text:
One-in-six Aussies Has Multiple Jobs
More than one-in-six Australian workers is holding down more than one job.
The number of people who had a job during 2015-16 was 13.3 million, according to figures released by the Australian Bureau of Statistics on Wednesday.
But 15 per cent of those workers had more than one job at the same time in the year, pushing the total number of jobs held to 18.5 million.
Those with multiple jobs earnt less on average than those with one role, with a median total income of $39,813, compared to $48,028 for those who worked a single job.
ABS labour statistics program manager Bjorn Jarvis says the nature of working multiple jobs likely played a role in that difference.
"If people are working very short duration jobs, or they're starting a business and juggling other work, they might be doing a few small things that they don't actually add to a very large aggregate," he told AAP.
Those working multiple jobs were most likely to be working their first job in the healthcare and social assistance sector or the administrative and support services industry.
The insights are part of a new data set from the ABS, combining its own statistics with data from other agencies, including the tax office.
The figures have for the first time shed light on the makeup of workforces in local areas around Australia.
Melbourne's southeast is where you would be most likely to find an Australian manufacturing worker.
Dandenong had the most manufacturing workers in 2015-16 at 3000, followed by Hampton Park with 2800 and Keysborough with 2600.
The most mining workers could be found in Queensland's Mount Isa (2900), while the highest number of construction jobs could be found in Perth (3100) and nearby semi-rural Baldivis (3200).
Sydney's Haymarket and The Rocks had the highest number of jobs in the national overall, with 48,600 workers.
The area also had the nation's most workers in accommodation and food services (11,600) , administrative and support services (8400) and retail trade (2800).
The ABS' survey of employee earnings and hours is still the most accurate measure of incomes, Mr Jarvis noted, as tax data used in the latest release doesn't account for the number of hours worked.
But the gender pay gap remains clear in the new information.
The median income for a person per job was $54,999 for males and $39,356 for females in 2015-16.
Article source here.

subset: commoncrawl


text:
This is one you don't want to miss.
At PhotoPlus 2010, Chase Jarvis gave a killer keynote speech, which was followed up by a panel discussion with Vincent Laforet, Jasmine Star, Zack Arias, JoeyL and Rob Haggart.
If you missed out on the live stream, it's embedded below. Grab a snack, and enjoy.
[via Chase Jarvis]


text:
SBC Software License for 32 sessions on BNSBC-L
Add SIP-to-SIP functionality to any beroNet VoIP devices and meet your customers' requirements with the right SBC license
With beroNet SBC Software Licenses you can connect multiple SIP devices and give each beroNet VoIP Gateway or Card basic SBC functionality. Simplify advanced PBX configurations and make IPBX Systems, VoIP Providers and legacy PBX compatible. With our modular VoIP Session Border Controller benefit additionally of a fully security solution for VoIP networks. beroNet OS integrates two concurrent SIP-to-SIP sessions. To add more concurrent sessions licenses are required.
SKU | bnsbc-session-32 |
Kenmerken |


text:
Saturday, October 30, 2010
Thanksgiving 'Gather Here with Grateful Hearts' Printable
41 comments:
You are my new favorite person!! Your subway art halloween one is on my mantle. maybe only for 24 hours but totally worth it. P.S. I had it sent to costco online photo. Only one printed without any resolution errors at checkout. The rest I tried to order had resolution errors so I didn't try printing. It didn't matter what size. I was just wondering if they come out fine anyway... maybe someone has an answer. I clicked on the picture and then right clicked to save it to my computer. firstname.lastname@example.com
ReplyDeleteNo questions are dumb! I print these out on my photo printer at home. They take up the same amount of ink as any other photo. If you don't want to use your own printer though, you can upload the image to any photo-printing website (Costco.com , Walgreens.com, etc.) and have it printed through them. :) Does that help? Don't hesitate to ask any more questions. :)
ReplyDelete- Jessica@CraftilyEverAfterDecember 2, 2011 at 12:11 AM
This is an 8x10 image, so will not print well at larger sizes. If you are interested in larger sizes though I do sell them. Contact me at email@example.com and I can make you any size or color you want for $5.00. :)
ReplyDelete - AnonymousSeptember 21, 2012 at 6:30 AM
Hello Jessica - your poster is cute and I've got this linked to my free Fall prinatbles post too today, well done!
ReplyDelete - AnonymousOctober 7, 2012 at 8:55 AM
Maybe this will help another Mac user:
OP+Shift+Click brings up the full resolution printable in a new window
CNTRL+Click on the image - Choose "Save as"


text:
In the United States, an estimated 300,000 people a year die from obesity.
In several studies over the last five years, researchers have shown patients who receive regular acupuncture treatments see faster weight loss results than those who do not. In each case, the acupuncture treatments were combined with dietary and lifestyle changes also aimed at weight loss, but the patients who got acupuncture saw better results than those who focused on dietary and lifestyle changes alone.
In traditional Chinese medicine, obesity is linked to energy or qi stagnation, especially around the stomach and spleen. TCM teaches that the energy imbalance caused by stomach and spleen qi stagnation affects digestion, the function of the pancreas, and the insulin-glucagon pathway. Each of these mechanisms is an important part of our body's ability to take in nutrients, cycle them through our body, and get rid of unneeded waste.
There are many acupoints and combinations of acupoints that have proven successful for people who are trying to lose weight. It depends on the particular qi stagnation they are exhibiting and other body type characteristics.
Clinical research has shown acupuncture treatments have the ability to restore bodily balance, improve physical well-being and promote healthy weight loss. In one study in Taiwan, researchers conducted a trial of 100 patients. Each patient received three months of acupuncture treatments, after which their body mass index (BMI) was an average of three points lower than before the treatments.
The researchers highlighted they saw the most success when they selected personalized acupuncture points based on each patient's individual needs.
It can be frustrating and challenging to complete a weight loss regime, and there are so many kinds, each telling you theirs will be different and bring you success.
In TCM, any dietary or lifestyle change is recommended based on underlying causes, not surface symptoms, and with a well-rounded view of your health in mind. An acupuncturist will never analyze your health solely based on the reading of a bathroom scale. However, if you are looking for support on your weight loss journey, acupuncture may be a great thing to add to your routine.


text:
| Site Opens in January 2010 | ||||
Software: Murder, mystery and mayhem abound in The Embers and In Shadows. Two horror adventure games where reality is what you make of it and dreams are a game. Online Games: (Not all games listed on this page will be released in 2000. Release dates and information for software and online games will be posted as it becomes available.) | Beta Testers Needed
This Site | ||||
WARNING: Promo contains depictions of blood and occult symbolism. FOR MATURE AUDIENCES ONLY! | |||||
Copyright©1997-2009, AshzFall. All Rights Reserved. |


text:
"In the name of the Government of the Russian Republic, on behalf of the Council of People's Commissars, we dismiss you from your post for refusing to obey government orders and for conduct that entails untold hardships for the working people of all countries and especially the armies."
Is that the Commander-in-Chief?
Dieterichs here.
We should like to speak to the Acting Commander-in-Chief. If General Dukhonin is no longer charged with these duties, please let us have the person now acting in his stead. As far as we are aware, General Dukhonin has not yet resigned.
Field H. Q. replying: Acting C.-in-C. General Dukhonin waited for your call until 1 a.m., and is now asleep. The telegraph was out of order, and later was used by Field H. Q. to communicate with G. H. Q.
Could you tell us whether you have received a wireless message from the Council of People's Commissars sent at 4:00 o'clock, and what has been done to carry out the instructions of the Council of People's Commissars?
Field H. Q. replying: An undated and unnumbered message of State importance was received, and that is why General Dukhonin requested General Mnnikovsky for the necessary guarantees confirming its authenticity.
What was Manikovsky's reply, at what time was the query sent, and was it radioed, telephoned or telegraphed?
Field H. Q. replying: No answer has been received yet, and a request was sent an hour ago to speed up the reply.
Please specify the time and means used in sending the first query. Will you hurry up, please?
Field H. Q. replying: The message was telegraphed and radioed to General Manikovsky—the time, just a minute....
The message was sent at 19.50.
Why wasn't a copy of the query sent to me, the People's Commissar for War[2]? From a personal conversation with me the C.-in-C. was aware that General Manikovsky's sole responsibility is continuity of technical operations in logistics and food supplies, and that I have been entrusted with the political direction of and responsibility for the War Ministry's activity.
Field H. Q. replying: I can say nothing at all about this.
We declare most emphatically that we place all the responsibility for the delay in this crucial state matter upon General Dukhonin and unconditionally demand: first, the immediate dispatch of truce envoys, and second, General Dukhonins personal presence on the line at 11 a.m. sharp tomorrow. Should the delay result in famine, disorganisation or defeat, or anarchic revolts, the full blame will fall upon you, and the soldiers will be duly informed of it.
Field H. Q. replying: I shall inform General Dukhonin of this.
When? Right away? We are waiting for Dukhonin.
Field H. Q. replying: I shall wake him up at once.
This is Acting C.-in-C. General Dukhonin.
The People's Commissars here; what's your answer?
I see from the tape I just got of your conversation with G. H. Q. that your message to me was sent before any decision was taken on the substance of the message signed by the People's Commissars Ulyanov-Lenin, Trotsky and Krylenko; in view of this I must have the following factual information: (1) Has the Council of People's Commissars received any reply to its message to the belligerent powers containing the Decree on Peace; (2) What was to be done with the Rumanian Army, which is a part of our front; (3) Was there any intention, of engaging in talks about a separate armistice and with whom, only with the Germans or with the Turks, or are we to negotiate a general armistice?
The text of the message sent to you is absolutely clear and to the point; it speaks of an immediate opening of armistice talks with all the belligerents, and we resolutely deny the right to delay this matter of state importance by any preliminary queries whatsoever; we insist that truce envoys should be dispatched immediately and that we receive progress reports every hour.
Field H. Q. replying: My questions are of a purely technical character and unless they are answered it will be impossible to negotiate.
You must be aware that many technical, rather detailed questions will arise during the talks, and we shall answer them as they arise or are raised by the enemy; that is why we demand once again, in the form of an ultimatum, that formal armistice negotiations be started unconditionally and without delay with all the belligerent countries, both Allied and those hostile to us. Please state your reply in precise terms.
I can understand only one thing, and it is that you cannot negotiate directly with the powers. It is even less possible for me to do so on your behalf. Only a central government supported by the army and the nation can have enough prestige and importance for the enemy to lend these negotiations the authority necessary to achieve results. I also believe that an early conclusion of a general peace is in Russia's interests.
Do you flatly refuse to give us a precise reply and carry out our orders?
I have given you a precise reply as to the reasons why I find it impossible to put your message into effect, and I repeat that the peace Russia needs can be obtained only by a central government. Dukhonin.
In the name of the Government of the Russian Republic, on behalf of the Council of People's Commissars, we dismiss you from your post for refusing to obey government orders and for conduct that entails untold hardships for the working people of all countries and especially the armies. We order you, on pain of responsibility under war-time laws, to continue your duties pending the arrival at Field Headquarters of a new Commander-in-Chief or a person empowered by him to take over from you. Ensign Krylenko is appointed Commander-in-Chief.
Lenin, Stalin, Krylenko.
[1] The circumstances which led to the conversation between members of the Soviet Government and Field H. Q. in Mogilev are set forth on pp. 312-13 and 316-17. Field HQ., which in that period was a centre where plans were being hatched for the overthrow of Soviet power, was occupied by revolutionary troops on November 20 (December 3).
[2] The conversation was conducted by the People's Commissar for War N.y. Krylenko.
Source: Marxist Internet Archive.


text:
A recent market research report added to repository of insightSLICE is an in-depth analysis of Global SOTM Antenna Industry. On the basis of historic growth analysis and current scenario of SOTM Antenna industry place, the report commits to offer actionable insights for the industry participants. Authenticated data presented in report is based on exhaustive primary and secondary research. Insights drawn from data serve as excellent tools that facilitate deeper understanding of multiple aspects of Global SOTM Antenna Market. This further helps user with their developmental strategy.
Download Free Research Sample with Industry Insights @ https://www.insightslice.com/request-sample/1212
Additionally, the report also highlights the challenges impeding domain growth and expansion strategies employed by leading companies in the SOTM Antenna industry. This study analyzes the company profiles of major vendors and also examines their winning strategies to give field marketing agencies, business owners, and stakeholders, a competitive advantage over other companies in the same space. The report provides statistics and information on market size, shares, and growth factors and also, analyzed the future potential of SOTM Antenna industry. The report includes a crisp summary of the global analysis. Detailed analysis includes statistics details about the domain, which reveal the current doamin status as well as future forecasts. Competition Analysis has been thoroughly described with the help of market composition, share analysis and company profiles.
The report profiles the following companies, which includes Gilat Satellite Networks, General Dynamics Corporation, Cobham Satcom, Iridium Communications, Aselsan A.S, ST Engineering, Thales Group, L3Harris Technologies, Honeywell International Inc, Hughes Network Systems, Viasat Inc, Leonardo DRS, Elbit Systems, Indra Sistemas, Ball Corporation, ND SatCom
This market study's competition analysis section covers prominent companies, their profiles, and initiatives also including expansions, partnerships, collaborations, and new product launches. The market participants are focusing their efforts on fortifying their positions and broadening their service offerings. This SOTM Antenna market study is the ideal guide for potential new entrants since it gives them expertise into market conditions, recent contracts, marketing campaigns, and value proposition. It goes on to characterize the business and offer analysis by type of product, geography, and organization size.
SOTM Antenna Industry Segmentation Overview: -
The market research report divides the SOTM Antenna market into applications, Type and Geography. This study covers details of the cost structure analysis and industry growth factor of the industry. This report also sheds light on the fastest growing segments of the industry and various factors that drives growth for such segments.
The report conducts a compressive study about potential growth opportunities, revenue share, and major challenges of five major regions namely Asia Pacific, Europe, North America, South America, and Middle East & Africa (MEA) of SOTM Antenna industry. A wide range of information is included in the report about the performance and potential domain destination in sub-regions and countries within a region.
COVID-19 Outbreak Impact Analysis:
The industry trends were analyzed in the context of COVID-19. insightSLICE examined the impact of COVID-19 upon the entire supply chain, based on inputs from industry participants. We analyze the COVID-19 impact on different regions and major nations and also highlight the impacts of COVID-19 on the future development and growth of the industry.
Customization Before Buying, Visit @ https://www.insightslice.com/request-customization/1212
Key Benefits for Stakeholders
-> The report provides a quantitative analysis for SOTM Antenna trends, estimations, and dynamics of the market size from 2023 to 2031 to identify the prevailing opportunities.
-> Porter's five forces analysis highlights the potency of buyers and suppliers to enable stakeholders to make profit-oriented business decisions and strengthen their supplier–buyer network.
-> In-depth analysis and the market size and segmentation assist to determine the prevailing trends for SOTM Antenna domain opportunities.
-> The major countries in each region are mapped according to their revenue contribution to the market.
-> The industry player positioning segment facilitates benchmarking and provides a clear understanding of the present position of the domain players in the SOTM Antenna industry.
The content of the study subjects, includes a total of 10 chapters:
- About the SOTM Antenna Industry (Industry Definition, Types, Main Market Activities)
- World Market Competition Landscape (Markets by regions, market revenue (M USD), market sales and growth rate 2021-2031, major players revenue by regions )
- World SOTM Antenna Market share (Production and revenue market share by regions and players)
- Supply Chain (Raw material analysis, raw material market analysis, production cost, manufacturing equipment's and end user analysis)
- Company Profiles (Company details, product information, revenue, profit analysis)
- Globalization & Trade (Business Locations, supply channels, marketing strategy etc.)
- Distributors and Customers (Major distributors and customers information by regions)
- Import, Export, Consumption and Consumption Value by Major Countries
- World SOTM Antenna Market Forecast through 2031 (Demand, price revenue Regions, Types, Applications )
- Key success factors and Market Overview
* Get 10% Discount on Your Direct Purchase *
You Can Purchase Complete Report@ https://www.insightslice.com/buy-now/1212
About Us:
We are a team of research analysts and management consultants who share a common vision to help individuals and organizations achieve their short-term and long-term strategic goals by expanding high-quality research services. insightSLICE was established to support mature companies, start-ups and non-profit organizations in various industries, including packaging, automotive, healthcare, chemicals and materials, industrial automation, consumer products, electronics and semiconductors, IT and telecommunications, and energy. Our internally experienced team of analysts has extensive experience in the research industry.
[email protected]
+1 (707) 736 6633
422 Lark Center # 1001, Santa Rosa,
California – 95403-1408, USA
Linkedin | Twitter


text:
pppd(1m) [opendarwin man page]
pppd(1M) System Administration Commands pppd(1M) NAME
pppd - point to point protocol daemon SYNOPSIS
pppd [tty_name] [speed] [options] DESCRIPTION
The point-to-point protocol (PPP) provides a method for transmitting datagrams over serial point-to-point links. PPP is composed of three components: a facility for encapsulating datagrams over serial links, an extensible link control protocol (LCP), and a family of network control protocols (NCP) for establishing and configuring different network-layer protocols. The encapsulation scheme is provided by driver code in the kernel. pppd provides the basic LCP authentication support and several NCPs for establishing and configuring the Internet Protocol (referred to as the IP Control Protocol or "IPCP") and IPv6 (IPV6CP). OPTIONS
The following sections discuss the pppd options: Options Files Options are taken from files and the command line. pppd reads options from the files /etc/ppp/options, $HOME/.ppprc and /etc/ppp/options.ttyname (in that order) before processing the options on the command line. (Command-line options are scanned for the ter- minal name before the options.ttyname file is read.) To form the name of the options.ttyname file, the initial /dev/ is removed from the terminal name, and any remaining forward slash characters (/) are replaced with dots. For example, with serial device /dev/cua/a, option file /etc/ppp/options.cua.a is read. An options file is parsed into a series of words that are delimited by whitespace. Whitespace can be included in a word by enclosing the word in double-quotes ("). A backslash () quotes the succeeding character. A hash (#) starts a comment, which continues until the end of the line. There is no restriction on using the file or call options within an options file. Frequently Used Options <tty_name> Communicate over the named device. The string /dev/ is prepended if necessary. If no device name is given, or if the name of the terminal connected to the standard input is given, pppd uses that terminal and does not fork to put itself in the background. A value for this option from a privileged source cannot be overridden by a non-privileged user. <speed> Set the baud rate to <speed> (a decimal number). The default is to leave the baud rate unchanged. This option is normally needed for dial-out only. asyncmap <map> Set the async character map to <map>. The map describes which control characters cannot be successfully received over the serial line. pppd asks the peer to send these characters as a 2-byte escape sequence. The argument is a 32 bit hex number, with each bit representing a character to escape. Bit 0(00000001) represents the character 0x00; bit 31(80000000) represents the character 0x1f or ^_. If multiple asyncmap options are given, the values are ORed together. If no asyncmap option is given, pppd attempts to negotiate a value of 0. If the peer agrees, this dis- ables escaping of the standard control characters. Use the default-asyncmap option to disable negotiation and escape all control characters. auth Require the peer to authenticate itself before allowing network packets to be sent or received. This option is the default if the system has a default route. If the auth or the noauth option is not specified, pppd allows the peer to use only those IP addresses to which the system does not already have a route. call name Read options from the file /etc/ppp/peers/name. This file may contain privileged options, including noauth, even if pppd is not being run by root. The name string may not begin with a slash ("/") or include consecutive periods ("..") as a pathname component. callback number Request a callback to the given telephone number using Microsoft CBCP. connect script Use the executable or shell command specified by script to set up the serial line. This script would typically use the chat(1M) program to dial the modem and start the remote PPP session. A value for this option originating from a privileged source cannot be overridden by a non-privileged user. crtscts Use hardware flow control, that is, RTS/CTS, to control the flow of data on the serial port. If the crtscts, nocrtscts, cdtrcts or nocdtrcts option is not provided, the hardware flow control setting for the serial port is left unchanged. Some serial ports lack a true RTS output and use this mode to implement unidirectional flow con- trol. The serial port suspends transmission when requested by the modem by means of CTS but cannot request the modem to stop sending to the computer. This mode allows the use of DTR as a modem control line. defaultroute Add a default route to the system routing tables when IPCP negotiation successfully completes, using the peer as the gateway. This entry is removed when the PPP connection is broken. This option is privileged if the nodefault- route option is specified. disconnect script Run the executable or shell command specified by script after pppd terminates the link. Typically, this script is used to command the modem to hang up if hardware modem control signals are not available. disconnect is not run if the modem has already hung up. A value for this option originating from a privileged source cannot be overridden by a non-privileged user. escape xx,yy,... Specifies that certain characters be escaped on transmission regardless of whether the peer requests them to be escaped with its async control character map. The characters to be escaped are specified as a list of hex numbers separated by commas. Note that almost any character can be specified for the escape option, unlike the asyncmap option which allows only control characters to be specified. Characters that cannot be escaped are those containing hex values 0x20 through 0x3f and 0x5e. file name Read options from file name. If this option is used on the command line or in $HOME/.ppprc, the file must be read- able by the user invoking pppd. See Options Files for a list of files that pppd always reads, regardless of the use of this option. init script Run the executable or shell command specified by script to initialize the serial line. This script would typically use the chat(1M) program to configure the modem to enable auto-answer. A value for this option from a privileged source cannot be overridden by a non-privileged user. lock Directs pppd to create a UUCP-style lock file for the serial device to ensure exclusive access to the device. mru n Set the Maximum Receive Unit (MRU) value to n. pppd asks the peer to send packets of no more than n bytes. Minimum MRU value is 128. Default MRU value is 1500. A value of 296 is recommended for slow links (40 bytes for TCP/IP header + 256 bytes of data). For IPv6, MRU must be at least 1280. mtu n Set the Maximum Transmit Unit (MTU) value to n. Unless the peer requests a smaller value via MRU negotiation, pppd requests the kernel networking code to send data packets of no more than n bytes through the PPP network interface. For IPv6, MTU must be at least 1280. passive Enables the "passive" option in the LCP. With this option, pppd attempts to initiate a connection; if no reply is received from the peer, pppd waits passively for a valid LCP packet instead of exiting, as it would without this option. Options <local_IP_address>:<remote_IP_address> Set the local and/or remote interface IP addresses. Either one may be omitted, but the colon is required. The IP addresses are speci- fied with a host name or in decimal dot notation, for example: :10.1.2.3. The default local address is the first IP address of the sys- tem unless the noipdefault option is provided. The remote address is obtained from the peer if not specified in any option. Thus, in simple cases, this option is not required. If a local and/or remote IP address is specified with this option, pppd will not accept a different value from the peer in the IPCP negotiation unless the ipcp-accept-local and/or ipcp-accept-remote options are given, respec- tively. allow-fcs fcs-type Set allowable FCS type(s) for data sent to the peer. The fcs-type is a comma-separated list of "crc16", "crc32", "null", or integers. By default, all known types are allowed. If this option is specified and the peer requests a type not listed, a LCP Configure-Nak is sent to request only the listed types. allow-ip address(es) Allow peers to use the given IP address or subnet without authenticating themselves. The parameter is parsed in the same manner as each element of the list of allowed IP addresses is parsed in the secrets files. See the Authentication section more more details. bsdcomp nr,nt Request that the peer compress packets that it sends using the BSD-Compress scheme, with a maximum code size of nr bits, and agree to compress packets sent to the peer with a maximum code size of nt bits. If nt is not specified, it defaults to the value given for nr. Values in the range 9 to 15 may be used for nr and nt; larger values provide better compression but consume more kernel memory for com- pression dictionaries. Alternatively, a value of 0 for nr or nt disables compression in the corresponding direction. Use nobsdcomp or bsdcomp 0 to disable BSD-Compress compression entirely. If this option is read from a privileged source, a nonprivileged user may not specify a code size larger than the value from the privileged source. cdtrcts Use a non-standard hardware flow control such as DTR/CTS to control the flow of data on the serial port. If the crtscts, nocrtscts, cdtrcts or nocdtrcts option is not specified, the hardware flow control setting for the serial port is left unchanged. Some serial ports lack a true RTS output. Such serial ports use this mode to implement true bi-directional flow control. Note that this flow con- trol mode does not permit using DTR as a modem control line. chap-interval n If this option is given, pppd will rechallenge the peer every n seconds. chap-max-challenge n Set the maximum number of CHAP challenge transmissions to n (default 10). chap-restart n Set the CHAP restart interval (retransmission timeout for challenges) to n seconds. The default is 3. connect-delay n Wait for up to n milliseconds after the connect script finishes for a valid PPP packet from the peer. When the wait period elapses or when a valid PPP packet is received from the peer, pppd begins negotiation by sending its first LCP packet. The default value is 1000 (1 second). A wait period applies only if the connect or pty option is used. datarate n Set maximum data rate to n (in bytes per second) when using the pty, notty, record, or socket options. debug Enables connection debugging facilities. If this option is given, pppd logs the contents of all control packets sent or received in a readable form. The packets are logged through syslog with facility daemon and level debug. This information can be directed to a file by configuring /etc/syslog.conf appropriately. default-asyncmap Disable asyncmap negotiation, forcing all control characters to be escaped for both the transmit and the receive direction. default-fcs Disable FCS Alternatives negotiation entirely. By default, no FCS Alternatives option is sent to the peer, but the option is accepted. If this option is specified by the peer, then LCP Configure-Reject is sent. default-mru Disable MRU [Maximum Receive Unit] negotiation. With this option, pppd uses the default MRU value of 1500 bytes for the transmit and receive directions. deflate nr,nt,e Request that the peer compress packets that it sends, using the deflate scheme, with a maximum window size of 2**nr bytes, and agree to compress packets sent to the peer with a maximum window size of 2**nt bytes and effort level of e (1 to 9). If nt is not specified, it defaults to the value given for nr. If e is not specified, it defaults to 6. Values in the range 9 to 15 may be used for nr and nt; larger values provide better compression but consume more kernel memory for compression dictionaries. (Value 8 is not permitted due to a zlib bug.) Alternatively, a value of 0 for nr or nt disables compression in the corresponding direction. Use nodeflate or deflate 0 to disable deflate compression entirely. (Note: pppd requests deflate compression in preference to BSD-Compress if the peer can do either.) If this option is read from a privileged source, a nonprivileged user may not specify a code size larger than the value from the privileged source. demand Initiate the link only on demand, that is, when data traffic is present. With this option, the remote IP address must be specified by the user on the command line or in an options file. pppd initially configures and enables the interface for IP traffic without connect- ing to the peer. When traffic is available, pppd connects to the peer and performs negotiation, authentication and other actions. When completed, pppd passes data packets across the link. The demand option implies the persist option. If this behavior is not desired, use the nopersist option after the demand option. The idle and holdoff options can be used in conjunction with the demand option. domain d Append the domain name d to the local host name for authentication purposes. For example, if gethostname() returns the name porsche, but the fully qualified domain name is porsche.Quotron.COM, you could specify domain Quotron.COM. With this configuration, pppd uses the name porsche.Quotron.COM for accessing secrets in the secrets file and as the default name when authenticating to the peer. This option is privileged. endpoint endpoint-value Set the endpoint discriminator (normally used for RFC 1990 Multilink PPP operation). The endpoint-value consists of a class identifier and a class-dependent value. The class identifier is one of "null," "local," "IP," "MAC," "magic," "phone," or a decimal integer. If present, the class-dependent value is separated from the identifier by a colon (":") or period (".") . This value may be a standard dotted-decimal IP address for class "IP," an optionally colon-or-dot separated hex Ethernet address for class "MAC" (must have 6 num- bers), or an arbitrary string of bytes specified in hex with optional colon or dot separators between bytes. Although this option is available, this implementation does not support multilink. fcs fcs-type Set FCS type(s) desired for data sent by the peer. The fcs-type is a comma-separated list of crc16, crc32, null, or integers. By default, an FCS Alternatives option is not specified, and the medium-dependent FCS type is used. If this option is specified and the peer sends an LCP Configure-Nak, only the listed types are used. If none are in common, the FCS Alternatives option is omitted from the next LCP Configure-Request to drop back to the default. hide-password When logging the contents of PAP packets, this option causes pppd to exclude the password string from the log. This is the default. holdoff n Specifies how many seconds to wait before re-initiating the link after it terminates. This option is effective only if the persist or demand option is used. The holdoff period is not applied if the link is terminated because it was idle. ident string Set the LCP Identification string. The default value is a version string similar to that displayed by the --version option. idle n Specifies that pppd must disconnect if the link is idle for n seconds. The link is idle when no data packets (i.e. IP packets) are being sent or received. Do not use this option with the persist option but without the demand option. ipcp-accept-local With this option, pppd accepts the peer's idea of the local IP address, even if the local IP address is specified in an option. ipcp-accept-remote With this option, pppd accepts the peer's idea of its remote IP address, even if the remote IP address is specified in an option. ipcp-max-configure n Set the maximum number of IPCP Configure-Request transmissions to n (default 10). ipcp-max-failure n Set the maximum number of IPCP Configure-NAKs sent before sending Configure-Rejects instead to n (default 10). ipcp-max-terminate n Set the maximum number of IPCP terminate-request transmissions to n (default 3). ipcp-restart n Set the IPCP restart interval (retransmission timeout) to n seconds (default 3). ipparam string Provides an extra parameter to the ip-up and ip-down scripts. When this option is given, the string supplied is given as the sixth parameter to those scripts. See the Scripts section. ipv6 <local_interface_identifier>,<remote_interface_identifier> Set the local and/or remote 64-bit interface identifier. Either one may be omitted. The identifier must be specified in standard ASCII notation of IPv6 addresses (for example: ::dead:beef). If the ipv6cp-use-ipaddr option is given, the local and remote identifiers are derived from the respective IPv4 addresses (see above). The ipv6cp-use-persistent option can be used instead of the ipv6 <local>,<remote> option. ipv6cp-accept-local Accept peer's interface identifier for the local link identifier. ipv6cp-max-configure n Set the maximum number of IPv6CP Configure-Request transmissions to n (default 10). ipv6cp-max-failure n Set the maximum number of IPv6CP Configure-NAKs sent before sending Configure-Rejects instead to n (default 10). ipv6cp-max-terminate n Set the maximum number of IPv6CP terminate-request transmissions to n (default 3). ipv6cp-restart n Set the IPv6CP restart interval (retransmission timeout) to n seconds (default 3). ipv6cp-use-ipaddr If either the local or remote IPv6 address is unspecified, use the corresponding configured IPv4 address as a default interface identi- fier. (This option uses the configured addresses, not the negotiated addresses. Do not use it with ipcp-accept-local if the local IPv6 identifier is unspecified or with ipcp-accept-remote if the remote IPv6 identifier is unspecified.) ipv6cp-use-persistent Use uniquely-available persistent value for link local address. kdebug n Enable debugging code in the kernel-level PPP driver. Argument n is the sum of the following values: 1 to enable general debug mes- sages, 2 to request that contents of received packets be printed, and 4 to request contents of transmitted packets be printed. Messages printed by the kernel are logged by syslogd(1M) to a file directed in the /etc/syslog.conf configuration file. Do not use the kdebug option to debug failed links. Use the debug option instead. lcp-echo-failure n If this option is given, pppd presumes the peer to be dead if n LCP Echo-Requests are sent without receiving a valid LCP Echo-Reply. If this happens, pppd terminates the connection. This option requires a non-zero value for the lcp-echo-interval parameter. This option enables pppd to terminate after the physical connection is broken (for example, if the modem has hung up) in situations where no hard- ware modem control lines are available. lcp-echo-interval n If this option is given, pppd sends an LCP Echo-Request frame to the peer every n seconds. Normally the peer responds to the Echo- Request by sending an Echo-Reply. This option can be used with the lcp-echo-failure option to detect that the peer is no longer con- nected. lcp-max-configure n Set the maximum number of LCP Configure-Request transmissions to n (default 10). lcp-max-failure n Set the maximum number of LCP Configure-NAKs sent before starting to send Configure-Rejects instead to n (default 10). lcp-max-terminate n Set the maximum number of LCP Terminate-Request transmissions to n (default 3). lcp-restart n Set the LCP restart interval (retransmission timeout) to n seconds (default 3). linkname name Sets the logical name of the link to name. pppd creates a file named ppp-name.pid in /var/run containing its process ID. This is useful in determining which instance of pppd is responsible for the link to a given peer system. This is a privileged option. local Do not use modem control lines. With this option, pppd ignores the state of the CD (Carrier Detect) signal from the modem and does not change the state of the DTR (Data Terminal Ready) signal. logfd n Send log messages to file descriptor n. pppd sends log messages to (at most) one file or file descriptor (as well as sending the log messages to syslog), so this option and the logfile option are mutually exclusive. By default pppd sends log messages to stdout (file descriptor 1) unless the serial port is open on stdout. logfile filename Append log messages to the file filename (and send the log messages to syslog). The file is opened in append mode with the privileges of the user who invoked pppd. login Use the system password database for authenticating the peer using PAP, and record the user in the system wtmp file. Note that the peer must have an entry in the /etc/ppp/pap-secrets file and the system password database to be allowed access. maxconnect n Terminate the connection after it has been available for network traffic for n seconds (that is, n seconds after the first network con- trol protocol starts). An LCP Time-Remaining message is sent when the first NCP starts, and again when 5, 2, and 0.5 minutes are remaining. maxfail n Terminate after n consecutive failed connection attempts. A value of 0 means no limit. The default value is 10. modem Use the modem control lines. This option is the default. With this option, pppd waits for the CD (Carrier Detect) signal from the modem to be asserted when opening the serial device (unless a connect script is specified), and drops the DTR (Data Terminal Ready) signal briefly when the connection is terminated and before executing the connect script. ms-dns <addr> If pppd is acting as a server for Microsoft Windows clients, this option allows pppd to supply one or two DNS (Domain Name Server) addresses to the clients. The first instance of this option specifies the primary DNS address; the second instance (if given) specifies the secondary DNS address. If the first instance specifies a name that resolves to multiple IP addresses, then the first two addresses are used. (This option is present in some older versions of pppd under the name dns-addr.) ms-lanman If pppd connects as a client to a Microsoft server and uses MS-CHAPv1 for authentication, this option selects the LAN Manager password style instead of Microsoft NT. ms-wins <addr> If pppd acts as a server for Microsoft Windows or Samba clients, this option allows pppd to supply one or two WINS (Windows Internet Name Services) server addresses to the clients. The first instance of this option specifies the primary WINS address; the second instance (if given) specifies the secondary WINS address. As with ms-dns, if the name specified resolves to multiple IP addresses, then the first two will be taken as primary and secondary. name name Set the name of the local system for authentication purposes to name. This is a privileged option. With this option, pppd uses lines in the secrets files that have name as the second field to look for a secret to use in authenticating the peer. In addition, unless over- ridden with the user option, name is used as the name to send to the peer when authenticating the local system. (Note that pppd does not append the domain name to name.) no-accm-test Disable use of asyncmap (ACCM) checking using LCP Echo-Request messages. If the lcp-echo-failure is used on an asynchronous line, pppd includes all control characters in the first n LCP Echo-Request messages. If the asyncmap is set incorrectly, the link drops rather than continue operation with random failures. This option disables that feature. noaccomp Disable HDLC Address/Control compression in both directions (send and receive). noauth Do not require the peer to authenticate itself. This option is privileged. nobsdcomp Disables BSD-Compress compression; pppd will not request or agree to compress packets using the BSD-Compress scheme. This option is not necessary if noccp is specified. noccp Disable CCP (Compression Control Protocol) negotiation. This option should only be required if the peer has bugs or becomes confused by requests from pppd for CCP negotiation. If CCP is disabled, then BSD and deflate compression do not need to be separately disabled. nocrtscts Disable hardware flow control (i.e. RTS/CTS) on the serial port. If the crtscts, nocrtscts, cdtrcts or nocdtrcts options are not given, the hardware flow control setting for the serial port is left unchanged. nocdtrcts This option is a synonym for nocrtscts. Either option will disable both forms of hardware flow control. nodefaultroute Disable the defaultroute option. You can prevent non-root users from creating default routes with pppd by placing this option in the /etc/ppp/options file. nodeflate Disables deflate compression; pppd will not request or agree to compress packets using the deflate scheme. This option is not necessary if noccp is specified. nodeflatedraft Do not use Internet Draft (incorrectly assigned) algorithm number for deflate compression. This option is not necessary if noccp is specified. nodetach Do not detach from the controlling terminal. Without this option, pppd forks to become a background process if a serial device other than the terminal on the standard input is specified. noendpoint Do not send or accept the Multilink Endpoint Discriminator option. noident Disable use of LCP Identification. LCP Identification messages will not be sent to the peer, but received messages will be logged. (Specify this option twice to completely disable LCP Identification. In this case, pppd sends LCP Code-Reject in response to received LCP Identification messages.) noip Disable IPCP negotiation and IP communication. Use this option only if the peer has bugs or becomes confused by requests from pppd for IPCP negotiation. noipv6 Disable IPv6CP negotiation and IPv6 communication. IPv6 is not enabled by default. noipdefault Disables the default behavior when no local IP address is specified, which is to determine (if possible) the local IP address from the hostname. With this option, the peer must supply the local IP address during IPCP negotiation (unless it specified explicitly on the command line or in an options file). nolog Do not send log messages to a file or file descriptor. This option cancels the logfd and logfile options. nologfd acts as an alias for this option. nomagic Disable magic number negotiation. With this option, pppd cannot detect a looped-back line. Use this option only if the peer has bugs. Do not use this option to work around the "Serial line is looped back" error message. nopam This privileged option disables use of pluggable authentication modules. If this option is specified, pppd reverts to standard authen- tication mechanisms. The default is not to use PAM. nopcomp Disable protocol field compression negotiation in the receive and the transmit direction. nopersist Exit once a connection has been made and terminated. This is the default unless the persist or demand option is specified. noplink Cause pppd to use I_LINK instead of I_PLINK. This is the default. When I_LINK is used, the system cleans up terminated interfaces (even when SIGKILL is used) but does not allow ifconfig(1M) to unplumb PPP streams or insert or remove modules dynamically. Use the plink option if ifconfig(1M) modinsert, modremove or unplumb support is needed. nopredictor1 Do not accept or agree to Predictor-1 compression. (This option is accepted for compatibility. The implementation does not support Pre- dictor-1 compression.) noproxyarp Disable the proxyarp option. If you want to prevent users from creating proxy ARP entries with pppd, place this option in the /etc/ppp/options file. notty Normally, pppd requires a terminal device. With this option, pppd allocates itself a pseudo-tty master/slave pair and uses the slave as its terminal device. pppd creates a child process to act as a character shunt to transfer characters between the pseudo-tty master and its standard input and output. Thus, pppd transmits characters on its standard output and receives characters on its standard input even if they are not terminal devices. This option increases the latency and CPU overhead of transferring data over the ppp interface as all of the characters sent and received must flow through the character shunt process. An explicit device name may not be given if this option is used. novj Disable Van Jacobson style TCP/IP header compression in both the transmit and the receive direction. novjccomp Disable the connection-ID compression option in Van Jacobson style TCP/IP header compression. With this option, pppd does not omit the connection-ID byte from Van Jacobson compressed TCP/IP headers, nor does it ask the peer to do so. This option is unnecessary if novj is specified. pam This privileged option enables use of PAM. If this is specified, pppd uses the pam(3PAM) framework for user authentication with a ser- vice name of "ppp" if the login option and PAP authentication are used. The default is not to use PAM. papcrypt Indicates that pppd should not accept a password which, before encryption, is identical to the secret from the /etc/ppp/pap-secrets file. Use this option if the secrets in the pap-secrets file are in crypt(3C) format. pap-max-authreq n Set the maximum number of PAP authenticate-request transmissions to n (default 10). pap-restart n Set the PAP restart interval (retransmission timeout) to n seconds (default 3). pap-timeout n Set the maximum time that pppd waits for the peer to authenticate itself with PAP to n seconds (0= no limit). The default is 30 sec- onds. password string Password string for authentication to the peer. persist Do not exit after a connection is terminated; instead try to reopen the connection. plink Cause pppd to use I_PLINK instead of I_LINK. The default is to use I_LINK, which cleans up terminated interface (even if SIGKILL is used), but does not allow ifconfig(1M) to unplumb PPP streams or insert or remove modules dynamically. Use this option if ifconfig(1M) modinsert/modremove/unplumb support is needed. See also the plumbed option. plugin filename Load the shared library object file filename as a plugin. This is a privileged option. Unless the filename specifies an explicit path, /etc/ppp/plugins and /usr/lib/inet/ppp will be searched for the object to load in that order. plumbed This option indicates that pppd should find a plumbed interface and use that for the session. If IPv4 addresses or IPv6 interface IDs or link MTU are otherwise unspecified, they are copied from the interface selected. This mode mimics some of the functionality of the older aspppd implementation and may be helpful when pppd is used with external applications that use ifconfig(1M). pppmux timer Enable PPP Multiplexing option negotiation and set transmit multiplexing timeout to timer microseconds. privgroup group-name Allows members of group group-name to use privileged options. This is a privileged option. Because there is no guarantee that members of group-name cannot use pppd to become root themselves, you should be careful using this option. Consider it equivalent to putting the members of group-name in the root or sys group. proxyarp Add an entry to the system's Address Resolution Protocol (ARP) table with the IP address of the peer and the Ethernet address of this system. When you use this option, the peer appears to other systems to be on the local Ethernet. The remote address on the PPP link must be in the same subnet as assigned to an Ethernet interface. pty script Specifies that the command script, and not a specific terminal device is used for serial communication. pppd allocates itself a pseudo- tty master/slave pair and uses the slave as its terminal device. script runs in a child process with the pseudo-tty master as its stan- dard input and output. An explicit device name may not be given if this option is used. (Note: if the record option is used in conjunc- tion with the pty option, the child process will have pipes on its standard input and output.) receive-all With this option, pppd accepts all control characters from the peer, including those marked in the receive asyncmap. Without this option, pppd discards those characters as specified in RFC 1662. This option should be used only if the peer has bugs, as is often found with dial-back implementations. record filename Directs pppd to record all characters sent and received to a file named filename. filename is opened in append mode, using the user's user-ID and permissions. Because this option uses a pseudo-tty and a process to transfer characters between the pseudo-tty and the real serial device, it increases the latency and CPU overhead of transferring data over the PPP interface. Characters are stored in a tagged format with timestamps that can be displayed in readable form using the pppdump(1M) program. This option is generally used when debug- ging the kernel portion of pppd (especially CCP compression algorithms) and not for debugging link configuration problems. See the debug option. remotename name Set the assumed name of the remote system for authentication purposes to name. Microsoft WindowsNT does not provide a system name in its CHAP Challenge messages, and this option is often used to work around this problem. refuse-chap With this option, pppd will not agree to authenticate itself to the peer using standard Challenge Handshake Authentication Protocol (CHAP). (MS-CHAP is not affected.) refuse-mschap Do not agree to authenticate to peer with MS-CHAPv1. If this option is specified, requests for MS-CHAPv1 authentication from the peer are declined with LCP Configure-Nak. That option does not disable any other form of CHAP. refuse-mschapv2 Do not agree to authenticate to peer with MS-CHAPv2. If specified, this option requests that MS-CHAPv2 authentication from the peer be declined with LCP Configure-Nak. That option does not disable any other form of CHAP. refuse-pap With this option, pppd will not agree to authenticate itself to the peer using Password Authentication Protocol (PAP). require-chap Require the peer to authenticate itself using standard CHAP authentication. MS-CHAP is not affected. require-mschap Require the peer to authenticate itself using MS-CHAPv1 authentication. require-mschapv2 Require the peer to authenticate itself using MS-CHAPv2 authentication. require-pap Require the peer to authenticate itself using PAP authentication. show-password When logging contents of PAP packets, this option causes pppd to show the password string in the log message. silent With this option, pppd will not transmit LCP packets to initiate a connection until a valid LCP packet is received from the peer. This is like the "passive" option with older versions of pppd and is retained for compatibility, but the current passive option is pre- ferred. small-accm-test When checking the asyncmap (ACCM) setting, pppd uses all 256 possible values by default. See no-accm-test. This option restricts the test so that only the 32 values affected by standard ACCM negotiation are tested. This option is useful on very slow links. socket host:port Connect to given host and port using TCP and run PPP over this connection. sync Use synchronous HDLC serial encoding instead of asynchronous. The device used by pppd with this option must have sync support. Cur- rently supports zs, se, and hsi drivers. unit n Set PPP interface unit number to n, if possible. updetach With this option, pppd detaches from its controlling terminal after establishing the PPP connection. When this is specified, messages sent to stderr by the connect script, usually chat(1M), and debugging messages from the debug option are directed to pppd's standard output. usehostname Enforce the use of the hostname with domain name appended, if given, as the name of the local system for authentication purposes. This overrides the name option. Because the name option is privileged, this option is normally not needed. usepeerdns Ask the peer for up to two DNS server addresses. Addresses supplied by the peer, if any, are passed to the /etc/ppp/ip-up script in the environment variables DNS1 and DNS2. In addition, pppd creates an /etc/ppp/resolv.conf file containing one or two nameserver lines with the address(es) supplied by the peer. user name Sets the name used for authenticating the local system to the peer to name. vj-max-slots n Sets the number of connection slots to be used by the Van Jacobson TCP/IP header compression and decompression code to n, which must be between 2 and 16 (inclusive). welcome script Run the executable or shell command specified by script before initiating PPP negotiation, after the connect script, if any, has com- pleted. A value for this option from a privileged source cannot be overridden by a non-privileged user. xonxoff Use software flow control, that is, XON/XOFF, to control the flow of data on the serial port. Obsolete Options The following options are obsolete: +ua name Read a PAP user name and password from the file name. This file must have two lines for name and password. Name and password are sent to the peer when the peer requests PAP authentication. +ipv6 Enable IPv6 and IPv6CP without specifying interface identifiers. --version Show version number and exit. --help Show brief help message and exit. EXTENDED DESCRIPTION
The following sections discuss miscellaneous features of pppd: Security pppd allows system administrators to provide legitimate users with PPP access to a server machine without fear of compromising the security of the server or the network it runs on. Access control is provided by restricting IP addresses the peer may use based on its authenticated identity (if any), and through restrictions on options a non-privileged user may use. Options that permit potentially insecure configura- tions are privileged. Privileged options are accepted only in files that are under the control of the system administrator or when pppd is being run by root. By default, pppd allows an unauthenticated peer to use a given IP address only if the system does not already have a route to that IP address. For example, a system with a permanent connection to the wider Internet will normally have a default route, meaning all peers must authenticate themselves to set up a connection. On such a system, the auth option is the default. Conversely, a system with a PPP link that comprises the only connection to the Internet probably does not possess a default route, so the peer can use virtually any IP address with- out authenticating itself. Security-sensitive options are privileged and cannot be accessed by a non-privileged user running pppd, either on the command line, in the user's $HOME/.ppprc file, or in an options file read using the file option. Privileged options may be used in /etc/ppp/options file or in an options file read using the call option. If pppd is run by the root user, privileged options can be used without restriction. If the /etc/ppp/options file does not exist, then only root may invoke pppd. The /etc/ppp/options file must be created (but may be empty) to allow ordinary non-root users to access pppd. When opening the device, pppd uses the invoking user's user ID or the root UID (that is, 0), depending if the device name was specified by the user or the system administrator. If the device name comes from a privileged source, that is, /etc/ppp/options or an options file read using the call option, pppd uses full root privileges when opening the device. Thus, by creating an appropriate file under /etc/ppp/peers, the system administrator can allow users to establish a PPP connection via a device that they would not normally have access to. Oth- erwise pppd uses the invoking user's real UID when opening the device. Authentication During the authentication process, one peer convinces the other of its identity by sending its name and some secret information to the other. During authentication, the first peer becomes the "client" and the second becomes the "server." Authentication names can (but are not required to) correspond to the peer's Internet hostnames. pppd supports four authentication protocols: the Password Authentication Protocol (PAP) and three forms of the Challenge Handshake Authen- tication Protocol (CHAP). With the PAP protocol, the client sends its name and a cleartext password to the server to authenticate itself. With CHAP, the server initiates the authentication exchange by sending a challenge to the client who must respond with its name and a hash value derived from the shared secret and the challenge. The PPP protocol is symmetrical, meaning that each peer may be required to authenticate itself to the other. Different authentication pro- tocols and names can be used for each exchange. By default, pppd authenticates if requested and does not require authentication from the peer. However, pppd does not authenticate itself with a specific protocol if it has no secrets that can do so. pppd stores authentication secrets in the /etc/ppp/pap-secrets (for PAP), and /etc/ppp/chap-secrets (for CHAP) files. Both files use the same format. pppd uses secrets files to authenticate itself to other systems and to authenticate other systems to itself. Secrets files contain one secret per line. Secrets are specific to a particular combination of client and server and can only be used by that client to authenticate itself to that server. Each line in a secrets file has a minimum of three fields that contain the client and server names followed by the secret. Often, these three fields are followed by IP addresses that are used by clients to connect to a server. A secrets file is parsed into words, with client name, server name and secrets fields allocated one word each. Embedded spaces or other special characters within a word must be quoted or escaped. Case is significant in all three fields. A secret beginning with an at sign ("@") is followed by the name of a file containing the secret. An asterisk (*) as the client or server name matches any name. When choosing a match, pppd selects the one with the fewest wildcards. Succeeding words on a line are interpreted by pppd as acceptable IP addresses for that client. IP Addresses are disallowed if they appear in lines that contain only three words or lines whose first word begins with a hyphen ("-"). To allow any address, use "*". An address starting with an exclamation point ("!") indicates that the specified address is not acceptable. An address may be followed by "/" and a number n to indicate a whole subnet (all addresses that have the same value in the most significant n bits). In this form, the address may be followed by a plus sign ("+") to indicate that one address from the subnet is authorized, based on the ppp network interface unit number in use. In this case, the host part of the address is set to the unit number, plus one. When authenticating the peer, pppd chooses a secret with the peer's name in the first field of the secrets file and the name of the local system in the second field. The local system name defaults to the hostname, with the domain name appended if the domain option is used. The default can be overridden with the name option unless the usehostname option is used. When authenticating to the peer, pppd first determines the name it will use to identify itself to the peer. This name is specified with the user option. If the user option is not used, the name defaults to the host name of the local system. pppd then selects a secret from the secrets file by searching for an entry with a local name in the first field and the peer's name in the second field. pppd will know the name of the peer if standard CHAP authentication is used because the peer will have sent it in the Challenge packet. However, if MS-CHAP or PAP is being used, pppd must determine the peer's name from the options specified by the user. The user can specify the peer's name directly with the remotename option. Otherwise, if the remote IP address was specified by a name, rather than in numeric form, that name will be used as the peer's name. If that fails, pppd uses the null string as the peer's name. When authenticating the peer with PAP, the supplied password is compared with data in the secrets file. If the password and secret do not match, the password is encrypted using crypt() and checked against the secret again. If the papcrypt option is given, the first unen- crypted comparison is omitted for better security, and entries must thus be in encrypted crypt(3C) form. If the login option is specified, the username and password are also checked against the system password database. This allows you to set up the pap-secrets file to enable PPP access only to certain users, and to restrict the set of IP addresses available to users. Typically, when using the login option, the secret in /etc/ppp/pap-secrets would be "", which matches any password supplied by the peer. This makes having the same secret in two places unnecessary. When login is used, the pam option enables access control through pam(3PAM). Authentication must be completed before IPCP (or other network protocol) can be started. If the peer is required to authenticate itself and fails, pppd closes LCP and terminates the link. If IPCP negotiates an unacceptable IP address for the remote host, IPCP is closed. IP pack- ets are sent or received only when IPCP is open. To allow hosts that cannot authenticate themselves to connect and use one of a restricted set of IP addresses, add a line to the pap- secrets file specifying the empty string for the client name and secret. Additional pppd options for a given peer may be specified by placing them at the end of the secrets entry, separated by two dashes (--). For example peername servername secret ip-address -- novj Routing When IPCP negotiation is complete, pppd informs the kernel of the local and remote IP addresses for the PPP interface and creates a host route to the remote end of the link that enables peers to exchange IP packets. Communication with other machines generally requires further modification to routing tables and/or Address Resolution Protocol (ARP) tables. In most cases the defaultroute and/or proxyarp options are sufficient for this, but further intervention may be necessary. If further intervention is required, use the /etc/ppp/ip-up script or a routing protocol daemon. To add a default route through the remote host, use the defaultroute option. This option is typically used for "client" systems; that is, end-nodes that use the PPP link for access to the general Internet. In some cases it is desirable to use proxy ARP, for example on a server machine connected to a LAN, to allow other hosts to communicate with the remote host. proxyarp instructs pppd to look for a network interface on the same subnet as the remote host. That is, an interface supporting broadcast and ARP that is not a point-to-point or loopback interface and that is currently up. If found, pppd creates a perma- nent, published ARP entry with the IP address of the remote host and the hardware address of the network interface. When the demand option is used, the interface IP addresses are already set at the time when IPCP comes up. If pppd cannot negotiate the same addresses it used to configure the interface, it changes the interface IP addresses to the negotiated addresses. This may disrupt existing connections. Using demand dialing with peers that perform dynamic IP address assignment is not recommended. Scripts pppd invokes scripts at various stages during processing that are used to perform site-specific ancillary processing. These scripts may be shell scripts or executable programs. pppd does not wait for the scripts to finish. The scripts are executed as root (with the real and effective user-id set to 0), enabling them to update routing tables, run privileged daemons, or perform other tasks. Be sure that the con- tents of these scripts do not compromise your system's security. pppd runs the scripts with standard input, output and error redirected to /dev/null, and with an environment that is empty except for some environment variables that give information about the link. The pppd envi- ronment variables are: DEVICE Name of the serial tty device. IFNAME Name of the network interface. IPLOCAL IP address for the link's local end. This is set only when IPCP has started. IPREMOTE IP address for the link's remote end. This is set only when IPCP has started. PEERNAME Authenticated name of the peer. This is set only if the peer authenticates itself. SPEED Baud rate of the tty device. ORIG_UID Real user-id of user who invoked pppd. PPPLOGNAME Username of the real user-id who invoked pppd. This is always set. pppd also sets the following variables for the ip-down and auth-down scripts: CONNECT_TIME Number of seconds between the start of PPP negotiation and connection termination. BYTES_SENT Number of bytes sent at the level of the serial port during the connection. BYTES_RCVD Number of bytes received at the level of the serial port during the connection. LINKNAME Logical name of the link, set with the linkname option. If they exist, pppd invokes the following scripts. It is not an error if they do not exist. /etc/ppp/auth-up Program or script executed after the remote system successfully authenticates itself. It is executed with five com- mand-line arguments: interface-name peer-name user-name tty-device speed. Note that this script is not executed if the peer does not authenticate itself, for example, when the noauth option is used. /etc/ppp/auth-down Program or script executed when the link goes down if /etc/ppp/auth-up was previously executed. It is executed in the same manner with the same parameters as /etc/ppp/auth-up. /etc/ppp/ip-up A program or script that is executed when the link is available for sending and receiving IP packets (that is, IPCP has come up). It is executed with six command-line arguments: interface-name tty-device speed local-IP-address remote-IP-address ipparam. /etc/ppp/ip-down A program or script which is executed when the link is no longer available for sending and receiving IP packets. This script can be used for undoing the effects of the /etc/ppp/ip-up script. It is invoked in the same manner and with the same parameters as the ip-up script. /etc/ppp/ipv6-up Similar to /etc/ppp/ip-up, except that it is executed when the link is available for sending and receiving IPv6 packets. Executed with six command-line arguments: interface-name tty-device speed local-link-local-address remote- link-local-address ipparam. /etc/ppp/ipv6-down Similar to /etc/ppp/ip-down, but executed when IPv6 packets can no longer be transmitted on the link. Executed with the same parameters as the ipv6-up script. EXAMPLES
Example 1: Using the auth Option The following examples assume that the /etc/ppp/options file contains the auth option. pppd is commonly used to dial out to an ISP. You can do this using the "pppd call isp" command where the /etc/ppp/peers/isp file is set up to contain a line similar to the following: cua/a 19200 crtscts connect '/usr/bin/chat -f /etc/ppp/chat-isp' noauth For this example, chat(1M) is used to dial the ISP's modem and process any login sequence required. The /etc/ppp/chat-isp file is used by chat and could contain the following: ABORT "NO CARRIER" ABORT "NO DIALTONE" ABORT "ERROR" ABORT "NO ANSWER" ABORT "BUSY" ABORT "Username/Password Incorrect" "" "at" OK "at&f&d2&c1" OK "atdt2468135" "name:" "^Umyuserid" "word:" "qmypassword" "ispts" "q^Uppp" "~-^Uppp-~" See the chat(1M) man page for details of chat scripts. Example 2: Using pppd with proxyarp pppd can also provide a dial-in ppp service for users. If the users already have login accounts, the simplest way to set up the ppp service is to let the users log in to their accounts and run pppd as shown in the following example: example% pppd proxyarp Example 3: Providing a User with Access to PPP Facilities To provide a user with access to the PPP facilities, allocate an IP address for the user's machine, create an entry in /etc/ppp/pap-secrets or /etc/ppp/chap-secrets. This enables the user's machine to authenticate itself. For example, to enable user "Joe" using machine "joespc" to dial in to machine "server" and use the IP address "joespc.my.net," add the following entry to the /etc/ppp/pap-secrets or /etc/ppp/chap-secrets files: joespc server "joe's secret" joespc.my.net Alternatively, you can create another username, for example "ppp," whose login shell is /usr/bin/pppd and whose home directory is /etc/ppp. If you run pppd this way, add the options to the /etc/ppp/.ppprc file. If your serial connection is complex, it may be useful to escape such control characters as XON (^Q) and XOFF (^S), using asyncmap a0000. If the path includes a telnet, escape ^] (asyncmap 200a0000). If the path includes a rlogin command, add escape ff option to the options, because rlogin removes the window-size-change sequence [0xff, 0xff, 0x73, 0x73, followed by any 8 bytes] from the stream. EXIT STATUS
The pppd exit status indicates errors or specifies why a link was terminated. Exit status values are: 0 pppd has detached or the connection was successfully established and terminated at the peer's request. 1 An immediately fatal error occurred. For example, an essential system call failed. 2 An error was detected in the options given. For example, two mutually exclusive options were used, or /etc/ppp/options is missing and the user is not root. 3 pppd is not setuid-root and the invoking user is not root. 4 The kernel does not support PPP. For example, the PPP kernel driver is not included or cannot be loaded. 5 pppd terminated because it was sent a SIGINT, SIGTERM or SIGHUP signal. 6 The serial port could not be locked. 7 The serial port could not be opened. 8 The connect script failed and returned a non-zero exit status. 9 The command specified as the argument to the pty option could not be run. 10 The PPP negotiation failed because no network protocols were able to run. 11 The peer system failed or refused to authenticate itself. 12 The link was established successfully, but terminated because it was idle. 13 The link was established successfully, but terminated because the connect time limit was reached. 14 Callback was negotiated and an incoming call should arrive shortly. 15 The link was terminated because the peer is not responding to echo requests. 16 The link was terminated by the modem hanging up. 17 The PPP negotiation failed because serial loopback was detected. 18 The init script failed because a non-zero exit status was returned. 19 Authentication to the peer failed. FILES
/var/run/spppn.pid Process-ID for pppd process on PPP interface unit n. /var/run/ppp-name.pid Process-ID for pppd process for logical link name (see the linkname option). /etc/ppp/pap-secrets Usernames, passwords and IP addresses for PAP authentication. This file should be owned by root and not readable or writable by any other user, otherwise pppd will log a warning. /etc/ppp/chap-secrets Names, secrets and IP addresses for all forms of CHAP authentication. The /etc/ppp/pap-secrets file should be owned by root should not readable or writable by any other user, otherwise, pppd will log a warning. /etc/ppp/options System default options for pppd, read before user default options or command-line options. $HOME/.ppprc User default options, read before /etc/ppp/options.ttyname. /etc/ppp/options.ttyname System default options for the serial port in use; read after $HOME/.ppprc. The ttyname component of this filename is formed when the initial /dev/ is stripped from the port name (if present), and slashes (if any) are converted to dots. /etc/ppp/peers Directory with options files that may contain privileged options, even if pppd was invoked by a user other than root. The system administrator can create options files in this directory to permit non-privileged users to dial out without requiring the peer to authenticate, but only to certain trusted peers. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWpppdu | +-----------------------------+-----------------------------+ |Interface Stability |Evolving | +-----------------------------+-----------------------------+ SEE ALSO
chat(1M), ifconfig(1M), crypt(3C), pam(3PAM), attributes(5) Haskin, D., Allen, E. RFC 2472 - IP Version 6 Over PPP. Network Working Group. December 1998. Jacobson, V. RFC 1144, Compressing TCP/IP Headers for Low-Speed Serial Links. Network Working Group. February, 1990 Lloyd, B., Simpson, W. RFC 1334, PPP Authentication Protocols. Network Working Group. October 1992. McGregor, G. RFC 1332, The PPP Internet Protocol Control Protocol (IPCP). Network Working Group. May 1992. Rivest, R. RFC 1321, The MD5 Message-Digest Algorithm. Network Working Group. April 1992 Simpson, W. RFC 1661, The Point-to-Point Protocol (PPP). Network Working Group. July 1994. Simpson, W. RFC 1662, HDLC-like Framing . Network Working Group. July 1994. NOTES
These signals affect pppd behavior: SIGINT, SIGTERM Terminate the link, restore the serial device settings and exit. SIGHUP Terminate the link, restore the serial device settings and close the serial device. If the persist or demand option is specified, pppd attempts to reopen the serial device and start another connection after the holdoff period. Oth- erwise pppd exits. If received during the holdoff period, SIGHUP causes pppd to end the holdoff period immediately. SIGUSR1 Toggles the state of the debug option and prints link status information to the log. SIGUSR2 Causes pppd to renegotiate compression. This is useful to re-enable compression after it has been disabled as a result of a fatal decompression error. (Fatal decompression errors generally indicate a bug in an implementation.) DIAGNOSTICS
Messages are sent to the syslog daemon using facility LOG_DAEMON. To see error and debug messages, edit the /etc/syslog.conf file to direct the messages to the desired output device or file, or use the updetach or logfile options. The debug option causes the contents of all LCP, PAP, CHAP or IPCP control packets sent or received to be logged. This is useful if PPP negotiation does not succeed or if authentication fails. Debugging can also be enabled or disabled by sending a SIGUSR1 signal, which acts as a toggle to the pppd process. SunOS 5.10 21 Nov 2001 pppd(1M)


text:
Home Help Mopar Screensavers Mopar Wallpaper Mopars Featured In The Past Search Submit Or Update Your Mopar |
Home | About | Help | Mopar Archive | Screensavers | Search | Submit Or Update Your Mopar | Wallpaper |
The Mopars Of The Month Site is an independently operated Mopar Enthusiast Internet site. Built for Mopar Enthusiasts by Mopar Enthusiasts. Our site and network of Mopar related sites are not affiliated with or directly sponsored by Chrysler Group LLC. Dodge, Chrysler, Jeep, Plymouth, Ram and Mopar are all trademarks of Chrysler Group LLC and are used only for descriptive purposes. |
Mopars Of The Month © 1997 - 2021 - Privacy Policy | Terms Of Use |


text:
One of the hardest-fought civil liberties battles of the George W. Bush era involved the Foreign Intelligence Surveillance Act (FISA), the post-Watergate statute that was meant to rein in domestic surveillance undertaken in the name of national security. It's almost certain that we'll have an equally hard-fought battle over FISA this year, both in the courts and in Congress.
The first volley may come as early as next week, because the administration must decide by Tuesday whether to ask the Supreme Court to intervene in the ACLU's constitutional challenge to the FISA Amendments Act, the 2008 law that ratified and expanded the Bush administration's warrantless wiretapping program. And that law is scheduled to sunset in December, which means that the litigation will unfold against the background of a congressional reauthorization debate.
To understand the significance of this brewing battle, you need to know (or recall) a little history.
Right after 9/11, President Bush instructed the National Security Agency (NSA) to intercept Americans' telephone calls without first obtaining warrants. The program was developed in secret but exposed by The New York Times in 2005 and immediately challenged by civil liberties groups, including the ACLU. In response to public pressure, and in an effort to derail the legal challenges, the Bush administration announced in January 2006 that it would allow the program to be supervised by the judiciary — specifically, by the Foreign Intelligence Surveillance Court, the entity established by FISA to oversee domestic intelligence surveillance. Though there were unanswered questions — for example, what, precisely, did the administration submit to the FISA Court, and what did the FISA Court approve? — it seemed, briefly, like a victory for civil liberties.
But the FISA Court reconsidered its endorsement of the warrantless wiretapping program only a few months later, and the administration and its allies in Congress began to press for legislative change. It was a misleading campaign. If there was a problem with FISA as written, the problem was narrow and could have been addressed with a minor legislative fix that no one would have opposed. The administration, though, was not interested in fixing the narrow problem it had identified; it was interested in allowing the NSA to turn its powerful technology inward, towards the United States. This is what it asked Congress to permit.
And this, ultimately, is what Congress allowed. Congress weakened FISA in 2007 and then again in 2008 to permit the warrantless wiretapping that the law had previously prohibited. It granted retroactive immunity to the companies that had facilitated the warrantless wiretapping program. And it gave the NSA unprecedented power to monitor the international communications of people living in the United States — to listen to their phone calls, and to read their emails. "We are targeting our own country," one NSA whistleblower observed. Marty Lederman, then a law professor but later a lawyer for the Obama administration, explained the 2008 amendments like this:
The new statute permits the NSA to intercept phone calls and e-mails between the U.S. and a foreign location, without making any showing to a court and without judicial oversight, whether or not the communication has anything to do with al Qaeda — indeed, even if there is no evidence that the communication has anything to do with terrorism, or any threat to national security.
Predictably, the NSA has not simply used the law aggressively but abused it as well.
Congress's 2008 amendments to FISA are scheduled to sunset in December, and over the next 10 months the ACLU and its partners will be urging Congress to fix FISA's problematic provisions and rein in the NSA.
We'll also be pressing the constitutional challenge we filed less than an hour after the 2008 amendments became law. In that case we represent a coalition of labor, media, and human rights organizations whose work depends on their ability to communicate confidentially with clients, witnesses, sources, and victims of human rights abuses. (Profiles of our clients are here.) The government has tried to keep the case out of court; it's argued that our clients lack standing to challenge the 2008 Act because they can't prove that their communications were (or will be) monitored under it. Some courts have accepted that cynical argument, but early last year a three-judge panel of the U.S. Court of Appeals for the Second Circuit rejected it, and late last year the full Second Circuit declined the government's request to reconsider that ruling. The Obama administration must decide by Tuesday whether to ask the Supreme Court to intervene.
As we've said before, our hope is that the Obama administration will drop its objection to our plaintiffs' standing and allow the constitutionality of the FISA amendments to be tested in court. For a full decade, the executive branch — first the Bush administration and now the Obama administration — has used the standing and "state secrets" doctrines to insulate its most intrusive surveillance activities from public oversight and judicial review. But the Constitution doesn't contemplate that core democratic rights — the right to privacy, the freedoms of association and expression — will be left to the mercy of the political branches. The courts have a role to play in ensuring that government surveillance complies with the Constitution. We'll find out on Tuesday whether the Obama administration is finally willing to let the courts play that role.
Learn more about warrantless wiretapping: Sign up for breaking news alerts, follow us on Twitter, and like us on Facebook.


text:
Jon Norvell - December 4, 2022
God With Us
From Series: "Christmas 2022"
A Christmas sermon series for December 2022.
by Jon Norvell | Dec 5, 2022
Loading Content...
The link has been copied to your clipboard; paste it anywhere you would like to share it.
CloseAn Advent message from Isaiah 7:10-14 and Matthew 1:18-25.
Related Topics: Advent | More Messages from Jon Norvell
A Christmas sermon series for December 2022.
Minister of Music
I was born in Wichita, Kansas. My father received Christ when I was about 7 years old and we began attending a Bible-believing church. After attending church and hearing God's Word taught, I became convicted of my sin and asked Jesus into my heart when I was 8 years old.
Dad and mom retired in 1975, and we moved to Calico Rock, Arkansas, where I finished my last 3 years of high school. I met my wife while attending high school, and we were married in 1980. We have been married now for 38 years. We have 8 children: Nicole, Justin, Samuel, Hannah, Tobias, Matthew, Hayley and Jordan. We have 6 grandchildren from our 2 oldest and two more getting married this summer.
After graduating high school, I had a career in the grocery business for about 18 years. I changed jobs and began a career at the hospital in Mountain Home, AR, in the information systems department. I have been working at the hospital now for the past 20 years as a PACS Administrator and clinical analyst for the radiology dept.
God gave me a love and passion for music. I have had the privilege to be the worship leader for the First Baptist church of Bull Shoals for 25 years now. I enjoy leading our congregation in hymns as well as incorporating some of the newer contemporary music into our Call to Worship.
I was blessed to be raised in a Christian home by two loving parents. I struggled initially with the decision to give my life to Jesus, but at age 12 I finally came to a point of surrender to His lordship over me. I then struggled some more with God's call to ministry, but I surrendered to that, as well, as a freshman at Baylor University.
It was at Baylor that I met my beautiful and kind bride, Lydia. She and I have three sons, Caleb, James, and Jackson. I am so thankful for the family God has given me.
After Baylor, I attended Southwestern Baptist Theological Seminary in answer to my call to ministry. I've served churches in Arkansas since 2010, and I've been the pastor of First Baptist Bull Shoals since 2017. I hope to see God use my ministry to bring about more and more disciples of Jesus following Him in a healthy way.
In my free time, I enjoy playing games, reading, shooting, and hunting.


text:
Kansas State Capitol - Fedeli murals
The original murals that once surrounded the upper rotunda, at right, were created by artist Jerome Fedeli. Hired by the Populist Party in 1898, Fedeli's paintings would become the subject of political scrutiny. Populist candidates had been elected in 1896, defeating many Republicans and Democrats. The Populists claimed to represent the common people. They were often the subjects of jokes and referred to as "hay seeds."
The majestic upper dome offered a prominent space for artwork in the newly finished Capitol. In March 1898 Jerome Fedeli, a Republican, received the contract for $1,562.72 for murals in the upper dome. Fedeli had created many frescoes in Kansas City and had also been involved as a mediator in labor relations between the Missouri Pacific Railroad and Italian laborers.
Fedeli's concept was a conventional Greek design with maidens encircling the area between the fifth floor and the railed level of the dome. Fedeli engaged his son, Edward, and five workers to paint the 16 figures. A garland of flowers and vases with ornamental flowers connected the figures. The job was completed in three months. Fedeli reportedly netted $500.
The maidens became the subject of ridicule, which critics called "nude telephone girls." Republicans regained the majority and governorship in 1902, and support grew to replace the Populists' artwork.
Lilla Day Monroe of Ellis County lived in Topeka at the time and led the fight. Monroe said she had been "long active in the fight for suffrage and many activities of special concern to women and children." She helped to ensure the passage of an appropriation of $7,600 for new murals. Abner Crossman with the Chicago firm of Crossman and Sturdy was contracted to cover over the "scantily dressed girls" with the allegorical paintings of fully clothed subjects we see today.
A newspaper of the day reported, "But fate was kind, for the artist (Fedeli) died a few months before his panel of singularly harmless and conventional Grecian maidens fell before the scrapers touch."
Entry: Kansas State Capitol - Fedeli murals
Author: Kansas Historical Society
Author information: The Kansas Historical Society is a state agency charged with actively safeguarding and sharing the state's history.
Date Created: March 2009
Date Modified: January 2017
The author of this article is solely responsible for its content.