ipcop-devel Mailing List for IPCop Firewall

At 03:59 PM 8/31/2004, Rainer Zocholl wrote:
> >> if i click on an item in the GUI
> >> for example "System" and then "Network"
> >> the "Network" screen is shown 6 sec later.
> >> This 6sec occure every time.
> >>
> >> Could it be that this is a "timeout"?
> >> If which?
> >>
> >> The router runs as "p90.localdomain".
> >>
> >> Or is the 96MB P200 too slow for faster responses?

It is not the IPCop software, it is your system.
I am running IPCop on several different systems:

LEX 533mhz 256mb memory 256 CF

Dell 1750 1.8mhz 512mb memory 36gb SCSI

etc etc, and have no problems getting the screens to pop up quickly.

There are many things that can effect the speed of the screens coming up 
for you:
processor speed, bus speed, memory speed, type of drive(s) and their read 
speed, etc.

"Minimum requirements to run" does not equal "maximum performance"  <smile>

Dale

Hello

what i am really missing is in "Card assignment" the cards
Mac address.

Instead:
  There is an unclaimed ethernet card of type:
  3Com EtherLink III.

It may read:
  There is an unclaimed ethernet card with 
  HWaddr:  00:20:AF:66:55:24 of type: 
  3Com EtherLink III.

  
That would make setup a bit(lot?) easierer and clearer.


An other way may be to unplug the Ethernet cable
and to see that link down.
But that requires physical access to the box.
Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

Andrew,

>Whenever I connect to the IPCop GUI (1.4 betas) I get a pop-up from
>Internet Explorer to the effect that I've got an dodgy certificate "The
>name on the certificate is invalid or does not match the name on the
>site".
<snip>

>In the Setup menu of IPCop, I have a host name of "ipcop" and a domain
>name of "dhf".  The certificate, when viewed in internet explorer, says
>it is issued from ipcop.dhf to ipcop.dhf, so the names are getting
>through.
>
>About the only thing I can't think of left to look at is whether my
>hostname or domain name may be "illegal", but I don't know what the
>rules are and I'd have expected the setup routine to bounce them if
>they were.
You must use the certificate so that the requested host is the same as
the one the certificate was generated for.  In this case:

https://ipcop.dhf:445/

That should do the trick.  Your web browser may still complain that the
certificate is not signed by a recognised root CA, unless you have your
own and have told your web browser to accept it.

HTH,


                                Neil.

-- 
Neil A. Hillard                E-Mail:   ne...@re...
Regional Webs Ltd.             Web:      http://www.regionalwebs.net/

g....@fr...(Gilles Espinasse)  31.08.04 21:32


>> if i click on an item in the GUI
>> for example "System" and then "Network"
>> the "Network" screen is shown 6 sec later.
>> This 6sec occure every time.
>>
>> Could it be that this is a "timeout"?
>> If which?
>>
>> The router runs as "p90.localdomain".
>>
>> Or is the 96MB P200 too slow for faster responses?
>>

>Wich load average show your box?
>It may depend too of the client 'muscle' as antivirus may use some
>time for javascript menu analysis.

>My IPCop box need a bit less time (4 s) with :

the 6sec were "manually counted" not stopped.
Maybe it's 5sec too.
I may raise etherdump to get exacter times.

Uups. i almost forgot:
that's all HTTPS!
so hard to debug..
If i press "Status" i see an 2,3s break in traffic-


paket from server 712 Bytes long
39ms later paket from client 40 bytes long
2294ms later paket from cleint 253 byte long
122ms(!) later ACK form server
311ms paket from client 221 bytes
(almost 3sec!)
0ms later paket from client 93 bytes
0ms ACK from server
2ms from client 109 byte
0ms "  93 byte
1ms ACK from server
now it runs in 1ms per 2..3 Frames "speed"...(It's only a 10Mbit/s 
Ethernet)
Some packets need exactly 20ms indicating a timeout.
Once the client need 132ms.

That looks very much that the client(browser) is the problem!
But what is he doing in those 2294ms?


But it would be easier if it is clear text...






> - a Cyrix166 / usb adsl modem load average: 0.43, 0.33, 0.23
> - a PIII450 client W2k/IE6/


>What proxy cache size?

I recently increased it to 3GB, but had the slow response
before too.

The load is alomst zero.

Maybe someone with a bigger can contribute his times?
If he has 4sec too it's a time out...

Rainer

ar...@c2...(Arnt Karlsen)  31.08.04 21:30

Once upon a time "Arnt Karlsen " shaped the electrons to say...

>On 31 Aug 2004 19:48:00 +0200, Rainer wrote in message
><9Fv...@zo...>:

>> Hello
>>
>> if i click on an item in the GUI
>> for example "System" and then "Network"
>> the "Network" screen is shown 6 sec later.
>> This 6sec occure every time.
>>
>> Could it be that this is a "timeout"?
>> If which?
>>
>> The router runs as "p90.localdomain".
>>
>> Or is the 96MB P200 too slow for faster responses?

>..4 seconds on a P90 with 96MB, 

The p90.localdomain is meanwhile a 200MHz(!) Pentium 546 for IPcop.


>no javascript 

Yes.

>and 2.37 load
>(scp'ing /var/log for upgrade to rc2).

0,37 load.
But the CPU graph shows steadily increasing load...

>.._could_ be your browser.

It's mozilla 1.71 on a Celeraon 700 with 384MB RAM.

>.and, _forget_ ipcop on somali, is _not_ gonna happen.

Did i ask? ;-)

Rainer

tm...@tm...(Tom Dawes-Gamble)  31.08.04 20:04


>Ignore this it was operator error.  I had my dns set up wrongly and
>was looking at the wrong ipcop system.

Activating "Display hostname in window title" System-> GUI setting 
might have helped?


Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

Whenever I connect to the IPCop GUI (1.4 betas) I get a pop-up from 
Internet Explorer to the effect that I've got an dodgy certificate "The 
name on the certificate is invalid or does not match the name on the 
site".

Following the advice given in these lists to people with apparently  
similar problems I have:

 (a) Deleted the certificate on the Windows PC
 (b) deleted /etc/httpd/server.*
 (c) rebooted IPCop (various messages flash past about certificates)
 (d) reconnected from Windows and got the same message.

The above applies whether I connect to https://<green_ip>:445/ or to 
https://ipcop:445/ where ipcop is mapped to green_ip in my hosts file.
 
My problem must therefore be different to that reported previously.

In the Setup menu of IPCop, I have a host name of "ipcop" and a domain 
name of "dhf".  The certificate, when viewed in internet explorer, says 
it is issued from ipcop.dhf to ipcop.dhf, so the names are getting 
through.

About the only thing I can't think of left to look at is whether my 
hostname or domain name may be "illegal", but I don't know what the 
rules are and I'd have expected the setup routine to bounce them if 
they were.

Suggestions anyone???  Please !!!

Regards,  Andrew Borland (UK)

No problem..

dhcp.cgi

It's very good that DHCP can be configured "per Interface"!
Good work!


But:
Where can the netmask for DHCP-clients be defined in GUI?
I never needed "WINS", but i have often nets not
in the classic, obsolete Class A,B,C size.

Too it would be nice if it would be possible
to set an NTP server entry (automatically if IPcop ntpd is
enabled for "local").
Or a "general" edit field for the dozens of other DHCP options...


Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

me...@sl...(Melvin Backus)  31.08.04 13:30


>Rainer Zocholl wrote:

>>How can i get that interrupt free?
>>(turned off USB in the BIOS, but that might not always be an option)
>>
>>
>>
>You might try disabling this in the BIOS.

There are entries where i can assign interrupts to "legacy ISA"
but that does not help.

>I've been preparing to go
>through this same thing myself.  I just realized that I have a mouse
>hooked up because it's on a KVM, and that's taking IRQ 12.  I've got
>the USB sharing an interrupt with one of my NICs which I don't like,
>but I'm not sure it's the cause of my issues.  Anyway, try the BIOS
>and see if a) you can disable it.

I aready did: Int became free.


>b) you can turn off the interrupt.

How&where?


>You might also try using the install parms to prevent it from being
>discovered during the installation.  IIRC there is one for usb,
>pcmcia, and both.

I thought that was only to be able to boot?



Rainer

----- Original Message ----- 
From: "Rainer Zocholl" <Use...@zo...>
To: <ipc...@li...>
Sent: Tuesday, August 31, 2004 8:12 PM
Subject: [IPCop-devel] ipcop 1.4rc2 How to turn beep off?


> Hello
>
> i am testing IPcop..
>
>
> Is there a point where i can turn "beeps" off?
> Sometimes it's nice to have those "bbeps",
> but with "dial on demand" it's anoying after a while...
>
> Or to select the sounds played?
>
I have think to add a sound option in GUI settings because you are not the
only one which ask but I take no time to do that.
Connection sound are made in /etc/ppp/{ip-down|ip-up} with beep or system
"/bin/echo -en '\a' >/dev/console";
Sounds at start are at the end of /etc/rc.d/rc.sysinit

Ignore this it was operator error.  I had my dns set up wrongly and was
looking at the wrong ipcop system.

Tom.

On Tue, 2004-08-31 at 19:20, Tom Dawes-Gamble wrote:
> Forgive me for not finding the solution before posting.  I've just found
> that trying to edit a dhcp lease is not working.  I recall there was a
> fix posted for this but it doesn't seem to have made it to the rc2.
>=20
> Regards,
> Tom.
--=20
main(int c,char **v){long x;while(--c){sscanf(*++v,"%li",&x);
printf("Decimal =3D %ld\nHex =3D 0x%lx\nOctal =3D 0%lo\n",x,x,x);}} =20

----- Original Message ----- 
From: "Rainer Zocholl" <Use...@zo...>
To: <ipc...@li...>
Sent: Tuesday, August 31, 2004 7:48 PM
Subject: [IPCop-devel] ipcop 1.4rc2 slow webserver (was: [IPCop-devel] ipcop
1.4rc2 ISDN PPP Connectstate)


> Hello
>
> if i click on an item in the GUI
> for example "System" and then "Network"
> the "Network" screen is shown 6 sec later.
> This 6sec occure every time.
>
> Could it be that this is a "timeout"?
> If which?
>
> The router runs as "p90.localdomain".
>
> Or is the 96MB P200 too slow for faster responses?
>
Wich load average show your box?
It may depend too of the client 'muscle' as antivirus may use some time for
javascript menu analysis.
My IPCop box need a bit less time (4 s) with :
 - a Cyrix166 / usb adsl modem load average: 0.43, 0.33, 0.23
- a PIII450 client W2k/IE6/

What proxy cache size?

On 31 Aug 2004 19:48:00 +0200, Rainer wrote in message 
<9Fv...@zo...>:

> Hello
> 
> if i click on an item in the GUI
> for example "System" and then "Network"
> the "Network" screen is shown 6 sec later.
> This 6sec occure every time.
> 
> Could it be that this is a "timeout"?
> If which?
> 
> The router runs as "p90.localdomain".
> 
> Or is the 96MB P200 too slow for faster responses?

..4 seconds on a P90 with 96MB, no javascript and 2.37 load 
(scp'ing /var/log for upgrade to rc2).

.._could_ be your browser.

..and, _forget_ ipcop on somali, is _not_ gonna happen.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... 
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

Forgive me for not finding the solution before posting.  I've just found
that trying to edit a dhcp lease is not working.  I recall there was a
fix posted for this but it doesn't seem to have made it to the rc2.

Regards,
Tom.

--=20
main(int c,char **v){long x;while(--c){sscanf(*++v,"%li",&x);
printf("Decimal =3D %ld\nHex =3D 0x%lx\nOctal =3D 0%lo\n",x,x,x);}} =20

Hello

i am testing IPcop..


Is there a point where i can turn "beeps" off?
Sometimes it's nice to have those "bbeps", 
but with "dial on demand" it's anoying after a while...

Or to select the sounds played?


Rainer

C:\>ping -t www.ix.de

causes a dial, but after long time:

Bad IP address www.ix.de.


routing is broken....


Aug 31 20:57:49 p90 kernel: ippp0: dialing 1 2219230...
Aug 31 20:57:50 p90 ipppd[2256]: Local number: 734937, Remote number:
2219230, Type: outgoing
Aug 31 20:57:50 p90 ipppd[2256]: PHASE_WAIT -> PHASE_ESTABLISHED, ifunit: 0,
linkunit: 1, fd: 8
Aug 31 20:57:50 p90 kernel: isdn_net: ippp0 connected
Aug 31 20:57:51 p90 ipppd[2256]: Remote message: CALL CHECK
Aug 31 20:57:51 p90 ipppd[2256]: MPPP negotiation, He: Yes We: Yes
Aug 31 20:57:51 p90 ipppd[2256]: CCP enabled! Trying CCP.
Aug 31 20:57:51 p90 ipppd[2256]: CCP: got ccp-unit 0 for link 1 (Compression
Control Protocol)
Aug 31 20:57:51 p90 ipppd[2256]: ccp_resetci!
Aug 31 20:57:51 p90 ipppd[2256]: local  IP address ...
Aug 31 20:57:51 p90 ipppd[2256]: remote IP address ,,,13
Aug 31 20:57:51 p90 ipppd[2256]: ppp not replacing existing default route to
ippp0[,,,13]
Aug 31 20:57:53 p90 ipcop: PPP has gone up on ippp0
Aug 31 20:57:54 p90 dnsmasq[4686]: started, version 1.18 cachesize 150
Aug 31 20:57:54 p90 dnsmasq[4686]: read /etc/hosts - 3 addresses
Aug 31 20:57:54 p90 dnsmasq[4686]: reading /var/ipcop/red/resolv.conf
Aug 31 20:57:54 p90 dnsmasq[4686]: using nameserver ;;;.1#53
Aug 31 20:57:54 p90 dnsmasq[4686]: using nameserver ,,,1#53
Aug 31 20:57:54 p90 dnsmasq[4686]: reading /var/state/dhcp/dhcpd.leases
Aug 31 20:57:55 p90 snort: Final Flow Statistics
Aug 31 20:57:55 p90 snort: Snort exiting
Aug 31 20:57:57 p90 snort: Initializing daemon mode
Aug 31 20:57:57 p90 snort: PID path stat checked out ok, PID path set to
/var/run/
Aug 31 20:57:57 p90 snort: Writing PID "4716" to file
"/var/run//snort_eth0.pid"
...
Aug 31 20:58:10 p90 snort: Snort initialization completed successfully

IPcop beeps

No connection.

IPcop drops connection

next ping

C:\>ping -t www.ix.de

Pinging www.ix.de [193.99.144.80] with 32 bytes of data:

Reply from 193.99.144.80: bytes=32 time=50ms TTL=247
Reply from 193.99.144.80: bytes=32 time=50ms TTL=247
Reply from 193.99.144.80: bytes=32 time=60ms TTL=247
Reply from 193.99.144.80: bytes=32 time=50ms TTL=247


Em, i have not changed anything between those pings...


But still the problem persists, that
it needs 13sec(!) before the name resolved and the
first response is seen.
And further approx. 10sec until IPcop beeps.


Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

I configured "bandwidth on demand" with "Dial on demand"

But i get
C:\>ping 195.1.1.1

Pinging 195.1.1.1 with 32 bytes of data:

Reply from 10.10.20.1: Destination net unreachable.
Reply from 10.10.20.1: Destination net unreachable.

Minutes(!) later (or after i pinged from IPcop something
outside?) i get 

C:\>ping 195.1.1.1

Pinging 195.1.1.1 with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

That's ok...

How does BOD on IPcop work?
I thought i "ping" something out side and
after a 2sec delay i get the response...(inside the 3sec ping timeout)
But if it get "Destination net unreachable" that means
that this pakets were not routed to red so red stays
offline, or?


I have to press "Connect" and 20sec later (on ISDN!)
ipcop is connected.

I can ping from IPcop shell, but not from green.



# netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
10.10.10.0      0.0.0.0         255.255.255.0   U         0 0          0 eth1
195.1.1.0   0.0.0.0         255.255.255.0   U         0 0          0 ippp0
10.10.20.0      0.0.0.0         255.255.255.0   U         0 0          0 eth0
0.0.0.0         195.1.1.13  0.0.0.0         UG        0 0          0 ippp0


That looks OK or?


C:\>ping -t www.ix.de

Pinging www.ix.de [193.99.144.80] with 32 bytes of data:

Request timed out.
Request timed out.

C:\>tracert  www.ix.de

Tracing route to www.ix.de [193.99.144.80]
over a maximum of 30 hops:

  1   <10 ms   <10 ms   <10 ms  p90.localdomain [10.10.20.1]
  2     *        *        *     Request timed out.
  3     *        *        *     Request timed out.
  4     *        *        *     Request timed out.


Why is ipcop not routing (anymore)?

For one time this worked.
Then i pressed "disconnect" to change ISDN settings.



Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

Hello

if i click on an item in the GUI
for example "System" and then "Network"
the "Network" screen is shown 6 sec later.
This 6sec occure every time.

Could it be that this is a "timeout"?
If which?

The router runs as "p90.localdomain".

Or is the 96MB P200 too slow for faster responses?

Rainer

Rainer Zocholl wrote:

>Use...@zo...(Rainer Zocholl)  31.08.04 16:22
>
>
>AVM A1 ISDN
>"Set additional module parameters"
>io=0x240 irq=6 type=5 protocol=2
>
>
>IRQ 6 looks stange anyhow...
>
>But IRQ11 is used by usb-uhci.
>Why?
>That board (EliteGroup ECS P5HX-B 1996) does not have USB
>acording to the manual...
>Chipset:
>Intel 430Hx, 82439HX (TXC)/82371AB(PHX3)
>Windbond I/OChip W83877F, W83768F
>But in the corner, there is an undocumenteted 2*5 plug...
>but i don't need USB.
>
>
># cat /proc/interrupts
>           CPU0
>  0:     105966          XT-PIC  timer
>  1:       2255          XT-PIC  keyboard
>  2:          0          XT-PIC  cascade
>  5:       1190          XT-PIC  eth0
>  6:        345          XT-PIC  HiSax
>  8:          1          XT-PIC  rtc
> 11:          0          XT-PIC  usb-uhci
> 12:          0          XT-PIC  eth1
> 14:       3322          XT-PIC  ide0
> 15:          2          XT-PIC  ide1
>
>
>BTW:
>Why are int 3 and 4 not listed?
>ttyS00 and S01 seems to be detected.
>
>
># dmesg | grep -i usb
>usb.c: registered new driver usbdevfs
>usb.c: registered new driver hub
>usb-uhci.c: $Revision: 1.275 $ time 15:06:26 Aug 27 2004
>usb-uhci.c: High bandwidth mode enabled
>usb-uhci.c: USB UHCI at I/O 0x6000, IRQ 11
>usb-uhci.c: Detected 2 ports
>
>But they are not wired...
>
>
>
>
>Anyway:
>
>How can i get that interrupt free?
>(turned off USB in the BIOS, but that might not always be an option)
>
>
>
>Rainer
>  
>
You might try disabling this in the BIOS.  I've been preparing to go 
through this same thing myself.  I just realized that I have a mouse 
hooked up because it's on a KVM, and that's taking IRQ 12.  I've got the 
USB sharing an interrupt with one of my NICs which I don't like, but I'm 
not sure it's the cause of my issues.  Anyway, try the BIOS and see if 
a) you can disable it.  b) you can turn off the interrupt.  You might 
also try using the install parms to prevent it from being discovered 
during the installation.  IIRC there is one for usb, pcmcia, and both.


I'm glad you posted this, it made me think of a couple of things I 
haven't tried myself yet. :)

later...

-- 
Melvin Backus
Principal Wizard
Sleepy Dragon Enterprises
--
Do not meddle in the affairs of dragons, for 
you are crunchy, and taste good with ketchup!
--

Back to AVM A1
Long time ago... i really forgot how complicate it
was to configure an ISDN ISA card!


"Set additional module parameters"
must read:
io=0x240 irq=6 type=5 protocol=2

Now it "connects"! :-)


I wonder why i must set "type" manually, when i selected
"AVM ISA" in the list!
I expected "setup" would do that.


----


But still:
between pressing "connect" in the GUI and getting the IP-#
it took 15sec(!) (P200), 9sec along until it starts to 
dial!
"Dial on demand" would be annyoing slow (not jet tested)
if that to needs 15s...

What is it doing so long?

Use...@zo...(Rainer Zocholl)  31.08.04 16:22


AVM A1 ISDN
"Set additional module parameters"
io=0x240 irq=6 type=5 protocol=2


IRQ 6 looks stange anyhow...

But IRQ11 is used by usb-uhci.
Why?
That board (EliteGroup ECS P5HX-B 1996) does not have USB
acording to the manual...
Chipset:
Intel 430Hx, 82439HX (TXC)/82371AB(PHX3)
Windbond I/OChip W83877F, W83768F
But in the corner, there is an undocumenteted 2*5 plug...
but i don't need USB.


# cat /proc/interrupts
           CPU0
  0:     105966          XT-PIC  timer
  1:       2255          XT-PIC  keyboard
  2:          0          XT-PIC  cascade
  5:       1190          XT-PIC  eth0
  6:        345          XT-PIC  HiSax
  8:          1          XT-PIC  rtc
 11:          0          XT-PIC  usb-uhci
 12:          0          XT-PIC  eth1
 14:       3322          XT-PIC  ide0
 15:          2          XT-PIC  ide1


BTW:
Why are int 3 and 4 not listed?
ttyS00 and S01 seems to be detected.


# dmesg | grep -i usb
usb.c: registered new driver usbdevfs
usb.c: registered new driver hub
usb-uhci.c: $Revision: 1.275 $ time 15:06:26 Aug 27 2004
usb-uhci.c: High bandwidth mode enabled
usb-uhci.c: USB UHCI at I/O 0x6000, IRQ 11
usb-uhci.c: Detected 2 ports

But they are not wired...




Anyway:

How can i get that interrupt free?
(turned off USB in the BIOS, but that might not always be an option)



Rainer

Use...@zo...(Rainer Zocholl)  30.08.04 22:33

>ISDN tries to conenct but fails.

Removed the AVM A1,
inserted an AVM PCI.
To my surprise it was detected by setup as "Teles 16.3c"!
So i selected "manuall" AVM PCI (experimental)


Aug 31 16:33:56 p90 ipcop: Dialing TP1.
Aug 31 16:33:58 p90 kernel: HiSax: Linux Driver for passive ISDN cards
Aug 31 16:33:58 p90 kernel: HiSax: Version 3.5 (module)
Aug 31 16:33:58 p90 kernel: HiSax: Layer1 Revision 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: Layer2 Revision 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: TeiMgr Revision 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: Layer3 Revision 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: LinkLayer Revision 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: Approval certification failed because of
Aug 31 16:33:58 p90 kernel: HiSax: unauthorized source code changes
Aug 31 16:33:58 p90 kernel: hisax_isac: ISAC-S/ISAC-SX ISDN driver v0.1.0
Aug 31 16:33:58 p90 kernel: hisax_fcpcipnp: Fritz!Card PCI/PCIv2/PnP ISDN driver v0.0.1
Aug 31 16:33:58 p90 kernel: HiSax: Card 1 Protocol EDSS1 Id=fcpcipnp0 (0)
Aug 31 16:33:58 p90 kernel: HiSax: DSS1 Rev. 1.1.4.1
Aug 31 16:33:58 p90 kernel: HiSax: 2 channels added
Aug 31 16:33:58 p90 kernel: HiSax: MAX_WAITING_CALLS added
Aug 31 16:33:58 p90 kernel: hisax_fcpcipnp: found adapter Fritz!Card PCI v2 at 00:0a.0
Aug 31 16:33:58 p90 ipppd[673]: Found 1 device:
Aug 31 16:33:58 p90 ipppd[674]: ipppd i2.2.12 (isdn4linux version of pppd by MH) started
Aug 31 16:33:58 p90 ipppd[674]: init_unit: 0
Aug 31 16:33:58 p90 ipppd[674]: Connect[0]: /dev/ippp0, fd: 7
Aug 31 16:33:59 p90 kernel: ippp0: dialing 1 456456...
Aug 31 16:34:00 p90 kernel: isdn_net: ippp0 connected
Aug 31 16:34:00 p90 ipppd[674]: Local number: 123434, Remote number: 456456,
Type: outgoing
Aug 31 16:34:00 p90 ipppd[674]: PHASE_WAIT -> PHASE_ESTABLISHED, ifunit: 0,
linkunit: 0, fd: 7
Aug 31 16:34:00 p90 ipppd[674]: sent [0][LCP ConfReq id=0x1 <mru 1500> <magic
0x58a3e0dd> <pcomp> <accomp>]
Aug 31 16:34:01 p90 ipppd[674]: rcvd [0][LCP ConfReq id=0x1 <magic
0x14ba9148> <auth pap>]
Aug 31 16:34:01 p90 ipppd[674]: sent [0][LCP ConfAck id=0x1 <magic
0x14ba9148> <auth pap>]
Aug 31 16:34:01 p90 ipppd[674]: rcvd [0][LCP ConfAck id=0x1 <mru 1500> <magic
0x58a3e0dd> <pcomp> <accomp>]
Aug 31 16:34:01 p90 ipppd[674]: lcp layer is UP



Seems my ISDN setting and ISDN Bus is Ok and there must be an other reason,
why the AVM A1 ISA is not working.



But still:
between pressing "connect" an getting the IP-#
it took 15sec(!)

Max. 2 sec should be sufficient IMHO.


Rainer---<=====>                         Vertraulich
             //
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

Hi,

> using ipcop v1.40rc2
> 
> by giving the command : ipsec look I get the following error:
> 
> root@ipcoptest:/etc # ipsec look
> ipcoptest.localdomain Mon Aug 30 15:46:10 CEST 2004
> /usr/lib/ipsec/look: line 70: paste: command not found
> 
> typo fault ??

Thanks for the bug report; paste will be added to in the next build.

Kind regards,

Mark
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

Steve Switzer wrote:
> Hello!
>   I just upgraded my server from 1.4b5 to 1.4rc2. I'm unable to get the 
> time server to work internally so far. I have it checked off in the gui, 
> I even unchecked, saved, and re-checked. I'm unable to get another 
> server to sync with it through the webmin interface... simply says 
> "Connection refused".
> netstat also doesn't show a time server:
> 
> root@firewall:~ # netstat -an | grep LISTEN
> tcp        0      0 172.29.204.1:800        0.0.0.0:*               LISTEN
> tcp        0      0 172.22.175.2:800        0.0.0.0:*               LISTEN
> tcp        0      0 0.0.0.0:81              0.0.0.0:*               LISTEN
> tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN
> tcp        0      0 0.0.0.0:222             0.0.0.0:*               LISTEN
> unix  2      [ ACC ]     STREAM     LISTENING     2872   /var/run/pluto.ctl
> 

Hi

I am also using RC2 and time server works now just fine. My netstat:
root@guard:~ # netstat -an | grep LISTEN
tcp        0      0 0.0.0.0:81              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN

I had a problem too at the beginning. I had a messed up ntp.conf 
(probably came from the backup floppy from an older install). I would 
have a look at your /etc/ntp.conf. It is created during lfs build and
should look like this:

root@guard:~ # cat /etc/ntp.conf
restrict default nomodify noquery
server  127.127.1.0
fudge   127.127.1.0 stratum 10
driftfile /etc/ntp/drift

Time server works for me since I replaced my messed ntp.conf.

See also this discussion on ipcops.net:
http://www.ipcops.net/index.php?name=PNphpBB2&file=viewtopic&t=3228

There was someone else having this problem.

Hope this helps

Roger

-- 
Roger Murer
E-Mail: r....@ti...

Hello!
   I just upgraded my server from 1.4b5 to 1.4rc2. I'm unable to get the 
time server to work internally so far. I have it checked off in the gui, 
I even unchecked, saved, and re-checked. I'm unable to get another 
server to sync with it through the webmin interface... simply says 
"Connection refused".
netstat also doesn't show a time server:

root@firewall:~ # netstat -an | grep LISTEN
tcp        0      0 172.29.204.1:800        0.0.0.0:*               LISTEN
tcp        0      0 172.22.175.2:800        0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:81              0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN
tcp        0      0 0.0.0.0:222             0.0.0.0:*               LISTEN
unix  2      [ ACC ]     STREAM     LISTENING     2872   /var/run/pluto.ctl

Ideas?

Thanks!
Steve

Kasper Liest wrote:

>Finnaly got the iso it down from SF's pages.
>
>For easy download I have put it up on:
>http://ipcop.hhgg.dk/iso/ipcop-1.4rc2.iso
>Linespeed: 10MBit
>and
>http://www.karen.hik.se/~zeuz/ipcop-1.4rc2.iso
>Linespeed: 100Mbit
>
>
>I will leave the first site up for at least one week. The second I will
>leave up for about 2 days.
>
>
>  
>
>>-----Original Message-----
>>From: ipc...@li... 
>>[mailto:ipc...@li...] On Behalf Of 
>>Alan Hourihane
>>Sent: Friday, August 27, 2004 7:06 PM
>>To: ipc...@li...
>>Cc: ipc...@li...
>>Subject: [IPCop-devel] ANNOUNCE: IPCop 1.4rc2
>>
>>
>>Everyone,
>>
>>Having closed quite a few issues out with rc1, we're here with rc2.
>>
>>I'm hoping this is it, and we get no major show stoppers and 
>>can release 1.4.0 after this.
>>
>>MD5: ebfd5dedb5ac3614c4eec171dc3c3704  ipcop-1.4rc2.tar.gz
>>MD5: 46ca592579c6509e9faa0c56128efa85  fcdsl-1.4rc2.tgz
>>MD5: 79703308f72f61df011fb30bb12c85fe  fcdsl-1.4rc2-smp.tgz
>>MD5: 48c38e891d50ad784394932d01e29d0b  ipcop-1.4rc2.iso
>>
>>As usual, they are up at http://prdownloads.sf.net/ipcop. 
>>Mirrors being what they are at SF, it may take a little while 
>>for them to settle. I know rc1 still hasn't got to all 
>>mirrors even after nearly 5 days.
>>
>>Please report your bugs to the SF bug tracker.
>>
>>Thanks,
>>
>>Alan.
>>
>>
>>-------------------------------------------------------
>>This SF.Net email is sponsored by BEA Weblogic Workshop
>>FREE Java Enterprise J2EE developer tools!
>>Get your free copy of BEA WebLogic Workshop 8.1 today. 
>>    
>>
>http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
>
>
>
>
>
>-------------------------------------------------------
>This SF.Net email is sponsored by BEA Weblogic Workshop
>FREE Java Enterprise J2EE developer tools!
>Get your free copy of BEA WebLogic Workshop 8.1 today.
>http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
>_______________________________________________
>IPCop-user mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-user
>  
>