Ubuntu-zw Digest, Vol 27, Issue 1
Daniel Zinyengere
daniel at reliant.co.zw
Mon Aug 3 08:03:07 BST 2009
Morning all
Will be attending tomorrow's meeting!
Regards
-----Original Message-----
From: ubuntu-zw-bounces at lists.ubuntu.com
[mailto:ubuntu-zw-bounces at lists.ubuntu.com] On Behalf Of
ubuntu-zw-request at lists.ubuntu.com
Sent: Saturday, August 01, 2009 8:44 AM
To: ubuntu-zw at lists.ubuntu.com
Subject: Ubuntu-zw Digest, Vol 27, Issue 1
Send Ubuntu-zw mailing list submissions to
ubuntu-zw at lists.ubuntu.com
To subscribe or unsubscribe via the World Wide Web, visit
https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
or, via email, send a message with subject or body 'help' to
ubuntu-zw-request at lists.ubuntu.com
You can reach the person managing the list at
ubuntu-zw-owner at lists.ubuntu.com
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Ubuntu-zw digest..."
Today's Topics:
1. Ubuntu 8.04.3 LTS released (Neil Coetzer)
2. Ubuntu 9.10 launch party in Bulawayo? (Tafadzwa Kashora)
3. Re: Ubuntu 9.10 launch party in Bulawayo? (Neil Coetzer)
4. Re: Ubuntu 9.10 launch party in Bulawayo? (Ganyani Khosa Webmail)
5. Re: Ubuntu 9.10 launch party in Bulawayo? (Neil Coetzer)
6. When is Ubuntu 9.10 Karmic in out Local Repositories?
(Samuel Mukoti)
7. Next Meeting (Neil Coetzer)
8. Re: Next Meeting (Kalpesh Thaker)
9. Poor Man's Router - Howto (Alan Paardenkooper)
----------------------------------------------------------------------
Message: 1
Date: Fri, 17 Jul 2009 09:30:17 +0200
From: Neil Coetzer <neil at ubuntu.org.zw>
Subject: Ubuntu 8.04.3 LTS released
To: ubuntu-zw at lists.ubuntu.com
Message-ID:
<14acf6c80907170030y47e6ff01kf03705b30a1143ef at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
---------- Forwarded message ----------
From: Steve Langasek
Date: Thu, 16 Jul 2009 10:56:10 -0700
Subject: Ubuntu 8.04.3 LTS released
The Ubuntu team is proud to announce the release of Ubuntu 8.04.3 LTS, the
third maintenance update to Ubuntu's 8.04 LTS release. This release
includes updated server, desktop, and alternate installation CDs for the
i386 and amd64 architectures.
In all, 80 updates have been integrated, and updated installation
media has been provided so that fewer updates will need to be downloaded
after installation. These include security updates and corrections for
other high-impact bugs, with a focus on maintaining stability and
compatibility with Ubuntu 8.04 LTS.
To Get Ubuntu 8.04.3 LTS
------------------------
To download Ubuntu 8.04.3 LTS, or obtain CDs, visit:
http://www.ubuntu.com/getubuntu/download
We recommend that all users read the release notes, which document
caveats and workarounds for known issues. They are available at:
http://www.ubuntu.com/getubuntu/releasenotes/804
About Ubuntu 8.04.3 LTS
-----------------------
This is the third maintenance release of Ubuntu 8.04 LTS, which
continues to be supported with maintenance updates and security fixes
until April 2011 on desktops and April 2013 on servers.
80 post-release updates have been integrated, and a number of bugs in the
installation system have been corrected. These include security updates and
corrections for other high-impact bugs, with a focus on maintaining
stability and compatibility with Ubuntu 8.04 LTS.
See http://www.ubuntu.com/usn for a full list of Ubuntu security updates.
As of 2009-07-15, all updates affecting packages on the CD have been
applied.
A summary of notable updates follows. See
https://bugs.launchpad.net/ubuntu for specific information about a
particular bug number. A complete list of post-release updates can
also be found at:
https://wiki.ubuntu.com/HardyReleaseNotes/ChangeSummary/8.04.3
Installer Updates
-----------------
* Fix persistent mode on the live CD (#219192, #274076)
* Fix GPT/MBR syncing on modern Intel Macs (#222126)
* Fix handling of UUIDs on existing swap partitions during install
(#336992)
Desktop Updates
---------------
* Set hdparm power management based on AC state on resume/thaw (#59695)
* Fix LSB compliance in foomatic-rip (#376732)
* Work around crash when navigating around ssh locations (#236953)
* Don't inaccurately report all suspends >= 6 hours as failed (#242713)
* Disable the ability to create a new user whose name is owned by a
previously defined group, which, if allowed to happen, would overwrite
the old group. If this happened to 'admin', for example, it would render
any system administration by sudoers impossible (#236305)
* Fix nautilus shortcuts to smb shares (#216104)
* Recover lost DAV over HTTPS mounting functionality (#222532)
* Fix connection issue with new ICQ protocol (#340151)
Server updates
--------------
* Fix for mod_proxy with SSL using all the CPU (#306293)
* Fix kernel oops when shutting down NFS server (#253004)
* Fix open-iscsi installation and startup (#227848, #236640)
* Adjust openldap apparmor profile to allow cnconfig (#243525)
* Avoid getting stuck in infinite loops in redhat-cluster-suite (#290399)
General Updates
---------------
* /etc/lsb-release: include "LTS" in the DISTRIB_DESCRIPTION field
(#225735)
* Fix libgomp to work with shared libraries (#235070)
* Fix kernel oops when invalid character occurs in filename on udf
filesystem (#321606)
* Fix kernel oops in the NFS client (#341783, #212485)
* Upgrade the lsb package to support LSB 4.0 (#370066)
Helping Shape Ubuntu
--------------------
If you would like to help shape Ubuntu, take a look at the list of ways
you can participate at
http://www.ubuntu.com/community/participate/
If you have a question, or if you think you may have found a bug but
aren't sure, try asking on the #ubuntu channel on irc.ubuntu.com, on
the Ubuntu Users mailing list, or on the Ubuntu forums:
http://lists.ubuntu.com/mailman/listinfo/ubuntu-users
http://www.ubuntuforums.org/
About Ubuntu
------------
Ubuntu is a full-featured Linux distribution for desktops, laptops, and
servers, with a fast and easy install and regular releases. A
tightly-integrated selection of excellent applications is included, and
an incredible variety of add-on software is just a few clicks away.
Professional technical support is available from Canonical Limited and
hundreds of other companies around the world. For more information about
support, visit http://www.ubuntu.com/support
More Information
----------------
You can find out more about Ubuntu on our website:
http://www.ubuntu.com/
To sign up for future Ubuntu announcements, please subscribe to Ubuntu's
very low volume announcement list at:
http://lists.ubuntu.com/mailman/listinfo/ubuntu-announce
--
ubuntu-announce mailing list
ubuntu-announce at lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-announce
--
Regards,
Neil Coetzer
Team Contact
Ubuntu Zimbabwe LoCo Team
------------------------------
Message: 2
Date: Fri, 17 Jul 2009 12:29:03 +0200
From: Tafadzwa Kashora <tafadzwakashora7 at gmail.com>
Subject: Ubuntu 9.10 launch party in Bulawayo?
To: ubuntu-zw at lists.ubuntu.com
Cc: khosag at hotmail.com
Message-ID:
<ee48f27d0907170329r15e4bd7bhfab70b9c960d92c1 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi all
My name is Tafadzwa Kashora, I am the Public Relations Officer for the
Solusi Computer Society. I am also a member of the Ubuntu community.
As a society we would like to host the Ubuntu 9.10 launch party in
Bulawayo or Solusi Campus depending on the day. Since we are a Seventh
Day adventist institution, Sabbath begins on Friday at 5pm and ends
Saturday at 5pm. During this period no form of work can be done as
this is a period of spiritual reflection and rest.
Any assistance that you can give us to achieve our goal as a Society
will be greatly appreciated.
Yours Faithfully
Tafadzwa Kashora
Public Relations Officer
Computer Society
Solusi University
Bulawayo
------------------------------
Message: 3
Date: Fri, 17 Jul 2009 12:53:23 +0200
From: Neil Coetzer <neil at ubuntu.org.zw>
Subject: Re: Ubuntu 9.10 launch party in Bulawayo?
To: Tafadzwa Kashora <tafadzwakashora7 at gmail.com>
Cc: ubuntu-zw at lists.ubuntu.com, khosag at hotmail.com
Message-ID:
<14acf6c80907170353w1893688al5b2515b4d024fd9d at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi Tafadzwa,
It's great to see the possibility of something happening in Bulawayo!
Since a lot of us are up in Harare we can't really comment on setting
a date or anything, as that will have to be done with the other
Bulawayo guys. I do hope you get the support from the Ubuntu users in
your area and that you get enough feedback to set a date that suits
everybody.
You definitely have the support of the LoCo Team - please keep us in
the loop and let us know the progress.
On 7/17/09, Tafadzwa Kashora <tafadzwakashora7 at gmail.com> wrote:
> Hi all
>
> My name is Tafadzwa Kashora, I am the Public Relations Officer for the
> Solusi Computer Society. I am also a member of the Ubuntu community.
>
> As a society we would like to host the Ubuntu 9.10 launch party in
> Bulawayo or Solusi Campus depending on the day. Since we are a Seventh
> Day adventist institution, Sabbath begins on Friday at 5pm and ends
> Saturday at 5pm. During this period no form of work can be done as
> this is a period of spiritual reflection and rest.
>
> Any assistance that you can give us to achieve our goal as a Society
> will be greatly appreciated.
>
> Yours Faithfully
>
> Tafadzwa Kashora
> Public Relations Officer
> Computer Society
> Solusi University
> Bulawayo
>
> --
> Ubuntu-zw mailing list
> Ubuntu-zw at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
>
--
Regards,
Neil Coetzer
Team Contact
Ubuntu Zimbabwe LoCo Team
-------------------------------------------
http://www.ubuntu.org.zw
http://zimbabwe.ubuntuforums.org
http://www.ubuntu-zw.org
------------------------------
Message: 4
Date: Fri, 17 Jul 2009 14:07:57 +0200
From: "Ganyani Khosa Webmail" <khosag at hotmail.com>
Subject: Re: Ubuntu 9.10 launch party in Bulawayo?
To: "Neil Coetzer" <neil at ubuntu.org.zw>, "Tafadzwa Kashora"
<tafadzwakashora7 at gmail.com>
Cc: ubuntu-zw at lists.ubuntu.com
Message-ID: <SNT113-DS19BB9E2D2C8718248A914DD61E0 at phx.gbl>
Content-Type: text/plain; format=flowed; charset="iso-8859-1";
reply-type=original
Neil,
Maybe we can bus ourselves to Bulawayo and have fun down there. Checkout the
thoughts of team members. I could contribute a few litres of diesel. Hahaha.
Ganyani
--------------------------------------------------
From: "Neil Coetzer" <neil at ubuntu.org.zw>
Sent: Friday, July 17, 2009 12:53 PM
To: "Tafadzwa Kashora" <tafadzwakashora7 at gmail.com>
Cc: <ubuntu-zw at lists.ubuntu.com>; <khosag at hotmail.com>
Subject: Re: Ubuntu 9.10 launch party in Bulawayo?
> Hi Tafadzwa,
>
> It's great to see the possibility of something happening in Bulawayo!
> Since a lot of us are up in Harare we can't really comment on setting
> a date or anything, as that will have to be done with the other
> Bulawayo guys. I do hope you get the support from the Ubuntu users in
> your area and that you get enough feedback to set a date that suits
> everybody.
>
> You definitely have the support of the LoCo Team - please keep us in
> the loop and let us know the progress.
>
> On 7/17/09, Tafadzwa Kashora <tafadzwakashora7 at gmail.com> wrote:
>> Hi all
>>
>> My name is Tafadzwa Kashora, I am the Public Relations Officer for the
>> Solusi Computer Society. I am also a member of the Ubuntu community.
>>
>> As a society we would like to host the Ubuntu 9.10 launch party in
>> Bulawayo or Solusi Campus depending on the day. Since we are a Seventh
>> Day adventist institution, Sabbath begins on Friday at 5pm and ends
>> Saturday at 5pm. During this period no form of work can be done as
>> this is a period of spiritual reflection and rest.
>>
>> Any assistance that you can give us to achieve our goal as a Society
>> will be greatly appreciated.
>>
>> Yours Faithfully
>>
>> Tafadzwa Kashora
>> Public Relations Officer
>> Computer Society
>> Solusi University
>> Bulawayo
>>
>> --
>> Ubuntu-zw mailing list
>> Ubuntu-zw at lists.ubuntu.com
>> Modify settings or unsubscribe at:
>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
>>
>
>
> --
> Regards,
>
> Neil Coetzer
> Team Contact
> Ubuntu Zimbabwe LoCo Team
> -------------------------------------------
> http://www.ubuntu.org.zw
> http://zimbabwe.ubuntuforums.org
> http://www.ubuntu-zw.org
>
------------------------------
Message: 5
Date: Fri, 17 Jul 2009 15:43:18 +0200
From: Neil Coetzer <neil at ubuntu.org.zw>
Subject: Re: Ubuntu 9.10 launch party in Bulawayo?
To: Ganyani Khosa Webmail <khosag at hotmail.com>
Cc: ubuntu-zw at lists.ubuntu.com, Tafadzwa Kashora
<tafadzwakashora7 at gmail.com>
Message-ID:
<14acf6c80907170643y541d1bd0i8f85841d9fc9bee4 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi Ganyani,
That's always an option.... we can discuss it and see how the team
feels. The only problem I foresee is that there might be quite a few
people in Harare who would attend one locally, but wouldn't be able to
travel to Bulawayo. Considering the turn-out for the last one, I don't
think we could bus that many people down, which means some people lose
out on attendance. If we could get two well-attended events in
different parts of the country, that would be even better :)
Alternatively, maybe we hold two events and half of the LoCo Members
go down to Bulawayo while the rest run the Harare one? I guess it will
depend on how many interested parties there are in Bulawayo and what
the attendance will be there.
On 7/17/09, Ganyani Khosa Webmail <khosag at hotmail.com> wrote:
> Neil,
> Maybe we can bus ourselves to Bulawayo and have fun down there. Checkout
the
> thoughts of team members. I could contribute a few litres of diesel.
Hahaha.
>
> Ganyani
>
> --------------------------------------------------
> From: "Neil Coetzer" <neil at ubuntu.org.zw>
> Sent: Friday, July 17, 2009 12:53 PM
> To: "Tafadzwa Kashora" <tafadzwakashora7 at gmail.com>
> Cc: <ubuntu-zw at lists.ubuntu.com>; <khosag at hotmail.com>
> Subject: Re: Ubuntu 9.10 launch party in Bulawayo?
>
>> Hi Tafadzwa,
>>
>> It's great to see the possibility of something happening in Bulawayo!
>> Since a lot of us are up in Harare we can't really comment on setting
>> a date or anything, as that will have to be done with the other
>> Bulawayo guys. I do hope you get the support from the Ubuntu users in
>> your area and that you get enough feedback to set a date that suits
>> everybody.
>>
>> You definitely have the support of the LoCo Team - please keep us in
>> the loop and let us know the progress.
>>
>> On 7/17/09, Tafadzwa Kashora <tafadzwakashora7 at gmail.com> wrote:
>>> Hi all
>>>
>>> My name is Tafadzwa Kashora, I am the Public Relations Officer for the
>>> Solusi Computer Society. I am also a member of the Ubuntu community.
>>>
>>> As a society we would like to host the Ubuntu 9.10 launch party in
>>> Bulawayo or Solusi Campus depending on the day. Since we are a Seventh
>>> Day adventist institution, Sabbath begins on Friday at 5pm and ends
>>> Saturday at 5pm. During this period no form of work can be done as
>>> this is a period of spiritual reflection and rest.
>>>
>>> Any assistance that you can give us to achieve our goal as a Society
>>> will be greatly appreciated.
>>>
>>> Yours Faithfully
>>>
>>> Tafadzwa Kashora
>>> Public Relations Officer
>>> Computer Society
>>> Solusi University
>>> Bulawayo
>>>
>>> --
>>> Ubuntu-zw mailing list
>>> Ubuntu-zw at lists.ubuntu.com
>>> Modify settings or unsubscribe at:
>>> https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
>>>
>>
>>
>> --
>> Regards,
>>
>> Neil Coetzer
>> Team Contact
>> Ubuntu Zimbabwe LoCo Team
>> -------------------------------------------
>> http://www.ubuntu.org.zw
>> http://zimbabwe.ubuntuforums.org
>> http://www.ubuntu-zw.org
>>
>
--
Regards,
Neil Coetzer
Team Contact
Ubuntu Zimbabwe LoCo Team
-------------------------------------------
http://www.ubuntu.org.zw
http://zimbabwe.ubuntuforums.org
http://www.ubuntu-zw.org
------------------------------
Message: 6
Date: Thu, 23 Jul 2009 11:23:03 +0200
From: Samuel Mukoti <samuelmukoti at gmail.com>
Subject: When is Ubuntu 9.10 Karmic in out Local Repositories?
To: ubuntu-zw at lists.ubuntu.com
Message-ID:
<9e6fbacf0907230223w3a099a14vb4e1383e1cea399b at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I've been playing with the pre-release version of 9.10 and its looking real
good. Do you know when 9.10 is going to turn our in our local repo hosted
by Yo! Africa?
Thank you again Yo! for all you do!
rgds,
Sam
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.ubuntu.com/archives/ubuntu-zw/attachments/20090723/daaec65e/at
tachment-0001.htm
------------------------------
Message: 7
Date: Thu, 30 Jul 2009 09:41:52 +0200
From: Neil Coetzer <neil at ubuntu.org.zw>
Subject: Next Meeting
To: ubuntu-zw <ubuntu-zw at lists.ubuntu.com>
Message-ID:
<14acf6c80907300041k4c359a87ta7acd77b99c4d324 at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Hi all,
Please note that meeting days have been changed to Tuesday, as of the
next meeting which is scheduled to take place on Tuesday 4th August at
336 Herbert Chitepo.
As always, thanks to Harvest International for hosting us. Please feel
free to bring your own drinks.
--
Regards,
Neil Coetzer
Team Contact
Ubuntu Zimbabwe LoCo Team
-------------------------------------------
http://www.ubuntu.org.zw
http://zimbabwe.ubuntuforums.org
http://www.ubuntu-zw.org
------------------------------
Message: 8
Date: Thu, 30 Jul 2009 10:34:51 +0200
From: Kalpesh Thaker <luminary06 at gmail.com>
Subject: Re: Next Meeting
To: Neil Coetzer <neil at ubuntu.org.zw>
Cc: ubuntu-zw <ubuntu-zw at lists.ubuntu.com>
Message-ID:
<5b344b960907300134i698d8acdi5f40e14ffefb70c1 at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Awesome, thanks for the reminder.
cheers
kt.
On Thu, Jul 30, 2009 at 9:41 AM, Neil Coetzer <neil at ubuntu.org.zw> wrote:
> Hi all,
>
> Please note that meeting days have been changed to Tuesday, as of the
> next meeting which is scheduled to take place on Tuesday 4th August at
> 336 Herbert Chitepo.
>
> As always, thanks to Harvest International for hosting us. Please feel
> free to bring your own drinks.
>
> --
> Regards,
>
> Neil Coetzer
> Team Contact
> Ubuntu Zimbabwe LoCo Team
> -------------------------------------------
> http://www.ubuntu.org.zw
> http://zimbabwe.ubuntuforums.org
> http://www.ubuntu-zw.org
>
> --
> Ubuntu-zw mailing list
> Ubuntu-zw at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
https://lists.ubuntu.com/archives/ubuntu-zw/attachments/20090730/feba9188/at
tachment-0001.htm
------------------------------
Message: 9
Date: Sat, 1 Aug 2009 10:43:31 +0400
From: Alan Paardenkooper <abetherabe at gmail.com>
Subject: Poor Man's Router - Howto
To: ubuntu-zw at lists.ubuntu.com
Message-ID:
<ec144f00907312343g120736e3h8864e671dc463ff9 at mail.gmail.com>
Content-Type: text/plain; charset=windows-1252
Hi all,
This is my first post to this mailing list. I've noticed that there are a
lot of servers out there running standard squid proxy as the only means
for clients to share an internet connection. Not because of any reason
in particular other than the person setting up the server simply doesn't
know how to set up a simple NAT/router. If proxy has been chosen to help
conserve bandwidth or to control browsing, then fair enough. But if it's
just because guys don't know how to set up network address translation
or only know of squid as the only means to connect more than one
computer to the internet at one time on a linux machine here's a simple
howto... A sort of internet connection sharing for debian flavours of
linux.
Hope this helps.
HOWTO
The Poor Man's Router with NAT & IP Forwarding in Ubuntu 9.04 Part 1
(Routing between the internet and 1 subnet)
You will need the following:
* A small, but reliable PC which can be set to turn itself
on after a power failure. (Trust me this saves you a lot
of headaches)
* A CDROM/DVDROM drive
* 2 x Ethernet Network Interface Cards installed before
you install the OS.
* An ubuntu 9.04 server cd rom
* A broadband internet connection (ADSL/UHF/VSAT) and the
connection details: e.g. Your static ip address or PPPOE
account settings (provided by the ISP)
* A UTP/wireless switch of some sort
* A lot of patience
Start by performing a default installation of the OS onto the PC by
booting up from the CDROM drive. When asked for your default interface
choose the interface that will connect to the LAN. I like to choose
eth1. (This is because the 1 helps me to remember i.e. 1 for the L in
LAN). When asked for a machine name, type gw.example.org (short for
gateway).
When asked what type of server you want to install, choose LAMP and SSH from
the options. (I use these because it allows room for expansion later. If
needed.) That's it. Wait for the OS to finish installing, (you will be
asked to configure a user. I like to use ???administrator??? unfortunately
???admin??? is already taken.) Now move onto the next step.
Now we need to configure the interfaces file. This is so that we can
connect to the server remotely from another machine on the network if
needed and also so that we can update the OS from either the
international repository or from the local one (kindly hosted by Yo!
Africa). Which one you will use depends on the type of internet
connection. I hope all you people using VSAT have licenced your
equipment with POTRAZ... hehe :) type the following:
-----------------------------------------------------------------------
$sudo vi /etc/network/interfaces
-----------------------------------------------------------------------
Edit it so that it reads like this. (Don't forget to press
insert before typing in the vim editor.)
####################################################################
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
#
# The loopback network interface
auto lo
iface lo inet loopback
# The LAN (Primary network interface)
auto eth1
iface eth1 inet static
address 192.168.0.1
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
# The Internet
auto eth0
iface eth0 inet static
address 192.168.254.2
netmask 255.255.255.0
network 192.168.254.0
broadcast 192.168.254.255
gateway 192.168.254.1
####################################################################
As you can see I've created the new interface which connects to my ADSL
modem (gateway 192.168.254.1). If you're doing PPPOE... You're on your
own, there's quite a bit of help out there on the net though. Maybe I'll
look into this for my next project.
Now we have to configure the Hosts file so that the PC can resolve its
own hostname... I.e. we don't want to have to refer to the machine as
192.168.0.1 or 127.0.0.1, so lets edit the file. Type the following:
-----------------------------------------------------------------------
$sudo vi /etc/hosts
-----------------------------------------------------------------------
Edit it so that reads like so:
####################################################################
127.0.0.1 localhost
192.168.0.1 gw.example.org gw
192.168.254.2 gw.example.org gw
# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
####################################################################
We will also have to edit the hostname file. Type the following:
-----------------------------------------------------------------------
$sudo vi /etc/hostname
-----------------------------------------------------------------------
Edit it so that it reads:
####################################################################
gw.example.org
####################################################################
Now we have to edit a file called sysctl.conf in /etc/ so that we tell
the PC to forward traffic.
A lot of people tend to create a shell script which they place into
the /etc/init.d/ with the following line:
echo 1 > /proc/sys/net/ipv4/ip_forward.
What this does is to change the value of this file each time the
computer starts up. I prefer the following as it is a much more elegant
way. Plus we can also forward IP ver. 6 traffic too if we want.
-----------------------------------------------------------------------
$sudo vi /etc/sysctl.conf
-----------------------------------------------------------------------
Uncomment the line which reads net.ipv4.ip_forward = 1
Here's what mine looks like:
####################################################################
#
# /etc/sysctl.conf - Configuration file for setting system variables
# See /etc/sysctl.d/ for additional system variables.
# See sysctl.conf (5) for information.
#
#kernel.domainname = example.com
# Uncomment the following to stop low-level messages on console
#kernel.printk = 4 4 1 7
#
# Functions previously found in netbase
# Uncomment the next two lines to enable Spoof protection (reverse-path
#filter)
# Turn on Source Address Verification in all interfaces to
# prevent some spoofing attacks
#net.ipv4.conf.default.rp_filter=1
#net.ipv4.conf.all.rp_filter=1
# Uncomment the next line to enable TCP/IP SYN cookies
# This disables TCP Window Scaling (http://lkml.org/lkml/2008/2/5/167),
# and is not recommended.
#net.ipv4.tcp_syncookies=1
# Uncomment the next line to enable packet forwarding for IPv4
net.ipv4.ip_forward=1 <------------ I uncommented here
# Uncomment the next line to enable packet forwarding for IPv6
net.ipv6.conf.all.forwarding=1 <----------- I uncommented here
#
# Additional settings - these settings can improve the network
# security of the host and prevent against some network attacks
# including spoofing attacks and man in the middle attacks through
# redirection. Some network environments, however, require that these
# settings are disabled so review and enable them as needed.
#
# Ignore ICMP broadcasts
#net.ipv4.icmp_echo_ignore_broadcasts = 1
#
# Ignore bogus ICMP errors
#net.ipv4.icmp_ignore_bogus_error_responses = 1
#
# Do not accept ICMP redirects (prevent MITM attacks)
#net.ipv4.conf.all.accept_redirects = 0
#net.ipv6.conf.all.accept_redirects = 0
# _or_
# Accept ICMP redirects only for gateways listed in our default
# gateway list (enabled by default)
# net.ipv4.conf.all.secure_redirects = 1
#
# Do not send ICMP redirects (we are not a router)
#net.ipv4.conf.all.send_redirects = 0
#
# Do not accept IP source route packets (we are not a router)
#net.ipv4.conf.all.accept_source_route = 0
#net.ipv6.conf.all.accept_source_route = 0
#
# Log Martian Packets
#net.ipv4.conf.all.log_martians = 1
#
# The contents of /proc/<pid>/maps and smaps files are only visible to
# readers that are allowed to ptrace() the process
# kernel.maps_protect = 1
####################################################################
As you have probably figured out... The only line(s) you really need in
this file is(are) the one(s) for forwarding the traffic. Play with the
others at your own risk.
Now we need to create some rules for the NAT and tell iptables to load
them each time the eth0 interface comes up. I'm going to do it the
proper way without using webmin or some new fangled automated way. Lets
get down and dirty with the nitty gritty details. Type the following:
-----------------------------------------------------------------------
$sudo iptables -t nat -A POSTROUTING -o eth0 -J SNAT --to 192.168.254.2
-----------------------------------------------------------------------
Explanation:
I'm telling iptables to append (-A) a rule to the POSTROUTING chain in
the nat table (-t nat). The rule states that any traffic going out (-o)
of the eth0 interface should be source natted (-J SNAT) to
192.168.254.2. I.e. we are making all outgoing traffic think it is
coming from 192.168.254.2 and not the actual computer it was sent from.
Don't worry... when the reply packets come back the kernel generally
remembers who the packet was originally from and reverses this.
Now type the following:
-----------------------------------------------------------------------
$sudo iptables-save > /etc/iptables.up.rules
-----------------------------------------------------------------------
We are basically saving the active iptables rules to a file in /etc/
called iptables.up.rules (you could call it anything you like...)
Now we need to tell iptables to load these rules everytime the eth0
interface comes up. In order to do this, we now edit
the /etc/network/interfaces file again and add the following line at the
bottom below the configuration of the eth0 interface.
#####################################################################
post-up iptables-restore < /etc/iptables.up.rules
#####################################################################
My /etc/network/interfaces file now looks like this:
#####################################################################
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
# The loopback network interface
auto lo
iface lo inet loopback
# The LAN (Primary network interface)
auto eth1
iface eth1 inet static
address 192.168.0.1
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
# The Internet
auto eth0
iface eth0 inet static
address 192.168.254.2
netmask 255.255.255.0
network 192.168.254.0
broadcast 192.168.254.255
gateway 192.168.254.1
post-up iptables-restore < /etc/iptables.up.rules
#####################################################################
Right... Hopefully all is well. Now it's time to see if what we've done
works! Reboot the machine. Type: sudo reboot and press enter. Once you
have rebooted, you should be able to ping your modem 192.168.254.1
from your lan. Provided your machine's default gateway points to
192.168.0.1 and you are on the 192.168.0.0/24 subnet.
I'll leave it up to http://www.ubuntu.org.zw to explain how to change
your sources.list file to the local repository and keep your server
software up to date. Next issue I'll expand this for more subnets and
throw in some bandwidth monitoring and basic firewalling. I'll end off
with basic traffic shaping.
Alan Paardenkooper
Cell: 0913 415 034
skype: abetherabe
B-)
------------------------------
--
Ubuntu-zw mailing list
Ubuntu-zw at lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-zw
End of Ubuntu-zw Digest, Vol 27, Issue 1
****************************************
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the Ubuntu-zw
mailing list