To do Disk Mirrorring With Software Raid In Debian follow the following
steps
1. Normal boot at start up with the boot disk
2. Manual Network configuration
3. Create the Partition as follows
We use 41 GB > 40 GB as /
1 GB as swap
In first HDD>> ***follow the partition sequence strictly
/ as RAID and Add boot able flag with this partition (most important)
Rest of it swap format it as swap
In Second HDD>> ***follow the partition sequence strictly
As same as the first one and mantain the partition sequence
4. Configure Software RAID > give it 'yes'
5. Then Create MD Device
6. select RAID 1
7. number of active device for the RAID1 array: give here the value 2
8. Number of spare devices for the RAID1 array: give here the value 0
9. Now select the active RAID devices to create array >
Select the two partition with * and then >continue>finish
10. Now it shows up a new RAID1 device with 40 GB space along with the
two HDD as IDE1 and IDE2
> Format it with ext3 file system and mount as / (The RAID1 device not
the others leave others untouchable)
11 . After completion > Finish partitioning and write changes to disk
12 . Write changes to disk > Yes
13 . Load GRUB on MBR > Yes
14. Now complete as usual
After the completion the installation login as root user and then follow
the procedures >
1 .run the command
#cat /proc/mdstat
it will show the syncing process of two devices.run this periodically to
see when the process finish. before finishing dont reboot or shutdown
the pc that will cause errors.
After finishing the process run these commands
#grub
#root (hd1,0)
#setup (hd1)
#quit
it will setup the GRUB boot image on second HDD
Now Reboot the PC.
After rebooting do some changes with files and packages then shutdown
the PC.
Now for testing Boot up the PC with unplugging the master HDD
If the PC reboot and run normally and all previously made changes will
remain up to date then all is ok
Now this is the time to Bring the first HDD up
1. Reboot the system with Plug in the Primary HDD.
2. Now erase all partitions on primary harddisk drive and do partition
again 40 GB as / & 1 GB as swap, make / Bootable
You can make this by using fdisk or cfdisk utilities.
3 .Now Run these commands to add this device as mirror
#mdadm /dev/md0 -f /dev/hda1
#mdadm /dev/md0 -a /dev/hda1
#cat /proc/mdstat to see the syncing process. Run it
periodically to see the progress before it will finish do nothing.
After completion of the syncing process do as follows
1. Edit /boot/grub/menu.lst (Only the Red line)
title Debian GNU/Linux, kernel 2.4.27-2-386 >Boot from HDD1
root (hd0,0)
kernel /boot/vmlinuz-2.4.27-2-386 root=/dev/md0 ro
initrd /boot/initrd.img-2.4.27-2-386
savedefault
boot
2. Add following lines at /boot/grub/menu.lst under the previous
step(This time you will add all lines as follows)
title Debian GNU/Linux, kernel 2.4.27-2-386 >Boot from HDD2
root (hd1,0)
kernel /boot/vmlinuz-2.4.27-2-386 root=/dev/md0 ro
initrd /boot/initrd.img-2.4.27-2-386
savedefault
boot
3. After saving these things run following commands
#grub
#root (hd0,0)
#setup (hd0)
#quit
4. Now Reboot the PC to see the new GRUB menu with Boot option from both
HDD, try to boot from both HDD individually and see that they will
updating the data on both disks .if boot from both HDD and updates all
then all will fine.
Sincerely
Engr.F.Azam
Hello,
Is there any technology to get connected with Optical Fiber to ADSL
Router / Modem ?
Is there any converter like RJ11 to RJ45 ?
If anyone else has such experience; plz help me 'out his...
Thanks
Engr.F.Azam
Postfix can be handled slightly differently from the other supported
mail systems, as one copy of Postfix can handle both the incoming mail
via SMTP,and the outgoing mail by doing all the delivery.
How to Set Up Postfix for MailScanner Use
1. Install Postfix version 2 and get it all working.
2. Stop Postfix using a command
postfix stop
3. Make sure you have the chroot jail set up in /var/spool/postfix.
You should be able to see "etc", "usr" and "lib" directories inside
/var/spool/postfix). If you haven't got the chroot jail setup
already, then look in the "examples" directory of the Postfix
documentation and you will find a script in there to set up it up for
your operating system. If you can't find that, then see the "Problems
or Errors" section further down this page.
4. At this point, things change from the setup for other MTAs as we
can make it run with just one copy of Postfix, and let Postfix do the
"split MTA" setup for us.
5. In the Postfix configuration file /etc/postfix/main.cf add this
line: header_checks = regexp:/etc/postfix/header_checks
6. In the file /etc/postfix/header_checks add this line:
/^Received:/ HOLD The effect of this is to tell Postfix to move all
messages to the HOLD queue.
How to Set up MailScanner for Use with Postfix
In your MailScanner.conf file (probably in /etc/MailScanner or
/opt/MailScanner/etc), there are 5 settings you need to change. They
are all really near the top of the file. The settings are
Run As User = postfix
Run As Group = postfix
Incoming Queue Dir = /var/spool/postfix/hold
Outgoing Queue Dir = /var/spool/postfix/incoming
MTA = postfix
You will need to ensure that the user "postfix" can write to
/var/spool/MailScanner/incoming and /var/spool/MailScanner/quarantine:
chown postfix.postfix /var/spool/MailScanner/incoming
chown postfix.postfix /var/spool/MailScanner/quarantine
If you upgrade your copy of MailScanner, unfortunately these
directories will be changed back to being owned by root, so you will
have to do those 2 commands again.
Starting It All Running If on a system installed using the RedHat RPM
distribution, just use the init.d script to do it all for you:
/etc/rc.d/init.d/MailScanner start (or on RedHat systems just service
MailScanner start) If not using the RedHat RPM distribution, then
1. Start Postfix
postfix start
2. Start MailScanner
check_MailScanner
Goodday with an Interesting (Dangerous as well) Findings !!!!!
Last week a little boy died in Brazil after eating
MENTOS and drinking Coca-Cola / PEPSI together.
One year before the same accident happened with another boy in Brazil. Please check the experiment that has been done by mixing Coka-Cola (or Coka-Cola Light) with
MENTOS.
So be careful with your self eating MENTOS (POLO's)
and drinking COCA-COLA or PEPSI together.
CHECK THIS OUT...
PLZ PASS THIS INFORMATION TO AS MANY PEOPLE AS POSSIBLE SPECIALLY TO THE CHILDREN'S. BECAUSE IN OUR COUNTRY MENTOS AND COCA-COLA
BOTH ARE VERY POPULAR TO THE CHILDREN'S.
I think u can take backup in short process keeping existing network, time to time using ntbackup tools, which comes with windows 2000 and NT related version. just use a file server and collect the data from there in data cartidge or CD or anything else.
From client computer or work-station click run then type ntbackup and follow the prcedure to upload in ur desire file server or remote general computer.
Did you solve your problem? If not then I think You can take backup in data cartridge manually everyday to solve your problem #1. If HDD & mirror HDD collapses then you can restore the data tape and get all data. But user should keep their data in Server and for mail they also keep their pst file for mail backup.
> Dear fellow, > > I have an existing Network to be Redesign, for that > I need some > assistance from you. > > The scenario is: > > 1. I have 20 PC with high configuration, growth > might be 100%
> 2. 20 PC in a LAN with Domain controller/Windows > 2000 Server > 3. I have an Exchange server running on my LAN, and > Outlook for mail > collection on user PC > 4. 3GB of new data produces everyday in the LAN (in > all PCs) > 5. For Backup purpose, I have alternate Mirror hard > drive in every PC > 6. I took backup on DVD-ROM on a regular basis > 7. 8 PCs are connected with Internet but others > don't > 8. My Server is not Online, I don't have plan to > further make it online > 9. Network Cabling is not structured and set with no > of small switch > > Now I need 2 thing to be done... > > 1. Though I am taking backup on every HDD with a > mirror HDD, but I > need that a remote machine within the LAN that will > take backup from > all the 20 PCs in daily basis (may it automatic or > manual). So somehow > if original HDD & mirror HDD collapses at the same > time. Then I can be > able to take backup from my remote machine. and this > will make it easy > to take backup on DVD-ROM. > > How can I do it ??? What are the standard here? > > 2. People working on 20 PC often delete msg from > INBOX & Sent-Items. > So I need that I can always take backup from my
> server & take backup > of all my incoming & outgoing mails on a regular > basis. So I can make > all the 20 people's incoming & outgoing mails > collected centraly. > > How can I do it ??? > > Can I do that on Exchange Server? What about the > Local MSN Service > within Exchange and local mail to be routed locally > in LAN? > > > Plz inform me any type of suggestion & any links or > resources u think > may help me in the above described problem. > > Kind regards > > Siraj > www.trantorsolution
s.com > > >
Rehana Akter Khan Helpdesk Officer - IT, Information Technology, CARE Bangladesh Email:
rehana@...
__________________________________________________________ Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
To do Disk Mirrorring With Software Raid In Debian follow the following
steps
1. Normal boot at start up with the boot disk
2. Manual Network configuration
3. Create the Partition as follows
We use 41 GB > 40 GB as /
1 GB as swap
In first HDD>> ***follow the partition sequence strictly
/ as RAID and Add boot able flag with this partition (most important)
Rest of it swap format it as swap
In Second HDD>> ***follow the partition sequence strictly
As same as the first one and mantain the partition sequence
4. Configure Software RAID > give it 'yes'
5. Then Create MD Device
6. select RAID 1
7. number of active device for the RAID1 array: give here the value 2
8. Number of spare devices for the RAID1 array: give here the value 0
9. Now select the active RAID devices to create array >
Select the two partition with * and then >continue>finish
10. Now it shows up a new RAID1 device with 40 GB space along with the
two HDD as IDE1 and IDE2
> Format it with ext3 file system and mount as / (The RAID1 device not
the others leave others untouchable)
11 . After completion > Finish partitioning and write changes to disk
12 . Write changes to disk > Yes
13 . Load GRUB on MBR > Yes
14. Now complete as usual
After the completion the installation login as root user and then follow
the procedures >
1 .run the command
#cat /proc/mdstat
it will show the syncing process of two devices.run this periodically to
see when the process finish. before finishing dont reboot or shutdown
the pc that will cause errors.
After finishing the process run these commands
#grub
#root (hd1,0)
#setup (hd1)
#quit
it will setup the GRUB boot image on second HDD
Now Reboot the PC.
After rebooting do some changes with files and packages then shutdown
the PC.
Now for testing Boot up the PC with unplugging the master HDD
If the PC reboot and run normally and all previously made changes will
remain up to date then all is ok
Now this is the time to Bring the first HDD up
1. Reboot the system with Plug in the Primary HDD.
2. Now erase all partitions on primary harddisk drive and do partition
again 40 GB as / & 1 GB as swap, make / Bootable
You can make this by using fdisk or cfdisk utilities.
3 .Now Run these commands to add this device as mirror
#mdadm /dev/md0 -f /dev/hda1
#mdadm /dev/md0 -a /dev/hda1
#cat /proc/mdstat to see the syncing process. Run it
periodically to see the progress before it will finish do nothing.
After completion of the syncing process do as follows
1. Edit /boot/grub/menu.lst (Only the Red line)
title Debian GNU/Linux, kernel 2.4.27-2-386 >Boot from HDD1
root (hd0,0)
kernel /boot/vmlinuz-2.4.27-2-386 root=/dev/md0 ro
initrd /boot/initrd.img-2.4.27-2-386
savedefault
boot
2. Add following lines at /boot/grub/menu.lst under the previous
step(This time you will add all lines as follows)
title Debian GNU/Linux, kernel 2.4.27-2-386 >Boot from HDD2
root (hd1,0)
kernel /boot/vmlinuz-2.4.27-2-386 root=/dev/md0 ro
initrd /boot/initrd.img-2.4.27-2-386
savedefault
boot
3. After saving these things run following commands
#grub
#root (hd0,0)
#setup (hd0)
#quit
4. Now Reboot the PC to see the new GRUB menu with Boot option from both
HDD, try to boot from both HDD individually and see that they will
updating the data on both disks .if boot from both HDD and updates all
then all will fine.
Dear Siraj,
Did you solve your problem?
If not then I think You can take backup in data
cartridge manually everyday to solve your problem #1.
If HDD & mirror HDD collapses then you can restore the
data tape and get all data. But user should keep their
data in Server and for mail they also keep their pst
file for mail backup.
Thanks
Rehana
--- Shahjahan Siraj <hullorbd@...> wrote:
> Dear fellow,
>
> I have an existing Network to be Redesign, for that
> I need some
> assistance from you.
>
> The scenario is:
>
> 1. I have 20 PC with high configuration, growth
> might be 100%
> 2. 20 PC in a LAN with Domain controller/Windows
> 2000 Server
> 3. I have an Exchange server running on my LAN, and
> Outlook for mail
> collection on user PC
> 4. 3GB of new data produces everyday in the LAN (in
> all PCs)
> 5. For Backup purpose, I have alternate Mirror hard
> drive in every PC
> 6. I took backup on DVD-ROM on a regular basis
> 7. 8 PCs are connected with Internet but others
> don't
> 8. My Server is not Online, I don't have plan to
> further make it online
> 9. Network Cabling is not structured and set with no
> of small switch
>
> Now I need 2 thing to be done...
>
> 1. Though I am taking backup on every HDD with a
> mirror HDD, but I
> need that a remote machine within the LAN that will
> take backup from
> all the 20 PCs in daily basis (may it automatic or
> manual). So somehow
> if original HDD & mirror HDD collapses at the same
> time. Then I can be
> able to take backup from my remote machine. and this
> will make it easy
> to take backup on DVD-ROM.
>
> How can I do it ??? What are the standard here?
>
> 2. People working on 20 PC often delete msg from
> INBOX & Sent-Items.
> So I need that I can always take backup from my
> server & take backup
> of all my incoming & outgoing mails on a regular
> basis. So I can make
> all the 20 people's incoming & outgoing mails
> collected centraly.
>
> How can I do it ???
>
> Can I do that on Exchange Server? What about the
> Local MSN Service
> within Exchange and local mail to be routed locally
> in LAN?
>
>
> Plz inform me any type of suggestion & any links or
> resources u think
> may help me in the above described problem.
>
> Kind regards
>
> Siraj
> www.trantorsolutions.com
>
>
>
Rehana Akter Khan
Helpdesk Officer - IT,
Information Technology,
CARE Bangladesh
Email: rehana@...
________________________________________________________________________________\
____
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
Dear fellow,
I have an existing Network to be Redesign, for that I need some
assistance from you.
The scenario is:
1. I have 20 PC with high configuration, growth might be 100%
2. 20 PC in a LAN with Domain controller/Windows 2000 Server
3. I have an Exchange server running on my LAN, and Outlook for mail
collection on user PC
4. 3GB of new data produces everyday in the LAN (in all PCs)
5. For Backup purpose, I have alternate Mirror hard drive in every PC
6. I took backup on DVD-ROM on a regular basis
7. 8 PCs are connected with Internet but others don't
8. My Server is not Online, I don't have plan to further make it online
9. Network Cabling is not structured and set with no of small switch
Now I need 2 thing to be done...
1. Though I am taking backup on every HDD with a mirror HDD, but I
need that a remote machine within the LAN that will take backup from
all the 20 PCs in daily basis (may it automatic or manual). So somehow
if original HDD & mirror HDD collapses at the same time. Then I can be
able to take backup from my remote machine. and this will make it easy
to take backup on DVD-ROM.
How can I do it ??? What are the standard here?
2. People working on 20 PC often delete msg from INBOX & Sent-Items.
So I need that I can always take backup from my server & take backup
of all my incoming & outgoing mails on a regular basis. So I can make
all the 20 people's incoming & outgoing mails collected centraly.
How can I do it ???
Can I do that on Exchange Server? What about the Local MSN Service
within Exchange and local mail to be routed locally in LAN?
Plz inform me any type of suggestion & any links or resources u think
may help me in the above described problem.
Kind regards
Siraj
www.trantorsolutions.com
Yes! You have already heard of it... Bangladesh's Dr. Yunus and his
Grameen Bank has awarded Nobel Peace Prize 2006.
Official Press Release:
http://nobelprize.org/nobel_prizes/peace/laureates/2006/index.html
It's a great achievement for our nation, great news for our
Bangladesh, for our poor people.
Oh! It's been a long since we heard such recognition, such good news
for the nation, I haven't heard such good news in my entire life.
Let's celebrate... once again congratulations to our great child Dr.
Mohammad Yunus and to the nation.
prode to be Bangladeshi
--
Shahjahan Siraj
Network Administrator
BASE Textiles Limited (www.basetextile.com)
Google: sh.siraj@...
Yahoo: sh.siraj@...
MSN: hullor@...
Skype: call2siraj / sh.siraj
I was collecting the tools that I need for this job but don't understand, why the IT Shop offer CAT6 instate of CAT5. He informed me that by CAT6 the data speed would be the best. guys what should I do now..... I am somehow confused ! CAT5 or CAT6 = ???
To find out if you have the NIC drivers*, use your Windows OS "help" tool to locate the Windows "device manager". Run the device manager, and search it for the NIC device. If you lack the driver, it will show a yellow question mark. You will need to install it either from floppy, a memory stick, or a CD. Obtain the name of the NIC from the device manager, and search for it (
google.com) as well as the terms "driver" and "download" on the Internet. You should be able to install it using the device manager, or sometimes the "hardware wizard" will prompt you when you start up.
*software ("firmware"), which lets the computer use the NIC ("network interface card")
Good luck! Andrew Stein
--- In
networkresource@yahoogroups.com, Anna Chowdhury <annachow_hg@...> wrote: > > Dear B.Dall > I am M A Hannan Chowdhury. > You need > 1- NIC for each computer, > 2- one 8-port (minimum) network switch, and > 3- some Cat5 cable with RJ-45 connecter at each end of cables for each computer (Straight-through Cable). > > Connect the computers with switch by those straight-through cables. > Power on
> Install the drivers of theose NIC (if necessary). > enjoy the network connectivity > > > thanking you > > M A Hannan Chowdhury > Dhaka, Bangladesh >
I was collecting the tools that I need for this job but don't understand, why the IT Shop offer CAT6 instate of CAT5. He informed me that by CAT6 the data speed would be the best. guys what should I do now..... I am somehow confused ! CAT5 or CAT6 = ???
I am in a hurry... please help me 'out this ...
B.Dall
a_stein2001 <a_stein2001@...> wrote:
To find out if you have the NIC drivers*, use your Windows OS "help" tool to locate the Windows "device manager". Run the device manager, and search it for the NIC device. If you lack the driver, it will show a yellow question mark. You will need to install it either from floppy, a memory stick, or a CD. Obtain the name of the NIC from the device manager, and search for it (google.com) as well as the terms "driver" and "download" on the Internet. You should be able to install it using the device manager, or sometimes the "hardware wizard" will prompt you when you start up.
*software ("firmware"), which lets the computer use the NIC ("network interface card")
Good luck! Andrew Stein
--- In networkresource@yahoogroups.com, Anna Chowdhury <annachow_hg@...> wrote: > > Dear
B.Dall > I am M A Hannan Chowdhury. > You need > 1- NIC for each computer, > 2- one 8-port (minimum) network switch, and > 3- some Cat5 cable with RJ-45 connecter at each end of cables for each computer (Straight-through Cable). > > Connect the computers with switch by those straight-through cables. > Power on > Install the drivers of theose NIC (if necessary). > enjoy the network connectivity > > > thanking you > > M A Hannan Chowdhury > Dhaka, Bangladesh > > > > > > > "Rams Brix. Dall" <brixdall@...> wrote: > Guys, > > > Few days back I came across to this group n feel happy to be the member of this group. I need some help.....! > Im nontechnical ! > I want to
connect 7 PCs in one network. Is it possible ? I want to solve this job by myself .... > > I shall be thankful if you can give me right way. > > Thanks with regards, > > B.Dall > > > --------------------------------- > All new Yahoo! Mail > --------------------------------- > Get news delivered. Enjoy RSS feeds right on your Mail page. > > > > > --------------------------------- > All-new Yahoo! Mail - Fire up a more powerful email and get things done faster. >
To find out if you have the NIC drivers*, use your Windows OS "help"
tool to locate the Windows "device manager". Run the device manager,
and search it for the NIC device. If you lack the driver, it will
show a yellow question mark. You will need to install it either from
floppy, a memory stick, or a CD. Obtain the name of the NIC from the
device manager, and search for it (google.com) as well as the terms
"driver" and "download" on the Internet. You should be able to
install it using the device manager, or sometimes the "hardware
wizard" will prompt you when you start up.
*software ("firmware"), which lets the computer use the NIC ("network
interface card")
Good luck!
Andrew Stein
--- In networkresource@yahoogroups.com, Anna Chowdhury
<annachow_hg@...> wrote:
>
> Dear B.Dall
> I am M A Hannan Chowdhury.
> You need
> 1- NIC for each computer,
> 2- one 8-port (minimum) network switch, and
> 3- some Cat5 cable with RJ-45 connecter at each end of cables for
each computer (Straight-through Cable).
>
> Connect the computers with switch by those straight-through cables.
> Power on
> Install the drivers of theose NIC (if necessary).
> enjoy the network connectivity
>
>
> thanking you
>
> M A Hannan Chowdhury
> Dhaka, Bangladesh
>
>
>
>
>
>
> "Rams Brix. Dall" <brixdall@...> wrote:
> Guys,
>
>
> Few days back I came across to this group n feel happy to be the
member of this group. I need some help.....!
> Im nontechnical !
> I want to connect 7 PCs in one network. Is it possible ? I want
to solve this job by myself ....
>
> I shall be thankful if you can give me right way.
>
> Thanks with regards,
>
> B.Dall
>
>
> ---------------------------------
> All new Yahoo! Mail
> ---------------------------------
> Get news delivered. Enjoy RSS feeds right on your Mail page.
>
>
>
>
> ---------------------------------
> All-new Yahoo! Mail - Fire up a more powerful email and get things
done faster.
>
Hello All,
As this is a new group so we need an icon.
I request you guys all to select an icon for this group.
Once you send the icons then you can poll the best one.
Thanks in advance.
Engr.F.Azam
I am sorry for being late in reply as I was damn busy in some projects.
If I ask for very few names in programming field then I have to take your name.
I do hope our bilateral relation will be developed day by day which can make
us to work together in near future.
Warmest Regards
Engr.F.Azam
Rupom <rupom_315@...> wrote:
Hello All, Nice to see a new group in the era. I hope this group will serve the community of network engineers very well.
Engr. F. Azam is dedicatedly trying to promote this group. I appreciate his hard works. As far I know he is a telented "Network Engineer" from whom I got many network related helps so far.
I wish all the bests of "networkResource Group". I hope very soon this group will be the storehouse of network related resources.
Please join this group and promote its activities.
Hello All, Nice to see a new group in the era. I hope this group will serve the community of network engineers very well.
Engr. F. Azam is dedicatedly trying to promote this group. I appreciate his hard works. As far I know he is a telented "Network Engineer" from whom I got many network related helps so far.
I wish all the bests of "networkResource Group". I hope very soon this group will be the storehouse of network related resources.
Please join this group and promote its activities.
Make sure you get a STABLE version, not a DEVEL version. The latest as of this writing was squid-2.4.STABLE4.tar.gz. Note that AFAIK, you must have squid-2.4 for linux kernel 2.4. The reason is that the mechanism by which the process determines the original destination address has changed from linux 2.2, and only squid-2.4 has this new code in it. (For those of you who are interested, previously the getsockname() call was hacked to provide the original destination address, but now the call is getsockopt() with a level of SOL_IP and an option of SO_ORIGINAL_DST).
Now, untar and gunzip the archive (use ``tar -xzf <filename>''). Run the autoconfiguration script and tell it to include netfilter code (``./configure --enable-linux-netfilter''), compile (``make'') and then install (``make
install'').
Now, we need to edit the default squid.conf file (installed to /usr/local/squid/etc/squid.conf, unless you changed the defaults). The squid.conf file is heavily commented. In fact, some of the best documentation available for squid is in the squid.conf file. After you get it all up and running, you should go back and reread the whole thing. But for now, let's just get the minimum required. Find the following directives, uncomment them, and change them to the appropriate values:
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
Next, look at the cache_effective_user and cache_effective_group directives. Unless the default nobody/nogroup has been created on your system (AFAIK, it is not created out of the box on many popular distributions, including RH7.1), you'll either
need to create those, or create another username/group for squid to run under. I strongly recommend that you create a username/group of squid/squid and run under that, but you could use any existing user/group if you want.
Finally, look at the http_access directive. The default is usually ``http_access deny all''. This will prevent anyone from accessing squid. For now, you can change this to ``http_access allow all'', but once it is working, you will probably want to read the directions on ACLs (Access Control Lists), and setup the cache such that only people on your local network (or whatever) can access the cache. This may seem silly, but you should put some kind of restrictions on access to your cache. People behind filtering firewalls (such as porn filters, or filters in nations where speech is not very free) often ``hijack'' onto wide open proxies and eat up your bandwidth.
Initialize the cache directories with ``squid -z'' (if this is a not a new installation of squid, you should skip this step).
Now, run squid using the RunCache script in the /usr/local/squid/bin/ directory. If it works, you should be able to set your web browser's proxy settings to the IP of the box and port 3128 (unless you changed the default port number) and access squid as a normal proxy
Setting up iptables (Netfilter)
To set up the rules, you will need to know two things, the interface that the to-be-proxied requests are coming in on (I'll use eth0 as an example) and the port squid is running on (I'll use the default of 3128 as an example).
You will want to add the above commands to your appropriate bootup script under /etc/rc.d/. Readers upgrading from 2.2 kernels should note that this is the only command needed. 2.2 kernels required two extra commands in order to prevent forwarding loops. The infastructure of netfilter is much nicer, and only this command is needed.
Greetings,
Recently, I completed setting up an FC2-enabled server as a home
gateway.
Its connection to the Internet is by way of Verizon's PPPoE DSL. The
external Westell modem connects to eth0; the home LAN connects to
eth1.
Everything seems to be communicating correctly. The concern I have
and
the request I make of the list is to review the iptables setting for
the
gateway.
Stock FC2 Iptables looks like this:
root leeloo ~> iptables-save
# Generated by iptables-save v1.2.9 on Sun Aug 29 17:06:53 2004
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [20310127:17271169167]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -s 127.127.1.0 -p udp -m udp --sport 123 --
dport 123 -j ACCEPT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i eth0 -j ACCEPT
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type 255 -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
25 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
80 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
443 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
21 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
22 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Sun Aug 29 17:06:53 2004
I've amended it; the lines I've added are preceded by >>> and ended
w/ <<<:
# Generated by iptables-save v1.2.9 on Sun Aug 29 17:08:40 2004
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [10797:1210790]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -s 127.127.1.0 -p udp -m udp --sport 123 --
dport 123 -j ACCEPT <<<
-A RH-Firewall-1-INPUT -i lo -j ACCEPT
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT<<<
-A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type 255 -j ACCEPT
-A RH-Firewall-1-INPUT -p esp -j ACCEPT
-A RH-Firewall-1-INPUT -p ah -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
80 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
443 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
22 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
21 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
25 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport
53 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Sun Aug 29 17:08:40 2004
Everything below was added to stock FC2 Iptables settings<<<
# Generated by iptables-save v1.2.9 on Sun Aug 29 17:08:40 2004
*nat
:PREROUTING ACCEPT [11662:691042]
:POSTROUTING ACCEPT [97:5735]
:OUTPUT ACCEPT [96:5659]
-A POSTROUTING -s 192.168.1.0/255.255.255.0 -o ppp0 -j MASQUERADE
COMMIT
# Completed on Sun Aug 29 17:08:40 2004
End addition <<<<
I run a standalone server on an ISP loaded w/ FC2 and running the
stock Iptables
configuration. There doesn't seem to be any security problems.
The biggest hurdle was getting machines on the home network making
requests through the gateway; initially, no web, ssh, or ftp
requests were possible using domain names. They could only
be made using explicit ip addresses.
Once I added
-A RH-Firewall-1-INPUT -i eth1 -j ACCEPT<<<
service requests to the internet using domain names began to work
correctly.
My concern is how exposed/vulnerable is the above gateway
configuration?
Much thanks for your help!
Max Pyziur
pyz brama com
-- end of forwarded message --
This is a rough outline on how to get pppoe to automatically start on your Linux system at bootup. This mostly applies to Redhat distros. Personally, I am running a highly modified RedHat 7.0, so I have no idea if this will work with older versions or other distros.
WARNING: I have no idea if the following will work for you, as I haven't rigorously tested it or anything. All I can tell you is that it works for me. I disclaim all responsiblity for any damage following these directions may incur on your system or your mental health.
I recommend this for Linux newbies and anyone who doesn't want to recompile their kernel or their pppd, or to screw around with their initialization files.
Check out Roaring Penguin PPPoE. You can use a 2.2 kernel without having to recompile it. rpppoe is also available as an RPM. The instructions are short and simple and you can be up and running in five minutes after downloading the packages without having to reboot. When I first tried it, though, I was maxing out at 384kbps (48K/sec) as compared to 608kbps (76K/sec) using the kernel module (see below). Of course, if you're willing to upgrade to the 2.4 kernel, this might not be an issue. Roaring Penguin has recently added support for the kernel module, so you might want to check it out before resorting to my quick and dirty kludges down below.
the hard way
You will have to upgrade to the 2.4 kernel. Find the appropriate mirror to download it from at http://www.kernel.org/mirrors. It's kind of a pain if you have to do it through a dial-up
connection as the tarball of 2.4.3 is 24MB. If you have RedHat 7.0, you might want to just patch the 2.4.0-test5 kernel that's in the preview directory, although that's still likely to be a huge download (about 11MB if you patch all the way to 2.4.3)
Check out the Kernel HOWTO if you need help with patching and/or compiling the kernel.
Now recompile the kernel. Make sure you enable PPPoE.
Put the following in /etc/ppp/options. Make sure you specify your username at your ISP.
plugin /usr/lib/pppd/plugins/pppoe.so name "your username at your ISP" mru 1490 mtu
1490 noipdefault hide-password defaultroute lock noaccomp nopcomp novj novjccomp nobsdcomp nodeflate noccp
I'm not sure this is the best solution, but it works for me.
Add the following to /etc/pap-secrets. Specify your username and your password at your ISP.
"your username at your ISP" * your password
Now you have a choice:
option 1
The following will probably work on any distro that uses System V initialization. Of course, I haven't tried this on anything except RedHat 7, so who knows.
Add the following to /etc/rc.d/rc.local (this is for RedHat—this file may very well be somewhere else if you're using another distro):
/usr/sbin/pppd eth0
Of course, replace eth0 with whichever Ethernet interface you're using to talk to your DSL modem and replace /usr/sbin/ with
the path to where pppd resides on your system.
I forgot where I stole these scripts from, so if you recognize them, please leave me a note. I think they were originally used for PPPoE with a patched 2.2 kernel and/or with a patched pppd. I modified them slightly to work with the 2.4 kernel module.
Stick them in /etc/sysconfig/network-scripts. You need to make ifup-pppoe and ifdown-pppoe executable.
Restart the network service with by running /etc/rc.d/init.d/network restart. You should be good to go, and it will start every time you boot up, too.
My
experience with my DSL provider
I currently subscribe to Earthlink/Mindspring mostly because I didn't want to go through the trouble of switching ISPs. Being out here in Illinois, my service is actually being provided by Covad. I don't know if that contributed to the problem of being charged simultaneously for dial-up and DSL for a couple of months, but hopefully that's resolved. Other than that, the service isn't too bad. I only get between 384kbps-608kbps (48K/sec-76Ksec), well below the vaunted maximum speed of 1.5Mbps (117K/sec), but I really don't want to switch ISPs and go through another three months of waiting only to find out that I really can't go any faster than that.
__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com