Linux-India Website

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sanjay Arora wrote:
> I want to have two DSL connections from different providers in my
> office. Does anyone know of any router that has two or maybe even more
> ports on WAN Side. I need only one Ethernet Port, to connect to my
> Linux Firewall Gateway, which NATS connectivity to the office.
> 
> Shoestring budget...of course ;-) 

Set both of them up as transparent bridges (assuming static IP) and
configure the IPs onto a linux box with two network interfaces.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Key at http://www.hserus.net/pgp.txt

iD8DBQFCc4nKRB4r9e3t77kRAsItAKCxZU3/de6ZhaQaoiHSxmjGs2+ZkgCeKx47
p/+Y5erqgk/6auDGmgi1J6c=
=BH95
-----END PGP SIGNATURE-----

On 30/04/05, Sanjay Arora <sanjay.k.arora@...> wrote:
> Hi All
>=20
> I want to have two DSL connections from different providers in my
> office. Does anyone know of any router that has two or maybe even more
> ports on WAN Side. I need only one Ethernet Port, to connect to my
> Linux Firewall Gateway, which NATS connectivity to the office.
>=20
> Shoestring budget...of course ;-)

If it weren't for that last line, I'd have happily recommended you to
the Cisco 26xx series routers. I think the 2621XM can do multiple DSL
providers.

What has this got to do with Linux, anyway?

Binand

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Binand Sethumadhavan wrote:
| If it weren't for that last line, I'd have happily recommended you to
| the Cisco 26xx series routers. I think the 2621XM can do multiple DSL
| providers.
|
| What has this got to do with Linux, anyway?

You can pick those up quite cheap on ebay

	srs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Key at http://www.hserus.net/pgp.txt

iD8DBQFCc4wQRB4r9e3t77kRAmscAJ9htBRbGq91NZav4PoPNmLSreAi9wCggLC6
2NcZ1dq/tXDvSt4SmtNxcvc=
=4lNk
-----END PGP SIGNATURE-----

My old budda Linux Box has three Lan Cards on the only three PCI slots
available. Internal Network, DMZ & DSL Wan link...all three used.

I am using IPcop for firewall. What do you guys think would be cheaper
(maybe also better), buying a multi-wan router & plugging it into the
WAN interface of IPCop or buying a new motherboard that has more slots
for network cards. In that case, will have to chuck out IPCop and look
for another open source firewall/IDS/NAT distro that supports more
than one port open to internet, maybe with load-balancing & failover
built in. Any suggestions along these lines?

I don't want to use DSL appliance for firewalling as detailed firewall
& IDS logs are a must. Anyways, can't do much with them.

With best regards.
Sanjay.


On 4/30/05, Suresh Ramasubramanian <linux@...> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>=20
> Sanjay Arora wrote:
> > I want to have two DSL connections from different providers in my
> > office. Does anyone know of any router that has two or maybe even more
> > ports on WAN Side. I need only one Ethernet Port, to connect to my
> > Linux Firewall Gateway, which NATS connectivity to the office.
> >
> > Shoestring budget...of course ;-)
>=20
> Set both of them up as transparent bridges (assuming static IP) and
> configure the IPs onto a linux box with two network interfaces.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
> Comment: Key at http://www.hserus.net/pgp.txt
>=20
> iD8DBQFCc4nKRB4r9e3t77kRAsItAKCxZU3/de6ZhaQaoiHSxmjGs2+ZkgCeKx47
> p/+Y5erqgk/6auDGmgi1J6c=3D
> =3DBH95
> -----END PGP SIGNATURE-----
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by: NEC IT Guy Games.
> Get your fingers limbered up and give it your best shot. 4 great events, =
4
> opportunities to win big! Highest score wins.NEC IT Guy Games. Play to
> win an NEC 61 plasma display. Visit http://www.necitguy.com/?r=3D20
> _______________________________________________
> linux-india-help mailing list
> linux-india-help@...
> https://lists.sourceforge.net/lists/listinfo/linux-india-help
>

On 4/30/05, Binand Sethumadhavan <binand@...> wrote:
>
> If it weren't for that last line, I'd have happily recommended you to
> the Cisco 26xx series routers. I think the 2621XM can do multiple DSL
> providers.
>=20

Yeah...I dream about Cisco.... & Aishwarya too ;-) But don't mean I'll
get 'em ;-((

> What has this got to do with Linux, anyway?
>=20
LOL...Heard of open source help? This was it ;-))

Ciao.
Sanjay.

On 30/04/05, Sanjay Arora <sanjay.k.arora@...> wrote:
> > What has this got to do with Linux, anyway?
> >
> LOL...Heard of open source help? This was it ;-))

This is a Linux User Group - not an open source (or even free
software) user group. Heard of "keeping things on-topic"??

Binand

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sanjay Arora wrote:
| My old budda Linux Box has three Lan Cards on the only three PCI slots
| available. Internal Network, DMZ & DSL Wan link...all three used.
|
| I am using IPcop for firewall. What do you guys think would be cheaper
| (maybe also better), buying a multi-wan router & plugging it into the

There are some multiport ethernet cards that you can try (kind of
similar to the multiport serial cards stallion makes)

I know adaptec, dlink etc make these .. lemme see if i can find a
reference .. yeah, http://www.freelabs.com/~whitis/hardware/quartet.html

No idea whether these are available in india but they should be easy
enough to source, and far cheaper than cisco routers.

	srs
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Key at http://www.hserus.net/pgp.txt

iD8DBQFCc5KZRB4r9e3t77kRArY4AJ0SlAbwzFWNzTZv7ts7wCRK2TvrXACgoVIo
D+pMdiAPGnL/1KkM5sffSVI=
=7HOu
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Binand Sethumadhavan wrote:
| On 30/04/05, Sanjay Arora <sanjay.k.arora@...> wrote:
|
|>>What has this got to do with Linux, anyway?
|>>
|>
|>LOL...Heard of open source help? This was it ;-))
|
|
| This is a Linux User Group - not an open source (or even free
| software) user group. Heard of "keeping things on-topic"??

well yeah binand, but there are linux alternatives available
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Key at http://www.hserus.net/pgp.txt

iD8DBQFCc5MmRB4r9e3t77kRAiOEAKDl+1dDQMXkW6mUpwlBfxF5nq2ghQCeO+bk
qSqTsE+WVQPVOrntT4gVM9o=
=C095
-----END PGP SIGNATURE-----

Binad


> This is a Linux User Group - not an open source (or even free
> software) user group. Heard of "keeping things on-topic"??
>=20
Have a sense of humour, man. I was joking. If you read my earlier post
in reply Suresh's post, you will realize my context is entirely
linux...maybe subject line could have been improved to be more
die-hard linuxer friendly...but then I'm a man of parts...mostly
mistakes ;-)

Sanjay.

On 30/04/05, Sanjay Arora <sanjay.k.arora@...> wrote:
> Binad

Binand, if you please.

> > This is a Linux User Group - not an open source (or even free
> > software) user group. Heard of "keeping things on-topic"??
> >
> Have a sense of humour, man. I was joking. If you read my earlier post
> in reply Suresh's post, you will realize my context is entirely
> linux...maybe subject line could have been improved to be more
> die-hard linuxer friendly...but then I'm a man of parts...mostly
> mistakes ;-)

Well, I don't think your query had anything to do with Linux. But you
have got me thinking - there is certainly a need for an "open source"
help list - where one can post anything and get help (or at least, a
pointer to where you can get help), without looking up the right
support group. There is a mailing list nukkad@...,
which does precisely this, but only for Mumbai-specific issues. You
want to buy a router? Post there. You want to know of a good tax
consultant in Ghatkopar or the best Goan restaurant in Goregaon? Post
there. You get the idea...

Of course, now we are getting way off-topic here.

Binand

* Binand Sethumadhavan <binand@...> [050430 05:46]:
> I need to solve the problem of transferring about 250 MB of data
> across the Atlantic every few minutes.

I too had a similar problem except the files needed to be transferred every
few hours I got it solved using rsync and even had wget (which is scriptable)
doing it. Maybe they can help you out. Even though I use download accelerators
in Windows I am not too comfortable with them.

Shantanu

--

On 30/04/05, K. Shantanu <shantanu-lih@...> wrote:
> * Binand Sethumadhavan <binand@...> [050430 05:46]:
> > I need to solve the problem of transferring about 250 MB of data
> > across the Atlantic every few minutes.
>=20
> I too had a similar problem except the files needed to be transferred eve=
ry
> few hours I got it solved using rsync and even had wget (which is scripta=
ble)
> doing it. Maybe they can help you out. Even though I use download acceler=
ators
> in Windows I am not too comfortable with them.

Rsync and Wget are not download accelerators. Rsync is a
synchronisation tool, and is really slow for pure file transfers. Wget
does not multithread. For example, I can download a 250 MB file in
30-odd seconds using Axel with 20 threads (and a heavily tuned Apache
at the server side), whereas wget takes about 8 minutes.

I am now inclined to blame NFS now for my problems (my setup downloads
onto an NFS mounted volume). I haven't seen many download corruptions
when I try to download to the local disk. Perhaps it is a bug in the
lseek() implementation on the NFS client (Linux) or server (EMC
Celerra). Trying to figure out which is a big pain, since the
corruption is very random and not at all consistently reproducible :(

Binand

* Nilesh Shastrakar <nilesh@...> [050430 00:06]:
> Hello All,
> 
> 
> Could any one tell me for good mail filtering software as well as antivirus
> for sendmail server.

Maildrop/Procmail and Clamav.

Shantanu

--

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Thaths wrote:
> internal clients is able to establish a connection just fine. I am
> unable to establish a second connection. On the remote end, the person
> running the VPN server says that they are not even "seeing the second
> connection attempt".
> 
> Any clues on what iptables rules to add to enable multiple PPTP
> clients to pass through the SNAT box?

pptp will accept only one connection per IP
so it doesnt exactly play too well with a nat setup
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Key at http://www.hserus.net/pgp.txt

iD8DBQFCcbc0RB4r9e3t77kRAmqXAJ9ItneQa0SHEydv/ah9A/cC0EjKbQCg4exe
wXZEMiQ8MBr1rQnewWkRlo0=
=im+f
-----END PGP SIGNATURE-----

On 4/29/05, Suresh Ramasubramanian <linux@...> wrote:
> pptp will accept only one connection per IP
> so it doesnt exactly play too well with a nat setup

I also came across this:

"Currently, only one inside machine can have an open virtual circuit
to an outside machine X. If another inside machine connects to machine
X, the first inside machine will lose its connection because packets
will be intermixed. This problem exists because this protocol is not
port based. There are a couple things in the PPTP spec that might
allow IP masquerading to work more generically. There are callID and
peerCallID areas that could act as identifiers for sessions. The only
problem is that Windows NT sets both of them to 0, so nothing useful
can be done with them currently."[1]

The funny thing is when we use a hardware firewall things work well.
Which makes me think that the Linux folks have not fully reverse
engineered the PPTP protocol yet to figure out how to do this.

Thaths
[1] http://bmrc.berkeley.edu/people/chaffee/linux_pptp.html

--=20
   "Good things don't end in -eum; they end in -mania or -teria"
                                   -- Homer J. Simpson

On 29/04/05, Thaths <thaths@...> wrote:
> The funny thing is when we use a hardware firewall things work well.
> Which makes me think that the Linux folks have not fully reverse
> engineered the PPTP protocol yet to figure out how to do this.

Thaths,

If you can get people to move to an IPSec VPN, go for it.

Else, run PPTP on your Linux NAT box and have your tunnels transparent
to your users.

Which hardware firewall did you find working fine?

Binand

On 4/29/05, Binand Sethumadhavan <binand@...> wrote:
> If you can get people to move to an IPSec VPN, go for it.

Sorry. No can do. The remote end is not in my control.

> Else, run PPTP on your Linux NAT box and have your tunnels transparent
> to your users.

That is an option. I should look into it.

> Which hardware firewall did you find working fine?

Netlink ISDN router, I think. I guess Harald Welte is not going to go
after then for GPL violations. ;-)

BTW, there is a kernel patch available from Netfilter to achieve this.
I am going to try that out first.

Thaths
--=20
   "Good things don't end in -eum; they end in -mania or -teria"
                                   -- Homer J. Simpson