|
From: Pekka K. <pek...@ja...> - 2007-04-19 14:11:04
|
Hello! PPTP/GRE client is not working inside NATted internal network. I am using Devil-Linux 1.2.12 w/ Shorewall. I noticed that ip_nat_proto_gre module is missing from /usr/share/shorewall/modules. Is it needed? At least it is recommended by http://www.shorewall.net/PPTP.htm#ClientsBehind . How I can add this module to configuration, since /usr/share/shorewall/modules is not inside /etc/, thus not being writable. Cannot use 1.2.13, since raid module loading causes jam ( load order was changed in 1.2.13 ) in my old Intel 82801AA mobo. (Not using harddisks) Brgs, Pekka |
|
From: Heiko Z. <he...@zu...> - 2007-04-19 14:39:25
|
Hey, yes older releases of DL have problems with the iptables modules. This is going to be fixed in 1.2.14 I also did a change to 1.2.14, which moves the /usr/share/shorewall/modules file to /etc/shorewall , so you can edit it. Heiko On Thu, April 19, 2007 09:18, Pekka Kilponen wrote: > Hello! > > > PPTP/GRE client is not working inside NATted internal network. I am > using Devil-Linux 1.2.12 w/ Shorewall. I noticed that ip_nat_proto_gre > module is missing from /usr/share/shorewall/modules. > Is it needed? At least it is recommended by > http://www.shorewall.net/PPTP.htm#ClientsBehind . > > > How I can add this module to configuration, since > /usr/share/shorewall/modules is not inside /etc/, thus not being writable. > > > Cannot use 1.2.13, since raid module loading causes jam ( load order was > changed in 1.2.13 ) in my old Intel 82801AA mobo. (Not using harddisks) > > > Brgs, > > > Pekka > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Devil-linux-discuss mailing list > Dev...@li... > https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Pekka K. <pek...@ja...> - 2007-04-20 11:25:11
|
Ok, Thanks for quick reply. Using modprobe to ip_nat_proto_gre did the trick and pptp/gre client started working. In 1.2.14 release when shorewall/modules is editable I can also make this change permanent. Very good. The other thing is that in 1.2.13 with Intel 82801AA chipset devil-linux get's stucked when it is checking md volumes. in 1.2.12 this worked. I have no harddisks and no RAID hardware. Could it be possible to add some kind of setting to setup so that harddisk related things could be skipped in startup? Or is this md/raid module code fixed in next releases too? Great firewall, been using this for two years now and I am currently taking it to all of our company's offices. Brgs, Pekka Heiko Zuerker kirjoitti: > Hey, > > yes older releases of DL have problems with the iptables modules. > This is going to be fixed in 1.2.14 > I also did a change to 1.2.14, which moves the > /usr/share/shorewall/modules file to /etc/shorewall , so you can edit it. > > Heiko > > On Thu, April 19, 2007 09:18, Pekka Kilponen wrote: > >> Hello! >> >> >> PPTP/GRE client is not working inside NATted internal network. I am >> using Devil-Linux 1.2.12 w/ Shorewall. I noticed that ip_nat_proto_gre >> module is missing from /usr/share/shorewall/modules. >> Is it needed? At least it is recommended by >> http://www.shorewall.net/PPTP.htm#ClientsBehind . >> >> >> How I can add this module to configuration, since >> /usr/share/shorewall/modules is not inside /etc/, thus not being writable. >> >> >> Cannot use 1.2.13, since raid module loading causes jam ( load order was >> changed in 1.2.13 ) in my old Intel 82801AA mobo. (Not using harddisks) >> >> >> Brgs, >> >> >> Pekka >> >> >> ------------------------------------------------------------------------- >> This SF.net email is sponsored by DB2 Express >> Download DB2 Express C - the FREE version of DB2 express and take >> control of your XML. No limits. Just data. Click to get it now. >> http://sourceforge.net/powerbar/db2/ >> _______________________________________________ >> Devil-linux-discuss mailing list >> Dev...@li... >> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss >> >> >> > > > -- *Pekka Kilponen * Systems Analyst Mobile: +358 - 41 - 502 0014 Fax: +358 - 8 - 5545 664 Email: pek...@ja... <mailto:pek...@ja...> *Lunkintie 15, 90460 Oulunsalo, FINLAND* *www.jaicom.com* /This message contains information that may be privileged or confidential and is the property of Jaicom Oy. It is intended only for the person to whom it is addressed. If you receive this message in error, please notify the sender immediately and delete all copies of this message./ |
|
From: Heiko Z. <he...@zu...> - 2007-04-20 13:23:34
|
On Fri, April 20, 2007 06:31, Pekka Kilponen wrote: > Ok, > > Thanks for quick reply. > > > Using modprobe to ip_nat_proto_gre did the trick and pptp/gre client > started working. In 1.2.14 release when shorewall/modules is editable I can > also make this change permanent. Very good. > > > The other thing is that in 1.2.13 with Intel 82801AA chipset devil-linux > get's stucked when it is checking md volumes. in 1.2.12 this worked. I have > no harddisks and no RAID hardware. So I take it you didn't specify any modules for INITRD_MODULES in /etc/sysconfic/config ? The IDE drivers are compile into the kernel, SATA and SCSI have to be specifically loaded. It may be a kernel related problem. Not sure if a new Kernel will be out by the time we release 1.2.14 > Could it be possible to add some kind of setting to setup so that > harddisk related things could be skipped in startup? Or is this md/raid > module code fixed in next releases too? Actually I like the idea, so I added 2 new parameters to /etc/sysconfig/config, to disable the MD and LVM autostart. > Great firewall, been using this for two years now and I am currently > taking it to all of our company's offices. Thanks ! -- Regards Heiko Zuerker http://www.devil-linux.org |
|
From: Pekka K. <pek...@ja...> - 2007-04-20 13:48:09
|
Heiko Zuerker kirjoitti: > So I take it you didn't specify any modules for INITRD_MODULES in > /etc/sysconfic/config ? > The IDE drivers are compile into the kernel, SATA and SCSI have to be > specifically loaded. > It may be a kernel related problem. > Not sure if a new Kernel will be out by the time we release 1.2.14 > > No extra modules, it is a very basic setup. It gets stuck in when it scans for mdX, for raid I guess. Too bad that I cannot easily test anymore, since these fw:s are out on other company offices now with 1.2.12. >> Could it be possible to add some kind of setting to setup so that >> harddisk related things could be skipped in startup? Or is this md/raid >> module code fixed in next releases too? >> > > Actually I like the idea, so I added 2 new parameters to > /etc/sysconfig/config, to disable the MD and LVM autostart. > > Well I think that would solve it, and it would speed up loading too. Thank you very much! Til' next release then... :-) -Pekka |