ipcop-devel Mailing List for IPCop Firewall

Bugs item #1587368, was opened at 2006-10-30 12:29
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1587368&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Installation
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Bob Mac (dark_wizard)
Assigned to: Nobody/Anonymous (nobody)
Summary: Compaq Smart Array

Initial Comment:
Issue: kernel panic

Having issues with this current build as noted in this 
thread http://www.ipcops.com/index.php?
name=PNphpBB2&file=viewtopic&t=8015 and it appears I 
am not alone. 1.4.10 works fine.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1587368&group_id=40604

Bugs item #1586048, was opened at 2006-10-27 22:54
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1586048&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Kernel
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Gilles Espinasse (gespinasse)
Assigned to: Gilles Espinasse (gespinasse)
Summary: Asus a7n8x-e motherboard hang during modprobe eth16i

Initial Comment:
It happen on IPCop if you use the probe button to find 
network cards.
As a workaround, select cards manually (nforce2 and 
sk98lin for embedded interfaces) or rename/suppress 
eth16i module. As there is no isa bus on this card,it 
will never be usable.

I try so use strace the process but the log file is 
not written on disk during the bug.
This 'modprobe eth16i' hang problem is not specific to 
IPCop but hardware detection could be processed 
another way on other distrib that does not trigger the 
bug.

modprobe eth16i similary hang too on debian 3.1r3 
2.4.27 or 2.6.8 kernels.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1586048&group_id=40604

> I suspect the setaliases.c setuid helper may be broken.
> http://ipcop.cvs.sourceforge.net/ipcop/ipcop/src/misc-progs/setaliases.c?revision=1.2.2.5&view=markup&pathrev=IPCOP_v1_4_0
>
> There's a 'while' loop that writes ifconfig and arping rules, with a
> 'continue' on line 172 if a rule is disabled. Does that mean the
> incrementing of alias++; on line 193 is missed if a rule is disabled?

Problem solved. Olaf Westrik pointed out that the fault lay in aliases.cgi

Fix now in CVS.

Eric

Hi Eric,


The setuid helper is ok, aliases.cgi is broken.


If you define a couple of aliases you get following in 
/var/ipcop/ethernet/aliases

10.0.0.1,on,
10.0.0.3,on,
10.0.0.2,off,

If you now disable 10.0.0.3, following is written:

10.0.0.1,on,
10.0.0.3,
10.0.0.2,off,


Since the syntax of the 2nd line is wrong, the helper exits.


cheers Olaf


PS I'm confident you can figure out how to fix aliases.cgi by yourself 
now ;-)

-- 

A weizen a day helps keep the doctor away.

---------- Forwarded message ----------
From: Enevold <en...@im...>
Date: Oct 26, 2006 8:29 PM
Subject: [IPCop-user] BUG in IPCOP 1.4.11 Aliases
To: ipc...@li...

 Not sure if the following is a bug or working as designed.
 either am i sure if this is already reported.

 Anyway here is my senario:

 Added a public IP range of 25 ip addresses to the Network - Aliases
like x.x.x.162 trhu x.x.x.187
 all ip's is added with the Enabled ticked when created. and IPCOP
then creates the secondary eth1:xx
 seen by ifconfig.

 root@ipcop:~ # ifconfig
 eth1      inet addr:x.x.x.190  Bcast:x.x.x.191  Mask:255.255.255.224
RED interface

 Aliases:
 eth1:0    inet addr:x.x.x.162  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:1    inet addr:x.x.x.163  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:2    inet addr:x.x.x.164  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:3    inet addr:x.x.x.165  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:4    inet addr:x.x.x.166  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:5    inet addr:x.x.x.167  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:6    inet addr:x.x.x.168  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:7    inet addr:x.x.x.169  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:8    inet addr:x.x.x.170  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:9    inet addr:x.x.x.171  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:10   inet addr:x.x.x.172  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:11   inet addr:x.x.x.173  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:12   inet addr:x.x.x.174  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:13   inet addr:x.x.x.175  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:14   inet addr:x.x.x.176  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:15   inet addr:x.x.x.177  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:16   inet addr:x.x.x.178  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:17   inet addr:x.x.x.179  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:18   inet addr:x.x.x.180  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:19   inet addr:x.x.x.181  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:20   inet addr:x.x.x.182  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:21   inet addr:x.x.x.183  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:22   inet addr:x.x.x.184  Bcast:x.x.x.191  Mask:255.255.255.224

 Now if I go into the IPCop GUI and want to temporarily disable inet
addr:x.x.x.167, by unticking the (Enabled - Click to Disable)

 Then IPCop does the following to my eth1:xx list viewed by ifconfig,
after inet addr:x.x.x.167 is Disabled.

 Aliases:
 eth1:0    inet addr:x.x.x.162  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:1    inet addr:x.x.x.163  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:2    inet addr:x.x.x.164  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:3    inet addr:x.x.x.165  Bcast:x.x.x.191  Mask:255.255.255.224
 eth1:4    inet addr:x.x.x.166  Bcast:x.x.x.191  Mask:255.255.255.224

 Which then ofcause is not very good if servers above x.x.x167, is
still intended to be active from the outside,
 then they cant be accesed anymore from outside if any of those had
port forwardingins to the inside servers.

 I just wonder if this is by design or a bug, to me it looks like a
bug, why else have a Enable/Disable tick within aliases?

Enevold

***

I suspect the setaliases.c setuid helper may be broken.
http://ipcop.cvs.sourceforge.net/ipcop/ipcop/src/misc-progs/setaliases.c?revision=1.2.2.5&view=markup&pathrev=IPCOP_v1_4_0

There's a 'while' loop that writes ifconfig and arping rules, with a
'continue' on line 172 if a rule is disabled. Does that mean the
incrementing of alias++; on line 193 is missed if a rule is disabled?

  141	alias=0;
  142 	int linecounter = 0;
  143         while (fgets(s, STRING_SIZE, file) != NULL)
  144         {
  145 		linecounter++;
  146                 if (s[strlen(s) - 1] == '\n')
  147                         s[strlen(s) - 1] = '\0';
  148                 count = 0;
  149                 aliasip = NULL;
  150                 enabled = NULL;
  151                 comment = NULL;
  152                 sptr = strtok(s, ",");
  153                 while (sptr)
  154                 {
  155                         if (count == 0)
  156                                 aliasip = sptr;
  157                         if (count == 1)
  158                                 enabled = sptr;
  159                         else
  160                                 comment = sptr;
  161                         count++;
  162 			sptr = strtok(NULL, ",");
  163 		}
  164
  165 		if (!(aliasip && enabled)) {
  166 			fprintf(stderr, "Incomplete data line: in %s(%d)\n",
  167 					CONFIG_ROOT "/ethernet/aliases",
  168 					linecounter);
  169 			exit(1);
  170 		}
  171 		if (!strcmp(enabled, "on") == 0)	/* disabled rule? */
  172 			continue;
  173
  174 		if (!VALID_IP(aliasip))
  175                 {
  176                         fprintf(stderr, "Bad alias : %s in %s(%d)\n",
  177 					aliasip,
  178 					CONFIG_ROOT "/ethernet/aliases",
  179 					linecounter);
  180                         exit(1);
  181                 }
  182
  183 		memset(command, 0, STRING_SIZE);
  184 		snprintf(command, STRING_SIZE-1,
  185 				"/sbin/ifconfig %s:%d %s netmask %s broadcast %s up",
  186 			     red_dev, alias, aliasip, red_netmask, red_broadcast);
  187 		safe_system(command);
  188 		memset(command, 0, STRING_SIZE);
  189 		snprintf(command, STRING_SIZE-1,
  190 				"/usr/sbin/arping -q -c 1 -w 1 -i %s -S %s %s",
  191 				red_dev, aliasip, default_gateway);
  192 		safe_system(command);
  193 		alias++;
  194 	}

Need some expert opinion here.

Eric

----- Original Message ----- 
From: "Charles Tower" <cet...@ya...>
To: <al...@us...>; <bec...@us...>;
<esj...@us...>; <ges...@us...>;
<gol...@us...>; <jac...@us...>
Sent: Thursday, October 26, 2006 6:34 AM
Subject: Fwd: No Hardware Compatibility List


> It's still happening.  I'm just trying to find out the
> system requirements for IPCop.  Is there another page
> for that?
>
> Here's tonight's error message.
>
> 1. Server: www.ipcop.org
> 2. URL path: /modules.php&
> 3. Error notes: File does not exist:
> /home/groups/i/ip/ipcop/htdocs/modules.php&amp;
> 4. Error type: 404
> 5. Request method: GET
> 6. Request query string:
> POSTNUKESID=3b4083b2cb3ce7daf297cae89250c559
> 7. Time: 2006-10-25 21:26:29 PDT (1161836789)
>
This work for me actually.

Gilles

Feature Requests item #1583341, was opened at 2006-10-24 07:43
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1583341&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Tony Nordstrand (tonydalfolk)
Assigned to: Nobody/Anonymous (nobody)
Summary: Driver for relatek 8201 Lan

Initial Comment:
Are there any plan for adding the Integrated on board 
motherboard realtek 8201 driver in ipcop?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1583341&group_id=40604

Feature Requests item #1583333, was opened at 2006-10-23 22:09
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1583333&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: cRazY_c0d3r (crazy_c0d3r)
Assigned to: Nobody/Anonymous (nobody)
Summary: add Fair NAT as a QoS option

Initial Comment:
Fair NAT is a QoS script that was designed to divide
bandwidth for multiple computers. It has the capability
of "borrowing" unused bandwidth from others, and
prioritizing traffic (i.e. so ssh runs with a better
ping time than p2p traffic). It works *MUCH* better
than wondershaper on a router, as wondershaper was
really meant to do QoS for one computer, and actually
allows you to do wondershaper-style traffic shaping for
each individual computer behind the router.

As it is, the Fair NAT script works with minimum
modifications on IPCop. It would be really nice if this
were added to the default distribution.

http://www.metamorpher.de/fairnat/

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1583333&group_id=40604

Bugs item #1583324, was opened at 2006-10-23 21:45
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1583324&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: cRazY_c0d3r (crazy_c0d3r)
Assigned to: Nobody/Anonymous (nobody)
Summary: CONNMARK won't load on v1.4.11

Initial Comment:
For the last couple of IPCop versions, I had been
successful with CONNMARK in some custom iptables rules. 

Since version 1.4.11, when using --restore-mark and
--save-mark commands, i get an error:

+ /sbin/iptables -t mangle -A MY_MARKS -j CONNMARK
--restore-mark
iptables: Unknown error 4294967295

and 

+ /sbin/iptables -t mangle -A MY_MARKS -m mark --mark 1
-j CONNMARK --save-mark
iptables: Unknown error 4294967295

This error means "Invalid arguments"
http://lists.netfilter.org/pipermail/netfilter-buglog/2006-March/000785.html

I checked my loaded modules, and ipt_CONNMARK is missing.
insmod ipt_CONNMARK yields:
# insmod ipt_CONNMARK
Using
/lib/modules/2.4.31/kernel/net/ipv4/netfilter/ipt_CONNMARK.o.gz
/lib/modules/2.4.31/kernel/net/ipv4/netfilter/ipt_CONNMARK.o.gz:
/lib/modules/2.
4.31/kernel/net/ipv4/netfilter/ipt_CONNMARK.o.gz:
unresolved symbol ip_conntrack
_get_R5682e82f

Seems to be a compile problem with the module?


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1583324&group_id=40604

Bugs item #1582245, was opened at 2006-10-22 13:26
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1582245&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: General
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Submitted By: slashtools (slashtools)
Assigned to: Nobody/Anonymous (nobody)
Summary: slow network

Initial Comment:
Hi to you all,

Network is reliable (most of the time), but much slower.

I'm going back to 1.4.10.
Reason for this is that I chose IPCOP because of the
"simple setup, no problems" approach.

Block Outgoing Traffic and Squid adzap tools are installed.

On my 1.4.11 rig even reaching google (which was always
fast on 1.4.10) can take up to 5 seconds. This is
annoying. Hope you developers find out what's wrong.

My setup, if it helps: 
  No ACPI SMP 2x333MHz PIII
  256 Mb memory
  Adaptec SCSI
  1 x 3c59x (RED)
  1 x 3c59x (ORANGE)
  1 x epic100 (GREEN)

Best wishes,

Jacco

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1582245&group_id=40604

Feature Requests item #1581008, was opened at 2006-10-20 10:31
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1581008&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Submitted By: Chawalit Limsowan (c_limsowan)
Assigned to: Nobody/Anonymous (nobody)
Summary: Driver for BiPAC7000 Modem

Initial Comment:
Hi!

Are there any chance that IPCOP will support the BiPAC
7000 ADSL Modem? The vendor (Billion.Com) has already
provided the driver for Linux. It can be reached here
>>
http://60.248.77.180/_Internet/fd/bipac-7000/bipac-7000Linuxstandard.zip


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1581008&group_id=40604

Bugs item #1578734, was opened at 2006-10-17 10:10
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1578734&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Nigrounet (nigrounet)
Assigned to: Nobody/Anonymous (nobody)
Summary: Not default route add with ip-up

Initial Comment:
Hello, 
since the upgrade 1.4.11 in september, allways
connection works but, the default route must be add
manually !!
The default route add before ppp0 configure, if I read
good log file.



Oct 16 18:32:49 ipcop red: Connectioncheck: Restarting 1/5
Oct 16 18:32:49 ipcop ipcop: Starting RED device eth2.
Oct 16 18:32:49 ipcop ipcop: Dialling NeufTelecom.
Oct 16 18:32:49 ipcop pppd[720]: Plugin rp-pppoe.so loaded.
Oct 16 18:32:49 ipcop pppd[720]: RP-PPPoE plugin
version 3.3 compiled against pppd 2.4.2
Oct 16 18:32:49 ipcop pppd[721]: pppd 2.4.2 started by
root, uid 0
Oct 16 18:32:49 ipcop pppd[721]: PADS: Service-Name: ''
Oct 16 18:32:49 ipcop pppd[721]: PPP session is 259
Oct 16 18:32:49 ipcop pppd[721]: using channel 2
Oct 16 18:32:49 ipcop pppd[721]: Using interface ppp0
Oct 16 18:32:49 ipcop pppd[721]: Connect: ppp0 <--> eth2
Oct 16 18:32:49 ipcop pppd[721]: Couldn't increase MTU
to 1500
Oct 16 18:32:49 ipcop pppd[721]: Couldn't increase MRU
to 1500
Oct 16 18:32:49 ipcop pppd[721]: sent [LCP ConfReq
id=0x1 <magic 0xdf4b0c56>]
Oct 16 18:32:49 ipcop pppd[721]: rcvd [LCP ConfReq
id=0x1 <auth chap MD5> <magic 0x52784e61>] 
Oct 16 18:32:49 ipcop pppd[721]: sent [LCP ConfAck
id=0x1 <auth chap MD5> <magic 0x52784e61>]
Oct 16 18:32:49 ipcop pppd[721]: rcvd [LCP ConfAck
id=0x1 <magic 0xdf4b0c56>] 
Oct 16 18:32:49 ipcop pppd[721]: Couldn't increase MTU
to 1500
Oct 16 18:32:49 ipcop pppd[721]: Couldn't increase MRU
to 1500
Oct 16 18:32:49 ipcop pppd[721]: sent [LCP EchoReq
id=0x0 magic=0xdf4b0c56]
Oct 16 18:32:49 ipcop pppd[721]: rcvd [LCP EchoRep
id=0x0 magic=0x52784e61] 
Oct 16 18:32:49 ipcop pppd[721]: rcvd [CHAP Challenge
id=0x1 <dc8e9f4c32a742710e3e3071632ac148>, name = "guest"] 
Oct 16 18:32:49 ipcop pppd[721]: sent [CHAP Response
id=0x1 <db5e23216517c50374011ed6683abcd2>, name =
"ZZZZZ@ZZZZZ"]
Oct 16 18:32:50 ipcop pppd[721]: rcvd [CHAP Success
id=0x1 ""]
Oct 16 18:32:50 ipcop pppd[721]: CHAP authentication
succeeded
Oct 16 18:32:50 ipcop pppd[721]: peer from calling
number 00:90:D0:62:C2:A9 authorized
Oct 16 18:32:50 ipcop pppd[721]: sent [IPCP ConfReq
id=0x1 <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-dns3 0.0.0.0>]
Oct 16 18:32:50 ipcop pppd[721]: rcvd [IPCP ConfReq
id=0x1 <addr 1.1.1.1>] 
Oct 16 18:32:50 ipcop pppd[721]: sent [IPCP ConfAck
id=0x1 <addr 1.1.1.1>]
Oct 16 18:32:50 ipcop pppd[721]: rcvd [IPCP ConfNak
id=0x1 <addr 86.69.85.85> <ms-dns1 84.103.237.146>
<ms-dns3 86.64.145.146>] 
Oct 16 18:32:50 ipcop pppd[721]: sent [IPCP ConfReq
id=0x2 <addr 86.69.85.85> <ms-dns1 84.103.237.146>
<ms-dns3 86.64.145.146>]
Oct 16 18:32:50 ipcop pppd[721]: rcvd [IPCP ConfAck
id=0x2 <addr 86.69.85.85> <ms-dns1 84.103.237.146>
<ms-dns3 86.64.145.146>]
Oct 16 18:32:50 ipcop pppd[721]: default route
ioctl(SIOCADDRT): Network is unreachable
Oct 16 18:32:50 ipcop pppd[721]: local  IP address
86.69.85.85
Oct 16 18:32:50 ipcop pppd[721]: remote IP address 1.1.1.1
Oct 16 18:32:50 ipcop pppd[721]: primary   DNS address
84.103.237.146
Oct 16 18:32:50 ipcop pppd[721]: secondary DNS address
86.64.145.146
Oct 16 18:32:50 ipcop pppd[721]: Script /etc/ppp/ip-up
started (pid 732)
Oct 16 18:32:50 ipcop ipcop: PPP has gone up on ppp0
Oct 16 18:32:50 ipcop rc.updatered:
/etc/rc.d/rc.updatered locking for 735
Oct 16 18:32:51 ipcop dnsmasq[769]: started, version
2.33 cachesize 150
Oct 16 18:32:51 ipcop dnsmasq[769]: compile time
options: no-IPv6 GNU-getopt ISC-leasefile no-DBus no-I18N
Oct 16 18:32:51 ipcop dnsmasq[769]: reading
/var/state/dhcp/dhcpd.leases
Oct 16 18:32:51 ipcop dnsmasq[769]: reading
/var/ipcop/red/resolv.conf
Oct 16 18:32:51 ipcop dnsmasq[769]: using nameserver
86.64.145.146#53
Oct 16 18:32:51 ipcop dnsmasq[769]: using nameserver
84.103.237.146#53
Oct 16 18:32:51 ipcop dnsmasq[769]: read /etc/hosts - 7
addresses
Oct 16 18:32:51 ipcop ipcop: Dynamic DNS ip-update for
adsldycom.selfip.org: failure
Oct 16 18:32:52 ipcop rc.updatered: unlocking from 735
Oct 16 18:32:52 ipcop pppd[721]: Script /etc/ppp/ip-up
finished (pid 732), status = 0x0

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1578734&group_id=40604

Feature Requests item #1577802, was opened at 2006-10-15 16:21
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1577802&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Submitted By: Glen Buie (glenser)
Assigned to: Nobody/Anonymous (nobody)
Summary: Blue subscriptions

Initial Comment:
Greetings:
An addition to the blue access page, allowing one to 
setup a subscription portal, pointing to a server on 
the DMZ to supply a subscription form. HTTP(S) requests 
from unauthorized MAC would be redirected to DMZ 
server.
After proper identification, pass a code to a listening 
socket on DMZ port, telling MAC address to allow thru 
blue. At a later time, a different code sent to revoke 
a particular MAC address would allow timed expiration.
All forms and timing logic could be in any language
desired on the DMZ server. (I have 'wireless.cgi' 
ready, just need socket code!)

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1577802&group_id=40604

A further update:

The files can be found here:
http://www.fomltd.com/ipcop/wanpipe-12-10-2006.tar.gz

> Every modules that are compiled is needed.
> We need to tweak before compilation.

Ok now it's working, just compiling PPP, CHDLC & ADSL, this is the minimu=
m
combination I need plus the ADSL that (I think) Franc needs.

The new lfs/wanpipe has this tweak.


I have now tested this build on our leased line and it works fine from a
fresh install all configured from the gui :-)

I find a problem though, when the link is very busy (a big download) afte=
r
a few minutes the link dies, I am still trying to find out if it is
wanpipe or pppd that is breaking. I will have the leased line to test
again in two weeks time. Any suggestions greatly welcomed.



> This is only an example, I have not look back to your recommandations f=
or

I left out all the others, I'm not able to make use of them and if someon=
e
wants someting else it can be enabled when we are ready to make use of it=
.

>> I have enclosed a ROOTFILES.i386 file but it does not seem to be used =
by
>> the build process right now. I get all of my files regardless of
>> ROOTFILES

Still having this problem, my ROOTFILES seems to be ignored, if I make
clean && make build everything works fine but no files are excluded. If I
make build without make clean I get very few files, no modules at all & a
very broken system.

Am I doing something very wrong with my ROOTFILES? Help.

> Every kernel module is include because lib/modules/KVER/kernel and
> lib/modules/KVER-smp/kernel are include, so every files under those
> directories are include.

Maybe this is my problem, should I make a second lfs for the wanpipe
utilities so they are built separately to the modules?


> I will look a bit more in details and upgrade wanpipe to beta7-2.3.4

Thanks,

Andre

Le mardi 10 octobre 2006 23:57, Steve G a =E9crit=A0:

> Question, it has compiled PXE, USB and CD images. This
> is a sucessful build, BUT, I was hoping to be able to
> run IPCop w/o running the installer, rather just build
> the code and begin it's execution. Make
> changes/modifications as needed, then re-init and
> start again w/o a new system install. Is this
> possible? I do not want to start from a scratch system
> as the installer will require.

Hello,
Not sure ti understans well your need. Anyway, to develop
for IPCop:

1) Install MidnightCommander on the IPCop devel. It is extremely
usefull to naviguate and edit the system.
Need to copy it+some other libs. Easy task.

GUI: direct edit th source file and check with your browser.
Don't forget to erase 'cache lang files' or add your in
/var/ipcop/lang.
Then copy back the source to your repository! (don't forget
to re-edit/var/ipcop to CONFIG_ROOT.

COMPILED EXECUTABLE
we don't do many change on standart package. All is
the make file for the package.
To rebuild a package, erase its log in the log dir on your
build machine.=20
Launch 'make.sh build'
Naviguate throught the 'build' dir wich is an exact copy
of IPcop and with MC having a window open on your
IPcop, copy new files (from build to ipcop).

INSTALLER process
to test extremely fast changes in installler code, you
need to setup an tftp server and use a PXE network
boot for the installed IPCop.

You can use an RSA key to authenticate automatically
on the IPCop (sshd) + ssh agent. Avoid thousant of
password asking and full automated copies. Also
change back this annoying port 222 to 22.


Franck

Feature Requests item #1574890, was opened at 2006-10-11 01:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1574890&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Submitted By: cibgiu (cibgiu)
Assigned to: Nobody/Anonymous (nobody)
Summary: Squid - add X-Forwarded-For

Initial Comment:
Hi,

could you add the option X-Forwarded-For on squid?
This is useful when using dansguard so proxy logs 
have the client ip.

Thanks, Giuseppe

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1574890&group_id=40604

That was it! CSV download resolved the missing source
files. I suppose my original download must have been
corrupted in some way. I don't know why I didn't think
to try CSV myself.

Question, it has compiled PXE, USB and CD images. This
is a sucessful build, BUT, I was hoping to be able to
run IPCop w/o running the installer, rather just build
the code and begin it's execution. Make
changes/modifications as needed, then re-init and
start again w/o a new system install. Is this
possible? I do not want to start from a scratch system
as the installer will require. This host is a
multi-boot host and will only be used as a firewall
when booted into the partition in which ipcop was
presently compiled in.


--- Gilles Espinasse <g....@fr...> wrote:

> 
> ----- Original Message ----- 
> From: Steve G
> To: ipc...@li...
> Sent: Tuesday, October 10, 2006 7:41 AM
> Subject: Re: [IPCop-devel] Can't resolve problem
> building 1.4.11
> 
> 
> > Hey Gilles,
> ...
> > But make.sh build fails at same spot:
> > Oct 10 05:17:45: Building ethtool
> > Oct 10 05:17:54: Building ez-ipupdate
> > Oct 10 05:18:06: Building fcron
> > ERROR: No such file or directory:
> /usr/src/ipcop-sources-1.4.11/build/usr/src/lfs/GD
> > Check
> /usr/src/ipcop-sources-1.4.11/log/_build.ipcop.log
> for errors if
> applicable
> > [root@ixia-test ipcop-sources-1.4.11]#
> > My question is what process makes the files within
> the usr/src/lfs??
> > It is not creating the GD file.
> > Many other files have been created, but not the
> GD.....
> 
> No process create file inside build/usr/src/lfs
>  lfs/GD exist on the ipcop-sources-1.4.11 package.
> During build, lfs directory is mounted to
> build/usr/src/lfs/
> 
> I suggest you untar the sources package again at the
> same place to retrieve
> lfs/GD.
> Or use the cvs version
> cvs -z3
>
-d:pserver:ano...@ip...:/cvsroot/ipcop
> co -r
> IPCOP_v1_4_11_FINAL ipcop
> 
> If this does not work, what file system do you use?
> It will not work on a fat or fat32 partition.
> 
> Gilles
> 
> Please, could you reply with brut text and not html?
> 
> 
>
-------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get
> the chance to share your
> opinions on IT & business topics through brief
> surveys -- and earn cash
>
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
>
https://lists.sourceforge.net/lists/listinfo/ipcop-devel
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 

Hi list,

This article: http://spidertools.com/ipcop_snort.php
describes the snort feature in IPCop. But the interesting part, at =20
least to me, is that the article proofs that IPCop is used for serious =20
business since this company is providing courses in systems =20
administration. Way to go:o)

--=20
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://keyserver.veridis.com:11371/pks/lookup?op=3Dget&search=3D0xD3C9A00E
mir <at> datanom <dot> net
http://keyserver.veridis.com:11371/pks/lookup?op=3Dget&search=3D0xE501F51C
mir <at> miras <dot> org
http://keyserver.veridis.com:11371/pks/lookup?op=3Dget&search=3D0xE3E80917
--------------------------------------------------------------
BOFH excuse #267:

The UPS is on strike.

Bugs item #1574305, was opened at 2006-10-10 14:31
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1574305&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: User Interface
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Submitted By: Wolf Siedler (wolfsiedler)
Assigned to: Nobody/Anonymous (nobody)
Summary: GUI: Page Status - Connections not displayed correctly

Initial Comment:
After fresh installations of 1.4.11 I observed that the
page "Connections" of GUI menu Settings is not
completely displayed. The attached screenshot shows the
display.

Tried several installations on two different PCs, but
the outcome was always the same.

It also does not seem to be a browser issue, the
display is the same on both Firefox 1.5.0.7 (Windows
and Linux) as well as on Internet Explorer 6.

The problem did not show on IPCops running 1.4.10.
However, these IPCops were not freshly installed, but
upgraded to 1.4.10.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1574305&group_id=40604

----- Original Message ----- 
From: Steve G
To: ipc...@li...
Sent: Tuesday, October 10, 2006 7:41 AM
Subject: Re: [IPCop-devel] Can't resolve problem building 1.4.11


> Hey Gilles,
...
> But make.sh build fails at same spot:
> Oct 10 05:17:45: Building ethtool
> Oct 10 05:17:54: Building ez-ipupdate
> Oct 10 05:18:06: Building fcron
> ERROR: No such file or directory:
/usr/src/ipcop-sources-1.4.11/build/usr/src/lfs/GD
> Check /usr/src/ipcop-sources-1.4.11/log/_build.ipcop.log for errors if
applicable
> [root@ixia-test ipcop-sources-1.4.11]#
> My question is what process makes the files within the usr/src/lfs??
> It is not creating the GD file.
> Many other files have been created, but not the GD.....

No process create file inside build/usr/src/lfs
 lfs/GD exist on the ipcop-sources-1.4.11 package.
During build, lfs directory is mounted to build/usr/src/lfs/

I suggest you untar the sources package again at the same place to retrieve
lfs/GD.
Or use the cvs version
cvs -z3 -d:pserver:ano...@ip...:/cvsroot/ipcop co -r
IPCOP_v1_4_11_FINAL ipcop

If this does not work, what file system do you use?
It will not work on a fat or fat32 partition.

Gilles

Please, could you reply with brut text and not html?

Hey Gilles,

Yeah, my e-mail is broken it seems. Blocking from all 

international IP's. I guess this list server is listed

as non-US.. Will have to investigate.. GD and gd are both in cache...

-r--r--r--  1 root root 155680 Oct  9 22:08 /usr/src/ipcop-sources-1.4.11/cache/GD-2.12.tar.gz
[root@ixia-test GD-2.12]# ls -la /usr/src/ipcop-sources-1.4.11/cache/gd
gd-2.0.20.tar.gz   gdbm-1.8.3.tar.gz  
[root@ixia-test GD-2.12]# ls -la /usr/src/ipcop-sources-1.4.11/cache/gd-2.0.20.tar.gz 
-r--r--r--  1 root root 542546 Oct  9 22:08 /usr/src/ipcop-sources-1.4.11/cache/gd-2.0.20.tar.gz
[root@ixia-test GD-2.12]# 

But make.sh build fails at same spot:

Oct 10 05:17:45: Building ethtool
Oct 10 05:17:54: Building ez-ipupdate
Oct 10 05:18:06: Building fcron
ERROR: No such file or directory: /usr/src/ipcop-sources-1.4.11/build/usr/src/lfs/GD
       Check /usr/src/ipcop-sources-1.4.11/log/_build.ipcop.log for errors if applicable
[root@ixia-test ipcop-sources-1.4.11]# 


My question is what process makes the files within the usr/src/lfs?? It is not creating the GD file.

Many other files have been created, but not the GD.....

 

 

List:       ipcop-devel  Subject:    Re: [IPCop-devel] Can't resolve problem building 1.4.11  From:       "Gilles Espinasse" <g.esp () free ! fr>  Date:       2006-10-08 19:03:24  Message-ID: 09dc01c6eb0c$70df5fe0$f9b5a8c0 () pii350  [Download message RAW]    ----- Original Message -----   From: Yoda  To: ipc...@li...  Sent: Saturday, October 07, 2006 6:18 AM  Subject: [IPCop-devel] Can't resolve problem building 1.4.11      > Hello,  >  > I'm trying to build IPCop, but I'm having a problem in Stage3.  >  > I've downloaded IPCop sources and IPCop packages CD. I then made  gettoolset, then prefetch,  > no errors so far. Then make build and I get the below error. It's erroring  on GD, but I see gd as  > completed. Not sure what this is. Is GD related to fcron??  >  > Any help would be appreciated!!  >  >    ...  > Oct  7 02:46:00: Building fcron  > ERROR: No such file or directory:  /usr/src/ipcop-sources-1.4.11/build/usr/src/lfs/GD  >        Check
 /usr/src/ipcop-sources-1.4.11/log/_build.ipcop.log for errors  if applicable  > [root@ixia-test ipcop-sources-1.4.11]#      there is two different packages GD-2.12 and gd-2.0.20 and corresponding lfs  scripts to compile  gd is a library to create images (used in the different graphics)  GD is the perl interface to gd  Nothing is related to fcron, GD and fcron are compiled by alphabetical  order.    I have checked that both lfs/gd and lfs/GD exist in  ipcop-sources-1.4.11.tgz.  A common error is that if you changes lfs script files from a windows  machine, as Windows file system does not differentiate lfs/gd from lfs/GD,  one of the two files could be missing on the windows side.    Gilles    Ps:  your mail address does not work.      ---------------

 		
---------------------------------
 All-new Yahoo! Mail - Fire up a more powerful email and get things done faster.

g....@fr...(Gilles Espinasse)  08.10.06 23:49


>----- Original Message -----
>From: "Rainer Zocholl" <Use...@zo...
>> To: <ipc...@li...>
>Sent: Sunday, October 08, 2006 9:47 PM
>Subject: Re: [IPCop-devel] Feedback requested for Backup in Admin
>Manual

>> eri...@gm...(Eric Oberlander)  08.10.06 14:21
>>
>> Once upon a time "Eric Oberlander " shaped the electrons to say...
>>
>>>Hi
>>
>>>Can I request some feedback on the description of the new backup
>>>methods in v1.4.11, which are now in the Admin Manual online here:
>>>http://www.ipcop.org/1.4.0/en/admin/html/system.html#backup
>>
>>>If anybody has used it, does it work as described, are there any
>>>steps missing, or are some examples required.
>>
>> After the update trying to "export backup key" leds to a (not very
>helpfull)
>> error message:
>> "Password requires 6 chars" (or so) entering  the root password
>> leads to
>"invalid password
>'backup' user is not 'root' user.
>Did you read the 1.4.11 update message in bold?

ME? I always read man pages etc. ;-)

Seriously: I did of cause, i was just testing how someone who
did not read/understand/apply the infos would be lead into the
right direction with comprehensive error messages (if that sounds sacractic:
it is not meant that way. That's due to my limited englich skills, beg your
pardon.)

>> Is the backup password stored in plain text?
>no, it's a hash in /etc/shadow like 'root' password.

Ah, good.
So it would be possible to copy the root's hash to backup
tohave a usefull deault?

I think it's nice to have a second account for backup, but
i would set it to the same shadow string als "root" to make my
living easier...
Or: Why is it not wise to do that (in  a "soho"-Setup) without a
"dedicated" backup operator?


>> Is some where a description how to unpack the backupfile manually?
>- in the announce of 1.4.11
>http://marc.theaimsgroup.com/?l=ipcop-devel&m=115637197516671&w=2
>- in the file release note
>https://sourceforge.net/project/shownotes.php?release_id=441590&group_
>id=40604

Thanks,very interessting! A lot new feature worth dating up.
Thanks a lot for all that work done!


Back to my question:
On my PC there is now a .dat and a .key file, and i know the 
backup password(doi need to know it or is the .key sufficient?)
What progams/steps do i have to do to "verify" and 
to "unencrypt" the .dat to a tar.gz if i want to see what was installed
etc. without going online or restoring the file.

>I just discover that for unknow reason, the message did not reach
>ipcop-announce list where it was send in the same time as ipcop-devel
>and ipcop-user.

That happens more than once :-( and not only with the "announce"
list. Where can we write to when the list server is not working?

----- Original Message ----- 
From: "Rainer Zocholl" <Use...@zo...>
To: <ipc...@li...>
Sent: Sunday, October 08, 2006 9:47 PM
Subject: Re: [IPCop-devel] Feedback requested for Backup in Admin Manual


> eri...@gm...(Eric Oberlander)  08.10.06 14:21
>
> Once upon a time "Eric Oberlander " shaped the electrons to say...
>
> >Hi
>
> >Can I request some feedback on the description of the new backup
> >methods in v1.4.11, which are now in the Admin Manual online here:
> >http://www.ipcop.org/1.4.0/en/admin/html/system.html#backup
>
> >If anybody has used it, does it work as described, are there any steps
> >missing, or are some examples required.
>
> After the update trying to "export backup key" leds to a (not very
helpfull)
> error message:
> "Password requires 6 chars" (or so) entering  the root password leads to
"invalid password
'backup' user is not 'root' user.
Did you read the 1.4.11 update message in bold?
>
> Is the backup password stored in plain text?
no, it's a hash in /etc/shadow like 'root' password.

> If then a warning should be given not to re-use the "root" password!
> (Maybe the setup srcipt can test teh neu backup password against the root
> account..)
>
> If the crypted password is sufficient couldn't the root paas word be used
> instead of "none"?
>
> Why the there no help link from that page to the manual?
>
> Is some where a description how to unpack the backupfile manually?
- in the announce of 1.4.11
http://marc.theaimsgroup.com/?l=ipcop-devel&m=115637197516671&w=2
- in the file release note
https://sourceforge.net/project/shownotes.php?release_id=441590&group_id=40604

I just discover that for unknow reason, the message did not reach
ipcop-announce list where it was send in the same time as ipcop-devel and
ipcop-user.

Gilles

eri...@gm...(Eric Oberlander)  08.10.06 14:21

Once upon a time "Eric Oberlander " shaped the electrons to say...

>Hi

>Can I request some feedback on the description of the new backup
>methods in v1.4.11, which are now in the Admin Manual online here:
>http://www.ipcop.org/1.4.0/en/admin/html/system.html#backup

>If anybody has used it, does it work as described, are there any steps
>missing, or are some examples required.

After the update trying to "export backup key" leds to a (not very helpfull)
error message:
"Password requires 6 chars" (or so)
entering  the root password leads to
"invaild password"

Is the backup password stored in plain text?
If then a warning should be given not to re-use the "root" password!
(Maybe the setup srcipt can test teh neu backup password against the root
account..)

If the crypted password is sufficient couldn't the root paas word be used
instead of "none"?

Why the there no help link from that page to the manual?

Is some where a description how to unpack the backupfile manually?


Rainer---<=====>                         Vertraulich
             //  
           //                              
         <=====>--------------ocholl, Kiel, Germany ------------

----- Original Message ----- 
From: Yoda
To: ipc...@li...
Sent: Saturday, October 07, 2006 6:18 AM
Subject: [IPCop-devel] Can't resolve problem building 1.4.11


> Hello,
>
> I'm trying to build IPCop, but I'm having a problem in Stage3.
>
> I've downloaded IPCop sources and IPCop packages CD. I then made
gettoolset, then prefetch,
> no errors so far. Then make build and I get the below error. It's erroring
on GD, but I see gd as
> completed. Not sure what this is. Is GD related to fcron??
>
> Any help would be appreciated!!
>
>

...
> Oct  7 02:46:00: Building fcron
> ERROR: No such file or directory:
/usr/src/ipcop-sources-1.4.11/build/usr/src/lfs/GD
>        Check /usr/src/ipcop-sources-1.4.11/log/_build.ipcop.log for errors
if applicable
> [root@ixia-test ipcop-sources-1.4.11]#


there is two different packages GD-2.12 and gd-2.0.20 and corresponding lfs
scripts to compile
gd is a library to create images (used in the different graphics)
GD is the perl interface to gd
Nothing is related to fcron, GD and fcron are compiled by alphabetical
order.

I have checked that both lfs/gd and lfs/GD exist in
ipcop-sources-1.4.11.tgz.
A common error is that if you changes lfs script files from a windows
machine, as Windows file system does not differentiate lfs/gd from lfs/GD,
one of the two files could be missing on the windows side.

Gilles

Ps:
your mail address does not work.