ipcop-devel Mailing List for IPCop Firewall

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sunday 31 March 2002 22:10, Dra...@gm... wrote:
> Sorry I`am a NEWBIE
>
> and i don=B4t know, if my question is right in this part of the mailing
> lists, but I
> hope that you answer my question -s.
>
> How can I open the pop3 and the smtp-port in IpCop with ipchains?
>
> I need this ports to check up my mails with Outlook or another
> Mail-Program.
>
> I hope you can help me.
>
> bye
>
> Dominic
>
> p.s. Sorry for my bad english but I come from Germany.

Port 110, POP3 is a pull from your machine to your ISP's mail server and =
will=20
not require you to open any ports on IPCop.

The same can be said for Port 25 (SMTP). You should be sending mail to yo=
ur=20
ISP's SMTP mail server.

All the initiation comes from your machine, so the opening of any ports i=
s=20
not necessary(?) on IPCop. If you are running an SMTP server as your loca=
l=20
mail server (e.g. sendmail, postfix, etc) behind your IPCop box then you =
will=20
have to open port 25 and forward it to the local IP addr of the mail serv=
er.

- --=20
H&Ks
Garf.
Get my key from http://www.keyserver.net/en/
A spell checker was not harmed in the production of this email.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8p56OAcw6J3g6L9wRAp/NAJ0cU/euj3KQOTMsJZvY6XS7DuAZuQCdH6gN
43xoDJWHqxP6Xc5sxPpSIwM=3D
=3DJlJk
-----END PGP SIGNATURE-----

On Sunday 31 March 2002 04:10 pm, Dra...@gm... wrote:
> Sorry I`am a NEWBIE
>
> and i don´t know, if my question is right in this part of the mailing
> lists, but I
> hope that you answer my question -s.
>
> How can I open the pop3 and the smtp-port in IpCop with ipchains?
>
> I need this ports to check up my mails with Outlook or another
> Mail-Program.

You do not need to open any ports to check mail from Outlook or any 
other mail program.

You only need to do that if you want to have a mail server.

Are you picking up mail or is it being sent to you?

Sorry I`am a NEWBIE

and i don´t know, if my question is right in this part of the mailing lists,
but I
hope that you answer my question -s.

How can I open the pop3 and the smtp-port in IpCop with ipchains?

I need this ports to check up my mails with Outlook or another Mail-Program.

I hope you can help me.

bye

Dominic

p.s. Sorry for my bad english but I come from Germany.

-- 
GMX - Die Kommunikationsplattform im Internet.
http://www.gmx.net

On Sunday 31 March 2002 12:23 pm, you wrote:
> I had the same problem.  And the other root login was from 2 weeks
> before the last reboot of my box so it couldn't really be there.
>
> After some poking around, I came to the conclusion that the
> /var/run/utmp file that keeps track of logged in users had gotten out
> of synch due to a crash at some point or other.  What worked for me
> to fix it was to recreate the file:
>
> cat >/var/run/utmp
> ^D

Good info. I would think that

rm /vr/run/utmp
touch /var/run/utmp

Would work just as well.

Perhaps this should be in the rc.sysinit

At 8:48 AM +0100 3/29/02, Mark Wormgoor wrote:
>Now that we're getting more and more languages available, perhaps it's
>wise to have someone managing just the translations, keeping lists of
>people per language, sending out sentences to be translated, keeping
>track, etc. Required skills include cvs usage ;-)

Sounds like a plan.  I have lists of people doing the documentation 
translations, if anyone wants them.  Or maybe some of the 
documentation translators will volunteer for double duty.

By the way, I'll renew my usual request for anyone the is familiar 
with docbook to help me out converting the existing documentation, so 
we can get it into CVS, too.  I'm getting overwhelmed by work, and 
haven't had time to work on this for a few months.

Or if nobody's familiar with docbook, does anyone have any other ideas how to:
1) Decrease the problems managing and downloading large documents under TWiki.
2) Providing HTML, PDF and other formats of the same document.
3) Having a way to check in and track changes to documents via CVS.
4) Allow for translations using UTF8 (XML NLS support).

Not a bug, but possibly a "lack of clarity" in the documentation
When loading Ethernet adaptors with the MANUAL option, the screenshot
shows 
ne.o io=0x300 irq=10
This results in "Can't load driver" or some other error message.

The correct line should be 
"ne io=0x300 irq=10"

I.e. no .o postfix.

Apart from this a great product. I have it running fully on an old 486 with 
16M and no CD

Thanks a lot.
Gr, Tim Binsted

Hey all,

I have added a site to my server to assist me during my absence from home.
For those of you that would like access to this area send me the following
info.

full name
6 character login name
password
email address
development duties in the project (documentation, translation (with
language), etc...)

chuck

Hi,

> I tend to agree with Ludwig.  I noticed copyrights in the .c files 
> that had Lawrence's name in it, even though the text was translated 
> to German/Spanish/whatever.

You're right, the translators should have added their own copyright 
statement at the top of the translated file.  

Next, we are already using the original untranslated .c file.  It's part 
of the IPCop installer as much as it is a part of IPCop.  So, that part of 
the file is not a problem.  
Next, Lawrence can't really claim copyright for translated sentences that 
were translated by someone else, other than those for the original English 
lines that we already use.

So, like I said before, I will use the translations under these conditions:
- explicit approval from the original translator
- the translator (or someone else with the same language) remains 
  available to translate future sentences.  We have already made some 
  changes in en.pl for example, and those need to be translated.

Now that we're getting more and more languages available, perhaps it's 
wise to have someone managing just the translations, keeping lists of 
people per language, sending out sentences to be translated, keeping 
track, etc. Required skills include cvs usage ;-)

Kind regards,

	Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

Dirk

> as already said, I helped Till and Birte translate SmoothWall v0.9.8 into 
> German.
> 
> More specifically, I translated the files german.c (used by the installer) 
> and de.pl (for the webbased admin) and about the first half of config_de.html 
> (for the online helpfile). Till and Birte did the second half of 
> config_de.html and we all helped each other proofread our translations.
> 
> The original english texts of both german.c and de.pl were licensed under the 
> GNU GPL by Lawrence Manning. So the translated (i.e. modified) files are 
> covered under the GNU GPL as well and as such can be used and further 
> modified by the IPCop project. I'll happily send copies to Mark and Ludwig if 
> they don't have them yet.
Please do ;-)
We have at least added some strings to the de.pl, so it needs to be 
checked anyway.
 
> The original english text of config_de.html was written by Richard Morrell 
> and Lawrence Manning. In this case, they made no explicit statement what was 
> allowed to do with the text. By including the translated version into the 
> SmoothWall distribution they probably have implicitly allowed the 
> translation. And Ludwig probably is right that a translation is copyrighted 
> to the translator (Germans, see §3 UrhG). But I am no lawyer and I would 
> definitely follow Ludwig's and Mark's advice and stay away from files that 
> are not covered by the GNU GPL in order to avoid any further copyright 
> problems.

I agree with you here.  We removed the help files after request from SW.  
They contain no explicit copyright statement and are distributed as a part 
of SW GPL.  However, the lack of a copyright and licensing statement made 
us unsure of the legal position of those docs, and we removed it.

Kind regards,


	Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

>1) There is a belief that a language was chosen - I for one do not hold that
>belief.

Python won the vote Mark set up, though Jack's not happy with the 
voting process.

Mark's too busy hacking and house-buying to even talk about it yet :-)

>2) About API and how that project is to be divided... That was going - but the
>conversion has been stopped for a few days.

Not sure if it stopped because y'all finally agreed, or got tired of 
arguing. :-)

I suspect the latter, unfortunately...

I think some things got hammered out, or at least some options were 
eliminated, but I don't think it's anything like complete nor 
stable...

Is anybody qualified (ie unbiased and knowledgable enough) to 
synopsize?...  My light-hearted attempt at synopsis was factually 
incorrect (sometimes on purpose for the sake of discussion) and very 
incomplete, partially because I don't understand half of this stuff...

The parts I do remember and understand (more or less):

There seem to be several different ideas as to how a user should be 
able to alter their firewall rules, ranging from color-coded systems 
to drag-n-drop to a basic big ol' type-in box for an easier way to 
type/edit rc.firewall.up through the web GUI instead of SSH/vi to... 
Actually, I don't think we have any two people agreeing on this one. 
Too many chiefs, not enough braves?

Somebody (me) even asked if we should really focus on rule-changing 
instead of improving the feature set, interface, etc since the number 
of users who need to tweak the rules post-configuration is relatively 
small and are usually knowledgeable enough to do it by hand.

There was a lot of discussion about where the right place for the 
"business logic" of the install/config GUI belonged:  Some think it 
should be all built into the XML tags with a "meta" 
screen-description language defined, others that the client should 
only know a few types of XML tags to present (akin to HTML's INPUT 
choices, roughly speaking)  Part of the argument is about how much 
data you want to transmit over XML/RPC, and part of it is about how 
"locked in" we want to be for look&feel of GUI.  Version control of 
GUI elements also fits in there.

Dividing up the work seems to be not even discussed, really.  Mark's 
"controversial" survey had more Python volunteers than the rest, so 
that was the basis for the decision.  That said, it's not impossible 
that all the Python voters are less-skilled or have less time or... 
Honestly, I think the *BOTTOM* line on language choice should be left 
up to whomever sits down to actually do the work.  So far, that 
mostly seems to be Mark.  The way I figure it, we should just use 
whatever he thinks is best, since he's done most of the coding so 
far...

Now if somebody sat down and did an XMLRPC GUI/server in COBOL and 
submitted it as a fait accompli... Well, okay, COBOL is perhaps a bad 
example :-)  Still, at this point, we've got a lot of talk, and not 
much coding.  And that's good :-)  But when the time comes to type... 
Well, he who does the typing, does the *real* nitty-gritty decisions, 
usually.  I bet that if I spent the next two weeks figuring all this 
XMLRPC junk out and submitted a PHP version all topped and tailed, 
they'd even take that. :-)  [Don't worry, ain't gonna happen.]

Perhaps it would be good to re-start the thread with some high-level questions:

What are the basic design goals of the XMLRPC system?
What do all users need to do all the time?
What features are "must have"?
What features are "good, but optional"?
What features are *NOT* "in"?
What kind visual elements can be used to represent those actions most 
clearly and cleanly to any idiot on the planet?

Much of this high-level stuff is probably on the Twiki, but I haven't 
looked at that page in awhile, and neither have the rest of us 
probably...  Hint, hint. :-)
-- 
Got Music? http://l-i-e.com/artists.htm

1) There is a belief that a language was chosen - I for one do not hold that 
belief.

2) About API and how that project is to be divided... That was going - but the 
conversion has been stopped for a few days.

jackb

> Hi guys,
> 
> I'm afraid I've been a bit busy recently.  Was anything decided on which
> language to use, how to specify the APIs etc. and how the project's to
> be split?
> 
> PhilS.
> 
> 
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel



_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Hi,

as already said, I helped Till and Birte translate SmoothWall v0.9.8 into 
German.

More specifically, I translated the files german.c (used by the installer) 
and de.pl (for the webbased admin) and about the first half of config_de.html 
(for the online helpfile). Till and Birte did the second half of 
config_de.html and we all helped each other proofread our translations.

The original english texts of both german.c and de.pl were licensed under the 
GNU GPL by Lawrence Manning. So the translated (i.e. modified) files are 
covered under the GNU GPL as well and as such can be used and further 
modified by the IPCop project. I'll happily send copies to Mark and Ludwig if 
they don't have them yet.

The original english text of config_de.html was written by Richard Morrell 
and Lawrence Manning. In this case, they made no explicit statement what was 
allowed to do with the text. By including the translated version into the 
SmoothWall distribution they probably have implicitly allowed the 
translation. And Ludwig probably is right that a translation is copyrighted 
to the translator (Germans, see §3 UrhG). But I am no lawyer and I would 
definitely follow Ludwig's and Mark's advice and stay away from files that 
are not covered by the GNU GPL in order to avoid any further copyright 
problems.

Regards,
Dirk

-- 
Dirk Loss: dl...@un..., http://www.dirk-loss.de/

I tend to agree with Ludwig.  I noticed copyrights in the .c files 
that had Lawrence's name in it, even though the text was translated 
to German/Spanish/whatever.

Harry

At 9:34 AM -0800 3/28/02, ant...@gm... wrote:
>Mark, I don't believe, that the case is as simple as it looks like: I
>agree, that the translation is copyrighted to the translator, but what
>about the authors/copyrighters of the original text? Will it be sure,
>that the authors/copyrighters of the original (English) text can't
>make any claims?
>
>Just an example: if I translate a novel from a still living poet into
>German, I may have the copyright for my translation, but IMO I'm
>not allowed to distribute it without the poet's consent.
>
>Ludwig
>
>From:          	"Mark Wormgoor" <ma...@wo...>
>To:            	<ipc...@li...>
>Subject:       	[IPCop-devel] Re: [IPCop-user] German translation
>offer
>Date sent:     	Thu, 28 Mar 2002 10:43:45 +0100 (CET)
>
>>  > I doubt, that Mark agrees to use this SW stuff (copyrighted to
>>  > SW/RM). Or am I wrong, Mark?
>>
>>  We can't use the SW translations.
>>
>>  However, the copyright of these files is owned by the original
>>  translators and not by SW.  If the original translators are willing to
>>  help us (now,but in the future as well) and want to clearly license
>>  their translations under the GPL, I will welcome their help and we can
>>  use their translations.
>>
>>  Kind regards,
>>
>>        Mark Wormgoor
>>  --
>>  ***************************************************************
>>  * |\    /|      |  /|  /       Mark Wormgoor                  *
>>  * | \  / |      | / | /        mailto:ma...@wo...       *
>>  * |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
>>  ***************************************************************
>>
>>
>>
>>
>>  _______________________________________________
>>  IPCop-devel mailing list
>>  IPC...@li...
>>  https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>>
>
>
>
>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel

Mark, I don't believe, that the case is as simple as it looks like: I 
agree, that the translation is copyrighted to the translator, but what 
about the authors/copyrighters of the original text? Will it be sure, 
that the authors/copyrighters of the original (English) text can't 
make any claims? 

Just an example: if I translate a novel from a still living poet into 
German, I may have the copyright for my translation, but IMO I'm 
not allowed to distribute it without the poet's consent. 

Ludwig

From:           	"Mark Wormgoor" <ma...@wo...>
To:             	<ipc...@li...>
Subject:        	[IPCop-devel] Re: [IPCop-user] German translation 
offer
Date sent:      	Thu, 28 Mar 2002 10:43:45 +0100 (CET)

> > I doubt, that Mark agrees to use this SW stuff (copyrighted to
> > SW/RM). Or am I wrong, Mark?
> 
> We can't use the SW translations.
> 
> However, the copyright of these files is owned by the original
> translators and not by SW.  If the original translators are willing to
> help us (now,but in the future as well) and want to clearly license
> their translations under the GPL, I will welcome their help and we can
> use their translations.
> 
> Kind regards,
> 
>       Mark Wormgoor
> -- 
> ***************************************************************
> * |\    /|      |  /|  /       Mark Wormgoor                  *
> * | \  / |      | / | /        mailto:ma...@wo...       *
> * |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
> ***************************************************************
> 
> 
> 
> 
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel
> 

On Thursday 28 March 2002 03:28 am, you wrote:
> Hi,
>
> >> Should we make requested disk cache size and cache memory size
> >> scale proportionately?
>
> First of all, I think it's a good idea, and I would like to include
> the patch.
>
> >> Should total disk cache size be limited by available ram, thus
> >> maintaining the ratio in low memory conditions? (meaning, if there
> >> are only 4mb ram available, limit disk cache to 100M?)
>
> This is exactly what is worrying me.  There is currently  no check
> for diskspace either, which means there is a high risk on running out
> of diskspace on /var.  Should we also add checks for available
> diskspace and enough memory?  But how much memory could be used out
> of total.  And how much diskspace?

I'd say it's safe to take a snapshot of free on / after install and 
allow as much as 75% of it to squid cache.

What else does / disk space get used for after install? Logs are not on 
/ partition.

# Quoting Till Adam (ti...@ad...):

> I am fairly sure that Dirk Noss will also not mind. 

The name is Dirk Loss, I apologize.

Till

# Quoting Mark Wormgoor (ma...@wo...):

> > I doubt, that Mark agrees to use this SW stuff (copyrighted to
> > SW/RM). Or am I wrong, Mark?
> 
> We can't use the SW translations.

Well, as two of the people responsible for the initial german translation
of SW, myself (Till Adam) and my wife (Birte Lilienthal) would certainly
be cool with you using our work. I am fairly sure that Dirk Noss will
also not mind. I'll forward this message to him, maybe he can comment
himself. 

We both dont have the time to contribute to the translation at the
moment, but we'd be delighted if what we have already done is of use to
you guys.

Good work and keep going :)

Till and Birte

I offer French Translation ...

Eric BERTHOMIER

> I doubt, that Mark agrees to use this SW stuff (copyrighted to
> SW/RM). Or am I wrong, Mark?

We can't use the SW translations.

However, the copyright of these files is owned by the original translators
and not by SW.  If the original translators are willing to help us (now,but
in the future as well) and want to clearly license their translations under
the GPL, I will welcome their help and we can use their translations.

Kind regards,

      Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

I doubt, that Mark agrees to use this SW stuff (copyrighted to 
SW/RM). Or am I wrong, Mark?

Ludwig

Date sent:      	Thu, 28 Mar 2002 03:38:58 +0100
From:           	Arnt Karlsen <ar...@fm...>
To:             	Dave Dave <dre...@ya...>
Copies to:      	eas...@gm..., ipc...@li...
Subject:        	Re: [IPCop-user] German translation offer
Send reply to:  	ar...@fm...
Organization:   	ing. Arnt Karlsen

> On Wed, 27 Mar 2002 12:49:18 -0800 (PST), 
> Dave Dave <dre...@ya...> wrote in message 
> <200...@we...>:
> 
> ..guys, find a starting point at 
> 'http://fmb.no/ipcop/lingos.tar.bz2'.
> File is 191251 bytes.  Wintendo people may 
> need winzip upgrades and running it twice.
> 
> ..several languages in this, came from Rebecca and her 
> nice team at Smoothwall, I just re-packaged it.
> 
> -- 
> ..med vennlig hilsen = with Kind Regards from Arnt... ;-)
> 
>   Scenarios always come in sets of three: 
>   best case, worst case, and just in case.
> 

Hi,

>> Should we make requested disk cache size and cache memory size scale
>> proportionately?
First of all, I think it's a good idea, and I would like to include the
patch.

>> Should total disk cache size be limited by available ram, thus
>> maintaining the ratio in low memory conditions? (meaning, if there are
>> only 4mb ram available, limit disk cache to 100M?)

This is exactly what is worrying me.  There is currently  no check for
diskspace either, which means there is a high risk on running out of
diskspace on /var.  Should we also add checks for available diskspace and
enough memory?  But how much memory could be used out of total.  And how
much diskspace?

Kind regards,

       Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

On Sunday 10 March 2002 08:07 pm, you wrote:
> For every 50 MB disk cache squid needs around about 2 MB ram cache.
>
> More specifically, every cached object in squid needs 72 bytes
> reserved in ram.
>
> This means for a 250 MB disk cache we need round about 10 MB ram
> cache.
>
> In /var/ipcop/proxy/squid.conf there is a fixed amount of 2 MB
> reserved.
>
> cache_mem 2 MB
>
> Should we make requested disk cache size and cache memory size scale
> proportionately?
>
> Should total disk cache size be limited by available ram, thus
> maintaining the ratio in low memory conditions? (meaning, if there
> are only 4mb ram available, limit disk cache to 100M?)
>
> At least, we could scale the cache_mem variable based on total disk
> cache requested and assume the user has enough ram.
>
> Do we have a low ram warning system in case people jack this up to
> the point everything is swapping constantly?

Persuant to this, I have made three changes to proxy.cgi to take care 
of the cache_mem size. This does not include memory size testing, but 
it does automatically allocate 1 meg of cache_mem for every 25 megs of 
disk cache. A side benefit of this is that in a low memory situation, 
you could reduce your cache size and gain back a little ram. (but not 
as much as turning off the proxy)

(and I screwed up and didn't save the original file, so there is no 
diff)

In /home/httpd/cgi-bin/proxy.cgi

after
my $errormessage = '';

insert
my $cachemem = '';


after
        &writehash("${swroot}/proxy/settings", \%proxysettings);

insert
        $cachemem = ( $proxysettings{'CACHE_SIZE'} / 25 );

replace
cache_mem 2 MB

with
cache_mem $cachemem MB


Once again, I apoligize for not saving the original for a diff.

This is tested and working.

Hi guys,

I'm afraid I've been a bit busy recently.  Was anything decided on which
language to use, how to specify the APIs etc. and how the project's to
be split?

PhilS.

In article <Pin...@se...
>, Mark Wormgoor <ma...@wo...> writes
>Hi,
>
>Trust me, I have not missed the versioning discussion. Have been very busy,
>since I just bought a house last week.  So am in lots of paperwork,
>mortgages and selling my old house.
>
>Anyway, my main reason for not going to 0.1.2 was having a lot of stuff on
>the shelf that I want to push into a new release, 0.1.2.  But, I want to do
>a beta first, because of the major impact.

House buying can be a very stressful time, so I've got some bugs for you
to take your mind off it... ;-)


Two new ones, and a few left over from 0.1.1 that I hadn't noticed
before:

Program Failure: /usr/local/squid-graph/bin/squid-graph
"Can't locate object method "png" via package "GD::Image" at
/usr/local/squid-graph/bin/squid-graph line 1006."


Incorrect Behaviour: /etc/rc.d/rc.updatered
The DNS server entries from the DHCP settings file overwrite the ones
from the ethernet settings file at the start of this script, as they
both use the same variable names for the servers.  So if the DHCP server
hasn't been configured and red is 'static', DNS resolution doesn't work.

Also, doesn't check if dnsmasq is already running before attempting to
start it.


User Interface: /home/httpd/cgi-bin/logs.cgi/log.dat
The Login/Logout and SSH settings do not display anything, as the
regexes don't match the entries in the log.


User Interface: /var/ipcop/lang/en.pl
Missing translation for 'source ip bad'.  This is used in dmzholes.cgi
and allows an invalid source IP to be entered.


Cosmetic: /home/httpd/
Some sub-folders and files are unknown user and group '501'.


(Installed using the ISO)

-- 
Kevin Richards

Hello,

I just installed 0.1.2 beta 1, and discovered the following problem:

The script rc.updatered contains the following two lines:

    . /var/ipcop/ethernet/settings
    . /var/ipcop/dhcp/settings

Both of these files contain the variables DNS1 and DNS2. The DHCP
settings "win", and dnsmasq won't even start with the default install.

Switching the order of these two lines solved the problem, but
probably the variable names should be changed (RED_DNS1, DHCP_DNS1
etc.).

Best regards,

;)avid
 <><