So, obviously my iptables ain't blocking DECnet,
so it's a mystery why I can only see:
pc:/etc# cat /proc/net/decnet_neigh
Addr Flags State Use Blksize Dev
1.500 --- 40 01 0001498 eth0
1.10 --- 40 01 0016434 lo
Aloha, Angela
--
"(I'll) Be Seeing You..." All information and transactions are
private between the parties, and are non negotiable. All rights
reserve without prejudice, Angela Kahealani. http://kahealani.com
On Wed, 2008-08-20 04:57:57 Johnny Billquist wrote:
Angela Kahealani wrote:
On Wed, 2008-08-20 03:54:55 Christine Caulfield wrote:
libpcap0.8-dev
Thanks... got compiled,
working live on config with sampsa in IRC
And...? You should be up by now, I thought...
Johnny
Yeah, I can see how one would think that... however,
I just figured out that I have to learn iptables now...
I'm running fail2ban, and that setup IPtables as:
pc:/# iptables --list
Chain INPUT (policy ACCEPT)
target prot opt source destination
fail2ban-ssh tcp -- anywhere anywhere multiport dports ssh,sftp
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN 0 -- anywhere anywhere
so now I have to figure out how to punch holes in the firewall
for UDP/4711 to let DECnet traffic through, and I'm a newbie
to iptables... so am reading documents, so that I don't break
what fail2ban is already doing here.
Aloha, Angela
--
"(I'll) Be Seeing You..." All information and transactions are
private between the parties, and are non negotiable. All rights
reserve without prejudice, Angela Kahealani. http://kahealani.com
Angela Kahealani wrote:
On Wed, 2008-08-20 03:54:55 Christine Caulfield wrote:
libpcap0.8-dev
Thanks... got compiled,
working live on config with sampsa in IRC
And...? You should be up by now, I thought...
Johnny
On Wed, 2008-08-20 03:54:55 Christine Caulfield wrote:
libpcap0.8-dev
Thanks... got compiled,
working live on config with sampsa in IRC
--
"(I'll) Be Seeing You..." All information and transactions are
private between the parties, and are non negotiable. All rights
reserve without prejudice, Angela Kahealani. http://kahealani.com
On Wed, 2008-08-20 03:43:55 Johnny Billquist wrote:
You're on some kind of Linux, right?
There is probably some packet manager in there, which you can request to
install the pcap library.
Johnny
yes, thanks... got compiled,
and working on config live with sampsa on IRC for DECnet
--
"(I'll) Be Seeing You..." All information and transactions are
private between the parties, and are non negotiable. All rights
reserve without prejudice, Angela Kahealani. http://kahealani.com
Angela Kahealani wrote:
On Tue, 2008-08-19 23:35:02 Johnny Billquist wrote:
I'm setting up
1.500 for KAHEA and
1.501 for LANI.
As soon as your end of the bridge is compiled, let me know, and we'll
the the connection running.
Hmmmm... Houston, we have a problem. Where do I get "pcap"?
Depending on your distribution you should be able to do a
yum install libpcap-devel
or
apt-get install libpcap-dev
or something similar
Actually on my old debian system it's called libpcap0.8-dev
but it should be available in there somewhere.
Chrissie
You're on some kind of Linux, right?
There is probably some packet manager in there, which you can request to install the pcap library.
Johnny
Angela Kahealani wrote:
On Tue, 2008-08-19 23:35:02 Johnny Billquist wrote:
I'm setting up 1.500 for KAHEA and 1.501 for LANI.
As soon as your end of the bridge is compiled, let me know, and we'll the the connection running.
Hmmmm... Houston, we have a problem. Where do I get "pcap"?
angela at pc:/usr/local/src/DECnet.bridge$ make
cc -O2 -o bridge bridge.c -lpcap
bridge.c:24:22: error: pcap-bpf.h: No such file or directory
bridge.c:31:18: error: pcap.h: No such file or directory
bridge.c:72: error: array type has incomplete element type
bridge.c:73: error: BPF_LD undeclared here (not in a function)
bridge.c:73: error: BPF_H undeclared here (not in a function)
bridge.c:73: error: BPF_ABS undeclared here (not in a function)
bridge.c:74: error: BPF_JMP undeclared here (not in a function)
bridge.c:74: error: BPF_JEQ undeclared here (not in a function)
bridge.c:74: error: BPF_K undeclared here (not in a function)
bridge.c:78: error: BPF_RET undeclared here (not in a function)
bridge.c:136: error: expected = , , , ; , asm or __attribute__ before * token
bridge.c: In function add_bridge :
bridge.c:200: error: storage size of pgm isn t known
bridge.c:201: error: PCAP_ERRBUF_SIZE undeclared (first use in this function)
bridge.c:201: error: (Each undeclared identifier is reported only once
bridge.c:201: error: for each function it appears in.)
bridge.c:203: error: pcap undeclared (first use in this function)
bridge.c:209: error: invalid application of sizeof to incomplete type struct bpf_insn
bridge.c: In function main :
bridge.c:614: error: storage size of h isn t known
bridge.c:615: error: pcap undeclared (first use in this function)
bridge.c:615: warning: cast to pointer from integer of different size
make: *** [bridge] Error 1
angela at pc:/usr/local/src/DECnet.bridge$ cat Makefile
bridge: bridge.c
cc -O2 -o bridge bridge.c -lpcap
angela at pc:/usr/local/src/DECnet.bridge$
Aloha, Angela
Hi, Angela.
Angela Kahealani wrote:
Aloha Johnny
On Mon, 2008-08-18 22:18:48 Johnny Billquist wrote:
At the moment, HECnet is somewhat split, since a central router isn't up and running. So not everyone can reach area 2. :-(
Johnny
I'm working towards joining HECNET.
Great!
I would like to be assigned two node numbers and reserve two node names:
KAHEA Linux DECnet
LANI TOPS-20 on KLH-10 emulator
and I understand that running a bridge on Linux my best bet is to
join your area 1.
Yes, that would be the easiest. I'm setting up 1.500 for KAHEA and 1.501 for LANI.
As soon as your end of the bridge is compiled, let me know, and we'll the the connection running.
Johnny
Thank you, and
Aloha, Angela Kahealani
Bob Armstrong skrev:
I've created a simple DCL script that will allow me to maintain a simple
list of the Multinet tunnels and a DNS name. The script will do an NSLOOKUP
on the name to figure out the corresponding IP and then re-configure the
Multinet connections accordingly. Like the bridge program, this isn't
automatic and you'll have to send me an email when your IP changes to remind
me to re-run this script. And since changing the destination IP requires
turning the circuit off and then restarting it, any existing connections on
that circuit (including any that are routed thru you) will be broken. Given
the fairly low level of usage on HECnet, that doesn't seem like a big
problem.
If you already have a Multinet connection to LEGATO with a static IP, then
you can just ignore this message. Nothing will change for you.
Fred - it's time for you to go sign up for that Multinet Hobbyist license
:-)
Maybe I should point out that for the bridge program, all you need to do is send it a HUP signal, and it will redo the name lookups. However, there is always a possibility that the old resolving information is still cached somewhere, so that you won't the to the new address right away anyhow. How long the delay depends on how the name server and domains are set up.
But if someone have a dynamic IP, but it changes fairly seldom, it usually works acceptable anyway, so having a dynamic IP address isn't neccesarily the end of it all.
Johnny
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
