devil-linux-discuss — General Mailing List for all discussions

[Devil-Linux-discuss] Devil Linux on engadget

[Obrien, H. W. <ob...@mo...>]

Hi guys,
Just thought I'd mention my (really, really basic) how-to that featured =
devil linux on engadget:
http://www.engadget.com/2006/05/30/how-to-build-your-own-network-firewall=
/

Thanks for the distro, I'm a big fan of it. It's served me well for =
several years now.

Will

Re: [Devil-Linux-discuss] offer:New package in DL!

[Bruce S. <bw...@ar...>]

> Hi, this is my first compilation for the DL-distro - please help me if there are any bugs.
> Feature: Adds Tor (http://tor.eff.org) functionality into DL.
> 
> Why this?
> - ---------
> 
> I think it is important to have some freedom in the internet and don´t let 3rd parties
> make money with my own personal information - especially when i´am not knowing this!
> That was the reason i gave Tor a try. I liked it much and after a few days i was setting
> up my own Tor-server.
> Unfortunately there was no tor-package in DL. So i have to install a second machine inside
> my net and forward traffic to that PC. This works but it is not very economic, cause my
> Firewall has enough resources to handle this. That was the time i digged into the
> buildsystem of DL and now Tor works. ;-D
> 
> I´am not an expert and maybe there are good reasons not to include such packages, let´s
> discuss it!

I saw a presentation given a Tor developer on DVD, and tried the client
afterwords.  It's a good package, and I have no objection to adding the
server to DL.  I vote "yes" to adding Tor.

BTW, I'm not sure how safe it is to run the Tor server on a firewall, as
you seem to want to do.  But that's up to you ...   :-)

 - BS

[Devil-Linux-discuss] Ping

[Bruce S. <bw...@ar...>]

Just testing the mailing lists after the Mailman upgrade.
Please ignore.

- BS

[Devil-Linux-discuss] offer:New package in DL!

[Oliver N. <dig...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi, this is my first compilation for the DL-distro - please help me if there are any bugs.

Feature: Adds Tor (http://tor.eff.org) functionality into DL.


Why this?
- ---------

I think it is important to have some freedom in the internet and don´t let 3rd parties
make money with my own personal information - especially when i´am not knowing this!
That was the reason i gave Tor a try. I liked it much and after a few days i was setting
up my own Tor-server.
Unfortunately there was no tor-package in DL. So i have to install a second machine inside
my net and forward traffic to that PC. This works but it is not very economic, cause my
Firewall has enough resources to handle this. That was the time i digged into the
buildsystem of DL and now Tor works. ;-D

I´am not an expert and maybe there are good reasons not to include such packages, let´s
discuss it!


Important informations:
- -----------------------

- - Please read the informations on the tor site, before activating the program!

- - I´am interested in the SERVER-functionality of tor, that means you´re NOT anonymous by
  using this package by default!! For this install Tor and needed tools on each of your
clients.

- - You have to send mail to the tor-guys and "activate" your tor-server before someone can
use your service! More info on the Tor project page.

- - Tor needs more memory than usual programs - keep this in mind!

- - Tor makes a lot of connections, limit bandwith if necessary.


Hope that helps a bit :)


Heiko:
- ------
If you think this is useful for DL, i can give you the necessary scripts, but i have to do
some finetuning before (for now tor starts as root, which isn´t what i want!)

Requirements:

Tor needs libevent you can find it here: http://www.monkey.org/~provos/libevent
Tor itself is here: http://tor.eff.org/download.html.en


And the best:
- ---------------
If you don´t want all this, just deacivate this in the config, like every package in DL.
That´s the coolest thing ;-)


Oliver Niesner
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFEfWVf724ZL5LNhNcRAkT1AJ45j4TxGXtuvQ91ptVH4vGP6g+ltgCfZr2M
LORV4pfROO/dsFoCCHIf5ro=
=JxMp
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] quagga update

[Thomas B. <th...@ho...>]

Hi,

It would be nice, if quagga could be updated in the next release.
There are some necessary security fixes in 0.98.6.

Thanks,
Thomas

Re: [Devil-Linux-discuss] Vsftpd - Login incorrect

[Alessandro C. <a.c...@ti...>]

Bruce,

Anonynous works fine (if enabled in vsftpd.conf), I've enabled and checked 
my syslog and this is what I get:


(in case of user that is NOT in vsftpd.users)

Apr 27 17:50:51 src@lucyfer vsftpd: Thu Apr 27 17:50:51 2006 [pid 1413] 
CONNECT: Client "11.0.0.20"
Apr 27 17:50:51 src@lucyfer vsftpd: Thu Apr 27 17:50:51 2006 [pid 1412] 
[root] FAIL LOGIN: Client "11.0.0.20"



(in case of user that is in vsftpd.users)

Apr 27 17:51:39 src@lucyfer vsftpd: Thu Apr 27 17:51:39 2006 [pid 1417] 
CONNECT: Client "11.0.0.20"
Apr 27 17:51:39 src@lucyfer vsftpd: pam_listfile(vsftpd:auth): Refused user 
root for service vsftpd
Apr 27 17:51:41 src@lucyfer vsftpd: Thu Apr 27 17:51:41 2006 [pid 1416] 
[root] FAIL LOGIN: Client "11.0.0.20"


in Both cases I still get the error '530 Login refused'.

I'll try your pam scripts...


----- Original Message ----- 
From: "Bruce Smith" <bw...@ar...>
To: <dev...@li...>
Sent: Wednesday, May 24, 2006 9:15 PM
Subject: Re: [Devil-Linux-discuss] Vsftpd - Login incorrect


> Did you check the logs, as I suggested before, to make sure you're not
> wasting your time with pam?  I hate to "assume" pam is the problem, only
> to waste a ton of time and find it was something else later.
>
> Also, does anonymous access work?
>
> When you get this working, PLEASE send us your pam file (or whatever it
> turns to out be causing the problem) so we can add it to the DL CD. ***
>
> I'm not a pam expert either, but here are some examples that may help:
>
>
>>From a SuSE 10.1 box of mine:
>
> ======================================================================
> #%PAM-1.0
>
> # Uncomment this to achieve what used to be ftpd -A.
> # auth       required     pam_listfile.so item=user sense=allow
> file=/etc/ftpchroot onerr=fail
>
> auth     required       pam_listfile.so item=user sense=deny 
> file=/etc/ftpusers onerr=succeed
> # Uncomment the following line for anonymous ftp.
> #auth    sufficient     pam_ftp.so
> auth     required       pam_unix2.so
> auth     required       pam_shells.so
> account  required       pam_unix2.so
> password required       pam_unix2.so
> session  required       pam_unix2.so
> ======================================================================
>
>
>>From the vsftpd source tarfile, example for a "Redhat" system:
>
> ======================================================================
> #%PAM-1.0
> auth       required     /lib/security/pam_listfile.so item=user sense=deny 
> file=/etc/ftpusers onerr=succeed
> auth       required     /lib/security/pam_pwdb.so shadow nullok
> auth       required     /lib/security/pam_shells.so
> account    required     /lib/security/pam_pwdb.so
> session    required     /lib/security/pam_pwdb.so
>
> ======================================================================
>
>
> Virtural Users example from the vsftpd source tarfile:
>
> ======================================================================
> auth required /lib/security/pam_userdb.so db=/etc/vsftpd_login
> account required /lib/security/pam_userdb.so db=/etc/vsftpd_login
> ======================================================================
>
> - BS
>
>
>> I suspected that, but I don't know anything about PAM.
>>
>> I had allready tried to add that line and create an vsftpd file in
>> /etc/pam.d/ but I don't know exactly what comands I need to put in that
>> file. Do you have an Idea?
>>
>> I tried this :
>>
>> auth    sufficient  pam_ftp.so
>> auth    required    pam_unix_auth.so use_first_pass
>> auth    required /lib/security/pam_listfile.so item=user sense=deny
>> file=/etc/vsftpd.users onerr=succeed
>>
>> the user I'm trying to login with is not in the /etc/vsftpd.users file...
>>
>> Is that ok?
>
>> Ciao
>>
>> ----- Original Message ----- 
>> From: "Bruce Smith" <bw...@ar...>
>> To: <dev...@li...>
>> Sent: Tuesday, May 23, 2006 10:41 PM
>> Subject: Re: [Devil-Linux-discuss] Vsftpd - Login incorrect
>>
>>
>> >> I've configured my brand new Devil-Linux 1.2.9 (I was ugrading from an
>> >> old
>> >> version) and configuring vsftpd I keep getting the same problem:
>> >>
>> >> Any user I try to login (even root!) I get "530 Login Incorrect".
>> >
>> > I suspect it has something to do with PAM.
>> > Check your syslog messages and/or dmesg for a better error message.
>> >
>> > Or try adding this line to your vsftpd.conf file:
>> >
>> >
>> > pam_service_name=vsftpd
>> >
>> >
>> > - BS
>
>
>
>
> -------------------------------------------------------
> All the advantages of Linux Managed Hosting--Without the Cost and Risk!
> Fully trained technicians. The highest number of Red Hat certifications in
> the hosting industry. Fanatical Support. Click to learn more
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss 

[Devil-Linux-discuss] rbldnsd for DL 1.2.9

[Dick M. <di...@li...>]

Anybody got a binary of rbldnsd for DL 1.2.9 that I could copy to my
system so I can muck-about with it?  Save me rebuilding the system.

Thanks

Dick

Re: [Devil-Linux-discuss] Vsftpd - Login incorrect

[Bruce S. <bw...@ar...>]

Did you check the logs, as I suggested before, to make sure you're not
wasting your time with pam?  I hate to "assume" pam is the problem, only
to waste a ton of time and find it was something else later.

Also, does anonymous access work?

When you get this working, PLEASE send us your pam file (or whatever it
turns to out be causing the problem) so we can add it to the DL CD. ***

I'm not a pam expert either, but here are some examples that may help:


>From a SuSE 10.1 box of mine:

======================================================================
#%PAM-1.0

# Uncomment this to achieve what used to be ftpd -A.
# auth       required     pam_listfile.so item=user sense=allow
file=/etc/ftpchroot onerr=fail

auth     required       pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
# Uncomment the following line for anonymous ftp.
#auth    sufficient     pam_ftp.so
auth     required       pam_unix2.so
auth     required       pam_shells.so
account  required       pam_unix2.so
password required       pam_unix2.so
session  required       pam_unix2.so
======================================================================


>From the vsftpd source tarfile, example for a "Redhat" system:

======================================================================
#%PAM-1.0
auth       required     /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
auth       required     /lib/security/pam_pwdb.so shadow nullok
auth       required     /lib/security/pam_shells.so
account    required     /lib/security/pam_pwdb.so
session    required     /lib/security/pam_pwdb.so

======================================================================


Virtural Users example from the vsftpd source tarfile:

======================================================================
auth required /lib/security/pam_userdb.so db=/etc/vsftpd_login
account required /lib/security/pam_userdb.so db=/etc/vsftpd_login
======================================================================

 - BS


> I suspected that, but I don't know anything about PAM.
> 
> I had allready tried to add that line and create an vsftpd file in 
> /etc/pam.d/ but I don't know exactly what comands I need to put in that 
> file. Do you have an Idea?
> 
> I tried this :
> 
> auth    sufficient  pam_ftp.so
> auth    required    pam_unix_auth.so use_first_pass
> auth    required /lib/security/pam_listfile.so item=user sense=deny 
> file=/etc/vsftpd.users onerr=succeed
> 
> the user I'm trying to login with is not in the /etc/vsftpd.users file...
> 
> Is that ok?

> Ciao
> 
> ----- Original Message ----- 
> From: "Bruce Smith" <bw...@ar...>
> To: <dev...@li...>
> Sent: Tuesday, May 23, 2006 10:41 PM
> Subject: Re: [Devil-Linux-discuss] Vsftpd - Login incorrect
> 
> 
> >> I've configured my brand new Devil-Linux 1.2.9 (I was ugrading from an 
> >> old
> >> version) and configuring vsftpd I keep getting the same problem:
> >>
> >> Any user I try to login (even root!) I get "530 Login Incorrect".
> >
> > I suspect it has something to do with PAM.
> > Check your syslog messages and/or dmesg for a better error message.
> >
> > Or try adding this line to your vsftpd.conf file:
> >
> >
> > pam_service_name=vsftpd
> >
> >
> > - BS

Re: [Devil-Linux-discuss] Vsftpd - Login incorrect

[Alessandro C. <a.c...@ti...>]

I suspected that, but I don't know anything about PAM.

I had allready tried to add that line and create an vsftpd file in 
/etc/pam.d/ but I don't know exactly what comands I need to put in that 
file. Do you have an Idea?

I tried this :

auth    sufficient  pam_ftp.so
auth    required    pam_unix_auth.so use_first_pass
auth    required /lib/security/pam_listfile.so item=user sense=deny 
file=/etc/vsftpd.users onerr=succeed

the user I'm trying to login with is not in the /etc/vsftpd.users file...

Is that ok?

Ciao

----- Original Message ----- 
From: "Bruce Smith" <bw...@ar...>
To: <dev...@li...>
Sent: Tuesday, May 23, 2006 10:41 PM
Subject: Re: [Devil-Linux-discuss] Vsftpd - Login incorrect


>> I've configured my brand new Devil-Linux 1.2.9 (I was ugrading from an 
>> old
>> version) and configuring vsftpd I keep getting the same problem:
>>
>> Any user I try to login (even root!) I get "530 Login Incorrect".
>
> I suspect it has something to do with PAM.
> Check your syslog messages and/or dmesg for a better error message.
>
> Or try adding this line to your vsftpd.conf file:
>
>
> pam_service_name=vsftpd
>
>
> - BS
>
>
>
>
> -------------------------------------------------------
> All the advantages of Linux Managed Hosting--Without the Cost and Risk!
> Fully trained technicians. The highest number of Red Hat certifications in
> the hosting industry. Fanatical Support. Click to learn more
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=107521&bid=248729&dat=121642
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
> 

Re: [Devil-Linux-discuss] Vsftpd - Login incorrect

[Bruce S. <bw...@ar...>]

> I've configured my brand new Devil-Linux 1.2.9 (I was ugrading from an old 
> version) and configuring vsftpd I keep getting the same problem:
> 
> Any user I try to login (even root!) I get "530 Login Incorrect".

I suspect it has something to do with PAM.
Check your syslog messages and/or dmesg for a better error message.

Or try adding this line to your vsftpd.conf file:


pam_service_name=vsftpd


 - BS

[Devil-Linux-discuss] Vsftpd - Login incorrect

[Alessandro C. <a.c...@ti...>]

Hi all,

I've configured my brand new Devil-Linux 1.2.9 (I was ugrading from an old 
version) and configuring vsftpd I keep getting the same problem:

Any user I try to login (even root!) I get "530 Login Incorrect".

My vsftpd.conf:

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=002
dirmessage_enable=YES
connect_from_port_20=YES
idle_session_timeout=600
data_connection_timeout=120
nopriv_user=nobody
async_abor_enable=YES
ascii_upload_enable=YES
ascii_download_enable=YES
chroot_list_enable=YES
chroot_list_file=/etc/vsftpd.chroot_list
chroot_local_user=NO
listen=YES
text_userdb_names=YES
userlist_enable=NO
userlist_deny=NO
userlist_file=/etc/vsftpd.users
secure_chroot_dir=/var/empty
dual_log_enable=NO
xferlog_file=/floppy/users/log/vsftpd.log
xferlog_std_format=NO
xferlog_enable=NO
syslog_enable=NO
check_shell=YES
background=YES
 
 
 My old Devil linux was working fine with the same configuration, what's 
 wrong with this new one?
 
 Ciao 

Re: [Devil-Linux-discuss] Just ran across this package.

[<ee...@fr...>]

Bruce Smith a =E9crit :
> Anyone have any experience with it (good or bad)?
> Something we should add to DL?
Hi,

the best thing to do to have experience with it is to add it ;-)

I've already done some work on ulogd few month ago ...

I'll look at it as soon as I can get sparetime ...

MaNU

>
> http://iptablesweb.sourceforge.net/
>
>  - BS
>
>
>
>


--

[Devil-Linux-discuss] Just ran across this package.

[Bruce S. <br...@ar...>]

Anyone have any experience with it (good or bad)?
Something we should add to DL?

http://iptablesweb.sourceforge.net/

 - BS

Re: [Devil-Linux-discuss] build cvs hangs on busybox!

[Oliver N. <dig...@gm...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sorry for the delay - i was out of office a few days.

> 
> 
> what does /data/build/tmp/LOGS/build/busybox say?

> root:/data/build/tmp/LOGS/build# cat busybox
> ls: /usr/*-linux-uclibc/usr/bin: No such file or directory
> ls: /usr/*-linux-uclibc/lib: No such file or directory
> ls: /usr/*-linux-uclibc/bin: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-ld: No such file or directory
> make[1]: Entering directory `/data/build/tmp/busybox-1.1.2'
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-ld: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-gcc: No such file or directory
> /bin/sh: /i386-uclibc-ld: No such file or directory
>   HOSTCC conf.o
>   HOSTCC zconf.tab.o
>   HOSTCC conf
> .config:231: trying to assign nonexistent symbol CONFIG_POWEROFF
> .config:232: trying to assign nonexistent symbol CONFIG_REBOOT
> .config:330: trying to assign nonexistent symbol CONFIG_SYSCTL
> .config:402: trying to assign nonexistent symbol CONFIG_NFSMOUNT
> .config:404: trying to assign nonexistent symbol CONFIG_FEATURE_MOUNT_FORCE
> #
> # using defaults found in .config
> #
> *
> * BusyBox Configuration
> *
> *
> * Busybox Settings
> *
> *
> * General Configuration
> *
> Buffer allocation policy
>> 1. Allocate with Malloc (CONFIG_FEATURE_BUFFERS_USE_MALLOC)
>   2. Allocate on the Stack (CONFIG_FEATURE_BUFFERS_GO_ON_STACK)
>   3. Allocate in the .bss section (CONFIG_FEATURE_BUFFERS_GO_IN_BSS)
> choice[1-3?]: 1
> Show verbose applet usage messages (CONFIG_FEATURE_VERBOSE_USAGE) [N/y/?] n
> Support --install [-s] to install applet links at runtime (CONFIG_FEATURE_INSTALLER) [N/y/?] n
> Enable locale support (system needs locale for this to work) (CONFIG_LOCALE_SUPPORT) [N/y/?] n
> Support for devfs (CONFIG_FEATURE_DEVFS) [Y/n/?] y
> Use the devpts filesystem for Unix98 PTYs (CONFIG_FEATURE_DEVPTS) [Y/n/?] y
> Clean up all memory before exiting (usually not needed) (CONFIG_FEATURE_CLEAN_UP) [N/y/?] n
> Support for SUID/SGID handling (CONFIG_FEATURE_SUID) [Y/n/?] y
>   Runtime SUID/SGID configuration via /etc/busybox.conf (CONFIG_FEATURE_SUID_CONFIG) [N/y/?] n
> Support NSA Security Enhanced Linux (CONFIG_SELINUX) [N/y/?] n
> *
> * Build Options
> *
> Build BusyBox as a static binary (no shared libs) (CONFIG_STATIC) [Y/n/?] y
> Build with Large File Support (for accessing files > 2 GB) (CONFIG_LFS) [N/y/?] n
> Do you want to build BusyBox with a Cross Compiler? (USING_CROSS_COMPILER) [N/y/?] n
> Any extra CFLAGS options for the compiler? (EXTRA_CFLAGS_OPTIONS) []
> Compile all sources at once (CONFIG_BUILD_AT_ONCE) [N/y/?] (NEW) make[2]: *** [oldconfig] Terminated
> make[1]: *** [oldconfig] Terminated






> 
> problem with the config from /data/build/config/config_busybox?
> 
> I had the same problem last week.
> 
> did you make a:
>     # cvs update -d -P

yes, i will try again this evening..



Thanks for the suggestions!

Olli
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org

iD8DBQFEctpP724ZL5LNhNcRArIkAJoD60IDZaVvDUA/VVOlSelBl37sHQCfbn1a
SFlB4krWMk3g6BDzdUa4/xM=
=0RoR
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] build cvs hangs on busybox!

[Thomas E. <di...@yo...>]

Oliver Niesner wrote:
> 
>>>executing busybox with option build (in /data/build/tmp/busybox-1.1.2)<<
> 
> 
> It seems running, but in another console it is clear that nothing happens..
> 
> 
>>>7400 pts/2    S+     0:00 /bin/bash scripts/build.sh build
>>>8857 pts/2    SN+    0:00 /bin/bash /data/build/scripts/busybox build
>>>8872 pts/2    SN+    0:00 make CROSS= oldconfig
>>>8911 pts/2    SN+    0:00 make -C /data/build/tmp/busybox-1.1.2
>>>top_srcdir=/data/build/tmp/busybox-1.1.2 top_builddir=/data/ 
>>>8947 pts/2    SN+    0:00 ./scripts/config/conf -o
>>>/data/build/tmp/busybox-1.1.2/Config.in
> 
> 


what does /data/build/tmp/LOGS/build/busybox say?

problem with the config from /data/build/config/config_busybox?

I had the same problem last week.

did you make a:
	# cvs update -d -P
today?


HTH!

-- 
thomas

Re: [Devil-Linux-discuss] build cvs hangs on busybox!

[<ee...@fr...>]

Oliver Niesner a =E9crit :
> Hi,
Hi,
>
> after some trouble with the new cvs on sourceforge, i was able to updat=
e
> devil-linux today.
> everything compiles cleanly until busybox script was executet :(
>
>>> executing busybox with option build (in /data/build/tmp/busybox-1.1.2=
)<<
>
> It seems running, but in another console it is clear that nothing happe=
ns..
>
>>> 7400 pts/2    S+     0:00 /bin/bash scripts/build.sh build
>>> 8857 pts/2    SN+    0:00 /bin/bash /data/build/scripts/busybox build
>>> 8872 pts/2    SN+    0:00 make CROSS=3D oldconfig
>>> 8911 pts/2    SN+    0:00 make -C /data/build/tmp/busybox-1.1.2
>>> top_srcdir=3D/data/build/tmp/busybox-1.1.2 top_builddir=3D/data/
>>> 8947 pts/2    SN+    0:00 ./scripts/config/conf -o
>>> /data/build/tmp/busybox-1.1.2/Config.in
>
> Has anyone an idea why this happens?
>

I always had trouble trying to compile DL with smp options enabled for th=
e
compiler (different from the dest architecture)

try setting only one compile thread in the config if relevant

otherwise no more ideas ... long time I didn't build DL ...

MaNU


--

[Devil-Linux-discuss] build cvs hangs on busybox!

[Oliver N. <dig...@gm...>]

Hi,

after some trouble with the new cvs on sourceforge, i was able to update
devil-linux today.
everything compiles cleanly until busybox script was executet :(

>>executing busybox with option build (in /data/build/tmp/busybox-1.1.2)<<

It seems running, but in another console it is clear that nothing happens..

>>7400 pts/2    S+     0:00 /bin/bash scripts/build.sh build
>>8857 pts/2    SN+    0:00 /bin/bash /data/build/scripts/busybox build
>>8872 pts/2    SN+    0:00 make CROSS= oldconfig
>>8911 pts/2    SN+    0:00 make -C /data/build/tmp/busybox-1.1.2
>>top_srcdir=/data/build/tmp/busybox-1.1.2 top_builddir=/data/ 
>>8947 pts/2    SN+    0:00 ./scripts/config/conf -o
>>/data/build/tmp/busybox-1.1.2/Config.in

Has anyone an idea why this happens?

buildmachine: Dual-Xeon
buildos: RHEL4

thx

Olli

-- 
Mobile Internet - E-Mail und Internet immer und überall!
GMX zum Mitnehmen: http://www.gmx.net/de/go/pocketweb

Re: [BULK] Re: [Devil-Linux-discuss] IPSec Problem, extremely weird.

[<Her...@sp...>]

This is off topic but just to share some strange happenings:

We bought a server to run a CAD versioning system W2k3. On that server we
had a share and our CAD staff was accessing this share to store some
solidEdge CAD files. After the second subsequent saving, the server crashed
with a blue screen. (Allways). After tons of screwing arround, reinstalling
OS... we changed to a different type of RAID adapter and all the problems
went away. Now the intresting question: How can an application running on a
client crash a server when it is just storing some files over an SMB
share??? We never found the answer...

Herbert

dev...@li... wrote on 16.05.2006
14:44:40:

>
>
> >
> > Did you try your luck with the Openswan folks? We just use their stock
> > patch without any modifications.
>
> I DID try with them, and below is what Paul Wouters said.
> I didn't try anything yet, but on discussing it over with the
remoteadmin, it
> appears that the crashing servers are all win2k3 without SP1. Those with
SP1
> don't crash. Unfortunately most of these servers belong to Citrix farms,
and
> there seems to be some issue upgrading them to SP1. For the moment we're
back
> to the old version (firewall/*swan), but probably not for too long.
> Anyway, it's hard to believe we're in the third millennium, and people
buy
> expensive operating system software that can be crashed just by sending
them
> a single (totally valid) IP packet :-P
>
> Thanks a lot
>
> Frank
>
> ------------8<-----------
> > I have an extremely weird problem with IPsec tunnels in Devil-Linux:
> >
> > I have two sites that are linked LAN-2-LAN by an IPSec tunnel that runs
on
> > dedicated Linux firewalls.
> >
> > I have upgraded the two firewalls  from gibraltar
> > to Devil-Linux-1.2.9 (Gibraltar had Freeswan 2.0.4, DL has Openswan
2.4.4)
> >
> > When I try to establish a TCP connection to any windows server (2k,
2k3),
> the
> > server restarts immediately (bluescreen, complaining about TCPIP.SYS
error,
> > and reboots).
>
> wow. that's pretty bad. Are those machines running with all service packs
and
> updates installed?
>
> > The crashing can be triggered either by normal windows clients trying
to
> > connect to the server, or by a linux client that does 'telnet x.y.z.t
25' to
> > the server.
>
> Obviously, those servers are in need of fixing, but perhaps as a work
around
> you can set the mtu on both openswan servers to 1440 or 1400? My guess is
> it would be related to mtu/packetsize/df-bit issues.
>
> Paul
>
>
> -------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job
easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

[Devil-Linux-discuss] save-config problem

[Antonin J. <ant...@gm...>]

Hi,

I have installed DL to a bootable USB flashdisk and added the default
etc.tar.bz2 to it. It works fine untill I want to save the
configuration to the same flashdisk.

the save-config script returns:
Found configuration file locacion used by boot:
/dev/scsi/host0/bus0/target0/lun0/part1
using device /dev/scsi/host0/bus0/target0/lun0/part1
Please insert Configuration Media in /dev/scsi/host0/bus0/target0/lun0/part=
1



But the device is already plugged in. I don't know why the script
cannot find it.

I have found that the script writes etc.tar.bz2 file to
/var/adm/mount/ so I can cp it to the flashdisk manualy but this
sucks.

Do you have any ideas?

Thank you very much

Antonin

RE: [BULK] Re: [Devil-Linux-discuss] IPSec Problem, extremely weird.

[Matthew H. <mat...@va...>]

Possible workaround:

iptables --new-chain clamp
iptables --insert clamp -p tcp --tcp-flags SYN,RST SYN -j TCPMSS
--set-mss 1372
iptables --insert OUTPUT -p tcp --tcp-flags SYN,RST SYN -j clamp
iptables --insert FORWARD -o <ext interface> -p tcp --tcp-flags SYN,RST
SYN -j clamp

This may do the trick for you.

Cheers

Mat
-----Original Message-----
From: dev...@li...
[mailto:dev...@li...] On Behalf Of
Frank Weis
Sent: 16 May 2006 13:45
To: dev...@li...
Subject: Re: [BULK] Re: [Devil-Linux-discuss] IPSec Problem, extremely
weird.



>
> Did you try your luck with the Openswan folks? We just use their stock
> patch without any modifications.

I DID try with them, and below is what Paul Wouters said.
I didn't try anything yet, but on discussing it over with the remote
admin, it=20
appears that the crashing servers are all win2k3 without SP1. Those with
SP1=20
don't crash. Unfortunately most of these servers belong to Citrix farms,
and=20
there seems to be some issue upgrading them to SP1. For the moment we're
back=20
to the old version (firewall/*swan), but probably not for too long.
Anyway, it's hard to believe we're in the third millennium, and people
buy=20
expensive operating system software that can be crashed just by sending
them=20
a single (totally valid) IP packet :-P

Thanks a lot

Frank

------------8<-----------
> I have an extremely weird problem with IPsec tunnels in Devil-Linux:
>
> I have two sites that are linked LAN-2-LAN by an IPSec tunnel that
runs on
> dedicated Linux firewalls.
>
> I have upgraded the two firewalls  from gibraltar
> to Devil-Linux-1.2.9 (Gibraltar had Freeswan 2.0.4, DL has Openswan
2.4.4)
>
> When I try to establish a TCP connection to any windows server (2k,
2k3),=20
the
> server restarts immediately (bluescreen, complaining about TCPIP.SYS
error,
> and reboots).

wow. that's pretty bad. Are those machines running with all service
packs and
updates installed?

> The crashing can be triggered either by normal windows clients trying
to
> connect to the server, or by a linux client that does 'telnet x.y.z.t
25' to
> the server.

Obviously, those servers are in need of fixing, but perhaps as a work
around
you can set the mtu on both openswan servers to 1440 or 1400? My guess
is
it would be related to mtu/packetsize/df-bit issues.

Paul


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services,
security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache
Geronimo
http://sel.as-us.falkag.net/sel?cmd=3Dlnk&kid=3D120709&bid=3D263057&dat=3D=
121642
_______________________________________________
Devil-linux-discuss mailing list
Dev...@li...
https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

Re: [BULK] [Devil-Linux-discuss] [Fwd: SUBJECT: SourceForge.net: CVS service offering changes]

[Heiko Z. <he...@zu...>]

On Tue, May 16, 2006 12:51, Thomas Eder wrote:
> Frank Weis wrote:
>
>> Did anybody succed in checking out the sources?
>>
>>
>> I can login with
>> cvs
>> -d:pserver:ano...@de...:/cvsroot/devil-lin
>> ux\ login
>>
>> but when I try to cvs -z3
>> -d:pserver:ano...@de...:/cvsroot/devil-lin
>> ux co -r rel-1-2-patches build
>>
>> it fails with can't create temporary directory /tmp/cvs-serv7556 Too many
>> links
>>
>
>
> me too :-(

It works via my account.
Maybe one of you should report to SF that the anonymous access is broke
for you.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

Re: [BULK] [Devil-Linux-discuss] [Fwd: SUBJECT: SourceForge.net: CVS service offering changes]

[Thomas E. <di...@yo...>]

Frank Weis wrote:
> Did anybody succed in checking out the sources?
> 
> I can login with 
> cvs -d:pserver:ano...@de...:/cvsroot/devil-linux\ 
> login 
> 
> but when I try to 
> cvs -z3 -d:pserver:ano...@de...:/cvsroot/devil-linux 
> co -r rel-1-2-patches build 
> 
> it fails with 
> can't create temporary directory /tmp/cvs-serv7556
> Too many links
> 


me too :-(

-- 
thomas

Re: [BULK] [Devil-Linux-discuss] [Fwd: SUBJECT: SourceForge.net: CVS service offering changes]

[Frank W. <Fra...@ct...>]

Did anybody succed in checking out the sources?

I can login with 
cvs -d:pserver:ano...@de...:/cvsroot/devil-linux\ 
login 

but when I try to 
cvs -z3 -d:pserver:ano...@de...:/cvsroot/devil-linux 
co -r rel-1-2-patches build 

it fails with 
can't create temporary directory /tmp/cvs-serv7556
Too many links

Thanks

Frank
> Summary of changes, effective 2006-05-12:
>
>
> 1. Hostname for CVS service
>
> Old: cvs.sourceforge.net
>
> New: PROJECT_UNIX_NAME.cvs.sourceforge.net
>
> This change will require new working copies to be checked out of all
> repositories (so control files in the working copy will point to the
> right place). We will be updating the instructions we supply, but
> instructions that your team has written within documentation, etc. will
> need to be updated.
>
> cvs -d:pserver:ano...@cv...:/cvsroot/gaim co gaim
>
> would be changed to
>
> cvs -d:pserver:ano...@ga...:/cvsroot/gaim co gaim
>
>
>

Re: [BULK] Re: [Devil-Linux-discuss] IPSec Problem, extremely weird.

[Frank W. <Fra...@ct...>]

>
> Did you try your luck with the Openswan folks? We just use their stock
> patch without any modifications.

I DID try with them, and below is what Paul Wouters said.
I didn't try anything yet, but on discussing it over with the remote admin, it 
appears that the crashing servers are all win2k3 without SP1. Those with SP1 
don't crash. Unfortunately most of these servers belong to Citrix farms, and 
there seems to be some issue upgrading them to SP1. For the moment we're back 
to the old version (firewall/*swan), but probably not for too long.
Anyway, it's hard to believe we're in the third millennium, and people buy 
expensive operating system software that can be crashed just by sending them 
a single (totally valid) IP packet :-P

Thanks a lot

Frank

------------8<-----------
> I have an extremely weird problem with IPsec tunnels in Devil-Linux:
>
> I have two sites that are linked LAN-2-LAN by an IPSec tunnel that runs on
> dedicated Linux firewalls.
>
> I have upgraded the two firewalls  from gibraltar
> to Devil-Linux-1.2.9 (Gibraltar had Freeswan 2.0.4, DL has Openswan 2.4.4)
>
> When I try to establish a TCP connection to any windows server (2k, 2k3), 
the
> server restarts immediately (bluescreen, complaining about TCPIP.SYS error,
> and reboots).

wow. that's pretty bad. Are those machines running with all service packs and
updates installed?

> The crashing can be triggered either by normal windows clients trying to
> connect to the server, or by a linux client that does 'telnet x.y.z.t 25' to
> the server.

Obviously, those servers are in need of fixing, but perhaps as a work around
you can set the mtu on both openswan servers to 1440 or 1400? My guess is
it would be related to mtu/packetsize/df-bit issues.

Paul

Re: [Devil-Linux-discuss] IPSec Problem, extremely weird.

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thu, May 11, 2006 06:15, Frank Weis wrote:
> Hi all,
>
>
> I have an extremely weird problem with IPsec tunnels in DL:
>
>
> I have upgraded two firewalls that are linked by IPsec tunnels from
> gibraltar to DL-1.2.9 (Gibraltar had Freeswan 2.0.4, DL has Openswan
> 2.4.4)
>
>
> When I try to establish a TCP connection to any windows server (2k, 2k3),
> the server restarts immediately (bluescreen, complaining about TCPIP.SYS
> error, and reboots).
>
> Connections that go through the DL firewall but not the ipsec tunnel
> to the same ports on the same servers (either plainly routed throuh the
> firewall, or with DNAT) are fine. Pinging the servers through the ipsec
> tunnels is fine also.
>
> When I revert one end of the tunnel back to Gibraltar/FreeSWan-2.0.4, the
>  servers on _that end_ of the tunnel are safe.
>
> The crashing can be triggered either by normal windows clients trying to
> connect to the server, or by a linux client that does 'telnet x.y.z.t 25'
> to the server.
>
> I am really desperate with this one, so if anybody has any hints, I'd be
> very grateful.

(sorry for the late answer, but I was out of town)

Did you try your luck with the Openswan folks? We just use their stock
patch without any modifications.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iEYEARECAAYFAkRovEwACgkQUcytMSbs+YUYEACfR2LXVvF5k8xW/VYrEbOgjvdh
6osAn1elk7wOGkK4CkSTiiRx0m5oQwuQ
=rqgH
-----END PGP SIGNATURE-----