IPCop Firewall

On Wed, Jul 28, 2004 at 06:15:11PM +0200, Christian Cier-Zniewski wrote:
> Hi all,
> 
> after moving my IPcop from 1.3.0 to 1.4.0b6 I have realzied that I 
> cannot boot my IPcop without a graphic adapter, which is bad, because I 
> cannot close my case anymore.
> 
> It seems that GRUB does not boot the kernel.
> 
> Any idea why? Are there any special settings for GRUB without VGA card?

GRUB should recognize it's not on a VGA screen, and boot up in text mode,
wait 5 seconds and boot the kernel.

Are you saying your PC crashes or locks up or does something else ??

Alan.

Alan Hourihane wrote:
>>It seems that GRUB does not boot the kernel.
>>
>>Any idea why? Are there any special settings for GRUB without VGA card?
> 
> 
> GRUB should recognize it's not on a VGA screen, and boot up in text mode,
> wait 5 seconds and boot the kernel.
> 
> Are you saying your PC crashes or locks up or does something else ??

I can not really tell if the PC crashes at this point. The kernel is not 
started as far I have seen.

Does GRUB support a serial console as LILO does? I could have a look on 
the console then.

Christian Cier-Zniewski wrote:

> Alan Hourihane wrote:
>
>>> It seems that GRUB does not boot the kernel.
>>>
>>> Any idea why? Are there any special settings for GRUB without VGA card?
>>
>>
>>
>> GRUB should recognize it's not on a VGA screen, and boot up in text 
>> mode,
>> wait 5 seconds and boot the kernel.
>>
>> Are you saying your PC crashes or locks up or does something else ??
>
>
> I can not really tell if the PC crashes at this point. The kernel is 
> not started as far I have seen.
>
> Does GRUB support a serial console as LILO does? I could have a look 
> on the console then.
>
yes

optional give "console=ttyS0" as boot parameter

joerg

On Thu, Jul 29, 2004 at 06:34:29PM +0200, Christian Cier-Zniewski wrote:
> Alan Hourihane wrote:
> >>It seems that GRUB does not boot the kernel.
> >>
> >>Any idea why? Are there any special settings for GRUB without VGA card?
> >
> >
> >GRUB should recognize it's not on a VGA screen, and boot up in text mode,
> >wait 5 seconds and boot the kernel.
> >
> >Are you saying your PC crashes or locks up or does something else ??
> 
> I can not really tell if the PC crashes at this point. The kernel is not 
> started as far I have seen.
> 
> Does GRUB support a serial console as LILO does? I could have a look on 
> the console then.

Joerg's answered this, but you can also try removing the 'splashimage'
line from the grub.conf file, to see if that helps you.

Alan.

..root@...:~ # cat /boot/grub/grub.conf
serial --unit=0 --speed=9600 --word=8 --parity=no --stop=1
terminal --timeout=10 console serial
timeout 5
default 2
fallback 0
foreground = 16064e
background = ffffff
splashimage (hd0,0)/grub/ipcop.xpm.gz
title IPCop
  root (hd0,0)
  kernel /vmlinuz root=ROOT panic=10 ro
title IPCop SMP
  root (hd0,0)
  kernel /vmlinuz-smp root=ROOT panic=10 ro
title IPCop-with-serial
  root (hd0,0)
  kernel /vmlinuz root=ROOT panic=10 ro console=tty0 \
console=ttyS0,9600n8 title IPCop SMP-with-serial
  root (hd0,0)
  kernel /vmlinuz-smp root=ROOT panic=10 ro console=tty0 \
console=ttyS0,9600n8 
root@...:~ #
root@...:~ # cat /etc/securetty
tty1
tty2
tty3
tty4
tty5
tty6
ttyp0
ttyp1
ttyp2
ttyp3
ttyp4
ttyp5
ttyp6
ttyp7
ttyp8
ttyp9
ttypa
ttypb
ttypc
ttypd
ttype
ttypf

# This line is from Serial-Console Addons, for serial console users
ttyS0


root@...:~ # cat /etc/inittab
#
# $Id: inittab,v 1.6 2003/12/24 19:51:23 riddles Exp $
#
id:3:initdefault:

l0:0:wait:/etc/rc.d/rc.halt halt
l6:6:wait:/etc/rc.d/rc.halt reboot

si::sysinit:/etc/rc.d/rc.sysinit

# Trap CTRL-ALT-DELETE
ca::ctrlaltdel:/sbin/shutdown -r now

# Run gettys in standard runlevels
1:2345:respawn:/sbin/mingetty tty1
2:2345:respawn:/sbin/mingetty tty2
3:2345:respawn:/sbin/mingetty tty3
4:2345:respawn:/sbin/mingetty tty4
5:2345:respawn:/sbin/mingetty tty5
6:2345:respawn:/sbin/mingetty tty6

# This line is from Serial-Console Addon, gives a login for Serial 0
co:2345:respawn:/sbin/agetty -h -t 60 ttyS0 9600 vt102

root@...:~ #

..and, you need /sbin/agetty or another serial console capable getty:
arnt@... $ apt-cache search getty |grep getty
gettyps - Replacement for getty.
fbgetty - A console getty with and without frame buffer capability
fgetty - very small, efficient, console-only getty and login
mingetty - Console-only getty
rungetty - minimal console getty that can run any process
webmin-vgetty - vgetty control module for webmin
mgetty - Smart Modem getty replacement
mgetty-docs - Documentation Package for mgetty
mgetty-fax - Faxing tools for mgetty
mgetty-pvftools - Programs for listening and manipulating pvf and rmd
files mgetty-viewfax - Program for displaying Group-3 Fax files under X
mgetty-voice - Voicemail handler for mgetty
arnt@... $

..for details; apt-cache show `apt-cache search getty |grep getty` |less

-- 
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
  Scenarios always come in sets of three: 
  best case, worst case, and just in case.

On Wed, Jul 28, 2004 at 06:06:09PM +0200, Gilles Espinasse wrote:
> 
> ----- Original Message -----
> From: "Alan Hourihane" <alanh@...>
> To: <ipcop-devel@...>
> Sent: Wednesday, July 28, 2004 4:51 PM
> Subject: Re: [IPCop-devel] GRUB in CVS
> 
> 
> >
> > I've just committed some more changes that should solve the problems.
> >
> > I'm rebuilding now to double check, but my build system takes about 5
> hours
> > to build from scratch, so someone may beat me to it.
> >
> I have done a partial rebuild. Now the installed v1.4.0b7 start

Good.

> Still install from floppy does not work. It's hang after RAMDISK.
 
Didn't you say it worked in your last email yesterday. It certainly
works fine here.

So, I think this may be a problemw with your partial rebuild.

Have you checked the ipcop.log file for problems making the boot floppy ?

> Nota
> If you want to strip kernel.config.installer more, you may remove too
> speedtouch usb, atm and ppp options

Modules don't need to be turned off, just anything with =y against it
in .config but be sure not to turn off something needed by kernel for
ethernet, pcmcia, usb etc for the installation process.

Alan.

On Wed, Jul 28, 2004 at 05:35:26PM +0100, Alan Hourihane wrote:
> On Wed, Jul 28, 2004 at 06:06:09PM +0200, Gilles Espinasse wrote:
> > 
> > ----- Original Message -----
> > From: "Alan Hourihane" <alanh@...>
> > To: <ipcop-devel@...>
> > Sent: Wednesday, July 28, 2004 4:51 PM
> > Subject: Re: [IPCop-devel] GRUB in CVS
> > 
> > 
> > >
> > > I've just committed some more changes that should solve the problems.
> > >
> > > I'm rebuilding now to double check, but my build system takes about 5
> > hours
> > > to build from scratch, so someone may beat me to it.
> > >
> > I have done a partial rebuild. Now the installed v1.4.0b7 start
> 
> Good.
> 
> > Still install from floppy does not work. It's hang after RAMDISK.
>  
> Didn't you say it worked in your last email yesterday. It certainly
> works fine here.
> 
> So, I think this may be a problemw with your partial rebuild.
> 
> Have you checked the ipcop.log file for problems making the boot floppy ?

O.k. I've just checked the syslinux archives and found that some others
are having problems with syslinux 2.10. I'll drop it back to 2.09 for now.

Alan.

----- Original Message -----
From: "Alan Hourihane" <alanh@...>
To: "Gilles Espinasse" <g.esp@...>
Cc: "IPCOP devel" <ipcop-devel@...>
Sent: Wednesday, July 28, 2004 6:46 PM
Subject: Re: [IPCop-devel] GRUB in CVS


> On Wed, Jul 28, 2004 at 05:35:26PM +0100, Alan Hourihane wrote:
> > On Wed, Jul 28, 2004 at 06:06:09PM +0200, Gilles Espinasse wrote:
> > >
> > > ----- Original Message -----
> > > From: "Alan Hourihane" <alanh@...>
> > > To: <ipcop-devel@...>
> > > Sent: Wednesday, July 28, 2004 4:51 PM
> > > Subject: Re: [IPCop-devel] GRUB in CVS
> > >
> > >
> > > >
> > > > I've just committed some more changes that should solve the
problems.
> > > >
> > > > I'm rebuilding now to double check, but my build system takes about
5
> > > hours
> > > > to build from scratch, so someone may beat me to it.
> > > >
> > > I have done a partial rebuild. Now the installed v1.4.0b7 start
> >
> > Good.
> >
> > > Still install from floppy does not work. It's hang after RAMDISK.
> >
> > Didn't you say it worked in your last email yesterday. It certainly
> > works fine here.
> >
> > So, I think this may be a problemw with your partial rebuild.
> >
> > Have you checked the ipcop.log file for problems making the boot floppy
?
>
> O.k. I've just checked the syslinux archives and found that some others
> are having problems with syslinux 2.10. I'll drop it back to 2.09 for now.
>
Booting from floppy had work a short time during last cvs changes
It had  work after
'Syslinux 2.10 exposed a problem in our syslinux.cfg for the boot floppy
in the default kernel image. We should be using APPEND. This fixes it.'
and not working after.

this is what I have reported there
http://marc.theaimsgroup.com/?l=ipcop-devel&m=109093556206954&w=2

I suppose busybox or make_dev changes cause the trouble.

on 28/7/04 3:51 pm, Alan Hourihane at alanh@... wrote:

> 
> I've just committed some more changes that should solve the problems.
> 
> I'm rebuilding now to double check, but my build system takes about 5 hours
> to build from scratch, so someone may beat me to it.
> 
> Alan.

My clean build just completed, and I installed from CD, restoring settings
from floppy, and she rebooted OK :)

I tried a clean install, skipping the restore, and she failed to autofind
the network driver, and wouldn't load it manually :(

I notice some changes have already been made to CVS, so I'll do a clean
build overnight and test again in the morning.

Cheers.

Eric

On Wed, Jul 28, 2004 at 10:26:07PM +0100, Eric Oberlander wrote:
> on 28/7/04 3:51 pm, Alan Hourihane at alanh@... wrote:
> 
> > 
> > I've just committed some more changes that should solve the problems.
> > 
> > I'm rebuilding now to double check, but my build system takes about 5 hours
> > to build from scratch, so someone may beat me to it.
> > 
> > Alan.
> 
> My clean build just completed, and I installed from CD, restoring settings
> from floppy, and she rebooted OK :)
> 
> I tried a clean install, skipping the restore, and she failed to autofind
> the network driver, and wouldn't load it manually :(
 
Yes, unfortunately I noticed the same thing.

> I notice some changes have already been made to CVS, so I'll do a clean
> build overnight and test again in the morning.

Right.

I'm hoping to cut 1.4.0b7 on Friday. Hopefully things will have settled
by that time.

Alan.

<snip>
> > I tried a clean install, skipping the restore, and she failed to
autofind
> > the network driver, and wouldn't load it manually :(
 >
> Yes, unfortunately I noticed the same thing.
>
> > I notice some changes have already been made to CVS, so I'll do a clean
> > build overnight and test again in the morning.
>
> Right.
>
> I'm hoping to cut 1.4.0b7 on Friday. Hopefully things will have settled
> by that time.
>
> Alan.

I did an successful install from floppy with backup with a rebuild updated
after 'Upgrade dhcp (bugfix with subclasses), fix upgrade with PPPoE like
with alcatelusb'

I will not be able to test once more v1.3 speedtouch driver because of no
adsl during the forthcoming 10 days .
One of the new feature from this version is that modem_run keep track if the
firmware was already dowloaded and skip this step if it is true.
This should allow not to reset usb after EMI related messages from usb where
modem_run was killed by the modem address change but the firmware was still
under the modem.
There is one important drawback to this new feature. If usb is reset, the
firmware will no more be loaded and every attempt to connect will fail. I
doubt this version will be compatible with the way we reset usb so we may
stay in v1.2.
If usb reset is a ugly hack, it is too the best way I know to recover to
some unidentified trouble with the connection. Sometime nothing appear to be
received and usb reset is the only know way to recover.
It is far not certain the problem is at usb level (see
http://forums.ixus.net/viewtopic.php?p=138272#138272 in french, Frank78
trial with tcpdump and an ethernet modem).
I don't know much.

PS
there is a warning in index.cgi when disk is more than 90% full
with a 425Mb disk, /dev/root is at 96% full with 9MB free. Should we put
more space during partitionning or accept /dev/root with less free space?
/dev/root          /                204M   184M  9.3M 96%
/dev/harddisk1 /boot          8.6M    3.8M  4.5M 46%
/dev/harddisk2 /var/log     183M     8.8M 164M   6%

on 28/7/04 10:28 pm, Alan Hourihane at alanh@... wrote:

> On Wed, Jul 28, 2004 at 10:26:07PM +0100, Eric Oberlander wrote:
>> on 28/7/04 3:51 pm, Alan Hourihane at alanh@... wrote:
>> 
>>> 
>>> I've just committed some more changes that should solve the problems.
>>> 
>>> I'm rebuilding now to double check, but my build system takes about 5 hours
>>> to build from scratch, so someone may beat me to it.
>>> 
>>> Alan.
>> 
>> My clean build just completed, and I installed from CD, restoring settings
>> from floppy, and she rebooted OK :)
>> 
>> I tried a clean install, skipping the restore, and she failed to autofind
>> the network driver, and wouldn't load it manually :(
> 
> Yes, unfortunately I noticed the same thing.
> 
>> I notice some changes have already been made to CVS, so I'll do a clean
>> build overnight and test again in the morning.
> 
> Right.
> 
> I'm hoping to cut 1.4.0b7 on Friday. Hopefully things will have settled
> by that time.
> 
> Alan.

Clean install works OK now :)

Eric

On Thu, Jul 29, 2004 at 07:20:07AM +0200, Gilles Espinasse wrote:
> there is a warning in index.cgi when disk is more than 90% full
> with a 425Mb disk, /dev/root is at 96% full with 9MB free. Should we put
> more space during partitionning or accept /dev/root with less free space?
> /dev/root          /                204M   184M  9.3M 96%
> /dev/harddisk1 /boot          8.6M    3.8M  4.5M 46%
> /dev/harddisk2 /var/log     183M     8.8M 164M   6%

How much RAM do you have ?

What is the size of your swapfile ?

Alan.

----- Original Message -----
From: "Roger Murer" <r.murer@...>
To: <ipcop-devel@...>
Sent: Wednesday, July 28, 2004 5:53 PM
Subject: Re: [IPCop-devel] CVS BUILT


> Tony Hynes wrote:
> >
> > Hi All,  so if someone wanted to build an ISO image from the CVS files,
> > just exactly would I err I mean they need to do ?
> >
> > Can I use my Gentoo system to create the ISO, or do I need a base image
> > to be included in the ISO....
>
> Hi
>
> Try:
> http://www.ipcop.org/cgi-bin/twiki/view/IPCop/IPCopBuildingv01
>
> There are some usefull hints about building v 1.4.
>
> Debian fails to build apache at the moment, but a SuSE for instance
> builds fine (Debian did too until a while ago).
>
I think that if you update your kernel to 2.4.26, it work.
that's was stated when the bug report was closed.

Gilles

Anyone able to compile the GCC lfs module on Debian (woody)?

It keeps segfaulting on my machine (a stock woody install) not in the same
place each time.  I tried compiling with gcc 3.0 instead of 2.95, but no
help,


----- Original Message ----- 
From: "Roger Murer" <r.murer@...>
To: <ipcop-devel@...>
Sent: Wednesday, July 28, 2004 8:53 AM
Subject: Re: [IPCop-devel] CVS BUILT


> Tony Hynes wrote:
> >
> > Hi All,  so if someone wanted to build an ISO image from the CVS files,
> > just exactly would I err I mean they need to do ?
> >
> > Can I use my Gentoo system to create the ISO, or do I need a base image
> > to be included in the ISO....
>
> Hi
>
> Try:
> http://www.ipcop.org/cgi-bin/twiki/view/IPCop/IPCopBuildingv01
>
> There are some usefull hints about building v 1.4.
>
> Debian fails to build apache at the moment, but a SuSE for instance
> builds fine (Debian did too until a while ago).
>
> Basicly you net to get hold the cvs tree (you can download a snapshot
> from http://www.ipcop.org).
>
> In the ipcop directory a "./make.sh prefetch" will download all needed
> packages (hopfully, you may have to google for some and save tem to
> ipcop/cache).
> A "./make.sh build" starts the build process, which will (also hopfully)
> result in ipcop-*.iso.
> You can use "./make.sh clean" to clean stuff from the old build.
>
> Hope this helps
>
> Roger
>
> -- 
> Roger Murer
> E-Mail: r.murer@...
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> IPCop-devel mailing list
> IPCop-devel@...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel

----- Original Message -----
From: "Matthew Mucklo" <mmucklo@...>
To: <ipcop-devel@...>
Sent: Thursday, July 29, 2004 1:42 AM
Subject: Re: [IPCop-devel] CVS BUILT (gcc failing on woody)


> Anyone able to compile the GCC lfs module on Debian (woody)?
>
> It keeps segfaulting on my machine (a stock woody install) not in the same
> place each time.  I tried compiling with gcc 3.0 instead of 2.95, but no
> help,
>
If it is not in the same place every time, it must be a hardware problem.
Try first to verify memory with memtest86

Gilles

Gilles Espinasse wrote:
[snip]
>>Debian fails to build apache at the moment, but a SuSE for instance
>>builds fine (Debian did too until a while ago).
>>
> 
> I think that if you update your kernel to 2.4.26, it work.
> that's was stated when the bug report was closed.

Hello Gilles

That's it! I upgradet my debian woody kernel from 2.4.18-bf2.4 to a 
2.4.26 kernel, now debian woody builds fine again. Thank you for clue, I 
did not read that discussion on the bug tracker before.

Kind regards

Roger

-- 
Roger Murer
E-Mail: r.murer@...

Patrick M. Wanner wrote:

> I already have my local subnet set to 0.0.0.0/0.0.0.0. Any other 
> thoughts on what could be the problem? Should I have anything special 
> set under 'Local VPN Hostname/IP' on the main VPN page?

I've got the DNS name for the RED interface...


kim.
xxx