44 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id IAA12801 for fwtk-users-outgoing; Fri, 29 Dec 2000 08:01:33 -0800 (PST) Message-ID: <3D6CFAEE245FD411938A00508BE3714801338788@exchnj01.sbi.com> From: "Barreira, Fernando [IT]" To: fwtk-users@tis.com Subject: data session hungs Date: Fri, 29 Dec 2000 10:52:15 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Sender: owner-fwtk-users@lists.tislabs.com Content-Type: text/plain Content-Length: 1037 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] hi there, i have been investigating a weird situation in which when a user connects to a specific internet ftp site via the fwtk ftp-gw, very often during a file transfer (or just by issuing the command "ls") , the data session stays hung and can't get the ftp prompt back. however, if i try ftp from the command line of the machine that has the fwtk ftp-gw, i never see the problem. since this only happens when connectiong to a specific site, i first thought it was a problem on the remote ftp site, now i am beginning to wonder if the fwtk ftp-gw is causing it since i don't see a problem when bypassing the ftp-gw. i am using an ultra2 with solaris 5.6, and fwtk version 2.1 the remote end uses "lsftp1a Microsoft FTP Service (Version 4.0)" does anyone know if a similar situation has been reported and if there are any bugs with fwtk that can trigger this? any help would be appreciated. thanks. From owner-fwtk-users@ex.tis.com Fri Dec 29 13:39 EST 2000 Received: from relay2.nai.com (relay2.nai.com [161.69.3.67]) by lists.tislabs.com (8.9.1/8.9.1) with ESMTP id NAA28457 Fri, 29 Dec 2000 13:39:00 -0500 (EST) Received: from localhost (daemon@localhost) by relay2.nai.com (8.9.3/8.9.3) with SMTP id KAA28078; Fri, 29 Dec 2000 10:38:55 -0800 (PST) Received: by ex.tis.com (bulk_mailer v1.11); Fri, 29 Dec 2000 09:24:54 -0800 Received: (from majordomo@localhost) by relay2.nai.com (8.9.3/8.9.3) id JAA20661 for fwtk-users-outgoing; Fri, 29 Dec 2000 09:24:33 -0800 (PST) Message-Id: <200012291724.MAA08187@fw-nyc-02.proexam.org> Date: Fri, 29 Dec 2000 12:23:58 -0500 (EST) From: Charles Robinson To: "Barreira, Fernando [IT]" cc: fwtk-users@tis.com Subject: Re: data session hungs In-Reply-To: <3D6CFAEE245FD411938A00508BE3714801338788@exchnj01.sbi.com> MIME-Version: 1.0 Sender: owner-fwtk-users@lists.tislabs.com Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1951 [To be removed from this list send the message "unsubscribe fwtk-users" in the BODY of a mail message to majordomo@ex.tis.com.] Yes, the problem is with the ftp-gw. when doing a "ls" or "dir" or "send" in passive mode the data socket must connect to the client or host. When the data socket can not be established the process will hang. ftp error 425 or 426 I believe (check the ftp client logs) This usually means that your client is behind a firewall that does not allow that traffic on the port & is rejecting it. In active environment your clients firewall must allow ftp over "high" ports. or else it will hang. I hope this helps a little. Let me know if I was unclear on anything. ~~~~~~~~~~~~~~~~ Charles Robinson Network Security Administrator Professional Examination Service ~~~~~~~~~~~~~~~~ On Fri, 29 Dec 2000, Barreira, Fernando [IT] wrote: > [To be removed from this list send the message "unsubscribe fwtk-users" in the > BODY of a mail message to majordomo@ex.tis.com.] > > hi there, > > i have been investigating a weird situation in which when a user connects to > a specific internet ftp site via the fwtk ftp-gw, very often during a file > transfer (or just by issuing the command "ls") , the data session stays hung > and can't get the ftp prompt back. > > however, if i try ftp from the command line of the machine that has the fwtk > ftp-gw, i never see the problem. > > since this only happens when connectiong to a specific site, i first thought > it was a problem on the remote ftp site, now i am beginning to wonder if the > fwtk ftp-gw is causing it since i don't see a problem when bypassing the > ftp-gw. > > i am using an ultra2 with solaris 5.6, and fwtk version 2.1 > the remote end uses "lsftp1a Microsoft FTP Service (Version 4.0)" > > does anyone know if a similar situation has been reported and if there are > any bugs with fwtk that can trigger this? > any help would be appreciated. thanks. >