to add the microsoft TTF fonts to fedora core release 3 do as follows

 

STEP one:

 

get the fonts from your windows box, typically located in c:\Windows\Fonts and copy them to your linux machine.

 

STEP two:

 

login as root and do as follows

 

 

 

First let me tell u about the network.... i have a firewall whit 3 network interfacs on for the internet and one for the intranet (workstations) and one for the server. i want to access the server from internett and the intranet. eth0 is internet, eth1 is intranet and eth2 is to the server.

 

This is the iptables im using now... its from my old server that did work fine whit only 2 network interfaces...

 

# Generated by iptables-save v1.2.8 on Wed Dec 8 02:57:30 2004

*filter

:INPUT DROP [4:696]

:FORWARD DROP [0:0]

:OUTPUT ACCEPT [2117:378269]

:ACCEPTnLOG - [0:0]

:BLACKLIST - [0:0]

:BLOCK_OUT - [0:0]

:CLIENT - [0:0]

:CLOSED - [0:0]

:DHCP - [0:0]

:DMZ - [0:0]

:DNS - [0:0]

:DROPICMP - [0:0]

:DROPnLOG - [0:0]

:HIGHPORT - [0:0]

:MON_OUT - [0:0]

:MULTICAST - [0:0]

:OPENPORT - [0:0]

:PUBLIC - [0:0]

:RESERVED - [0:0]

:SCAN - [0:0]

:SERVICEDROP - [0:0]

:STATEFUL - [0:0]

:loopback - [0:0]

-A INPUT -i lo -j loopback

-A INPUT -s 192.168.160.0/255.255.255.0 -d 192.168.160.0/255.255.255.0 -i eth1 -j ACCEPT

-A INPUT -s 10.0.0.0/255.0.0.0 -i eth0 -j RESERVED

-A INPUT -s 172.16.0.0/255.240.0.0 -i eth0 -j RESERVED

-A INPUT -s 192.168.0.0/255.255.0.0 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.1 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.2 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.4 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.5 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.6 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.9 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.13 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.15 -i eth0 -j RESERVED

-A INPUT -s 224.0.0.1 -i eth0 -j MULTICAST

-A INPUT -s 224.0.0.2 -i eth0 -j MULTICAST

-A INPUT -s 224.0.0.4 -i eth0 -j MULTICAST

-A INPUT -s 224.0.0.5 -i eth0 -j MULTICAST

-A INPUT -s 224.0.0.6 -i eth0 -j MULTICAST

-A INPUT -s 224.0.0.9 -i eth0 -j MULTICAST

A INPUT -p icmp -m limit --limit 1/sec -j ACCEPT

-A INPUT -p udp -m udp --sport 32769:65535 --dport 33434:33523 -j ACCEPT

-A INPUT -s 192.168.160.249 -p udp -m udp --sport 53 -j DNS

-A INPUT -s 193.216.147.2 -p udp -m udp --sport 53 -j DNS

-A INPUT -s 193.216.147.3 -p udp -m udp --sport 53 -j DNS

-A INPUT -d 217.22.16.44 -p tcp -m tcp --dport 53 -j PUBLIC

-A INPUT -d 217.22.16.44 -p udp -m udp --dport 53 -j PUBLIC

-A INPUT -d 217.22.16.44 -p tcp -m tcp --dport 22 -j PUBLIC

-A INPUT -d 217.22.16.44 -p udp -m udp --dport 22 -j PUBLIC

-A INPUT -d 217.22.16.44 -p tcp -m tcp --dport 113 -j PUBLIC

-A INPUT -d 217.22.16.44 -p udp -m udp --dport 113 -j PUBLIC

-A INPUT -p tcp -m tcp --dport 5010 -j OPENPORT

-A INPUT -p udp -m udp --dport 5010 -j OPENPORT

-A INPUT -p tcp -m tcp --dport 5656 -j OPENPORT

-A INPUT -p udp -m udp --dport 5656 -j OPENPORT

-A INPUT -j STATEFUL

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 40000:50000 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 40000:50000 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 80 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 80 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 10000 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 10000 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 20 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 21 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 80 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 80 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 443 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 443 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 25 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 110 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 110 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 143 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 143 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p tcp -m tcp --dport 993 -j ACCEPT

-A FORWARD -d 10.0.0.2 -p udp -m udp --dport 993 -j ACCEPT

-A FORWARD -o eth0 -p tcp -m tcp --dport 137 -j BLOCK_OUT

-A FORWARD -o eth0 -p udp -m udp --dport 137 -j BLOCK_OUT

-A FORWARD -o eth0 -p tcp -m tcp --dport 138 -j BLOCK_OUT

-A FORWARD -o eth0 -p udp -m udp --dport 138 -j BLOCK_OUT

-A FORWARD -o eth0 -p tcp -m tcp --dport 139 -j BLOCK_OUT

-A FORWARD -o eth0 -p udp -m udp --dport 139 -j BLOCK_OUT

-A FORWARD -j STATEFUL

-A OUTPUT -o lo -j loopback

-A OUTPUT -p icmp -m state --state INVALID -j DROP

-A OUTPUT -o eth0 -p tcp -m tcp --dport 137 -j BLOCK_OUT

-A OUTPUT -o eth0 -p udp -m udp --dport 137 -j BLOCK_OUT

-A OUTPUT -o eth0 -p tcp -m tcp --dport 138 -j BLOCK_OUT

-A OUTPUT -o eth0 -p udp -m udp --dport 138 -j BLOCK_OUT

-A OUTPUT -o eth0 -p tcp -m tcp --dport 139 -j BLOCK_OUT

-A OUTPUT -o eth0 -p udp -m udp --dport 139 -j BLOCK_OUT

-A ACCEPTnLOG -j LOG --log-prefix "gShield (accept) "

-A ACCEPTnLOG -j ACCEPT

-A BLACKLIST -j LOG --log-prefix "gShield (blacklisted drop) "

-A BLACKLIST -j DROP

-A BLOCK_OUT -j DROP

-A CLIENT -j ACCEPT

-A CLOSED -j LOG --log-prefix "gShield (closed port drop) "

-A CLOSED -p tcp -j REJECT --reject-with tcp-reset

-A CLOSED -p udp -j REJECT --reject-with icmp-port-unreachable

-A CLOSED -j DROP

-A DHCP -j LOG --log-prefix "gShield (DHCP accept) "

-A DHCP -j ACCEPT

-A DMZ -j LOG --log-prefix "gShield (DMZ drop) "

-A DMZ -j DROP

-A DNS -j ACCEPT

-A DROPICMP -j DROP

-A DROPnLOG -p udp -m udp --dport 137:139 -j DROP

-A DROPnLOG -p tcp -m tcp --sport 80 --dport 1024:65535 ! --tcp-flags SYN,RST,ACK SYN -j ACCEPT

-A DROPnLOG -d 255.255.255.255 -p udp -m udp --sport 67 --dport 68 -j DROP

-A DROPnLOG -m limit --limit 20/min -j LOG --log-prefix "gShield (default drop) "

-A DROPnLOG -p 47 -m limit --limit 20/min -j LOG --log-prefix "gShield (default drop / GRE) "

-A DROPnLOG -p tcp -j REJECT --reject-with tcp-reset

-A DROPnLOG -p udp -j REJECT --reject-with icmp-port-unreachable

-A DROPnLOG -j DROP

-A HIGHPORT -j ACCEPT

-A MON_OUT -j ACCEPT

-A MULTICAST -j DROP

-A OPENPORT -j ACCEPT

-A PUBLIC -j ACCEPT

-A RESERVED -p tcp -j REJECT --reject-with tcp-reset

-A RESERVED -p udp -j REJECT --reject-with icmp-port-unreachable

-A RESERVED -j DROP

-A SCAN -j LOG --log-prefix "gShield (possible port scan) "

-A SCAN -j DROP

-A SERVICEDROP -j LOG --log-prefix "gShield (service drop) "

-A SERVICEDROP -p tcp -j REJECT --reject-with tcp-reset

-A SERVICEDROP -p udp -j REJECT --reject-with icmp-port-unreachable

-A SERVICEDROP -j DROP

-A STATEFUL -m state --state RELATED,ESTABLISHED -j ACCEPT

-A STATEFUL -i ! eth0 -m state --state NEW -j ACCEPT

-A STATEFUL -j DROPnLOG

-A loopback -i lo -j ACCEPT

COMMIT

# Completed on Wed Dec 8 02:57:30 2004

# Generated by iptables-save v1.2.8 on Wed Dec 8 02:57:30 2004

*nat

:PREROUTING ACCEPT [11600:1633075]

:POSTROUTING ACCEPT [86:6234]

:OUTPUT ACCEPT [86:6234]

-A PREROUTING -i eth0 -p tcp -m tcp --dport 10000 -j DNAT --to-destination 10.0.0.2:10000

-A PREROUTING -i eth0 -p udp -m udp --dport 10000 -j DNAT --to-destination 10.0.0.2:10000

-A PREROUTING -d 217.22.16.44 -i eth0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.0.0.2:80

-A PREROUTING -d 217.22.16.44 -i eth0 -p udp -m udp --dport 80 -j DNAT --to-destination 10.0.0.2:80

-A PREROUTING -d 217.22.16.44 -i eth0 -p tcp -m tcp --dport 40000:50000 -j DNAT --to-destination 10.0.0.2

-A PREROUTING -d 217.22.16.44 -i eth0 -p udp -m udp --dport 40000:50000 -j DNAT --to-destination 10.0.0.2

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 21 -j DNAT --to-destination 10.0.0.2:21

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 20 -j DNAT --to-destination 10.0.0.2:20

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.0.0.2:80

-A PREROUTING -d 217.22.16.44 -p udp -m udp --dport 80 -j DNAT --to-destination 10.0.0.2:80

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 443 -j DNAT --to-destination 10.0.0.2:443

-A PREROUTING -d 217.22.16.44 -p udp -m udp --dport 443 -j DNAT --to-destination 10.0.0.2:443

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 25 -j DNAT --to-destination 10.0.0.2:25

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 110 -j DNAT --to-destination 10.0.0.2:110

-A PREROUTING -d 217.22.16.44 -p udp -m udp --dport 110 -j DNAT --to-destination 10.0.0.2:110

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 143 -j DNAT --to-destination 10.0.0.2:143

-A PREROUTING -d 217.22.16.44 -p udp -m udp --dport 143 -j DNAT --to-destination 10.0.0.2:143

-A PREROUTING -d 217.22.16.44 -p tcp -m tcp --dport 993 -j DNAT --to-destination 10.0.0.2:993

-A PREROUTING -d 217.22.16.44 -p udp -m udp --dport 993 -j DNAT --to-destination 10.0.0.2:993

-A POSTROUTING -s 10.0.0.0/255.255.255.0 -o eth0 -j SNAT --to-source 217.22.16.44

COMMIT

# Completed on Wed Dec 8 02:57:30 2004

# Generated by iptables-save v1.2.8 on Wed Dec 8 02:57:30 2004

*mangle

:PREROUTING ACCEPT [21539:2950819]

:INPUT ACCEPT [13827:2062253]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [2381:419840]

:POSTROUTING ACCEPT [2381:419840]

-A PREROUTING -p tcp -m tcp --sport 20 -j TOS --set-tos 0x08

-A PREROUTING -p tcp -m tcp --sport 22 -j TOS --set-tos 0x10

-A PREROUTING -p tcp -m tcp --sport 23 -j TOS --set-tos 0x10

-A PREROUTING -p tcp -m tcp --sport 80 -j TOS --set-tos 0x08

-A OUTPUT -o eth0 -p tcp -m tcp --dport 20 -j TOS --set-tos 0x08

-A OUTPUT -o eth0 -p tcp -m tcp --dport 22 -j TOS --set-tos 0x08

-A OUTPUT -o eth0 -p tcp -m tcp --dport 80 -j TOS --set-tos 0x08

-A OUTPUT -o eth0 -p tcp -m tcp --dport 119 -j TOS --set-tos 0x08

-A OUTPUT -o eth0 -p tcp -m tcp --dport 21 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 22 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 23 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 25 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 53 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p udp -m udp --dport 53 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 119 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 110 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 143 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 6660:6669 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 7000 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 7500 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 7501 -j TOS --set-tos 0x10

-A OUTPUT -o eth0 -p tcp -m tcp --dport 7777 -j TOS --set-tos 0x10

COMMIT

# Completed on Wed Dec 8 02:57:30 2004

[img]<___base_url___>/uploads/emoticons/default_rolleyes.gif[/img][img]<___base_url___>/uploads/emoticons/default_rolleyes.gif[/img][img]<___base_url___>/uploads/emoticons/default_rolleyes.gif[/img]

Just thought I would say hello ;-)

 

A few of you will have spoke to me already in IRC, yes thats me asking all the questions lol

 

Well thats what you are all here for isnt it :)

 

Rik

Hey all. First, lemme say it's good to be back. =]

Needink some help with the intar-web. I'm able to connect to my local network in Fedora Core Test 3 using my ORiNOCO Silver card, but I can connect to my router, and other things on other local networks. Somehow, I can connect in XP, but not in FC3...any ideas? Oh, and as soon as I find my other card (Netgear MA401) I'll test it. My ORiNOCO seems to be on the fritz... Thanks!

Some handy SSH tips:

 

Tunnel your remote machine's POP port to your local machine so you can pop your mail without passing your username/password in the clear:

 

ssh -f -L9000:remote.example.com:110 remote.example.com 'sleep 30 &'

 

This will make a tunnel from machine remote.example.com's port 110 to your local machine's port 9000. Point your mail client or fetchmail to localhost port 9000 and pop away. The connection will close and go away when your pop session ends so this setup is a one time thing. The "sleep 30 &" will keep the connection open for 30 seconds to give you a chance to start your pop session.

 

To setup a tunnel for nntp (usenet) that will stay up until you kill it:

 

ssh -N -f -L9100:news.example.com:119 remote.example.com

 

This will create a tunnel from your machine to remote.example.com and from there, open a non-encrypted connection to your news server (news.example.com). The -N and -f options start a non-terminal connection and puts the process in the background. I use this connection because my isp only allows connections to the news server from the isp's network. In the above example, remote.example.com would be a machine on my isp's network that is allowed to connect to the news server. The example above only allows access from the local machine's loopback address. (ie., localhost). If you want other machines to also be able to use the tunnel, you can add the "-g" option to the command and they will be able to direct a connection to port 9000 on your local machine to access the news server.

 

 

 

Assume you have a machine inside a firewall with no access from the external network and you want to be able to ssh into this machine from your home machine to finish the job you are working on. The following example shows one way to accomplish this.

 

ssh -N -f -R9000:remote.example.com:22 remote.example.com

 

on the remote machine, start a ssh connection like this:

 

ssh -p 9000 localhost

 

and you will initiate a session back to the internal machine.

 

 

Some good SSH links:

 

AUUG Winter 2002

SSH tips, tricks and protocol tutorial

[/url]http://www.mindrot.org/~djm/auug2002/ssh-tutorial.pdf

 

Secure Shell - Tips & Tricks

* X11 Forwarding

* Seamless Authentication

* TCP Port Forwarding

http://oregonstate.edu/~creliar/ssh/ssh-tips.shtml

 

SSH Tips

* X11 Forwarding

* Authentication

http://socrates.yi.org/index.php?page=SshTips

 

SSH Tips and Tricks

* Security

* tcp forwarding

* X-Windows

* Config File Problems

* SSH over SMB

http://heimhardt.com/htdocs/ssh-tips-and-tricks.html

 

The OpenSSH FAQ

[url=http://www.openssh.com/faq.html]http://www.openssh.com/faq.html

 

Have fun.

 

P38

Found in the gentoo forums:

 

To have a fallback IP address in case dhcp fails during your startup, set the following:

 

Edit /etc/conf.d/net.NIC and set up the following lines:

 

ifconfig_ethX="dhcp"

 

dhcpcd_ethX="-t 20" # tells your dhcp-client to time out after 20 seconds

 

ifconfig_fallback_eth0="<static IP> netmask <netmask> broadcast <broadcast>"

 

 

This can come in handy if you want the machine to fail-over to a set ip address.

 

P38

Hiya, im a newbie on here. Im just putting linux on my computer this mourning. Can't wait to get started with it.

 

Merry Christmas everyone! :)

 

Emz

Just thought I would say hi.. and yes, I'm a noob when it comes to linux. messed around with Mandrake, gentoo, debian and OpenBSD a little. But still need to learn a whole lot.

I'm trying to set up inbox monitor to my panel in gnome. I set up the right POP server and everything, but it wont update status. When i mouse-over the app it says could not connecto to the internet. this is the only application i have tried that can't connect for any reason. Everything else works fine with its connection and I can't find any settings in the program to specify what connection to use, or anything like that that might be interrupting its action.

Any Ideas?

TIA

Brent

i am trying to install knoppix using the 3.6 CD onto a freshly formatted hdb.

 

i can complete qtparted and the installer. after everything is completed, i reboot.. nomatter which bootloader i use, and even the floppy disk will do the same, i get the same error. it looks like this:

 

initrd_tools: 0.1.73

mount: fs devfs not supported by kernel

unmount: devfs: not mounted

mount: fs devfs not supported by kernel

unmount: devfs: not mounted

pivot_root: no such file or directory

/sbin/init/: 426: cannot open dev/console: no such file

kernel panic: attempting to kill init!

 

i dont quite know what this means, i assume that it cant boot due to the fact that it cant see parts of the disk or the disk itself. also, when i boot up with the CD again, i can not mount the partition with knoppix installed on to it, even using the sudo command. perhapse i have to change all of the permissions on the disk first, but i wouldnt know how to preform a chmod command on a disk that i cant see. please help.

 

cheers