Menu
▾
▴
devil-linux-discuss — General Mailing List for all discussions
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(59) |
Sep
(57) |
Oct
(5) |
Nov
(45) |
Dec
(21) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(13) |
Feb
(22) |
Mar
(14) |
Apr
(7) |
May
(33) |
Jun
(57) |
Jul
(25) |
Aug
(40) |
Sep
(53) |
Oct
(58) |
Nov
(75) |
Dec
(22) |
| 2003 |
Jan
(101) |
Feb
(101) |
Mar
(103) |
Apr
(125) |
May
(85) |
Jun
(57) |
Jul
(62) |
Aug
(42) |
Sep
(76) |
Oct
(214) |
Nov
(290) |
Dec
(274) |
| 2004 |
Jan
(187) |
Feb
(172) |
Mar
(313) |
Apr
(209) |
May
(169) |
Jun
(147) |
Jul
(118) |
Aug
(193) |
Sep
(227) |
Oct
(125) |
Nov
(246) |
Dec
(191) |
| 2005 |
Jan
(244) |
Feb
(175) |
Mar
(165) |
Apr
(130) |
May
(217) |
Jun
(122) |
Jul
(188) |
Aug
(235) |
Sep
(165) |
Oct
(133) |
Nov
(209) |
Dec
(88) |
| 2006 |
Jan
(66) |
Feb
(89) |
Mar
(108) |
Apr
(91) |
May
(29) |
Jun
(45) |
Jul
(64) |
Aug
(42) |
Sep
(44) |
Oct
(81) |
Nov
(64) |
Dec
(9) |
| 2007 |
Jan
(24) |
Feb
(122) |
Mar
(55) |
Apr
(50) |
May
(84) |
Jun
(13) |
Jul
(80) |
Aug
(70) |
Sep
(78) |
Oct
(45) |
Nov
(56) |
Dec
(42) |
| 2008 |
Jan
(65) |
Feb
(3) |
Mar
(51) |
Apr
(151) |
May
(54) |
Jun
(72) |
Jul
(73) |
Aug
(47) |
Sep
(55) |
Oct
(123) |
Nov
(16) |
Dec
(4) |
| 2009 |
Jan
(23) |
Feb
(39) |
Mar
(27) |
Apr
(36) |
May
(35) |
Jun
(51) |
Jul
(11) |
Aug
(14) |
Sep
(40) |
Oct
(67) |
Nov
(38) |
Dec
(13) |
| 2010 |
Jan
(15) |
Feb
(35) |
Mar
(40) |
Apr
(11) |
May
(26) |
Jun
(10) |
Jul
(5) |
Aug
(50) |
Sep
(86) |
Oct
(67) |
Nov
(36) |
Dec
(11) |
| 2011 |
Jan
(50) |
Feb
(6) |
Mar
(13) |
Apr
(13) |
May
(29) |
Jun
(27) |
Jul
(26) |
Aug
(27) |
Sep
(21) |
Oct
(7) |
Nov
(27) |
Dec
(4) |
| 2012 |
Jan
(11) |
Feb
(20) |
Mar
(48) |
Apr
(18) |
May
(8) |
Jun
(19) |
Jul
|
Aug
(15) |
Sep
(3) |
Oct
(4) |
Nov
(5) |
Dec
(1) |
| 2013 |
Jan
(13) |
Feb
(7) |
Mar
(4) |
Apr
(25) |
May
(2) |
Jun
(8) |
Jul
(4) |
Aug
(8) |
Sep
(7) |
Oct
|
Nov
(5) |
Dec
(10) |
| 2014 |
Jan
|
Feb
|
Mar
(6) |
Apr
(20) |
May
(5) |
Jun
|
Jul
(2) |
Aug
|
Sep
(8) |
Oct
(21) |
Nov
(4) |
Dec
(7) |
| 2015 |
Jan
(10) |
Feb
(9) |
Mar
(4) |
Apr
|
May
|
Jun
|
Jul
|
Aug
(5) |
Sep
(11) |
Oct
|
Nov
(17) |
Dec
(32) |
| 2016 |
Jan
(10) |
Feb
(15) |
Mar
(4) |
Apr
(7) |
May
(10) |
Jun
(11) |
Jul
(15) |
Aug
(26) |
Sep
(13) |
Oct
(10) |
Nov
(16) |
Dec
(6) |
| 2017 |
Jan
(9) |
Feb
(3) |
Mar
|
Apr
(2) |
May
(2) |
Jun
|
Jul
|
Aug
(3) |
Sep
(3) |
Oct
(6) |
Nov
(8) |
Dec
|
| 2018 |
Jan
(12) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
(4) |
Sep
|
Oct
|
Nov
|
Dec
|
|
From: Heiko Z. <he...@zu...> - 2008-04-02 19:38:17
|
> Hi, > > I bought a nice new mini-itx mobo without checking first if the devices > on it > are supported by DL. This time it's the network interfaces which are > RealTek > RTL-8169 type. This is supported in linux 2.6 OK but so far as I can tell > not in > DL's linux 2.4. Is this right or is there a suitable driver? > > Follow-on question: roughly when can we can we look forward to a stable > DL 1.3? > > No pressure (he said with a forced smile whilst concealing the whips and > thumb-screws behind his back). Tomorrow will be fine :-) Honestly no idea. I'm using a CVS version of 1.3 as my firewall and coulnd't see any problems yet. I think there are still a few issues in 1.3, but we should be pretty close to production quality I would say. -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Bruce S. <bw...@ar...> - 2008-04-02 19:36:46
|
> Follow-on question: roughly when can we can we look forward to a stable DL 1.3? As far as I'm concerned, it's stable now. I'm upgrading all of my 1.2 boxes to 1.3, and haven't had any problems yet <knock wood>. But I'm not using all the software either ... I just compiled a 1.3 'server' version last night with all the latest updates. Would anyone like me to upload it to the ftp testing area? - BS |
|
From: Dick M. <di...@li...> - 2008-04-02 19:29:01
|
Hi, I bought a nice new mini-itx mobo without checking first if the devices on it are supported by DL. This time it's the network interfaces which are RealTek RTL-8169 type. This is supported in linux 2.6 OK but so far as I can tell not in DL's linux 2.4. Is this right or is there a suitable driver? Follow-on question: roughly when can we can we look forward to a stable DL 1.3? No pressure (he said with a forced smile whilst concealing the whips and thumb-screws behind his back). Tomorrow will be fine :-) Dick |
|
From: Serge L. <fi...@in...> - 2008-04-02 19:20:09
|
pes coe wrote: > let me explain you the situation first > we have a static IP from our internet service provider ok > our router is a ADSL router with wifi and dmz capabilities > it has 4 ethernet ports and wifi access > i have successfully installed devil linux (Firewall) after the router > with two NIC > first NIC same subnet as that of LAN (ethernet) of ADSL router . it is > DHCP client of ADSL router. Not good idea. It is much easier to configure your network if DL will have public ip, so reconfigure ADSL router to bridge mode. > Second subnet is a class B network for local LAN > i have considered 172.0.0.10/255.255.0.0 <http://172.0.0.10/255.255.0.0> > as gateway address ie., for second NIC and also it provides DHCP server > for all the client on the LAN from the same you have LAN: 172.0/16, probably it's a typo because it's public network. Let it be 172.16/16 (your LAN is really so big?) > NOW we have dedicated DMZ server which was earlier connected directly to > ADSL router > BUT now we want it to be in LAN as well > please let me know how to configure third NIC which subnet it should have The DMZ have to be a separate network, so it may be (rfc 1918) from the following ranges: 10.0.0.0 - 10.255.255.255 (10/8 prefix) 172.16.0.0 - 172.31.255.255 (172.16/12 prefix) 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) Since you have chosen 172.16/16 for the LAN the choice is a bit narrower: 10.0.0.0 - 10.255.255.255 (10/8 prefix) 172.17.0.0 - 172.31.255.255 ( 15 networks with /16 prefix) 192.168.0.0 - 192.168.255.255 (192.168/16 prefix) I guess something like 172.17.0.0/29 (6 addresses) will be more than enough even if DMZ will grow. It may be also 192.168.0.0/29, 192.168.0.8/29, 192.168.0.16/29 etc etc. > > 1)WHAT SUBNET should i have for 3rd NIC on DL firewall ? 172 network or > 192 one (i assume as class b or class c) > class B? class c? either your network is huge or try to use classless address scheme. please see above. > > 2)can we have a virtual ip for DMZ server that is having both the > network (suppose 172.0.0.254/255.255.0.0 > and like 192.168.2.254/255.255.255.0 > ) on the onboard ethernet card Theoretically you can (will not describe how), but should not. From my viewpoint it's better to have 2 separated network segments ( 2 broadcast domains) because the sense of DMZ will be lost if DMZ and LAN will be one broadcast domain. > > let this be aside please tell me how to route a DMZ request that comes > from outside (INTERNET) to ADSL router and NAT to this dmz server It's easy. - If ADSL is in bridge mode: you have to configure DNAT for DMZ (see /etc/init.d/firewall.rules.* examples) only - If ADSL is in router mode: The first you have to configure DNAT for DMZ The secound you have to add static route for DMZ and LAN to ADSL routing table I assume you realize that in this case there will be 3 networks - LAN, DMZ and transport network between ADLS and DL ( /30 is ok, and DHCP for such network is overkill) > > > > PLEASE HELP ME its not working for me as of now > waiting for ur reply > pescoe -- Serge Leschinsky |
|
From: Dick M. <di...@li...> - 2008-04-02 19:12:34
|
pes coe wrote: > let me explain you the situation first > we have a static IP from our internet service provider ok > our router is a ADSL router with wifi and dmz capabilities > it has 4 ethernet ports and wifi access > Second subnet is a class B network for local LAN > i have considered 172.0.0.10/255.255.0.0 <http://172.0.0.10/255.255.0.0> > NOW we have dedicated DMZ server which was earlier connected directly to > ADSL router > BUT now we want it to be in LAN as well > please let me know how to configure third NIC which subnet it should have > > 1)WHAT SUBNET should i have for 3rd NIC on DL firewall ? 172 network or > 192 one (i assume as class b or class c) Whatever you like so long as it's different from all the other subnets in the world or one from the range private network addresses allocated for this purpose masqueraded behind the firewall. Normally what you do is chose 2 subnets, one for your LAN, say 192.168.1.0/24, and one for your DMZ, say 192.168.2.0/24, and set port forwards from outside to the appropriate place using DNAT in your firewall. You can also add routing from LAN to DMZ in the firewall if you want to access your DMZ from the LAN. You can use fwbuilder on some other machine to create the firewall exactly how you want and download it to your DL system. Dick |
|
From: Oliver N. <dig...@gm...> - 2008-04-02 19:11:44
|
Hi, again! After the solved build issues i gave the latest 1.3.4 build a try. Seems everything ok for now, except the traffic shaping part. If i try: tc qdisc show the command gives a Segmentation fault message. Could someone please check, if this is a general failure or just on my machine? thx, Olli |
|
From: Bruce S. <bw...@ar...> - 2008-04-02 18:19:12
|
172.0.0.0/16 is NOT a private IP range! The private class B's are: 172.16.0.0/16 – 172.31.0.0/16 See: http://en.wikipedia.org/wiki/Private_network Otherwise, I'm kind of lost on what you're asking. Sorry. :-( - BS > let me explain you the situation first > we have a static IP from our internet service provider ok > our router is a ADSL router with wifi and dmz capabilities > it has 4 ethernet ports and wifi access > i have successfully installed devil linux (Firewall) after the router > with two NIC > first NIC same subnet as that of LAN (ethernet) of ADSL router . it > is DHCP client of ADSL router. > > > Second subnet is a class B network for local LAN > i have considered 172.0.0.10/255.255.0.0 as gateway address ie., for > second NIC and also it provides DHCP server for all the client on the > LAN from the same > > > NOW we have dedicated DMZ server which was earlier connected directly > to ADSL router > BUT now we want it to be in LAN as well > please let me know how to configure third NIC which subnet it should > have > > 1)WHAT SUBNET should i have for 3rd NIC on DL firewall ? 172 network > or 192 one (i assume as class b or class c) > > > 2)can we have a virtual ip for DMZ server that is having both the > network (suppose 172.0.0.254/255.255.0.0 and like > 192.168.2.254/255.255.255.0) on the onboard ethernet card > > > > let this be aside please tell me how to route a DMZ request that comes > from outside (INTERNET) to ADSL router and NAT to this dmz server > > > > PLEASE HELP ME its not working for me as of now > waiting for ur reply > pescoe > ------------------------------------------------------------------------- |
|
From: pes c. <pe...@gm...> - 2008-04-02 18:07:14
|
let me explain you the situation first we have a static IP from our internet service provider ok our router is a ADSL router with wifi and dmz capabilities it has 4 ethernet ports and wifi access i have successfully installed devil linux (Firewall) after the router with two NIC first NIC same subnet as that of LAN (ethernet) of ADSL router . it is DHCP client of ADSL router. Second subnet is a class B network for local LAN i have considered 172.0.0.10/255.255.0.0 as gateway address ie., for second NIC and also it provides DHCP server for all the client on the LAN from the same NOW we have dedicated DMZ server which was earlier connected directly to ADSL router BUT now we want it to be in LAN as well please let me know how to configure third NIC which subnet it should have 1)WHAT SUBNET should i have for 3rd NIC on DL firewall ? 172 network or 192 one (i assume as class b or class c) 2)can we have a virtual ip for DMZ server that is having both the network (suppose 172.0.0.254/255.255.0.0 and like 192.168.2.254/255.255.255.0) on the onboard ethernet card let this be aside please tell me how to route a DMZ request that comes from outside (INTERNET) to ADSL router and NAT to this dmz server PLEASE HELP ME its not working for me as of now waiting for ur reply pescoe |
|
From: Serge L. <fi...@in...> - 2008-04-01 12:35:20
|
Hi, Andrzej Odyniec wrote: > Hi Serge, >> Hopefully I've fixed it. May I ask you to sync and try again? > No problem. Is compiling now from null. Thank you! > > Attention! > executing prepare with option build > is waiting for answer: Magic SysRq key (MAGIC_SYSRQ) [N/y/?] (NEW) ... Thanks. Fixed. -- Sincerely, Serge Leschinsky |
|
From: Serge L. <fi...@in...> - 2008-04-01 12:30:07
|
Hi, Oliver Niesner wrote: ... > I think "CONFIG_DISABLELOGGING=y" could be set to "n" after ther decisions are made to > make the build less noisy, or i am wrong? You are absolutely correct. -- Sincerely, Serge Leschinsky |
|
From: Andrzej O. <an...@ma...> - 2008-04-01 11:43:39
|
Hi Serge,
> Hopefully I've fixed it. May I ask you to sync and try again?
No problem. Is compiling now from null. I have now special machine for Devil
Linux compilation. The only difference from standard is:
-- isolinux.cfg (I described it)
-- shorewall 4.1.5 (I need changes Tom Eastep did for me)
-- multiple SCSI LUNs in kernel (I want try boot from USB but the
only accessible R/O usb is SD Card reader; only SD Cards have
write lock by design; and Kingston Data Traveler Reader/USB memory
they buyed for me is two LUN device), The only change in
/usr/src/lfssystem/build/scripts/config/linux-2.6/config_linux
is: CONFIG_SCSI_MULTI_LUN=y
Attention!
executing prepare with option build
is waiting for answer: Magic SysRq key (MAGIC_SYSRQ) [N/y/?] (NEW)
After checking growing log I pressed Enter (No). But I think this is hard for
normal user to know, what is the matter.
After 3:20 (now!) make install ended sucessfully.
Best regards
--
Andrzej Odyniec
<an...@ma...>
Rada Nadzorcza Macrologic SA
ul. Chroscickiego 49, 02-414 Warszawa
tel. +48(22)8637681x132, fax: +48(22)8639861
ul. Jagiellonska 36, 03-719 Warszawa
tel. +48(22)5118115, fax: +48(22)5118117
|
|
From: Oliver N. <dig...@gm...> - 2008-04-01 11:04:26
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Serge Leschinsky schrieb: > Oliver, > > Serge Leschinsky wrote: > Oops... Copy/paste ... You should set "CONFIG_DISABLELOGGING=y" to see the > request from kernel configuration script. Thanks, Serge! That solved it! After seeing and answering/setting the new config options, the build process(es) starts like normal. I think "CONFIG_DISABLELOGGING=y" could be set to "n" after ther decisions are made to make the build less noisy, or i am wrong? - --- Olli -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFH8ham724ZL5LNhNcRAuEwAJ0dHPYYeNcuw3BX1XcnIdeff1tb/ACaAu+D SP6B5jh/gs060rBrAZsScFQ= =mB2t -----END PGP SIGNATURE----- |
|
From: Serge L. <fi...@in...> - 2008-04-01 10:53:58
|
Oliver, Oliver Niesner wrote: ... > both systems running a fresh lfssystem and a fresh checkout from yestrerday/today. > > After the normal configuration procedure both systems hang forever after prepare :-/ > It was my fault, sorry. Fixed. Tested. Please resync. -- Sincerely, Serge Leschinsky |
|
From: Serge L. <fi...@in...> - 2008-04-01 10:15:19
|
Oliver, Serge Leschinsky wrote: > Well. Technically, there are lack of parameters in kernel's .config and "make > oldconfig" cannot configure the kernel. If you set "CONFIG_DISABLELOGGING=n" in > _DL_ .config you will see the request for a missed parameters. Oops... Copy/paste ... You should set "CONFIG_DISABLELOGGING=y" to see the request from kernel configuration script. -- Serge |
|
From: Serge L. <fi...@in...> - 2008-04-01 10:00:35
|
Hi Oliver, Oliver Niesner wrote: > both systems running a fresh lfssystem and a fresh checkout from yestrerday/today. > > After the normal configuration procedure both systems hang forever after prepare :-/ > > Has anyone an idea what went wrong? ... > >> bin/bash -login >> 27801 pts/2 S+ 0:00 | \_ make prepare build install iso dist >> 2370 pts/2 S+ 0:00 | \_ /bin/sh scripts/build.sh build >> 2700 pts/2 SN+ 0:00 | \_ /bin/bash /data/build/scripts/prepare build >> 4972 pts/2 SN+ 0:00 | \_ make oldconfig >> 5019 pts/2 SN+ 0:00 | \_ make -f scripts/Makefile.build obj=scripts/kconfig oldconfig >> 5076 pts/2 SN+ 0:00 | \_ scripts/kconfig/conf -o arch/x86/Kconfig Yes, I guess the reason of that. Probably, it's me. :-( Well. Technically, there are lack of parameters in kernel's .config and "make oldconfig" cannot configure the kernel. If you set "CONFIG_DISABLELOGGING=n" in _DL_ .config you will see the request for a missed parameters. I'm afraid it may be my change for SYSRQ enabling, which has checked though. -- Serge Leschinsky |
|
From: Oliver N. <dig...@gm...> - 2008-04-01 09:36:08
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, all! Since yesterday i have problems to get the buildprocess working. I tried to build a new release on two differnt machines: 1) older dual xeon workstation (dell 530T) 2) older AMD Athlon64 both systems running a fresh lfssystem and a fresh checkout from yestrerday/today. After the normal configuration procedure both systems hang forever after prepare :-/ Has anyone an idea what went wrong? > CHECK include/video/uvesafb.h > make[1]: Leaving directory `/data/build/tmp/linux-2.6.24' > configuring order of scripts (this could take a while) > mount: proc already mounted > mount: none already mounted or /sys busy > mount: according to mtab, none is already mounted on /sys > > executing prepare with option build > bin/bash -login > 27801 pts/2 S+ 0:00 | \_ make prepare build install iso dist > 2370 pts/2 S+ 0:00 | \_ /bin/sh scripts/build.sh build > 2700 pts/2 SN+ 0:00 | \_ /bin/bash /data/build/scripts/prepare build > 4972 pts/2 SN+ 0:00 | \_ make oldconfig > 5019 pts/2 SN+ 0:00 | \_ make -f scripts/Makefile.build obj=scripts/kconfig oldconfig > 5076 pts/2 SN+ 0:00 | \_ scripts/kconfig/conf -o arch/x86/Kconfig - --- Oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFH8gH0724ZL5LNhNcRAjmKAJ40hpSQX6va0cksh62ntwYhB5BebgCbBXai 2XJ0HBcD1qHLm+ksNhPjxjg= =w1tr -----END PGP SIGNATURE----- |
|
From: Serge L. <fi...@in...> - 2008-04-01 07:45:37
|
Hi, Andrzej Odyniec wrote: > I wrote: >> Anyway, addition after above the following line: >> ln -sf $KERNELDIR /lib/modules/$KERNELVERSION/source || exit 1 >> solves problem and compilation is correct. > But after make build, in make install there is no this links. > Maybe this ln-s should be in openl2tp script? > Hopefully I've fixed it. May I ask you to sync and try again? -- Sincerely, Serge Leschinsky |
|
From: Andrzej O. <an...@ma...> - 2008-04-01 03:33:28
|
I wrote: > Anyway, addition after above the following line: > ln -sf $KERNELDIR /lib/modules/$KERNELVERSION/source || exit 1 > solves problem and compilation is correct. But after make build, in make install there is no this links. Maybe this ln-s should be in openl2tp script? -- Andrzej Odyniec <an...@ma...> Rada Nadzorcza Macrologic SA ul. Chroscickiego 49, 02-414 Warszawa tel. +48(22)8637681x132, fax: +48(22)8639861 ul. Jagiellonska 36, 03-719 Warszawa tel. +48(22)5118115, fax: +48(22)5118117 |
|
From: Andrzej O. <an...@ma...> - 2008-04-01 02:50:11
|
Dear Sirs,
In *absoulute* clean 1.3DL (lfsystem too) openl2tp isn't compiling 'cause can
not find l2tp header in kernel source. Bur there is no link to source.
In prepare script only one link is present:
ln -sf $KERNELDIR /lib/modules/$KERNELVERSION/build || exit 1
to build tree. Both links are made in iptables script (as I see) but if
iptables is compiling after openl2tp?
Anyway, addition after above the following line:
ln -sf $KERNELDIR /lib/modules/$KERNELVERSION/source || exit 1
solves problem and compilation is correct.
Regards
--
Andrzej Odyniec
<an...@ma...>
Rada Nadzorcza Macrologic SA
ul. Chroscickiego 49, 02-414 Warszawa
tel. +48(22)8637681x132, fax: +48(22)8639861
ul. Jagiellonska 36, 03-719 Warszawa
tel. +48(22)5118115, fax: +48(22)5118117
|
|
From: Serge L. <fi...@in...> - 2008-03-22 18:11:12
|
Hi Andrzej, Andrzej Odyniec wrote: > Sirs, > > Excuse me for long post. > > I see need of SOL support in DL, but actual structure of DL made this support > complicated. I give here description of my solution and I’m asking about more > convenient approach. I’m sure, SOL support in DL is MHB (Must Have Been). ... > > What do You think about it? I'm sorry for so late answer. I read the message thoroughly and I agree with you, this feature is extremely useful. Also I'd like to note that serial console support was realized in DL. It was done in the install-on-usb tool for grub loader. I think it was done exactly for grub because it allows to change settings easier. I think it's possible to add a menu for serial console configuration for syslinux as a nice addition to grub but not sure about unambiguous detecting of SOL port. As far as I am concerned the grub and flash-drive are more attractive than cd-drive and syslinux. Maybe I'm wrong. Anyway, your patches are welcome! -- Sincerely, Serge Leschinsky |
|
From: Andrzej O. <an...@ma...> - 2008-03-14 16:34:59
|
Sirs, Excuse me for long post. I see need of SOL support in DL, but actual structure of DL made this support complicated. I give here description of my solution and I’m asking about more convenient approach. I’m sure, SOL support in DL is MHB (Must Have Been). If Devil Linux should be router/firewall, important property is total remote management especially, when normal access is cut-out, i.e. when Ethernet WAN interface in unconfigured or no access to DL services because of errors in netfilter rules. In this situation we need go to local console. But what, if we need to go hundreds of kilometers? Not only server chipsets, but desktop and notebook too can have today SOL (Serial Over Lan) option (i.e. Intel Q chipsets). On Linux side there is emulated serial port (like UART). Microcontroller integrated at chipset Ethernet port transmit this virtual serial to IP transfer. BIOS, Post and BIOS SETUP display is redirected to SOL automatically, but after it we need to redirect to SOL additional three phases: 1. ISOLINUX bootloader display (SYSLINUX), 2. Kernel loading console messages, 3. Shell and application display 3rd phase dialog devices are defined in /etc/inittab. This file is remembered in configuration, so anybody can uncomment or add "respawn" line for getty to SOL console. But what, if one of first two phases fail? We don’t see, what happened and must use car&key solution because console specifications for bootloader and kernel loading are in isolinux.cfg file on boot CD. This file is generated by /build/scripts/build-iso and generation is hardwired into this script. So for altering isolinux.cfg before “make iso” we must modify this script. For many users this is to hard. For 1st phase we need in this file additional command on top of the isolinux.cfg file: SERIAL port baudrate flowcontrol and all parameters (as I experienced) are dependent of particular SOL implementation, so we need look for parameters in dmesg output, searching tty. For example, I found in dmesg after kernel loading on mb Asus P5B strings: Serial: 8250/16550 driver $Revision: 1.90 $ 4 ports, IRQ sharing enabled serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A 00:0e: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A ACPI: PCI Interrupt 0000:00:03.3[B] -> GSI 17 (level, low) -> IRQ 17 0000:00:03.3: ttyS1 at I/O 0xb880 (irq = 17) is a 16550A and detected, that after first real COM1 (3F8,irq4), second serial port (virtual SOL port) is located at address B880 irq17. Intel say, that chipset Q965 virtual serial port baudrate is 19200. I set additionally: Assert DTR and RTS, Wait for CTS, DSR and DCD assertion and Ignore input unless DSR and DCD asserted, and as result I have flowcontrol=0xab3, so serial line I need on top of isolinux.cfg is: serial 0xb880 19200 0xab3 And this line I appended to scripts/build-iso immediately after first: cat > $CDDIR/isolinux.cfg <<-EOF Additionally from dmesg I know, so for this Linux kernel and this machine SOL port has name ttyS1, so in APPEND we need console declaration: console=ttyS1,19200n8 We can enter this definition manually, when we wave access to ISOLINUX boot prompt, but this is uncomfortable. For alter console behavior we need to change APPEND definition in isolinux.cfg, but contents of APPEND is hardwired one line above in definition of BOOT_OPTIONS_DL variable. I inserted into this line console definition. After, I do “make iso” and... using Intel AMT Commander I can remotely switch DL router/firewall on and off, reboot box and additionally using Intel AMT Terminal I can remotely see (and control) BIOS POST, SETUP and ISOLINUX prompt and after, all messages when kernel is loading with possibility to supervise this process, like hdd problems (i.e. fsck need). Additionally after adding to /etc/inittab: S0:2345:respawn:/sbin/agetty -h ttyS1 19200 vt102 I can see and use login session when I haven’t other possibility to establish shell session. ------ Finally, we need possibility to insert (maybe from definitions “make menuconfig”) two strings into isolinux.cfg: 1.SERIAL definition (parameterized) for access ISOLINUX to SOL console (obvious); 2.console declaration into default kernel command line (convenient); This can not be done using normal configuration, because in time of boot configuration files are in compressed form on pen-drive yet. The only solution I se, is rewriting minimum one script (build-iso) and parameterization it from i.e. .config. What do You think about it? Regards -- Andrzej Odyniec <an...@ma...> Rada Nadzorcza Macrologic SA ul. Chroscickiego 49, 02-414 Warszawa tel. +48(22)8637681x132, fax: +48(22)8639861 ul. Jagiellonska 36, 03-719 Warszawa tel. +48(22)5118115, fax: +48(22)5118117 |
|
From: Oliver N. <dig...@gm...> - 2008-03-14 09:43:06
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Heiko Zuerker schrieb: > > This file is only for the kernels 'menuconfig'. > The change I did in CVS will fix the problem you sent in originally. Is > there something else wrong? > No! It works! Thx again ;-) - -- Oliver -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) Comment: Using GnuPG with CentOS - http://enigmail.mozdev.org iD8DBQFH2kib724ZL5LNhNcRAvopAKCFLzknRzGFnXH1s1hbjXFMbpWvOgCfYMjp iZ5Z4nQVLAXaVI3nhCr8Hec= =pTUz -----END PGP SIGNATURE----- |
|
From: Heiko Z. <he...@zu...> - 2008-03-13 19:25:52
|
> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Heiko Zuerker schrieb: > s someone else tried this and got a similar error? >> >> Ebtables needs to have the stack smashing protector disabled. >> I checked in a change which should fix this issue. >> > > Ah, thanks! > > I checked the build script for ebtables in DL_1.3.4 and found out that the > file > > $KERNELDIR/net/bridge/netfilter/Config.in doesn't exist!! > ^^^^^^^^^ > > I don't know exactly what it is for, but in DL_1.2 it is there and > ebtables is working. > Maybe you can give me a hint? This file is only for the kernels 'menuconfig'. The change I did in CVS will fix the problem you sent in originally. Is there something else wrong? -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Serge L. <fi...@in...> - 2008-03-12 20:03:38
|
Andrzej Odyniec wrote: > But... It means, for each new recompilation I must create absolutely new > lfsystem. OK. I will. Thanks to your bug report and Heiko's fix you already shouldn't create new lfssystem. Just update iptraf script. > > Thanks for help > Thank _you_! -- Sincerely, Serge Leschinsky |
|
From: Andrzej O. <an...@ma...> - 2008-03-12 19:37:50
|
Serge Leschinsky: > Hm... Please try the following patch > [...] Hi Serge, For me solution was simple. I read building script (scripts/iptraf) and after called this script manually. After interactive answer to patch ask, iptraf compilled without errors. After I repeated total build and after skips rest of compilation ended without errors. >>Can You explain, what it mean? > > It means you try to apply the patch several times, i.e. you didn't use fresh > lfssystem Near all, I used, was fresh. build. sources. All, but lfsystem. This was 2 days old and after some number of compilations with different options. But Your suggestion is obvious -- I try all from beginning. lfsystem too. And... YES! After 3 hours I have fully succesfull compilation. You right! But... It means, for each new recompilation I must create absolutely new lfsystem. OK. I will. Thanks for help -- Andrzej Odyniec <an...@ma...> Rada Nadzorcza Macrologic SA ul. Chroscickiego 49, 02-414 Warszawa tel. +48(22)8637681x132, fax: +48(22)8639861 ul. Jagiellonska 36, 03-719 Warszawa tel. +48(22)5118115, fax: +48(22)5118117 |
50 messages has been excluded from this view by a project administrator.
