ipcop-devel Mailing List for IPCop Firewall

----- Original Message ----- 
From: "Sven Fehling" <sv...@ex...>
To: <ipc...@li...>
Sent: Friday, September 30, 2005 2:29 PM
Subject: [IPCop-devel] Few ideas for 1.5


> Hi!
>
> I have a few ideas for 1.5.
>
> - Changings for makegraph
>
>    Now we create all graphs through makegraph every five minutes.
>    I think it would be much better if we create them only when we need
>    them. We can start RRD::create from within the cgi-script (I think
>    the best way to do so is with another script called by the
>    cgi-script).
>
>    We need only four graphs at once on one page and the creation takes
>    less then 1s on my PIII@450 so I don't think it slows down.
>
how much time will that take on a 486?
this will be the minimal hardware for v1.5

[snip]
> - Changes for updates
>
>    I think it would be great if we have another update-tree only for
>    security-reasons.
>    Let me explain:
>    In the moment, the squid- and the snort-binaries are vulnerable.
>    If we have an updatetree only for security, we would be able
>    to fix these without bringing all the other changes in the CVS
>    in this update.
>
I agree that we would need another tree if we continue to improve v1.4 but I
would prefer to slowdown improvement on v1.4 and really accelerate v1.5
development.

Wich vulnerability do you know for snort?
- we don't use -T so the one fixed in 2.4.2 is not a concern for us
- we don't use -v so for this one
http://www.securityfocus.com/bid/14811/info

I am not so happy to have delayed 1.4.9 this way but there is only fixes
planned for 1.4.9 and it should be released this week-end.


Gilles

Hi!

I have a few ideas for 1.5.

- Changings for makegraph

   Now we create all graphs through makegraph every five minutes.
   I think it would be much better if we create them only when we need
   them. We can start RRD::create from within the cgi-script (I think
   the best way to do so is with another script called by the
   cgi-script).

   We need only four graphs at once on one page and the creation takes
   less then 1s on my PIII@450 so I don't think it slows down.


- Having a mailer on the Cop

   It would be nice if there would be a small application to send mail.
   In the moment I use sendEmail[1] to get messages from my cop.


- Changes for updates

   I think it would be great if we have another update-tree only for
   security-reasons.
   Let me explain:
   In the moment, the squid- and the snort-binaries are vulnerable.
   If we have an updatetree only for security, we would be able
   to fix these without bringing all the other changes in the CVS
   in this update.


Cheers,
Sven


[1] http://caspian.dotconf.net/menu/Software/SendEmail/

Le Jeudi 29 Septembre 2005 20:35, Eric Oberlander a =E9crit :
> Update of /cvsroot/ipcop/ipcop/src/misc-progs
> In directory
> sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv13927/ipcop/src/misc-progs
>
> Modified Files:
>       Tag: IPCOP_v1_4_0
> 	ipcopbackup.c
> Log Message:
> Add Darren Critchley's patch to check floppy disk before attempting a
> backup.
>
> Index: ipcopbackup.c
> =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
> RCS file: /cvsroot/ipcop/ipcop/src/misc-progs/ipcopbackup.c,v
> retrieving revision 1.8.2.1
> retrieving revision 1.8.2.2
> diff -C2 -d -r1.8.2.1 -r1.8.2.2
> *** ipcopbackup.c	21 Mar 2004 20:48:28 -0000	1.8.2.1
> --- ipcopbackup.c	29 Sep 2005 18:35:47 -0000	1.8.2.2
> ***************
> *** 87,90 ****
> --- 87,97 ----
>   	safe_system ("/usr/sbin/updfstab");
>
> + 	/* Darren Critchley - check for floppy disk in disk drive before
> continuing */ + 	snprintf (command, STRING_SIZE-1, "dd if=3D/dev/floppy
> of=3D/dev/null bs=3D1k count=3D1 2> /dev/null"); + 	if (safe_system(comma=
nd)) {
> + 		perror( "Error: No floppy in drive or bad floppy in drive" );
> + 		exit(1);
> + 	}
> +
>   	/* Clearing disk */
>   	safe_system ("/bin/dd if=3D/dev/zero of=3D/dev/floppy bs=3D1k 2> /dev/=
null");
>
>

"ioctl" system call is a classical way of controlling hardware within C cod=
e.
Use of workaround like this one is not good because you don't really
know what happens in DD. Only my opinion ;-)

info here:
http://linux.about.com/library/cmd/blcmdl2_ioctl.htm

=46ranck

Bugs item #1304835, was opened at 2005-09-26 13:24
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1304835&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Documentation
Group: 1.4.8
Status: Open
Resolution: None
Priority: 5
Submitted By: bugmagic (bugmagic)
Assigned to: Harry Goldschmitt (goldharv)
Summary: Appendix C.5: Typo in double-quotes

Initial Comment:
See
http://www.ipcop.org/1.4.0/en/install/html/backup_CF.html

It says:
$ ssh -p 222 root@192.168.1.1 "dd if=/dev/harddisk
>backup.img"

But shouldn't it say:
$ ssh -p 222 root@192.168.1.1 "dd if=/dev/harddisk"
>backup.img


ps.thanks for all the hard work on ipcop! :)


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1304835&group_id=40604

"IPCop Development" <ipc...@we...> 
wrote in message 
news:6.2...@ma......

> At 09:51 PM 9/21/2005, Dave Harry wrote:
<snip>

> You can't actually 'fix' it since you are now dealing with routing and 
> packet rewriting... if you could see the original IP address from the 
> target box on orange, it would try to re-send the packet directly to the 
> green device IP.  Unfortunately, the packet has to take the same path or 
> the routing gets all munged up.  It has to pretend to come from the Red 
> IP, which is where the fancy IPCop rewriting kicks in.  Otherwise it would 
> route like a triangle, from Green to IPCopRed to Orange and directly back 
> to Green - and your Green device would see a mystery packet coming from an 
> IP (in Orange) that it didn't ask for, and just ignore it.
>
> HTH,
>
> -Matthew

Yes, perfectly sensible. Thank you.

-- 
Dave Harry 

Thx All,
 
problem solved... successful compiled version 1.4.9  ..
cheers,

Roger Murer <r....@ti...> 說：
Hi

On Debian:
su -c "apt-get install perl-modules"

should install the perl modules, which according to http://packages.debian.org
contains Usage.pm

Kind regards

Roger



>-- Original-Nachricht --
>From: ng dicky 
>To: Gilles Espinasse ,
> IPC...@li...
>Subject: [IPCop-devel] ??? Re: [IPCop-devel] IPCop ipcop-dev-v140
> -20050920.tgz compiling error: [ERROR: Building lin
> ux]
>Date: Wed, 21 Sep 2005 15:20:18 +0800 (CST)
>
>
>Hi Gilles,
>
>Thx for the remind,
>
>Can u tell me how to install the package??
>I am new to linux..
>
>thx,
>dicky
>
>Gilles Espinasse ??
>i suppose you need to install a perl package containing Usage.pm?
>
>Gilles
>----- Original Message -----
>From: ng dicky
>To: IPC...@li...
>Sent: Wednesday, September 21, 2005 8:28 AM
>Subject: [IPCop-devel] IPCop ipcop-dev-v140-20050920.tgz compiling error:
>[ERROR: Building linux]
>
>
>Hi all,
>
>I am trying to compile the IPCop version ipcop-dev-v140-20050920.tgz from
>CoLinux(kernel version 2.4.26-co-0.6.1, Debian
>Debian-3.0r2.ext3-mit-backports.1gb), after sometimes, the following error
>occurred:
>
>====================
>Sep 21 06:18:49: Building linux
>ERROR: Building linux
>Check /ipc/ipcop/log/ipcop.log for errors if applicable
>
>======================
>I checked the log and it shows the following error msg:
>
>====================
>cd /ipc/ipcop/build/usr/src/patch-o-matic* && yes 'y' |
>./runme --kernel-path=/ipc/ipcop/build/usr/src/linux/ --iptables-path=/ipc/i
>pcop/build/usr/src/iptables/ pending
>Can't locate Pod/Usage.pm in @INC (@INC contains: /etc/perl
>/usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5
>/usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8
>/usr/local/lib/site_perl .) at ./runme line 14.
>BEGIN failed--compilation aborted at ./runme line 14.
>make: *** [/ipc/ipcop/log/linux-2.4.31-tools] Error 2
>
>==================
>
>from the log, i found the error msg: Can't locate Pod/Usage.pm in @INC,
i
>am
>not sure if this is the reason to cause the error.
>
>pls help.!!!
>
>dicky
>
>_______________________________________
>?????? email ???
>?? Yahoo! Messenger http://messenger.yahoo.com.hk
>
>
>
>-------------------------------------------------------
>SF.Net email is sponsored by:
>Tame your development challenges with Apache's Geronimo App Server.
>Download it for free - -and be entered to win a 42" plasma tv or your very
>own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
>_______________________________________
> ?????? email ???
> ?? Yahoo! Messenger http://messenger.yahoo.com.hk

----
R. Murer
EMail: r....@ti...



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

_______________________________________
 想即時收到新 email 通知？
 下載 Yahoo! Messenger http://messenger.yahoo.com.hk 

thx a lot Achim.

Achim Weber <dot...@gm...> 說：> Thx Achim,
> 
> i updated the grep and it works,...
> can i know the reason behind this?? why the problem of compiling 3cp4218 
> modules is releated to the supports the "--max-count" option from grep ???
> 
> thx again
> dicky

In make.sh is the grep call to lfs/linux with option "--max-count" to search the
used kernelversion (IPCop kernel _not_ the host kernel).
The located kernelversion is stored in the variable $KVER. If the grep call fail
the variable $KVER is empty and buildprocess will fail too. The issue is not
specially related to 3cp4218, but it is one of the first packages to compile so
it fails first ;-)

Achim



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. 
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel


_______________________________________
 想即時收到新 email 通知？
 下載 Yahoo! Messenger http://messenger.yahoo.com.hk 

> Thx Achim,
>  
> i updated the grep and it works,...
> can i know the reason behind this?? why the problem of compiling 3cp4218 
> modules is releated to the supports the "--max-count" option from grep ???
>  
> thx again
> dicky

In make.sh is the grep call to lfs/linux with option "--max-count" to search the
used kernelversion (IPCop kernel _not_ the host kernel).
The located kernelversion is stored in the variable $KVER. If the grep call fail
the variable $KVER is empty and buildprocess will fail too. The issue is not
specially related to 3cp4218, but it is one of the first packages to compile so
it fails first ;-)

Achim

At 09:51 PM 9/21/2005, Dave Harry wrote:
>"Robert Kerr" <Lit...@xs...>
>wrote in message news:112...@cc......
> > On Wed, 2005-09-21 at 11:54 +1000, Dave Harry wrote:
> >
> >> Yes, I know it's a bit of a mess to get your head around.
> >> Can anyone suggest what sort of mod I'd need to the code since whatever
> >> has
> >> changed in 1.4.8?
> >
> > You shouldn't need these rules in 1.4.8 - the functionality ought to be
> > builtin. That said I'm not sure I can see why your rules would stop this
> > working. See what happens if you try without your extra rules.
>
>Hey! You're right! it now seems better than in 1.4.6.
>
>Requests directly to the orange IP made from machines in green now seem to
>be translated properly, and arrive from 192.168.1.xx.
>
>But, any requests from green using the red IP address (i.e. the roaming in
>and out laptop users) are arriving supposedly from 192.168.1.1 (the IPCop
>green interface)
>That's far less than devastating, but it might be nice if I could fix it.
>
>--
>Dave Harry

You can't actually 'fix' it since you are now dealing with routing 
and packet rewriting... if you could see the original IP address from 
the target box on orange, it would try to re-send the packet directly 
to the green device IP.  Unfortunately, the packet has to take the 
same path or the routing gets all munged up.  It has to pretend to 
come from the Red IP, which is where the fancy IPCop rewriting kicks 
in.  Otherwise it would route like a triangle, from Green to IPCopRed 
to Orange and directly back to Green - and your Green device would 
see a mystery packet coming from an IP (in Orange) that it didn't ask 
for, and just ignore it.

HTH,

-Matthew 

Thx Achim,
 
i updated the grep and it works,... 
can i know the reason behind this?? why the problem of compiling 3cp4218 modules is releated to the supports the "--max-count" option from grep ???
 
thx again
dicky

Achim Weber <dot...@gm...> 說：
Send the mail with wrong mailaccount.

So here again with my list-member-account:
-------------------------------------
>> I Checked the log file and found the following:
>>
>> ==============Log=============
>> make -C /lib/modules/-smp/build SUBDIRS=/usr/src/3cp4218/module2
>> XDSLUSB-MODULE=3cp4218 modules make: *** /lib/modules/-smp/build: No such
>> file or directory. Stop. make: Entering an unknown directorymake: Leaving

[...]

> without having looked at the makefile for 3cp4218, I can tell you with 
certainty that there's a undefined variable for the kernel version somewhere. 
Conside this: make -C /lib/modules/-smp/build and in the particular the part of 
the path -smp. That looks as if it the actual kernel version number is missing. 
It probably should look something like 2.6.13.2-smp if you're building latest 
cvs or 2.4.31-smp if building 1.4.8.
>
> Concentrate on this. That's where the problem lies. I'm too lazy to look at 
the source now :-)
>
> IvanK.


Hi dicky,

check if your grep supports the "--max-count" option. I had issues with it on 
Debian Woody, see [1]. On Debian Sarge is a other grep version which supports 
the option, so no problems there. In [1] is a workaround too.

Achim

[1] point 1) in http://marc.theaimsgroup.com/?l=ipcop-devel&m=110711066208333&w=2



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. 
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

_______________________________________
 想即時收到新 email 通知？
 下載 Yahoo! Messenger http://messenger.yahoo.com.hk 

Feature Requests item #1298996, was opened at 2005-09-22 20:15
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1298996&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Submitted By: major_tom1352 (major_tom1352)
Assigned to: Nobody/Anonymous (nobody)
Summary: Fixed time to restart red connection

Initial Comment:
When using a flat rate on a red connection, some
providers disconnect the line after 24 hours. It would
be great to have an option that ipcop disconnects the
line in the early mornig hours, so the line is
available for the day.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1298996&group_id=40604

On Thursday 22 September 2005 07:11 am, Gilles Espinasse wrote:
> Selon "IvanK." <ch...@ya...>:
> > On Thursday 22 September 2005 04:20 am, Franck Bourdonnec wrote:
> > > Le Jeudi 22 Septembre 2005 02:50, IvanK. a =C3=A9crit :
> > >
> > >  I took a little look also on instructions orders etc... You can
> > > reorder to follow LFS instructions, then test. If it's OK, no reason =
to
> > > reject your changes (on 1.5). Sometimes, arrangements are made to
> > > correct a problem then problem disapears but not the arrangement!
> > >
> > > Franck
> >
> > Yup,  just combed through binutils/gcc/glibc and wrote a few more
> > makefiles to
> > make ipcop build like lfs-6.1.  Right now it's doing gcc pass1.  Let's
> > hope all goes fine.  If it does, I'll try to compile on i386 and if it
> > works I'll clean up my changes and submit patches for consideration.
> >
> > IvanK.
>
> You should more consider building against IPCop v1.5 wich is derivated fr=
om
> LFS 6.1 build.
> IPCop v1.4 is derivated from LFS 5.0/5.1
>
> I will be reluctant for substential changes in v1.4.
>
> Since last Alan changes updating kernel to 2.6.13-2 and a more recent POM,
> on x86,the kernel build. But it fail later during ntp compilation.

Yes, that's what I'm doing -- compiling cvs.  When I said I'll try to make =
the=20
build behave more like LFS6.1, I meant cvs, not 1.4.8.

My changes to 1.4.8 are relatively minor and only affect powerpc.

IvanK.

Selon "IvanK." <ch...@ya...>:

> On Thursday 22 September 2005 04:20 am, Franck Bourdonnec wrote:
> > Le Jeudi 22 Septembre 2005 02:50, IvanK. a =C3=A9crit :
> >
> >  I took a little look also on instructions orders etc... You can
> > reorder to follow LFS instructions, then test. If it's OK, no reason =
to
> > reject your changes (on 1.5). Sometimes, arrangements are made to cor=
rect a
> > problem then problem disapears but not the arrangement!
> >
> > Franck
> >
>
> Yup,  just combed through binutils/gcc/glibc and wrote a few more makef=
iles
> to
> make ipcop build like lfs-6.1.  Right now it's doing gcc pass1.  Let's =
hope
> all goes fine.  If it does, I'll try to compile on i386 and if it works=
 I'll
> clean up my changes and submit patches for consideration.
>
> IvanK.
>
You should more consider building against IPCop v1.5 wich is derivated fr=
om LFS
6.1 build.
IPCop v1.4 is derivated from LFS 5.0/5.1

I will be reluctant for substential changes in v1.4.

Since last Alan changes updating kernel to 2.6.13-2 and a more recent POM=
, on
x86,the kernel build. But it fail later during ntp compilation.

Gilles

On Thursday 22 September 2005 04:20 am, Franck Bourdonnec wrote:
> Le Jeudi 22 Septembre 2005 02:50, IvanK. a =C3=A9crit :
>
>  I took a little look also on instructions orders etc... You can
> reorder to follow LFS instructions, then test. If it's OK, no reason to
> reject your changes (on 1.5). Sometimes, arrangements are made to correct=
 a
> problem then problem disapears but not the arrangement!
>
> Franck
>

Yup,  just combed through binutils/gcc/glibc and wrote a few more makefiles=
 to=20
make ipcop build like lfs-6.1.  Right now it's doing gcc pass1.  Let's hope=
=20
all goes fine.  If it does, I'll try to compile on i386 and if it works I'l=
l=20
clean up my changes and submit patches for consideration.

IvanK.

Le Jeudi 22 Septembre 2005 02:50, IvanK. a =C3=A9crit :
> It's been a week since my last update, so I thought I'd drop a line and
> assure people I haven't lost interest.
>
> 2) Getting cvs compiled
>
> 2) has also been problematic, much to my surprise.  I say that because my
> current powerpc devel server is already running LFS6.1.  The problem is
> that in building the static environment (chapted 5 in LFS), gcc creates
> broken binaries.  For example, ls from coreutils is compiled such that ls
> works but ls -la doesn't.  Further packages (starting from gzip) run a te=
st
> to establish if the environment is "sane."  This involves running ls -Lt =
on
> which the broken ls segfaults.  The same problem doesn't exist in 1.4.8 or
> in cvs compiled on i386.  So I'm trying to find the cause of this.
> I notice that ipcop departs from the LFS instructions in some important
> ways. First, you start off by building sed.  There's a comment in make.sh
> that you do this because you need some extensions.  Ok.  Later, when
> building the toolchain, you don't follow LFS in not removing the the
> binutils build and source directories which later you need to adjust the
> toolchain so that anything you build later will be linked against the new=
ly
> compiled glibc instead of the host glibc.  Therefore you can't guarantee
> the target doesn't get polluted with stuff from the host.  Maybe this is
> where the powerpc build breaks so I'll modify that part.  Further, you use
> the kernel headers from the kernel, rather than use linux-libc-headers as
> LFS does.  This is probably not a big issue.
>
> I'm very new to the devel list so it's possible you had valid reasons in
> modifying the LFS build instructions.
>
> Anyway, this is where I stand currently with the powerpc port.  I'll keep
> you posted.
>
> I've created patches for 1.4.8, but like I said, I want to get my new
> system in place so I can test my build for real before I start submitting
> anything back.
>
> IvanK.

 I took a little look also on instructions orders etc... You can
reorder to follow LFS instructions, then test. If it's OK, no reason to rej=
ect
your changes (on 1.5). Sometimes, arrangements are made to correct a=20
problem then problem disapears but not the arrangement!

=46ranck

Send the mail with wrong mailaccount.

So here again with my list-member-account:
-------------------------------------
 >> I Checked the log file and found the following:
 >>
 >> ==============Log=============
 >> make -C /lib/modules/-smp/build SUBDIRS=/usr/src/3cp4218/module2
 >> XDSLUSB-MODULE=3cp4218 modules make: *** /lib/modules/-smp/build: No such
 >> file or directory.  Stop. make: Entering an unknown directorymake: Leaving

[...]

 > without having looked at the makefile for 3cp4218, I can tell you with 
certainty that there's a undefined variable for the kernel version somewhere. 
Conside this:  make -C /lib/modules/-smp/build and in the particular the part of 
the path -smp.  That looks as if it the actual kernel version number is missing. 
  It probably should look something like 2.6.13.2-smp if you're building latest 
cvs or 2.4.31-smp if building 1.4.8.
 >
 > Concentrate on this.  That's where the problem lies.  I'm too lazy to look at 
the source now :-)
 >
 > IvanK.


Hi dicky,

check if your grep supports the "--max-count" option. I had issues with it on 
Debian Woody, see [1]. On Debian Sarge is a other grep version which supports 
the option, so no problems there. In [1] is a workaround too.

Achim

[1] point 1) in http://marc.theaimsgroup.com/?l=ipcop-devel&m=110711066208333&w=2

>> I Checked the log file and found the following:
>>
>> ==============Log=============
>> make -C /lib/modules/-smp/build SUBDIRS=/usr/src/3cp4218/module2
>> XDSLUSB-MODULE=3cp4218 modules make: *** /lib/modules/-smp/build: No such
>> file or directory.  Stop. make: Entering an unknown directorymake: Leaving
[...]

> without having looked at the makefile for 3cp4218, I can tell you with 
> certainty that there's a undefined variable for the kernel version somewhere.  
> Conside this:  make -C /lib/modules/-smp/build and in the particular the part 
> of the path -smp.  That looks as if it the actual kernel version number is 
> missing.  It probably should look something like 2.6.13.2-smp if you're 
> building latest cvs or 2.4.31-smp if building 1.4.8.
> 
> Concentrate on this.  That's where the problem lies.  I'm too lazy to look at 
> the source now :-)
> 
> IvanK.

Hi dicky,

check if your grep supports the "--max-count" option. I had issues with it on 
Debian Woody, see [1]. On Debian Sarge is a other grep version which supports 
the option, so no problems there. In [1] is a workaround too.

Achim

[1] point 1) in http://marc.theaimsgroup.com/?l=ipcop-devel&m=110711066208333&w=2

On Thursday 22 September 2005 01:34 am, ng dicky wrote:
> Hi,
>
> I have sloved the gcc compiling problem, however the new problem appears as
> follows:
>
> =================start===========
>
> Sep 22 05:22:51: Building linux LFS_PASS=ipcop SMP=1
> Sep 22 05:22:51: Building 3cp4218 SMP=1
> ERROR: Building 3cp4218 SMP=1
>        Check /ipc/ipcop/log/ipcop.log for errors if applicable
>
> ==============================
>
> I Checked the log file and found the following:
>
> ==============Log=============
> make -C /lib/modules/-smp/build SUBDIRS=/usr/src/3cp4218/module2
> XDSLUSB-MODULE=3cp4218 modules make: *** /lib/modules/-smp/build: No such
> file or directory.  Stop. make: Entering an unknown directorymake: Leaving
> an unknown directorymake[2]: *** [normal] Error 2 make[2]: Leaving
> directory `/usr/src/3cp4218/module2'
> make[1]: *** [3COM_MODULE2] Error 2
> make[1]: Leaving directory `/usr/src/3cp4218'
> make: *** [/usr/src/log/3cp4218-2003-10-22-smp] Error 2
>

without having looked at the makefile for 3cp4218, I can tell you with 
certainty that there's a undefined variable for the kernel version somewhere.  
Conside this:  make -C /lib/modules/-smp/build and in the particular the part 
of the path -smp.  That looks as if it the actual kernel version number is 
missing.  It probably should look something like 2.6.13.2-smp if you're 
building latest cvs or 2.4.31-smp if building 1.4.8.

Concentrate on this.  That's where the problem lies.  I'm too lazy to look at 
the source now :-)

IvanK.

Hi,
 
I have sloved the gcc compiling problem, however the new problem appears as follows:
 
=================start===========

Sep 22 05:22:51: Building linux LFS_PASS=ipcop SMP=1
Sep 22 05:22:51: Building 3cp4218 SMP=1
ERROR: Building 3cp4218 SMP=1
       Check /ipc/ipcop/log/ipcop.log for errors if applicable

==============================
 
I Checked the log file and found the following:
 
==============Log=============
make -C /lib/modules/-smp/build SUBDIRS=/usr/src/3cp4218/module2 XDSLUSB-MODULE=3cp4218 modules
make: *** /lib/modules/-smp/build: No such file or directory.  Stop.
make: Entering an unknown directorymake: Leaving an unknown directorymake[2]: *** [normal] Error 2
make[2]: Leaving directory `/usr/src/3cp4218/module2'
make[1]: *** [3COM_MODULE2] Error 2
make[1]: Leaving directory `/usr/src/3cp4218'
make: *** [/usr/src/log/3cp4218-2003-10-22-smp] Error 2

===================================
 
i have no idea of what's going on.. 
Pls HELP!
 
thx,
Dicky
 
 


Roger Murer <r....@ti...> 說：
Hi

On Debian:
su -c "apt-get install perl-modules"

should install the perl modules, which according to http://packages.debian.org
contains Usage.pm

Kind regards

Roger



>-- Original-Nachricht --
>From: ng dicky 
>To: Gilles Espinasse ,
> IPC...@li...
>Subject: [IPCop-devel] ??? Re: [IPCop-devel] IPCop ipcop-dev-v140
> -20050920.tgz compiling error: [ERROR: Building lin
> ux]
>Date: Wed, 21 Sep 2005 15:20:18 +0800 (CST)
>
>
>Hi Gilles,
>
>Thx for the remind,
>
>Can u tell me how to install the package??
>I am new to linux..
>
>thx,
>dicky
>
>Gilles Espinasse ??
>i suppose you need to install a perl package containing Usage.pm?
>
>Gilles
>----- Original Message -----
>From: ng dicky
>To: IPC...@li...
>Sent: Wednesday, September 21, 2005 8:28 AM
>Subject: [IPCop-devel] IPCop ipcop-dev-v140-20050920.tgz compiling error:
>[ERROR: Building linux]
>
>
>Hi all,
>
>I am trying to compile the IPCop version ipcop-dev-v140-20050920.tgz from
>CoLinux(kernel version 2.4.26-co-0.6.1, Debian
>Debian-3.0r2.ext3-mit-backports.1gb), after sometimes, the following error
>occurred:
>
>====================
>Sep 21 06:18:49: Building linux
>ERROR: Building linux
>Check /ipc/ipcop/log/ipcop.log for errors if applicable
>
>======================
>I checked the log and it shows the following error msg:
>
>====================
>cd /ipc/ipcop/build/usr/src/patch-o-matic* && yes 'y' |
>./runme --kernel-path=/ipc/ipcop/build/usr/src/linux/ --iptables-path=/ipc/i
>pcop/build/usr/src/iptables/ pending
>Can't locate Pod/Usage.pm in @INC (@INC contains: /etc/perl
>/usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5
>/usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8
>/usr/local/lib/site_perl .) at ./runme line 14.
>BEGIN failed--compilation aborted at ./runme line 14.
>make: *** [/ipc/ipcop/log/linux-2.4.31-tools] Error 2
>
>==================
>
>from the log, i found the error msg: Can't locate Pod/Usage.pm in @INC,
i
>am
>not sure if this is the reason to cause the error.
>
>pls help.!!!
>
>dicky
>
>_______________________________________
>?????? email ???
>?? Yahoo! Messenger http://messenger.yahoo.com.hk
>
>
>
>-------------------------------------------------------
>SF.Net email is sponsored by:
>Tame your development challenges with Apache's Geronimo App Server.
>Download it for free - -and be entered to win a 42" plasma tv or your very
>own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
>_______________________________________
> ?????? email ???
> ?? Yahoo! Messenger http://messenger.yahoo.com.hk

----
R. Murer
EMail: r....@ti...



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42" plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
IPCop-devel mailing list
IPC...@li...
https://lists.sourceforge.net/lists/listinfo/ipcop-devel

_______________________________________
 想即時收到新 email 通知？
 下載 Yahoo! Messenger http://messenger.yahoo.com.hk 

"Robert Kerr" <Lit...@xs...> 
wrote in message news:112...@cc......
> On Wed, 2005-09-21 at 11:54 +1000, Dave Harry wrote:
>
>> Yes, I know it's a bit of a mess to get your head around.
>> Can anyone suggest what sort of mod I'd need to the code since whatever 
>> has
>> changed in 1.4.8?
>
> You shouldn't need these rules in 1.4.8 - the functionality ought to be
> builtin. That said I'm not sure I can see why your rules would stop this
> working. See what happens if you try without your extra rules.

Hey! You're right! it now seems better than in 1.4.6.

Requests directly to the orange IP made from machines in green now seem to 
be translated properly, and arrive from 192.168.1.xx.

But, any requests from green using the red IP address (i.e. the roaming in 
and out laptop users) are arriving supposedly from 192.168.1.1 (the IPCop 
green interface)
That's far less than devastating, but it might be nice if I could fix it.

-- 
Dave Harry 

It's been a week since my last update, so I thought I'd drop a line and assure 
people I haven't lost interest.

I'm waiting for a new logic board I picked from ebay that'll become my 
permanent powerpc ipcop server and when I get it, I'll start testing in 
earnest 1.4.8.  I don't anticipate any problems though, because once 
installed, ipcop shouldn't care what hardware it's running on (mostly).

Now, this past week, I've been busy on two fronts:
1) Getting 1.4.8 to work on oldworld macs and
2) Getting cvs compiled

On 1) -- it's proving to be too much trouble.  The problem for those without 
powerpc background is that Open Firmware (OF for short), the "bios" of older 
macs (those manufactured before the colorful macs, imac, blue and white g3 
and anything after that, known as newworld macs) is so buggy and pretty much 
every machine has some quirks in its OF implementation that a uniform 
approach in booting old-world macs is impossible without requiring the 
existence of MacOS on the machine.  There's supposedly a workaround (miboot), 
a trick that would make the system believe it has MacOS installed and boot 
from that fake partition, but my efforts so far have been fruitless.  For now 
I've decided to drop support in the iso for oldworld macs and will only 
revisit this once the powerpc port is accepted in the main tree.

2) has also been problematic, much to my surprise.  I say that because my 
current powerpc devel server is already running LFS6.1.  The problem is that 
in building the static environment (chapted 5 in LFS), gcc creates broken 
binaries.  For example, ls from coreutils is compiled such that ls works but 
ls -la doesn't.  Further packages (starting from gzip) run a test to 
establish if the environment is "sane."  This involves running ls -Lt on 
which the broken ls segfaults.  The same problem doesn't exist in 1.4.8 or in 
cvs compiled on i386.  So I'm trying to find the cause of this.
I notice that ipcop departs from the LFS instructions in some important ways.  
First, you start off by building sed.  There's a comment in make.sh that you 
do this because you need some extensions.  Ok.  Later, when building the 
toolchain, you don't follow LFS in not removing the the binutils build and 
source directories which later you need to adjust the toolchain so that 
anything you build later will be linked against the newly compiled glibc 
instead of the host glibc.  Therefore you can't guarantee the target doesn't 
get polluted with stuff from the host.  Maybe this is where the powerpc build 
breaks so I'll modify that part.  Further, you use the kernel headers from 
the kernel, rather than use linux-libc-headers as LFS does.  This is probably 
not a big issue.

I'm very new to the devel list so it's possible you had valid reasons in 
modifying the LFS build instructions.

Anyway, this is where I stand currently with the powerpc port.  I'll keep you 
posted.

I've created patches for 1.4.8, but like I said, I want to get my new system 
in place so I can test my build for real before I start submitting anything 
back.

IvanK.

Bugs item #1298030, was opened at 2005-09-21 21:12
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1298030&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Björn Sahlström (kbjorn)
Assigned to: Nobody/Anonymous (nobody)
Summary: can't install update 1.4.8

Initial Comment:
I installed all other updates but when I upload the 1.4.8 
nothing happens, it still tell me to upload it. Also tries a 
frersh 1.4.8 install without result.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1298030&group_id=40604

Hi Roger,
thx a lot.
 


Roger Murer <r....@ti...> 說：
Hi

On Debian:
su -c "apt-get install perl-modules"

should install the perl modules, which according to http://packages.debian.org
contains Usage.pm

Kind regards

Roger



>-- Original-Nachricht --
>From: ng dicky 
>To: Gilles Espinasse ,
> IPC...@li...
>Subject: [IPCop-devel] ??? Re: [IPCop-devel] IPCop ipcop-dev-v140
> -20050920.tgz compiling error: [ERROR: Building lin
> ux]
>Date: Wed, 21 Sep 2005 15:20:18 +0800 (CST)
>
>
>Hi Gilles,
>
>Thx for the remind,
>
>Can u tell me how to install the package??
>I am new to linux..
>
>thx,
>dicky
>
>Gilles Espinasse ??
>i suppose you need to install a perl package containing Usage.pm?
>
>Gilles
>----- Original Message -----
>From: ng dicky
>To: IPC...@li...
>Sent: Wednesday, September 21, 2005 8:28 AM
>Subject: [IPCop-devel] IPCop ipcop-dev-v140-20050920.tgz compiling error:
>[ERROR: Building linux]
>
>
>Hi all,
>
>I am trying to compile the IPCop version ipcop-dev-v140-20050920.tgz from
>CoLinux(kernel version 2.4.26-co-0.6.1, Debian
>Debian-3.0r2.ext3-mit-backports.1gb), after sometimes, the following error
>occurred:
>
>====================
>Sep 21 06:18:49: Building linux
>ERROR: Building linux
>Check /ipc/ipcop/log/ipcop.log for errors if applicable
>
>======================
>I checked the log and it shows the following error msg:
>
>====================
>cd /ipc/ipcop/build/usr/src/patch-o-matic* && yes 'y' |
>./runme --kernel-path=/ipc/ipcop/build/usr/src/linux/ --iptables-path=/ipc/i
>pcop/build/usr/src/iptables/ pending
>Can't locate Pod/Usage.pm in @INC (@INC contains: /etc/perl
>/usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5
>/usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8
>/usr/local/lib/site_perl .) at ./runme line 14.
>BEGIN failed--compilation aborted at ./runme line 14.
>make: *** [/ipc/ipcop/log/linux-2.4.31-tools] Error 2
>
>==================
>
>from the log, i found the error msg: Can't locate Pod/Usage.pm in @INC,
i
>am
>not sure if this is the reason to cause the error.
>
>pls help.!!!
>
>dicky
>
>_______________________________________
>?????? email ???
>?? Yahoo! Messenger http://messenger.yahoo.com.hk
>
>
>
>-------------------------------------------------------
>SF.Net email is sponsored by:
>Tame your development challenges with Apache's Geronimo App Server.
>Download it for free - -and be entered to win a 42" plasma tv or your very
>own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
>_______________________________________
> ?????? email ???
> ?? Yahoo! Messenger http://messenger.yahoo.com.hk

----
R. Murer
EMail: r....@ti...


_______________________________________
 想即時收到新 email 通知？
 下載 Yahoo! Messenger http://messenger.yahoo.com.hk 

Hi

On Debian:
su -c "apt-get install perl-modules"

should install the perl modules, which according to http://packages.debia=
n.org
contains Usage.pm

Kind regards

Roger



>-- Original-Nachricht --
>From: ng dicky <dic...@ya...>
>To: Gilles Espinasse <g....@fr...>,
>	IPC...@li...
>Subject: [IPCop-devel] ??? Re: [IPCop-devel] IPCop  ipcop-dev-v140
> -20050920.tgz  compiling error: [ERROR: Building lin
> ux]
>Date: Wed, 21 Sep 2005 15:20:18 +0800 (CST)
>
>
>Hi Gilles,
> 
>Thx for the remind, 
> 
>Can u tell me how to install the package?? 
>I am new to linux..
> 
>thx,
>dicky
>
>Gilles Espinasse <g....@fr...> ??
>i suppose you need to install a perl package containing Usage.pm?
>
>Gilles
>----- Original Message ----- 
>From: ng dicky
>To: IPC...@li...
>Sent: Wednesday, September 21, 2005 8:28 AM
>Subject: [IPCop-devel] IPCop ipcop-dev-v140-20050920.tgz compiling error=
:
>[ERROR: Building linux]
>
>
>Hi all,
>
>I am trying to compile the IPCop version ipcop-dev-v140-20050920.tgz fro=
m
>CoLinux(kernel version 2.4.26-co-0.6.1, Debian
>Debian-3.0r2.ext3-mit-backports.1gb), after sometimes, the following err=
or
>occurred:
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>Sep 21 06:18:49: Building linux
>ERROR: Building linux
>Check /ipc/ipcop/log/ipcop.log for errors if applicable
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>I checked the log and it shows the following error msg:
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>cd /ipc/ipcop/build/usr/src/patch-o-matic* && yes 'y' |
>./runme --kernel-path=3D/ipc/ipcop/build/usr/src/linux/ --iptables-path=3D=
/ipc/i
>pcop/build/usr/src/iptables/ pending
>Can't locate Pod/Usage.pm in @INC (@INC contains: /etc/perl
>/usr/local/lib/perl/5.8.4 /usr/local/share/perl/5.8.4 /usr/lib/perl5
>/usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8
>/usr/local/lib/site_perl .) at ./runme line 14.
>BEGIN failed--compilation aborted at ./runme line 14.
>make: *** [/ipc/ipcop/log/linux-2.4.31-tools] Error 2
>
>=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
>
>from the log, i found the error msg: Can't locate Pod/Usage.pm in @INC,
i
>am
>not sure if this is the reason to cause the error.
>
>pls help.!!!
>
>dicky
>
>_______________________________________
>?????? email ???
>?? Yahoo! Messenger http://messenger.yahoo.com.hk
>
>
>
>-------------------------------------------------------
>SF.Net email is sponsored by:
>Tame your development challenges with Apache's Geronimo App Server.
>Download it for free - -and be entered to win a 42" plasma tv or your ve=
ry
>own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php=

>_______________________________________________
>IPCop-devel mailing list
>IPC...@li...
>https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
>_______________________________________
> ?????? email ???
> ?? Yahoo! Messenger http://messenger.yahoo.com.hk 

----
R. Murer
EMail: r....@ti...

On Wed, 2005-09-21 at 11:54 +1000, Dave Harry wrote:

> Yes, I know it's a bit of a mess to get your head around.
> Can anyone suggest what sort of mod I'd need to the code since whatever has 
> changed in 1.4.8?

You shouldn't need these rules in 1.4.8 - the functionality ought to be
builtin. That said I'm not sure I can see why your rules would stop this
working. See what happens if you try without your extra rules.

-- 
 Robert Kerr