original doku von clark connect home edition 2.1
TRANSCRIPT
ClarkConnect User Guide
Login Info Partners Modules Buy Download Help Forums
User Guide
ClarkConnect Home Edition 2.1 User Guide
Point Clark Networks
Copyright © 2003 by Point Clark Networks
Table of Contents1. Introduction2. Quick Start Guide3. System Requirements
HardwareNetwork CardsInternet Connection
Cable ModemsDSL and PPPoEISDN and SatelliteWireless
4. Installing the SoftwareInstallation Type
Network InstallCD-ROM - Bootable CD-ROM
Creating the Installation FloppyStarting the InstallInstall Configuration
Selecting Your Language and KeyboardSelecting Upgrade or InstallSelecting your Server TypeSelecting your Network Connection TypeSelecting Your Network Card DriversConfiguring Your NetworkConfiguring Your Network - PPPoEConfiguring Your LAN IP AddressSelecting Your Hostname - Password - Timezone - Hard Disk PartitioningSelecting Your Software
Post InstallNetwork Card ConfigurationApply the Latest Updates!
5. Setting Up Other MachinesOverviewWindows 95/98Windows 2000Windows XP
6. Core SoftwareOverviewAdministration ConsoleWeb-based Administration
7. ModulesOverviewAntispamAppleTalkBandwidth LimiterBanner Ad and Pop-up BlockerCaching NameserverCaller IDDHCP ServerMail Server - POP and IMAP
http://www.clarkconnect.com/docs/2.1/big.html (1 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Mail Server - SMTPFTP ServerIntrusion DetectionSystem WatcherPhoto GalleryPrint ServerSamba - Windows File SharingWeb MailWeb ProxyWeb ServerWebmin
8. FirewallOverviewOpening Ports and Port Forwarding
9. ServicesServices OverviewSoftware Updates - Web-based AdministrationSoftware Updates - Command Line apt-get
10. TroubleshootingFAQ - Frequently Asked Questions
Why can't I get ClarkConnect to detect my network card?How do I fix signal 11 errors?How do I remove the "FAILED" messages on boot?How do I edit files? I don't know vi...
A. Understanding NetworksB. ISA Network CardsC. License and Warranty
List of Tables2-1. Quick Start Network Settings3-1. Hardware System Requirements4-1. Supported Network Cards on Installation Floppy5-1. Network Settings7-1. Antispam from SpamAssassin7-2. AppleTalk Information7-3. Bandwidth Limiter7-4. Banner Ad and Pop-Up Blocker Information7-5. Caller ID Information7-6. POP and IMAP Mail Servers Information7-7. SMTP Mail Server Information7-8. ProFTPD Information7-9. Intrusion Detection Information7-10. System Watcher7-11. Photo Gallery7-12. Print Server7-13. Samba7-14. Web Mail7-15. Web Proxy7-16. Web Server7-17. Webmin9-1. Modules and Package NamesA-1. Netmasks and Networks
Chapter 1. Introduction
Welcome
The ClarkConnect software transforms a standard PC into a full-featured Internet server/gateway. In other words, it connects your local area network (LAN) to a DSL or cable modem Internet connection. The software is based on Red Hat, so you can install thousands of software packages (RPMs) on your server!
This document describes how to install and configure your ClarkConnect server/gateway. You should have the following background and experience:
http://www.clarkconnect.com/docs/2.1/big.html (2 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
● working knowledge of basic network concepts
● beginner's knowledge of Linux
● a DSL or cable modem Internet connection
● a small network
Features
Please check the website for feature list.
What's New
Please check the website for the release notes.
Chapter 2. Quick Start Guide
The contents of all your hard disks on the target computer will be completely erased.
For those folks who do not like to read manuals, here are the required steps to get your ClarkConnect server up and running.
Step 1 - Build your home/office network
Step 2 - Find an old computer
You won't need too much horsepower to run a ClarkConnect device. You will need at least 32MB of RAM (though 64MB is recommended if you plan on using all the bells and whistles) and a 500MB disk.
Step 3 - Install two network cards into your old computer
Linux does a good job at auto-detecting most hardware. If you plan on purchasing new network cards, make sure they are supported by Linux. See Red Hat's Hardware Compatibility List.
Step 4 - Create the installation floppy disk
You need to use one of the ClarkConnect tools to create your floppy. On the CD, you will find the mkbootfloppy script for Linux, and the ClarkConnect Tools for Windows. If you have a bootable CD drive, you can skip this step.
Step 5 - Install the ClarkConnect software
Network Install
● 1. Insert the installation disk● 2. Turn on your target computer● 3. Follow the installation wizard
CD-ROM Install - with Boot Floppy
● 1. Insert the installation disk● 2. Insert the ClarkConnect CD● 3. Turn on your target computer● 4. Follow the installation wizard
CD-ROM Install - with Bootable CD
● 1. If necessary, change your BIOS settings to run bootable CDs● 2. Insert the ClarkConnect CD● 3. Turn on your target computer● 4. Follow the installation wizard
http://www.clarkconnect.com/docs/2.1/big.html (3 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Step 6 - Configure other computers and devices on your network
You have to make changes to your computers sitting on your network. Use the following table as a guide:
Table 2-1. Quick Start Network Settings
Feature DescriptionDefault ClarkConnect IP Address 192.168.1.1Available static IPs 192.168.1.2 - 192.168.1.99Addresses used by DHCP 192.168.1.100 - 192.168.1.254DNS Servers 192.168.1.1 and/or your ISP's DNS servers
Chapter 3. System Requirements
Hardware
Table 3-1. Hardware System Requirements
Hardware Minimum RequirementsProcessor Pentium classMemory 64 MB for basic setup, 128 MB for more than 10 usersHard Drive 1 GBNetwork Cards You will need 2 of theseMonitor Only required for the installationVideo Card Any old video card will doCD-ROM Optional if you install over the InternetFloppy Drive Optional if you have a bootable CD-ROM driveModem Optional - for caller ID featureConnection Broadband only!
Network Cards
Linux does a good job at auto-detecting most hardware. Most mass-market PCI network cards are supported. Take a look at the Red Hat Hardware Compatibility List website to see if your network card is compatible. If you plan on buying new network cards for ClarkConnect and have two spare PCI slots, then save yourself some time and select the network cards that are designated 100% compatible.
Do you plan on using ISA network cards?
Do you only have ISA slots available or older ISA network cards around? You can still install the ClarkConnect software, but it will take some extra work to get the network cards working. You may have to edit the driver configuration file - see Appendix A
Are you building a network from scratch?
You may want to look at some of the Network Starter Kits available on the market.
Internet Connection
ClarkConnect supports most DSL (including PPPoE) and cable modem broadband Internet connections. We do not expect to add support for ISDN, wireless, or satellite types of broadband any time soon. However, if you have had success with getting Linux working on such a system, then we want to hear from you! E-mail us at [email protected].
http://www.clarkconnect.com/docs/2.1/big.html (4 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Cable Modems
Most cable modem Internet service providers will include a standard Ethernet card and external modem to enable your high-speed Internet connection. Fortunately, the days of proprietary software and logins are mostly behind us, so you should be able to setup ClarkConnect without too much tinkering.
However, some of the cable modem providers still have some quirks. Fortunately, Vladimir Vuksan has put together a great resource of Cable Modem Providers! If you are having trouble getting ClarkConnect to work with your cable ISP, check the following web site for some troubleshooting tips - http://www.tldp.org/HOWTO/Cable-Modem/isps.html.
ClarkConnect includes the software required to connect to Australia's Telstra Big Pond Service. Make sure you select the BPALogin option in the installation wizard!
DSL and PPPoE
During the ClarkConnect install, you will be asked for which type of DSL service you use - PPPoE or "Standard". These are mutually exclusive implementations, so you will need to select the right type during installation. It is very important to know how your Internet service provider configures your network. If you are not sure, ask the ISP's tech support staff, or other users.
ISDN and Satellite
We do not support ISDN or satellite broadband service providers. We are not too familiar with these services so they are not officially supported.
Wireless
The Office Edition supports 802.11 Internet connections. See the website and Howtos for details.
Chapter 4. Installing the Software
Installation Type
To install the ClarkConnect software, you require an installation floppy disk or a bootable CD drive. The rest of the software is installed from the CD-ROM or directly over your high-speed Internet connection.
Network Install
For network installs, you will need to create and installation floppy disk (described in the next section). Due to space limitations on the installation floppy, only a subset of network card drivers are available (see table below).
Table 4-1. Supported Network Cards on Installation Floppy
Driver Description3c503 3c507 3c509 3c515 3Com cards: 3c503 3c507 3c509 3c5153c59x 3Com cards: 3c590/3c595/3c90x/3cx988139too RTL8139, SMC EZ Card Fast Ethernetde4x5 DE4x5, DE434, DE450, and DE500 DEC EtherWORKSeepro EtherExpress Pro/10eepro100 Intel EtherExpress Pro 100Beexpress EtherExpresslance Advanced Micro Devices AMD 79c970 / PCnet LANCE
http://www.clarkconnect.com/docs/2.1/big.html (5 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
lne390 Mylex LNE390 EISAne2k-pci PCI NE2000 clonesne NE1000, NE2000, and compatiblepcnet32 AMD PCnet32smc-ultra32 SMC Ultra32 EISAsmc-ultra SMC Ultra, SMC EtherEZ ISAtlan ThunderLANtulip / old_tulip DEC 21040, most 21*40 Ethernetvia-rhine VIA VT86c100A Rhine-II PCI
Compare your network card to the Red Hat Hardware Compatibility List. Keep in mind that each driver supports many types of network cards. For instance the "tulip" driver can be used for Intel, LNE100TX, Accton and other types of network cards. If your network driver is not listed in the above table, you will need to use a CD to create your ClarkConnect device.
WarningYou must install by CD-ROM if you have a PPPoE type connection or your ISP uses a non-standard connection
procedure (e.g. Telstra's Big Pond Service)
CD-ROM - Bootable CD-ROM
If your target computer contains a bootable CD-ROM drive, then you do not require an installation floppy disk. However, you may need to change the settings in your BIOS to start the ClarkConnect install.
Creating the Installation Floppy
A note to users with PPPoE connections: The ClarkConnect software does support PPPoE, but the software can not be installed over the network.
To create the installation floppy disk, you need to use the ClarkConnect floppy creation tool.
From Windows
Download the floppy disk software from the website. Unzip the package (two files) and run the makefloppy.exe file.
From Linux
Download the floppy disk script and image from the website. Unpack the files and run the mkbootfloppy script.
bash# tar -xzvf clarkconnect-2.1.tar.gz bash# cd clarkconnect-2.1 bash# ./mkbootfloppy
Starting the Install
WarningThe contents of all your hard disks on the target computer will be completely erased if you choose to auto-partition your
system.
Network Install
● 1. Insert the installation disk
● 2. Turn on your target computer
● 3. Follow the installation wizard
http://www.clarkconnect.com/docs/2.1/big.html (6 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
CD-ROM Install - with Floppy
● 1. Insert the installation disk
● 2. Insert the ClarkConnect CD
● 3. Turn on your target computer
● 4. Follow the installation wizard
CD-ROM Install - with Bootable CD
● 1. If necessary, change your BIOS settings to run bootable CDs
● 2. Insert the ClarkConnect CD
● 3. Turn on your target computer
● 4. Follow the installation wizard
Install Configuration
Selecting Your Language and Keyboard
ClarkConnect includes several languages. Select your lanaguage and keyboard.
Selecting Upgrade or Install
Select whether you are upgrading or installing a system. If you are upgrading, make sure your read the release notes and upgrade notes.
http://www.clarkconnect.com/docs/2.1/big.html (7 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Selecting your Server Type
ClarkConnect supports standalone server mode and gateway mode. Standalone mode is used to create a server on a local area network (behind an existing firewall). Only one network card is required.
Selecting your Network Connection Type
Select the type of Internet connection you have (DSL, DSL/PPPoE, Cable).
Selecting Your Network Card Drivers
You will need to manually configure your network card settings if the installer does not automatically detect the driver. Most ISA-based network cards may also require the I/O and IRQ settings for the driver. See the Linux Ethernet HOWTO and Appendix A for some tips and tricks.
Configuring Your Network
http://www.clarkconnect.com/docs/2.1/big.html (8 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Configuring Your Network - PPPoE
ClarkConnect supports PPPoE DSL connections. Add the username and password provided by your ISP on this screen. For brain dead ISPs, you may also need to specify DNS servers.
Configuring Your LAN IP Address
If you are installing ClarkConnect as a gateway, you must specify the network settings for your local area network. The LAN hostname can be used instead of the IP address for many network tools. For instance, you will be able to access the web-based administration tool at https://<LAN-hostname>:81 in your web browser.
Selecting Your Hostname - Password - Timezone - Hard Disk Partitioning
The next few screens will ask for your device name, system password, timezone and partition settings. If you would like to specify your own partition scheme, then you should select "yes" on the "Select Partition Type" screen. The partitioning configuration will appear in the second stage of the installation process... don't panic!
WarningDo not forget your system password!
http://www.clarkconnect.com/docs/2.1/big.html (9 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Selecting Your Software
Select the software components to install on your system. Not all the modules (including AppleTalk and Junkbuster) are shown here - don't panic. With the ClarkConnect web-based configuration, you can add other modules after installation.
Post Install
Network Card Configuration
Linux will auto-detect most PCI-based network cards. Older ISA cards may require setting parameters for the IRQ and IO. You may also need to disable plug-and-play features on the card. Please check Red Hat's Hardware Compatibility Lists to see what settings may be required for your brand of network card.
WarningThe two network cables coming from your box may need to be swapped. If you are having a hard time connecting to the
Internet, make sure you try swapping the cables.
If you have old network cards, you can configure the drivers and settings (IRQs and IO).
WarningGotcha! You may only need to specify an IO or IRQ ... but not both.
Apply the Latest Updates!
Please register your system and apply the latest software updates.
Chapter 5. Setting Up Other Machines
http://www.clarkconnect.com/docs/2.1/big.html (10 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Overview
All of the computers and devices on your network must have Internet addresses between 192.168.1.2 and 192.168.1.254. When you are configuring your network, you have two choices:
1. Manually set the IP address to a specific number (static IP) or
2. Allow ClarkConnect to automatically determine the IP address (via DHCP).
Make sure you only use an address between 192.168.1.2 - 192.168.1.99 if you configure devices with static IP addresses. ClarkConnect includes a caching DNS server, but you can use this as your Internet Service Provider's DNS servers if you wish.
Table 5-1. Network Settings
Feature DescriptionDefault ClarkConnect IP Address 192.168.1.1Available static IPs 192.168.1.2 - 192.168.1.99Addresses used by DHCP 192.168.1.100 - 192.168.1.254DNS Servers 192.168.1.1 and/or your ISP's DNS servers
Windows 95/98
To set up networking in the Windows 95/98 environment...
Step 1 - Control Panel
● Click on the Start button, then follow the menu to Settings > Control Panel
● Double-click on the Network icon to bring up a window that will look similar to the screenshot
● Select TCP/IP and click on the Properties button.
http://www.clarkconnect.com/docs/2.1/big.html (11 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Step 2 - IP Address
On the IP Address tab, you can select Obtain an IP address automatically and ClarkConnect will automatically assign an IP address for you.
Alternatively, you can choose Specify an IP address (as shown in the screenshot). Make sure you pick an address between 192.168.1.2 to 192.168.1.99. The subnet mask is always 255.255.255.0.
Step 3 - Gateway Settings
Click on the Gateway tab. If you decided to let ClarkConnect assign your IP address automatically, then there is no need to add an Installed Gateway. Your ClarkConnect software will automatically handle this for you. If you decided to specify your IP address, then you will need to add 192.168.1.1 to the list of installed gateways (as shown).
http://www.clarkconnect.com/docs/2.1/big.html (12 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Step 4 - DNS Settings
If you decided to let the ClarkConnect assign your IP address automatically, then you can select Disable DNS. ClarkConnect will automatically configure these settings.
If you decided to specify your IP address, then you will need to add 192.168.1.1 to the DNS Server Search Order list (as shown).
You should also add a host name and then add "lan" as the domain. If you prefer to bypass the ClarkConnect DNS cache, you can add the DNS servers given by your Internet service provider.
http://www.clarkconnect.com/docs/2.1/big.html (13 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Windows 2000
To set up networking in the Windows 2000 environment...
Step 1 - Network Connections
Click on the Start button, then follow the menu to Settings > Network and Dial-up Connections
Right-click on the Local Connection icon and go to properties.
http://www.clarkconnect.com/docs/2.1/big.html (14 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
If the Local Area Connection Properties does have Internet Protocol (TCP/IP) go to Step 2 - Configuring TCP/IP. If the Local Area Connection Properties does not have Internet Protocol (TCP/IP), you will need to install it using the Install button.
The "Select Network Component Type" dialog box will appear.
http://www.clarkconnect.com/docs/2.1/big.html (15 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
● Select "Protocol" and click on Add. The enumeration of the protocols will take a minute or so.
● Select "Microsoft" from the left panel and select Internet Protocol (TCP/IP) from the right panel.
● Click the OK button.
Step 2 - Configuring TCP/IP
You can configure the TCP/IP properties by clicking on the properties button in the Local Area Connection dialog box.
Select "Obtain and IP address automatically" and ClarkConnect will automatically assign an IP address for you.
http://www.clarkconnect.com/docs/2.1/big.html (16 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Alternatively, you can choose "Use the following IP address:" and enter the IP address, subnet mask, default gateway and DNS server addresses. If you have more than three DNS servers, use the advanced button at the bottom of the dialog box to specify the addresses and the order in which they are used.
http://www.clarkconnect.com/docs/2.1/big.html (17 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Windows XP
To set up networking in the Windows XP environment...
Step 1 - Control Panel
● Click on the Start button, then follow the menu to Settings > Control Panel
● Double-click on the Network Connections
● Right click on Local Area Connection and go to Properties
Step 2 - Select IP Properties
Select TCP/IP and click on the Properties button.
http://www.clarkconnect.com/docs/2.1/big.html (18 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Step 3 - IP Address
On the IP Address tab, you can select Obtain an IP address automatically and ClarkConnect will automatically assign an IP address for you.
Alternatively, you can choose Specify an IP address (as shown in the screenshot). Make sure you pick an address between 192.168.1.2 to 192.168.1.99. The subnet mask is always 255.255.255.0.
Step 4 - DNS Settings
If you decided to let the ClarkConnect assign your IP address automatically, then you can select Disable DNS. ClarkConnect will automatically configure these settings.
If you decided to specify your IP address, then you will need to add 192.168.1.1 to the DNS Server Search Order list (as shown).
You should also add a host name and then add "lan" as the domain. If you prefer to bypass the ClarkConnect DNS cache, you can add the DNS servers given by your Internet service provider.
http://www.clarkconnect.com/docs/2.1/big.html (19 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Chapter 6. Core Software
Overview
There are two ways to configure your ClarkConnect system. The Administration Console is used to configure your network settings, while the Web-based Administration Tool is used to configure everything else!
Administration Console
The console must be accessed from a monitor and keyboard attached the server/gateway. In most installations, you will not need to access this configuration tool... ever. However, if you are having trouble getting your network up and running, and would like to change the IP address of one or more of your network cards, then login to the console. Use the root username and the password specified during installation.
http://www.clarkconnect.com/docs/2.1/big.html (20 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Web-based Administration
ClarkConnect includes a web-based configuration tool. If you used the default LAN settings, then point your browser to https://192.168.1.1:81. If you are using the caching DNS server, you can type name of the server instead (e.g. clarkconnect.lan).
Your browser will issue an "Invalid Certificate" message when you access the site. Your connection is still secure and encrypted, but your server certificate is not official. A valid certificate (like the one used at https://secure.clarkconnect.com) costs over $150 a year to maintain and not necessary for a private server. Use the "Install Certificate" option in your web browser to bypass this warning screen the next time you access the ClarkConnect web-based administration.
Login as username "root" with the password you defined during the installation.
Chapter 7. Modules
Overview
You can install software on your system using two tools: either the web-based interface or the command-line "apt-get" tool. Installing an add-on module may require several other software packages (or RPMS). Fortunately, both the web-interface and command-line tool automatically resolve these software dependencies. See apt-get and web-based administration for more information.
http://www.clarkconnect.com/docs/2.1/big.html (21 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
WarningYou can select some of the following packages during the installation wizard. Unfortunately, some software can only be
installed after the installation (e.g. Webmin, RAV Antivirus).
Antispam
Table 7-1. Antispam from SpamAssassin
Antispam InformationDescription SpamAssassin provides a spam filter for you system's mail server. Package Name cc-spamassassinCommand-line Install "apt-get install cc-spamassassin"
The SpamAssassin software works in conjunction with your mail server. Use the web-based administration tool to enable the software. You can configure the sensitivity and subject tag -- see screenshot for more information.
AppleTalk
Table 7-2. AppleTalk Information
AppleTalk InformationDescription The netatalk package enables Linux to talk to Macintosh computers via the AppleTalk
networking protocol. It includes a daemon to allow Linux to act as a file server over EtherTalk or IP.
Package Name cc-netatalkCommand-line Install "apt-get install cc-netatalk"
Mac Notes
● Go to the Control Panel/AppleTalk and make sure ethernet is selected.
● Go to Chooser and click on AppleShare.
● Under file servers, the server should show up --- first victory
● Click ok will bring a dialog box asking for name and password, or you can choose guest. If you click guest you only see the shared directory. (The same that Windows uses). If you enter a valid username and password on the ClarkConnect box, you can access your home directory. You will also have access to the shared directory.
You can put checkmarks next to either share to create links on the desktop then click OK.
Note: when the box mentions cleartext for the password, it means that what you send as a password in not encrypted in anyway. So any system between the Mac and ClarkConnect can through packet sniffing read your password. You should now have complete read/write access to the linux box.--- second victory.
Troubleshooting Tips
http://www.clarkconnect.com/docs/2.1/big.html (22 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
● Stop and start atalk (Do not restart, it needs a few second pause between the commands and restart will do it too quick)
● From the command line, run "top" and watch to make sure that atalkd, papd and afpd have started. Hit 'q' to exit.
● Check the /var/log/messages log file for errors.
Bandwidth Limiter
Table 7-3. Bandwidth Limiter
Bandwidth Limiter InformationDescription The bandwidth limiter restricts download speeds for PCs on your local network. Package Name cc-bandwidthCommand-line Install "apt-get install cc-bandwidth"
Are you finding that a minority of users are using up the majority of your bandwidth? You can limit the download speed by IP address.
Banner Ad and Pop-up Blocker
Table 7-4. Banner Ad and Pop-Up Blocker Information
Privoxy InformationDescription Privoxy (Junkbusters) blocks banner ads and most pop-ups when browsing the web. Package Name cc-privoxyCommand-line Install "apt-get install cc-privoxy"
Configuring Privoxy -- Tranparent Mode
Privoxy can be integrated with the Squid Web Proxy to provide transparent banner ad and pop-up filtering. In other words, you can enable filtering on the gateway -- no configuration changes are required for the desktops on your LAN. To enable transparent mode, make sure the Privoxy software is enabled on the Squid Web Proxy page and make sure Squid is set to run in transparent mode. See the Squid Web Proxy for more information.
Configuring Privoxy -- Non-Tranparent Mode
Use the following instructions to use the Privoxy software in non-transparent mode.
● Step 1 - Install the Privoxy module
http://www.clarkconnect.com/docs/2.1/big.html (23 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
● Step 2 - Make sure Privoxy is running - check "Running Services" in the the web-based administration tool. ● Step 3 - You must set your browser to use ClarkConnect as a proxy server. In Internet Explorer, click on Tools on
the menu bar, then Internet Options. Click on the Connections tab, and then the LAN Settings button.
● Step 4 - Add 192.168.1.1 and port 8118 to the proxy server settings. Click on the Advanced button and go to the next step.
● Step 5 - You will not be able to access websites on your local network unless you specify the exceptions shown.
Caching Nameserver
People are not too adept at remembering numbers, so we we use hostnames instead of IP addresses (e.g. clarkconnect.lan instead of 192.168.1.1). The default hostname was specified during the installation wizard (see LAN settings). If the computers on your network use ClarkConnect as their nameserver (see Setting Up Other Machines), the LAN hostname will automatically appear in the caching nameserver.
http://www.clarkconnect.com/docs/2.1/big.html (24 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Tip: If you add names in the /etc/hosts file, the results will automatically be included in the caching DNS server! You can configure entries in the /etc/hosts file using the web-based administration tool.
Special thanks to Simon Kelley for creating the dnsmasq caching nameserver
Caller ID
Table 7-5. Caller ID Information
Caller ID InformationDescription Log incoming caller information Package Name cc-calleridCommand-line Install "apt-get install cc-callerid"
WarningThe install will attempt to detect a modem -- this can cause the system to hang!
If you are lucky enough to have a Linux-friendly modem with caller ID capabilities, then you can install the Caller ID package from ClarkConnect. A call log is displayed on the web-based administration tool.
DHCP Server
The Dynamic Host Configuration Protocol (DHCP) allows hosts on a network to request and be assigned IP addresses. The default configuration for the DHCP server is given in the Network Settings table. If you changed the default LAN settings during the installation wizard, then your changes will also be reflected in the DHCP server.
Some tips:
● You should only have 1 DHCP server per network. If you already have one running, then you will cause grief.● Keep a range of IP addresses available for static addresses. Some devices (printers) and incoming VPN
connections may require a static IP.● Do not use the broadcast address (e.g. 192.168.1.255) as the last IP in the range.● If you change your LAN IP address, you will need to make changes to your DHCP server. All changes can be made
through the web-based adminstration (see screenshot).
http://www.clarkconnect.com/docs/2.1/big.html (25 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Mail Server - POP and IMAP
Table 7-6. POP and IMAP Mail Servers Information
POP and IMAP Mail Servers InformationDescription Remote mail access servers. Package Name cc-imapCommand-line Install "apt-get install cc-imap"
Configuring POP/IMAP
You can use either IMAP or POP to pickup your mail from the server. The screenshot below shows the configuration for POP mail. Make sure the Xinetd server is running (this is a "super server" for other things... including email) and that either the POP3 or IMAP service is enabled.
You can now configure your e-mail client (Outlook, Eudora, etc.) Your POP/SMTP/IMAP servers should point to your ClarkConnect box.
Mail Server - SMTP
Table 7-7. SMTP Mail Server Information
SMTP Mail Server InformationDescription ClarkConnect uses the Postfix SMTP/MTA mail server. Package Name cc-postfixCommand-line Install "apt-get install cc-postfix"
WarningDo not forget to open up firewall ports for e-mail. You only need to open the POP or IMAP ports if you plan on picking up
your mail from outside your local network.
http://www.clarkconnect.com/docs/2.1/big.html (26 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Configuring SMTP/Postfix
You can configure your mail server with the web-based administration tool.
Tips
The Hostname does not have to be related to the e-mail domains that you host. It can be ANY valid Internet name for your machine. In our example, the Primary Domain is the same as the hostname... just a coincidence.
It is important that you do not make an error with the Trusted Networks parameter. Without the parameter, any user on the Internet could send e-mail via your ClarkConnect box. Not good -- spammers would eventually find your box and abuse it. The default setting allows any user with a 192.168.x.x address send e-mail through the box. If you use a 10.x.x.x address, you should add 10.0.0.0/8 to the list of trusted networks.
FTP Server
Table 7-8. ProFTPD Information
ProFTPD InformationDescription ProFTPD is a full-featured FTP server. Package Name cc-proftpdCommand-line Install "apt-get install cc-proftpd"
The default configuration for ClarkConnect allows read-only anonymous FTP (directory is /var/ftp) and full access to user accounts. Advanced configuration for the FTP server is beyond the scope of the web-based administration tool. You can configure the FTP server by editing the /etc/proftpd.conf configuration file. Take a look at the ProFTPD website to configure advanced settings such as bandwidth throttling.
http://www.clarkconnect.com/docs/2.1/big.html (27 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Intrusion Detection
Table 7-9. Intrusion Detection Information
Snort InformationDescription The Snort software is an advanced intrusion detection system. Package Name cc-snortCommand-line Install "apt-get install cc-snort"
The Snort package is included with ClarkConnect to make users more aware of some of the daily "hostile" traffic that can pass by your Internet connection. The SnortSnarf software package creates web pages from the snort log files on a daily basis.
Shameless Plug
New exploits are discovered everyday. The Nimda and Code Red worms are the rule... not the exception! Snort maintains a list of over 1000 rules in their database. You can receive automatic snort updates by upgrading your Gateway Services account.
WarningSnort does require some horsepower. A Pentium 100 with 32MB was able to keep up, but the machine was getting a good
workout.
System Watcher
Table 7-10. System Watcher
Network Watcher InformationDescription Monitors the status of your network and system.Package Name cc-syswatchCommand-line Install "apt-get install cc-syswatch"
The syswatch daemon monitors the status of your broadband Internet, and watches for potential system issues. The software logs any downtime and attempts to reconnect to the Internet when trouble occurs. The software is also responsible for submitting a new IP address to the dynamic DNS system.
Photo Gallery
Table 7-11. Photo Gallery
Photo Gallery InformationDescription A web-based photo albumPackage Name cc-galleryCommand-line Install "apt-get install cc-gallery"
http://www.clarkconnect.com/docs/2.1/big.html (28 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Gallery is a web based photo album that provides users with the ability to create and maintain their own online photo collection via an intuitive web interface. More information can be found on the Gallery page in the web-based administration tool.
Resource: Gallery Web Site
Print Server
Table 7-12. Print Server
Print Server InformationDescription A print server for ClarkConnectPackage Name cc-cupsCommand-line Install "apt-get install cc-cups"
ClarkConnect includes the CUPS - the Common Unix Printing System - in addition to Foomatic - a database of printer drivers and descriptions. These two systems (with the help of a few other software packages) create the core of the printing system.
Supported Printers
Not all printers are compatible with Linux. The best resource is the Linux Printing Database. You can find whether or not your printer is supported. If so, then follow the link from the web-based administration tool to add your printer (or jump straight to it: http://192.168.1.1:631 on a default LAN setup).
Cups and Samba
When you configure a new printer with Cups, it will appear as a shared printer in Windows Network Neighborhood (if Samba is installed). However, you will need to restart the Samba service after adding a new printer - use the Running Services page from the web-based administration tool.
Samba - Windows File Sharing
Table 7-13. Samba
Samba InformationDescription Samba file sharing system.Package Name cc-sambaCommand-line Install "apt-get install cc-samba"
If you are using Windows PCs, you will be able to see your ClarkConnect box through your Network Neighborhood icon. Use the Samba/File Sharing page in the web-based administration to add or change the name, workgroup or comment shown in Network Neighborhood.
Gotchas
WarningDue to a "feature" in Microsoft networking, you may not see ClarkConnect right away; sometimes it takes several minutes
to appear. A quick way around this "feature" is to use the Find Computer tool.
http://www.clarkconnect.com/docs/2.1/big.html (29 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Type in "clarkconnect", then hit the Find Now button.
Web Mail
Table 7-14. Web Mail
Web Mail InformationDescription Web mail for ClarkConnect.Package Name cc-webmailCommand-line Install "apt-get install cc-webmail"
Documentation coming soon.
Web Proxy
Table 7-15. Web Proxy
Web Proxy InformationDescription Web proxy for ClarkConnect.Package Name cc-squidCommand-line Install "apt-get install cc-squid"
Documentation coming soon.
http://www.clarkconnect.com/docs/2.1/big.html (30 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Web Server
Table 7-16. Web Server
Web Server InformationDescription Web server for ClarkConnect.Package Name cc-httpdCommand-line Install "apt-get install cc-httpd"
WarningGotcha! You must enable the webserver through the ClarkConnect web-based administration tool. You must also open
the firewall port to allow web connections.
Webmin
Table 7-17. Webmin
Webmin InformationDescription A web-based administration tool.Package Name webminCommand-line Install "apt-get install webmin"
Webmin is a alternative web-based administration tool. Once you have installed Webmin, you can access it from your web browser -- https://192.168.1.1:10000 on a default installation (make sure you use https when you type the address). Use the "root" username and password to login.
Chapter 8. Firewall
Overview
Take a look at the Test My Shields and Probe My Ports security tools from Gibson's Research. They will test your ClarkConnect box for common security problems. Of course, ClarkConnect has been configured to be secure, so you should be happy with the results. In fact, your ClarkConnect box considers this type of "network scanning" mischievous behavior and logs the information in the Intrusion Detection log.
Opening Ports and Port Forwarding
The ClarkConnect web-based administration has two tools to help you configure your firewall. The Firewall Tool opens up ports to allow services (e.g. web server) on ClarkConnect. The Port Forwarding tool allows you to forward ports to computers behind your firewall.
You can set up basic firewall rules using the web-based administration tool (screenshot below). You can find additional documentation in the web-based administration pages.
http://www.clarkconnect.com/docs/2.1/big.html (31 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Chapter 9. Services
Services Overview
ClarkConnect comes with free dynamic DNS. You will always be able to find your server/gateway from anywhere on the Internet - even with a dynamic IP address. You can also subscribe to the mailing list to receive the latest software and security patches. Just create a new account and then configure your ClarkConnect device.
You can upgrade your account to receive more features:
● Domain name registration
● System fault monitoring
● Security audit
● Backup e-mail service
● Advanced DNS service
● Bandwidth metering
Software Updates - Web-based Administration
The web-based administration includes a tool to update and install software on your system. You can view and install the latest software on your system with a few clicks on a web browser. You must register your ClarkConnect system to access this page.
Software Updates - Command Line apt-get
The apt-get tool installs and upgrades software on your system. For those of you familiar with the underlying RPM package system, you know the frustration of resolving software dependencies. With apt-get, these dependency issues are automatically resolved.
To use apt-get, login to your ClarkConnect server as root. You can use SSH or the console. The following list of commands
http://www.clarkconnect.com/docs/2.1/big.html (32 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
will get you started.
Tip: Do you want to install the latest patches? Run the following two commands: i) apt-get update ii) apt-get upgrade
apt-get update -- retrieves the latest list of software and updates available through apt-get. You should run this command before using other apt-get commands (you must run this at least once).
apt-get upgrade -- performs an upgrade for all obsolete software on your system.
apt-get install <package> -- installs software on your system. The package is the name of the RPM (see following table).
apt-get -- displays other apt-get options
Table 9-1. Modules and Package Names
Module PackageAntispam cc-spamassassinAppleTalk/AppleShare cc-netatalkBandwidth Limiter cc-bandwidthBanner Ad and Pop-up Filter cc-privoxyCaching Nameserver cc-dnsmasqCaller ID cc-calleridConsole Tool cc-consoleDeveloper Environment cc-develDHCP Server cc-dhcpFirewall cc-firewallFTP Server cc-proftpdIntrusion Detection cc-snortIntrusion Detection Reports cc-snortsnarfMail Server - POP/IMAP cc-imapMail Server - SMTP cc-postfixNetwork Watcher cc-syswatchPhoto Gallery cc-galleryPHP cc-phpPOP before SMTP cc-pop-before-smtpPrint Server cc-printingSystem Statistics cc-mrtgSystem Status cc-phpsysinfoWebmail cc-webmailWebmin webminWeb Proxy cc-squidWeb Server cc-httpdWindows File Server cc-samba... latest additions web page
Chapter 10. Troubleshooting
FAQ - Frequently Asked Questions
This FAQ only covers installation questions. Please check the website for more FAQs - http://www.clarkconnect.org/help/
Why can't I get ClarkConnect to detect my network card?
Please read ISA Network Card page (even if you are using PCI cards!).
http://www.clarkconnect.com/docs/2.1/big.html (33 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
How do I fix signal 11 errors?
Old hardware can sometimes cause grief for the Linux installer. These error messages can be caused by memory problems, hard disk detection and configuration errors, and many other types of errors. Take a look at the extra log screens after the error occurs - type Alt-F1 through F5 to see all the screens.
Check this website for tips and tricks: http://www.bitwizard.nl/sig11/
How do I remove the "FAILED" messages on boot?
This error will occur if your second network card cannot be auto-detected. When certain services start up, they cannot find a network interface and spit out an error. Once you have configured your network cards, the error messages should disappear.
How do I edit files? I don't know vi...
Use the much less cryptic nano text editor.
Appendix A. Understanding Networks
On several ClarkConnect configuration screens, you will see a place to configure network settings. What does this mean? Using special notation, you can specify a network (or range of IP addresses). You must specify the first IP address in the range, followed by a "netmask". There are two common ways to specify the netmask (see table and example below).
Example -- the 192.168.1.0 - 192.168.1.255 range of IP addresses can specified with the following two methods:
● 192.168.1.0/24
● 192.168.1.0/255.255.255.0
The first and last addresses (192.168.1.0 and 192.168.1.255 in the first example) are reserved and cannot be used.
Table A-1. Netmasks and Networks
Netmask IPs Sample Usable Range/24 -- 255.255.255.0 254 192.168.1.1 - 192.168.1.254/25 -- 255.255.255.128 126 192.168.1.1 - 192.168.1.126/26 -- 255.255.255.192 62 192.168.1.1 - 192.168.1.62/27 -- 255.255.255.224 30 192.168.1.1 - 192.168.1.30/28 -- 255.255.255.240 14 192.168.1.1 - 192.168.1.14/29 -- 255.255.255.248 6 192.168.1.1 - 192.168.1.6/30 -- 255.255.255.252 2 192.168.1.1 - 192.168.1.2
Appendix B. ISA Network Cards
ISA Network Cards If you decide to use ISA network cards, you may be in for a world of hurtin'. You may end up setting jumpers, disabling plug-n-play, setting IRQs, or downloading DOS configuration tools from a vendor's website. These cards may take more effort to configure, but many are just as capable of doing the job!
The following is courtesy of Paul Ramsey's Red Hat Linux 6.X as an Internet Gateway for a Home Network - http://www.tldp.org/HOWTO/mini/Home-Network-mini-HOWTO.html
Configuring a Network Driver
http://www.clarkconnect.com/docs/2.1/big.html (34 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
OK, so one or both of your cards are not recognized by the kernel. This is not a problem, really. What we're going to have to do is tell the kernel more explicitly how to find your cards. There are lots of twists and turns here, and I'm not going to cover all of them. Remember, when the going gets tough, the tough turn to the Ethernet HOWTO. Here's some summary advice:
● You have a PCI network card. You are probably sitting pretty, assuming it is not so new and cutting edge that no drivers exist. You can often find out a great deal about your network cards (and other things) by reading through /proc/pci and noting down makes and models.
● You have an ISA network card. It is possible you will have to know the IO base address and the IRQ the card is operating on. You have manuals, right? Right? If not, this would be a good time to surf to the manufacturer's web site and see if they have any online references. Or if you have an old DOS configuration diskette, boot to DOS and see if there is a setup program which will read and set the address and IRQ.
● You have an ISA Plug'n'Play card. You'll have to learn how to configure it first -- read the Plug'n'Play HOWTO. Fortunately, once you've configured your card you will know exactly what the IO base and IRQ are.
Now, since you know what the make and model of eth0 and eth1 are you can go to the compatibility page of the Ethernet HOWTO and look up your card. Take note of the recommended driver, and any information about special options your card may require. Write it down.
It's time to edit a configuration file! The file we will be editing is /etc/conf.modules (or modules.conf). Open this file up in the text editor of your choice. Because there are so many possibilities and combinations of things which can go in this file, I'm going to give my own gateway as an example. I have a PCI 10/100Mb card based on the VIA Rhine chip, and a plain-jane 10Mb NE2000 ISA clone. I use the 100Mb card for the internal network and the 10Mb card for the external connection. My /etc/conf.modules (modules.conf) file looks like this:
alias parport_lowlevel parport_pcalias eth0 neoptions ne io=0x300 irq=10alias eth1 via-rhine
My conf.modules (modules.conf) file is laid out as follows:
● The first line is there to configure my parallel port for printing. You probably have a similar line. Leave it alone. ● The second line (alias eth0 ne) tells the kernel to use the ne driver for the eth0 device. ● The third line (options ne io=0x300 irq=10) tells the ne driver at which io address and irq interrupt it will find the ISA
card at. If you have ISA cards you will probably have to use this kind of directive, just replace the driver, io and irq directives with the correct information for your card.
● The fourth line (alias eth1 via-rhine) tells the kernel to use the via-rhine driver for eth1. Because my eth1 card is a PCI card, I do not need to provide io or irq information: the PCI subsystem configures the device automatically.
You will want to ensure that you have alias entries in conf.modules (modules.conf) for both your cards, and correct options lines for all your ISA cards. You may already have lines in conf.modules (modules.conf) for any ethernet cards you configured during installation.
When you have finished editing conf.modules (modules.conf), try ifconfig eth0 and ifconfig eth1 again. You may have to apply some trial and error if you are messing with IO addresses and IRQs without a manufacturers manual.
Two Identical Network Cards
So, you were really really smart, bought two identical network cards for your Linux gateway, and now you cannot get them to work together? Do not worry, getting them to coexist is just a matter of using the correct syntax in /etc/conf.modules (modules.conf). For this example, the addresses and IRQ numbers are made up, and I will assume that you have bought a matched pair of NE2000 clones (a common choice). Your /etc/conf.modules (modules.conf) file should look like this:
alias eth0 nealias eth1 neoptions ne io=0x330,0x360 irq=7,9
The addressing options are all given on the same line, and the first number for each addressing type is for eth0, the second number for eth1.
Copyright © 2000, Paul Ramsey.
This manual may be reproduced in whole or in part, without fee, subject to the following restrictions:
The copyright notice above and this permission notice must be preserved complete on all complete or partial copies. Any translation or derived work must be approved by the author in writing before distribution. If you distribute this work in part, instructions for obtaining the complete version of this manual must be included, and a means for obtaining a complete version provided. Small portions may be reproduced as illustrations for reviews or quotes in other works without this permission notice if proper citation is given.
http://www.clarkconnect.com/docs/2.1/big.html (35 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
Exceptions to these rules may be granted for academic purposes: Write to the author and ask. These restrictions are here to protect us as authors, not to restrict you as learners and educators.
Appendix C. License and Warranty
This does not apply to Suva, Windows software, and some other components.
GNU GENERAL PUBLIC LICENSE Version 2, June 1991
Copyright (c) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place- Suite 330, Boston, MA 02111-1307, USA
Everyone is permitted to copy and distribute verbatim copies of thislicense document, but changing it is not allowed.
Preamble
The licenses for most software are designed to take away your freedom toshare and change it. By contrast, the GNU General Public License isintended to guarantee your freedom to share and change free software--tomake sure the software is free for all its users. This General PublicLicense applies to most of the Free Software Foundation's software andto any other program whose authors commit to using it. (Some other FreeSoftware Foundation software is covered by the GNU Library GeneralPublic License instead.) You can apply it to your programs, too.
When we speak of free software, we are referring to freedom, not price.Our General Public Licenses are designed to make sure that you have thefreedom to distribute copies of free software (and charge for thisservice if you wish), that you receive source code or can get it if youwant it, that you can change the software or use pieces of it in newfree programs; and that you know you can do these things.
To protect your rights, we need to make restrictions that forbid anyoneto deny you these rights or to ask you to surrender the rights. Theserestrictions translate to certain responsibilities for you if youdistribute copies of the software, or if you modify it.
For example, if you distribute copies of such a program, whether gratisor for a fee, you must give the recipients all the rights that you have.You must make sure that they, too, receive or can get the source code.And you must show them these terms so they know their rights.
We protect your rights with two steps: (1) copyright the software, and(2) offer you this license which gives you legal permission to copy,distribute and/or modify the software.
Also, for each author's protection and ours, we want to make certainthat everyone understands that there is no warranty for this freesoftware. If the software is modified by someone else and passed on, wewant its recipients to know that what they have is not the original, sothat any problems introduced by others will not reflect on the originalauthors' reputations.
Finally, any free program is threatened constantly by software patents.We wish to avoid the danger that redistributors of a free program willindividually obtain patent licenses, in effect making the programproprietary. To prevent this, we have made it clear that any patent mustbe licensed for everyone's free use or not licensed at all.
The precise terms and conditions for copying, distribution andmodification follow.
Terms And Conditions For Copying, Distribution And Modification
0. This License applies to any program or other work which contains anotice placed by the copyright holder saying it may be distributed underthe terms of this General Public License. The "Program", below, refersto any such program or work, and a "work based on the Program" means
http://www.clarkconnect.com/docs/2.1/big.html (36 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
either the Program or any derivative work under copyright law: that isto say, a work containing the Program or a portion of it, eitherverbatim or with modifications and/or translated into another language.(Hereinafter, translation is included without limitation in the term"modification".) Each licensee is addressed as "you".
Activities other than copying, distribution and modification are notcovered by this License; they are outside its scope. The act of runningthe Program is not restricted, and the output from the Program iscovered only if its contents constitute a work based on the Program(independent of having been made by running the Program). Whether thatis true depends on what the Program does.
1. You may copy and distribute verbatim copies of the Program's sourcecode as you receive it, in any medium, provided that you conspicuouslyand appropriately publish on each copy an appropriate copyright noticeand disclaimer of warranty; keep intact all the notices that refer tothis License and to the absence of any warranty; and give any otherrecipients of the Program a copy of this License along with the Program.
You may charge a fee for the physical act of transferring a copy, andyou may at your option offer warranty protection in exchange for a fee.
2. You may modify your copy or copies of the Program or any portion ofit, thus forming a work based on the Program, and copy and distributesuch modifications or work under the terms of Section 1 above, providedthat you also meet all of these conditions:
a) You must cause the modified files to carry prominent notices statingthat you changed the files and the date of any change.
b) You must cause any work that you distribute or publish, that in wholeor in part contains or is derived from the Program or any part thereof,to be licensed as a whole at no charge to all third parties under theterms of this License.
c) If the modified program normally reads commands interactively whenrun, you must cause it, when started running for such interactive use inthe most ordinary way, to print or display an announcement including anappropriate copyright notice and a notice that there is no warranty (orelse, saying that you provide a warranty) and that users mayredistribute the program under these conditions, and telling the userhow to view a copy of this License. (Exception: if the Program itself isinteractive but does not normally print such an announcement, your workbased on the Program is not required to print an announcement.)
These requirements apply to the modified work as a whole. Ifidentifiable sections of that work are not derived from the Program, andcan be reasonably considered independent and separate works inthemselves, then this License, and its terms, do not apply to thosesections when you distribute them as separate works. But when youdistribute the same sections as part of a whole which is a work based onthe Program, the distribution of the whole must be on the terms of thisLicense, whose permissions for other licensees extend to the entirewhole, and thus to each and every part regardless of who wrote it. Thus,it is not the intent of this section to claim rights or contest yourrights to work written entirely by you; rather, the intent is toexercise the right to control the distribution of derivative orcollective works based on the Program.
In addition, mere aggregation of another work not based on the Programwith the Program (or with a work based on the Program) on a volume of astorage or distribution medium does not bring the other work under thescope of this License.
3. You may copy and distribute the Program (or a work based on it, underSection 2) in object code or executable form under the terms of Sections1 and 2 above provided that you also do one of the following:
a) Accompany it with the complete corresponding machine-readable sourcecode, which must be distributed under the terms of Sections 1 and 2above on a medium customarily used for software interchange; or,
b) Accompany it with a written offer, valid for at least three years, togive any third party, for a charge no more than your cost of physically
http://www.clarkconnect.com/docs/2.1/big.html (37 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
performing source distribution, a complete machine-readable copy of thecorresponding source code, to be distributed under the terms of Sections1 and 2 above on a medium customarily used for software interchange; or,
c) Accompany it with the information you received as to the offer todistribute corresponding source code. (This alternative is allowed onlyfor noncommercial distribution and only if you received the program inobject code or executable form with such an offer, in accord withSubsection b above.)
The source code for a work means the preferred form of the work formaking modifications to it. For an executable work, complete source codemeans all the source code for all modules it contains, plus anyassociated interface definition files, plus the scripts used to controlcompilation and installation of the executable. However, as a specialexception, the source code distributed need not include anything that isnormally distributed (in either source or binary form) with the majorcomponents (compiler, kernel, and so on) of the operating system onwhich the executable runs, unless that component itself accompanies theexecutable. If distribution of executable or object code is made byoffering access to copy from a designated place, then offeringequivalent access to copy the source code from the same place counts asdistribution of the source code, even though third parties are notcompelled to copy the source along with the object code.
4. You may not copy, modify, sublicense, or distribute the Programexcept as expressly provided under this License. Any attempt otherwiseto copy, modify, sublicense or distribute the Program is void, and willautomatically terminate your rights under this License. However, partieswho have received copies, or rights, from you under this License willnot have their licenses terminated so long as such parties remain infull compliance.
5. You are not required to accept this License, since you have notsigned it. However, nothing else grants you permission to modify ordistribute the Program or its derivative works. These actions areprohibited by law if you do not accept this License. Therefore, bymodifying or distributing the Program (or any work based on theProgram), you indicate your acceptance of this License to do so, and allits terms and conditions for copying, distributing or modifying theProgram or works based on it.
6. Each time you redistribute the Program (or any work based on theProgram), the recipient automatically receives a license from theoriginal licensor to copy, distribute or modify the Program subject tothese terms and conditions. You may not impose any further restrictionson the recipients' exercise of the rights granted herein. You are notresponsible for enforcing compliance by third parties to this License.
7. If, as a consequence of a court judgment or allegation of patentinfringement or for any other reason (not limited to patent issues),conditions are imposed on you (whether by court order, agreement orotherwise) that contradict the conditions of this License, they do notexcuse you from the conditions of this License. If you cannot distributeso as to satisfy simultaneously your obligations under this License andany other pertinent obligations, then as a consequence you may notdistribute the Program at all. For example, if a patent license wouldnot permit royalty-free redistribution of the Program by all those whoreceive copies directly or indirectly through you, then the only way youcould satisfy both it and this License would be to refrain entirely fromdistribution of the Program.
If any portion of this section is held invalid or unenforceable underany particular circumstance, the balance of the section is intended toapply and the section as a whole is intended to apply in othercircumstances.
It is not the purpose of this section to induce you to infringe anypatents or other property right claims or to contest validity of anysuch claims; this section has the sole purpose of protecting theintegrity of the free software distribution system, which is implementedby public license practices. Many people have made generouscontributions to the wide range of software distributed through thatsystem in reliance on consistent application of that system; it is up tothe author/donor to decide if he or she is willing to distribute
http://www.clarkconnect.com/docs/2.1/big.html (38 von 39)18.12.2003 23:14:15
ClarkConnect User Guide
software through any other system and a licensee cannot impose thatchoice.
This section is intended to make thoroughly clear what is believed to bea consequence of the rest of this License.
8. If the distribution and/or use of the Program is restricted incertain countries either by patents or by copyrighted interfaces, theoriginal copyright holder who places the Program under this License mayadd an explicit geographical distribution limitation excluding thosecountries, so that distribution is permitted only in or among countriesnot thus excluded. In such case, this License incorporates thelimitation as if written in the body of this License.
9. The Free Software Foundation may publish revised and/or new versionsof the General Public License from time to time. Such new versions willbe similar in spirit to the present version, but may differ in detail toaddress new problems or concerns.
Each version is given a distinguishing version number. If the Programspecifies a version number of this License which applies to it and "anylater version", you have the option of following the terms andconditions either of that version or of any later version published bythe Free Software Foundation. If the Program does not specify a versionnumber of this License, you may choose any version ever published by theFree Software Foundation.
10. If you wish to incorporate parts of the Program into other freeprograms whose distribution conditions are different, write to theauthor to ask for permission. For software which is copyrighted by theFree Software Foundation, write to the Free Software Foundation; wesometimes make exceptions for this. Our decision will be guided by thetwo goals of preserving the free status of all derivatives of our freesoftware and of promoting the sharing and reuse of software generally.
Warranty
11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTYFOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHENOTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIESPROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHEREXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIEDWARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THEENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITHYOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALLNECESSARY SERVICING, REPAIR OR CORRECTION.
12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO INWRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFYAND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FORDAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIALDAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM(INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDEREDINACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OFTHE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OROTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
About Us | Site Map | Terms of Service | Privacy PolicyCopyright © 2000-2003, Point Clark Networks
http://www.clarkconnect.com/docs/2.1/big.html (39 von 39)18.12.2003 23:14:15