devil-linux-discuss — General Mailing List for all discussions

Re: Re[2]: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Devil-Linux <dev...@js...>]

> Hi,
>
> Wednesday, March 8, 2006, 10:59:37 AM, you wrote:
>
>> The one I mostly miss is
>> iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
>> iptables -t mangle -A PREROUTING -p tcp -m mark ! --mark 0 -j 
>> CONNMARK --save-mark
>
>> The connmark module ipt_CONNMARK.o
>> /lib/modules/2.4.32-grsec/kernel/net/ipv4/netfilter
> It's because of L7 extension.  Unfortunately, they (connmark and
> layer7 extensions) are incompatible.
>

Hmm,

I have searched for any compability problem between these on the net, and I 
cant find any. Rather the
oposite it seem many use the two together.

Can you point me to any place where this is discussed.

/Jacob

Re: Re[2]: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Devil-Linux <dev...@js...>]

> Hi,
>
> Wednesday, March 8, 2006, 10:59:37 AM, you wrote:
>
>> The one I mostly miss is
>> iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
>> iptables -t mangle -A PREROUTING -p tcp -m mark ! --mark 0 -j 
>> CONNMARK --save-mark
>
>> The connmark module ipt_CONNMARK.o
>> /lib/modules/2.4.32-grsec/kernel/net/ipv4/netfilter
> It's because of L7 extension.  Unfortunately, they (connmark and
> layer7 extensions) are incompatible.
>

Oh,

Any idea of what too use instead?

/Jacob

Re[2]: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Serge L. <fi...@in...>]

Hi,

Wednesday, March 8, 2006, 10:59:37 AM, you wrote:

> The one I mostly miss is
> iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
> iptables -t mangle -A PREROUTING -p tcp -m mark ! --mark 0 -j CONNMARK --save-mark

> The connmark module ipt_CONNMARK.o 
> /lib/modules/2.4.32-grsec/kernel/net/ipv4/netfilter
It's because of L7 extension.  Unfortunately, they (connmark and
layer7 extensions) are incompatible.

-- 
Best regards,
 Serge                            mailto:fi...@in...

Re: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Devil-Linux <dev...@js...>]

>
> On Tue, March 7, 2006 08:08, Devil-Linux wrote:
>> Hi all,
>>
>>
>> I am new to the list and maby this has already been discussed, if so I am
>> sorry.
>>
>> I have noticed that several kernal modules are missing in the distros
>> since 1.2.7 wich breaks omon other things bandwidth controll and some of
>> iptables functions.
>>
>> Is that ment to be that way os is something being forgotten, or is it to
>> force us to do our own compiles?
>
> We did a bunch of fixes in 1.2.9, is it still missing there?
> Can you be more specific and give us details about what's missing?
>
> - -- 
>
> Regards
>  Heiko Zuerker
>  http://www.devil-linux.org
>
Hi,

I do agree that the 1.2.9 is much better when it comes to kernelmodules

The one I mostly miss is
iptables -t mangle -A PREROUTING -p tcp -j CONNMARK --restore-mark
iptables -t mangle -A PREROUTING -p tcp -m mark ! --mark 0 -j 
CONNMARK --save-mark

The connmark module ipt_CONNMARK.o 
/lib/modules/2.4.32-grsec/kernel/net/ipv4/netfilter

I also get an error on the "LVS"
/usr/sbin/ldirectord line 470

I will dig deeper when I get the time :) should be able to find most by just 
comparing the dirs tho.

/Jacob 

Re: [Devil-Linux-discuss] Ntop on 1.2.9 - can't start - missing GDBM

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On Tue, March 7, 2006 12:10, Dick Middleton wrote:
> I can't start ntop on 1.2.9 - Worked OK on 1.2.8.
>
>
> It seems it can't find GDBM.
>
>
> Tue Mar  7 18:06:53 2006  **ERROR** ....open of /etc/ntop/prefsCache.db
> failed: File open error
> Tue Mar  7 18:06:53 2006  Possible solution: please use '-P <directory>'
> Tue Mar  7 18:06:53 2006  **FATAL_ERROR** GDBM open failed, ntop
> shutting down...
>
> Anybody know anything?

It doesn't find the database, not gdbm is missing.
I don't use ntop myself so I have to guess a little.

Is this an upgrade ? If yes, did you have the db files in a different
location before?
If no, maybe you need to run some command to initialize the db first.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org


- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQN1osACgkQUcytMSbs+YUDeACgkDrvIgm14nK6ZDwrfzloWWJB
jRcAn0YorC2fIe5g9tyCcOaL+oca9kZ/
=Kj0K
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] Ntop on 1.2.9 - can't start - missing GDBM

[Dick M. <di...@li...>]

Dick Middleton wrote:
> I can't start ntop on 1.2.9 - Worked OK on 1.2.8.
> 
> It seems it can't find GDBM.

Sorry - stupid me :-(  Directory didn't exist - possibly because I 
deleted it.

Dick

[Devil-Linux-discuss] Ntop on 1.2.9 - can't start - missing GDBM

[Dick M. <di...@li...>]

I can't start ntop on 1.2.9 - Worked OK on 1.2.8.

It seems it can't find GDBM.

Tue Mar  7 18:06:53 2006  **ERROR** ....open of /etc/ntop/prefsCache.db 
failed: File open error
Tue Mar  7 18:06:53 2006  Possible solution: please use '-P <directory>'
Tue Mar  7 18:06:53 2006  **FATAL_ERROR** GDBM open failed, ntop 
shutting down...

Anybody know anything?

Dick

Re: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Tue, March 7, 2006 08:08, Devil-Linux wrote:
> Hi all,
>
>
> I am new to the list and maby this has already been discussed, if so I am
> sorry.
>
> I have noticed that several kernal modules are missing in the distros
> since 1.2.7 wich breaks omon other things bandwidth controll and some of
> iptables functions.
>
> Is that ment to be that way os is something being forgotten, or is it to
> force us to do our own compiles?

We did a bunch of fixes in 1.2.9, is it still missing there?
Can you be more specific and give us details about what's missing?

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQNqy4ACgkQUcytMSbs+YVE0ACfTHuN/80eVscKa+gj0V1J3trL
DyYAnifJ6HPGIlW9M+bQs5N3J0+pAajH
=jCvL
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] Distros from 1.2.7 broken?

[Kari M. <ka...@tr...>]

Hi all,

I am new to the list and maby this has already been discussed, if so I am =
sorry.

	Not directly, only indirectly.

I have noticed that several kernal modules are missing in the distros since =
1.2.7 wich breaks omon other things bandwidth controll and some of iptables =
functions.

	Many things were due to changes in external modules/packages.

Is that ment to be that way os is something being forgotten, or is it to =
force us to do our own compiles?

	Certainly not forgotten.  It is only, that Heiko and Bruce, the older two =
maintainers are overburdened.  They haven't been able to contribute enough =
time to DL to clean the edges.  This is my impression.

	If you want worry-free, use-for-almost-anything precompiled version, use =
1.2.6.
If you want the latest precompiled versio, use 1.2.9-testversion.
You have to pretest+verify your application to be sure it works.
...or you have to compile it yourself.

	I'm using 1.2.6 mostly :-/  It really is current enough for most =
tasks.

	I wish our main maintainers had a bit more time to contribute to DL =
sometime in the future.  Personally I'm not able to contribute enough time =
to learn all the tricks required in that kind of job.

	//Kari

/Jacob

[Devil-Linux-discuss] Distros from 1.2.7 broken?

[Devil-Linux <dev...@js...>]

Hi all,

I am new to the list and maby this has already been discussed, if so I =
am sorry.

I have noticed that several kernal modules are missing in the distros =
since 1.2.7 wich breaks omon other things bandwidth controll and some of =
iptables functions.

Is that ment to be that way os is something being forgotten, or is it to =
force us to do our own compiles?


/Jacob

Re: [Devil-Linux-discuss] Compile error

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Portslave doesn't work anyway (as far as I know).
Just de-select it.

Also, please attach critical parts of the log file to requests like this,
otherwise we can't really help you.

Heiko

On Mon, March 6, 2006 11:04, Daniele Ricciardi wrote:
> Hi all Guys,
>
>
> i have a little problem while compiling devil linux starting from 1.0
> base.
>
> After a while i got this error message:
>
>
> executing portslave with option build (in /build/tmp/portslave-1.9.11)
> ERROR
> /build/scripts/portslave build failed
> check log file /build/tmp/LOGS/build/portslave for details
>
> Can anyone help to bypass this error?
>
>
> thank you
>
> DR
>
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by xPML, a groundbreaking scripting
> language that extends applications into web and mobile media. Attend the
> live webcast and join the prime developer group breaking into this new
> coding territory!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>


- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQMflMACgkQUcytMSbs+YVSrgCfaW4vjStzxFyXb2D851WR93a4
1XIAoIcapMrOgUm5XGPNyEGS4iw5LyKB
=2aNH
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] Compile error

[Daniele R. <dan...@gm...>]

Hi all Guys,

i have a little problem while compiling devil linux starting from 1.0 base.

After a while i got this error message:

executing portslave with option build (in /build/tmp/portslave-1.9.11)
ERROR
/build/scripts/portslave build failed
check log file /build/tmp/LOGS/build/portslave for details

Can anyone help to bypass this error?

thank you

DR

Re: [Devil-Linux-discuss] Hotplug was: Howto swap usb stick (solved for me)

[cdmiller <cdm...@ad...>]

Heiko Zuerker wrote:
> 
> 
> The strategy of DL is to turn everything off by default.
> We want to make sure that only the services, which you want to be turned on.
> 
> Maybe we should change this for hotplug and turn it on by default.
> Any opinions on this ?
> 

I would say update the docs, where it talks about save-config and where
it talks about using usb media, note that hotplug needs to be turned on
in the config file.   Sounds like a good FAQ entry candidate as well.

- cameron

Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN,ACK error

[Dick M. <di...@li...>]

gun...@lh... wrote:

> I have had this same problem until yesterday.

not just me then!

> After searching some Apache Mailing Lists I found out that what seems to be causing the problem 
 > is the "EnableSendfile" Directive in the Apache config. This 
sometimes is supposed to

> create problems on NFS Directories but also seems to create problems on
 > the shm Filesystem und DL1.2.9.
> After I set "EnableSendfile Off" in the Apache httpd.conf it seems to be working fine.
> 
> I hope this helps you and others too.

It seems to do the trick!    I've spent hours on this :-(  I can move on 
at last.  Thanks a million!

Now to try it on my live system.

Dick

RE: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN,ACK error

[<gun...@lh...>]

Hi Dick,

I have had this same problem until yesterday.

After searching some Apache Mailing Lists I found out that what seems to =
be causing the problem is the "EnableSendfile" Directive in the Apache =
config. This sometimes is supposed to create problems on NFS Directories =
but also seems to create problems on the shm Filesystem und DL1.2.9.

After I set "EnableSendfile Off" in the Apache httpd.conf it seems to be =
working fine.

I hope this helps you and others too.

Best regards
Gunnar

>					=09
>Lufthansa Technik AG
>Completion Center
Gunnar Dibbern
>Dept. HAM WL/I, Innovation Engineering
>					=09


> -----Original Message-----
> From: dev...@li...=20
> [mailto:dev...@li...] On=20
> Behalf Of Dick Middleton
> Sent: Monday, March 06, 2006 11:07 AM
> To: dev...@li...
> Subject: Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection=20
> close, FIN,ACK error
>=20
>=20
> Heiko,
>=20
> >>I've been having real trouble getting apache2 to work on DL 1.2.9.
>=20
> > I'm successfully using Apache on my Server at home, but=20
> then I'm not=20
> > using an index.html. Does it happen with any index.html, or=20
> only with=20
> > a specific one you created?
>=20
> It only happens with directly served files.  PHP works OK. =20
> Images and=20
> css files fail.
>=20
> What I did was copy the default index.html to /var/data/www which I'd=20
> created and changed the document root settings in httpd.conf=20
> appropriately.
>=20
> At that point it works.  I then added characters to the file until it=20
> failed.  255 chars works, 256 chars doesn't.
>=20
> I attach httpd.conf with all comment lines removed - just in case=20
> there's something stupid in it.  Also a 256 byte index.html.
>=20
> What's bizarre is that apache doesn't see a problem.  It thinks the=20
> pages are served correctly.
>=20
> Running "lynx localhost" is all you need to demonstrate the problem.=20
> However I've just discovered a "telnet localhost 80" access works OK.=20
> So maybe it's something in the headers? I attach what Firefox=20
> sends as well.
>=20
> It would be nice if someone could try to reproduce the=20
> problem to see if=20
> it's just me or more general.
>=20
> Dick
>=20
>=20

Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN, ACK error

[Dick M. <di...@li...>]

Bruce Smith wrote:
>>I'm successfully using Apache on my Server at home, but then I'm not using
>>an index.html.
>>Does it happen with any index.html, or only with a specific one you
>>created?
> 
> 
> 
> I don't know if this is related or not, but I tried upgrading an DL
> Apache server to 1.2.9 (i686) and it appeared that a lot of standard
> modules were missing.  The first thing it complained about was the auth
> modules.  When I commented them out, then lines like "allow from all"
> would fail.

Yes, you need to use the new modules.  There's a few that have had their 
names changed and some stuff has been put into core.

What I did was to copy the LoadModule list from the default httpd.conf 
into a file modules.conf and then use Include to load it.  That way you 
can get some sort of 2.0 -> 2.2 compatibility.

However there's a lot of modules loaded - I'm not sure how many are 
really needed.

Dick

Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN,ACK error

[Dick M. <di...@li...>]

Heiko,

>>I've been having real trouble getting apache2 to work on DL 1.2.9.

> I'm successfully using Apache on my Server at home, but then I'm not using
> an index.html.
> Does it happen with any index.html, or only with a specific one you created?

It only happens with directly served files.  PHP works OK.  Images and 
css files fail.

What I did was copy the default index.html to /var/data/www which I'd 
created and changed the document root settings in httpd.conf 
appropriately.

At that point it works.  I then added characters to the file until it 
failed.  255 chars works, 256 chars doesn't.

I attach httpd.conf with all comment lines removed - just in case 
there's something stupid in it.  Also a 256 byte index.html.

What's bizarre is that apache doesn't see a problem.  It thinks the 
pages are served correctly.

Running "lynx localhost" is all you need to demonstrate the problem. 
However I've just discovered a "telnet localhost 80" access works OK. 
So maybe it's something in the headers? I attach what Firefox sends as well.

It would be nice if someone could try to reproduce the problem to see if 
it's just me or more general.

Dick

Re: [Devil-Linux-discuss] missing ipvsadm

[Michele P. <10...@ti...>]

At 21.43 05/03/2006 -0600, you wrote:
>Hey,

^_^
Hi!


> > Isn't ldirectord used by anyone?
>
>Doesn't look like it. ;-)
>I'm currently looking adding ipvsadm to DL.

Ok, no problem then :)

>I have to admit I forgott to add your patch, sorry.
>I'll see if I get a chance to take care of it soon (I'm pretty busy right
>now).

No problem, for now I've settled to recompile DL , but when you add it to 
the mainstream DL I'll be happy to report and help whenever I can.
P.S: who isn't busy "right now"? (no matter when the *now* is <g>)

Ah, by the way, I'm using openvpn2.1beta (beta11 currently) instead of 
2.0.5 since 2.1beta8 (because of its multihoming capability) and it 
integrates quite well with DL.

Live long and prosper

         Michele

Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN, ACK error

[Bruce S. <bw...@ar...>]

> I'm successfully using Apache on my Server at home, but then I'm not using
> an index.html.
> Does it happen with any index.html, or only with a specific one you
> created?


I don't know if this is related or not, but I tried upgrading an DL
Apache server to 1.2.9 (i686) and it appeared that a lot of standard
modules were missing.  The first thing it complained about was the auth
modules.  When I commented them out, then lines like "allow from all"
would fail.

I didn't get much time to investigate, and I won't be able to get back
to it for a couple weeks.  Anyone else running Apache on i686-server DL?

 - BS

Re: [Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN, ACK error

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Sun, March 5, 2006 06:33, Dick Middleton wrote:
> I've been having real trouble getting apache2 to work on DL 1.2.9.
>
>
> I have booted DL on my laptop as a test bed and set the very minimum
> network configuration.  I've also made the very minimum changes to
> httpd.conf to configure apache2.  "It Works!" works.  However if I
> increase the size of index.html (by adding characters anywhere - head,
> body etc) it fails to send the file if the file has a size 256 bytes or
> more.  It is definitely size rather than content related.
>
> Apache logs show the file being served correctly (code=200) whatever the
> size.  However something is forcing tcp to prematurely close the
> connection.  If I look at the network with ethereal I get an ACK from the
> server to the GET request as expected followed immediately by a FIN,ACK
> which forces the connection to close.  No data is transferred from the
> server when this happens.
>
> Has anybody any idea why I'm getting this error and what I can do about
> it?    I get it on 2 systems with completely different
> hardware/configurations so I think it has to be a system configuration
> issue.
>
> Has nobody else seen this problem?

I'm successfully using Apache on my Server at home, but then I'm not using
an index.html.
Does it happen with any index.html, or only with a specific one you created?

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQLs8sACgkQUcytMSbs+YWRWgCfdRPAVYPmubxnGv9YlnrzOwGD
r5AAn1A7v7MiWEDdlw3IVfI0pLiaVZ5w
=R1Tx
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] missing ipvsadm

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey,

On Sun, March 5, 2006 17:46, Michele Pensotti wrote:
> Hi all.
> I just tried the new 1.2.9 on a "blank" machine and at the end of the boot
>  process I got this error:
>
> Starting ldirectord... Can not find ipvsadm at /usr/sbin/ldirectord line
> 470.
> failure
>
> I tried to search the filesystem and there isn't an ipvsadm binary.
>
>
> Just out of curiosity I tried to locate the ipvsadm binary in some
> previous DL versions I'm using (1.2.6 and 1.2.8).
> Well, it seems the binary is missing in those releases too!
>
> Isn't ldirectord used by anyone?

Doesn't look like it. ;-)
I'm currently looking adding ipvsadm to DL.

> Also, I see that fprobe has not been added, not even in the CVS or in the
>  source tree, may I know why? Yes, I know you told me there was not enough
> time to add it to the 1.2.9 but why not the CVS or source tree?
>
> Weren't my "patches" received correctly? Did I do something wrong?
>
> Please tell me, I'd really like to contribute.

I have to admit I forgott to add your patch, sorry.
I'll see if I get a chance to take care of it soon (I'm pretty busy right
now).

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQLr9cACgkQUcytMSbs+YWs1gCfavJr/FJciibLQxwXeUWyTJ6i
ZfkAnjhpOOD0Ls3knTxGHjkzY0EA3E06
=Wv1t
-----END PGP SIGNATURE-----

Re: [Devil-Linux-discuss] ldirectord - Auto Start

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thu, March 2, 2006 02:09, Malikkal S. Sivaramakrishnan wrote:
> Hi Friends,
>
>
> I have been quietly using Devil-Linux for around 1.5 years, reading
> discussions, and upgrading my linux skills as I worked with Devil-Linux.
> Thumbs up to this great distro, I would call it ultimate
> for Firewalls or Perimeter Security.
>
> I am making my first post for the first time for a small help. All
> along my upgrades worked fine, without giving me much of any problems. With
> 1.2.9 upgrade from 1.2.8, the 'ldirectord' service attempts to
> start itself after SSHD starts. I am very sure I haven't configured
> 'ldirectord' to start anywhere, and tried all my tricks to fix this,
> but in vain. Any help is much appreciated to crackdown on where it comes
> from.

My guess it's related to heartbeat, it probably tries to start it.
Unfortunately the latest version of ldirectord requires ipvsadm, which is
not yet part of DL. I'm looking at adding ipvsadm right now.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQLrncACgkQUcytMSbs+YUGOwCcC38xqLX7nF3Pn2JXNQCZMdj+
ITwAoI7kX3fvk0Msi2Vj/9GbnM/iy0Pv
=+gqw
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] missing ipvsadm

[Michele P. <10...@ti...>]

Hi all.
I just tried the new 1.2.9 on a "blank" machine and at the end of the boot 
process I got this error:

Starting ldirectord... Can not find ipvsadm at /usr/sbin/ldirectord line 470.
failure

I tried to search the filesystem and there isn't an ipvsadm binary.

Just out of curiosity I tried to locate the ipvsadm binary in some previous 
DL versions I'm using (1.2.6 and 1.2.8).
Well, it seems the binary is missing in those releases too!

Isn't ldirectord used by anyone?

Also, I see that fprobe has not been added, not even in the CVS or in the 
source tree, may I know why?
Yes, I know you told me there was not enough time to add it to the 1.2.9 
but why not the CVS or source tree?

Weren't my "patches" received correctly? Did I do something wrong?

Please tell me, I'd really like to contribute.

Thank you for all and goodnight

	Michele

Re: [Devil-Linux-discuss] Hotplug was: Howto swap usb stick (solved for me)

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Fri, March 3, 2006 09:53, cdmiller wrote:
> cdmiller wrote:
>>
>> I am seeing the same behaviour with Devil 1.2.8 on a Penguin Computing
>> Relion 1300 server.  There are some earlier posts on the mailing list
>> about trying vfat or ext2 on the USB stick, the suggestions there might
>> work for you. Save-config only works with vfat for me.  My bios has a
>> setting for forcing HDD or FDD for USB, I have found forcing to HDD
>> does better, allowing swaps within a limited time frame, but after a USB
>>  stick being unplugged for a half hour or so USB sticks are no longer
>> seen.  When the USB stick is no longer seen running /etc/init.d/hotplug
>>  status no longer shows the drive being in /proc/bus/usb/devices and
>> there is no longer a KHUBD thread.  The only way I have found to get it
>>  back is reboot.  I suspect if the usb drivers were in modules,
>> reloading the modules might detect and see the USB stick again.  I don't
>> have this problem on our ancient 1.0.4 devil-linux system.
>
> OK, we have a failover firewall system here using ha. I just upgraded
> the new servers to 1.2.9, (many thanks for ipset!), and I noticed while
> setting up /etc/sysconfig/config for the failover box:
>
> START_HOTPLUG=no
>
>
> Well, duh!  That appears have been the most likely cause of my
> observations above.  At present the USB detection is working perfectly.
>
> Hopefully I didn't cause anyone too much trouble in looking for my
> meatware problem.

The strategy of DL is to turn everything off by default.
We want to make sure that only the services, which you want to be turned on.

Maybe we should change this for hotplug and turn it on by default.
Any opinions on this ?

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iEYEARECAAYFAkQLHicACgkQUcytMSbs+YUk4QCfbqhnR2M0wyY6+pFOUjUcWijN
QWsAn2DrnMaW/fgiO+uz35mIWgIdmXv2
=dY45
-----END PGP SIGNATURE-----

[Devil-Linux-discuss] DL1.2.9/apache2 connection close, FIN,ACK error

[Dick M. <di...@li...>]

I've been having real trouble getting apache2 to work on DL 1.2.9.

I have booted DL on my laptop as a test bed and set the very minimum 
network configuration.  I've also made the very minimum changes to 
httpd.conf to configure apache2.  "It Works!" works.  However if I 
increase the size of index.html (by adding characters anywhere - head, 
body etc) it fails to send the file if the file has a size 256 bytes or 
more.  It is definitely size rather than content related.

Apache logs show the file being served correctly (code=200) whatever the 
size.  However something is forcing tcp to prematurely close the 
connection.  If I look at the network with ethereal I get an ACK from 
the server to the GET request as expected followed immediately by a 
FIN,ACK which forces the connection to close.  No data is transferred 
from the server when this happens.

Has anybody any idea why I'm getting this error and what I can do about 
it?    I get it on 2 systems with completely different 
hardware/configurations so I think it has to be a system configuration 
issue.

Has nobody else seen this problem?

Dick