HDTenEightyP/NetNews huggingface dataset:
From: zorba@netcom.com (Harry Skelton)
Subject: Re: SUMMARY: BIND and port number(s)
Organization: Netcom - Online Communication Services  (408 241-9760 guest) 
Distribution: USA
Date: Mon, 16 Nov 1992 17:32:00 GMT

In article <1992Nov16.143152.6523@ericsson.se> lmdrsm@lmd.ericsson.se writes:
>Thus incoming/outgoing packets must be allowed for protocols tcp and udp
>for all port numbers >1023 .
>
>This solution has been tested and works fine.

Then I assume you don't have Xwindows or the like else you would limit the
range of the reply addresses. Beyond that, you can firewall things with a
server on the "outside" of the firewall to handle all gateway traffic and an
internal server to handle stuff inside the wall. The external gateway would
have to be an MX router of sorts and permit typical traffic such as Telnet,
and FTP. 

What I would like to see is a router/gateway that is smart enough to know
what the new outbound packets are issued at and allow them to pass, even if
you have a filter. (sorta like giving it a priority/security level to pass)

With an external box, you can tell your router to accept anything from it but
ignore anything else....persay....

My $.02

-- 
Harry Skelton
United Systems Security Enterprise - USS Enterprise
Newsgroups: comp.protocols.tcp-ip.domains,comp.sys.sun.admin
From: eric@homebase.vistachrome.com (Eric Brunson)
Subject: xfer error on secondary at zone transfer time.
Organization: Vista-Chrome Incorporated
Date: Fri, 20 Nov 1992 19:15:16 GMT

I have had a DNS primary running for a few months, and have recently
set up a secondary.  The secondary seems to have transfered the zones
correctly from the primary (since the backup files are all there in 
/var/named), but every 600 seconds I get a syslog message that states:

pod1server named[3737]: xfer returned 255

I turned debugging on on the secondary and I get this ( I included some of
the stuff I think is correct just in case it's not really correct ):

ns_maint()
printzoneinfo(0):
origin ='.', type = Cache, source = named.root
z_refresh = 0, retry = 0, expire = 0, minimum = 0, serial = 0
z_time = 0, now time : 722285566 sec, time left: -722285566 sec
printzoneinfo(1):
origin ='.', type = Secondary, source = (null)
z_refresh = 600, retry = 600, expire = 0, minimum = 0, serial = 0
z_time = 722285566, now time : 722285566 sec, time left: 0 sec
zoneref() 
started xfer child 22763
printzoneinfo(2):
origin ='vistachrome.COM', type = Secondary, source = vistachrome.zone
z_refresh = 10800, retry = 3600, expire = 432000, minimum = 86400, serial = 1915687785
z_time = 722287365, now time : 722285566 sec, time left: 1799 sec
printzoneinfo(3):
origin ='131.157.in-addr.arpa', type = Secondary, source = vistachrome.revzone
z_refresh = 10800, retry = 3600, expire = 432000, minimum = 86400, serial = 1915687785
z_time = 722287966, now time : 722285566 sec, time left: 2400 sec
printzoneinfo(4):
origin ='200.9.192.in-addr.arpa', type = Secondary, source = vistachrome.revzone192
z_refresh = 10800, retry = 3600, expire = 432000, minimum = 86400, serial = 1915687784
z_time = 722287966, now time : 722285566 sec, time left: 2400 sec
exit ns_maint() Next interrupt in 600 sec
xfer: option requires an argument -- f
Usage: xfer
	-z zone to transfer
	-f db file
	[-d debug level]
	[-l debug log file (default /usr/tmp/xfer.ddt)]
	[-t trace file]
	servers...
child 22763 returned status=255 termsig=0

I'm kind of at a loss here, since everything seems to be working fine,
can anyone point me in the right direction?

System info:

SunOS 4.1.1 rev b running the statndard Sun version of named.

Thanks.

-- 
| | Dear Auntie Em,            |     Eric Brunson
|o|    I hate Kansas.  I hate  |     eric@vistachrome.com
| |    the farm.  I hate you.  |     brunson@math.fsu.edu
| |    I'm leaving.            |
| |               Dorothy      |
|o| P.S.                       |
| |   Took the dog.            |
 ------------------------------
Newsgroups: comp.protocols.tcp-ip.domains
From: rh0083b@medtronic.COM (Roger-Hunen)
Subject: SUN secondary nameserver problems
Organization: Medtronic, Inc.
Date: Mon, 23 Nov 1992 08:59:58 GMT

Hi!

I have a SUN Sparc configured as a secondary nameserver for a zone. It is
also primary for some delegated zones. This worked fine for a while, but
since a few weeks it forgets about the zones it is secondary for. This
happens after the EXPIRE interval from the last reload (2 days). It will
still correctly resolve requests for hosts in the delegated zones. A kill
-HUP corrects the problem... for 2 days.

Does anybody know what might be wrong here?

Thanks in advance,
-Roger

Newsgroups: comp.protocols.tcp-ip.domains
From: vixie@pa.dec.com (Paul A Vixie)
Subject: Re: Domain Name Service Deficiencies
Organization: DEC Network Software Lab
Date: 19 Nov 92 11:56:23

>> 1) DNS should support other address classes besides InterNet (IN),
>> including (but not limited to) Apple Talk (AT?), DECnet (DN?), OSI or
>> DECnet phase V (OS?), etc.

I considered adding a DN class for decnet a while back, before I
realized that most DECnet end-nodes don't also speak IP -- so I
would be providing DECnet name service to a non-DECnet network,
which seemed like it wasn't terribly useful.  For this to work I
would have had to teach BIND how to speak to DECnet clients, and
those clients already have their own distributed name service so
it was pretty much a losing idea all around.  The same is true of
Appletalk and OSI.  The real solution to all of these other nets
is to go pound on the vendors and get them to layer their various
proprietary network applications on top of IP instead of inventing
their own lower-level each time.

>> 2) This is probably an implementation issue, but the resolv.conf and
>> named.boot files should be able to use names instead of IP addresses, and
>> use /etc/hosts to look up the addresses.

For implementation-related reasons, this is difficult.  So far, the
difficulty has always seemed to outweigh the advantages.  Considering
that allowing this mapping is only useful if you want to be able to
change an IP address without editing the static resolv.conf or named.boot
files, it ends up being a non-win since you still have to update the
static "hosts" file.
--
Paul Vixie, DEC Network Systems Lab	
Palo Alto, California, USA         	"Don't be a rebel, or a conformist;
<vixie@pa.dec.com> decwrl!vixie		they're the same thing, anyway.  Find
<paul@vix.com>     vixie!paul		your own path, and stay on it."  -me
From: krishnan@pms240.pms.ford.com (Hare Krishnan)
Newsgroups: comp.protocols.tcp-ip.domains
Subject: NFS locking issuesHello,
Date: 23 Nov 1992 16:04:32 GMT
Organization: Ford Motor Company
Distribution: world
NNTP-Posting-Host: pms240.pms.ford.com

When a NFS client locks a record on the NFS server, and if the client 
goes down who is responsible for releasing the locks? Some of the vendors 
say that the locks will be released only when the client system comes up
again. When I read the NFS specs, it kind of indicates that the server
statd should identify the shutdown clients and release the locks.

Some of the vendors do not agree with this?

Could any of the NFS gurus out there help me with this?

This is a serious problem considering the number of PC NFS clients.
Please send me an email as I don't read News regularly. I will summarize
the responses and post it.

Thanks in advance 

Krishnan Subramaniam

Keywords:
From: barmar@think.com (Barry Margolin)
Newsgroups: comp.protocols.tcp-ip
Subject: Re: ARP & Duplicate IP addresses
Date: 23 Nov 1992 05:40:48 GMT
Organization: Thinking Machines Corporation, Cambridge MA, USA
NNTP-Posting-Host: gandalf.think.com

In article <1992Nov20.202906.9279@jupiter.sun.csd.unb.ca> dedgar@mta.ca writes:
>- Is it a good idea to ARP your own IP address on startup? A returning
>  ARP would tell you that the address was a duplicate.
>  - if so is it a good idea to automatically shut your interface down 
>    if a duplicate IP address is detected on startup? Are there any
>    situations where false returns might be reported? 

There are two situations where you're likely to get a response.  One is
when two machines are configured with the same IP address.  The other is
when you're configured for the wrong subnet and there's a router that
implements proxy ARP.  Either way, there's a serious configuration problem
and the user should be informed.

> -  What about detecting one after startup? Should you advise the user
>    and gently start terminating connections? Could be real annoying.

I think you should advise the user, but not terminate connections.
However, if packets reach the other host, it may terminate your
connections.

>- If you receive an incoming ARP request and the sender IP address matches
>  yours should you reply to it? Doing so would advice the other node that
>  a duplicate exists (assuming it checks) but also could hopelessly confuse
>  a host that doesn't.  All of the implementations that I have tested do not
>  reply - but I have not tried all that many.

Either you or the other host is hopelessly confused already, so it's not
clear that replying would make things too much worse.

>- What are the consequenses of staying up with a duplicate IP address?

Some packets that are intended for you will be sent to the other host, and
vice versa.  Confusion will reign.
-- 
Barry Margolin
System Manager, Thinking Machines Corp.

barmar@think.com          {uunet,harvard}!think!barmar
Newsgroups: comp.protocols.tcp-ip
From: skl@wimsey.bc.ca (Samuel Lam)
Subject: Re: Name Server Lookup: No. to Name?
Reply-To: skl@wimsey.bc.ca (Samuel Lam)
Date: Mon, 16 Nov 1992 03:56:27 GMT

In article <1992Nov15.171533.60873@cc.usu.edu>, sl870@europa.ee.usu.edu
 (ullas gargi) wrote:
>How does one convert an internet no. (address) to an internet (canonical) name?
>NSLOOKUP doesnt seem to have an option for it, only for the other way round of
>direct name lookup, not the reverse lookup.

Let's say the IP address you want to map to a domain name is
[11.22.33.44], the following sequence would do it.

	nslookup
	set q=ptr
	44.33.22.11.in-addr.arpa.
	^D

Note that while the IP address is [11.22.33.44], its corresponding
name inside the reverse lookup domain .IN-ADDR.ARPA is 44.33.22.11
(reverse order). 

...Sam
-- 
<skl@wimsey.bc.ca> -- Connectivity Technology Inc.
From: gavron@spades.aces.com (Ehud Gavron 602-570-2000 x. 2546)
Newsgroups: comp.protocols.tcp-ip
Subject: X.25 X.29 software wanted for RS6000
Date: 16 Nov 92 12:03:00 GMT
Reply-To: gavron@ACES.COM
Organization: ACES Consulting Inc.
News-Software: VAX/VMS VNEWS 1.4-b1


	Hi, I've been entasked with locating software which runs
	on an RS6000 under AIX and which provides X.25 connectivity
	(serial 56Kbps links) and X.29 PAD (incoming and outgoing)
	as well as application hooks (like sockets).

	Can anyone here direct me to who makes or sells such
	software? 

	Ehud

--
Ehud Gavron        (EG76)     
gavron@vesta.sunquest.com
"If the OSI developers are sending mail to each other, they're
 probably doing it over TCP/IP :-)"    -- Gary Scott Malkin
Newsgroups: comp.protocols.tcp-ip
From: cproto@cs.curtin.edu.au (Computer Protocol)
Subject: RIP and OSPF implementations
Summary: Looking for implementations of RIP and OSPF
Keywords: RIP, OSPF
Organization: Curtin University of Technology
Date: Fri, 20 Nov 1992 09:00:57 GMT

I am looking for public or commercial implementations of the following
IP routing protocols: OSPF and RIP. 
Any contacts which you can suggest (either via news or mail
to me direct) would be appreciated.

Heather Payne
Datacraft Technologies
11 Brodie Hall Drive
BENTLEY WA 6102
AUSTRALIA

EMAIL: cproto@cs.curtin.edu.au
PHONE: + 61 9 470 2333
FAX:   + 61 9 362 2430

Newsgroups: comp.protocols.tcp-ip
From: Frank@mindlink.bc.ca (Frank I. Reiter)
Subject: SCO ODT, DNS queries within a C program
Organization: MIND LINK! - British Columbia, Canada
Date: Sat, 21 Nov 1992 02:05:08 GMT

I am currently writing some code to enable a C application to lookup MX
records by calling res_mkquery() and res_send() under SCO ODT 2.0.  What I am
seeing is that the first time we do it everything works as expected, but the
second time the answer that comes back is much shorter and in the course of
trying to parse it we dump core.

The arguments to res_mkquery() and res_send() are the same both times.

Has anyone else ever seen a problem like this?

Frank.
--
___________________________________________________________________
Frank I. Reiter                 Internet: Frank@mindlink.bc.ca
MIND LINK! Communications Corp. Surrey, British Columbia, Canada
Xref: sparky comp.protocols.tcp-ip:5225 comp.dcom.lans:1986
From: emv@msen.com (Edward Vielmetti)
Newsgroups: comp.protocols.tcp-ip,comp.dcom.lans
Subject: Re: Recommended Terminal Server
Date: 19 Nov 1992 06:30:57 GMT
Organization: Msen, Inc. -- Ann Arbor, Michigan
NNTP-Posting-Host: garnet.msen.com
X-Newsreader: TIN [version 1.1 PL6]

Bill Canning (usbill@ustores.missouri.edu) wrote:
: I'm looking for a fairly basic terminal server that won't cost a fortune.  I
: need to get between 24 and 32 ports, although this could be with more than one
: unit.  We will only be running 9.6K terminals on it, and we will be using it to
: attach to a Unix host via Telnet on an ethernet LAN.  Does anyone have any
: recommendations?

We have had good luck with a Livingston Portmaster unit.  They make
a 30 port box which plugs into the ethernet; it can be configured either
to tie ports back to a specific box (via telnet, rlogin, or their
portmaster-special daemon), or you can make it a little more general
and let people pick their host or even use SLIP or PPP to get out.

It sounds like the feature list is a little bit longer than you really
require, and that there might be a previous-generation stone dumb
terminal server that would do the job.  

Here's the mailing list announcement I sent out...

To: tcp-ip@nic.ddn.mil
Cc: ppp-users@MorningStar.Com
Subject: new mailing list for Livingston Portmaster terminal servers
Date: Wed, 09 Sep 92 15:54:49 EDT
From: Edward Vielmetti <emv@msen.com>

I've set up a new mailing list for users of the Livingston Portmaster
line of terminal servers and routers.  These boxes are in use by
several network service providers (including ourselves) to support
dialup SLIP and PPP access.  Given that the demands of public
access dialup are somewhat more stressful than ordinary async service,
I thought it would be a good idea to get people working with the
equipment off on their own list to exchange working ideas and to
coordinate development requests.

The Portmaster series includes a 4-port 56K router (the IR-4) and a 10
port async terminal server (the PM-11) that supports SLIP and PPP. 

To join the list send mail to
	portmaster-users-request@msen.com
To submit messages to the list send to
	portmaster-users@msen.com

Disclaimer: though we at Msen have some investment in the actual
equipment we have no financial stake in Livingston, and I see this as
a user self-support forum as much as it is a way to get information
from the equipment makers.  Caveat vendor.

---
Edward Vielmetti, vice president for research, MSEN Inc. emv@msen.com
      MSEN Inc., 628 Brooks, Ann Arbor MI  48103 +1 313 998 4562
 A distributed system is one in which the failure of a computer you didn't
 even know existed can render your own computer unusable. (Leslie Lamport)




------- End of Forwarded Message
From: yan_arrouye@gateway.qm.apple.com (Yan Arrouye)
Newsgroups: comp.protocols.tcp-ip
Subject: Public dom impl of RFC1006 for MacTCP?
Date: 16 Nov 92 14:01:33 GMT
Followup-To: comp.protocols.tcp-ip
Organization: Apple



Is there any public domain implementation of RFC 1006 on top of MacTCP ?
Otherwise do you know any easy to port public domain implementartion of RFC
1006?

Thanks
Yan
From: mrc@Ikkoku-Kan (Mark Crispin)
Newsgroups: comp.protocols.tcp-ip
Subject: WARNING on NetInfo
Date: 18 Nov 92 11:57:15 GMT
Article-I.D.: Ikkoku-K.MS-C.722087835.1103527590.mrc
Organization: University of Washington
Content-Type: TEXT/PLAIN; charset=US-ASCII
Mime-Version: 1.0

This warning is posted to anyone as an advisory to anyone else who may
be so foolish as to try to run a bootp daemon on the NeXT and think he
can install it by something as simple and straightforward as
	niload bootptab . < bootptab

Beware!!  NetInfo does not maintain the information from /etc/bootptab
separately.  Instead, it and the information from /etc/hosts are both
co-located in the `machines' NetInfo directory.

So you do the niload and you discover that the information isn't
right.  In fact, what appears as the bootp IP address is another IP
address for that machine; that client uses both SLIP and Ethernet and
so it's dual-homed.  Wierd, you think.  After all, you put the correct
IP address in bootptab.  Oh well.  No problem, you think, just do
	niload -d bootptab . < bootptab

Yup, that fixed the problem all right.  Now you got a worse problem.
As you discover after a lot of pulling of hair trying to figure out
why everything is falling down in flames, you just hosed the entire
hosts database including the definition of localhost.

I learned this the hard way.  I was not pleased.

This is a warning too, to you folks with SUNs and other non-NeXT
platforms who may be receiving advertising from NeXT about NetInfo for
your machine.  DON'T BUY IT.  NetInfo is the single worst piece of
system administration software, bar none, that I have ever had the
misfortune of dealing with.  If you thought Yellow Pages was a can of
worms, you haven't begun to imagine the myriad ways in which NetInfo
can screw you.

For those of you who haven't figured out what NetInfo is, it is a
distributed system configuration database that pretty much turns off
ALL of the standard Unix configuration files: aliases, bootptab,
bootparams, exports, fstab, group, hosts, networks, passwd, printcap,
protocols, rpc, services.  Among its many faults, it stores the data
in binary, since you are expected to use the NetInfoManager tool
(which has a user interface designed by the Marquis de Sade) to edit
it.  To some degree, you can edit the Unix configuration file and
`niload' it into NetInfo, but there are all sorts of ways it can screw
up and I just discovered a new one.

What's worse, you can't turn it off on a NeXT.  I can't imagine anyone
wanting to run it on a machine which doesn't force you into it the way
a NeXT does.

Verbum sat sapenti.
Newsgroups: comp.protocols.tcp-ip
From: cs000hf@selway.umt.edu (Hong Fan)
Subject: how to setsockopt to reuse local address
Organization: University of Montana
Date: Sat, 21 Nov 1992 18:27:04 GMT

Hi, everyone:


Does anyone know how to use 'setsockopt' to reuse the local address on the 
client site? I want to setup two socket connections as the following
associations.

 { tcp, server, 1500, client, 1000 }
 { tcp, server, 1501, client, 1000 }

One way I tried is setsockopt(sock,SO_SOCK, SO_REUSEADDR,(char *)&on,sizeof(on))
on the client site after the creation of sock. but it still gave me another
port number. Do I need to setsockopt on the server site?

If you know how to solve this problem, please mail me at cs000hf@selway.umt.edu
I appreciate your time and help.

sincerely

hong fan

Xref: sparky comp.protocols.tcp-ip:5269 comp.protocols.ibm:823
Newsgroups: comp.protocols.tcp-ip,comp.protocols.ibm
Subject: Re: SNA <-> IP Encapsulation
From: Peter M. Weiss <PMW1@psuvm.psu.edu>
Date: Sat, 21 Nov 1992 09:03:52 EST
Organization: Penn State University

In article <1992Nov20.053647.25809@cheops.qld.tne.oz.au>,
logier@cheops.qld.tne.oz.au (Rob Logie) says:

>mndot@msus1.msus.edu writes:

>>I am trying to provide mainframe connectivity to a number of remote sites.
>>Most of the sites have IBM 3174 (or compatible) remote controllers for SNA
>>communications.  This comm. takes place over multidrop 9600 bps lines.  We
>are
>>in the process of installing T1 circuits to all of those same locations.  The
>>T1's are primarily IP.  Does software exist for the 3174 to allow SNA
>>encapsulation in IP packets?  I have seen hints of this scenario on some of  e

Believe it or not, there is optional RPQs for LIC 3174 that allow
the 3174 to be a communications gateway to an IP network.  This also
involves converting/adding a TRN interface, and coax-attached PCs.
Don't know its available in IBM W.T. countries.

/Pete (pmw1@psuvm.psu.edu)
--
Peter M. Weiss                     | not affiliated with psuvm.psu.edu|psuvm
31 Shields Bldg -- Penn State Univ.| "Connectivity is more than a Connection"
University Park, PA USA 16802-1202 | E. Michael Staman, _The Circuit_, Apr 92
Newsgroups: comp.protocols.tcp-ip
From: ellingsen_jim@Tandem.COM (Jim Ellingsen)
Subject: TCP/IP over Token-Ring
Organization: Tandem Computers Inc., Cupertino CA
Date: Tue, 17 Nov 1992 18:35:45 GMT

Do most TCP/IP over token-ring implementations
support source routing?  

Jim Ellingsen        ellingsen_jim@tandem.com
Tandem Computers
Cupertino, CA
From: davis@unidata.ucar.edu (Glenn P. Davis)
Newsgroups: comp.protocols.tcp-ip
Subject: Network Time Protocol on on SunOS 5.0 ?
Keywords: ntp xntp
Date: 24 Nov 92 03:21:04 GMT
Distribution: na
Organization: University Corporation for Atmospheric Research (UCAR)

Yo. I have been trying to bring up xntp3 on SunOS 5.0 aka
Solaris 2.0. The main problem is the server, xntpd.
I have been moderately successful using /usr/ucb/cc and -DNOKMEM. 
At this point it runs but doesn't hear other guys.

Sigh. Has anyone out there gotten any form of Network Time Protocol
service running on SunOS 5.0?

-glenn
From: G.Knight@cs.ucl.ac.uk (Graham Knight)
Newsgroups: comp.protocols.tcp-ip
Subject: TCP/IP and ISDN / experiences with ISDN
Date: 19 Nov 92 12:58:34 GMT

Markus,

	We do this here with our own primary rate kit - basically we
just put IP datagrams between HDLC flags on ISDN B-Channels which are
set up on demand.

	I think lots of other people to this too. Try the list
isdn@teknology.agderforskning.no for more information. Since you are
in Germany you could talk to Clemens Schrimpe (csch@com.netcs) also.

						Graham
From: tomb@studsys.mscs.mu.edu (Tom Baas)
Newsgroups: comp.protocols.tcp-ip
Subject: can't do a dir when ftp login as anonymous(HELP)
Date: 15 Nov 1992 18:05:59 GMT
Organization: Marquette University - Department MSCS
Distribution: world
NNTP-Posting-Host: studsys.mscs.mu.edu


hi,
When I do an ftp to my system and login as anonymous, I get logged in fine,
but when I try to do a dir, I get:
425 Can't create data socket(0.0.0.0,20): no such file or directory
Can anyone tell me what I am doing wrong?
I am running under ISC Unix and whether I do an ftp to localhost or
if I telnet to another machine and then ftp back, I still get the same results.

Thanks to anyone in advance.  :) 

tom@tbaas.mil.wi.us     or   tbaas!tom       or   tom@tbaas
-- 
I can accept e-mail and Voice-mail at:
tbaas!tom   or   tom@tbaas.mil.wi.us    or ...spool!tbaas!tom  
or Voice at: 1-414-377-4038
Newsgroups: comp.protocols.tcp-ip
From: "Mun Kein CHANG" <p00196@psilink.com>
Subject: Public Domain DNS
Reply-To: p00196@psilink.com
Organization: Netband Technology (A Small Company)
Date: Fri, 20 Nov 1992 21:26:17 GMT
X-Mailer: PSILink-DOS (3.3)

I am looking for a public implementation of a DNS server on PC, 
preferably being able to work in conjunction with FTP's PC/TCP.
Anyone's got any ideas?

Thanks and regards,
Mun-Kein.
From: paola@hplb.hpl.hp.com (paola fulchignoni)
Date: Tue, 17 Nov 1992 15:47:27 GMT
Subject: IP security labels
Organization: Hewlett-Packard Laboratories
Newsgroups: comp.protocols.tcp-ip
Reply-To: paola@hplb.hpl.hp.com (paola fulchignoni)


Could anyone give me more details about RFC 1108 (IETF document in which
security labels handling in IP packets is explained) and/or how to find it? 

Thanks,
Paola