ipcop-devel Mailing List for IPCop Firewall

Hi

Those list members that keep an eye on the Language Database at
http://www.ipcop.org/langs will know that new words and phrases are being
slowly added to Language Database to cater for the new features that have
been added to V1.4.0

So far, more than 130 phrases have been added, which cover these sections:

# Shaping
# Proxy mods
# SSH mods
# Snort download
# Wireless
# DHCP / Hosts Enhancement
# Edit Hosts Enhancement
# Aliases Enhancement
# Fritz!DSL
# Fritz!DSL Upload
# backup.cgi
# NTPD mods
# Bewan/Sagem changes
# Enable/Disable fixes
# System status
# Miscellaneous Stuff

Still to be added are sections on:

# New GUI                     about (say) 25
# VPN stuff                              118
# Logging mods                            23
# Services.cgi Page - for Firewall Rules  12
# Networks.cgi Page - for Firewall Rules  12

So that leaves about 190 to go :(

Thanks to everyone that has been keeping up with the changes. You know who
you are :)

Eric

----- Original Message -----
From: "Alan Hourihane" <al...@fa...>
To: "Dave Roberts" <da...@cz...>
Cc: <ipc...@li...>
Sent: Tuesday, September 30, 2003 6:43 PM
Subject: Re: [IPCop-devel] 1.4.0a1 Problems Booting from CD


> On Tue, Sep 30, 2003 at 05:38:52PM +0100, Dave Roberts wrote:
> > Just installed 1.4.0a1 (cvs from late on 29th) on my firewall machine.
> > Build went fine with no errors.
> >
> > The only problem I had was booting from the CD.  I checked the ISO by
> > mounting it under VMware - booted fine.  I burned the ISO using Nero as
> > usual.  Both my firewall machine and a spare workstation did not
> > recognise it as a bootable CD.  I then connected the CDRW drive used to
> > write the CDR to VMware and put the burned CD in and VMware booted off
> > it no problem.  I tried the same using a DVD drive - booted ok.  Tried
> > burning two more times with different options e.g. finalising the disc,
> > DAO vs TAO, with the same result.  Any ideas?  BTW the first CD-ROM I
> > burned worked fine with boot floppies which makes me think that the CDRW
> > drive is ok.
>
> I've not used Nero for quite some time, but cdrecord with the -raw option
> always works for me.
>
> Alan.
>
I am using Nero 5.5.8.0 and it work for me. I do it last on sunday if I
remember well.
I have just 'write' and 'track at once' selected (and even not finalize).
I write on CDRW and use a luxus solution (a CD writer) to boot because old
CD reader were not capable to read CDRW

Hi,

sorry, I posted the message below in the wrong List. Here now again in=20
the correct List.

Hi,

I use the new CVS Snapshot from 20030930 and I found an new error since=20
today. Before I used the build 20030929.
After "chmod 666 /var/ipcop/proxy/viewersettings" the error is gone.

Another question is, why I can=B4t make backups until I erase the entry=20
"/etc/ssh/moduli" in /var/ipcop/backup/include.system?

Sorry for my broken english.

Regards
Habib Azimi

P.S.: you make a great job:)

On Tue, Sep 30, 2003 at 05:38:52PM +0100, Dave Roberts wrote:
> Just installed 1.4.0a1 (cvs from late on 29th) on my firewall machine.
> Build went fine with no errors.  
> 
> The only problem I had was booting from the CD.  I checked the ISO by
> mounting it under VMware - booted fine.  I burned the ISO using Nero as
> usual.  Both my firewall machine and a spare workstation did not
> recognise it as a bootable CD.  I then connected the CDRW drive used to
> write the CDR to VMware and put the burned CD in and VMware booted off
> it no problem.  I tried the same using a DVD drive - booted ok.  Tried
> burning two more times with different options e.g. finalising the disc,
> DAO vs TAO, with the same result.  Any ideas?  BTW the first CD-ROM I
> burned worked fine with boot floppies which makes me think that the CDRW
> drive is ok.

I've not used Nero for quite some time, but cdrecord with the -raw option
always works for me.

Alan.

Just installed 1.4.0a1 (cvs from late on 29th) on my firewall machine.
Build went fine with no errors. =20

The only problem I had was booting from the CD.  I checked the ISO by
mounting it under VMware - booted fine.  I burned the ISO using Nero as
usual.  Both my firewall machine and a spare workstation did not
recognise it as a bootable CD.  I then connected the CDRW drive used to
write the CDR to VMware and put the burned CD in and VMware booted off
it no problem.  I tried the same using a DVD drive - booted ok.  Tried
burning two more times with different options e.g. finalising the disc,
DAO vs TAO, with the same result.  Any ideas?  BTW the first CD-ROM I
burned worked fine with boot floppies which makes me think that the CDRW
drive is ok.

Dave

Hi,

I have just tried to build IPCop 1.3.0 from the cvs file from 27/09/2003 and 
had the following problems:

3 package versions not found
libpcap-0.6.2-11.7.2.0
tcpdump-3.6.2-11.7.2.0
kudzu_0.99.66.orig

These I corrected with the versions:
libpcap-0.6.2-17.7.2.2
tcpdump-3.6.3-17.7.2.3
kudzu_0.99.50.orig

Is this OK? (especially the reduction in version number for kudzu).

Then, when building IPcop I got two error messages which weren't 
replicated into the log.  These were:

Building IPAC
cp: omitting directory /usr/cvs/ipcop/config/ipcap-ng/CVS

Finishing up install root filesystem
cp: cannot stat /var/tmp/ipcop ... /usb/*hci.o

Do these matter or can I ignore them?

Thanks
David
====
D.S. Hodgson
Cerdo Ltd    EMail ad...@ce...

  PGP key  : CE 8B 73 4E BA 22 10 76
fingerprint: 32 73 C9 14 1A 43 37 62
=====
If it's PgP signed, it's official. If not ...

Sorry, forgot to say.  Building on RH 7.3 fully patched / udpated.  Build was 
from unaltered cvs.

David

On 28 Sep 2003, at 18:17, ipc...@li... wrote:

>Hi,
>
>I have just tried to build IPCop 1.3.0 from the cvs file from 27/09/2003 and 
>had the following problems:
>
>3 package versions not found
>libpcap-0.6.2-11.7.2.0
>tcpdump-3.6.2-11.7.2.0
>kudzu_0.99.66.orig
>
>These I corrected with the versions:
>libpcap-0.6.2-17.7.2.2
>tcpdump-3.6.3-17.7.2.3
>kudzu_0.99.50.orig
>
>Is this OK? (especially the reduction in version number for kudzu).
>
>Then, when building IPcop I got two error messages which weren't 
>replicated into the log.  These were:
>
>Building IPAC
>cp: omitting directory /usr/cvs/ipcop/config/ipcap-ng/CVS
>
>Finishing up install root filesystem
>cp: cannot stat /var/tmp/ipcop ... /usb/*hci.o
>
>Do these matter or can I ignore them?
>
>Thanks
>David


====
D.S. Hodgson
Cerdo Ltd    EMail ad...@ce...

  PGP key  : CE 8B 73 4E BA 22 10 76
fingerprint: 32 73 C9 14 1A 43 37 62
=====
If it's PgP signed, it's official. If not ...

Hi, 

I have just tried to build IPCop 1.3.0 from the cvs file from 27/09/2003 and 
had the following problems: 

3 package versions not found libpcap-0.6.2-11.7.2.0 tcpdump-3.6.2-11.7.2.0 
kudzu_0.99.66.orig 

These I corrected with the versions: libpcap-0.6.2-17.7.2.2 tcpdump-3.6.3-
17.7.2.3 kudzu_0.99.50.orig 

Is this OK? (especially the reduction in version number for kudzu). 

Then, when building IPcop I got two error messages which weren't 
replicated into the log.  These were: 

Building IPAC cp: omitting directory /usr/cvs/ipcop/config/ipcap-ng/CVS 

Finishing up install root filesystem cp: cannot stat /var/tmp/ipcop ... 
/usb/*hci.o 

Do these matter or can I ignore them? 

Sorry, forgot to say.  Building on RH 7.3 fully patched / udpated.  Build was 
from unaltered cvs. 

Thanks David 
====
D.S. Hodgson
Cerdo Ltd    EMail ad...@ce...

  PGP key  : CE 8B 73 4E BA 22 10 76
fingerprint: 32 73 C9 14 1A 43 37 62
=====
If it's PgP signed, it's official. If not ...

Hi,

> what is the status regarding the new/futur web site ? 
> Do you still need some help or space ? 
> 
> I have something like 100Mb available, so if I can help.
> May be builing an official mirror site ? 

We're now working on the new site.  It's already (quietly) up and running 
on Sourceforge.  You can see it at http://www.ipcop.org/index.php.
It needs some work to finish up and then we need to start moving the 
documents from the old into the new website.

Kind regards,

Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:ma...@wo...       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

Hello,

what is the status regarding the new/futur web site ? 
Do you still need some help or space ? 

I have something like 100Mb available, so if I can help.
May be builing an official mirror site ? 

Best Regards,
Eric.


Eric Boniface - Hewlett Packard/HP PSG IT Ops
Tel.+33-4.56.38.8339 /E-mail: eri...@hp...
--- Want to get a good firewall ? Check  http://www.ipcop.org

On Fri, 26 Sep 2003 12:58:23 +0100, 
Alan Hourihane <al...@fa...> wrote in message 
<200...@fa...>:

> Here's Olaf's response....
> 
> http://sites.inka.de/bigred/archive/cipe-l/2003-09/msg00252.html
> 
> To sum up, even Olaf doesn't have enough time anymore, and he even
> questions if anyone needs CIPE, and why not use the implementations
> of IPSec now.
> 
> I think we can regard CIPE as no longer useful to IPCop.

..we should declare it depreciated until it gets fixed as Olaf 
advices, the easy configuration speaks in favor of it in lan 
settings, and cipe can be wrapped in ssh or ipsec tunnels going 
out thru ipcop's.  Several more such old obsoleted tunnel types 
like pptp, can be wrapped in too.

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

Darren Critchley wrote:

> Roger Murer wrote:
> 
>>Helmut Schleyer wrote:
>>
>>>
>>>Roger Murer wrote:
>>>
>>>
>>>>Helmut Schleyer wrote:
>>>>
>>>>
>>>>>>>>Yes, I build on a Debian Woody 3r1. I seem not to have any
>>>>>>>>problems with
> 
> 
> Hey, when you guys figure this all out, could you please go to :
> http://www.ipcop.org/cgi-bin/twiki/view/IPCop/IPCopBuildingv01
> 
> And update the howto with you what you needed to do to make it work.
> 
> Thanks
> 
> Darren
surely, over the time i already added some packages...

but as said in another mail, the next two weeks i'm on the road

helmet

> 

Roger Murer wrote:
> Helmut Schleyer wrote:
>> 
>> 
>> Roger Murer wrote:
>> 
>>> Helmut Schleyer wrote:
>>> 
>>>>>>> Yes, I build on a Debian Woody 3r1. I seem not to have any
>>>>>>> problems with

Hey, when you guys figure this all out, could you please go to :
http://www.ipcop.org/cgi-bin/twiki/view/IPCop/IPCopBuildingv01

And update the howto with you what you needed to do to make it work.

Thanks

Darren

Helmut Schleyer wrote:
> 
> 
> Roger Murer wrote:
> 
>> Helmut Schleyer wrote:
>>
>>>>>> Yes, I build on a Debian Woody 3r1. I seem not to have any 
>>>>>> problems with 
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> do you use stable testing ... ?
>>>>>
>>>> Stable, I just put an old 3GB hd in to my workstation and installed 
>>>> from 3r1 cd with a minimum install + the packages in the build FAQ.
>>>>
>>>>>
>>>>> do you remeber these packages?
>>>>
>>>>
>>>>
>>>>
>>>> No, but I have an old and a new packagelist and diff is my frend 
>>>> here :-):
>>>> dosfstools (I think you pointed me at that one)
>>>> libpam0g-dev (ssh was complaining during compilation)
>>>> libwrap0-dev (ssh was also complaining about this one missing)
>>>
>>>
>>>
>>> yes this libs are needed for ssh
>>>
>>> can you mail your lists?
>>>
>>
>> I put it here:
>> http://www.rmurer.ch/ipcop/ipcop_dev_list_20030925.txt
> 
> thank you, i have downloaded it.
> 2 hours ago I I've installed my IPCop-test-System in am mobile 19" rack, 
> the next 2 weeks i have to do a roadshow, i will do my next build after 
> this.

You are welcome.
I did a new build, but I am still haveing trouble with sshd (missing 
libwrap.so.0) and graphs.

Roger

-- 
Roger Murer
E-Mail: r....@ti...

Roger Murer wrote:
> Helmut Schleyer wrote:
> 
>>>>> Yes, I build on a Debian Woody 3r1. I seem not to have any problems 
>>>>> with 
>>>>
>>>>
>>>>
>>>>
>>>> do you use stable testing ... ?
>>>>
>>> Stable, I just put an old 3GB hd in to my workstation and installed 
>>> from 3r1 cd with a minimum install + the packages in the build FAQ.
>>>
>>>>
>>>> do you remeber these packages?
>>>
>>>
>>>
>>> No, but I have an old and a new packagelist and diff is my frend here 
>>> :-):
>>> dosfstools (I think you pointed me at that one)
>>> libpam0g-dev (ssh was complaining during compilation)
>>> libwrap0-dev (ssh was also complaining about this one missing)
>>
>>
>> yes this libs are needed for ssh
>>
>> can you mail your lists?
>>
> 
> I put it here:
> http://www.rmurer.ch/ipcop/ipcop_dev_list_20030925.txt
thank you, i have downloaded it.
2 hours ago I I've installed my IPCop-test-System in am mobile 19" rack, 
the next 2 weeks i have to do a roadshow, i will do my next build after 
this.

helmet

> 
> Roger
> 

At 05:32 AM 9/26/2003, Ufuk Altinkaynak wrote:
>Hello,
>Do we have guidelines for bulding addons?
>Something like installer, doku,  etc.

There are only unofficial addons right now - Gavin is maintaining it and he 
has not had time to add any guidelines on his website.

Here are the basic guidelines you can follow them and email the finished 
sample to me if you want it tested.

1. the installer has to be completely automated.

Usually there is a setup file from the addonz system plus two text files 
for the addonz page.  This untars the tarball that actually contains the 
files involved in the addon and runs the automated install script.  If you 
want to see how they are done, download some of the addons and untar them 
in the tmp directory of your ipcop or dev. pc.

2. the addon should use the language files so that others can add 
translations as required.  Make sure you add a comment to the beginning and 
end of the section add to the en file for example so that it can be easily 
removed or edited.

3. make the addon as robust as possible so that if patches are added, the 
addon will still work.

Cheers,

Fernand. 

Error 404

It's may be sourceforge related but I am able to browse to other projects.

Here's Olaf's response....

http://sites.inka.de/bigred/archive/cipe-l/2003-09/msg00252.html

To sum up, even Olaf doesn't have enough time anymore, and he even
questions if anyone needs CIPE, and why not use the implementations
of IPSec now.

I think we can regard CIPE as no longer useful to IPCop.

Alan.

Helmut Schleyer wrote:
>>>> Yes, I build on a Debian Woody 3r1. I seem not to have any problems 
>>>> with 
>>>
>>>
>>>
>>> do you use stable testing ... ?
>>>
>> Stable, I just put an old 3GB hd in to my workstation and installed 
>> from 3r1 cd with a minimum install + the packages in the build FAQ.
>>>
>>> do you remeber these packages?
>>
>>
>> No, but I have an old and a new packagelist and diff is my frend here 
>> :-):
>> dosfstools (I think you pointed me at that one)
>> libpam0g-dev (ssh was complaining during compilation)
>> libwrap0-dev (ssh was also complaining about this one missing)
> 
> yes this libs are needed for ssh
> 
> can you mail your lists?
> 

I put it here:
http://www.rmurer.ch/ipcop/ipcop_dev_list_20030925.txt

Roger

-- 
Roger Murer
E-Mail: r....@ti...

Hello,
Do we have guidelines for bulding addons?
Something like installer, doku,  etc.
Best Regards
Ufuk Altinkaynak

Alan Hourihane wrote:
> No IPSec solutions ship with Win9x, so you'd have to tell people to buy
> one. I don't feel great about that. That's why I'm pursuing a free clie=
nt
> alternative. OpenVPN fills that requirement on both ends.

As you remarked correctly, there's no client for Win9x. But should IPCop=20
really support VPN connections to those very old OSes? MS itself does=20
not support Win9x and WinME anymore (and therefore there won't be any=20
new security patches, too). These OSes are too insecure at all.

So I'd suggest to concentrate on a VPN-solution which runs at least on=20
WinXP and Win2k with highest possible security *and* _usability_ on=20
those platforms.

--=20
Michael A. G=FCtlbauer
http://www.guetlbauer.com/

On Thu, Sep 25, 2003 at 11:58:09PM +0100, Neil A. Hillard wrote:
> Hi,
> 
>         a couple of days ago I built IPCop 1.4.0 from a CVS snapshot
> (ipcop-dev-v131-20030922.tgz).
> 
>         For some reason the machine I'm using throws a kernel panic when
> I have the CD-ROM drive connected !!!  As soon as I disconnect it and
> boot off the floppies it's all OK.
> 
>         As I don't then have a CD-ROM connected I have to do a HTTP
> install.  This all goes well until after the files have been installed
> and then I get an 'Unable to unmount CDROM' error message.
> 
>         I'm sure I remember this happening before and being fixed...
> anyone else had the same thing ???

It's a bug that was fixed in the CVS yesterday.

Do a rebuild and everything should be fine.

Alan.

Roger Murer wrote:
> Helmut Schleyer wrote:
> 
>>> Yes, I build on a Debian Woody 3r1. I seem not to have any problems with 
>>
>>
>> do you use stable testing ... ?
>>
> Stable, I just put an old 3GB hd in to my workstation and installed from 
> 3r1 cd with a minimum install + the packages in the build FAQ.
> 
>>> usb, building the iso goes without error messages. But the graphs do not 
>>
>>
>> if fixed this by modifying make.sh
>> I added the follownig lines to my make.sh :
>> echo "`date '+%b %e %T'`: Symlink for ipac-ng" | tee -a $LOGFILE
>> cd $TMPDIR/build/usr/lib/
>> ln -s libgdbm.so.2 libgdbm.so.1
> 
> Yes, I applied that one, but it doesn't fix it.
> 
>>
>> just before this line :
>> # Compressing root filesystem
>>
>> (it's added to the building-howto)
>>
>>> work and ssh seems not to work. 
>>
>>
>> ssh works here
>>
>> I had to install some more devel
>>
>>> packages lately to stop make.sh complaining.
>>
>>
>> do you remeber these packages?
> 
> No, but I have an old and a new packagelist and diff is my frend here :-):
> dosfstools (I think you pointed me at that one)
> libpam0g-dev (ssh was complaining during compilation)
> libwrap0-dev (ssh was also complaining about this one missing)
yes this libs are needed for ssh

can you mail your lists?
> 
> Roger
> 

helmet

Roger Murer wrote:
 >>> Yes, I build on a Debian Woody 3r1. I seem not to have any problems 
with
 >> I had to install some more devel
 >>
 >>> packages lately to stop make.sh complaining.
 >>
 >>
 >> do you remeber these packages?
 >
 > No, but I have an old and a new packagelist and diff is my frend here 
:-):
 > dosfstools (I think you pointed me at that one)
 > libpam0g-dev (ssh was complaining during compilation)
 > libwrap0-dev (ssh was also complaining about this one missing)

Ooops, I went trough the building howto and rechecked my packages. Seems 
my build system is out of date, found some packages i had not installed!
I am doing a new build now (this takes a while on my junk hardware :-) 
and see what I get.

Roger

-- 
Roger Murer
E-Mail: r....@ti...

Helmut Schleyer wrote:
>> Yes, I build on a Debian Woody 3r1. I seem not to have any problems with 
> 
> do you use stable testing ... ?
> 
Stable, I just put an old 3GB hd in to my workstation and installed from 
3r1 cd with a minimum install + the packages in the build FAQ.

>> usb, building the iso goes without error messages. But the graphs do not 
> 
> if fixed this by modifying make.sh
> I added the follownig lines to my make.sh :
> echo "`date '+%b %e %T'`: Symlink for ipac-ng" | tee -a $LOGFILE
> cd $TMPDIR/build/usr/lib/
> ln -s libgdbm.so.2 libgdbm.so.1
Yes, I applied that one, but it doesn't fix it.

> 
> just before this line :
> # Compressing root filesystem
> 
> (it's added to the building-howto)
> 
>> work and ssh seems not to work. 
> 
> ssh works here
> 
> I had to install some more devel
> 
>> packages lately to stop make.sh complaining.
> 
> do you remeber these packages?
No, but I have an old and a new packagelist and diff is my frend here :-):
dosfstools (I think you pointed me at that one)
libpam0g-dev (ssh was complaining during compilation)
libwrap0-dev (ssh was also complaining about this one missing)

Roger

-- 
Roger Murer
E-Mail: r....@ti...