ipcop-devel Mailing List for IPCop Firewall

Feature Requests item #1605711, was opened at 2006-11-30 00:43
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1605711&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Paulussie (holthp)
Assigned to: Nobody/Anonymous (nobody)
Summary: Support for Realtek rtl8110sc NIC

Initial Comment:
I am not sure this is the right place and right way to put this but let me try:

I would like to see default support for the Realtek rtl8110sc NIC chipset. This chipset is now (1.4.11) seen as rtl8169 when probing for interfaces but that leads to a non-working system. 

I found someone who compiled the linux driver from Realtek for IPCop use. After installing this driver I can confirm that it does work.

The rtl8110sc is found in the 3xGigaLan daugtherboard that makes a nice, small and relatively cheap 4-segment router together with a Jetway Mini-ITX motherboard.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1605711&group_id=40604

Feature Requests item #1604573, was opened at 2006-11-28 17:36
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1604573&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: Next release
Status: Open
Priority: 5
Private: No
Submitted By: Dr. Uwe Meyer-Gruhl (meyergru)
Assigned to: Nobody/Anonymous (nobody)
Summary: Support for OpenDNS,com dynamic IP update

Initial Comment:
OpenDNS.com now has the ability to manage DNS settings based on the IP that the DNS request originates from.

For example, one can disable the wildcard matching, which can break some things, but still benefit from the other features of OpenDNS name resolution.

They use the same protocol as DynDNS.org for IP updates, sans the parameters (i.e. only basic authentication is needed). However, they use SSL with this URL:

https://updates.opendns.com/account/ddns.php?

There are only two files that need modification:

1. /home/httpd/cgi-bin/ddns.cgi for the form to support opendns.com (not even hostnames or other fields are needed).

2. /usr/local/bin/setddns.pl to trigger the url (much like the section for "dynu", only with "get_https()" and base64-encoded authentication, some error reporting is needed, though, see: http://www.opendns.com/account/dynamic_dns.php)

Should be very easy to do.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1604573&group_id=40604

Feature Requests item #1602698, was opened at 2006-11-25 15:46
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1602698&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: mousi (mousi)
Assigned to: Nobody/Anonymous (nobody)
Summary: Can use it with zerina

Initial Comment:
I use Zerina 0.9.7a10 and I read somewhere that tap protocol is not available because ipcop's kernel doesn't support it... I use IPCop 1.4.11! If it supports it then I guess I have to talk to zerina Developers

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1602698&group_id=40604

Feature Requests item #1602516, was opened at 2006-11-25 01:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1602516&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: mousi (mousi)
Assigned to: Nobody/Anonymous (nobody)
Summary: Tap Support

Initial Comment:
I'd like to see tap support in ipcop's kernel... Are you planning on doing this?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1602516&group_id=40604

Bugs item #1602393, was opened at 2006-11-24 18:39
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1602393&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: tralalo (tralalo)
Assigned to: Nobody/Anonymous (nobody)
Summary: Mylex / Raid 1

Initial Comment:
Hi,

after installing Ipcop 1.4.11 from CD. WhenI reboot the system now I always get a kernel panic as it cannot find my root partition. In my case: /dev/rd/c0d0p4.

I am using Mylex Controler configured to Raid 1.

My problem looks very similar to bug 1587368, but I am not sure if this is the same bug.

I had the same sympthons on a gentoo machine when gentoo switched from devfs to udev. The udev-version at that time was too low, but with the next update of udev the problem was fixed. Well, this is only an idea where the solution might be...

Ciao


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1602393&group_id=40604

I find some simple ideas how to fight simple spam script kiddies on postn=
uke
forum. I will not describe here the details at it is not that hard to mak=
e the
fix ineffective.
Not yet implemented, I should try that this week-end.


Gilles

Le mercredi 22 novembre 2006 10:01, Eric Oberlander a =E9crit=A0:
> I've noticed that some of the News pages on www.ipcop.org are being
> spammed by some automated system, vis:
> http://www.ipcop.org/modules.php?op=3Dmodload&name=3DNews&file=3Dar=
ticle&sid=3D29&m
>ode=3Dthread&order=3D0&thold=3D0
>
> There are 15 useless comments on that page, and more on some of the
> earlier stories, such as 'IPCop 1.4.5 released.
>
> Who do we contact to alert them to the problem, and to get them rem=
oved?
>
> Eric
>
> -------------------------------------------------------------------=
------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to s=
hare
> your opinions on IT & business topics through brief surveys - and e=
arn cash
> http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&=
CID=3DDEVDEV
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel


phpnuke=3D beurk;

The site will be submerged with spams if we don't immediately remove
all newly created accounts.

A human create accounts; few weeks latters, robots come to actions.
With more and more stupidities.
Next step is accept manually new accounts. No other way.

I have no rigth to do manage;

Franck

I've noticed that some of the News pages on www.ipcop.org are being
spammed by some automated system, vis:
http://www.ipcop.org/modules.php?op=modload&name=News&file=article&sid=29&mode=thread&order=0&thold=0

There are 15 useless comments on that page, and more on some of the
earlier stories, such as 'IPCop 1.4.5 released.

Who do we contact to alert them to the problem, and to get them removed?

Eric

Feature Requests item #1599811, was opened at 2006-11-20 11:17
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599811&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Jack Doyle (jfrayzier)
Assigned to: Nobody/Anonymous (nobody)
Summary: Traffic shaping by IP

Initial Comment:
I would like to have the ability to shape traffic by IP address rather than just port.  i.e. I have a Packet8 (VOIP) box on my network.  It uses port 80, so I can't shape by port and distinguish from web traffic.  If I could shape by IP that would be awesome.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599811&group_id=40604

Feature Requests item #1599257, was opened at 2006-11-19 17:20
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599257&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Olaf Westrik (owes)
Assigned to: Nobody/Anonymous (nobody)
Summary: Update iptstate

Initial Comment:
Please update iptstate from 1.4 to actual version 2.1 

Info http://www.phildev.net/iptstate/

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599257&group_id=40604

Hi, all,

How many of you have seen the Extra Interfaces addon at =20
www.ban-solms.de (http://www.ban-solms.de/t/IPCop-xtiface.html)

It allows declaring two additional interfaces (which are imaginatively =20
called gray1 and gray2), upping IPCop to a max of 6 interfaces.

The addon allows grays 1 & 2 to give out DHCP addresses, allows some =20
modification of firewall rules, etc.

I haven't delved completely into it or the files that it modifies, but =20
what are our thoughts on bringing it into the main game? That way we =20
can log activity,  stats and the dreaded graphs (not done now), =20
provide better security (no snort options on the new interfaces), and =20
allow better routing.

The extra subnets are attractive to me.

Or maybe we need to liaise better with the addons developers to ensure =20
that some things are included, such as the snort options. In this =20
case, we could suggest what additions need to be made, and where they =20
need to be made.

Personally, I like the addon as presented as a good starting point, =20
and would like to see it incorporated in some way so that we can cover =20
the security and logging aspects. I would like an extra wired and =20
wireless interface at my site- one for my staff, and one for my =20
visitors, but with the same options as for blue at the moment but with =20
different levels...)

I'm happy to take over any liaising/approaches to the addon developer.

Any thoughts?

Cheers,

David.

Feature Requests item #1599190, was opened at 2006-11-19 13:59
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599190&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Olaf Westrik (owes)
Assigned to: Nobody/Anonymous (nobody)
Summary: Use uptodate terminfo database

Initial Comment:
Please include actual terminfo database from http://catb.org/esr/terminfo/

This makes using ncurses based tools on console and in PuTTy sessions much more colorfull by default.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599190&group_id=40604

Feature Requests item #1599188, was opened at 2006-11-19 13:53
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599188&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: Next release
Status: Open
Priority: 5
Private: No
Submitted By: Olaf Westrik (owes)
Assigned to: Nobody/Anonymous (nobody)
Summary: Update ncurses

Initial Comment:
Please update ncurses to the actual version (v5.5).

As you can see here (http://www.gnu.org/software/ncurses/ncurses.html) the list of changes and modifications is loooong.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1599188&group_id=40604

Hi Guys,

Don't know if this site could help with language translations, but I think 
it could.
  http://www.translingo.org

It's primary goal is:
 "Create a website that makes translations for other websites and 
applications a walk in the park!"

Kind Regards

AndrewM

Andrew McGlashan
Broadband Solutions now including VoIP 1300 85 3804

Mobile: 04 2574 1827 Fax: 03 8790 1224

Affinity Vision Australia Pty Ltd
www.affinityvision.com.au
www.affinityvision.net/adsl/

In Case of Emergency --  http://www.affinityvision.com.au/ice.html 

=20
Is=20there=20a=20plan=20to=20configure=20IPCop=20or=20modify=20it=20with=20=
'balance'=20or
similar=20tools=20to=20enable=20it=20to=20load=20balance=20or=20forward=20=
incoming=20traffic
to=20different=20servers=20on=20ORANGE=20based=20on=20the=20load=20on=20th=
e=20servers?

For=20example=20I=20want=20to=20have=202=20webservers=20behind=20IPCOP=20a=
nd=20inbound=20port=2080
traffic=20to=20be=20intelligently=20forwarded=20to=20the=20servers=20depen=
ding=20on=20if=20the
servers=20are=20available=20or=20busy.

An=20existing=20linux=20tool=20to=20do=20this=20is=20Ultra=20Monkey
http://www.ultramonkey.org/,=20but=20it=20would=20be=20nice=20to=20do=20it=
=20from=20an=20IPCop
box.

This=20would=20be=20a=20good=20feature=20to=20add.=20=20Is=20there=20curre=
ntly=20any=20development
in=20this=20area?
=20=20=20=20=20=20=20=20=20=20=20=20=20
Thanks,=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20

Dale=20

______________________________________________________________________
This=20email=20has=20been=20scanned=20by=20the=20MessageLabs=20Email=20Sec=
urity=20System.
For=20more=20information=20visit=20http://www.virtual-email.net/messagelab=
s.htm

Bugs item #1595722, was opened at 2006-11-13 17:31
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1595722&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Installation
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Marino (ilnebbioso)
Assigned to: Nobody/Anonymous (nobody)
Summary: Reboots after accepting SSL certificate to login WebAdmin

Initial Comment:
I'm using a quite old pc with an unknown mainboard 
(there's no mobo name on it  :shock:  and Post 
doesn't give any useful information) with a PIII 
800Mhz EB. This box has also got integrated: VGA, 
Ethernet, USB and so on.

Unfortunally I'm not able to disable Ethernet from 
BIOS (that's another strange thing: there's no option 
related!), but the IpCop installer seems it doesn't 
find it.

So, I installed two identical Ethernet adapter into 
two of three PCI slots, who IpCop installer recognize 
fine.

The install gone fine (I tryed it three times), and 
I'm able to login on console without any problem. I 
can also ping from green the box.

Once I try to connect by browser (IE, Firefox or 
Netscape on Windows) at https://192.168.1.254:445/ or 
http://192.168.1.254:81/, the browser asks me for the 
Certificate.

When I accept it, nothing happens. Having a 
continuous ping (ping -t 192.168.1.254) and looking 
at console monitor once I accept the certificate from 
the browser, IpCop simply reboots.

Following the screen dump:

divide error: 0000
CPU: 0
EIP: 0010:[<c0106c27>]
EFLAGS: 00000246
eax: 00000000 ebx: c0106c04 ecx: 00000032 edx: 
00000019
esi: c028a000 edi: c028a000 ebp: ffffe000 esp: 
c028bfe0
ds: 0018 es: 0018 ss:0018
Process swapper (pid: 0, stackpage = c028b0000)
Stack: c0106c92 (00000002 00099800 c0105000 0008e000 
c028c6771 c02a4880 c0......)
Call trace: [<c0106c92>] [<c0105000>]

Code: c3 fb 8d 76 00 c3 8d 76 00 fb b8 ff ff ff ff ba 
00 e0 ff ff 
<0>Kernel panic: Attempted to kill the idle task!
In idle task - not syncing
<0>Rebooting in 10 seconds....

Please consider I'm a newbie with Linux trying to 
help me: I didn't change nothing regarding 
configuration but from the installer. 

What can I do?

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1595722&group_id=40604

Bugs item #1594463, was opened at 2006-11-10 14:56
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1594463&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: User Interface
Group: 1.4.11
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: mtinman (mtinman)
Assigned to: Nobody/Anonymous (nobody)
Summary: Graphs not working

Initial Comment:
The graphs in my installation of IPCop are not working
after I reset the time on the IPCop interface. I tried
the commands that were listed in the admin manual
(fcrontab -z, and makegraphs), but it still doesn't
work.  When I tried the makegraphs command as root, I
got some error messages regarding an Error in RRD:
Illegal attempt to update time values for CPU, Disk,
Green, and Red when last time is more than 1 second
different from the original time settings. What do I do? 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1594463&group_id=40604

Feature Requests item #1594428, was opened at 2006-11-10 15:18
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1594428&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Interface Improvements (example)
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Mike Eggleston (edwyr)
Assigned to: Nobody/Anonymous (nobody)
Summary: Sort traffic shapping rules

Initial Comment:
Currently the traffic shapping rules are displayed in
the order of entry of those rules. Please add either as
a default or as a configuration setting some way so
those can stay sorted from High->Low.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1594428&group_id=40604

Please add an 'All' or 'Raw' to the options in the Section drop down.
This selection should return all sections orderd by time (or reverse
time) and 'Raw' should return the raw logs.

Mike

I like the DMZ Pinhole screen for what it does. I would like the
ability of this screen expanded such that it shows all zones and
allows the creation of routing or blocking rules. Rather than
adding custom rules to /etc/rc.d/rc.firewall.local I would like to
create those rules directly on this screen.

Mike

Feature Requests item #1591837, was opened at 2006-11-07 08:21
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1591837&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: phulstaert (phulstaert)
Assigned to: Nobody/Anonymous (nobody)
Summary: Total Reset

Initial Comment:
Ipcop is great, but it is even better with it's
add-ons. Unfortunately sometimes those add-ons create
errors, or a better version comes along, and we want to
uninstall the add-on. Sometimes this goes terribly
wrong and you are stuck with an interface still with
half of the add-ons options.
It would be great if there was an option or command
that enabled us to reset all information and replace
all altered files. (maybe an option to retain certain
data like everything needed for VPN so we can do this
remotely)
This way we can create a clean system from a remote
location and correct otherwise uncorrectable errors.
The downside is we will have to reinstall and
reconfigure all installed add-ons. But on the other
hand, this was kind of the point.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1591837&group_id=40604

Hi all,

I am wondering if anyone has experience at adding the bridge function to 
the IPCOP. Currently I am using IPCOP 1.4.11 and want to upgrade the 
kernel to 2.6 and the bridge function.

However, I have problems modifying the ./lfs/linux makfile to make the 
compilation work.

Can anyone give me some advice on this?

Thanks a lot.

Jiang

Hi all,

I am wondering if anyone has experience at adding the bridge function to 
the IPCOP. Currently I am using IPCOP 1.4.11 and want to upgrade the 
kernel to 2.6 and the bridge function.

However, I have problems modifying the ./lfs/linux makfile to make the 
compilation work.

Can anyone give me some advice on this?

Thanks a lot.

Jiang

we have just got this new server with an Intel PRO 1000PT Cu, Dual Port PCI nic;
ipcop could not recognize it automaticlly; on using the manual select we keep
getting the message "unable to load module", teh same is true when using
modprobe.

so my question is do anybody know that there is a problem with the e1000 PT dual
port on IPCop? and if so what would be the solution for that.

thanks;

On 11/2/06, Mike <mi...@mi...> wrote:

> There is a backup-to-floppy that stores the current configurat
> (does it get copfilter or other add-on settings?). Should there
> also be a load-from-floppy?
>
> Mike

It's on Gilles Espinasse To Do List. It was mentioned in the recent
discussions regarding the modifications to backup for v1.4.11.

Eric