ipcop-devel Mailing List for IPCop Firewall

Just a reminder to anyone wishing to post to this list that it is a 
subscriber-only list and is set to auto-discard all posts from anyone not 
subscribed to the list. 

Here is one that was auto-discarded....
<quote>
Re: SquidGuard patch for IPCop 1.9.19 revision 5535
From: otonk <oto...@gm...>
  To: ipc...@li...
  Date: Today 19:41:45
   
please how the step by step to patch, becouse i am so confuse, coz i am 
really need this patch for my ipcop 1.9.19.... thank's
best regard.. otonk..
</quote>

Cheers
Glen

Please can someone who is familiar with setaliases check my proposed fix
for this problem?  Basically ioctl (called by openswan) and other
utilities (e.g. ifconfig) barf when asked to look at interfaces with
.alias labels.  The proposed fix is to change seetaliases to create :1
labels instead of .alias labels for aliased interfaces.  Ioctl is happy
with :1, ifconfig is happy and I am happy as well.

Is there any reason to use .alias instead?

Regards,
Dave

-----Original Message-----
From: SourceForge.net [mailto:no...@so...] 
Sent: 22 June 2011 17:46
To: no...@so...
Subject: [IPCop-devel] [ ipcop-Bugs-3324598 ] v1.9.19 : IPSEC fails
withaliases

Bugs item #3324598, was opened at 2011-06-22 16:46 Message generated for
change (Tracker Item Submitted) made by countzerouk You can respond by
visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3324598&gro
up_id=40604

Bugs item #3324598, was opened at 2011-06-22 16:46
Message generated for change (Tracker Item Submitted) made by countzerouk
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3324598&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: VPN
Group: V2 beta
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Dave Roberts (countzerouk)
Assigned to: Nobody/Anonymous (nobody)
Summary: v1.9.19 : IPSEC fails with aliases

Initial Comment:
It would appear that Openswan fails to start if aliases are used on the wan-1 interface.  relevant part of messages:

Jun 22 17:39:30 mailgate pluto[16195]: added connection description "ipsecvpn"
Jun 22 17:39:30 mailgate pluto[16195]: | 10.0.0.0/24===xx.xx.xx.xx<xx.xx.xx.xx>[+S=C]...yy.yy.yy.yy<yy.yy.yy.yy>[+S=C]===10.0.1.0/24
Jun 22 17:39:30 mailgate pluto[16195]: | ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: PSK+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW+SAREFTRACK
Jun 22 17:39:30 mailgate ipsec__plutorun: 002 added connection description "ipsecvpn"
Jun 22 17:39:30 mailgate pluto[16195]: | * processed 0 messages from cryptographic helpers
Jun 22 17:39:30 mailgate pluto[16195]: | next event EVENT_PENDING_DDNS in 60 seconds
Jun 22 17:39:30 mailgate pluto[16195]: | next event EVENT_PENDING_DDNS in 60 seconds
Jun 22 17:39:30 mailgate pluto[16195]: |
Jun 22 17:39:30 mailgate pluto[16195]: | *received whack message
Jun 22 17:39:30 mailgate pluto[16195]: listening for IKE messages
Jun 22 17:39:30 mailgate pluto[16195]: | found lo with address 127.0.0.1
Jun 22 17:39:30 mailgate pluto[16195]: | found wan-1 with address xx.xx.xx.xx
Jun 22 17:39:30 mailgate pluto[16195]: FATAL ERROR: ioctl(SIOCGIFFLAGS) for wan-1.alias in find_raw_ifaces4(). Errno 19: No such device
Jun 22 17:39:30 mailgate pluto[16195]: | processing connection ipsecvpn
Jun 22 17:39:30 mailgate pluto[16195]: "ipsecvpn": deleting connection
Jun 22 17:39:30 mailgate pluto[16195]: | alg_info_delref(0xb8c23d18) alg_info->ref_cnt=1
Jun 22 17:39:30 mailgate pluto[16195]: | alg_info_delref(0xb8c23d18) freeing alg_info
Jun 22 17:39:30 mailgate pluto[16195]: | alg_info_delref(0xb8c234b0) alg_info->ref_cnt=1
Jun 22 17:39:30 mailgate pluto[16195]: | alg_info_delref(0xb8c234b0) freeing alg_info
Jun 22 17:39:30 mailgate pluto[16197]: pluto_crypto_helper: helper (0) is  normal exiting
Jun 22 17:39:30 mailgate ipsec__plutorun: 003 FATAL ERROR: ioctl(SIOCGIFFLAGS) for wan-1.alias in find_raw_ifaces4(). Errno 19: No such device

I found a reference to this at http://lists.openswan.org/pipermail/users/2010-April/018646.html from a user Olaf, Is that Herr Westrik?  Is there a fix available?

Regards,
Dave

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3324598&group_id=40604

Bugs item #3317759, was opened at 2011-06-17 10:14
Message generated for change (Tracker Item Submitted) made by joximu
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3317759&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Installation
Group: V2 beta
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Christian Hernmarck (joximu)
Assigned to: Nobody/Anonymous (nobody)
Summary: again: local domain

Initial Comment:
See
DNS Proxy not forwarding requests inside firewall domain - ID: 3022467
and
dsnmasq disclose local domain name - ID: 2806823

we also stumbled over this - maybe it would be good to write in the setup step "domain name selection"
 http://www.ipcop.org/2.0.0/en/install/html/setup-install-domainname.html 
that this domain is special (not resolved by ipcop-dns etc)...
Or better add an option in the GUI to let the customer decide if he wants to let this resolve or not....

e.g. we have the DNS just next to the ipcop - but outside...

Thanx


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=3317759&group_id=40604

On 2011-06-08 08:59, G.W. Haywood wrote:

> On Tue, 7 Jun 2011 Olaf Westrik wrote:
>
>> On 2011-05-10 00:35, Sebastian Henrich wrote:
>>
>>> I try to figure out how to disable NAT, configure
>>> some routing rules between two networks and block some access from
>>> one network to the other with firewall rules. Is this possible using
>>> the current state of development or is it planned for the future?
>>
>> Not possible and also not planned.
>
> I've been doing this with IPCop 1.4.x for at least eight years.
> Why is it not possible in 1.99/2.x?


Sure you can do iptables -F.
But this is a) not supported b) not planned for the future c) may give 
unexpected results.
It basically boils down to: tinker with the rulesset and you're on your own.


Olaf

Hi there,

On Tue, 7 Jun 2011 Olaf Westrik wrote:

> On 2011-05-10 00:35, Sebastian Henrich wrote:
>
> > I try to figure out how to disable NAT, configure
> > some routing rules between two networks and block some access from
> > one network to the other with firewall rules. Is this possible using
> > the current state of development or is it planned for the future?
>
> Not possible and also not planned.

I've been doing this with IPCop 1.4.x for at least eight years.
Why is it not possible in 1.99/2.x?

--

73,
Ged.

Hi,

I need to try to compile the drivers for the Intel 82579v network card
as found at
http://sourceforge.net/projects/e1000/files/e1000e%20stable/1.3.17/e1000
e-1.3.17.tar.gz/download for use on a 1.4.21 IPCop.  Can someone please
help with pointers as to how to go about achieving  this?  Can I compile
for 2.4 kernel on a 2.6 machine?  

Alternatively is there anyone out there with the ability willing to
compile the driver for me and send me the e1000e.o or whichever files
are required to work on 1.4.21?

Many thanks in advance,

Dave

Hi, guys,
             i am trapped in situation, i was trying to write and usb-hdd
image of ipcop on USB Drive, while doing so, i have given following commands

1. mkfs.vfat /dev/sda1
2. e2label usb-pen
3. zcat filename > /dev/sda1

* now the stupid thing i have done, is given /sda1( My HDD ) instead of
/sdb1 (USB Drive), it has successfully loaded IPCOP bootable on my primary
drive, and my laptop is not working now.

Laptop Partation Info:
/dev/sda1 - NTFS (Windows 7 Prof)
/dev/sda2 - NTFS
/dev/sda3 - EXT4 (Ubuntu 9.10)
* i had dual booted Windows 7 with Ubuntu.

Current Partation Info:
/dev/sda1 - vfat (IPCOPBOOT)
And all other is free space - 320gb

** now i want to get my partitions & data back, if anybody have idea about
how to get rid of this situation please share.
** The good thing i have done, is that, i didn't tried to install anything
on the drive after this happened, with hopes that i can get my data back
*** So i guess that it can be recovered but confusion is that, which data
recovery software to use, and for linux or windows, as i had my data on NTFS
filesystem and currently there is Free Space and EXT4 partition.