ipcop-devel Mailing List for IPCop Firewall

I am upgrading ipcop 1.4.10 in order to use opnssl 0.9.8a instead of 0.9.7.i
 
 The compile process went well, the packeaging failed because the build process is still trying to find the old libraries. I think the point is related to the file ROOTFILES.i386, is this true, is enough or I should also chance something else?
 Is it related with the updates directories?
 
 Thanks a lot for any help or suggestion,
 
 Ciao,
 Roberto
 
		
---------------------------------
Yahoo! Messenger with Voice: chiama da PC a telefono a tariffe esclusive

Le Mardi 31 Janvier 2006 12:54, da...@da... a =E9crit :
> hi guys,
>
> originally posted this to the user list [1] with no luck and have searched
> online docs, www.ipcops.com and other forums with no joy either.
>
> There seems to be a fault with how 1.4.10 handles IPSec routing.  Another
> user posted almost the exact same problem to an external list [2] and he
> uses a different client.
>
> The online docs [3] and FAQ [4] both point to options in the IPCop admin
> interface that look to be well out of date.
>
> Can someone please assist with this, as if it can't be fixed I have to dr=
op
> IPCop and use something else which would be a shame because I like
> everything else about it.
>
>
> [1] <http://marc.theaimsgroup.com/?l=3Dipcop-user&m=3D113826865208219&w=
=3D2>
Indicates nothing strange except the unneeded route for 135.*.*.*
The gateway is GREEN in all cases.
> [2] <http://www.firewall.cx/ftopict-2553.html>
Same problem, nothing
> [3] <http://www.ipcop.org/1.4.0/en/admin/html/vpnaw.html#vpn-global>
VPN software onto ipcop is not involved in you problem. The boxes still
exist.=20
> [4]
> <http://www.ipcop.org/modules.php?op=3Dmodload&name=3DFAQ&file=3Dindex&my=
faq=3Dyes&
>id_cat=3D11#q103>

=46or me (not verified) the problem is with the NAT functionnality of IPcop.
But without your network layout, difficult to say.
You can try the -j MASQUERADE and comment it if your RED ipcop
is not the internet connection. I say that because you spoke about
'inserting' IPCop.
The checkbox passthrough do not exit on 1.4.=20

TCPDUMP is a good tool to diagnose who is blocking what in what direction!
A port?
A protocol?

try tcpdump host 135.x.x.x

=46ranck

hi guys,

originally posted this to the user list [1] with no luck and have searched
online docs, www.ipcops.com and other forums with no joy either.

There seems to be a fault with how 1.4.10 handles IPSec routing.  Another
user posted almost the exact same problem to an external list [2] and he
uses a different client.

The online docs [3] and FAQ [4] both point to options in the IPCop admin
interface that look to be well out of date.

Can someone please assist with this, as if it can't be fixed I have to drop
IPCop and use something else which would be a shame because I like
everything else about it.


[1] <http://marc.theaimsgroup.com/?l=3Dipcop-user&m=3D113826865208219&w=3D2>
[2] <http://www.firewall.cx/ftopict-2553.html>
[3] <http://www.ipcop.org/1.4.0/en/admin/html/vpnaw.html#vpn-global>
[4]
<http://www.ipcop.org/modules.php?op=3Dmodload&name=3DFAQ&file=3Dindex&myfa=
q=3Dyes&id_cat=3D11#q103>

Kind regards,

--=20
Darren Davison
Public Key: 0xDD356B0D

On Mon, Jan 30, 2006 at 10:42:16AM +0100, Franck Bourdonnec wrote:
> Hello all,
> 
> 
> IPCop can be built on several distro (mandrake, debian, .....)
> 
> To start compilation you need an installed toolchain on your machine.
> 
> A question is what compiler version do you use to start the job?
> 
> gcc 2
> gcc 3
> gcc 4 ?
> 
> I used gcc 4 to because it is the default toolschain installed on recent linux 
> distro (ubuntu).
> 
> 
> Underlying problem is to choose that:
> Make IPCop 1.4 construction with (gcc2 & gcc3) or
> (gcc3 & gcc4).
> (gcc2 & gcc3 & gcc4 is not possible).
> 
> Franck

I don't think there are any Linux distributions that only use 
gcc version 2 that are still officially supported.

RedHat Linux 7.3 was the last RedHat OS to use gcc 2.96. RedHat 
stopped supporting it in January 2004, and Progeny pay-for support 
stopped in Decemeber 2005. There is some community support for 7.3 
from the Fedora Legacy project, but not for older versions. The 
only machines still running 7.3 that I am aware of are servers 
that would not likely be used for building IPCop.

Debian 3.0 and 3.1 both have gcc 3 versions available, and Debian 
3.1 and Ubuntu also have gcc 4.

Knoppix uses gcc 3 by default.

I'm not too sure about Slackware and Mandriva, but Slackware 10.2 
has gcc 3, Mandrake had gcc 3, and Mandriva has gcc 4.


So gcc versions 3 and 4 would make the most sense to me, though 
it would mean making a few changes to the Building HOWTO:
	http://www.ipcop.org/modules.php?op=modload&name=phpWiki&file=index&pagename=IPCopBuildingHowto


-- 
#---------------------------------------------------------#
|    John Edwards   Email: jo...@co...    |
|                                                         |
| A. Because it breaks the logical sequence of discussion |
| Q. Why is top posting bad ?                             |
#---------------------------------------------------------#

That was the whole point of the PATH statement, so it picks up the newer
sed.

You'll need to put that back Franck and work out another fix for your
updated compiler tools.

Alan.

On Mon, 2006-01-30 at 14:44 +0000, Eric Oberlander wrote:
> Franck
> 
> I now get an error in v1.4.11 building Stage 1 gcc, complaining of
> "sed: invalid option -i"
> 
> Something has broken make this morning, as it worked OK last night.
> 
> Eric
> 
> on 30/1/06 11:30 am, Franck Bourdonnec at fra...@us...
> wrote:
> 
> > Update of /cvsroot/ipcop/ipcop
> > In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8757
> > 
> > Modified Files:
> > Tag: IPCOP_v1_4_0
> > make.sh 
> > Log Message:
> > Fix a problem with toolchain compilation logic. Declaring new path to early,
> > that is before compiling sed,m4,binutils,gcc (lpspass=1) do this:
> > The very first time, everything is compiled with native system compiler.
> > After this, a ggc3 will be present in the TOOLS directory.
> > Asking rebuild of flex,sed,... will be done with gcc3 AND NOT the native
> > compiler again. This may explain all the 'cross compilation, use --HOST='
> > errors I have when updating a tool frmo toolchain.
> > 
> > Add variable so that lfs/makefile will be able to choose correct version
> > for toolchain tools (so we can start with gcc2 or gcc4). This will prevent
> > having customized lfs/makefile.
> > 
> > 
> > Index: make.sh
> > ===================================================================
> > RCS file: /cvsroot/ipcop/ipcop/make.sh,v
> > retrieving revision 1.129.2.140
> > retrieving revision 1.129.2.141
> > diff -C2 -d -r1.129.2.140 -r1.129.2.141
> > *** make.sh 30 Jan 2006 10:22:01 -0000 1.129.2.140
> > --- make.sh 30 Jan 2006 11:30:09 -0000 1.129.2.141
> > ***************
> > *** 380,384 ****
> > # Build sed now, as we use some extensions
> > ORG_PATH=$PATH
> > !     export PATH=$BASEDIR/build/usr/local/bin:$BASEDIR/build/tools/bin:$PATH
> > lfsmake1 ccache
> > lfsmake1 sed LFS_PASS=1
> > --- 380,385 ----
> > # Build sed now, as we use some extensions
> > ORG_PATH=$PATH
> > !     NATIVEGCC=`gcc --version | grep GCC | awk {'print $3'}`
> > !     export NATIVEGCC GCCmajor=${NATIVEGCC:0:1} GCCminor=${NATIVEGCC:2:1}
> > GCCrelease=${NATIVEGCC:4:1}
> > lfsmake1 ccache
> > lfsmake1 sed LFS_PASS=1
> > ***************
> > *** 388,391 ****
> > --- 389,394 ----
> > lfsmake1 binutils   LFS_PASS=1
> > lfsmake1 gcc        LFS_PASS=1
> > +     export PATH=$BASEDIR/build/usr/local/bin:$BASEDIR/build/tools/bin:$PATH
> > +     
> > lfsmake1 linux
> > lfsmake1 tcl
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel

Franck

I now get an error in v1.4.11 building Stage 1 gcc, complaining of
"sed: invalid option -i"

Something has broken make this morning, as it worked OK last night.

Eric

on 30/1/06 11:30 am, Franck Bourdonnec at fra...@us...
wrote:

> Update of /cvsroot/ipcop/ipcop
> In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8757
> 
> Modified Files:
> Tag: IPCOP_v1_4_0
> make.sh 
> Log Message:
> Fix a problem with toolchain compilation logic. Declaring new path to early,
> that is before compiling sed,m4,binutils,gcc (lpspass=1) do this:
> The very first time, everything is compiled with native system compiler.
> After this, a ggc3 will be present in the TOOLS directory.
> Asking rebuild of flex,sed,... will be done with gcc3 AND NOT the native
> compiler again. This may explain all the 'cross compilation, use --HOST='
> errors I have when updating a tool frmo toolchain.
> 
> Add variable so that lfs/makefile will be able to choose correct version
> for toolchain tools (so we can start with gcc2 or gcc4). This will prevent
> having customized lfs/makefile.
> 
> 
> Index: make.sh
> ===================================================================
> RCS file: /cvsroot/ipcop/ipcop/make.sh,v
> retrieving revision 1.129.2.140
> retrieving revision 1.129.2.141
> diff -C2 -d -r1.129.2.140 -r1.129.2.141
> *** make.sh 30 Jan 2006 10:22:01 -0000 1.129.2.140
> --- make.sh 30 Jan 2006 11:30:09 -0000 1.129.2.141
> ***************
> *** 380,384 ****
> # Build sed now, as we use some extensions
> ORG_PATH=$PATH
> !     export PATH=$BASEDIR/build/usr/local/bin:$BASEDIR/build/tools/bin:$PATH
> lfsmake1 ccache
> lfsmake1 sed LFS_PASS=1
> --- 380,385 ----
> # Build sed now, as we use some extensions
> ORG_PATH=$PATH
> !     NATIVEGCC=`gcc --version | grep GCC | awk {'print $3'}`
> !     export NATIVEGCC GCCmajor=${NATIVEGCC:0:1} GCCminor=${NATIVEGCC:2:1}
> GCCrelease=${NATIVEGCC:4:1}
> lfsmake1 ccache
> lfsmake1 sed LFS_PASS=1
> ***************
> *** 388,391 ****
> --- 389,394 ----
> lfsmake1 binutils   LFS_PASS=1
> lfsmake1 gcc        LFS_PASS=1
> +     export PATH=$BASEDIR/build/usr/local/bin:$BASEDIR/build/tools/bin:$PATH
> +     
> lfsmake1 linux
> lfsmake1 tcl

Bugs item #1418533, was opened at 2006-01-30 12:41
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418533&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: VPN
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Juergen Schmidt (ju_heisec)
Assigned to: Nobody/Anonymous (nobody)
Summary: Specify CN for gateway authentication

Initial Comment:
There is no way to enter a Common Name (CN) of the
gateway, you have to upload the whole certificate.

Details:

Right now you have to upload the gateway cert to the
IPCop, to specify the remote end of the IPSec tunnel.
A lot of IPSec user do not get this cert, as it should
be enough to specify the Common Name of the VPN gateway. 
This information is signed by the VPN CA you trust (by
uploading their CA cert).


Solution:

Add a field "specify Gateway Name (CN)" to the
authentication fields in the connection creation.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418533&group_id=40604

Bugs item #1418529, was opened at 2006-01-30 12:37
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418529&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: VPN
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Juergen Schmidt (ju_heisec)
Assigned to: Nobody/Anonymous (nobody)
Summary: DynDNS blocks IPSec

Initial Comment:
The DynDNS problem:

Right now you have to enter a DynDNS hostname for your
side of the IPSec tunnel. If DynDNS fails, there is no
IPSec. *But DynDNS is not needed*  -- at least in most
cases.

Details:

Right now you must enter a valid hostname or IP
address in the global VPN configuration. If your IP
address is dynamic, you must enter something like
XYZ.dyndns.org. This results in a configuration like:


conn test1
        left=XYZ.dyndns.org
        leftnexthop=%defaultroute


This means, that the host has to do a DynDNS lookup to
get its *own* IP address. If DynDNS fails for some
reason, there is no IPSec. That's ridiculus --
especially taken in account that DynDNS is not needed
in this case. You just have to change the configuration to:

conn test1
        left=%defaultroute


With this, IPSec looks up its own IP-Adress by looking
at the interface the default route is pointing to,
instead of doing a DynDNS lookup.

Unfortunately, this config cannot be created with the
user interface.

Solution:

Allow to enter "%defaultroute" as left and do not set
leftnexthop in this case.

bye, ju

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418529&group_id=40604

Hello all,


IPCop can be built on several distro (mandrake, debian, .....)

To start compilation you need an installed toolchain on your machine.

A question is what compiler version do you use to start the job?

gcc 2
gcc 3
gcc 4 ?

I used gcc 4 to because it is the default toolschain installed on recent linux 
distro (ubuntu).


Underlying problem is to choose that:
Make IPCop 1.4 construction with (gcc2 & gcc3) or
(gcc3 & gcc4).
(gcc2 & gcc3 & gcc4 is not possible).

Franck

Le Lundi 30 Janvier 2006 08:03, vous avez =E9crit :

>
> Definitely we should stay with original old tar version.
> We have to be faster on release and don't need those changes in v1.4
>
>
> Gilles
>
> Nota
> you forgot to forward many of your recent changes in the web interface in
> v1.5.
NO, one change is sufficient and useless anyway...
> This is not good at all.

We will be able to work on 1.5 when it will be something more
than an 1.4 with kernel 2.6.

There is absolutly no interest on working for 1.5 without deciding
what will be the REAL CHANGES (not the kernel alone).
Today, we (Alan) are providing only an LFS kernel 2.6 distro.

Until that, having more or less the same system is normal,
Consider it is a system backport (1.5->1.4)

The day we will know what we want we will do that
=2Derase html/cgi-bin/*
=2Derase rc.d/*
=2Derase anything fulll of 'forward from 1.4'
to remove all unnecessary hundreds of 'false changes' to
1.5 source code.

=46ranck

Bugs item #1418205, was opened at 2006-01-29 15:31
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418205&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Build
Group: 1.4.10
Status: Open
Resolution: None
Priority: 5
Submitted By: John Hanson (johanragle)
Assigned to: Nobody/Anonymous (nobody)
Summary: Build error (uClibc)

Initial Comment:
I began rebuilding IPCop 1.4.10 with briding support
turned on in the kernel and added bridge-utils to the
lfs dir. The build is almost completely finished,
except for the installer build, which is where it's
hanging up now.

It looks to me like the installer is trying to copy
files that don't exist, and it's spitting out an error.
I also note the conspicuous lack of any tar zxf or tar
jxf commands in lfs/uClibc .

The error it's reporting now shows version 0.9.27,
which is because out of frustration I copied the
lfs/uClibc file from current CVS. I had the exact same
error (but different version) with the lfs/uClibc file
included in the source distribution of IPCop 1.4.10.

From my ipcop-1.4.10/log/ipcop.log:

+ make -f uClibc LFS_BASEDIR=/usr/src install
============================= Installing uClibc-0.9.27 ...
Install started; saving file list to /usr/src/lsalr ...
cd /usr/src/uClibc-0.9.27 && cp -R /usr/src/src/uClibc/* .
cp: cannot stat '/usr/src/src/uClibc/*': No such file
or directory
make: ***[/usr/src/log/uClibc-0.9.27] Error 1


Does anyone have a better idea of what's going on here?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1418205&group_id=40604

Bugs item #1417632, was opened at 2006-01-28 14:19
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1417632&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: User Interface
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Harry Goldschmitt (goldharv)
Assigned to: Nobody/Anonymous (nobody)
Summary: DHCP Config. Not Correct After IP Address Change

Initial Comment:
I recently changed my BLUE IP address twice, i.e. from 192.168.1.1 to 
192.168.1.254 and back again.  After it was changed the second time, my 
DHCP configuration file was not completely changed.  All IP addresses 
were correct, except the default router address, which remained 
192.168.1.254.  Disabling DHCP and then enabling it fixed the problem.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1417632&group_id=40604

Bugs item #1416371, was opened at 2006-01-27 14:16
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1416371&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Kernel
Group: 1.4.10
Status: Open
Resolution: None
Priority: 5
Submitted By: shado23 (shado23)
Assigned to: Nobody/Anonymous (nobody)
Summary: 16 mbit dsl connection fails partly

Initial Comment:
The connection works full speed for roughly 10 
seconds, then together with the following message in 
the kernel log the disconnect beep is heard. 
After that the connection still works and is listed 
as active but only with less than half the speed. 
I don't know much about this but i suspect it's maybe 
multilink? and the HTB scheduler. 
 
Jan 27 11:16:38 cartman kernel: HTB init, kernel part 
version 3.17 
Jan 27 11:16:38 cartman kernel: HTB: quantum of class 
10030 is small. Consider r2q change. 
Jan 27 11:16:40 cartman rc.updatered: unlocking from 
25694	 
 
Now, is there a /sys switch or something to switch 
the scheduler/shut it off/change the r2q (whatever 
that is)? 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1416371&group_id=40604

Selon ja...@gu...:

> Been running a BitTorrent client for a few days over the weekend
> getting a few LARGE files (3-4G sized).  After getting the files and
> leaving the BT up for another day+ to ship out at least 3 times what
> I go down, I closed the BT and all went back to "normal"...
>
> BUT one thing that has not returned to normal is the connections
> page.  During the process I saw hundreds of connections, now 48 hours
> after shutdown the BT, I still have hundreds of connections showing
> open with expire seconds in 100,000 seconds. Since there is 84,600
> seconds in day, some of these will not expire for 3 or more days from
> now.
>
> So do we have an issue?
> Is it correctable, short of reboot?
> Am I paranoid?
>
> Oh, V1.4.10
>
> Jack Beglinger
>
>
A connection in ESTABLISHED state have 5 days timeout
http://kalamazoolinux.org/presentations/20010417/conntrack.html

As Robert explain, it should not be a problem
http://marc.theaimsgroup.com/?l=3Dipcop-user&m=3D112201958405091&w=3D2


Gilles

Been running a BitTorrent client for a few days over the weekend 
getting a few LARGE files (3-4G sized).  After getting the files and 
leaving the BT up for another day+ to ship out at least 3 times what 
I go down, I closed the BT and all went back to "normal"...

BUT one thing that has not returned to normal is the connections 
page.  During the process I saw hundreds of connections, now 48 hours 
after shutdown the BT, I still have hundreds of connections showing 
open with expire seconds in 100,000 seconds. Since there is 84,600 
seconds in day, some of these will not expire for 3 or more days from 
now.

So do we have an issue?   
Is it correctable, short of reboot?   
Am I paranoid?

Oh, V1.4.10 

Jack Beglinger

Bugs item #1413967, was opened at 2006-01-24 14:09
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1413967&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: hescominsoon (hescominsoon)
Assigned to: Nobody/Anonymous (nobody)
Summary: Using openvpn client behind ipcop removes scanning

Initial Comment:
first off here's a link:

http://www.endlich-mail.de/forum/viewtopic.php?p=3958#3958

The long and short of it..if i fire up an openvpn
client behind an ipcop machine all a/v, anti-spam,
proxying, content filtering..etc is disabled for hte
duration of the client's connection.  

I have tried this with ipcop witht he copfilter add-on
and endian.  Both exhibit this behavior.  There is some
kind of interaction going on which i cannot figure out
since it should not be happening.  No logs get
gererated that i can see to explain this behavior.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1413967&group_id=40604

I am posting this on the dev mailing list as well because I didn't get =
many responses from users mailing list with my previous post which is =
related to this one.

Is there a way to use VPN between two IPcops that have red interfaces =
both on the same subnet? I have achieved this but I had to use the red =
IP address as the default gateway on each IPcop (Eg, tell it that it is =
its own gateway) which isn't practical for me as I need the default =
gateway to be something else for all other routing.

Furthermore I would like to know if it is possible to make the one IPcop =
use the other as the default gateway in the above mentioned scenario. =
Basically make the default gw on IPcop2 the red IP of IPcop1? I tried =
this but it didn't work. But this does work if both IPcops are on the =
same green subnet.

Appreciate your help! Thank you.

Best Regards,
Spiros.

Bugs item #1412299, was opened at 2006-01-22 21:14
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1412299&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: General
Group: 1.4.10
Status: Open
Resolution: None
Priority: 5
Submitted By: metric (metric)
Assigned to: Nobody/Anonymous (nobody)
Summary: Dial-on-demand fails with Speedtouch 330

Initial Comment:
Manual connection is succesful and stable for hours on
end, but dial-on-demand won't establish a connection.
IPCop begins the connection process when triggered,
then fails, resets the ADSL modem and then loops
through this sequence repeatedly until stopped.

I have tried the user-mode driver with the same results.
All updates are installed, as is the modem firmware.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1412299&group_id=40604

on 21/1/06 11:18 am, Franck Bourdonnec at fbo...@ch... wrote:

> Le Samedi 21 Janvier 2006 08:42, Eric Oberlander a =E9crit :
>> Hi Franck
>>=20
>> After upgrading to this version of coreutils, I am no longer able to bui=
ld
>> v1.4.11, as the build stops with an error message about cross-compiling.
>> "error: cannot run C compiled programs."
>> "If you meant to cross compile, use '--host'."
>>=20
>> Does this now require an i586 host to build, or should it still be possi=
ble
>> to build on my older i386 box?
>>=20
>> Reverting to the previous version of coreutils allowed me to complete a
>> build.
>>=20
>> Regards.
>>=20
>> Eric
>=20
> Did you start a full fresh compil ?

Initially, no, but after a 'make.sh clean; make.sh build' failed, I deleted
the ccache directory as well, and it still failed.
=20
> I have seen this problem with many package when
> some code already exists.
>=20
> A workaround solution is adding in the lfs/script
>=20
> ./configure ....  --host=3Dlinux-i686-????
> or some ~ i486-pc-linux-gnu

Let me know if there is something specific I can test.

Regards.

Eric

Hi Franck

After upgrading to this version of coreutils, I am no longer able to build
v1.4.11, as the build stops with an error message about cross-compiling.
"error: cannot run C compiled programs."
"If you meant to cross compile, use '--host'."

Does this now require an i586 host to build, or should it still be possible
to build on my older i386 box?

Reverting to the previous version of coreutils allowed me to complete a
build.

Regards.

Eric

----------
From: Franck Bourdonnec <fra...@us...>
Date: Fri, 20 Jan 2006 14:31:49 +0000
To: ipc...@li...
Subject: [IPCop-cvs] ipcop/lfs coreutils,1.5.2.5,1.5.2.6
util-linux,1.8.2.6,1.8.2.7

Update of /cvsroot/ipcop/ipcop/lfs
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv27330/lfs

Modified Files:
      Tag: IPCOP_v1_4_0
    coreutils util-linux
Log Message:
Need updated tools to coorectly build the new ISO. Particulary sfdisk!
(test done: updated files run correctly on 1.4.10)


Index: coreutils
===================================================================
RCS file: /cvsroot/ipcop/ipcop/lfs/coreutils,v
retrieving revision 1.5.2.5
retrieving revision 1.5.2.6
diff -C2 -d -r1.5.2.5 -r1.5.2.6
*** coreutils    5 Feb 2005 15:38:14 -0000    1.5.2.5
--- coreutils    20 Jan 2006 14:31:47 -0000    1.5.2.6
***************
*** 33,37 ****
  include Config
  
! VER        = 5.2.1
  
  THISAPP    = coreutils-$(VER)
--- 33,37 ----
  include Config
  
! VER        = 5.93
  
  THISAPP    = coreutils-$(VER)
***************
*** 57,69 ****
  # Top-level Rules
  
############################################################################
###
! objects =$(DL_FILE) $(THISAPP)-uname-1.patch $(THISAPP)-hostname-1.patch
  
  $(DL_FILE)                      = $(DL_FROM)/$(DL_FILE)
  $(THISAPP)-uname-1.patch        =
$(URL_LFS)/coreutils/$(THISAPP)-uname-1.patch
- $(THISAPP)-hostname-1.patch     =
$(URL_LFS)/coreutils/$(THISAPP)-hostname-1.patch
  
! $(DL_FILE)_MD5                  = 172ee3c315af93d3385ddfbeb843c53f
! $(THISAPP)-uname-1.patch_MD5    = da72f7adae07bf9dfd97b63bdf38ea30
! $(THISAPP)-hostname-1.patch_MD5 = b8291682b44eedc59643648a93bb449f
  
  install : $(TARGET)
--- 57,67 ----
  # Top-level Rules
  
############################################################################
###
! objects =$(DL_FILE) $(THISAPP)-uname-1.patch
  
  $(DL_FILE)                      = $(DL_FROM)/$(DL_FILE)
  $(THISAPP)-uname-1.patch        =
$(URL_LFS)/coreutils/$(THISAPP)-uname-1.patch
  
! $(DL_FILE)_MD5                  = 955d8abfd3dd8af2ca3af51480f1f9af
! $(THISAPP)-uname-1.patch_MD5    = c05b735710fbd62239588c07084852a0
  
  install : $(TARGET)
***************
*** 96,103 ****
      @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
      cd $(DIR_APP) && patch -Np1 < $(DIR_DL)/$(THISAPP)-uname-1.patch
-     cd $(DIR_APP) && patch -Np1 < $(DIR_DL)/$(THISAPP)-hostname-1.patch
      cd $(DIR_APP) && DEFAULT_POSIX2_VERSION=199209 ./configure
$(EXTRA_CONFIG)
      cd $(DIR_APP) && make -j 3 $(EXTRA_MAKE)
      cd $(DIR_APP) && make $(EXTRA_INSTALL) install
  ifeq "$(ROOT)" ""
      mv -f /usr/bin/{basename,cat,chgrp,chmod,chown,cp,dd,df} /bin
--- 94,102 ----
      @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE)
      cd $(DIR_APP) && patch -Np1 < $(DIR_DL)/$(THISAPP)-uname-1.patch
      cd $(DIR_APP) && DEFAULT_POSIX2_VERSION=199209 ./configure
$(EXTRA_CONFIG)
      cd $(DIR_APP) && make -j 3 $(EXTRA_MAKE)
      cd $(DIR_APP) && make $(EXTRA_INSTALL) install
+     #use hostname from inet-tools
+     rm /usr/bin/hostname
  ifeq "$(ROOT)" ""
      mv -f /usr/bin/{basename,cat,chgrp,chmod,chown,cp,dd,df} /bin

Bugs item #1410644, was opened at 2006-01-20 11:12
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1410644&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Manuel Oya (manueloya)
Assigned to: Nobody/Anonymous (nobody)
Summary: updates dont work

Initial Comment:
i dont know why but your home page dont work for me
http://www.ipcop.org dont work , only work 
http://ipcop.org

my system updates , refresh update list doesnt work
it says Could not open available updates file.  


where can i change the url where the script go to 
donload the list?


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1410644&group_id=40604

On Fri, 2006-01-20 at 00:10 +0100, Franck Bourdonnec wrote:
> I all,
> 
> (sorry I sent the first message without DHCP server settings)
> 
> Another very rapid method for installing IPCop while
> in developpment test of the installer part.
> 
> Peter Anvin, syslinux writer, provides all necessary stuff to do it:
> 
> You need
> 
> A network card PXE able:
> 
> my board: 3C905, you need absolutly flash it's bios to "mba 4.30"
> http://support.3com.com/infodeli/tools/nic/mba.htm
> use "crtrl+alt+B" to configure it !
> 
> 
> Install a TFTP server:
> http://freshmeat.net/redir/tftp-hpa/14040/url_homepage/tftp
> (Peter Anvin tftp server)
> 
> :configure, make install
> 
> I use -s /var/tftp-root option
> 
> Grab the 'pxelinux.0' file from SYSLinux package and copy it to
> your tftp-root
> 
> Copy or link the two IPCop files containing installer from your
> build tree:
> 
> build/boot/vmlinuz-installer
> build/install/images/cdinitrd.gz
> 
> to your tftp-root
> 
> If you follow instruction from Peter, edit your
> tftp-root/pxelinux.cfg/default file and add this
> to specify an new linux system (lilo like):
> 
> LABEL ipcop
> 	KERNEL vmlinuz-installer
> 	APPEND rw initrd=cdinitrd.gz root=/dev/ram0
> 	IAPPEND 1
> 
> 
> The 'rw' is very important !
> 
> Of course the installer won't know anything of this boot method!

The installer does know about PXEbooted installs.

It's what I've always used since I started with IPCop.

Alan.

I all,

Another very rapid method for installing IPCop while
in developpment test of the installer part.


Peter Anvin, syslinux writer, provides all necessary stuff to do it:

You need

A network card PXE able:

my board: 3C905, you need absolutly flash it's bios to "mba 4.30"
http://support.3com.com/infodeli/tools/nic/mba.htm
use "crtrl+alt+B" to configure it !


Install a TFTP server: 
http://freshmeat.net/redir/tftp-hpa/14040/url_homepage/tftp
(Peter Anvin tftp server)

:configure, make install

I use -s /var/tftp-root option

Grab the 'pxelinux.0' file from SYSLinux package and copy it to
your tftp-root

Copy or link the two IPCop files containing installer from your
build tree:

build/boot/vmlinuz-installer
build/install/images/cdinitrd.gz

to your tftp-root

If you follow instruction from Peter, edit your
tftp-root/pxelinux.cfg/default file and add this
to specify an new linux system (lilo like):

LABEL ipcop
	KERNEL vmlinuz-installer
	APPEND rw initrd=cdinitrd.gz root=/dev/ram0
	IAPPEND 1


The 'rw' is very important !

Of course the installer won't know anything of this boot method!
You need to provide normal way the "ipcop.1.4.11.tgz", on
local CD or usb key.

This is for fast loading of the "installer" testing.

For a complete install, the file ipcop.1.4.11.tgz have to be
dowloaded also, and I don't know how...
When linux installer is started, no network drivers are loaded.
Only the IP obtained from dhcp is passed with "APPEND"


This method saves you if you have 
-no floppy diskette
-no usb bootable bios
-no cdrom bootable bios !

Franck

Feature Requests item #1408815, was opened at 2006-01-17 20:56
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1408815&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Interface Improvements (example)
Group: Next Release (example)
Status: Open
Priority: 5
Submitted By: kaladonia (kaladonia)
Assigned to: Nobody/Anonymous (nobody)
Summary: better log for realtime info about url's accessed and freque

Initial Comment:
We shoud have ability to see urls being accessed and 
frequency and amt of traffic going to and from.  From 
there we should have ability to add this url to url 
filter list as block or alway allow or set priority.

I shoudl be able to filter this log by time range... 
(from 9am to 9:30am)what is urls accessed and what is 
frequency.  I should also be able to see the same log 
in real time starting "now" until i stop...

Mike

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1408815&group_id=40604

> Good evening...
> i'm building cvs version.. in subject...
> It give me an error:

> rm -f /dev/zero
> mknod /dev/zero c 1 5
> dd if=3D/dev/zero of=3D/install/images/boot-1.5.0a1.img bs=3D1024 count=
=3D2880

^^ Change to:

dd if=3D/dev/zero of=3D/install/images/boot-1.5.0a1.img bs=3D1024 count=3D=
3600

Resolves this error.
But there are plenty more to come. *g*


Bj=F6rn Olbers