Gowator

Yeah, The problem is (or was) I don't have a dedicated firewall. I have a couple of PC's in one room. My main server and a test machine. In the other room I have my entertainment PC (a shuttle) and usually my laptop. All my other machines are currently mothballed for one reason or another. My main 'server' is also the firewall/router for the Lan->net so I need lan-fw access and also fw-net access. I know I should make a dedicted machine, I just need to sort out all the bits of machines I have spare. Has anyone tried running shorewall on a 'small' machine. I have a P100 spare (and actually some memory for it) and its a small mini-pc type case.

Steve, I'm not familiar with partimage but have you tried just using dd? Course you need somewhere to put the output file ...

Yeah, just cos M$ do it doesn't mean its right !!:wink: My feeling is that noobies will be put off by this though. Mandrake also has a responsibility to linux in general, they used the GPL'd code and every user who tries it, can't get it working and goes back to WinDoze is another loss to Linux in general. Being without even a telephone until a couple of weeks ago gave me a new perspective. No updates and even if I downloaded at work I couldn't use urpmi so I ended up in dep hell. It really made me realise just how much i depend on an internet connection to get it running properly. In the past I went round to a friends house with my laptop and urpmi'd from there but he moved to London a few months ago. I could write a book, "How urpmi changed my life" :-) (hint) ....

Couldn't agree more Ixthudan. Im no business genius but they just don't seem to have made up their mind. Also Glitz expresses my sentiments... I like my 'toyz' I like getting it home and ripping of the cellophane on the train home.... can't wwait to ... ah well, Its transparently obvious why 9.1 was rushed out.... but it wouldn't have hurt them to also supply all the stores with a supplimentary update CD. Also if you sell retail you have to have a product that fundamentally works out of the box, not one with 300MB of updates. Mandrake without a good internet connection or non at all is like a lame duck. As soons as you stickk in the updates, plf and texstar it comes to life but consider a noobie to linux buying it in the retail store. First off they would stuggle with thier Alcatel USB ADSL... How many people have you met who tried linux and gave up. These are people who (mainly and IMHO) bought the retail pack and didn't get it working. The ones who make it this far (mandrakeusers.org) are the more determined. I also take isse with misleading stuff on the box. First off it should (in its present state) say that a decent internet connection is highly recommended. Secondly, my boxed set says it plays all your DVD's. No it doesn't, not without plf or texstar. Again a noobie would be disapointed and someone with no internet (yes they exist) would be very dissapointed. agggghhh , its painful watching them. i wanna take the loaded gun out of their hands. All that work they did and they shoot themselves in the head !!!

anna, I forgot that one, i.e. Supermount. It was causing all osrts of problems so I turned it off a long time ago... :-) You should be seeing the device though... From memory the gphoto2 (last time I checked) doesn't do USB mass storage. I spent ages before RTFM I justed plugged in a USB Mass storage, hers the automatic entries in my /dev Try using USBVIEW or Kde Control centre to view your USB tree. Mine picks up the USB Mass storage device. (from KDE control Centre View USB} Archos Multimedia Jukebox Manufacturer: Archos Serial #: 000000000001 etc etc...

I'm not sure if this counts as a new topic. realplayer tells me it can't connect I specified the port and opened it in shorewall but it still refuses to connect and asks "are you sure your connected to the internet?" Any tips?

Its working but the configuration of shorewall is the most frequent cause of problems. Motts: You lost me with pot, unless you mean lucky? You had me reach for the dictionary ... :wink: So far as the dctionary says I'm either lucky or a butt. I'm working my way through it, slowly but not now cause Ive got a killer hangover. I had to open the ports for ftp and nfs and ssh, thats working now. Once its actually working ... its farily simple... but I guess I'll get myself in another mess...

Yeah, I had so many problems I regretted it at first. The installer ... well lets just say it hung at inopportune moments like writing the partition table. But in for a penny ... I'd nothing to lose. I persevered, expoert install, test install... etc etc. Evenutually I got a 3 Cd set off a magazine. It worked flawlessly.... Its so pretty now .... I guess it had an updated installer. In retrospect I feel cheated that the boxset didn't work when I paid for it and the free version did !! Being a long term mandrake user I persevered, I guess a lot of people wouldn't. Especially those coming from Windows. Most importantly, I didn't have internet access at home. Thats half the reason I bought the powerpack box set, the other half being becuase I wanted to support Mandrake. I didn't evcen want the paper documentation becuase its in French (since I bought it in Frence) and its easier for me to read the pdf documentation in English. Anyway, the point is after doing all the updates, working round lots of bugs in Wizards etc. I now really like it. In summary I couldn't recomend it to someone without broadband, its basically pretty much needed. Having got internet now its changed the distro. 300MB of updates later and its like a new distro.

If you don't have a mount point jsut create one. /mnt/camera for example... It may already have made a /mnt/removable. As root mkdir /mnt/removable chmod 777 /mnt/removable (if you want to be able to write to it too) Assuming you have no other scsi disks or emuklated scsi disks mount /dev/sda1 /mnt/camera -o(rw,user) It should piuck up the filesystem type automatically but you can always put in a (-t vfat) at the end.

Jeez, I hate to say I agree ... I wish I could point out a coherent business model, I wish I could say Mandrake is showing custumer comittment. Most of all why do they let an otherwise brillinat distro be let down by a few things. None of these are really serious (if you have DSL) but they take the polish off an otherwise great distro.... There are a few things which really suck, especially when they go wrong but Mandrake seem unable to acknowledge them. The new installer works great for most people but when it goes wrong it goes wrong spectacularly. The package manager seems just as fragile. So many other things nearly work, especially the Drak Wizards.... Just for example I installed mysql but the default config sets it to run as root. Its no big deal to change if you know what your doing but a noobie would be lost. Same thing with the installer. CLI urpmi works great.... Lots of the Drak Wizards seem to have either bugs (mainly fixed in updates) but are funamentally unclear. Take my recent shorewall install/config. It just isn't clear which boxes you check for the Internet Connection Wizard viz ADSL via an ethernet DSL Modem. If you don't choose PPPOE you never get the chance again, if you choose PPPOE and decide later on LAN then the only way I found was to deinstall the rp-pppoe package. On to the Internet sharing and firewall. Well, it doesn't work for me, quite. But when it doesn't work your left with what shorewall describe as a strange configuration which in their words is going to confuse you if you follow their documentation. It seems a shame becuase in all these cases they have done all the hard work its just let down by the documentation and the last 1%. They are SO CLOSE. Customer support is a passing joke. Even my fault CD's I informed them of, theyre answer was sign up for Mandrake expert. I think this is a common theme. They don't seem to address what in programming would be error handling. What if the installer fails ? It won't What if the wizard fails ? It won't If they spent a small amount of time addressig this they'd be so much closer. They just need to admit is might go wrong and provide documentation for what to do if it does. I still see 8.2 boxed sets in Paris, let alone China. I haven't seen the DVD box set on shelves anywhere. Neither have I seen any sort of indication the updates have made it into the latest box sets. Its not like were talking 1-2 updates, last check it was 300MB. If someone is buying a box-set in a store its reasonable to assumae they don't want 300MB of downloads to get it working. I strongly suspect Mandrake haven't put the updates into the latest box sets, simply becuase they didn't plan for it. Having said all that its a great distro, its just spoilt with a few minor details.... Like anon I live in hope....They need to get back to their roots and start listening to the users more. They have two revenue streams, Box set sales and Mandrake club. The problem is they don't actually provide anything for them. Ouside of philanthroopy theres no reason to buty a box set. Since you have 300MB of downloads anyway you mightest well just download the download edition. If you want support, well need I say more ... MandrakeUsers.org. Where's the business model in that?

Many thanks all who helped out, esp. Motts. As usual i spent a long time frustrated and learned loads. I guess my configuration is half standalone and half two-interface as defined by shorewall. That is I actually want tobe able to use my firewall/routing PC as a normal PC. So, now it works minimally (and with static IP) I can start to learn. Motts: alors ca marche! merci mille fois pour ton aide. comme d'habitude, maintenant que ca fonctionne, tout parait simple...

OK andrewsi, You got that far ... Im really snowed under fixing my firewall at the moment but theres a really good thread from where you are now to where you want to get ... Hey, wait its this thread, you need back up and follow the YinYeti. If you can open an application then you can open the whole Xserver. First you have to do some edis on the linux machine... Just go back to page 1 :-) Hopefully, I'll be back later if I don't firewall myself off the internet :-)

Illl check it later when the easy config is working Its always easier to work out how it works once its actually working :-) Im currently with 2nd card about to try the MCC for sharing ...

XDMCP is a way of broadcasting looking for an Xserver. It more use in a large environment. What you basically need to do is: xhost + <host> where host is the name of the win machine or its IP You need to do this as the owner of the desktop, ie the user you logged in as On the remote machine you can then 'log-in' with a Xterm. You should just get an xterm on your windows machine. You can start an app here but you must first tell it where to display export DISPLAY=<hostname> So if you type, xterm again you should get a second on. If you can get to this point we can be more specific about how to get a whole desktop. :D If this doesn't work the desktop won't From your linux machine make sure you can connect to yourself. i.e. you need a telnet/rlogin/ssh whichever your windopws Xserver can use. ssh is best :-) so ssh <localhost> You should be able to login ..... also try by IP and hostname ssh <hostname>

Worth remembering is that <myscript> will pass its inheritance to anything else it starts. So if the scruipt is owned by (say apache) and someone added a line the script would also pass root to the line ... It's like setting a suid bit. Or running a rsh ... Not actually important (in this case) , just a security comment...

We really do need a we are not worthy emoticon :D Thanks, Its good to have it spelt out. Its kinda phasing to see the MDK CC so vague and then when you check out the vendor site tell you differently and that the MCC defined one is 'confusing' if you follow the quick start. Now I definitively know I need 2 NIC's that will help. Its no problem I have at least 20 lying about. I guess I can disable the DHCP server later if I temporarily deactivate the present one running on a different machine. It was (the other PC) my squid/NFS/DHCP server in addition to doing my DVD/MP3/DivX --- c'est la vie --- I can redo it later.... Just out of interest: I'll do it with 2 NIC's but VMWARE uses virtual NIC's and runs NAT over them. I can't see in theory why this shouldn't work if you assign a virtual IP to the aliased NIC... Surely the packet forwarding will just follow the routing ???

Hey, I must have managed no typo's this time.... No corrections ... :D It amazes me (coming from a unix backgound) to see friends (coming from a Windows background) but very competent in Linux struggling with these concepts. Small things like backgrounding a stopped job ctrl +z then bg or backgrounding it to start <command> & Along with things like trying to use Samba when NFS is so much easier... or not understanding an xhost + or setting DISPLAY envvar's. (I have a specific friend in mind, If I don't get my IP talbes running tonite Ill get some help from him becuase he configured it all by hand himself back when it was IPchains.) Its just like a whole set of REALLY BASIC stuff went by and they jumped straight in with the complicated stuff. I like the type this: tutorial ... see why it doesn't do what you expected. or fun things like alias elvis to your hostname and ping elvis ... elvis is alive .... :D its all trivial stuff but you use the concepts over and over ....

Yeah, I looked at that. The first thing was the polite warning to MDK users ... According to Shorewall I need TWO interfaces, MDK don't specify very decisively. I know it should be possible (perhaps not advisable) with a single NIC and Im trying to work out exactly what the Mandrake wizard did. ugghh

I'm sure the GIMP guys spent a lot of time congrating themselves over a name which would spark such discussions.... Still, they deserve it :-)

As garu points out the difference between a login shell and a non-login shell. Do I detect a misunderstanding of the two? This is what I understand and I'm sure aru will correct me if wrong :D Simply: If you su <username> its not a login shell, it belongs to the previous shell su - <username> reexecutes the login scripts. Its common practice not to put certain things into non login shells but into login shells. The rational being you might want to inherit from a previous one. For instance su : will not change your path, i.e. not include /sbin if you want a root environment then you su - Also changing shells is not a login shell. .e. you are in a ksh shell and want to go to bash. typing bash will not run the login scripts.

Nobody got any experience, good or bad ????

1) Using MCC wizard do I need two NIC's . My DSL is Ethernet, i have as many hubs and switches as I can use ... Can I connect the DSL router directly to a hub and still route through a single NIC for a gateway i.e. Can i route from eth0 => ppp0 and perform the NAT there?? or do I need two NICs definitively. It really doesn't seem that obvious from MCC but shorewall say it must be a different hub/switch never mind the same card. I can see theoretically you can have two IP's for the same NIC and just route between them (vmware uses virtual ones for instance) 2) Do I have to use DHCP ???? I'm presuming I set the IP of the router PC as the default gw for the others. It needs to go through the ppp0 as far as I can see otherwise it won't get authentification from ppp.secrets??? So Im presuming the router PC has to have an open Internet connection ? The other PC's route through that connection ?? Someone answer please !!!

Please note this is the Solaris man page not linux but it's applicable just the same. (From man X ) Solaris 8 DISPLAY NAMES From the user's prospective, every X server has a display name of the form: hostname:displaynumber.screennumber This information is used by the application to determine how it should connect to the server and which screen it should use by default (on displays with multiple monitors): hostname The hostname specifies the name of the machine to which the display is physically connected. If the hostname is not given, the most efficient way of communicating to a server on the same machine will be used. displaynumber The phrase "display" is usually used to refer to collection of monitors that share a common keyboard and pointer (mouse, tablet, etc.). Most worksta- tions tend to only have one keyboard, and therefore, only one display. Larger, multi-user systems, how- ever, frequently have several displays so that more than one person can be doing graphics work at once. To avoid confusion, each display on a machine is assigned a display number (beginning at 0) when the X server for that display is started. The display number must always be given in a display name. screennumber Some displays share a single keyboard and pointer among two or more monitors. Since each monitor has its own set of windows, each screen is assigned a screen number (beginning at 0) when the X server for that display is started. If the screen number is X Version 11 Last change: Release 6 2 Device and Network Interfaces X11(7) not given, screen 0 will be used. On POSIX systems, the default display name is stored in your DISPLAY environment variable. This variable is set automat- ically by the xterm terminal emulator. However, when you log into another machine on a network, you will need to set DISPLAY by hand to point to your display. For example, % setenv DISPLAY myws:0 $ DISPLAY=myws:0; export DISPLAY Finally, most X programs accept a command line option of -display displayname to temporarily override the contents of DISPLAY. This is most commonly used to pop windows on another person's screen or as part of a "remote shell" com- mand to start an xterm pointing back to your display. For example, % xeyes -display joesws:0 -geometry 1000x1000+0+0 % rsh big xterm -display myws:0 -ls </dev/null & X servers listen for connections on a variety of different communications channels (network byte streams, shared memory, etc.). Since there can be more than one way of con- tacting a given server, The hostname part of the display name is used to determine the type of channel (also called a transport layer) to be used. X servers generally support the following types of connections:

Amit, by default netconf only runs as root. You can either sudo it or run it as root. If you run as root you must first give root access to your desktop since it is owned by your user. The way I do it is opern a console as user xhost + [enter] su - ****** netconf & To get to the Wizards start Mandrake Control Centre (MCC) you will be prompted for root's password as it sudo's Then click on networking ... The wizard 'should be there' If not go to packaging - add programs and search on DRAK or WIZ This should install the utilites from your CD's Good luck

Just a guess .. Does it actually read ttsy0 or does it mount it as a file system? If the latter your problems are likely not permissions on /dev but either the directory its mounted on OR the mount command itself. When youre connected as root and able to browse is it mounted ??? Hope this points you in the right direction ....