Menu
▾
▴
devil-linux-discuss — General Mailing List for all discussions
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(59) |
Sep
(57) |
Oct
(5) |
Nov
(45) |
Dec
(21) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(13) |
Feb
(22) |
Mar
(14) |
Apr
(7) |
May
(33) |
Jun
(57) |
Jul
(25) |
Aug
(40) |
Sep
(53) |
Oct
(58) |
Nov
(75) |
Dec
(22) |
| 2003 |
Jan
(101) |
Feb
(101) |
Mar
(103) |
Apr
(125) |
May
(85) |
Jun
(57) |
Jul
(62) |
Aug
(42) |
Sep
(76) |
Oct
(214) |
Nov
(290) |
Dec
(274) |
| 2004 |
Jan
(187) |
Feb
(172) |
Mar
(313) |
Apr
(209) |
May
(169) |
Jun
(147) |
Jul
(118) |
Aug
(193) |
Sep
(227) |
Oct
(125) |
Nov
(246) |
Dec
(191) |
| 2005 |
Jan
(244) |
Feb
(175) |
Mar
(165) |
Apr
(130) |
May
(217) |
Jun
(122) |
Jul
(188) |
Aug
(235) |
Sep
(165) |
Oct
(133) |
Nov
(209) |
Dec
(88) |
| 2006 |
Jan
(66) |
Feb
(89) |
Mar
(108) |
Apr
(91) |
May
(29) |
Jun
(45) |
Jul
(64) |
Aug
(42) |
Sep
(44) |
Oct
(81) |
Nov
(64) |
Dec
(9) |
| 2007 |
Jan
(24) |
Feb
(122) |
Mar
(55) |
Apr
(50) |
May
(84) |
Jun
(13) |
Jul
(80) |
Aug
(70) |
Sep
(78) |
Oct
(45) |
Nov
(56) |
Dec
(42) |
| 2008 |
Jan
(65) |
Feb
(3) |
Mar
(51) |
Apr
(151) |
May
(54) |
Jun
(72) |
Jul
(73) |
Aug
(47) |
Sep
(55) |
Oct
(123) |
Nov
(16) |
Dec
(4) |
| 2009 |
Jan
(23) |
Feb
(39) |
Mar
(27) |
Apr
(36) |
May
(35) |
Jun
(51) |
Jul
(11) |
Aug
(14) |
Sep
(40) |
Oct
(67) |
Nov
(38) |
Dec
(13) |
| 2010 |
Jan
(15) |
Feb
(35) |
Mar
(40) |
Apr
(11) |
May
(26) |
Jun
(10) |
Jul
(5) |
Aug
(50) |
Sep
(86) |
Oct
(67) |
Nov
(36) |
Dec
(11) |
| 2011 |
Jan
(50) |
Feb
(6) |
Mar
(13) |
Apr
(13) |
May
(29) |
Jun
(27) |
Jul
(26) |
Aug
(27) |
Sep
(21) |
Oct
(7) |
Nov
(27) |
Dec
(4) |
| 2012 |
Jan
(11) |
Feb
(20) |
Mar
(48) |
Apr
(18) |
May
(8) |
Jun
(19) |
Jul
|
Aug
(15) |
Sep
(3) |
Oct
(4) |
Nov
(5) |
Dec
(1) |
| 2013 |
Jan
(13) |
Feb
(7) |
Mar
(4) |
Apr
(25) |
May
(2) |
Jun
(8) |
Jul
(4) |
Aug
(8) |
Sep
(7) |
Oct
|
Nov
(5) |
Dec
(10) |
| 2014 |
Jan
|
Feb
|
Mar
(6) |
Apr
(20) |
May
(5) |
Jun
|
Jul
(2) |
Aug
|
Sep
(8) |
Oct
(21) |
Nov
(4) |
Dec
(7) |
| 2015 |
Jan
(10) |
Feb
(9) |
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
(5) |
Sep
(11) |
Oct
|
Nov
(17) |
Dec
(32) |
| 2016 |
Jan
(10) |
Feb
(15) |
Mar
(4) |
Apr
(7) |
May
(10) |
Jun
(11) |
Jul
(15) |
Aug
(26) |
Sep
(13) |
Oct
(10) |
Nov
(16) |
Dec
(6) |
| 2017 |
Jan
(9) |
Feb
(3) |
Mar
|
Apr
(2) |
May
(2) |
Jun
|
Jul
|
Aug
(3) |
Sep
(3) |
Oct
(6) |
Nov
(8) |
Dec
|
| 2018 |
Jan
(12) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(4) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: John B. <sag...@gm...> - 2007-09-17 21:10:09
|
STILL NOT WORKING
Hi again Bruce,
192.168.1.254 is the address of the DHCP server seen from ipconfig /all on
XP and is the address of eth1 on DL from ifconfig.
Granted, I'd expect something with a 0 as the third number, but thats what
DL gives me. I'd thought it simply resulted from the
initial boot when 192.168.0 was from the router XP <--> DL <--> router <-->
cable modem. However, I rebooted DL with simply
XP <--> DL <--> cable modem and still got 192.168.1.254
In case it is of interest, the lines from XP ipconfig /all
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : mydomain.org
Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated
Cont
roller
Physical Address. . . . . . . . . : 00-14-22-EC-E0-A6
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.1.199
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.254
DNS Servers . . . . . . . . . . . : 192.168.1.1
The lines from DL ifconfig -a:
eth0 ...
inet adder: 69.181.170.104 Bcast 255.255.255.255 Mask
255.255.248.0
...
RX 112.4 kB TX 1.9Kib
eth1 ...
inet addr: 192.168.1.254 Bcast: 192.168.1.255 Mask:
255.255.255.0
...
RX 702 b TX 634 b
Thanks,
Chip
On 9/17/07, Bruce Smith <bw...@ar...> wrote:
>
> > Thanks for the advise.
> > after removing the router,
> > with
> > XP <--> DL <--> cable modem
> >
> > from DL: ping yahoo.com works
> > ping 216.109.112.135 (aka yahoo) works
> >
> > from XP: ping DL (well ping 192.168.1.254) works
> > ping outside addr ( 69.181.170.104) FAILS
> > ping yahoo FAILS
> > ping 216.109.112.135 (aka yahoo) FAILS
>
>
> It looks like the default gateway on XP is set incorrectly.
> (s/b 192.168.1.254) Double check your DL DHCP settings.
> While you're there, double check the DNS servers too.
> Also, from a DOS command line prompt: ipconfig /all
>
> - BS
>
|
|
From: Bruce S. <bw...@ar...> - 2007-09-17 19:16:27
|
> Thanks for the advise. > after removing the router, > with > XP <--> DL <--> cable modem > > from DL: ping yahoo.com works > ping 216.109.112.135 (aka yahoo) works > > from XP: ping DL (well ping 192.168.1.254) works > ping outside addr ( 69.181.170.104) FAILS > ping yahoo FAILS > ping 216.109.112.135 (aka yahoo) FAILS It looks like the default gateway on XP is set incorrectly. (s/b 192.168.1.254) Double check your DL DHCP settings. While you're there, double check the DNS servers too. Also, from a DOS command line prompt: ipconfig /all - BS |
|
From: Fred F. <ffr...@lo...> - 2007-09-17 17:53:55
|
If I remember correctly the firwall script (/etc/init.d/firewall.rules) blocks ICMP (ping). I am rolling my own using fwbuilder since neither of the templates provided directly work for me. Fwbuilder is free for linux, for Windows I think you have to pay. Fred Frigerio Locust USA =20 This electronic message transmission contains information from Locust USA which may be confidential or privileged. The information is intended to be for the use of the individual or entity named above. If you are not the intended recipient, be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic transmission in error, please notify us by telephone (305-889-5410) or by reply via electronic mail immediately. -----Original Message----- From: dev...@li... [mailto:dev...@li...] On Behalf Of John Boden Sent: Monday, September 17, 2007 1:50 PM To: dev...@li... Subject: Re: [Devil-Linux-discuss] no NAT from newbie Hi Bruce, Thanks for the advise. after removing the router, with XP <--> DL <--> cable modem from DL: ping yahoo.com works=20 ping 216.109.112.135 (aka yahoo) works from XP: ping DL (well ping 192.168.1.254) works ping outside addr ( 69.181.170.104) FAILS ping yahoo FAILS ping 216.109.112.135 (aka yahoo) FAILS=20 >> I STILL NEED MORE HELP << Thanks, Chip |
|
From: John B. <sag...@gm...> - 2007-09-17 17:50:21
|
Hi Bruce, Thanks for the advise. after removing the router, with XP <--> DL <--> cable modem from DL: ping yahoo.com works ping 216.109.112.135 (aka yahoo) works from XP: ping DL (well ping 192.168.1.254) works ping outside addr ( 69.181.170.104) FAILS ping yahoo FAILS ping 216.109.112.135 (aka yahoo) FAILS >> I STILL NEED MORE HELP << Thanks, Chip |
|
From: Bruce S. <bw...@ar...> - 2007-09-17 13:52:00
|
> DHCP & ping DL work, but not ping yahoo.com with > XP <--> DL <--> router <--> cable modem How about: XP <--> DL <--> cable modem The DL box IS your router, so you shouldn't need your old router. Adding your old router into the path (as you diagrammed above) complicates your network setup tremendously, and you probably have a routing problem (or subnet problem) buried somewhere in your settings. If you're old router is a wireless router, and you need it for your wireless communications, then turn off it's DHCP server and configure it has a wireless HUB (not a router), and plug ONLY the LAN side into your switch on your internal network (don't use it's WAN port). Also when pinging, you should ping BOTH the name and the IP of the host to rule out a DNS configuration problem. - BS |
|
From: John B. <sag...@gm...> - 2007-09-16 21:59:16
|
Hi Heiko, >did you configure the firewall as the default router on the XP box? I think the answer is that XP intrinsically defaults to the LAN connection.. To be more precise I'll explain: I connect via CAT-5 from the XP machine to the DL box. The XP machine has no trouble when I put the CAT-5 into a router connected to my cable modem. WORKS without Devil: XP <--> router <--> cable modem DHCP & ping DL work, but not ping yahoo.com with XP <--> DL <--> router <--> cable modem I'm not using a null modem CAT-5 between XP & DL, but the XP hardware adjusts. I have the same behavior if I put a hub between XP & DL. >Can you ping the firewall from the XP box? Yes, as above, ping DL or more specifically ping 192.168.1.254 works. Thanks, Chip On 9/16/07, Heiko Zuerker <he...@zu...> wrote: > > Hey, > > did you configure the firewall as the default router on the XP box? > Can you ping the firewall from the XP box? Heiko > > On Sun, September 16, 2007 03:19, John Boden wrote: > > Hi folks, > > > > > > I downloaded & setup Devil with the 2 card firewall. > > ifconfig -a looks good. I'm running DHCP as server on eth1 & client on > > eth0. On the Devil machine "ping yahoo.com" works. > > > > > > PROBLEM IS: > > > >> From my XP machine, I can connect to eth1 via DHCP, but I can not "ping > >> > > yahoo.com" or ping its address. > > > > ALSO: > > > > > > On Devil machine: > > eth0 addr: 192.168.0.5 (upstream DHCP server is > > 192.168.0.1) > > eth1 addr: 192.168.1.254 > > > > I think I may need to make a simple modification to > > a file... maybe ifcfg-eth0, but I don't know what it would be. > > > > I've spend many hours trying to figure this out, please help. > > > > > > Thank you, > > Chip > > > ------------------------------------------------------------------------- > > This SF.net email is sponsored by: Microsoft > > Defy all challenges. Microsoft(R) Visual Studio 2005. > > > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/___________________ > > ____________________________ > > Devil-linux-discuss mailing list > > Dev...@li... > > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > > > > > -- > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > |
|
From: Jasper S. <ja...@si...> - 2007-09-16 15:10:26
|
Sorry for the late reponse, was on a short holiday for a week (first one this year ;-). I'll check it out and send the patch. Kind regards, Jasper -----Original Message----- From: dev...@li... [mailto:dev...@li...] On Behalf Of Heiko Zuerker Sent: zondag 9 september 2007 16:03 To: dev...@li... Subject: Re: [Devil-Linux-discuss] IPTables NAT module broken in DL 1.2 ? Hi, the thing we need in order to add it to the standard DL, are the scripts which integrate into the DL build system (build/mptlinux build/configuration/mptlinux etc.). Here's a description on sending in a patch. http://www.devil-linux.org/documentation/1.2.x/ch03s03.html Heiko On Tue, September 4, 2007 16:49, Jasper Siepkes wrote: > Well Patch is perhaps a big word :-) > > > Since I'm still a real noob with the DL buildsystem, I don't know if I > implemented the 'patch' correctly. I say 'patch' because it's not really a > patch, it just extracts the source tar ball in the correct location like > the docs state: http://www.lsi.com/support/downloads/mptlinux.txt > > I've got the tarball with drivers' source here: > http://www.siepkes.nl/jfire/mptlinux-2.06.65.00-src.tar.gz > > > You can also pull the drivers from here: > http://www.lsi.com/storage_home/products_home/host_bus_adapters/sas_hbas/l > si sas3801x/index.html?remote=1&locale=EN . That provides a tarball with > the source, RPM, SRPM, etc. > > Let me know if I need to change something about it. > > > Kind regards, > > > Jasper > > > -----Original Message----- > From: dev...@li... > [mailto:dev...@li...] On Behalf Of > Heiko Zuerker > Sent: dinsdag 4 september 2007 0:37 > To: dev...@li... > Subject: Re: [Devil-Linux-discuss] IPTables NAT module broken in DL 1.2 ? > > > Send in the patch. > > > Heiko > > > On Mon, September 3, 2007 17:26, Jasper Siepkes wrote: > >> The drivers in the kernel tarball itself are indeed not that update to >> date. However, most major hardware vendors still provide 2.4 driver >> support. >> >> My case with an LSI SAS Controller (MPT drivers) is a good example of >> this; They even have 2.2 driver support ! :-). I can confirm that >> everything works really well on a brand new HP Proliant DL140 G4. It >> makes an excellent (and cheap) gateway device. >> >> Is it possible for me to submit a patch with the updated MPT drivers >> for DL, >> or do you guys rather keep the kernel as Vanilla as possible ? It would >> certainly come in handy for everyone who wants to install DL on a HP >> Proliant, all SATA models use LSI controllers. >> >> >> >> -----Original Message----- >> From: dev...@li... >> [mailto:dev...@li...] On Behalf Of >> Heiko Zuerker >> Sent: maandag 3 september 2007 22:43 >> To: dev...@li... >> Subject: Re: [Devil-Linux-discuss] IPTables NAT module broken in DL 1.2 >> ? >> >> >> >> >> On Mon, September 3, 2007 15:04, Jasper Siepkes wrote: >> >> >>> Hmmmm... >>> >>> >>> >>> >>> Well I'm going to use DL as a firewall/gateway (shorewall, *Swan, >>> Squid, >>> etc.). And IMHO 2.6 is more volatile then 2.4. Take this for example: >>> http://www.debian.org/security/2007/dsa-1356 . Don't get me wrong; I >>> use 2.6 for plenty of production servers. But for the hub of my network >>> I prefer >>> 2.4. I want something rocksolid and I don't need any of the new >>> features in 2.6. So I ask myself (and you guys :-) ) what is the gain >>> for me ? >>> >>> >>> Of course I could be terribly ignorant :) So please share any >>> opinions you guys have on this subject. >> >> I fully agree with you. >> Our main problem which is coming up more and more is hardware >> compatibility. The 2.4 Kernel is rock solid, but the drivers are getting >> a little outdated. Don't get me wrong, it'll be a while until we have DL >> 1.3 where we want >> it, so 1.2 will be around for a little bit. >> >> -- >> >> >> >> Regards >> Heiko Zuerker >> http://www.devil-linux.org >> >> >> >> >> >> ----------------------------------------------------------------------- >> -- >> This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> >> >> ----------------------------------------------------------------------- >> -- >> This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> > > > -- > > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> > http://get.splunk.com/_______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > -- Regards Heiko Zuerker http://www.devil-linux.org ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: Heiko Z. <he...@zu...> - 2007-09-16 13:43:03
|
Hey, did you configure the firewall as the default router on the XP box? Can you ping the firewall from the XP box? Heiko On Sun, September 16, 2007 03:19, John Boden wrote: > Hi folks, > > > I downloaded & setup Devil with the 2 card firewall. > ifconfig -a looks good. I'm running DHCP as server on eth1 & client on > eth0. On the Devil machine "ping yahoo.com" works. > > > PROBLEM IS: > >> From my XP machine, I can connect to eth1 via DHCP, but I can not "ping >> > yahoo.com" or ping its address. > > ALSO: > > > On Devil machine: > eth0 addr: 192.168.0.5 (upstream DHCP server is > 192.168.0.1) > eth1 addr: 192.168.1.254 > > I think I may need to make a simple modification to > a file... maybe ifcfg-eth0, but I don't know what it would be. > > I've spend many hours trying to figure this out, please help. > > > Thank you, > Chip > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/___________________ > ____________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: John B. <sag...@gm...> - 2007-09-16 08:19:26
|
Hi folks, I downloaded & setup Devil with the 2 card firewall. ifconfig -a looks good. I'm running DHCP as server on eth1 & client on eth0. On the Devil machine "ping yahoo.com" works. PROBLEM IS: >From my XP machine, I can connect to eth1 via DHCP, but I can not "ping yahoo.com" or ping its address. ALSO: On Devil machine: eth0 addr: 192.168.0.5 (upstream DHCP server is 192.168.0.1) eth1 addr: 192.168.1.254 I think I may need to make a simple modification to a file... maybe ifcfg-eth0, but I don't know what it would be. I've spend many hours trying to figure this out, please help. Thank you, Chip |
|
From: Serge L. <fi...@in...> - 2007-09-14 18:32:46
|
Hi, Is anybody in need of ATAoE and Vblade (cheap replacement of iSCSI, http://www.coraid.com/ ) functionality in DL 1.2 ? -- Serge Leschinsky |
|
From: Frank W. <Fra...@ct...> - 2007-09-14 14:31:50
|
On Friday 14 September 2007 08:20:56 Kari Mattsson wrote: > Frank Weis wrote: > > Hi all, > > > > is anyone using l2tp with IPSec? I'm trying to set this up, but it doen= 't > > seem to work.... The IPSec part is OK, but l2tp doesn't seem to do > > anything, doesn't log anything etc.... > > I'm using DL 1.2.13. > > > > Thanks a lot for any hints. > > I've always skipped L2TP with a smile :-) > I have configured OpenVPN... now I'm smiling too :-) Thanks a lot, =46rank > > Frank > > > > PS: Background: > > > > I need appliances that run Windows XP to automatically start some VPN to > > a DL-protected net when they boot up, so alternatives to IPSec are > > welcome (I don't consider MS-CHAP a reasonable alternative) > > OpenVPN. You can run it either in bridged mode or routed mode. > You can setup the client on XP to run as a service. It can automagically > open the tunnel after boot. > DL obviously runs the server part. > Currently the architecture is one server - N clients. > Server - server is not yet there. > > There is some good information on openvpn.se on this. There you can also > download the Windows GUI for OpenVPN. > > -kari > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss =2D-=20 _______________________________________________ Centre de Technologie de l'Education 29 avenue John F. Kennedy L-1855 Luxembourg-Kirchberg email: Fra...@ct... t=E9l.: +352 478-5973 fax: +352 333797 _______________________________________________ |
|
From: Kari M. <kar...@tr...> - 2007-09-14 06:21:03
|
Frank Weis wrote: > Hi all, > > is anyone using l2tp with IPSec? I'm trying to set this up, but it doen't seem > to work.... The IPSec part is OK, but l2tp doesn't seem to do anything, > doesn't log anything etc.... > I'm using DL 1.2.13. > > Thanks a lot for any hints. I've always skipped L2TP with a smile :-) > Frank > > PS: Background: > > I need appliances that run Windows XP to automatically start some VPN to a > DL-protected net when they boot up, so alternatives to IPSec are welcome (I > don't consider MS-CHAP a reasonable alternative) OpenVPN. You can run it either in bridged mode or routed mode. You can setup the client on XP to run as a service. It can automagically open the tunnel after boot. DL obviously runs the server part. Currently the architecture is one server - N clients. Server - server is not yet there. There is some good information on openvpn.se on this. There you can also download the Windows GUI for OpenVPN. -kari |
|
From: Frank W. <Fra...@ct...> - 2007-09-14 05:24:45
|
Hi all, is anyone using l2tp with IPSec? I'm trying to set this up, but it doen't s= eem=20 to work.... The IPSec part is OK, but l2tp doesn't seem to do anything,=20 doesn't log anything etc....=20 I'm using DL 1.2.13. Thanks a lot for any hints. =46rank=20 PS: Background: I need appliances that run Windows XP to automatically start some VPN to a= =20 DL-protected net when they boot up, so alternatives to IPSec are welcome (I= =20 don't consider MS-CHAP a reasonable alternative) =2D-=20 _______________________________________________ Centre de Technologie de l'Education 29 avenue John F. Kennedy L-1855 Luxembourg-Kirchberg email: Fra...@ct... t=E9l.: +352 478-5973 fax: +352 333797 _______________________________________________ |
|
From: Dietmar R. <die...@gm...> - 2007-09-12 17:59:35
|
2007/9/10, Heiko Zuerker <he...@zu...>: > > On Mon, September 10, 2007 12:04, Dietmar Rieder wrote: > > 2007/8/31, Heiko Zuerker <he...@zu...>: > > > >> > >> On Fri, August 31, 2007 06:23, Dietmar Rieder wrote: > >> > >>> 2007/8/23, Oliver Niesner <dig...@gm...>: > >>> > >>> > >>>> Hi, Heiko! > >>>> > >>>> > >>>> > >>>> No good news from the new testing release - it crashed after the > >>>> bootmenu on my PIII 500 intel 440BX board with an "unable to handle > >>>> kernel paging request at virtual address d0000000" error and hangs. > >>>> My > >>>> own iso crashed with the same error - it seems that the new kernel > >>>> doesn't like older hardware. On an slightly more modern PC (P4) it > >>>> starts like normal. > >>> > >>> The same happens here. After loading the initrd it crashes on my PIII > >>> 1000 (were it should finally run on). > >>> On a P4 or on my vmware it works. I build an iso for 486 and one for > >>> 686 but it doesn't make a difference... > >>> > >> > >> Can you swap out the memory on your PIII for a test? > >> > > > > Ok, I was able to get some spare memory modules. I tested it with two > > different ones, but DL doesn't boot up. DL 1.2.13 works fine on this > > machine. > > > > But I found out that on another P III (866) the new release works. > > Unfortunately I can't use the second machine because it is in use for > > another VPN gateway. > > That's weird. > It may be related to another patch, like the grsecurity. Can you try > building a server version and see if it behaves better? > > It is really hard to track these issues down. I'm happy to inform you that a BIOS update for the P III machine solved the problem. Didi |
|
From: PeterJannesen, V. <P.J...@vi...> - 2007-09-12 10:06:04
|
Hey, I can use de openswan _updown (already has the code to put the routes in a different table and rules) script as a template. Create the file in /etc/ipsec.d/... and I very thing is right it wil work. I will give this a try. -- Peter -----Original Message----- From: dev...@li... [mailto:dev...@li...] On Behalf Of Heiko Zuerker Sent: dinsdag 11 september 2007 13:47 To: dev...@li... Subject: Re: [Devil-Linux-discuss] new testing release Hey, I thought I saw a comment in the script that it is using iproute2, but I could be mistaken. Couldn't you copy the strongswan script into /etc/xxxx and just point to it by using the leftupdown parameter? Since the file would then reside in a writable location you should be able to do the necessary modifications. Heiko On Tue, September 11, 2007 02:54, PeterJannesen, Visiq wrote: > Heiko, > > > The _updown script (located in /usr/lib/ipsec) of openswan includes=20 > /etc/sysconfig/pluto_updown. When you set the variable IPROUTETABLE to > for example "ipsec" All ipsec routes are places in de ipsec route=20 > table and the te correct rules are also generated. > > The _updown script of strongswan don't include=20 > /etc/sysconfig/pluto_updown. So you must edit /usr/lib/ipsec/_updown=20 > directly bot this is implosible because it is stored on CD. > > This is a problem when you need iproute2. > > > -- Peter > > > -----Original Message----- > From: dev...@li... > [mailto:dev...@li...] On Behalf=20 > Of Heiko Zuerker > Sent: zondag 9 september 2007 16:06 > To: dev...@li... > Subject: Re: [Devil-Linux-discuss] new testing release > > > Peter, > > > I took a quick look at the Strongswan 4.1 documentation and there's a=20 > parameter you have to set. Here's the extract from the doc: > ------------- > 11.1 Environment variables in the updown script > > > strongSwan makes the following environment variables available in the=20 > updown script indicated by the leftupdown parameter: ------------- > > > I'm not sure about the routes, it's quite a while since I used=20 > xxxxxSWAN > > > Heiko > > > > On Tue, September 4, 2007 01:13, PeterJannesen, Visiq wrote: > >> Hi Heiko, >> >> >> >> I did a small test on the new testing release (from 1.2.14-2007-05-24 >> to 2007-08-23) >> >> >> >> I read earlier that openswan is replaced by strongswan and it seems=20 >> that IPSec is not working anymore. It seams that the tunnels are=20 >> comming up but the routes are not > created. >> >> >> Furher it seems that /usr/lib/ipsec/_updown is not supporting=20 >> /etc/sysconfig/pluto_updown anymore. >> I use pluto_updown to put the route in a different table with rules.=20 >> I >> > >> my first impression is that strongswan is not supporting pluto_updown. > >> This is a problem because you can't change the standard=20 >> /usr/lib/ipsec/_updown script with out creating a custom build. >> >> >> -- Peter >> >> >> >> -----Original Message----- >> From: dev...@li... >> [mailto:dev...@li...] On Behalf=20 >> Of Heiko Zuerker >> Sent: donderdag 23 augustus 2007 16:49 >> To: dev...@li... >> Subject: [Devil-Linux-discuss] new testing release >> >> >> >> Hey everyone, >> >> >> >> I just uploaded a new testing release for 1.2.14=20 >> ftp://ftp.devil-linux.org/pub/devel/testing >> >> >> >> Would be great if some of you could test the latest updates. >> >> >> >> Thx >> >> >> >> -- >> >> >> >> Regards >> Heiko Zuerker >> http://www.devil-linux.org >> >> >> >> >> >> --------------------------------------------------------------------- >> - >> -- >> - >> This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a >> > browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/=20 >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> >> --------------------------------------------------------------------- >> - >> --- This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a >> > browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/=20 >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> > > > -- > > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by: Microsoft Defy all challenges. > Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by: Microsoft Defy all challenges. > Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > --=20 Regards Heiko Zuerker http://www.devil-linux.org ------------------------------------------------------------------------ - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: Stefan E. <Ste...@av...> - 2007-09-12 06:21:58
|
Hi, that's exactly the way I did it. Just specify something like leftupdown=/etc/ipsec.d/_updown_tunnel in /etc/ipsec.conf and copy the tunnel-script to /etc/ipsec.d and this should work fine. I did this, because I modified the script to dynamically add and remove firewall rules to enable different firewall zones in shorewall to deal with the vpn connections defined in ipsec.conf. Stefan Heiko Zuerker wrote: > Hey, > > I thought I saw a comment in the script that it is using iproute2, but I > could be mistaken. > Couldn't you copy the strongswan script into /etc/xxxx and just point to > it by using the leftupdown parameter? Since the file would then reside in > a writable location you should be able to do the necessary modifications. > > Heiko > > On Tue, September 11, 2007 02:54, PeterJannesen, Visiq wrote: >> Heiko, >> >> >> The _updown script (located in /usr/lib/ipsec) of openswan includes >> /etc/sysconfig/pluto_updown. When you set the variable IPROUTETABLE to >> for example "ipsec" All ipsec routes are places in de ipsec route table and >> the te correct rules are also generated. >> >> The _updown script of strongswan don't include >> /etc/sysconfig/pluto_updown. So you must edit /usr/lib/ipsec/_updown >> directly bot this is implosible because it is stored on CD. >> >> This is a problem when you need iproute2. >> >> >> -- Peter >> >> >> -----Original Message----- >> From: dev...@li... >> [mailto:dev...@li...] On Behalf Of >> Heiko Zuerker >> Sent: zondag 9 september 2007 16:06 >> To: dev...@li... >> Subject: Re: [Devil-Linux-discuss] new testing release >> >> >> Peter, >> >> >> I took a quick look at the Strongswan 4.1 documentation and there's a >> parameter you have to set. Here's the extract from the doc: >> ------------- >> 11.1 Environment variables in the updown script >> >> >> strongSwan makes the following environment variables available in the >> updown script indicated by the leftupdown parameter: ------------- >> >> >> I'm not sure about the routes, it's quite a while since I used xxxxxSWAN >> >> >> Heiko >> >> >> >> On Tue, September 4, 2007 01:13, PeterJannesen, Visiq wrote: >> >>> Hi Heiko, >>> >>> >>> >>> I did a small test on the new testing release (from 1.2.14-2007-05-24 >>> to 2007-08-23) >>> >>> >>> >>> I read earlier that openswan is replaced by strongswan and it seems >>> that IPSec is not working anymore. It seams that the tunnels are comming >>> up but the routes are not >> created. >>> >>> Furher it seems that /usr/lib/ipsec/_updown is not supporting >>> /etc/sysconfig/pluto_updown anymore. >>> I use pluto_updown to put the route in a different table with rules. I >>> >>> my first impression is that strongswan is not supporting pluto_updown. >>> This is a problem because you can't change the standard >>> /usr/lib/ipsec/_updown script with out creating a custom build. >>> >>> >>> -- Peter >>> >>> >>> >>> -----Original Message----- >>> From: dev...@li... >>> [mailto:dev...@li...] On Behalf >>> Of Heiko Zuerker >>> Sent: donderdag 23 augustus 2007 16:49 >>> To: dev...@li... >>> Subject: [Devil-Linux-discuss] new testing release >>> >>> >>> >>> Hey everyone, >>> >>> >>> >>> I just uploaded a new testing release for 1.2.14 >>> ftp://ftp.devil-linux.org/pub/devel/testing >>> >>> >>> >>> Would be great if some of you could test the latest updates. >>> >>> >>> >>> Thx >>> >>> >>> >>> -- >>> >>> >>> >>> Regards >>> Heiko Zuerker >>> http://www.devil-linux.org >>> >>> >>> >>> >>> >>> ---------------------------------------------------------------------- >>> -- >>> - >>> This SF.net email is sponsored by: Splunk Inc. >>> Still grepping through log files to find problems? Stop. >>> Now Search log events and configuration files using AJAX and a >>> >> browser. >>> Download your FREE copy of Splunk now >> http://get.splunk.com/ >>> _______________________________________________ >>> Devil-linux-discuss mailing list >>> Dev...@li... >>> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >>> >>> >>> >>> ---------------------------------------------------------------------- >>> --- This SF.net email is sponsored by: Splunk Inc. >>> Still grepping through log files to find problems? Stop. >>> Now Search log events and configuration files using AJAX and a >>> >> browser. >>> Download your FREE copy of Splunk now >> http://get.splunk.com/ >>> _______________________________________________ >>> Devil-linux-discuss mailing list >>> Dev...@li... >>> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >>> >>> >>> >> >> -- >> >> >> Regards >> Heiko Zuerker >> http://www.devil-linux.org >> >> >> >> >> ------------------------------------------------------------------------ >> - >> This SF.net email is sponsored by: Microsoft Defy all challenges. >> Microsoft(R) Visual Studio 2005. >> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by: Microsoft >> Defy all challenges. Microsoft(R) Visual Studio 2005. >> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> |
|
From: Heiko Z. <he...@zu...> - 2007-09-11 23:33:55
|
On Tue, September 11, 2007 16:24, victor nikiforenko wrote:
> Hello All.
>
>
> I use Devil-Linux since around 4 years and i love it.
>
>
> Actualy i try to run a 1.2.14-2007-08-23-i586-SMP and
> aparently all works fine but... in this machine i work whit 3 netwok card
> (3com whit 3c59x and 2 d-link
> dfe-520tx like via-rhine III) after i configure nics i try to start
> firewall but i give a "Starting Firewalliptables: Invalid argument". This
> error ocurs whit 2nic script and 3nic script, (i dn't use a bscap) and the
> error is generated by
>
> else ${IPTABLES} -t nat -A POSTROUTING -o ${OUT_DEV}
> -j MASQUERADE
> if
>
> Whit 1.2.13 Devil works fine whitout any kinde of
> trobules.
This is a known problem which is caused by the pptp-conntrack module. The
next testing release will have this resolved.
--
Regards
Heiko Zuerker
http://www.devil-linux.org
|
|
From: victor n. <vic...@ya...> - 2007-09-11 21:24:18
|
Hello All.
I use Devil-Linux since around 4 years and i love it.
Actualy i try to run a 1.2.14-2007-08-23-i586-SMP and
aparently all works fine but... in this machine i work
whit 3 netwok card (3com whit 3c59x and 2 d-link
dfe-520tx like via-rhine III) after i configure nics i
try to start firewall but i give a "Starting
Firewalliptables: Invalid argument". This error ocurs
whit 2nic script and 3nic script, (i dn't use a bscap)
and the error is generated by
else
${IPTABLES} -t nat -A POSTROUTING -o ${OUT_DEV}
-j MASQUERADE
if
Whit 1.2.13 Devil works fine whitout any kinde of
trobules.
Thanks
Victor
____________________________________________________________________________________
Catch up on fall's hot new shows on Yahoo! TV. Watch previews, get listings, and more!
http://tv.yahoo.com/collections/3658
|
|
From: Heiko Z. <he...@zu...> - 2007-09-11 11:46:54
|
Hey, I thought I saw a comment in the script that it is using iproute2, but I could be mistaken. Couldn't you copy the strongswan script into /etc/xxxx and just point to it by using the leftupdown parameter? Since the file would then reside in a writable location you should be able to do the necessary modifications. Heiko On Tue, September 11, 2007 02:54, PeterJannesen, Visiq wrote: > Heiko, > > > The _updown script (located in /usr/lib/ipsec) of openswan includes > /etc/sysconfig/pluto_updown. When you set the variable IPROUTETABLE to > for example "ipsec" All ipsec routes are places in de ipsec route table and > the te correct rules are also generated. > > The _updown script of strongswan don't include > /etc/sysconfig/pluto_updown. So you must edit /usr/lib/ipsec/_updown > directly bot this is implosible because it is stored on CD. > > This is a problem when you need iproute2. > > > -- Peter > > > -----Original Message----- > From: dev...@li... > [mailto:dev...@li...] On Behalf Of > Heiko Zuerker > Sent: zondag 9 september 2007 16:06 > To: dev...@li... > Subject: Re: [Devil-Linux-discuss] new testing release > > > Peter, > > > I took a quick look at the Strongswan 4.1 documentation and there's a > parameter you have to set. Here's the extract from the doc: > ------------- > 11.1 Environment variables in the updown script > > > strongSwan makes the following environment variables available in the > updown script indicated by the leftupdown parameter: ------------- > > > I'm not sure about the routes, it's quite a while since I used xxxxxSWAN > > > Heiko > > > > On Tue, September 4, 2007 01:13, PeterJannesen, Visiq wrote: > >> Hi Heiko, >> >> >> >> I did a small test on the new testing release (from 1.2.14-2007-05-24 >> to 2007-08-23) >> >> >> >> I read earlier that openswan is replaced by strongswan and it seems >> that IPSec is not working anymore. It seams that the tunnels are comming >> up but the routes are not > created. >> >> >> Furher it seems that /usr/lib/ipsec/_updown is not supporting >> /etc/sysconfig/pluto_updown anymore. >> I use pluto_updown to put the route in a different table with rules. I >> > >> my first impression is that strongswan is not supporting pluto_updown. > >> This is a problem because you can't change the standard >> /usr/lib/ipsec/_updown script with out creating a custom build. >> >> >> -- Peter >> >> >> >> -----Original Message----- >> From: dev...@li... >> [mailto:dev...@li...] On Behalf >> Of Heiko Zuerker >> Sent: donderdag 23 augustus 2007 16:49 >> To: dev...@li... >> Subject: [Devil-Linux-discuss] new testing release >> >> >> >> Hey everyone, >> >> >> >> I just uploaded a new testing release for 1.2.14 >> ftp://ftp.devil-linux.org/pub/devel/testing >> >> >> >> Would be great if some of you could test the latest updates. >> >> >> >> Thx >> >> >> >> -- >> >> >> >> Regards >> Heiko Zuerker >> http://www.devil-linux.org >> >> >> >> >> >> ---------------------------------------------------------------------- >> -- >> - >> This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a >> > browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> >> ---------------------------------------------------------------------- >> --- This SF.net email is sponsored by: Splunk Inc. >> Still grepping through log files to find problems? Stop. >> Now Search log events and configuration files using AJAX and a >> > browser. >> Download your FREE copy of Splunk now >> http://get.splunk.com/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> > > > -- > > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > > ------------------------------------------------------------------------ > - > This SF.net email is sponsored by: Microsoft Defy all challenges. > Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: PeterJannesen, V. <P.J...@vi...> - 2007-09-11 07:54:24
|
Heiko, The _updown script (located in /usr/lib/ipsec) of openswan includes /etc/sysconfig/pluto_updown. When you set the variable IPROUTETABLE to for example "ipsec" All ipsec routes are places in de ipsec route table and the te correct rules are also generated. The _updown script of strongswan don't include /etc/sysconfig/pluto_updown. So you must edit /usr/lib/ipsec/_updown directly bot this is implosible because it is stored on CD. This is a problem when you need iproute2. -- Peter -----Original Message----- From: dev...@li... [mailto:dev...@li...] On Behalf Of Heiko Zuerker Sent: zondag 9 september 2007 16:06 To: dev...@li... Subject: Re: [Devil-Linux-discuss] new testing release Peter, I took a quick look at the Strongswan 4.1 documentation and there's a parameter you have to set. Here's the extract from the doc: ------------- 11.1 Environment variables in the updown script strongSwan makes the following environment variables available in the updown script indicated by the leftupdown parameter: ------------- I'm not sure about the routes, it's quite a while since I used xxxxxSWAN Heiko On Tue, September 4, 2007 01:13, PeterJannesen, Visiq wrote: > Hi Heiko, > > > I did a small test on the new testing release (from 1.2.14-2007-05-24=20 > to > 2007-08-23) > > > I read earlier that openswan is replaced by strongswan and it seems=20 > that IPSec is not working anymore. > It seams that the tunnels are comming up but the routes are not created. > > > Furher it seems that /usr/lib/ipsec/_updown is not supporting=20 > /etc/sysconfig/pluto_updown anymore. > I use pluto_updown to put the route in a different table with rules. I > my first impression is that strongswan is not supporting pluto_updown. > This is a problem because you can't change the standard=20 > /usr/lib/ipsec/_updown script with out creating a custom build. > > -- Peter > > > -----Original Message----- > From: dev...@li... > [mailto:dev...@li...] On Behalf=20 > Of Heiko Zuerker > Sent: donderdag 23 augustus 2007 16:49 > To: dev...@li... > Subject: [Devil-Linux-discuss] new testing release > > > Hey everyone, > > > I just uploaded a new testing release for 1.2.14=20 > ftp://ftp.devil-linux.org/pub/devel/testing > > > Would be great if some of you could test the latest updates. > > > Thx > > > -- > > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > > ---------------------------------------------------------------------- > -- > - > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/=20 > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > > ---------------------------------------------------------------------- > --- This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/=20 > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > --=20 Regards Heiko Zuerker http://www.devil-linux.org ------------------------------------------------------------------------ - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: Dom <dl...@ed...> - 2007-09-11 05:32:35
|
Felipe Athayde wrote: > I'm burned the ISO correctly, I think, rebooted my computer and I > chose one of the booting options (resolution). It all seems to go fine > until I get the following msg: > /dev/scsi/host0/bus0/target0/lun0/part1 wrong media > devil-linux cd-rom not found > booting will not continue, you have to reset to try again > > I'm using an IDE cd-rom and an USB storage with that "etc" stuff . > > Before I tried adding this USB storage with "etc" file, I was getting > another error, something like: > kernel had to kill process > > I'm new to this stuff, I need a liveCD for learning how to use > iptables, since I'm supose to deliver a work for university until the > end of the month. > > Thanks in advance, > Hi Felipe I suspect either the CD or the CD drive. I would try re-burning the CD (preferably using a different CD writer), and if this does not solve the problem, try (if you can) changing the CD drive. And just check you have a chosen a version of Devil-Linux supported by your hardware. If you don't have an alternative CD drive, then you could try putting the whole Devil-Linux installation on your USB flash drive - see 8.5 here http://www.devil-linux.org/documentation/1.2.x/ch01s08.html#d0e1207 - but it seems you must already have a working Linux system with a CD drive and a USB port. There may also be a way of doing this from Windows - I would be interested if anyone knows how! Dom |
|
From: Felipe A. <fel...@gm...> - 2007-09-11 02:02:39
|
I'm burned the ISO correctly, I think, rebooted my computer and I chose one of the booting options (resolution). It all seems to go fine until I get the following msg: /dev/scsi/host0/bus0/target0/lun0/part1 wrong media devil-linux cd-rom not found booting will not continue, you have to reset to try again I'm using an IDE cd-rom and an USB storage with that "etc" stuff . Before I tried adding this USB storage with "etc" file, I was getting another error, something like: kernel had to kill process I'm new to this stuff, I need a liveCD for learning how to use iptables, since I'm supose to deliver a work for university until the end of the month. Thanks in advance, -- Felipe |
|
From: Heiko Z. <he...@zu...> - 2007-09-10 21:08:54
|
On Mon, September 10, 2007 16:02, Bruce Smith wrote: > You're only talking about removing 'pptp-conntrack-nat', correct? > > > NOT other conntrack modules, like ip_conntrack_ftp & ip_conntrack_irc, > correct??? :-) Correct. Since that module seems to screw up the nat in general and there's not update in sight. Unfortunately the netfilter team has removed the 'old' patches from patch-o-matic. Never understood why, since not everybody is on Kernel 2.6... -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Bruce S. <bw...@ar...> - 2007-09-10 21:02:29
|
You're only talking about removing 'pptp-conntrack-nat', correct? NOT other conntrack modules, like ip_conntrack_ftp & ip_conntrack_irc, correct??? :-) - BS > Hi! > If the pptp-conntrack-nat is used when a PPTP VPN connection is initiated behind a NAT, then I use it... > > (I should probably use IPSec but I've hit the same problem as a few others when behind a NAT, the local and remote party do not agree with what the local party thinks the IP address is, which is sortof understandable.) > > > > JJ > > > -----Original Message----- > From: dev...@li... [mailto:dev...@li...] On Behalf Of Heiko Zuerker > Sent: 10. september 2007 21:24 > To: dev...@li... > Subject: Re: [Devil-Linux-discuss] shorewall updates > > > On Mon, September 10, 2007 12:14, Dietmar Rieder wrote: > > 2007/9/3, Dietmar Rieder <die...@gm...>: > > > >> 2007/8/28, Dietmar Rieder <die...@gm...>: > >> > >>> Am 28.08.07 schrieb "Rudner, Björn" <br...@ba...>: > >>> > >>>> Hi Didi, > >>>> > >>>> > >>>> I've updated shorewall to Version 4.0.2 in DL 1.2.x and DL 1.3.x > >>>> > >>> > >>> Thank you so much > >>> > >> > >> BTW 4.0.3 is out :-) > >> Shorewall-perl now requires the FindBin Perl module > >> > > > > I made a custom DL cd which includes shorewall 4.0.3 with all patches > > from the errata. It works find here, but I had to remove the comment from > > "extra/pptp-conntrack-nat" in built/scripts/config in oder to get > > shorewall running. > > Since nobody complained we're probably removing pptp-conntrack-nat from > the standard install. > > -- > > Regards > Heiko Zuerker > http://www.devil-linux.org > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2005. > http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: John J. <jo...@jo...> - 2007-09-10 20:48:11
|
Hi! If the pptp-conntrack-nat is used when a PPTP VPN connection is initiated b= ehind a NAT, then I use it... (I should probably use IPSec but I've hit the same problem as a few others = when behind a NAT, the local and remote party do not agree with what the lo= cal party thinks the IP address is, which is sortof understandable.) JJ -----Original Message----- From: dev...@li... [mailto:devil-linux= -dis...@li...] On Behalf Of Heiko Zuerker Sent: 10. september 2007 21:24 To: dev...@li... Subject: Re: [Devil-Linux-discuss] shorewall updates On Mon, September 10, 2007 12:14, Dietmar Rieder wrote: > 2007/9/3, Dietmar Rieder <die...@gm...>: > >> 2007/8/28, Dietmar Rieder <die...@gm...>: >> >>> Am 28.08.07 schrieb "Rudner, Bj=F6rn" <br...@ba...>: >>> >>>> Hi Didi, >>>> >>>> >>>> I've updated shorewall to Version 4.0.2 in DL 1.2.x and DL 1.3.x >>>> >>> >>> Thank you so much >>> >> >> BTW 4.0.3 is out :-) >> Shorewall-perl now requires the FindBin Perl module >> > > I made a custom DL cd which includes shorewall 4.0.3 with all patches > from the errata. It works find here, but I had to remove the comment from > "extra/pptp-conntrack-nat" in built/scripts/config in oder to get > shorewall running. Since nobody complained we're probably removing pptp-conntrack-nat from the standard install. -- Regards Heiko Zuerker http://www.devil-linux.org ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
50 messages has been excluded from this view by a project administrator.
