Menu
▾
▴
devil-linux-discuss — General Mailing List for all discussions
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(59) |
Sep
(57) |
Oct
(5) |
Nov
(45) |
Dec
(21) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(13) |
Feb
(22) |
Mar
(14) |
Apr
(7) |
May
(33) |
Jun
(57) |
Jul
(25) |
Aug
(40) |
Sep
(53) |
Oct
(58) |
Nov
(75) |
Dec
(22) |
| 2003 |
Jan
(101) |
Feb
(101) |
Mar
(103) |
Apr
(125) |
May
(85) |
Jun
(57) |
Jul
(62) |
Aug
(42) |
Sep
(76) |
Oct
(214) |
Nov
(290) |
Dec
(274) |
| 2004 |
Jan
(187) |
Feb
(172) |
Mar
(313) |
Apr
(209) |
May
(169) |
Jun
(147) |
Jul
(118) |
Aug
(193) |
Sep
(227) |
Oct
(125) |
Nov
(246) |
Dec
(191) |
| 2005 |
Jan
(244) |
Feb
(175) |
Mar
(165) |
Apr
(130) |
May
(217) |
Jun
(122) |
Jul
(188) |
Aug
(235) |
Sep
(165) |
Oct
(133) |
Nov
(209) |
Dec
(88) |
| 2006 |
Jan
(66) |
Feb
(89) |
Mar
(108) |
Apr
(91) |
May
(29) |
Jun
(45) |
Jul
(64) |
Aug
(42) |
Sep
(44) |
Oct
(81) |
Nov
(64) |
Dec
(9) |
| 2007 |
Jan
(24) |
Feb
(122) |
Mar
(55) |
Apr
(50) |
May
(84) |
Jun
(13) |
Jul
(80) |
Aug
(70) |
Sep
(78) |
Oct
(45) |
Nov
(56) |
Dec
(42) |
| 2008 |
Jan
(65) |
Feb
(3) |
Mar
(51) |
Apr
(151) |
May
(54) |
Jun
(72) |
Jul
(73) |
Aug
(47) |
Sep
(55) |
Oct
(123) |
Nov
(16) |
Dec
(4) |
| 2009 |
Jan
(23) |
Feb
(39) |
Mar
(27) |
Apr
(36) |
May
(35) |
Jun
(51) |
Jul
(11) |
Aug
(14) |
Sep
(40) |
Oct
(67) |
Nov
(38) |
Dec
(13) |
| 2010 |
Jan
(15) |
Feb
(35) |
Mar
(40) |
Apr
(11) |
May
(26) |
Jun
(10) |
Jul
(5) |
Aug
(50) |
Sep
(86) |
Oct
(67) |
Nov
(36) |
Dec
(11) |
| 2011 |
Jan
(50) |
Feb
(6) |
Mar
(13) |
Apr
(13) |
May
(29) |
Jun
(27) |
Jul
(26) |
Aug
(27) |
Sep
(21) |
Oct
(7) |
Nov
(27) |
Dec
(4) |
| 2012 |
Jan
(11) |
Feb
(20) |
Mar
(48) |
Apr
(18) |
May
(8) |
Jun
(19) |
Jul
|
Aug
(15) |
Sep
(3) |
Oct
(4) |
Nov
(5) |
Dec
(1) |
| 2013 |
Jan
(13) |
Feb
(7) |
Mar
(4) |
Apr
(25) |
May
(2) |
Jun
(8) |
Jul
(4) |
Aug
(8) |
Sep
(7) |
Oct
|
Nov
(5) |
Dec
(10) |
| 2014 |
Jan
|
Feb
|
Mar
(6) |
Apr
(20) |
May
(5) |
Jun
|
Jul
(2) |
Aug
|
Sep
(8) |
Oct
(21) |
Nov
(4) |
Dec
(7) |
| 2015 |
Jan
(10) |
Feb
(9) |
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
(5) |
Sep
(11) |
Oct
|
Nov
(17) |
Dec
(32) |
| 2016 |
Jan
(10) |
Feb
(15) |
Mar
(4) |
Apr
(7) |
May
(10) |
Jun
(11) |
Jul
(15) |
Aug
(26) |
Sep
(13) |
Oct
(10) |
Nov
(16) |
Dec
(6) |
| 2017 |
Jan
(9) |
Feb
(3) |
Mar
|
Apr
(2) |
May
(2) |
Jun
|
Jul
|
Aug
(3) |
Sep
(3) |
Oct
(6) |
Nov
(8) |
Dec
|
| 2018 |
Jan
(12) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(4) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Udo L. <ul...@po...> - 2016-08-16 12:21:13
|
Hi, "squid -v" is now working on qemu and with type host an AMD Turion II Neo N40L too! @Heiko - do you got my haproxy-config/startscript? Udo On 14.08.2016 14:54, Heiko Zuerker wrote: > Hey, > > I think I might have found the issue. Refresh from CVS. I > added --disable-arch-native to the configure line. Without it, it uses > "-march=native", which optimizes the binary for the CPU the build is > being run on. This can then cause issues if you run it on a different > host. > > Let me know if this works. > > Heiko > > Quoting Frank Weis <Fra...@cg...>: > |
|
From: Heiko Z. <he...@zu...> - 2016-08-14 12:54:39
|
Hey, I think I might have found the issue. Refresh from CVS. I added --disable-arch-native to the configure line. Without it, it uses "-march=native", which optimizes the binary for the CPU the build is being run on. This can then cause issues if you run it on a different host. Let me know if this works. Heiko Quoting Frank Weis <Fra...@cg...>: > Hi, > > I haven't tested your newest upload but: > > my build is standard, without any modifications, BUT I set > everything to 686 in Build Configuration/Processor and Memory > because I have a bunch of firewalls witch cheap CPUs that don't > support PAE. > > The crash happens also on systems with better CPUs and PAE, though. > > Should I still test something? Being on vacation, I could just test > on KVM, not on actual hardware. > > Thanks for your help and effort, > > Frank > ________________________________________ > From: Udo Lembke [ul...@po...] > Sent: Saturday, August 13, 2016 4:58 PM > To: dev...@li... > Subject: Re: [Devil-Linux-discuss] Squid trouble in DL 1.8.0-rc2 > > Hi Heiko, > devil-linux run on qemu (proxmox ve): > root@pve1:~# kvm -version > QEMU emulator version 2.6.0 pve-qemu-kvm_2.6-1, Copyright (c) 2003-2008 > Fabrice Bellard > > With virtual cpu kvm64 - but the same happens, if I switch the cpu type > to host. > The host cpu is in this case an AMD Turion(tm) II Neo N40L Dual-Core > Processor. > On my laptop with debian Jessie and kvm the same happens with kvm64 but > with cpu host squid run: > kvm -hda testdisk.img -cdrom > ../devil/devil-linux-1.8.0-rc2-2016-08-13-x86_64/dl-1.8.0-rc2-2016-08-13-x86_64_server.iso > -cpu host,+kvm_pv_unhalt,+kvm_pv_eoi -boot d -k de -m 512 -net none -vnc > 127.0.0.1:1 > host cpu: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz > > Udo > > On 13.08.2016 16:07, Heiko Zuerker wrote: >> Udo, >> >> Hmm... This is getting interesting. >> >> What CPU do you have? The ISO was build on a current Intel CPU. >> >> Heiko >> >> Quoting Udo Lembke <ul...@po...>: >> >>> Hi Heiko, >>> >>> tested devil-linux-1.8.0-rc2-2016-08-13-x86_64-server.tar.xz >>> >>> and "squid -v" stop with Illegal instruction like before. >>> >>> Udo >>> >>> On 13.08.2016 15:04, Heiko Zuerker wrote: >>>> Udo & Frank, >>>> >>>> I just tested squid and it seems to work fine on the latest build >>>> (haven't done any changes). >>>> Do you use your own build? Is it using the standard config or did you >>>> customize? (maybe we're missing a lib). >>>> >>>> I'm uploading the exact version I'm testing with >>>> to ftp.devil-linux.org/pub/devel/testing[1][1] right now. It should be >>>> complete about 45 minutes from writing this email. >>>> >>>> Try it with that and let me know if it behaves any different. >>>> >>>> Heiko >>> >>> ------------------------------------------------------------------------------ >>> >>> What NetFlow Analyzer can do for you? Monitors network bandwidth and >>> traffic >>> patterns at an interface-level. Reveals which users, apps, and >>> protocols are >>> consuming the most bandwidth. Provides multi-vendor support for NetFlow, >>> J-Flow, sFlow and other flows. Make informed decisions using capacity >>> planning reports. http://sdm.link/zohodev2dev >>> _______________________________________________ >>> Devil-linux-discuss mailing list >>> Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> Links: >> ------ >> [1] http://ftp.devil-linux.org/pub/devel/testing >> -- >> >> Regards >> Heiko Zuerker >> >> ------------------------------------------------------------------------------ >> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic >> patterns at an interface-level. Reveals which users, apps, and protocols are >> consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> J-Flow, sFlow and other flows. Make informed decisions using capacity >> planning reports. http://sdm.link/zohodev2dev >> >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss Links: ------ [1] http://ftp.devil-linux.org/pub/devel/testing -- Regards Heiko Zuerker |
|
From: Frank W. <Fra...@cg...> - 2016-08-13 15:18:25
|
Hi, I haven't tested your newest upload but: my build is standard, without any modifications, BUT I set everything to 686 in Build Configuration/Processor and Memory because I have a bunch of firewalls witch cheap CPUs that don't support PAE. The crash happens also on systems with better CPUs and PAE, though. Should I still test something? Being on vacation, I could just test on KVM, not on actual hardware. Thanks for your help and effort, Frank ________________________________________ From: Udo Lembke [ul...@po...] Sent: Saturday, August 13, 2016 4:58 PM To: dev...@li... Subject: Re: [Devil-Linux-discuss] Squid trouble in DL 1.8.0-rc2 Hi Heiko, devil-linux run on qemu (proxmox ve): root@pve1:~# kvm -version QEMU emulator version 2.6.0 pve-qemu-kvm_2.6-1, Copyright (c) 2003-2008 Fabrice Bellard With virtual cpu kvm64 - but the same happens, if I switch the cpu type to host. The host cpu is in this case an AMD Turion(tm) II Neo N40L Dual-Core Processor. On my laptop with debian Jessie and kvm the same happens with kvm64 but with cpu host squid run: kvm -hda testdisk.img -cdrom ../devil/devil-linux-1.8.0-rc2-2016-08-13-x86_64/dl-1.8.0-rc2-2016-08-13-x86_64_server.iso -cpu host,+kvm_pv_unhalt,+kvm_pv_eoi -boot d -k de -m 512 -net none -vnc 127.0.0.1:1 host cpu: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz Udo On 13.08.2016 16:07, Heiko Zuerker wrote: > Udo, > > Hmm... This is getting interesting. > > What CPU do you have? The ISO was build on a current Intel CPU. > > Heiko > > Quoting Udo Lembke <ul...@po...>: > >> Hi Heiko, >> >> tested devil-linux-1.8.0-rc2-2016-08-13-x86_64-server.tar.xz >> >> and "squid -v" stop with Illegal instruction like before. >> >> Udo >> >> On 13.08.2016 15:04, Heiko Zuerker wrote: >>> Udo & Frank, >>> >>> I just tested squid and it seems to work fine on the latest build >>> (haven't done any changes). >>> Do you use your own build? Is it using the standard config or did you >>> customize? (maybe we're missing a lib). >>> >>> I'm uploading the exact version I'm testing with >>> to ftp.devil-linux.org/pub/devel/testing[1] right now. It should be >>> complete about 45 minutes from writing this email. >>> >>> Try it with that and let me know if it behaves any different. >>> >>> Heiko >> >> ------------------------------------------------------------------------------ >> >> What NetFlow Analyzer can do for you? Monitors network bandwidth and >> traffic >> patterns at an interface-level. Reveals which users, apps, and >> protocols are >> consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> J-Flow, sFlow and other flows. Make informed decisions using capacity >> planning reports. http://sdm.link/zohodev2dev >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> > > > > Links: > ------ > [1] http://ftp.devil-linux.org/pub/devel/testing > -- > > Regards > Heiko Zuerker > > > > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > > > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports. http://sdm.link/zohodev2dev _______________________________________________ Devil-linux-discuss mailing list Dev...@li... https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: Udo L. <ul...@po...> - 2016-08-13 14:59:07
|
Hi Heiko, devil-linux run on qemu (proxmox ve): root@pve1:~# kvm -version QEMU emulator version 2.6.0 pve-qemu-kvm_2.6-1, Copyright (c) 2003-2008 Fabrice Bellard With virtual cpu kvm64 - but the same happens, if I switch the cpu type to host. The host cpu is in this case an AMD Turion(tm) II Neo N40L Dual-Core Processor. On my laptop with debian Jessie and kvm the same happens with kvm64 but with cpu host squid run: kvm -hda testdisk.img -cdrom ../devil/devil-linux-1.8.0-rc2-2016-08-13-x86_64/dl-1.8.0-rc2-2016-08-13-x86_64_server.iso -cpu host,+kvm_pv_unhalt,+kvm_pv_eoi -boot d -k de -m 512 -net none -vnc 127.0.0.1:1 host cpu: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz Udo On 13.08.2016 16:07, Heiko Zuerker wrote: > Udo, > > Hmm... This is getting interesting. > > What CPU do you have? The ISO was build on a current Intel CPU. > > Heiko > > Quoting Udo Lembke <ul...@po...>: > >> Hi Heiko, >> >> tested devil-linux-1.8.0-rc2-2016-08-13-x86_64-server.tar.xz >> >> and "squid -v" stop with Illegal instruction like before. >> >> Udo >> >> On 13.08.2016 15:04, Heiko Zuerker wrote: >>> Udo & Frank, >>> >>> I just tested squid and it seems to work fine on the latest build >>> (haven't done any changes). >>> Do you use your own build? Is it using the standard config or did you >>> customize? (maybe we're missing a lib). >>> >>> I'm uploading the exact version I'm testing with >>> to ftp.devil-linux.org/pub/devel/testing[1] right now. It should be >>> complete about 45 minutes from writing this email. >>> >>> Try it with that and let me know if it behaves any different. >>> >>> Heiko >> >> ------------------------------------------------------------------------------ >> >> What NetFlow Analyzer can do for you? Monitors network bandwidth and >> traffic >> patterns at an interface-level. Reveals which users, apps, and >> protocols are >> consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> J-Flow, sFlow and other flows. Make informed decisions using capacity >> planning reports. http://sdm.link/zohodev2dev >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> > > > > Links: > ------ > [1] http://ftp.devil-linux.org/pub/devel/testing > -- > > Regards > Heiko Zuerker > > > > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > > > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss |
|
From: Heiko Z. <he...@zu...> - 2016-08-13 14:07:38
|
Udo, Hmm... This is getting interesting. What CPU do you have? The ISO was build on a current Intel CPU. Heiko Quoting Udo Lembke <ul...@po...>: > Hi Heiko, > > tested devil-linux-1.8.0-rc2-2016-08-13-x86_64-server.tar.xz > > and "squid -v" stop with Illegal instruction like before. > > Udo > > On 13.08.2016 15:04, Heiko Zuerker wrote: >> Udo & Frank, >> >> I just tested squid and it seems to work fine on the latest build >> (haven't done any changes). >> Do you use your own build? Is it using the standard config or did you >> customize? (maybe we're missing a lib). >> >> I'm uploading the exact version I'm testing with >> to ftp.devil-linux.org/pub/devel/testing[1] right now. It should be >> complete about 45 minutes from writing this email. >> >> Try it with that and let me know if it behaves any different. >> >> Heiko > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss Links: ------ [1] http://ftp.devil-linux.org/pub/devel/testing -- Regards Heiko Zuerker |
|
From: Udo L. <ul...@po...> - 2016-08-13 13:58:13
|
Hi Heiko, tested devil-linux-1.8.0-rc2-2016-08-13-x86_64-server.tar.xz and "squid -v" stop with Illegal instruction like before. Udo On 13.08.2016 15:04, Heiko Zuerker wrote: > Udo & Frank, > > I just tested squid and it seems to work fine on the latest build > (haven't done any changes). > Do you use your own build? Is it using the standard config or did you > customize? (maybe we're missing a lib). > > I'm uploading the exact version I'm testing with > to ftp.devil-linux.org/pub/devel/testing right now. It should be > complete about 45 minutes from writing this email. > > Try it with that and let me know if it behaves any different. > > Heiko > |
|
From: Heiko Z. <he...@zu...> - 2016-08-13 13:04:59
|
Udo & Frank, I just tested squid and it seems to work fine on the latest build (haven't done any changes). Do you use your own build? Is it using the standard config or did you customize? (maybe we're missing a lib). I'm uploading the exact version I'm testing with to ftp.devil-linux.org/pub/devel/testing right now. It should be complete about 45 minutes from writing this email. Try it with that and let me know if it behaves any different. Heiko Quoting Udo Lembke <ul...@po...>: > Hi, > I tried to do an simple "squid -v" and the process died also with > Illegal Instruction. > And, like Frank allready wrote, the config file isn't open at this time. > > strace shows at last the reading of /dev/urandom: > getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 > futex(0x70a4a82614e8, FUTEX_WAKE_PRIVATE, 2147483647) = 0 > brk(0) = 0xfd7480 > brk(0xff8480) = 0xff8480 > brk(0xff9000) = 0xff9000 > open("/dev/urandom", O_RDONLY) = 3 > fcntl(3, F_GETFD) = 0 > fcntl(3, F_SETFD, FD_CLOEXEC) = 0 > fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0 > getrusage(0x1 /* RUSAGE_??? */, {ru_utime={0, 39999}, ru_stime={0, > 79999}, ...}) = 0 > read(3, > "pu\17\2559L\0017O\221\354\241\363!{\222\370\353d\314S\216\242ND}\26\300Y\37Jp", > 32) = 32 > read(3, > ".\375\267\247IG.\3266+L\26\36\313\30_\225\2055\211\33\201\257\251.\26\26;\347\0215\366", > 32) = 32 > read(3, "\245m#\314=@**", 8) = 8 > futex(0x70a4aa316480, FUTEX_WAKE_PRIVATE, 2147483647) = 0 > futex(0x70a4aa316470, FUTEX_WAKE_PRIVATE, 2147483647) = 0 > brk(0x101a000) = 0x101a000 > mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) = 0x70a4abfb0000 > --- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPN, si_addr=0x793b78} --- > +++ killed by SIGILL +++ > At this time also network isn't in use (which is on Franks strace output). > > Udo > > On 09.08.2016 08:58, Frank Weis wrote: >> Hi Heiko, >> >> it doesn't get to the point where it logs anything. >> >> I have copied in the /etc/squid.conf supplied with the source (or even >> started without conf file). >> >> When I strace it, I see that it opens some libs, and /dev/urandom, but >> not /etc/squid.conf. It calls uname and gets the name of the host. >> >> The last 20 lines from strace: >> >> fcntl64(3, F_GETFD) = 0 >> fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 >> fstat64(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0 >> getrusage(0x1 /* RUSAGE_??? */, {ru_utime={0, 29999}, ru_stime={0, >> 6666}, ...}) = 0 >> read(3, >> "\337\3617\312X\270\340\203\244\376\25+\0316\201\246\205\23\354\245\227\321\23\275l\357\345Ff\324\177\345", >> 32) = 32 >> read(3, >> "W\247\352\227\254\v\303\221Pi\362\22Dw\6\24\201\200\232\263\252K\331\237o\337\332\372!\347\31[", >> 32) = 32 >> read(3, "\16\250\0240\334\360\333\272", 8) = 8 >> futex(0xbcd810, FUTEX_WAKE_PRIVATE, 2147483647) = 0 >> futex(0xbcd808, FUTEX_WAKE_PRIVATE, 2147483647) = 0 >> brk(0xb2a6000) = 0xb2a6000 >> mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, >> 0) = 0xb538d000 >> brk(0xb2c9000) = 0xb2c9000 >> brk(0xb2ed000) = 0xb2ed000 >> brk(0xb311000) = 0xb311000 >> brk(0xb335000) = 0xb335000 >> socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 4 >> setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0 >> close(4) = 0 >> --- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPN, si_addr=0x8251e40} --- >> +++ killed by SIGILL +++ >> >> When I start squid from inside the lfssystem (chrooted), it complains >> about missing /etc/squid.conf >> >> On a booted DL, it makes no difference if the conf file is present or not. >> >> Thanks >> >> On 2016-08-08 21:00, Heiko Zuerker wrote: >>> Frank, >>> >>> Try increasing the log level and see if it spits anything else out in >>> the squid log, before it crashes. >>> Are you using an existing configuration? If yes, try with a clean one. >>> You can also try the server version to see if it's related to any of >>> our security enhancements. >>> >>> Heiko >>> >>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>: >>> >>>> Hi Heiko, >>>> >>>> I got the latest squid installed, it still crashes: >>>> >>>> squid -version >>>> Squid Cache: Version 3.5.20-20160805-r14070 >>>> Service Name: squid >>>> configure options: '--prefix=/usr' '--sysconfdir=/etc' >>>> '--bindir=/usr/sbin' '--libexecdir=/usr/sbin' >>>> '--datadir=/usr/share/squid' '--localstatedir=/var/squid' >>>> '--sharedstatedir=/var/squid' '--enable-delay-pools >>>> ' '--enable-useragent-log' '--enable-referer-log' '--enable-arp-acl' >>>> '--enable-ssl' '--with-openssl' '--enable-htcp' >>>> '--enable-linux-netfilter' '--enable-auth' '--disable-auth-negotiate' >>>> '--enable-auth-basic' '- >>>> -enable-auth-ntlm' '--disable-auth-digest' >>>> '--enable-log-daemon-helpers' '--enable-external-acl-helpers' >>>> '--enable-url-rewrite-helpers' '--enable-delay-icmp' '--enable-esi' >>>> '--enable-ecap' '--enable-follow-x-for >>>> warded-for' '--enable-default-err-language=English' >>>> '--enable-err-languages=English' 'CFLAGS=-mtune=i686 -march=i686' >>>> 'CXXFLAGS=-mtune=i686 -march=i686' >>>> Illegal instruction >>>> >>>> Any other ideas? >>>> >>>> Thanks >>>> >>>> On 2016-08-03 17:48, Heiko Zuerker wrote: >>>>> Frank, >>>>> >>>>> It's core dumping, but that could be for a million reasons. >>>>> Can you try updating squid and see if it makes a difference? >>>>> >>>>> Heiko >>>>> >>>>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>: >>>>> >>>>>> Hi all, >>>>>> >>>>>> squid exits immediately and I have the following log messages. This >>>>>> happens in rc1 and rc2. Any hints? >>>>>> >>>>>> [10504.225825] grsec: Illegal instruction occurred at 083a5893 in >>>>>> /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent >>>>>> /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0 >>>>>> [10504.225868] grsec: denied resource overstep by requesting 4096 >>>>>> for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504] >>>>>> uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] >>>>>> uid/euid:0/0 gid/ >>>>>> egid:0/0 >>>>>> >>>>>> Thanks a lot >>>>>> >>>>>> Frank >>>>>> -- >>>>>> >>>>>> *Frank Weis* >>>>>> Conseiller informaticien >>>>>> >>>>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG >>>>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse >>>>>> Centre de gestion informatique de l’éducation >>>>>> >>>>>> eduPôle - Walferdange >>>>>> Route de Diekirch, L-7220 Walferdange >>>>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange >>>>>> >>>>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 >>>>>> E-mail : Fra...@cg... <mailto:Fra...@cg...> >>>>>> www.cgie.lu[1] <http://www.cgie.lu/> >>>>>> www.men.lu[2] <http://www.men.lu/> >>>>>> www.gouvernement.lu[3] <http://www.gouvernement.lu> >>>>>> >>>>>> Ce message et toutes pièces jointes sont établis à l'intention >>>>>> exclusive de ses destinataires. Ils peuvent contenir des >>>>>> informations confidentielles. Si vous recevez ce message par >>>>>> erreur, merci de le détruire et d'en avertir immédiatement >>>>>> l'expéditeur. Toute utilisation de ce message non conforme à sa >>>>>> destination, toute diffusion ou toute publication, totale ou >>>>>> partielle, est interdite, sauf autorisation expresse. Ce message a >>>>>> fait l'objet d'un traitement anti-virus. >>>>>> >>>>>> Le contenu de ce message et des pièces jointes ne pourrait engager >>>>>> la responsabilité du ministère que s'il a été émis par une personne >>>>>> dûment habilitée agissant dans le strict cadre des fonctions >>>>>> auxquelles elle est employée et à des fins non étrangères à ses >>>>>> attributions. >>>>> >>>>> -- >>>>> >>>>> Regards >>>>> Heiko Zuerker >>>> >>>> -- >>>> >>>> *Frank Weis* >>>> Conseiller informaticien >>>> >>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG >>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse >>>> Centre de gestion informatique de l’éducation >>>> >>>> eduPôle - Walferdange >>>> Route de Diekirch, L-7220 Walferdange >>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange >>>> >>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 >>>> E-mail : Fra...@cg... <mailto:Fra...@cg...> >>>> www.cgie.lu[1] <http://www.cgie.lu/> >>>> www.men.lu[2] <http://www.men.lu/> >>>> www.gouvernement.lu[3] <http://www.gouvernement.lu> >>>> >>>> Ce message et toutes pièces jointes sont établis à l'intention >>>> exclusive de ses destinataires. Ils peuvent contenir des informations >>>> confidentielles. Si vous recevez ce message par erreur, merci de le >>>> détruire et d'en avertir immédiatement l'expéditeur. Toute >>>> utilisation de ce message non conforme à sa destination, toute >>>> diffusion ou toute publication, totale ou partielle, est interdite, >>>> sauf autorisation expresse. Ce message a fait l'objet d'un traitement >>>> anti-virus. >>>> >>>> Le contenu de ce message et des pièces jointes ne pourrait engager la >>>> responsabilité du ministère que s'il a été émis par une personne >>>> dûment habilitée agissant dans le strict cadre des fonctions >>>> auxquelles elle est employée et à des fins non étrangères à ses >>>> attributions. >>> >>> -- >>> >>> Regards >>> Heiko Zuerker >> >> ------------------------------------------------------------------------------ >> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic >> patterns at an interface-level. Reveals which users, apps, and protocols are >> consuming the most bandwidth. Provides multi-vendor support for NetFlow, >> J-Flow, sFlow and other flows. Make informed decisions using capacity >> planning reports. http://sdm.link/zohodev2dev >> >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss Links: ------ [1] http://www.cgie.lu [2] http://www.men.lu [3] http://www.gouvernement.lu -- Regards Heiko Zuerker |
|
From: Udo L. <ul...@po...> - 2016-08-10 15:10:11
|
Hi Frank, On 10.08.2016 15:34, Frank Weis wrote: > Hi Udo, do you use the 'use iptables-restore' option? first yes, and I'm quite happy about the performance to apply the new rules. But then I had strange effects (on a dl-1.8.0 firewall) till I reboot the box (the same behavior I had later). Because this reason, I disabled ip-table restore, but the same happens later after delete/adding some rules... It's sad, but the time of the fwbuilder is over... Udo |
|
From: Frank W. <Fra...@cg...> - 2016-08-10 13:34:59
|
Hi Udo, do you use the 'use iptables-restore' option? I have not encountered the problems you describe at the moment. I use this option because reloading the rules is almost instant whereas it can take a minute on a big ruleset. Still, I will need an alternative to fwbuilder eventually.... Use iptables-restore to activate policy If this option is turned on, compiler generates firewall script in different format and uses iptables-restore script to load it. Both all iptables commands and the call to iptables-restore to load them are parts of the generated script, you just need to execute this script on the firewall. The advantage of this method is that operation of loading policy using iptables-restore is atomic, that is, either the whole the new policy loads into kernel memory, or none of it does. If new policy has syntax errors, it will not load. If generated script does not use iptables-restore to activate the policy, it may load partially if there is an error in one of the rules somewhere in the middle. Using iptables-restore helps avoid this problem. On 2016-08-04 08:38, Udo Lembke wrote: > Hi, > just an remark. I had switch back from an dl1.8 firewall to dl1.6.9 > because the firewall script generated with fwbuilder work not right with > the new iptables. > First it's looks good, but after add/remove rules we had the effect, > that old rules was extend (not fresh created) with new content!! > Extremly dangerous. > Will take a look at shorewall next week... > > Udo > > On 09.05.2016 14:50, Frank Weis wrote: >> Hi fellow DL-Users, >> >> I know that this is probably not the best place to ask this, but I hope >> you don't mind me picking your clustered brains : >> >> I have >60 DL firewalls in operation, and the fact that fwbuilder >> development is halted is increasingly concerning me. The generated policies >> use constructs that become obsolete or even wrong with recent netfilter >> versions (ie 'any ICMP' in a NAT rule is no longer supported in DL-1.8's >> iptables). >> >> How do you people address this? What do you use to generate your >> firewall rules? Any suggestions for me? >> >> Thanks a lot in advance, >> >> Frank >> > > ------------------------------------------------------------------------------ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss -- *Frank Weis*Conseiller informaticien LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse Centre de gestion informatique de l’éducation eduPôle - Walferdange Route de Diekirch, L-7220 Walferdange _Adresse postale_ : B.P. 98, L-7201 Bereldange Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 E-mail : Fra...@cg... <mailto:Fra...@cg...> www.cgie.lu <http://www.cgie.lu/> www.men.lu <http://www.men.lu/> www.gouvernement.lu <http://www.gouvernement.lu> Ce message et toutes pièces jointes sont établis à l'intention exclusive de ses destinataires. Ils peuvent contenir des informations confidentielles. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. Ce message a fait l'objet d'un traitement anti-virus. Le contenu de ce message et des pièces jointes ne pourrait engager la responsabilité du ministère que s'il a été émis par une personne dûment habilitée agissant dans le strict cadre des fonctions auxquelles elle est employée et à des fins non étrangères à ses attributions. |
|
From: Udo L. <ul...@po...> - 2016-08-09 07:43:48
|
Hi,
I tried to do an simple "squid -v" and the process died also with
Illegal Instruction.
And, like Frank allready wrote, the config file isn't open at this time.
strace shows at last the reading of /dev/urandom:
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
futex(0x70a4a82614e8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
brk(0) = 0xfd7480
brk(0xff8480) = 0xff8480
brk(0xff9000) = 0xff9000
open("/dev/urandom", O_RDONLY) = 3
fcntl(3, F_GETFD) = 0
fcntl(3, F_SETFD, FD_CLOEXEC) = 0
fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
getrusage(0x1 /* RUSAGE_??? */, {ru_utime={0, 39999}, ru_stime={0,
79999}, ...}) = 0
read(3,
"pu\17\2559L\0017O\221\354\241\363!{\222\370\353d\314S\216\242ND}\26\300Y\37Jp",
32) = 32
read(3,
".\375\267\247IG.\3266+L\26\36\313\30_\225\2055\211\33\201\257\251.\26\26;\347\0215\366",
32) = 32
read(3, "\245m#\314=@**", 8) = 8
futex(0x70a4aa316480, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x70a4aa316470, FUTEX_WAKE_PRIVATE, 2147483647) = 0
brk(0x101a000) = 0x101a000
mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x70a4abfb0000
--- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPN, si_addr=0x793b78} ---
+++ killed by SIGILL +++
At this time also network isn't in use (which is on Franks strace output).
Udo
On 09.08.2016 08:58, Frank Weis wrote:
> Hi Heiko,
>
>
> it doesn't get to the point where it logs anything.
>
> I have copied in the /etc/squid.conf supplied with the source (or even
> started without conf file).
>
> When I strace it, I see that it opens some libs, and /dev/urandom, but
> not /etc/squid.conf. It calls uname and gets the name of the host.
>
>
> The last 20 lines from strace:
>
>
>
> fcntl64(3, F_GETFD) = 0
> fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
> fstat64(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
> getrusage(0x1 /* RUSAGE_??? */, {ru_utime={0, 29999}, ru_stime={0,
> 6666}, ...}) = 0
> read(3,
> "\337\3617\312X\270\340\203\244\376\25+\0316\201\246\205\23\354\245\227\321\23\275l\357\345Ff\324\177\345",
> 32) = 32
> read(3,
> "W\247\352\227\254\v\303\221Pi\362\22Dw\6\24\201\200\232\263\252K\331\237o\337\332\372!\347\31[",
> 32) = 32
> read(3, "\16\250\0240\334\360\333\272", 8) = 8
> futex(0xbcd810, FUTEX_WAKE_PRIVATE, 2147483647) = 0
> futex(0xbcd808, FUTEX_WAKE_PRIVATE, 2147483647) = 0
> brk(0xb2a6000) = 0xb2a6000
> mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
> 0) = 0xb538d000
> brk(0xb2c9000) = 0xb2c9000
> brk(0xb2ed000) = 0xb2ed000
> brk(0xb311000) = 0xb311000
> brk(0xb335000) = 0xb335000
> socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 4
> setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0
> close(4) = 0
> --- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPN, si_addr=0x8251e40} ---
> +++ killed by SIGILL +++
>
>
> When I start squid from inside the lfssystem (chrooted), it complains
> about missing /etc/squid.conf
>
> On a booted DL, it makes no difference if the conf file is present or not.
>
>
> Thanks
>
>
> On 2016-08-08 21:00, Heiko Zuerker wrote:
>> Frank,
>>
>> Try increasing the log level and see if it spits anything else out in
>> the squid log, before it crashes.
>> Are you using an existing configuration? If yes, try with a clean one.
>> You can also try the server version to see if it's related to any of
>> our security enhancements.
>>
>> Heiko
>>
>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>>
>>> Hi Heiko,
>>>
>>>
>>>
>>> I got the latest squid installed, it still crashes:
>>>
>>>
>>>
>>> squid -version
>>> Squid Cache: Version 3.5.20-20160805-r14070
>>> Service Name: squid
>>> configure options: '--prefix=/usr' '--sysconfdir=/etc'
>>> '--bindir=/usr/sbin' '--libexecdir=/usr/sbin'
>>> '--datadir=/usr/share/squid' '--localstatedir=/var/squid'
>>> '--sharedstatedir=/var/squid' '--enable-delay-pools
>>> ' '--enable-useragent-log' '--enable-referer-log' '--enable-arp-acl'
>>> '--enable-ssl' '--with-openssl' '--enable-htcp'
>>> '--enable-linux-netfilter' '--enable-auth' '--disable-auth-negotiate'
>>> '--enable-auth-basic' '-
>>> -enable-auth-ntlm' '--disable-auth-digest'
>>> '--enable-log-daemon-helpers' '--enable-external-acl-helpers'
>>> '--enable-url-rewrite-helpers' '--enable-delay-icmp' '--enable-esi'
>>> '--enable-ecap' '--enable-follow-x-for
>>> warded-for' '--enable-default-err-language=English'
>>> '--enable-err-languages=English' 'CFLAGS=-mtune=i686 -march=i686'
>>> 'CXXFLAGS=-mtune=i686 -march=i686'
>>> Illegal instruction
>>>
>>> Any other ideas?
>>>
>>>
>>>
>>> Thanks
>>>
>>> On 2016-08-03 17:48, Heiko Zuerker wrote:
>>>> Frank,
>>>>
>>>> It's core dumping, but that could be for a million reasons.
>>>> Can you try updating squid and see if it makes a difference?
>>>>
>>>> Heiko
>>>>
>>>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>>>>
>>>>> Hi all,
>>>>>
>>>>>
>>>>>
>>>>> squid exits immediately and I have the following log messages. This
>>>>> happens in rc1 and rc2. Any hints?
>>>>>
>>>>>
>>>>>
>>>>> [10504.225825] grsec: Illegal instruction occurred at 083a5893 in
>>>>> /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent
>>>>> /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0
>>>>> [10504.225868] grsec: denied resource overstep by requesting 4096
>>>>> for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504]
>>>>> uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497]
>>>>> uid/euid:0/0 gid/
>>>>> egid:0/0
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thanks a lot
>>>>>
>>>>> Frank
>>>>> --
>>>>>
>>>>> *Frank Weis*
>>>>> Conseiller informaticien
>>>>>
>>>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>>>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>>>>> Centre de gestion informatique de l’éducation
>>>>>
>>>>> eduPôle - Walferdange
>>>>> Route de Diekirch, L-7220 Walferdange
>>>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>>>>
>>>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>>>>> E-mail : Fra...@cg... <mailto:Fra...@cg...>
>>>>> www.cgie.lu <http://www.cgie.lu/>
>>>>> www.men.lu <http://www.men.lu/>
>>>>> www.gouvernement.lu <http://www.gouvernement.lu>
>>>>>
>>>>> Ce message et toutes pièces jointes sont établis à l'intention
>>>>> exclusive de ses destinataires. Ils peuvent contenir des
>>>>> informations confidentielles. Si vous recevez ce message par
>>>>> erreur, merci de le détruire et d'en avertir immédiatement
>>>>> l'expéditeur. Toute utilisation de ce message non conforme à sa
>>>>> destination, toute diffusion ou toute publication, totale ou
>>>>> partielle, est interdite, sauf autorisation expresse. Ce message a
>>>>> fait l'objet d'un traitement anti-virus.
>>>>>
>>>>> Le contenu de ce message et des pièces jointes ne pourrait engager
>>>>> la responsabilité du ministère que s'il a été émis par une personne
>>>>> dûment habilitée agissant dans le strict cadre des fonctions
>>>>> auxquelles elle est employée et à des fins non étrangères à ses
>>>>> attributions.
>>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Regards
>>>> Heiko Zuerker
>>>>
>>> --
>>>
>>> *Frank Weis*
>>> Conseiller informaticien
>>>
>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>>> Centre de gestion informatique de l’éducation
>>>
>>> eduPôle - Walferdange
>>> Route de Diekirch, L-7220 Walferdange
>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>>
>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>>> E-mail : Fra...@cg... <mailto:Fra...@cg...>
>>> www.cgie.lu <http://www.cgie.lu/>
>>> www.men.lu <http://www.men.lu/>
>>> www.gouvernement.lu <http://www.gouvernement.lu>
>>>
>>> Ce message et toutes pièces jointes sont établis à l'intention
>>> exclusive de ses destinataires. Ils peuvent contenir des informations
>>> confidentielles. Si vous recevez ce message par erreur, merci de le
>>> détruire et d'en avertir immédiatement l'expéditeur. Toute
>>> utilisation de ce message non conforme à sa destination, toute
>>> diffusion ou toute publication, totale ou partielle, est interdite,
>>> sauf autorisation expresse. Ce message a fait l'objet d'un traitement
>>> anti-virus.
>>>
>>> Le contenu de ce message et des pièces jointes ne pourrait engager la
>>> responsabilité du ministère que s'il a été émis par une personne
>>> dûment habilitée agissant dans le strict cadre des fonctions
>>> auxquelles elle est employée et à des fins non étrangères à ses
>>> attributions.
>>>
>>
>>
>> --
>>
>> Regards
>> Heiko Zuerker
>>
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
> patterns at an interface-level. Reveals which users, apps, and protocols are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning reports. http://sdm.link/zohodev2dev
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
|
|
From: Frank W. <Fra...@cg...> - 2016-08-09 06:58:36
|
Hi Heiko,
it doesn't get to the point where it logs anything.
I have copied in the /etc/squid.conf supplied with the source (or even
started without conf file).
When I strace it, I see that it opens some libs, and /dev/urandom, but
not /etc/squid.conf. It calls uname and gets the name of the host.
The last 20 lines from strace:
fcntl64(3, F_GETFD) = 0
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
fstat64(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
getrusage(0x1 /* RUSAGE_??? */, {ru_utime={0, 29999}, ru_stime={0,
6666}, ...}) = 0
read(3,
"\337\3617\312X\270\340\203\244\376\25+\0316\201\246\205\23\354\245\227\321\23\275l\357\345Ff\324\177\345",
32) = 32
read(3,
"W\247\352\227\254\v\303\221Pi\362\22Dw\6\24\201\200\232\263\252K\331\237o\337\332\372!\347\31[",
32) = 32
read(3, "\16\250\0240\334\360\333\272", 8) = 8
futex(0xbcd810, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0xbcd808, FUTEX_WAKE_PRIVATE, 2147483647) = 0
brk(0xb2a6000) = 0xb2a6000
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0xb538d000
brk(0xb2c9000) = 0xb2c9000
brk(0xb2ed000) = 0xb2ed000
brk(0xb311000) = 0xb311000
brk(0xb335000) = 0xb335000
socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 4
setsockopt(4, SOL_IPV6, IPV6_V6ONLY, [0], 4) = 0
close(4) = 0
--- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPN, si_addr=0x8251e40} ---
+++ killed by SIGILL +++
When I start squid from inside the lfssystem (chrooted), it complains
about missing /etc/squid.conf
On a booted DL, it makes no difference if the conf file is present or not.
Thanks
On 2016-08-08 21:00, Heiko Zuerker wrote:
>
> Frank,
>
> Try increasing the log level and see if it spits anything else out in
> the squid log, before it crashes.
> Are you using an existing configuration? If yes, try with a clean one.
> You can also try the server version to see if it's related to any of
> our security enhancements.
>
> Heiko
>
> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>
>> Hi Heiko,
>>
>>
>>
>> I got the latest squid installed, it still crashes:
>>
>>
>>
>> squid -version
>> Squid Cache: Version 3.5.20-20160805-r14070
>> Service Name: squid
>> configure options: '--prefix=/usr' '--sysconfdir=/etc'
>> '--bindir=/usr/sbin' '--libexecdir=/usr/sbin'
>> '--datadir=/usr/share/squid' '--localstatedir=/var/squid'
>> '--sharedstatedir=/var/squid' '--enable-delay-pools
>> ' '--enable-useragent-log' '--enable-referer-log' '--enable-arp-acl'
>> '--enable-ssl' '--with-openssl' '--enable-htcp'
>> '--enable-linux-netfilter' '--enable-auth' '--disable-auth-negotiate'
>> '--enable-auth-basic' '-
>> -enable-auth-ntlm' '--disable-auth-digest'
>> '--enable-log-daemon-helpers' '--enable-external-acl-helpers'
>> '--enable-url-rewrite-helpers' '--enable-delay-icmp' '--enable-esi'
>> '--enable-ecap' '--enable-follow-x-for
>> warded-for' '--enable-default-err-language=English'
>> '--enable-err-languages=English' 'CFLAGS=-mtune=i686 -march=i686'
>> 'CXXFLAGS=-mtune=i686 -march=i686'
>> Illegal instruction
>>
>> Any other ideas?
>>
>>
>>
>> Thanks
>>
>> On 2016-08-03 17:48, Heiko Zuerker wrote:
>>>
>>> Frank,
>>>
>>> It's core dumping, but that could be for a million reasons.
>>> Can you try updating squid and see if it makes a difference?
>>>
>>> Heiko
>>>
>>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>>>
>>>> Hi all,
>>>>
>>>>
>>>>
>>>> squid exits immediately and I have the following log messages. This
>>>> happens in rc1 and rc2. Any hints?
>>>>
>>>>
>>>>
>>>> [10504.225825] grsec: Illegal instruction occurred at 083a5893 in
>>>> /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent
>>>> /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0
>>>> [10504.225868] grsec: denied resource overstep by requesting 4096
>>>> for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504]
>>>> uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497]
>>>> uid/euid:0/0 gid/
>>>> egid:0/0
>>>>
>>>>
>>>>
>>>>
>>>> Thanks a lot
>>>>
>>>> Frank
>>>> --
>>>>
>>>> *Frank Weis*
>>>> Conseiller informaticien
>>>>
>>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>>>> Centre de gestion informatique de l’éducation
>>>>
>>>> eduPôle - Walferdange
>>>> Route de Diekirch, L-7220 Walferdange
>>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>>>
>>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>>>> E-mail : Fra...@cg... <mailto:Fra...@cg...>
>>>> www.cgie.lu <http://www.cgie.lu/>
>>>> www.men.lu <http://www.men.lu/>
>>>> www.gouvernement.lu <http://www.gouvernement.lu>
>>>>
>>>> Ce message et toutes pièces jointes sont établis à l'intention
>>>> exclusive de ses destinataires. Ils peuvent contenir des
>>>> informations confidentielles. Si vous recevez ce message par
>>>> erreur, merci de le détruire et d'en avertir immédiatement
>>>> l'expéditeur. Toute utilisation de ce message non conforme à sa
>>>> destination, toute diffusion ou toute publication, totale ou
>>>> partielle, est interdite, sauf autorisation expresse. Ce message a
>>>> fait l'objet d'un traitement anti-virus.
>>>>
>>>> Le contenu de ce message et des pièces jointes ne pourrait engager
>>>> la responsabilité du ministère que s'il a été émis par une personne
>>>> dûment habilitée agissant dans le strict cadre des fonctions
>>>> auxquelles elle est employée et à des fins non étrangères à ses
>>>> attributions.
>>>>
>>>
>>>
>>>
>>> --
>>>
>>> Regards
>>> Heiko Zuerker
>>>
>>
>> --
>>
>> *Frank Weis*
>> Conseiller informaticien
>>
>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>> Centre de gestion informatique de l’éducation
>>
>> eduPôle - Walferdange
>> Route de Diekirch, L-7220 Walferdange
>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>
>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>> E-mail : Fra...@cg... <mailto:Fra...@cg...>
>> www.cgie.lu <http://www.cgie.lu/>
>> www.men.lu <http://www.men.lu/>
>> www.gouvernement.lu <http://www.gouvernement.lu>
>>
>> Ce message et toutes pièces jointes sont établis à l'intention
>> exclusive de ses destinataires. Ils peuvent contenir des informations
>> confidentielles. Si vous recevez ce message par erreur, merci de le
>> détruire et d'en avertir immédiatement l'expéditeur. Toute
>> utilisation de ce message non conforme à sa destination, toute
>> diffusion ou toute publication, totale ou partielle, est interdite,
>> sauf autorisation expresse. Ce message a fait l'objet d'un traitement
>> anti-virus.
>>
>> Le contenu de ce message et des pièces jointes ne pourrait engager la
>> responsabilité du ministère que s'il a été émis par une personne
>> dûment habilitée agissant dans le strict cadre des fonctions
>> auxquelles elle est employée et à des fins non étrangères à ses
>> attributions.
>>
>
>
>
> --
>
> Regards
> Heiko Zuerker
>
--
*Frank Weis*
Conseiller informaticien
LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
Centre de gestion informatique de l’éducation
eduPôle - Walferdange
Route de Diekirch, L-7220 Walferdange
_Adresse postale_ : B.P. 98, L-7201 Bereldange
Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
E-mail : Fra...@cg... <mailto:Fra...@cg...>
www.cgie.lu <http://www.cgie.lu/>
www.men.lu <http://www.men.lu/>
www.gouvernement.lu <http://www.gouvernement.lu>
Ce message et toutes pièces jointes sont établis à l'intention exclusive
de ses destinataires. Ils peuvent contenir des informations
confidentielles. Si vous recevez ce message par erreur, merci de le
détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation
de ce message non conforme à sa destination, toute diffusion ou toute
publication, totale ou partielle, est interdite, sauf autorisation
expresse. Ce message a fait l'objet d'un traitement anti-virus.
Le contenu de ce message et des pièces jointes ne pourrait engager la
responsabilité du ministère que s'il a été émis par une personne dûment
habilitée agissant dans le strict cadre des fonctions auxquelles elle
est employée et à des fins non étrangères à ses attributions.
|
|
From: Heiko Z. <he...@zu...> - 2016-08-08 22:54:36
|
Udo, Ah yes, that was the one question I forgot to ask. It's usually best to nuke the lfssystem directory and start over, if something is not behaving correctly. Heiko Quoting Udo Lembke <ul...@po...>: > Hi, > > has something to do with older things inside the lfssystem... > > Started again from zero and now make prepare is running and binutils is > allready prepared! > > Udo > > ------------------------------------------------------------------------------ > What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic > patterns at an interface-level. Reveals which users, apps, and protocols are > consuming the most bandwidth. Provides multi-vendor support for NetFlow, > J-Flow, sFlow and other flows. Make informed decisions using capacity > planning reports. http://sdm.link/zohodev2dev > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li...://lists.sourceforge.net/lists/listinfo/devil-linux-discuss -- Regards Heiko Zuerker |
|
From: Udo L. <ul...@po...> - 2016-08-08 21:08:51
|
Hi, has something to do with older things inside the lfssystem... Started again from zero and now make prepare is running and binutils is allready prepared! Udo |
|
From: Heiko Z. <he...@zu...> - 2016-08-08 19:00:16
|
Frank, Try increasing the log level and see if it spits anything else out in the squid log, before it crashes. Are you using an existing configuration? If yes, try with a clean one. You can also try the server version to see if it's related to any of our security enhancements. Heiko Quoting Frank Weis <Fra...@cg...>: > Hi Heiko, > > > > I got the latest squid installed, it still crashes: > > > > squid -version > Squid Cache: Version 3.5.20-20160805-r14070 > Service Name: squid > configure options: '--prefix=/usr' '--sysconfdir=/etc' > '--bindir=/usr/sbin' '--libexecdir=/usr/sbin' > '--datadir=/usr/share/squid' '--localstatedir=/var/squid' > '--sharedstatedir=/var/squid' '--enable-delay-pools > ' '--enable-useragent-log' '--enable-referer-log' '--enable-arp-acl' > '--enable-ssl' '--with-openssl' '--enable-htcp' > '--enable-linux-netfilter' '--enable-auth' > '--disable-auth-negotiate' '--enable-auth-basic' '- > -enable-auth-ntlm' '--disable-auth-digest' > '--enable-log-daemon-helpers' '--enable-external-acl-helpers' > '--enable-url-rewrite-helpers' '--enable-delay-icmp' '--enable-esi' > '--enable-ecap' '--enable-follow-x-for > warded-for' '--enable-default-err-language=English' > '--enable-err-languages=English' 'CFLAGS=-mtune=i686 -march=i686' > 'CXXFLAGS=-mtune=i686 -march=i686' > Illegal instruction > > Any other ideas? > > > > Thanks > On 2016-08-03 17:48, Heiko Zuerker wrote: > >> Frank, >> >> It's core dumping, but that could be for a million reasons. >> Can you try updating squid and see if it makes a difference? >> >> Heiko >> >> Quoting Frank Weis <Fra...@cg...>: >> >>> Hi all, >>> >>> >>> >>> squid exits immediately and I have the following log messages. >>> This happens in rc1 and rc2. Any hints? >>> >>> >>> >>> [10504.225825] grsec: Illegal instruction occurred at 083a5893 >>> in /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent >>> /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0 >>> [10504.225868] grsec: denied resource overstep by requesting 4096 >>> for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504] >>> uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] >>> uid/euid:0/0 gid/ >>> egid:0/0 >>> >>> >>> >>> Thanks a lot >>> >>> Frank >>> -- >>> >>> FRANK WEIS >>> Conseiller informaticien >>> >>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG >>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse >>> Centre de gestion informatique de l’éducation >>> >>> eduPôle - Walferdange >>> Route de Diekirch, L-7220 Walferdange >>> _Adresse postale_ : B.P. 98, L-7201 Bereldange >>> >>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 >>> E-mail : Fra...@cg... >>> www.cgie.lu[1] >>> www.men.lu[2] >>> www.gouvernement.lu[3] >>> >>> Ce message et toutes pièces jointes sont établis à l'intention >>> exclusive de ses destinataires. Ils peuvent contenir des >>> informations confidentielles. Si vous recevez ce message par >>> erreur, merci de le détruire et d'en avertir immédiatement >>> l'expéditeur. Toute utilisation de ce message non conforme à sa >>> destination, toute diffusion ou toute publication, totale ou >>> partielle, est interdite, sauf autorisation expresse. Ce message a >>> fait l'objet d'un traitement anti-virus. >>> >>> Le contenu de ce message et des pièces jointes ne pourrait engager >>> la responsabilité du ministère que s'il a été émis par une >>> personne dûment habilitée agissant dans le strict cadre des >>> fonctions auxquelles elle est employée et à des fins non >>> étrangères à ses attributions. >>> >> >> >> -- >> >> Regards >> Heiko Zuerker >> > > -- > > FRANK WEIS > Conseiller informaticien > > LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG > Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse > Centre de gestion informatique de l’éducation > > eduPôle - Walferdange > Route de Diekirch, L-7220 Walferdange > _Adresse postale_ : B.P. 98, L-7201 Bereldange > > Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 > E-mail : Fra...@cg... > www.cgie.lu[1] > www.men.lu[2] > www.gouvernement.lu[3] > > Ce message et toutes pièces jointes sont établis à l'intention > exclusive de ses destinataires. Ils peuvent contenir des > informations confidentielles. Si vous recevez ce message par erreur, > merci de le détruire et d'en avertir immédiatement l'expéditeur. > Toute utilisation de ce message non conforme à sa destination, toute > diffusion ou toute publication, totale ou partielle, est interdite, > sauf autorisation expresse. Ce message a fait l'objet d'un > traitement anti-virus. > > Le contenu de ce message et des pièces jointes ne pourrait engager > la responsabilité du ministère que s'il a été émis par une personne > dûment habilitée agissant dans le strict cadre des fonctions > auxquelles elle est employée et à des fins non étrangères à ses > attributions. > Links: ------ [1] http://www.cgie.lu/ [2] http://www.men.lu/ [3] http://www.gouvernement.lu -- Regards Heiko Zuerker |
|
From: Frank W. <Fra...@cg...> - 2016-08-08 08:08:58
|
Hi Heiko, I got the latest squid installed, it still crashes: squid -version Squid Cache: Version 3.5.20-20160805-r14070 Service Name: squid configure options: '--prefix=/usr' '--sysconfdir=/etc' '--bindir=/usr/sbin' '--libexecdir=/usr/sbin' '--datadir=/usr/share/squid' '--localstatedir=/var/squid' '--sharedstatedir=/var/squid' '--enable-delay-pools ' '--enable-useragent-log' '--enable-referer-log' '--enable-arp-acl' '--enable-ssl' '--with-openssl' '--enable-htcp' '--enable-linux-netfilter' '--enable-auth' '--disable-auth-negotiate' '--enable-auth-basic' '- -enable-auth-ntlm' '--disable-auth-digest' '--enable-log-daemon-helpers' '--enable-external-acl-helpers' '--enable-url-rewrite-helpers' '--enable-delay-icmp' '--enable-esi' '--enable-ecap' '--enable-follow-x-for warded-for' '--enable-default-err-language=English' '--enable-err-languages=English' 'CFLAGS=-mtune=i686 -march=i686' 'CXXFLAGS=-mtune=i686 -march=i686' Illegal instruction Any other ideas? Thanks On 2016-08-03 17:48, Heiko Zuerker wrote: > > Frank, > > It's core dumping, but that could be for a million reasons. > Can you try updating squid and see if it makes a difference? > > Heiko > > Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>: > >> Hi all, >> >> >> >> squid exits immediately and I have the following log messages. This >> happens in rc1 and rc2. Any hints? >> >> >> >> [10504.225825] grsec: Illegal instruction occurred at 083a5893 in >> /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent >> /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0 >> [10504.225868] grsec: denied resource overstep by requesting 4096 for >> RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504] >> uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] >> uid/euid:0/0 gid/ >> egid:0/0 >> >> >> >> >> Thanks a lot >> >> Frank >> -- >> >> *Frank Weis* >> Conseiller informaticien >> >> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG >> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse >> Centre de gestion informatique de l’éducation >> >> eduPôle - Walferdange >> Route de Diekirch, L-7220 Walferdange >> _Adresse postale_ : B.P. 98, L-7201 Bereldange >> >> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 >> E-mail : Fra...@cg... <mailto:Fra...@cg...> >> www.cgie.lu <http://www.cgie.lu/> >> www.men.lu <http://www.men.lu/> >> www.gouvernement.lu <http://www.gouvernement.lu> >> >> Ce message et toutes pièces jointes sont établis à l'intention >> exclusive de ses destinataires. Ils peuvent contenir des informations >> confidentielles. Si vous recevez ce message par erreur, merci de le >> détruire et d'en avertir immédiatement l'expéditeur. Toute >> utilisation de ce message non conforme à sa destination, toute >> diffusion ou toute publication, totale ou partielle, est interdite, >> sauf autorisation expresse. Ce message a fait l'objet d'un traitement >> anti-virus. >> >> Le contenu de ce message et des pièces jointes ne pourrait engager la >> responsabilité du ministère que s'il a été émis par une personne >> dûment habilitée agissant dans le strict cadre des fonctions >> auxquelles elle est employée et à des fins non étrangères à ses >> attributions. >> > > > > -- > > Regards > Heiko Zuerker > -- *Frank Weis* Conseiller informaticien LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse Centre de gestion informatique de l’éducation eduPôle - Walferdange Route de Diekirch, L-7220 Walferdange _Adresse postale_ : B.P. 98, L-7201 Bereldange Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 E-mail : Fra...@cg... <mailto:Fra...@cg...> www.cgie.lu <http://www.cgie.lu/> www.men.lu <http://www.men.lu/> www.gouvernement.lu <http://www.gouvernement.lu> Ce message et toutes pièces jointes sont établis à l'intention exclusive de ses destinataires. Ils peuvent contenir des informations confidentielles. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. Ce message a fait l'objet d'un traitement anti-virus. Le contenu de ce message et des pièces jointes ne pourrait engager la responsabilité du ministère que s'il a été émis par une personne dûment habilitée agissant dans le strict cadre des fonctions auxquelles elle est employée et à des fins non étrangères à ses attributions. |
|
From: Udo L. <ul...@po...> - 2016-08-07 21:06:58
|
Hi Heiko, On 07.08.2016 17:38, Heiko Zuerker wrote: > Udo, > > Let me ask a few basic questions: > I assume you > used ftp://ftp.devil-linux.org/pub/devel/sources/lfssystem-for-DL-1.6/lfssystem64-1.1.tar.xz > as the build environment? yes - to be sure I'm load the lfssystem again - no difference in download - and overwrite again... > Did you load the default config on "make menuconfig"? If not, give > that a try. Maybe there's a dependency wrong. > Was the "cr" (chroot) command successfully executed? yes, I do the same again. To be sure I'm delete the old config and create an new one: make mrproper rm .config make menuconfig make unpack -> this produce an error: unpacking /build/src/qadsl-final-1.2.tar.xz tar: A lone zero block at 80 And with binutils I'm not further: root:/build# make prepare mount: proc already mounted mount: none already mounted or /sys busy make: Entering directory `/build' prepare: prepare log: /build/tmp/LOGS/prepare/prepare prepare: binutils log: /build/tmp/LOGS/prepare/binutils make: *** [binutils] Error 1 make: Leaving directory `/build' make: *** [prepare] Error 1 glibc2.14 is missing: make[4]: Nothing to be done for `install-exec-am'. test -z "/usr/include" || /bin/mkdir -p "/usr/include" /bin/install -c -m 644 /build/tmp/binutils-2.25.1/opcodes/../include/dis-asm.h '/usr/include' test -z "/usr/lib" || /bin/mkdir -p "/usr/lib" /bin/sh ./libtool --mode=install /bin/install -c libopcodes.la '/usr/lib' libtool: install: /bin/install -c .libs/libopcodes-2.25.1.so /usr/lib/libopcodes-2.25.1.so libtool: install: (cd /usr/lib && { ln -s -f libopcodes-2.25.1.so libopcodes.so || { rm -f libopcodes.so && ln -s libopcodes-2.25.1.so libopcodes.so; }; }) libtool: install: /bin/install -c .libs/libopcodes.lai /usr/lib/libopcodes.la libtool: install: /bin/install -c .libs/libopcodes.a /usr/lib/libopcodes.a libtool: install: chmod 644 /usr/lib/libopcodes.a libtool: install: ranlib /usr/lib/libopcodes.a ranlib: /lib/libc.so.6: version `GLIBC_2.14' not found (required by /usr/lib/libz.so.1) make[4]: *** [install-bfdlibLTLIBRARIES] Error 1 make[4]: Leaving directory `/build/tmp/binutils-prepare/opcodes' make[3]: *** [install-am] Error 2 make[3]: Leaving directory `/build/tmp/binutils-prepare/opcodes' make[2]: *** [install-recursive] Error 1 make[2]: Leaving directory `/build/tmp/binutils-prepare/opcodes' make[1]: *** [install-opcodes] Error 2 make[1]: Leaving directory `/build/tmp/binutils-prepare' make: *** [install] Error 2 Are the libc from the host system (debian 8 jessie) are used and not from the lfssystem?? On the host: ii libc6:amd64 2.19-18+deb8u4 amd64 GNU C Library: Shared libraries Udo |
|
From: Heiko Z. <he...@zu...> - 2016-08-07 15:38:30
|
Udo, Let me ask a few basic questions: I assume you used ftp://ftp.devil-linux.org/pub/devel/sources/lfssystem-for-DL-1.6/lfssystem64-1.1.tar.xz as the build environment? Did you load the default config on "make menuconfig"? If not, give that a try. Maybe there's a dependency wrong. Was the "cr" (chroot) command successfully executed? Also, please take a look at: http://devil-linux.org/documentation/1.6.x/ch03s05.html for common issues. Heiko Quoting Udo Lembke <ul...@po...>: > Hi all, > I tried to build the actual devil-linux from scratch to test haproxy and > wrote an startscript for this. > > But I'm not able to do this. > make prepare failed with binutils - error log at the end. > I'm not sure, if I do all things right before, because the docs are a > little bit out of sync... some links aren't work. (Like on > http://devil-linux.org/documentation/1.6.x/ch03s01.html the links below > 1.3.4) > > Steps (as root): > cd /usr/src/lfssystem64 > cvs > -d:pserver:ano...@de...:/cvsroot/devil-linux > login > cvs -z3 > -d:pserver:ano...@de...:/cvsroot/devil-linux > co build > cd build/ > cvs update -d -P > ./update_src > cr > cd build > make unpack > make menuconfig > make prepare > > ######## failed ######### > > end of the logfile: > if [ x"-fpic" != x ]; then \ > gcc -D_FORTIFY_SOURCE=0 -c -DHAVE_CONFIG_H -m64 -I. > -I/build/tmp/binutils-2.25.1/libiberty/../include -W -Wall > -Wwrite-strings -Wc++-compat -Wstrict-prototypes -pedantic -fpic > /build/tmp/ > binutils-2.25.1/libiberty/fibheap.c -o pic/fibheap.o; \ > else true; fi > <command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by > default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:1:0: note: this is the > location of the previous definition > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_union': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:151:7: warning: implicit > declaration of function 'free' [-Wimplicit-function-declaration] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:151:7: warning: > incompatible implicit declaration of built-in function 'free' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:156:7: warning: > incompatible implicit declaration of built-in function 'free' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:172:3: warning: > incompatible implicit declaration of built-in function 'free' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function > 'fibheap_extract_min': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:190:7: warning: > incompatible implicit declaration of built-in function 'free' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function > 'fibheap_replace_key_data': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:220:30: error: 'LONG_MIN' > undeclared (first use in this function) > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:220:30: note: each > undeclared identifier is reported only once for each function it appears in > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function > 'fibheap_delete_node': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:261:36: error: 'LONG_MIN' > undeclared (first use in this function) > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:265:7: warning: implicit > declaration of function 'abort' [-Wimplicit-function-declaration] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:265:7: warning: > incompatible implicit declaration of built-in function 'abort' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function > 'fibheap_delete': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:277:5: warning: > incompatible implicit declaration of built-in function 'free' [enabled > by default] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function > 'fibheap_consolidate': > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:368:3: warning: implicit > declaration of function 'memset' [-Wimplicit-function-declaration] > /build/tmp/binutils-2.25.1/libiberty/fibheap.c:368:3: warning: > incompatible implicit declaration of built-in function 'memset' [enabled > by default] > make[2]: *** [fibheap.o] Error 1 > make[2]: Leaving directory `/build/tmp/binutils-prepare/libiberty' > make[1]: *** [all-libiberty] Error 2 > make[1]: Leaving directory `/build/tmp/binutils-prepare' > make: *** [all] Error 2 > > Any hint? > Udo -- Regards Heiko Zuerker |
|
From: Udo L. <ul...@po...> - 2016-08-06 19:17:23
|
Hi all, I tried to build the actual devil-linux from scratch to test haproxy and wrote an startscript for this. But I'm not able to do this. make prepare failed with binutils - error log at the end. I'm not sure, if I do all things right before, because the docs are a little bit out of sync... some links aren't work. (Like on http://devil-linux.org/documentation/1.6.x/ch03s01.html the links below 1.3.4) Steps (as root): cd /usr/src/lfssystem64 cvs -d:pserver:ano...@de...:/cvsroot/devil-linux login cvs -z3 -d:pserver:ano...@de...:/cvsroot/devil-linux co build cd build/ cvs update -d -P ./update_src cr cd build make unpack make menuconfig make prepare ######## failed ######### end of the logfile: if [ x"-fpic" != x ]; then \ gcc -D_FORTIFY_SOURCE=0 -c -DHAVE_CONFIG_H -m64 -I. -I/build/tmp/binutils-2.25.1/libiberty/../include -W -Wall -Wwrite-strings -Wc++-compat -Wstrict-prototypes -pedantic -fpic /build/tmp/ binutils-2.25.1/libiberty/fibheap.c -o pic/fibheap.o; \ else true; fi <command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:1:0: note: this is the location of the previous definition /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_union': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:151:7: warning: implicit declaration of function 'free' [-Wimplicit-function-declaration] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:151:7: warning: incompatible implicit declaration of built-in function 'free' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:156:7: warning: incompatible implicit declaration of built-in function 'free' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:172:3: warning: incompatible implicit declaration of built-in function 'free' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_extract_min': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:190:7: warning: incompatible implicit declaration of built-in function 'free' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_replace_key_data': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:220:30: error: 'LONG_MIN' undeclared (first use in this function) /build/tmp/binutils-2.25.1/libiberty/fibheap.c:220:30: note: each undeclared identifier is reported only once for each function it appears in /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_delete_node': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:261:36: error: 'LONG_MIN' undeclared (first use in this function) /build/tmp/binutils-2.25.1/libiberty/fibheap.c:265:7: warning: implicit declaration of function 'abort' [-Wimplicit-function-declaration] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:265:7: warning: incompatible implicit declaration of built-in function 'abort' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_delete': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:277:5: warning: incompatible implicit declaration of built-in function 'free' [enabled by default] /build/tmp/binutils-2.25.1/libiberty/fibheap.c: In function 'fibheap_consolidate': /build/tmp/binutils-2.25.1/libiberty/fibheap.c:368:3: warning: implicit declaration of function 'memset' [-Wimplicit-function-declaration] /build/tmp/binutils-2.25.1/libiberty/fibheap.c:368:3: warning: incompatible implicit declaration of built-in function 'memset' [enabled by default] make[2]: *** [fibheap.o] Error 1 make[2]: Leaving directory `/build/tmp/binutils-prepare/libiberty' make[1]: *** [all-libiberty] Error 2 make[1]: Leaving directory `/build/tmp/binutils-prepare' make: *** [all] Error 2 Any hint? Udo |
|
From: Udo L. <ul...@po...> - 2016-08-04 06:39:03
|
Hi, just an remark. I had switch back from an dl1.8 firewall to dl1.6.9 because the firewall script generated with fwbuilder work not right with the new iptables. First it's looks good, but after add/remove rules we had the effect, that old rules was extend (not fresh created) with new content!! Extremly dangerous. Will take a look at shorewall next week... Udo On 09.05.2016 14:50, Frank Weis wrote: > Hi fellow DL-Users, > > I know that this is probably not the best place to ask this, but I hope > you don't mind me picking your clustered brains : > > I have >60 DL firewalls in operation, and the fact that fwbuilder > development is halted is increasingly concerning me. The generated policies > use constructs that become obsolete or even wrong with recent netfilter > versions (ie 'any ICMP' in a NAT rule is no longer supported in DL-1.8's > iptables). > > How do you people address this? What do you use to generate your > firewall rules? Any suggestions for me? > > Thanks a lot in advance, > > Frank > |
|
From: Heiko Z. <he...@zu...> - 2016-08-03 15:48:17
|
Frank, It's core dumping, but that could be for a million reasons. Can you try updating squid and see if it makes a difference? Heiko Quoting Frank Weis <Fra...@cg...>: > Hi all, > > > > squid exits immediately and I have the following log messages. > This happens in rc1 and rc2. Any hints? > > > > [10504.225825] grsec: Illegal instruction occurred at 083a5893 in > /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent > /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0 > [10504.225868] grsec: denied resource overstep by requesting 4096 > for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504] > uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] > uid/euid:0/0 gid/ > egid:0/0 > > > > Thanks a lot > > Frank > -- > > FRANK WEIS > Conseiller informaticien > > LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG > Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse > Centre de gestion informatique de l’éducation > > eduPôle - Walferdange > Route de Diekirch, L-7220 Walferdange > _Adresse postale_ : B.P. 98, L-7201 Bereldange > > Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 > E-mail : Fra...@cg... > www.cgie.lu[1] > www.men.lu[2] > www.gouvernement.lu[3] > > Ce message et toutes pièces jointes sont établis à l'intention > exclusive de ses destinataires. Ils peuvent contenir des > informations confidentielles. Si vous recevez ce message par erreur, > merci de le détruire et d'en avertir immédiatement l'expéditeur. > Toute utilisation de ce message non conforme à sa destination, toute > diffusion ou toute publication, totale ou partielle, est interdite, > sauf autorisation expresse. Ce message a fait l'objet d'un > traitement anti-virus. > > Le contenu de ce message et des pièces jointes ne pourrait engager > la responsabilité du ministère que s'il a été émis par une personne > dûment habilitée agissant dans le strict cadre des fonctions > auxquelles elle est employée et à des fins non étrangères à ses > attributions. > Links: ------ [1] http://www.cgie.lu/ [2] http://www.men.lu/ [3] http://www.gouvernement.lu -- Regards Heiko Zuerker |
|
From: Frank W. <Fra...@cg...> - 2016-08-03 09:49:20
|
Hi all, squid exits immediately and I have the following log messages. This happens in rc1 and rc2. Any hints? [10504.225825] grsec: Illegal instruction occurred at 083a5893 in /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/egid:0/0 [10504.225868] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/sbin/squid[squid:2504] uid/euid:0/0 gid/egid:0/0, parent /etc/init.d/squid[squid:2497] uid/euid:0/0 gid/ egid:0/0 Thanks a lot Frank -- *Frank Weis* Conseiller informaticien LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse Centre de gestion informatique de l’éducation eduPôle - Walferdange Route de Diekirch, L-7220 Walferdange _Adresse postale_ : B.P. 98, L-7201 Bereldange Tél. : (+352) 247-85973 . Fax : (+352) 247-85174 E-mail : Fra...@cg... <mailto:Fra...@cg...> www.cgie.lu <http://www.cgie.lu/> www.men.lu <http://www.men.lu/> www.gouvernement.lu <http://www.gouvernement.lu> Ce message et toutes pièces jointes sont établis à l'intention exclusive de ses destinataires. Ils peuvent contenir des informations confidentielles. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. Ce message a fait l'objet d'un traitement anti-virus. Le contenu de ce message et des pièces jointes ne pourrait engager la responsabilité du ministère que s'il a été émis par une personne dûment habilitée agissant dans le strict cadre des fonctions auxquelles elle est employée et à des fins non étrangères à ses attributions. |
|
From: Frank W. <Fra...@cg...> - 2016-08-03 06:23:54
|
Hi Heiko,
it took me a while (the build system never shows me any love, so I had
to rebuild from scratch) but now it's done and:
YES, it works! Thanks.
On 2016-07-31 17:23, Heiko Zuerker wrote:
>
> Frank,
>
> I had a few minutes and incorporated the latest git version of ppp,
> pptp (client), and pptpd (poptop).
> Let me know if this combination behaves any better.
>
> Heiko
>
> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>
>> Hi Heiko,
>> It's very likely pptp at fault, I believe ppp is behaving if called
>> correctly.
>>
>> @all: in the meantime, I have a dirty workaround if anyone needs it.
>> You lose the possibility to assign a fixed client IP in the
>> chap-secrets file.
>> Thanks
>>
>> Frank
>>
>> Sent from my Cyanogen phone
>>
>> On Jul 29, 2016 3:14 PM, Heiko Zuerker <he...@zu...> wrote:
>>
>> Frank,
>>
>> It'll be a little while before I get to looking into it.
>> Unfortunately the ppp package doesn't receive a lot of updates
>> anymore, but hopefully we can find a version that works better.
>>
>> Heiko
>>
>> Quoting Frank Weis <Fra...@cg... <mailto:Fra...@cg...>>:
>>
>>> Hi all,
>>>
>>>
>>>
>>> I have come across a bug in upgrading in pptp.
>>>
>>> the log shows that pppd is called with an argument that it
>>> cannot process:
>>>
>>> Jul 27 12:59:32 src@xxx pppd[16744]: unrecognized option '<FF><FF><FF>^?<FE>
>>> <FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF>'
>>> Jul 27 12:59:32 src@ltagr pptpd[16743]: GRE: read(fd=6,buffer=80503e0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
>>>
>>> I have traced this by replacing pppd with a perl script ('ppp
>>> /etc/myppp.pl' in /etc/pptpd.conf)
>>>
>>> I can see that the command line arguments passed to pppd are:
>>>
>>> local file /etc/ppp/pptpd-options 115200 ������������������������������������������������������������������������������������������������������������������������������� ipparam xxx.yyy.zzz.ttt
>>>
>>> I have created an extremely ugly perl script that sanitizes the
>>> params and then execs pppd (ie implementing a round-robin
>>> distribution of distributing IPs to the vpn clients), and I have
>>> now a more or less working workaround, but something in pptp is
>>> broken.
>>>
>>>
>>>
>>> Thanks a lot,
>>>
>>>
>>>
>>> Frank
>>>
>>>
>>>
>>>
>>> --
>>>
>>> *Frank Weis*
>>> Conseiller informaticien
>>>
>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>>> Centre de gestion informatique de l’éducation
>>>
>>> eduPôle - Walferdange
>>> Route de Diekirch, L-7220 Walferdange
>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>>
>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>>> E-mail : Fra...@cg... <mailto:Fra...@cg...>
>>> www.cgie.lu <http://www.cgie.lu/>
>>> www.men.lu <http://www.men.lu/>
>>> www.gouvernement.lu <http://www.gouvernement.lu>
>>>
>>> Ce message et toutes pièces jointes sont établis à l'intention
>>> exclusive de ses destinataires. Ils peuvent contenir des
>>> informations confidentielles. Si vous recevez ce message par
>>> erreur, merci de le détruire et d'en avertir immédiatement
>>> l'expéditeur. Toute utilisation de ce message non conforme à sa
>>> destination, toute diffusion ou toute publication, totale ou
>>> partielle, est interdite, sauf autorisation expresse. Ce message
>>> a fait l'objet d'un traitement anti-virus.
>>>
>>> Le contenu de ce message et des pièces jointes ne pourrait
>>> engager la responsabilité du ministère que s'il a été émis par
>>> une personne dûment habilitée agissant dans le strict cadre des
>>> fonctions auxquelles elle est employée et à des fins non
>>> étrangères à ses attributions.
>>>
>>
>>
>>
>> --
>>
>> Regards
>> Heiko Zuerker
>>
>>
>
>
>
> --
>
> Regards
> Heiko Zuerker
>
--
*Frank Weis*
Conseiller informaticien
LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
Centre de gestion informatique de l’éducation
eduPôle - Walferdange
Route de Diekirch, L-7220 Walferdange
_Adresse postale_ : B.P. 98, L-7201 Bereldange
Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
E-mail : Fra...@cg... <mailto:Fra...@cg...>
www.cgie.lu <http://www.cgie.lu/>
www.men.lu <http://www.men.lu/>
www.gouvernement.lu <http://www.gouvernement.lu>
Ce message et toutes pièces jointes sont établis à l'intention exclusive
de ses destinataires. Ils peuvent contenir des informations
confidentielles. Si vous recevez ce message par erreur, merci de le
détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation
de ce message non conforme à sa destination, toute diffusion ou toute
publication, totale ou partielle, est interdite, sauf autorisation
expresse. Ce message a fait l'objet d'un traitement anti-virus.
Le contenu de ce message et des pièces jointes ne pourrait engager la
responsabilité du ministère que s'il a été émis par une personne dûment
habilitée agissant dans le strict cadre des fonctions auxquelles elle
est employée et à des fins non étrangères à ses attributions.
|
|
From: Heiko Z. <he...@zu...> - 2016-07-31 15:23:33
|
Frank,
I had a few minutes and incorporated the latest git version of ppp,
pptp (client), and pptpd (poptop).
Let me know if this combination behaves any better.
Heiko
Quoting Frank Weis <Fra...@cg...>:
> Hi Heiko,
> It's very likely pptp at fault, I believe ppp is behaving if called
> correctly.
>
> @all: in the meantime, I have a dirty workaround if anyone needs
> it. You lose the possibility to assign a fixed client IP in the
> chap-secrets file.
> Thanks
>
> Frank
>
> Sent from my Cyanogen phone
> On Jul 29, 2016 3:14 PM, Heiko Zuerker <he...@zu...> wrote:
>
>> Frank,
>>
>> It'll be a little while before I get to looking into it.
>> Unfortunately the ppp package doesn't receive a lot of updates
>> anymore, but hopefully we can find a version that works better.
>>
>> Heiko
>>
>> Quoting Frank Weis <Fra...@cg...>:
>>
>>> Hi all,
>>>
>>>
>>>
>>> I have come across a bug in upgrading in pptp.
>>>
>>> the log shows that pppd is called with an argument that it
>>> cannot process:
>>> Jul 27 12:59:32 src@xxx pppd[16744]: unrecognized option
>>> '<FF><FF><FF>^?<FE>
>>> <FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF>' Jul 27 12:59:32 src@ltagr pptpd[16743]: GRE: read(fd=6,buffer=80503e0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd
>>> logs
>>> I have traced this by replacing pppd with a perl script ('ppp
>>> /etc/myppp.pl' in /etc/pptpd.conf)
>>>
>>> I can see that the command line arguments passed to pppd are:
>>> local file /etc/ppp/pptpd-options 115200
>>> ������������������������������������������������������������������������������������������������������������������������������� ipparam
>>> xxx.yyy.zzz.ttt
>>> I have created an extremely ugly perl script that sanitizes
>>> the params and then execs pppd (ie implementing a round-robin
>>> distribution of distributing IPs to the vpn clients), and I have
>>> now a more or less working workaround, but something in pptp is
>>> broken.
>>>
>>>
>>>
>>> Thanks a lot,
>>>
>>>
>>>
>>> Frank
>>>
>>>
>>>
>>> --
>>>
>>> FRANK WEIS
>>> Conseiller informaticien
>>>
>>> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
>>> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
>>> Centre de gestion informatique de l’éducation
>>>
>>> eduPôle - Walferdange
>>> Route de Diekirch, L-7220 Walferdange
>>> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>>>
>>> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
>>> E-mail : Fra...@cg...
>>> www.cgie.lu[1]
>>> www.men.lu[2]
>>> www.gouvernement.lu[3]
>>>
>>> Ce message et toutes pièces jointes sont établis à l'intention
>>> exclusive de ses destinataires. Ils peuvent contenir des
>>> informations confidentielles. Si vous recevez ce message par
>>> erreur, merci de le détruire et d'en avertir immédiatement
>>> l'expéditeur. Toute utilisation de ce message non conforme à sa
>>> destination, toute diffusion ou toute publication, totale ou
>>> partielle, est interdite, sauf autorisation expresse. Ce message a
>>> fait l'objet d'un traitement anti-virus.
>>>
>>> Le contenu de ce message et des pièces jointes ne pourrait engager
>>> la responsabilité du ministère que s'il a été émis par une
>>> personne dûment habilitée agissant dans le strict cadre des
>>> fonctions auxquelles elle est employée et à des fins non
>>> étrangères à ses attributions.
>>>
>>
>>
>> --
>>
>> Regards
>> Heiko Zuerker
>>
Links:
------
[1] http://www.cgie.lu/
[2] http://www.men.lu/
[3] http://www.gouvernement.lu
--
Regards
Heiko Zuerker
|
|
From: Frank W. <Fra...@cg...> - 2016-07-29 13:21:09
|
Hi Heiko,
It's very likely pptp at fault, I believe ppp is behaving if called correctly.
@all: in the meantime, I have a dirty workaround if anyone needs it. You lose the possibility to assign a fixed client IP in the chap-secrets file.
Thanks
Frank
Sent from my Cyanogen phone
On Jul 29, 2016 3:14 PM, Heiko Zuerker <he...@zu...> wrote:
Frank,
It'll be a little while before I get to looking into it.
Unfortunately the ppp package doesn't receive a lot of updates anymore, but hopefully we can find a version that works better.
Heiko
Quoting Frank Weis <Fra...@cg...<mailto:Fra...@cg...>>:
Hi all,
I have come across a bug in upgrading in pptp.
the log shows that pppd is called with an argument that it cannot process:
Jul 27 12:59:32 src@xxx pppd[16744]: unrecognized option '<FF><FF><FF>^?<FE>
<FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF>'
Jul 27 12:59:32 src@ltagr pptpd[16743]: GRE: read(fd=6,buffer=80503e0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd logs
I have traced this by replacing pppd with a perl script ('ppp /etc/myppp.pl' in /etc/pptpd.conf)
I can see that the command line arguments passed to pppd are:
local file /etc/ppp/pptpd-options 115200 ������������������������������������������������������������������������������������������������������������������������������� ipparam xxx.yyy.zzz.ttt
I have created an extremely ugly perl script that sanitizes the params and then execs pppd (ie implementing a round-robin distribution of distributing IPs to the vpn clients), and I have now a more or less working workaround, but something in pptp is broken.
Thanks a lot,
Frank
--
Frank Weis
Conseiller informaticien
LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
Centre de gestion informatique de l’éducation
eduPôle - Walferdange
Route de Diekirch, L-7220 Walferdange
Adresse postale : B.P. 98, L-7201 Bereldange
Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
E-mail : Fra...@cg...<mailto:Fra...@cg...>
www.cgie.lu<http://www.cgie.lu/>
www.men.lu<http://www.men.lu/>
www.gouvernement.lu<http://www.gouvernement.lu>
Ce message et toutes pièces jointes sont établis à l'intention exclusive de ses destinataires. Ils peuvent contenir des informations confidentielles. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse. Ce message a fait l'objet d'un traitement anti-virus.
Le contenu de ce message et des pièces jointes ne pourrait engager la responsabilité du ministère que s'il a été émis par une personne dûment habilitée agissant dans le strict cadre des fonctions auxquelles elle est employée et à des fins non étrangères à ses attributions.
--
Regards
Heiko Zuerker
|
|
From: Heiko Z. <he...@zu...> - 2016-07-29 13:12:59
|
Frank,
It'll be a little while before I get to looking into it.
Unfortunately the ppp package doesn't receive a lot of updates
anymore, but hopefully we can find a version that works better.
Heiko
Quoting Frank Weis <Fra...@cg...>:
> Hi all,
>
>
>
> I have come across a bug in upgrading in pptp.
>
> the log shows that pppd is called with an argument that it cannot process:
> Jul 27 12:59:32 src@xxx pppd[16744]: unrecognized option
> '<FF><FF><FF>^?<FE>
> <FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF><FF>' Jul 27 12:59:32 src@ltagr pptpd[16743]: GRE: read(fd=6,buffer=80503e0,len=8196) from PTY failed: status = -1 error = Input/output error, usually caused by unexpected termination of pppd, check option syntax and pppd
> logs
> I have traced this by replacing pppd with a perl script ('ppp
> /etc/myppp.pl' in /etc/pptpd.conf)
>
> I can see that the command line arguments passed to pppd are:
> local file /etc/ppp/pptpd-options 115200
> ������������������������������������������������������������������������������������������������������������������������������� ipparam
> xxx.yyy.zzz.ttt
> I have created an extremely ugly perl script that sanitizes the
> params and then execs pppd (ie implementing a round-robin
> distribution of distributing IPs to the vpn clients), and I have now
> a more or less working workaround, but something in pptp is broken.
>
>
>
> Thanks a lot,
>
>
>
> Frank
>
>
>
> --
>
> FRANK WEIS
> Conseiller informaticien
>
> LE GOUVERNEMENT DU GRAND-DUCHÉ DE LUXEMBOURG
> Ministère de l’Éducation nationale, de l’Enfance et de la Jeunesse
> Centre de gestion informatique de l’éducation
>
> eduPôle - Walferdange
> Route de Diekirch, L-7220 Walferdange
> _Adresse postale_ : B.P. 98, L-7201 Bereldange
>
> Tél. : (+352) 247-85973 . Fax : (+352) 247-85174
> E-mail : Fra...@cg...
> www.cgie.lu[1]
> www.men.lu[2]
> www.gouvernement.lu[3]
>
> Ce message et toutes pièces jointes sont établis à l'intention
> exclusive de ses destinataires. Ils peuvent contenir des
> informations confidentielles. Si vous recevez ce message par erreur,
> merci de le détruire et d'en avertir immédiatement l'expéditeur.
> Toute utilisation de ce message non conforme à sa destination, toute
> diffusion ou toute publication, totale ou partielle, est interdite,
> sauf autorisation expresse. Ce message a fait l'objet d'un
> traitement anti-virus.
>
> Le contenu de ce message et des pièces jointes ne pourrait engager
> la responsabilité du ministère que s'il a été émis par une personne
> dûment habilitée agissant dans le strict cadre des fonctions
> auxquelles elle est employée et à des fins non étrangères à ses
> attributions.
>
Links:
------
[1] http://www.cgie.lu/
[2] http://www.men.lu/
[3] http://www.gouvernement.lu
--
Regards
Heiko Zuerker
|
50 messages has been excluded from this view by a project administrator.
