- Roundtable - muug.ca

Using non-prvileged ports with NFS
by Ryan Podjan 14 Oct '04

14 Oct '04

Hi all, This is a follow-up to the question I asked at the Round Table. I have an NFS server running OpenBSD 3.3 and I'm trying to force it to accept client connections on non-privileged ports (i.e. ports>1024). mountd(8) says using the `-n` option should do just that. I've tried this, however, I can still only connect over reserved ports. Any ideas? Thanks, Ryan

2 1

Re: [RndTbl] port forwarding
by gedetil＠cs.umanitoba.ca 14 Oct '04

14 Oct '04

According to Mel Seder: > Id like to use the following services and forward the applicable ports. I > used to know the password to my router softwear at 192.168.0.1 but I don't > anymore. I thought I did but it doesn't look I do. You may have to do a reset on the router box, then, to restore factory defaults, which means you'd have to reconfigure all the settings you had changed previously. > Part of my problem is that bittorrent seems to be running along fine and then > all of sudden the speed starts dropiing toward zero and eventually stops > working (even a Control-C) doesn't exit the app. However if I remove and > restore power to my router the download seems to magically start working again. > So I figured I'd see if there was newer router firmware and specifically open > up Bittorrent ports at the same time. > > Would you please let me know the ports for the following and any other items > you think might me useful? > > FTP > SSH You'd only need to configure these if you want to allow FTP and SSH connections _in_ to a system behind the router. SSH is easy: it's tcp port 22. FTP uses tcp port 21 for the control connection, and port 20 for the data connections, assuming you're using active-mode FTP. Since many FTP clients now use passive-mode FTP by default (to make it easier to work when going _out_ through a NAT-based router), you might have to enable an additional range of ports to allow for passive connections. Depending on which FTP server you set up, there may be a way to limit it to a particular range of ports for passive connections, which should (of course) match the settings on the router. > Bittorrent According to the URL I provided earlier... http://torrent.dulug.duke.edu/ "Open up ports 6881-6999/tcp so other clients can contact you for bits" I would assume this is the only port range you need to open up on the router to fix the bittorrent problem. > If you know of a well done sight that lists other common ports would you > please send me the URL. Well, I usually consult /etc/services first, but not all of the ports you might want to know about will be listed, and those that are there may not be very well understood, since there's no description or reference info. Here are URL's to some sites I've come across, which may be of use... TCP/IP Common Ports (from MyServer.org Dynamic DNS Services) http://www.myserver.org/help/ports.asp TCP/IP Ports for Internet Services http://www.chebucto.ns.ca/~rakerman/port-table.html Ports for Internet Services http://www.eviescreations.com/ports.htm Linnet Firewall TCP Ports http://www.linnetsol.co.uk/port-filter.asp Internet Services by Port Number http://www.graphcomp.com/info/specs/ports.html DoorStop Port List http://www.opendoor.com/doorstop/ports.html TCP/IP Services http://bfs-test.acns.fsu.edu/Network/portDescription.shtml Port Numbers for Port Forwarding http://kbserver.netgear.com/kb_web_files/n100495.asp No single list I've found is exhaustive, but by looking at a few, you're likely to find a decent description of whatever port numbers you're looking for. -- Gilbert E. Detillieux E-mail: <gedetil(a)cs.umanitoba.ca> Dept. of Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: (204)474-8161 Winnipeg, MB, CANADA R3T 2N2 Fax: (204)474-7609

1 0

port forwarding
by Mel Seder 14 Oct '04

14 Oct '04

Id like to use the following services and forward the applicable ports. I used to know the password to my router softwear at 192.168.0.1 but I don't anymore. I thought I did but it doesn't look I do. Part of my problem is that bittorrent seems to be running along fine and then all of sudden the speed starts dropiing toward zero and eventually stops working (even a Control-C) doesn't exit the app. However if I remove and restore power to my router the download seems to magically start working again. So I figured I'd see if there was newer router firmware and specifically open up Bittorrent ports at the same time. Would you please let me know the ports for the following and any other items you think might me useful? FTP SSH Bittorrent If you know of a well done sight that lists other common ports would you please send me the URL. ===== If I am not for myself, who will be for me? And if I am only for myself, what am I? And if not now, when? by: Hillel 100 BCE

1 0

New kenel modules without reboot?
by John Lange 14 Oct '04

14 Oct '04

I would like to compile a driver module from the standard linux kernel source (2.6.x in this case) and then load it into the kernel without rebooting. I know this must be possible but my understanding of the details of kernel module loading are limited. Is it just a matter of selecting the drivers as modules, compiling, doing "make modules_install", and then modprobe to load the module? Where I'm confused is with updating the module dependencies etc. Thanks. John

2 1

Re: [RndTbl] bittorrent
by gedetil＠cs.umanitoba.ca 14 Oct '04

14 Oct '04

According to Mel Seder: > I searched my PC (running FC2 everything) for the app and didn't find anything. > > If anyone knows of a well written tutorial site which will step me thru > getting, installing and downloading with bittorrent I'd appreciate it very > much. The instructions here are rather sketchy... http://torrent.linux.duke.edu/ ... but they should give you enough to get it installed, and they provide a link to the download directory for RPM's for various Red Hat versions, as well as for Fedora Core 1. (The fc1 rpm should work under fc2 as well.) -- Gilbert E. Detillieux E-mail: <gedetil(a)cs.umanitoba.ca> Dept. of Computer Science Web: http://www.cs.umanitoba.ca/~gedetil/ University of Manitoba Phone: (204)474-8161 Winnipeg, MB, CANADA R3T 2N2 Fax: (204)474-7609

3 3

Fwd: [RndTbl] bittorrent
by Jeff 13 Oct '04

13 Oct '04

On FC1 I use /usr/bin/btdownloadheadless.py sometorrent.torrent http://mst3k.booyaka.com/bittorrent_guide.shtml --- Mel Seder <melseder(a)yahoo.com> wrote: > From: Mel Seder <melseder(a)yahoo.com> > To: roundtable(a)muug.mb.ca > Subject: [RndTbl] bittorrent > Date: Tue, 12 Oct 2004 21:52:43 -0700 (PDT) > > Hi, > > I searched my PC (running FC2 everything) for the > app and didn't find anything. > > If anyone knows of a well written tutorial site > which will step me thru > getting, installing and downloading with bittorrent > I'd appreciate it very > much. > > > > > > ===== > If I am not for myself, who will be for me? > And if I am only for myself, what am I? > And if not now, when? > by: Hillel 100 BCE > _______________________________________________ > Roundtable mailing list > Roundtable(a)muug.mb.ca > http://www.muug.mb.ca/mailman/listinfo/roundtable > _______________________________ Do you Yahoo!? Declare Yourself - Register online to vote today! http://vote.yahoo.com

1 0

bittorrent
by Mel Seder 13 Oct '04

13 Oct '04

Hi, I searched my PC (running FC2 everything) for the app and didn't find anything. If anyone knows of a well written tutorial site which will step me thru getting, installing and downloading with bittorrent I'd appreciate it very much. ===== If I am not for myself, who will be for me? And if I am only for myself, what am I? And if not now, when? by: Hillel 100 BCE

2 1

Interface Monitoring
by Shawn Wallbridge 13 Oct '04

13 Oct '04

Just a follow up to the question I had during the meeting regarding monitoring traffic. Dropping the interface into promiscuous mode didn't help (btw, you need an IP assigned to an interface before OpenBSD will allow you to use tcpdump on it). Here is a recap of the problem.... I am setting up a machine to log usage of my colo clients. I already have one that just uses ipfm and it works great, but I want to do something a little more advanced. I saw an article by Randal L. Schwartz [0] that showed how he used labels in pf to track usage. It looks really nice and would allow me to do a bunch of things that my clients would love (like have nice graphs of usage based on port etc.). I set up the machine with OpenBSD 3.5 and it is sort of working, but not exactly what it should. The machine has two interfaces (int = tx0, ext = tx1), the external interface doesn't have an IP bound to it and is plugged into a hub between my switch and my provider (the same place as my ipfm machine which is working fine). The internal interface is plugged into an internal network. The pf.conf file has the following (for now, it will get much larger later): -bash-2.05b# more /etc/pf.conf pass in quick on tx1 proto tcp from any to 64.42.224.131 port = 80 label "synack-www" keep state pass in quick on tx1 proto tcp from any to 64.42.224.131 port = 25 label "synack-smtp" keep state pass in quick on tx1 proto tcp from any to 64.42.224.131 port = 143 label "synack-imap" keep state pass in quick on tx1 proto tcp from any to 64.42.224.131 port = 53 label "synack-dns" keep state pass in quick on tx1 proto udp from any to 64.42.224.131 port = 53 label "synack-dns-udp" keep state pass in quick on tx1 proto tcp from any to 64.42.224.131 port = 22 label "synack-ssh" keep state Using pfctl -vsl get the following: bash-2.05b# pfctl -vsl synack-www 369 0 0 synack-smtp 0 0 0 synack-imap 0 0 0 synack-dns 0 0 0 synack-dns-udp 0 0 0 synack-ssh 0 0 0 man pfctl [1] says that the first entry is the number of times the rule has been evaluated, the second is the number of packets, and the third is the bytes. I thing pf isn't recording the traffic because the traffic isn't actually going through the interface. Any ideas? thanks shawn [0] - http://www.stonehenge.com/merlyn/UnixReview/col51.html [1] - "Show per-rule statistics (label, evaluations, packets, bytes) of filter rules with labels, useful for accounting."

1 0

Thin Clients by Adam Thompson
by Mel Seder 13 Oct '04

13 Oct '04

I would like to thank Adam for a well done presentation Tuesday night. The idea of a thin diskless client thrills me. Installing an OS on two machines seems like such a waste of time. Serving apps to a thin client seems such a kewl thing to do on a LAN or maybe even WAN. Three cheers for Adam. ===== If I am not for myself, who will be for me? And if I am only for myself, what am I? And if not now, when? by: Hillel 100 BCE

1 0

boot stalls
by millward 06 Oct '04

06 Oct '04

I've had this system for about 4 years now with no problems, but lately it stalls during bootup. After it counts the memory and discovers the drives, it says "Updateing EDSP" and just sits there. I have to hit the reboot button, sometimes twice, before it boots normally. I suspect the motherboard battery might be getting weak, but that's just a guess. Or maybe it's a power supply problem? Has anyone got any suggestions as to what might be going wrong? AMD K6-2 500 MHz 3DNow Epox EP-MVP3G5 with VIA MVP3 AGPset 384 Megs EDO/SDRAM 100 MHz Radeon 7500LE 64 Megs DDR Samsung SV4084H hard drive

1 0