devil-linux-discuss — General Mailing List for all discussions

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Dom <dl...@ed...>]

Heiko Zuerker wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Sat, June 10, 2006 01:59, Dom wrote:
>   
>> Heiko Zuerker wrote:    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
>> On Fri, June 9, 2006 16:36, Dominic Ferard wrote:           Hi Heiki:
>> Heiko     Sorry I guess I was getting tired last night :-[
>> Here is my syslog-ng.conf file. I can't try changing it until Monday when
>> I am back at the server to see what happens at reboot. But you may be
>> able to tell what the problem is by looking at this.            Yes it's
>> the line I thought it is. Not sure why the jail script didn't correct it.
>> I have to take a look at the code again.       Do I replace the line that
>> is there at present in /etc/syslog-ng/syslog-ng.conf: source src {
>> unix-stream("/jail/NTPD/dev/log"); pipe ("/proc/kmsg" log_prefix("kernel:
>> ")); unix-dgram("/dev/log"); internal(); };
>> with the new line you gave me source src { udp();
>> tcp(max_connections(100)); pipe ("/proc/kmsg" log_prefix("kernel: "));
>> unix-stream("/dev/log"); internal(); }; or add yours as a second line?
>>     
>
> Replace the old one with what I sent you.
> You can easily test it by executing the command:
> /etc/init.d/syslog restart
>
> If it does't work, look for syntax errors or line breaks where none should
> be.
>   
I did that and it looks good:
Stopping system log daemon                       Not running         [ 
ATTN ]
Starting system log daemon                                           [  
OK  ]

>   
>> I guess I do save-config after this and the error message will (we hope)
>> disappear on reboot?
>>     
>
> Correct.
>
>   
>> Sorry: another unrelated question - can I run apache as well as xinet,
>> will they conflict? I use xinet at present but only for SWAT (samba web
>> admin).
>>     
>
> Give it a try, see if it works. ;-)
>
>
>   
It does! (After some messing about with httpd.conf, creating an 
additional user for Apache, creating a location for log files) But 
Apache's error_log file reports:
  This function has not been implemented on this platform: DBD: failed 
to initialise
and I had to comment out:
  LoadModule unique_id_module /usr/lib/apache2/modules/mod_unique_id.so
in httpd.conf to prevent a fatal start-up error. I don't know know 
whether this is something strange in my setup or generic to DL.

Thanks for all your help!

Dom

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,

Please do not change the email address, somebody else might have a similar
problem and is waiting to read about the solution.

On Sat, June 10, 2006 01:59, Dominic Ferard wrote:
> Heiko Zuerker wrote:    -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
> On Fri, June 9, 2006 16:36, Dominic Ferard wrote:           Hi Heiki:
> Heiko     Sorry I guess I was getting tired last night :-[
> Here is my syslog-ng.conf file. I can't try changing it until Monday when
> I am back at the server to see what happens at reboot. But you may be
> able to tell what the problem is by looking at this.            Yes it's
> the line I thought it is. Not sure why the jail script didn't correct it.
> I have to take a look at the code again.       Do I replace the line that
> is there at present in /etc/syslog-ng/syslog-ng.conf: source src {
> unix-stream("/jail/NTPD/dev/log"); pipe ("/proc/kmsg" log_prefix("kernel:
> ")); unix-dgram("/dev/log"); internal(); };
> with the new line you gave me source src { udp();
> tcp(max_connections(100)); pipe ("/proc/kmsg" log_prefix("kernel: "));
> unix-stream("/dev/log"); internal(); }; or add yours as a second line?

Replace the old one with what I sent you.
You can easily test it by executing the command:
/etc/init.d/syslog restart

If it does't work, look for syntax errors or line breaks where none should
be.

> I guess I do save-config after this and the error message will (we hope)
> disappear on reboot?

Correct.

> Sorry: another unrelated question - can I run apache as well as xinet,
> will they conflict? I use xinet at present but only for SWAT (samba web
> admin).

Give it a try, see if it works. ;-)

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSKzIwACgkQUcytMSbs+YUwaACeN7ILK96+LjB+5rv4ImpUAD35
rwcAn0bMdXt9o4CtwU2Pkbe0HOixp93V
=F827
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Fri, June 9, 2006 13:08, Dom wrote:
> Heiko Zuerker wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>>
>> I uploaded a new test release yesterday, get it from one of our
>> mirrors. It's in the /pub/devel/testing/ directory.
>>
>>
>> You can give that one a try. Please let us know if this resolved your
>> problem. If not, I'd suggest checking the samba mailinglists/website for
>>  anything about it.
>>
>> - --
>>
>>
>> Regards
>> Heiko Zuerker
>> http://www.devil-linux.org
>>
>>
>>
>
> Thanks I am trying that. It seems better - very slow on each computer's
> first access to the shared folder, but fast thereafter, maybe Samba is
> doing some different cacheing system?

The first access is always slower, this is normal.

> But as with 1.2.9, DL reports an error on start-up something like this
> (sorry I had to scribble fast so it may not be quite right):
>
>
> system log daemonio c bind_unix_solib(): bind failed / jail / NTPD / devel
> /log (no such file or directory)

We changed the way on how the chroot jails send messages to the syslog
daemon. It should have changed your config file automatically...
Please send me your current /etc/syslog-ng/syslog-ng.conf via email, so I
can see what went wrong.
Edit your file /etc/syslog-ng/syslog-ng.conf
The first source statement should look like this:
#####################################################################
# define the source pipe for all local messages
#####################################################################
source src { udp(); tcp(max_connections(100)); pipe ("/proc/kmsg"
log_prefix("kernel: ")); unix-stream("/dev/log"); interna
l(); };

There may be a few more entries in there with jail in the name. Just
copy'n'paste this over and let me know how it works.


- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSJvEAACgkQUcytMSbs+YW9dgCeOvnANOGLxP1ac+w3SKaDDVYj
uowAoIla7maAlUSqdH1DOiLMDfOUaacd
=2raf
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Dom <dl...@ed...>]

Heiko Zuerker wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I uploaded a new test release yesterday, get it from one of our mirrors.
> It's in the /pub/devel/testing/ directory.
>
> You can give that one a try. Please let us know if this resolved your
> problem. If not, I'd suggest checking the samba mailinglists/website for
> anything about it.
>
> - -- 
>
> Regards
>   Heiko Zuerker
>   http://www.devil-linux.org
>
>   

Thanks I am trying that. It seems better - very slow on each computer's 
first access to the shared folder, but fast thereafter, maybe Samba is 
doing some different cacheing system?

But as with 1.2.9, DL reports an error on start-up something like this 
(sorry I had to scribble fast so it may not be quite right):

system log daemonio c bind_unix_solib(): bind failed / jail / NTPD / 
devel /log (no such file or directory)
 
Any ideas? Thanks

Dom

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I uploaded a new test release yesterday, get it from one of our mirrors.
It's in the /pub/devel/testing/ directory.

You can give that one a try. Please let us know if this resolved your
problem. If not, I'd suggest checking the samba mailinglists/website for
anything about it.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSJcRMACgkQUcytMSbs+YXkvgCfSL00vKaMlR7uvMFRklN8fRId
XMkAn2tCM5jzLFq8huS9lLfgCbIQD83X
=znzW
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Dom <dl...@ed...>]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Heiko Zuerker wrote:
<blockquote
 cite="mid...@ww..."
 type="cite">
  <pre wrap="">-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thu, June 8, 2006 08:30, Dom wrote:
  </pre>
  <blockquote type="cite">
    <pre wrap="">Today I tried to upgrade from 1.2.6-SMP-Server to 1.2.9-SMP-Server, but
after upgrading Samba seemed to run very very slow and I have now
downgraded back to 1.2.6.

Does anyone know why this might be? There seemed to be a problem with
the system daemon on loading, and SWAT reported files in sharing mode
'DENY_DOS' which I have never seen before with 1.2.6. I guess I got
something wrong in selecting configuration files to retain on the upgrade
(I just went with DL choices which looked good to me), but I
would prefer to use the current version if poss.
    </pre>
  </blockquote>
  <pre wrap=""><!---->
This may be a problem with samba itself, the next DL release includes the
latest samba version (3.0.22).

  </pre>
  <blockquote type="cite">
    <pre wrap="">Having said that 1.2.6 is rock-solid and provides us with a fast and
hassle-free Samba server. And it is great to be able to switch back to a
previous version just by restoring a single file on USB stick and putting
in the different CD. It's not so easy with Windoze!

Thanks for any advice! And to Heiko and the guys for the great
Devil-Linux product!
    </pre>
  </blockquote>
  <pre wrap=""><!---->
You are welcome.

  </pre>
  <pre wrap="">- -- 

Regards
  Heiko Zuerker

  </pre>
</blockquote>
Thanks Heiko I will wait for the next release then.<br>
<br>
Dom<br>
<br>
</body>
</html>

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thu, June 8, 2006 08:30, Dom wrote:
> Today I tried to upgrade from 1.2.6-SMP-Server to 1.2.9-SMP-Server, but
> after upgrading Samba seemed to run very very slow and I have now
> downgraded back to 1.2.6.
>
> Does anyone know why this might be? There seemed to be a problem with
> the system daemon on loading, and SWAT reported files in sharing mode
> 'DENY_DOS' which I have never seen before with 1.2.6. I guess I got
> something wrong in selecting configuration files to retain on the upgrade
> (I just went with DL choices which looked good to me), but I
> would prefer to use the current version if poss.

This may be a problem with samba itself, the next DL release includes the
latest samba version (3.0.22).

> Having said that 1.2.6 is rock-solid and provides us with a fast and
> hassle-free Samba server. And it is great to be able to switch back to a
> previous version just by restoring a single file on USB stick and putting
> in the different CD. It's not so easy with Windoze!
>
> Thanks for any advice! And to Heiko and the guys for the great
> Devil-Linux product!

You are welcome.

> Dom
>
>
> P.S. does anyone know how to delete a non-existent (second) NIC card
> from the configuration? It causes an apparent (but harmless) load failure
> at boot time.



- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSIMD8ACgkQUcytMSbs+YVb2wCffa6j77u4HkIAjXlC2Zg8pxlH
mGoAn03bV7C49ZJ2HABjPTCm/xLRT/at
=jrWa
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Dom <dl...@ed...>]

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
  <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<br>
<blockquote cite="mid...@lx..."
 type="cite">
  <blockquote type="cite">
    <pre wrap="">P.S. does anyone know how to delete a non-existent (second) NIC card 
from the configuration? It causes an apparent (but harmless) load 
failure at boot time.
    </pre>
  </blockquote>
  <pre wrap=""><!---->
You can just remove the config file for the NIC card.  If it's "eth1",
then the config file is here:  /etc/sysconfig/nic/ifcfg-eth1

 - BS
  </pre>
</blockquote>
Thanks for that Bruce, it's easy when you know!<br>
<br>
Dom<br>
</body>
</html>

Re: [Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Bruce S. <bw...@ar...>]

> P.S. does anyone know how to delete a non-existent (second) NIC card 
> from the configuration? It causes an apparent (but harmless) load 
> failure at boot time.

You can just remove the config file for the NIC card.  If it's "eth1",
then the config file is here:  /etc/sysconfig/nic/ifcfg-eth1


 - BS

[Devil-Linux-discuss] DL 1.2.9 upgrade from 1.2.6 (SMP Server) - but slow?

[Dom <dl...@ed...>]

Today I tried to upgrade from 1.2.6-SMP-Server to 1.2.9-SMP-Server, but 
after upgrading Samba seemed to run very very slow and I have now 
downgraded back to 1.2.6.

Does anyone know why this might be? There seemed to be a problem with 
the system daemon on loading, and SWAT reported files in sharing mode 
'DENY_DOS' which I have never seen before with 1.2.6. I guess I got 
something wrong in selecting configuration files to retain on the 
upgrade (I just went with DL choices which looked good to me), but I 
would prefer to use the current version if poss.

Having said that 1.2.6 is rock-solid and provides us with a fast and 
hassle-free Samba server. And it is great to be able to switch back to a 
previous version just by restoring a single file on USB stick and 
putting in the different CD. It's not so easy with Windoze!

Thanks for any advice! And to Heiko and the guys for the great 
Devil-Linux product!

Dom

P.S. does anyone know how to delete a non-existent (second) NIC card 
from the configuration? It causes an apparent (but harmless) load 
failure at boot time.

Re: [Devil-Linux-discuss] busybox tar unable to decompress etc.tar.bz2 after save-config

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,

please DO NOT send a new post to the ML by replying to an existing post.
Many of us use "threaded view" for the mails, which get's screwed up.

On Wed, June 7, 2006 22:13, Rick Frey wrote:
> Been using Devil-Linux 1.2.6 for nearly a year.  All of a sudden this
> month was unable to boot after running save-config.  Came across message in
> mailing list archive with same problem (see original message below), but
> never saw resolution in subsequent thread:
> http://sourceforge.net/mailarchive/message.php?msg_id=12196562
>
>
> Found problem was caused by compressed file created by save-config using
> bzip2 with "-s" option  which prevented busybox tar from being able to
> decompress the file.  If I remove the "-s" option, busybox tar has no
> problem decompressing file (GNU tar able to decompress fine either way).
>
> Since I have plenty of RAM, I use a modified save-config file that uses
> bzip2 w/o "-s" option that works fine with busybox tar.  I do not have any
> additional large files in /etc or /root.  Never had the problem till last
> month after using 1.2.6 for quite some time.  Only changes during that
> time period (that I can think of) were firewall rules and openvpn config
> changes. Overall size of etc.tar (before and after compression) is
> basically same before and after problem.    Is this a known bug?

I'm going to remove that parameter, since I had issues too.
It's just a small archive, so I don't think we will have issues unpacking it.

> Thanks,
> - Rick
> P.S. Great work on the devil-linux distro!
>

Thanks

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSIInoACgkQUcytMSbs+YXi4QCfcEaBPGoi52mc9k/K2f7ElnAZ
2OsAn3cDMSPG8/b3iqJDyS+IjdPn3IU4
=qW5b
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] busybox tar unable to decompress etc.tar.bz2 after save-config

[Rick F. <ri...@gr...>]

Been using Devil-Linux 1.2.6 for nearly a year.  All of a sudden this 
month was unable to boot after running save-config.  Came across message 
in mailing list archive with same problem (see original message below), 
but never saw resolution in subsequent thread:
http://sourceforge.net/mailarchive/message.php?msg_id=12196562

Found problem was caused by compressed file created by save-config using 
bzip2 with "-s" option  which prevented busybox tar from being able to 
decompress the file.  If I remove the "-s" option, busybox tar has no 
problem decompressing file (GNU tar able to decompress fine either way).

Since I have plenty of RAM, I use a modified save-config file that uses 
bzip2 w/o "-s" option that works fine with busybox tar.  I do not have 
any additional large files in /etc or /root.  Never had the problem till 
last month after using 1.2.6 for quite some time.  Only changes during 
that time period (that I can think of) were firewall rules and openvpn 
config changes. Overall size of etc.tar (before and after compression) 
is basically same before and after problem.    Is this a known bug? 

Thanks,
 - Rick
P.S. Great work on the devil-linux distro!



From: Carl <chdl@se...>
boot failure after config changes  
2005-06-26 10:49

 Hi,
 I"m having issues saving configuration changes. The boot sequence trips over trying to
decompress the new etc.tar.bz2 with the following messages:
 
 	tar: Decompression failed
 	tar: Unable to read all data
 	tar: Unable to read all data	
 	.: 10: can"t open /etc/sysconfig/config

Re: [Devil-Linux-discuss] fw question

[<gro...@un...>]

That was exactly the problem!
Thank you guys...


Mensaje citado por Dick Middleton <di...@li...>:

> gro...@un... wrote:
> > Hi Moray.
> > I had already tried that, but when I run /etc/init.d/firewall.rules t=
here's
> a
> > message that says "iproute not found" and the rules aren't reloaded. =
I
> don't
> > know why but when I reboot this doesn't happen and the script runs
> normally.
> > Next is part of the script where I think the mistake must be in:
> >
> > LSMOD=3D"sbin/lsmod"
> > MODPROBE=3D"sbin/modprobe"
> > IPTABLES=3D"usr/sbin/iptables"
> > IPTABLES_RESTORE=3D"usr/sbin/iptables-restore"
> > IP=3D"usr/sbin/ip"
> > LOGGER=3D"usr/bin/logger"
>
> There's no leading '/' on your paths.  You need to fix this in fwbuilde=
r
>   under, I think, OS options.
>
> Dick
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>




---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP

Re: [Devil-Linux-discuss] fw question

[Dick M. <di...@li...>]

gro...@un... wrote:
> Hi Moray.
> I had already tried that, but when I run /etc/init.d/firewall.rules there's a
> message that says "iproute not found" and the rules aren't reloaded. I don't
> know why but when I reboot this doesn't happen and the script runs normally.
> Next is part of the script where I think the mistake must be in:
> 
> LSMOD="sbin/lsmod"
> MODPROBE="sbin/modprobe"
> IPTABLES="usr/sbin/iptables"
> IPTABLES_RESTORE="usr/sbin/iptables-restore"
> IP="usr/sbin/ip"
> LOGGER="usr/bin/logger"

There's no leading '/' on your paths.  You need to fix this in fwbuilder 
  under, I think, OS options.

Dick

Re: [Devil-Linux-discuss] fw question

[Matthew H. <mat...@va...>]

Ignore me, im being an idiot.

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
gro...@un...
Sent: 06 June 2006 17:20
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] fw question

Hi Moray.
I had already tried that, but when I run /etc/init.d/firewall.rules =
there's a
message that says "iproute not found" and the rules aren't reloaded. I =
don't
know why but when I reboot this doesn't happen and the script runs =
normally.
Next is part of the script where I think the mistake must be in:

LSMOD=3D"sbin/lsmod"
MODPROBE=3D"sbin/modprobe"
IPTABLES=3D"usr/sbin/iptables"
IPTABLES_RESTORE=3D"usr/sbin/iptables-restore"
IP=3D"usr/sbin/ip"
LOGGER=3D"usr/bin/logger"

if $IP link ls >/dev/null 2>&1; then
  echo;
else
  echo "iproute not found"
  exit 1
fi

echo 1 > /proc/sys/net/ipv4/conf/all/accept_redirects

echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout

echo 1800 > /proc/sys/net/ipv4/tcp_keepalive_intvl

I checked all the routes (specially usr/bin/ip) and they are correct =
(besides,
it works fine when I reboot, as I said).
Something important I ommited before: the machine running DL boots from =
a CD and
loads etc.tar.bz2 from the floppy drive, it has no hard drive.
Any clues?

Thanks

Gustavo



Mensaje citado por Moray McConnachie <mmc...@ox...>:

> Sorry, my mistake, didn't quite read it correctly. I see that you are
> updating the copy on the floppy (presumably in the archive file). Best =
would
> be to update the file on the server first (before updating on the =
floppy),
> then you can test it before you save it to the config. You can get it =
onto
> the server using scp, if your server is running ssh. Then you can run =
it
> using /etc/init.d/firewall.rules to test.
>
> Once it is on the server, you can save it (like your whole config) =
with
> save-config, or write it directly on the floppy the way you have been.
>
> Yours,
> Moray
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: Moray McConnachie
> Sent: 06 June 2006 15:34
> To: 'dev...@li...'
> Subject: RE: [Devil-Linux-discuss] fw question
>
> Yes, just run the rules using /etc/init.d/firewall.rules.
>
> M.
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf =
Of
> gro...@un...
> Sent: 06 June 2006 15:30
> To: dev...@li...
> Subject: [Devil-Linux-discuss] fw question
>
> Hi all!
> I'm a really new user in DL world so I apologize if this is a dumb =
question.
> I configured it to use as a firewall with fwbuilder to generate rules.
> I=B4ve installed fwbuilder in another machine which I use to compile =
the rules
> and update /etc/init.d/firewall.rules in the floppy. Then I reboot the
> firewall so it loads the new configuration. The question is: is there =
a way I
> can reload the firewall's rules avoiding a reboot?
> Thank you very much
>
> Gustavo
>
> ---------------------------------------------------------
> Este mensaje ha sido enviado desde WebMail UNR usando IMP
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>




---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP



_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] fw question

[Moray M. <mmc...@ox...>]

Is it possible you are not running the script as root? Also, it's =
probably just a typo in your mail, but you wrote in your email =
"specially usr/bin/ip", and the script says /usr/sbin/ip... ?

M.

-------------------------------------=20
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
gro...@un...
Sent: 06 June 2006 17:20
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] fw question

Hi Moray.
I had already tried that, but when I run /etc/init.d/firewall.rules =
there's a message that says "iproute not found" and the rules aren't =
reloaded. I don't know why but when I reboot this doesn't happen and the =
script runs normally.
Next is part of the script where I think the mistake must be in:

LSMOD=3D"sbin/lsmod"
MODPROBE=3D"sbin/modprobe"
IPTABLES=3D"usr/sbin/iptables"
IPTABLES_RESTORE=3D"usr/sbin/iptables-restore"
IP=3D"usr/sbin/ip"
LOGGER=3D"usr/bin/logger"

if $IP link ls >/dev/null 2>&1; then
  echo;
else
  echo "iproute not found"
  exit 1
fi

echo 1 > /proc/sys/net/ipv4/conf/all/accept_redirects

echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout

echo 1800 > /proc/sys/net/ipv4/tcp_keepalive_intvl

I checked all the routes (specially usr/bin/ip) and they are correct =
(besides, it works fine when I reboot, as I said).
Something important I ommited before: the machine running DL boots from =
a CD and loads etc.tar.bz2 from the floppy drive, it has no hard drive.
Any clues?

Thanks

Gustavo



Mensaje citado por Moray McConnachie <mmc...@ox...>:

> Sorry, my mistake, didn't quite read it correctly. I see that you are=20
> updating the copy on the floppy (presumably in the archive file). Best =

> would be to update the file on the server first (before updating on=20
> the floppy), then you can test it before you save it to the config.=20
> You can get it onto the server using scp, if your server is running=20
> ssh. Then you can run it using /etc/init.d/firewall.rules to test.
>
> Once it is on the server, you can save it (like your whole config)=20
> with save-config, or write it directly on the floppy the way you have =
been.
>
> Yours,
> Moray
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: Moray McConnachie
> Sent: 06 June 2006 15:34
> To: 'dev...@li...'
> Subject: RE: [Devil-Linux-discuss] fw question
>
> Yes, just run the rules using /etc/init.d/firewall.rules.
>
> M.
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf=20
> Of gro...@un...
> Sent: 06 June 2006 15:30
> To: dev...@li...
> Subject: [Devil-Linux-discuss] fw question
>
> Hi all!
> I'm a really new user in DL world so I apologize if this is a dumb =
question.
> I configured it to use as a firewall with fwbuilder to generate rules.
> I=B4ve installed fwbuilder in another machine which I use to compile =
the=20
> rules and update /etc/init.d/firewall.rules in the floppy. Then I=20
> reboot the firewall so it loads the new configuration. The question=20
> is: is there a way I can reload the firewall's rules avoiding a =
reboot?
> Thank you very much
>
> Gustavo
>
> ---------------------------------------------------------
> Este mensaje ha sido enviado desde WebMail UNR usando IMP
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>




---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP



_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss


=20

Re: [Devil-Linux-discuss] fw question

[Matthew H. <mat...@va...>]

Shouldn't the command be "ip route" not iproute?

Just something to grep for.

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
gro...@un...
Sent: 06 June 2006 17:20
To: dev...@li...
Subject: Re: [Devil-Linux-discuss] fw question

Hi Moray.
I had already tried that, but when I run /etc/init.d/firewall.rules =
there's a
message that says "iproute not found" and the rules aren't reloaded. I =
don't
know why but when I reboot this doesn't happen and the script runs =
normally.
Next is part of the script where I think the mistake must be in:

LSMOD=3D"sbin/lsmod"
MODPROBE=3D"sbin/modprobe"
IPTABLES=3D"usr/sbin/iptables"
IPTABLES_RESTORE=3D"usr/sbin/iptables-restore"
IP=3D"usr/sbin/ip"
LOGGER=3D"usr/bin/logger"

if $IP link ls >/dev/null 2>&1; then
  echo;
else
  echo "iproute not found"
  exit 1
fi

echo 1 > /proc/sys/net/ipv4/conf/all/accept_redirects

echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout

echo 1800 > /proc/sys/net/ipv4/tcp_keepalive_intvl

I checked all the routes (specially usr/bin/ip) and they are correct =
(besides,
it works fine when I reboot, as I said).
Something important I ommited before: the machine running DL boots from =
a CD and
loads etc.tar.bz2 from the floppy drive, it has no hard drive.
Any clues?

Thanks

Gustavo



Mensaje citado por Moray McConnachie <mmc...@ox...>:

> Sorry, my mistake, didn't quite read it correctly. I see that you are
> updating the copy on the floppy (presumably in the archive file). Best =
would
> be to update the file on the server first (before updating on the =
floppy),
> then you can test it before you save it to the config. You can get it =
onto
> the server using scp, if your server is running ssh. Then you can run =
it
> using /etc/init.d/firewall.rules to test.
>
> Once it is on the server, you can save it (like your whole config) =
with
> save-config, or write it directly on the floppy the way you have been.
>
> Yours,
> Moray
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: Moray McConnachie
> Sent: 06 June 2006 15:34
> To: 'dev...@li...'
> Subject: RE: [Devil-Linux-discuss] fw question
>
> Yes, just run the rules using /etc/init.d/firewall.rules.
>
> M.
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf =
Of
> gro...@un...
> Sent: 06 June 2006 15:30
> To: dev...@li...
> Subject: [Devil-Linux-discuss] fw question
>
> Hi all!
> I'm a really new user in DL world so I apologize if this is a dumb =
question.
> I configured it to use as a firewall with fwbuilder to generate rules.
> I=B4ve installed fwbuilder in another machine which I use to compile =
the rules
> and update /etc/init.d/firewall.rules in the floppy. Then I reboot the
> firewall so it loads the new configuration. The question is: is there =
a way I
> can reload the firewall's rules avoiding a reboot?
> Thank you very much
>
> Gustavo
>
> ---------------------------------------------------------
> Este mensaje ha sido enviado desde WebMail UNR usando IMP
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>




---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP



_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] fw question

[<gro...@un...>]

Hi Moray.
I had already tried that, but when I run /etc/init.d/firewall.rules there=
's a
message that says "iproute not found" and the rules aren't reloaded. I do=
n't
know why but when I reboot this doesn't happen and the script runs normal=
ly.
Next is part of the script where I think the mistake must be in:

LSMOD=3D"sbin/lsmod"
MODPROBE=3D"sbin/modprobe"
IPTABLES=3D"usr/sbin/iptables"
IPTABLES_RESTORE=3D"usr/sbin/iptables-restore"
IP=3D"usr/sbin/ip"
LOGGER=3D"usr/bin/logger"

if $IP link ls >/dev/null 2>&1; then
  echo;
else
  echo "iproute not found"
  exit 1
fi

echo 1 > /proc/sys/net/ipv4/conf/all/accept_redirects

echo 30 > /proc/sys/net/ipv4/tcp_fin_timeout

echo 1800 > /proc/sys/net/ipv4/tcp_keepalive_intvl

I checked all the routes (specially usr/bin/ip) and they are correct (bes=
ides,
it works fine when I reboot, as I said).
Something important I ommited before: the machine running DL boots from a=
 CD and
loads etc.tar.bz2 from the floppy drive, it has no hard drive.
Any clues?

Thanks

Gustavo



Mensaje citado por Moray McConnachie <mmc...@ox...>:

> Sorry, my mistake, didn't quite read it correctly. I see that you are
> updating the copy on the floppy (presumably in the archive file). Best =
would
> be to update the file on the server first (before updating on the flopp=
y),
> then you can test it before you save it to the config. You can get it o=
nto
> the server using scp, if your server is running ssh. Then you can run i=
t
> using /etc/init.d/firewall.rules to test.
>
> Once it is on the server, you can save it (like your whole config) with
> save-config, or write it directly on the floppy the way you have been.
>
> Yours,
> Moray
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: Moray McConnachie
> Sent: 06 June 2006 15:34
> To: 'dev...@li...'
> Subject: RE: [Devil-Linux-discuss] fw question
>
> Yes, just run the rules using /etc/init.d/firewall.rules.
>
> M.
>
>
> -------------------------------------
> Moray McConnachie
> IS Manager        +44 1865 261 600
> Oxford Analytica  http://www.oxan.com
>
> -----Original Message-----
> From: dev...@li...
> [mailto:dev...@li...] On Behalf Of
> gro...@un...
> Sent: 06 June 2006 15:30
> To: dev...@li...
> Subject: [Devil-Linux-discuss] fw question
>
> Hi all!
> I'm a really new user in DL world so I apologize if this is a dumb ques=
tion.
> I configured it to use as a firewall with fwbuilder to generate rules.
> I=B4ve installed fwbuilder in another machine which I use to compile th=
e rules
> and update /etc/init.d/firewall.rules in the floppy. Then I reboot the
> firewall so it loads the new configuration. The question is: is there a=
 way I
> can reload the firewall's rules avoiding a reboot?
> Thank you very much
>
> Gustavo
>
> ---------------------------------------------------------
> Este mensaje ha sido enviado desde WebMail UNR usando IMP
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>
>
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>




---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP

Re: [Devil-Linux-discuss] fw question

[Moray M. <mmc...@ox...>]

Sorry, my mistake, didn't quite read it correctly. I see that you are =
updating the copy on the floppy (presumably in the archive file). Best =
would be to update the file on the server first (before updating on the =
floppy), then you can test it before you save it to the config. You can =
get it onto the server using scp, if your server is running ssh. Then =
you can run it using /etc/init.d/firewall.rules to test.=20

Once it is on the server, you can save it (like your whole config) with =
save-config, or write it directly on the floppy the way you have been.

Yours,
Moray 	=20


-------------------------------------=20
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: Moray McConnachie=20
Sent: 06 June 2006 15:34
To: 'dev...@li...'
Subject: RE: [Devil-Linux-discuss] fw question

Yes, just run the rules using /etc/init.d/firewall.rules.

M.


-------------------------------------
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
gro...@un...
Sent: 06 June 2006 15:30
To: dev...@li...
Subject: [Devil-Linux-discuss] fw question

Hi all!
I'm a really new user in DL world so I apologize if this is a dumb =
question.
I configured it to use as a firewall with fwbuilder to generate rules.
I=B4ve installed fwbuilder in another machine which I use to compile the =
rules and update /etc/init.d/firewall.rules in the floppy. Then I reboot =
the firewall so it loads the new configuration. The question is: is =
there a way I can reload the firewall's rules avoiding a reboot?
Thank you very much

Gustavo

---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP



_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss


=20

Re: [Devil-Linux-discuss] fw question

[Niklas S. <ni...@ni...>]

Hi Gustavo,

you just have to execute the firewall script again to update the rules.
The script should flush all chains and then set the rules.

nick..


gro...@un... wrote:
> Hi all!
> I'm a really new user in DL world so I apologize if this is a dumb ques=
tion.
> I configured it to use as a firewall with fwbuilder to generate rules.
> I=B4ve installed fwbuilder in another machine which I use to compile th=
e rules
> and update /etc/init.d/firewall.rules in the floppy. Then I reboot the =
firewall
> so it loads the new configuration. The question is: is there a way I ca=
n reload
> the firewall's rules avoiding a reboot?
> Thank you very much
>=20
> Gustavo
>=20
> ---------------------------------------------------------
> Este mensaje ha sido enviado desde WebMail UNR usando IMP
>=20
>=20
>=20
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [Devil-Linux-discuss] fw question

[Moray M. <mmc...@ox...>]

Yes, just run the rules using /etc/init.d/firewall.rules.

M.


-------------------------------------=20
Moray McConnachie
IS Manager        +44 1865 261 600
Oxford Analytica  http://www.oxan.com

-----Original Message-----
From: dev...@li... =
[mailto:dev...@li...] On Behalf Of =
gro...@un...
Sent: 06 June 2006 15:30
To: dev...@li...
Subject: [Devil-Linux-discuss] fw question

Hi all!
I'm a really new user in DL world so I apologize if this is a dumb =
question.
I configured it to use as a firewall with fwbuilder to generate rules.
I=B4ve installed fwbuilder in another machine which I use to compile the =
rules and update /etc/init.d/firewall.rules in the floppy. Then I reboot =
the firewall so it loads the new configuration. The question is: is =
there a way I can reload the firewall's rules avoiding a reboot?
Thank you very much

Gustavo

---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP



_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss


=20

[Devil-Linux-discuss] fw question

[<gro...@un...>]

Hi all!
I'm a really new user in DL world so I apologize if this is a dumb questi=
on.
I configured it to use as a firewall with fwbuilder to generate rules.
I=B4ve installed fwbuilder in another machine which I use to compile the =
rules
and update /etc/init.d/firewall.rules in the floppy. Then I reboot the fi=
rewall
so it loads the new configuration. The question is: is there a way I can =
reload
the firewall's rules avoiding a reboot?
Thank you very much

Gustavo

---------------------------------------------------------
Este mensaje ha sido enviado desde WebMail UNR usando IMP

Re: [Devil-Linux-discuss] Devil Linux on engadget

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Wed, May 31, 2006 23:57, Obrien, Haskell W. wrote:
> Hi guys,
> Just thought I'd mention my (really, really basic) how-to that featured
> devil linux on engadget:
> http://www.engadget.com/2006/05/30/how-to-build-your-own-network-firewall
> /
>
>
> Thanks for the distro, I'm a big fan of it. It's served me well for
> several years now.

Thanks for the great article!
I added it to our website under Product Information / Press articles.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iEYEARECAAYFAkSE1dMACgkQUcytMSbs+YWlJgCggdAVqiEi1LRevwpazce869VR
odQAoKAUUqKRoFI7ijMCTZAfSfJWh0Kz
=ftUp
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] smbldap-tools

[Andrea F. <af...@fa...>]

Hi all,

I am wondering if such package is in dl. I have checked in the current 
1.2.9, and seems they aren't. Any plan to include them, there is any 
alternative and so?

Regards,
Andrea Fino

-- 
Andrea Fino 8-) - "Sistemi su misura di qualita' industriale"
      "Handcrafted systems with industrial quality"
[Web: http://www.faino.org ]+[Email: af...@fa... ]

Re: [Devil-Linux-discuss] Devil Linux on engadget

[Bruce S. <bw...@ar...>]

> Hi guys,
> Just thought I'd mention my (really, really basic) how-to that featured devil linux on engadget:
> http://www.engadget.com/2006/05/30/how-to-build-your-own-network-firewall/
> 
> Thanks for the distro, I'm a big fan of it. It's served me well for several years now.
> 
> Will

Thanks for the article!  
Please submit it to some news sites to spread the word.  :-)

 - BS