leaf-user — This mailing list is for all users and developers of LEAF.

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 4

[Erich T. <eri...@th...>]

Hi Slavek

Am 26.11.2025 um 19:40 schrieb Sławek Adamski via leaf-user:
> He Erich
> 
> Sorry for my poor English. I'm not artificial. And I'm a bit 
> intelligent, I think. 

So I mistook you for someone else, please excuse me.

The config was changed by me. Only by me. I'm not
> using AI. I'm to old for that. I'm programmer. Retired. When I was 
> working the AI was absent. My work was simple - databases and ERP. 
> Initially, it was DOS, and later Windows. I've never worked with Linux. 
> In 1998, a friend of mine showed me how to build a firewall for the 
> company I worked for. It was a small company—seven employees, including 
> the owners. It was Leaf Bering. Made on CD. At home, on my old computer, 
> I also installed a firewall. For security reasons. That friend of mine 
> is no longer alive – SM. But nine years ago, unfortunately, without his 
> help, I configured Leaf Berin uClibc version 5.2.6. Also on CD. And I 
> used it until recently. Now I decided to make a new one firewall. On 
> USB. In version 5.2.6, I could log into the firewall from a local 
> Windows computer. I usually use Firefox. I copied the settings to 
> Windows, file by file. I logged into the new firewall using its 
> keyboard. Logging in from Windows doesn't work for me. That was version 
> 7.0.0. But now there's an upgrade command. And I have version 7.5.1. 
> Great. After logging in, I looked at all the files in lrcfg and changed 
> them based on the configuration I was reading from the second monitor,

Quite a lot of configuration files have changed from 5.x.x to 7.x.x, beware.

> the one running Windows. I think I was successful. It works. I have 
> internet. But I missed something. I can't access it from Windows, and 
> all local IPs are accepted.

Just a few questions for my understanding:

What does that mean 'I cannot access it from Windows'?
What are the other local IP addresses? Are they non Windows based?
What services do you try to access on the LEAF box? There is basically 
most of the time just ssh, possibly a web server.

cheers

ET
-- 
„Wer von seinem Tag nicht zwei Drittel für sich hat, ist ein Sklave.“
―Friedrich Nietzsche

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 4

[Sławek A. <sa...@wa...>]

He Erich

Sorry for my poor English. I'm not artificial. And I'm a bit 
intelligent, I think. The config was changed by me. Only by me. I'm not 
using AI. I'm to old for that. I'm programmer. Retired. When I was 
working the AI was absent. My work was simple - databases and ERP. 
Initially, it was DOS, and later Windows. I've never worked with Linux. 
In 1998, a friend of mine showed me how to build a firewall for the 
company I worked for. It was a small company—seven employees, including 
the owners. It was Leaf Bering. Made on CD. At home, on my old computer, 
I also installed a firewall. For security reasons. That friend of mine 
is no longer alive – SM. But nine years ago, unfortunately, without his 
help, I configured Leaf Berin uClibc version 5.2.6. Also on CD. And I 
used it until recently. Now I decided to make a new one firewall. On 
USB. In version 5.2.6, I could log into the firewall from a local 
Windows computer. I usually use Firefox. I copied the settings to 
Windows, file by file. I logged into the new firewall using its 
keyboard. Logging in from Windows doesn't work for me. That was version 
7.0.0. But now there's an upgrade command. And I have version 7.5.1. 
Great. After logging in, I looked at all the files in lrcfg and changed 
them based on the configuration I was reading from the second monitor, 
the one running Windows. I think I was successful. It works. I have 
internet. But I missed something. I can't access it from Windows, and 
all local IPs are accepted.

W dniu 26.11.2025 o 00:22, lea...@li... pisze:
> Message: 2
> Date: Wed, 26 Nov 2025 00:06:27 +0100
> From: Erich Titl<eri...@th...>
> To:lea...@li...
> Subject: Re: [leaf-user] leaf-user Digest, Vol 204, Issue 3
> Message-ID:<c58...@th...>
> Content-Type: text/plain; charset="utf-8"; Format="flowed"
>
> Hi Folks
>
> If I understand this issue correctly it started with a AI built config,
> not with something set in either the shorewall documentation or with a
> simple config as distributed with LEAF. Please correct me if this is not
> the case.
>
> It appears to me that the OP does not have a strong conceptual
> understanding of his network topology.
>
> I would suggest to lay down the concept of this installation instead of
> explaining what alledgedly is not working, e.g. the logical and physical
> layout of the network(s). Based on this I am positive that the group can
> suggest solutions.
>
> I understand that the shorewall documentation by Tom is complex. It
> shows at what high abstraction level Tom was able to think when he
> designed, wrote and documented shorewall. I understand also that many if
> not all of us will not easily absorb this, at least I need to reread often.
>
> My 2 cents.
>
> cheers
>
> ET
>
> Am 25.11.2025 um 22:01 schrieb S?awek Adamski via leaf-user:
>> Big thanks. It's very nice that you want to help me. But your solution
>> doesn't work. For clarity, I added the IP numbers I approved to
>>   ?/etc/shorewall/rules as you wrote. And /etc/shorewall/policy was
>> (I added line numbers):
>>
>>   ?1? ? #
>>   ?2? ? # Shorewall -- /etc/shorewall/policy
>>   ?3? ? #
>>   ?4? ? # For information about entries in this file, type "man
>> shorewall-policy"
>>   ?5? ? #
>>   ?6? ? # The manpage is also online at
>>   ?7? ? #http://www.shorewall.net/manpages/shorewall-policy.html
>>   ?8? ? #
>>   ?9
>> ###############################################################################
>> 10? ? #SOURCE? ? ? ? DEST? ? ? ? POLICY? ? LOGLEVEL? ? LIMIT CONNLIMIT
>> 11? ? #loc? ? net? ? ACCEPT
>> 12? ? loc? ? fw? ? REJECT
>> 13? ? net? ? all? ? DROP
>> 14? ? # If you want open access to the Internet from your Firewall
>> 15? ? # remowe the comment from the following line.
>> 16? ? #fw? ? ? ? net? ? ? ? ACCEPT
>> 17? ? # THE FOLLOWING POLICY MUST BE LAST
>> 18? ? #
>> 19? ? all? ? all? ? REJECT? ? ? ? ? ? NFLOG(4,0,4)
>>
>> I commented out line 11 and added line 12. And it doesn't work.
>> No local IP has internet. I uncommented line 11 without sucses.
>> Still no net. So I commented line 12. And every local IP has access
>> again. Probably the problem is in other place.
>>
>> W dniu 25.11.2025 o?13:19,lea...@li... pisze:
>>> Message: 1
>>> Date: Mon, 24 Nov 2025 08:36:05 -0500
>>> From: "Robert K Coffman Jr. -Info From Data Corp."
>>> ????<bco...@in...>
>>> To:lea...@li...
>>> Subject: Re: [leaf-user] leaf-user Digest, Vol 204, Issue 1
>>> Message-ID:<e43...@in...>
>>> Content-Type: text/plain; charset="UTF-8"
>>>
>>> ??? If I am understanding you correctly, this is how I would accomplish
>>> ??? that.? I'm assuming Shorewall (the default firewall on Leaf, unless
>>> ??? that has changed) is running.? You can confirm by:
>>> ??? shorewall status
>>> ??? You should see a message including "Shorewall is running."
>>> ??? If you do, edit /etc/shorewall/policy and look for the line that is
>>> ??? similar to this:
>>> ??? loc???????????? fw????????????? ACCEPT
>>> ??? In that line, change ACCEPT to REJECT
>>> ??? Then, in /etc/shorewall/rules, add these rules for the IPs you
>>> want to
>>> ??? allow from your lan to connect to your firewall, one line for each
>>> IP:
>>> ??? ACCEPT??? loc:192.168.0.5/24??? fw?? all
>>> ??? The /24 assumes that your subnet mask for your firewall is
>>> ??? 255.255.255.0.? If it is different, you will need to modify that, and
>>> ??? of course make the IP address match your config.
>>> ??? After you make that edit, run:
>>>
>>> ??? shorewall restart
>>>
>>> ??? Verify it was successful, and you should be good to go.
>>>
>>> ??? - Robert
>>>
>>> ??? On 11/22/2025 10:44:33 AM, S?awek Adamski via leaf-user wrote:
>>>
>>> ????? Hello Robert,
>>> ????? Thanks a lot for your response. Hmm... the documentation of leaf
>>> ????? Bering uClibc is unavailable again:
>>> ????? "
>>> ?????? Sorry! This site is experiencing technical difficulties.
>>> ????? Try waiting a few minutes and reloading.
>>> ????? (Cannot access the database)
>>> ?????" A month ago I copied near all of that as html files. My answer for 
>>> you question: I haven't even tried. I don't know how. Marco 
>>> described another solution for me, but I'm not a Linux man. I didn't 
>>> understand that. So I did what I described. It works, but not 
>>> exactly how I wanted. W dniu 22.11.2025 o 13:14, [1]leaf-user- 
>>> re...@li... pisze: Message: 1 Date: Fri, 21 Nov 
>>> 2025 12:39:03 -0500 From: "Robert K Coffman Jr. -Info From Data Corp."
>>> ????????? [2]<bco...@in...>
>>> ????? [3]To:lea...@li...
>>> ????? Subject: Re: [leaf-user] Problem with configuration.
>>> ????? Message-ID:[4]<66b68c95- ace...@in... >
>>> ????? Content-Type: text/plain; charset="UTF-8"
>>> ????????? S?awek,
>>> ????????? Did you overcome the problems you had with this?
>>> ????????? - Robert
>>> ????????? On 10/28/2025 4:50:11 PM, S?awek Adamski via leaf-user wrote:
>>> ??????????? Hi,
>>> ??????????? Please forgive my poor English.
>>> ??????????? I have small success. My leaf bering boots from USB and
>>> works.
>>> ????? Near
>>> ??????????? properly. Near.
>>> ??????????? I have two PC. One with Windows 11 and second for leaf. Both
>>> ????? have
>>> ??????????? keyboards and monitors.
>>> ??????????? Steps I took:
>>> ??????????? 1. Using image Bering-uClibc_x86_vga.img and? Rasberry Pi
>>> ????? Imager I
>>> ??????????? recorded the first USB with version 7.0.0. In Rasberry Pi
>>> ????? Imager I
>>> ??????????? set the login and password for that leaf.
>>> ??????????? 2. The partition on the USB had only 64 MB so using
>>> DiskGenius
>>> ????? I
>>> ??????????? expanded it to 128 MB.
>>> ??????????? 3.? I logged into the booted from USB and upgraded doing:
>>> ????? upgrade
>>> ??????????? --release 7.5.1.
>>> ??????????? 4. I configured that a little.
>>> ??????????? And it works. My PC with Windows has access to net via
>>> ????? firewall. My
>>> ??????????? firewall ignores pings to him. And longing to him from net is
>>> ??????????? impossible. And I changed the IP4 number to one I made up.
>>> ??????????? But I need two things in configuration. First I want ignore
>>> ????? local
>>> ??????????? connections from IP doesn't accepted by me. I wrote the
>>> ????? accepted
>>> ??????????? list to hosts.allow. Something like that, of course with my
>>> ????? IP:
>>> ??????????? # Allow anything from the local net
>>> ??????????? #ALL: 192.168.1.0/255.255.255.0
>>> ??????????? 192.168.1.x
>>> ??????????? 192.168.1.y
>>> ??????????? 192.168.1.z
>>> ??????????? where 192.168.1.x, 192.168.1.y and 192.168.1.z are the
>>> allowed
>>> ????? IP by
>>> ??????????? me.
>>> ??????????? But it doesn't work. I don' understood the guide. I'm not
>>> ????? linux man.
>>> ??????????? Probably it must be done in other way.
>>> ??????????? The second which I want is to have working webconf. Now it is
>>> ????? still
>>> ??????????? asking for login and password in not ending loop. From
>>> ????? Firefox,
>>> ??????????? Chrome and Edge. Seems something is wrong.
>>> ??????????? Best Regards
>>> ??????????? S?awek
>>>
>>>        
>>> --------------------------------------------------------------------
>>> ??????????? ----
>>> ??????????? leaf-user mailing list: [[5]1]lea...@li...
>>> ??????????? [2][6]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ??????????? Support Request -- [3][7]http://leaf-project.org/
>>> ????? --
>>> ????? Robert K Coffman Jr.
>>> ????? Info From Data Corp.
>>> ????? 3307249000
>>> ????? [[8]4]su...@in...
>>> ????? References
>>> ????????? [9]1.mailto:lea...@li...
>>> ????????? 2.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ????????? 3.http://leaf-project.org/
>>> ????????? [10]4.mailto:su...@in...
>>> ????? ------------------------------
>>> ????? ------------------------------
>>> ????? Subject: Digest Footer
>>> ????? _______________________________________________
>>> ????? leaf-user mailing list
>>> ????? [11]lea...@li...
>>> ????? [12]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ????? ------------------------------
>>> ????? End of leaf-user Digest, Vol 204, Issue 1
>>> ????? *****************************************
>>>
>>>        
>>> --------------------------------------------------------------------
>>> ????? ----
>>> ????? leaf-user mailing list: [13]lea...@li...
>>> ????? [14]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ????? Support Request -- [15]http://leaf-project.org/
>>>
>>> -- 
>>> Robert K Coffman Jr.
>>> Info From Data Corp.
>>> 3307249000
>>> [16]su...@in...
>>>
>>> References
>>>
>>> ???1.mailto:lea...@li...
>>> ???2.mailto:bco...@in...
>>> ???3.mailto:To:lea...@li...
>>> ???4.mailto:66b...@in...
>>> ???5.mailto:1]lea...@li...
>>> ??? 6.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ??? 7.http://leaf-project.org/
>>> ???8.mailto:4]su...@in...
>>> ???9.mailto:1.mailto:lea...@li...
>>> ??10.mailto:4.mailto:su...@in...
>>> ??11.mailto:lea...@li...
>>> ?? 12.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ??13.mailto:lea...@li...
>>> ?? 14.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>> ?? 15.http://leaf-project.org/
>>> ??16.mailto:su...@in...
>>>
>>>
>>> ------------------------------
>>>
>>>
>>>
>>> ------------------------------
>>>
>>> Subject: Digest Footer
>>>
>>> _______________________________________________
>>> leaf-user mailing list
>>> lea...@li...
>>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>>>
>>>
>>> ------------------------------
>>>
>>> End of leaf-user Digest, Vol 204, Issue 3
>>> *****************************************
>>
>> ------------------------------------------------------------------------
>> leaf-user mailing list:lea...@li...
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request --http://leaf-project.org/

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 3

[Erich T. <eri...@th...>]

Hi Folks

If I understand this issue correctly it started with a AI built config, 
not with something set in either the shorewall documentation or with a 
simple config as distributed with LEAF. Please correct me if this is not 
the case.

It appears to me that the OP does not have a strong conceptual 
understanding of his network topology.

I would suggest to lay down the concept of this installation instead of 
explaining what alledgedly is not working, e.g. the logical and physical 
layout of the network(s). Based on this I am positive that the group can 
suggest solutions.

I understand that the shorewall documentation by Tom is complex. It 
shows at what high abstraction level Tom was able to think when he 
designed, wrote and documented shorewall. I understand also that many if 
not all of us will not easily absorb this, at least I need to reread often.

My 2 cents.

cheers

ET

Am 25.11.2025 um 22:01 schrieb Sławek Adamski via leaf-user:
> Big thanks. It's very nice that you want to help me. But your solution
> doesn't work. For clarity, I added the IP numbers I approved to
>   /etc/shorewall/rules as you wrote. And /etc/shorewall/policy was
> (I added line numbers):
> 
>   1    #
>   2    # Shorewall -- /etc/shorewall/policy
>   3    #
>   4    # For information about entries in this file, type "man 
> shorewall-policy"
>   5    #
>   6    # The manpage is also online at
>   7    # http://www.shorewall.net/manpages/shorewall-policy.html
>   8    #
>   9 
> ###############################################################################
> 10    #SOURCE        DEST        POLICY    LOGLEVEL    LIMIT CONNLIMIT
> 11    #loc    net    ACCEPT
> 12    loc    fw    REJECT
> 13    net    all    DROP
> 14    # If you want open access to the Internet from your Firewall
> 15    # remowe the comment from the following line.
> 16    #fw        net        ACCEPT
> 17    # THE FOLLOWING POLICY MUST BE LAST
> 18    #
> 19    all    all    REJECT            NFLOG(4,0,4)
> 
> I commented out line 11 and added line 12. And it doesn't work.
> No local IP has internet. I uncommented line 11 without sucses.
> Still no net. So I commented line 12. And every local IP has access
> again. Probably the problem is in other place.
> 
> W dniu 25.11.2025 o 13:19, lea...@li... pisze:
>> Message: 1
>> Date: Mon, 24 Nov 2025 08:36:05 -0500
>> From: "Robert K Coffman Jr. -Info From Data Corp."
>>     <bco...@in...>
>> To:lea...@li...
>> Subject: Re: [leaf-user] leaf-user Digest, Vol 204, Issue 1
>> Message-ID:<e43...@in...>
>> Content-Type: text/plain; charset="UTF-8"
>>
>>     If I am understanding you correctly, this is how I would accomplish
>>     that.  I'm assuming Shorewall (the default firewall on Leaf, unless
>>     that has changed) is running.  You can confirm by:
>>     shorewall status
>>     You should see a message including "Shorewall is running."
>>     If you do, edit /etc/shorewall/policy and look for the line that is
>>     similar to this:
>>     loc             fw              ACCEPT
>>     In that line, change ACCEPT to REJECT
>>     Then, in /etc/shorewall/rules, add these rules for the IPs you 
>> want to
>>     allow from your lan to connect to your firewall, one line for each 
>> IP:
>>     ACCEPT    loc:192.168.0.5/24    fw   all
>>     The /24 assumes that your subnet mask for your firewall is
>>     255.255.255.0.  If it is different, you will need to modify that, and
>>     of course make the IP address match your config.
>>     After you make that edit, run:
>>
>>     shorewall restart
>>
>>     Verify it was successful, and you should be good to go.
>>
>>     - Robert
>>
>>     On 11/22/2025 10:44:33 AM, S?awek Adamski via leaf-user wrote:
>>
>>       Hello Robert,
>>       Thanks a lot for your response. Hmm... the documentation of leaf
>>       Bering uClibc is unavailable again:
>>       "
>>        Sorry! This site is experiencing technical difficulties.
>>       Try waiting a few minutes and reloading.
>>       (Cannot access the database)
>>       " A month ago I copied near all of that as html files. My answer 
>> for you question: I haven't even tried. I don't know how. Marco 
>> described another solution for me, but I'm not a Linux man. I didn't 
>> understand that. So I did what I described. It works, but not exactly 
>> how I wanted. W dniu 22.11.2025 o 13:14, [1]leaf-user- 
>> re...@li... pisze: Message: 1 Date: Fri, 21 Nov 2025 
>> 12:39:03 -0500 From: "Robert K Coffman Jr. -Info From Data Corp."
>>           [2]<bco...@in...>
>>       [3]To:lea...@li...
>>       Subject: Re: [leaf-user] Problem with configuration.
>>       Message-ID:[4]<66b68c95- 
>> ace...@in... >
>>       Content-Type: text/plain; charset="UTF-8"
>>           S?awek,
>>           Did you overcome the problems you had with this?
>>           - Robert
>>           On 10/28/2025 4:50:11 PM, S?awek Adamski via leaf-user wrote:
>>             Hi,
>>             Please forgive my poor English.
>>             I have small success. My leaf bering boots from USB and 
>> works.
>>       Near
>>             properly. Near.
>>             I have two PC. One with Windows 11 and second for leaf. Both
>>       have
>>             keyboards and monitors.
>>             Steps I took:
>>             1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi
>>       Imager I
>>             recorded the first USB with version 7.0.0. In Rasberry Pi
>>       Imager I
>>             set the login and password for that leaf.
>>             2. The partition on the USB had only 64 MB so using 
>> DiskGenius
>>       I
>>             expanded it to 128 MB.
>>             3.  I logged into the booted from USB and upgraded doing:
>>       upgrade
>>             --release 7.5.1.
>>             4. I configured that a little.
>>             And it works. My PC with Windows has access to net via
>>       firewall. My
>>             firewall ignores pings to him. And longing to him from net is
>>             impossible. And I changed the IP4 number to one I made up.
>>             But I need two things in configuration. First I want ignore
>>       local
>>             connections from IP doesn't accepted by me. I wrote the
>>       accepted
>>             list to hosts.allow. Something like that, of course with my
>>       IP:
>>             # Allow anything from the local net
>>             #ALL: 192.168.1.0/255.255.255.0
>>             192.168.1.x
>>             192.168.1.y
>>             192.168.1.z
>>             where 192.168.1.x, 192.168.1.y and 192.168.1.z are the 
>> allowed
>>       IP by
>>             me.
>>             But it doesn't work. I don' understood the guide. I'm not
>>       linux man.
>>             Probably it must be done in other way.
>>             The second which I want is to have working webconf. Now it is
>>       still
>>             asking for login and password in not ending loop. From
>>       Firefox,
>>             Chrome and Edge. Seems something is wrong.
>>             Best Regards
>>             S?awek
>>
>>       
>> --------------------------------------------------------------------
>>             ----
>>             leaf-user mailing list: [[5]1]lea...@li...
>>             [2][6]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>             Support Request -- [3][7]http://leaf-project.org/
>>       --
>>       Robert K Coffman Jr.
>>       Info From Data Corp.
>>       3307249000
>>       [[8]4]su...@in...
>>       References
>>           [9]1.mailto:lea...@li...
>>           2.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>           3.http://leaf-project.org/
>>           [10]4.mailto:su...@in...
>>       ------------------------------
>>       ------------------------------
>>       Subject: Digest Footer
>>       _______________________________________________
>>       leaf-user mailing list
>>       [11]lea...@li...
>>       [12]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>       ------------------------------
>>       End of leaf-user Digest, Vol 204, Issue 1
>>       *****************************************
>>
>>       
>> --------------------------------------------------------------------
>>       ----
>>       leaf-user mailing list: [13]lea...@li...
>>       [14]https://lists.sourceforge.net/lists/listinfo/leaf-user
>>       Support Request -- [15]http://leaf-project.org/
>>
>> -- 
>> Robert K Coffman Jr.
>> Info From Data Corp.
>> 3307249000
>> [16]su...@in...
>>
>> References
>>
>>     1.mailto:lea...@li...
>>     2.mailto:bco...@in...
>>     3.mailto:To:lea...@li...
>>     4.mailto:66b...@in...
>>     5.mailto:1]lea...@li...
>>     6.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>     7.http://leaf-project.org/
>>     8.mailto:4]su...@in...
>>     9.mailto:1.mailto:lea...@li...
>>    10.mailto:4.mailto:su...@in...
>>    11.mailto:lea...@li...
>>    12.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>    13.mailto:lea...@li...
>>    14.https://lists.sourceforge.net/lists/listinfo/leaf-user
>>    15.http://leaf-project.org/
>>    16.mailto:su...@in...
>>
>>
>> ------------------------------
>>
>>
>>
>> ------------------------------
>>
>> Subject: Digest Footer
>>
>> _______________________________________________
>> leaf-user mailing list
>> lea...@li...
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>>
>>
>> ------------------------------
>>
>> End of leaf-user Digest, Vol 204, Issue 3
>> *****************************************
> 
> 
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

-- 
„Wer von seinem Tag nicht zwei Drittel für sich hat, ist ein Sklave.“
―Friedrich Nietzsche

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 3

[Sławek A. <sa...@wa...>]

Big thanks. It's very nice that you want to help me. But your solution
doesn't work. For clarity, I added the IP numbers I approved to
  /etc/shorewall/rules as you wrote. And /etc/shorewall/policy was
(I added line numbers):

  1    #
  2    # Shorewall -- /etc/shorewall/policy
  3    #
  4    # For information about entries in this file, type "man 
shorewall-policy"
  5    #
  6    # The manpage is also online at
  7    # http://www.shorewall.net/manpages/shorewall-policy.html
  8    #
  9 
###############################################################################
10    #SOURCE        DEST        POLICY    LOGLEVEL    LIMIT CONNLIMIT
11    #loc    net    ACCEPT
12    loc    fw    REJECT
13    net    all    DROP
14    # If you want open access to the Internet from your Firewall
15    # remowe the comment from the following line.
16    #fw        net        ACCEPT
17    # THE FOLLOWING POLICY MUST BE LAST
18    #
19    all    all    REJECT            NFLOG(4,0,4)

I commented out line 11 and added line 12. And it doesn't work.
No local IP has internet. I uncommented line 11 without sucses.
Still no net. So I commented line 12. And every local IP has access
again. Probably the problem is in other place.

W dniu 25.11.2025 o 13:19, lea...@li... pisze:
> Message: 1
> Date: Mon, 24 Nov 2025 08:36:05 -0500
> From: "Robert K Coffman Jr. -Info From Data Corp."
> 	<bco...@in...>
> To:lea...@li...
> Subject: Re: [leaf-user] leaf-user Digest, Vol 204, Issue 1
> Message-ID:<e43...@in...>
> Content-Type: text/plain; charset="UTF-8"
>
>     If I am understanding you correctly, this is how I would accomplish
>     that.  I'm assuming Shorewall (the default firewall on Leaf, unless
>     that has changed) is running.  You can confirm by:
>     shorewall status
>     You should see a message including "Shorewall is running."
>     If you do, edit /etc/shorewall/policy and look for the line that is
>     similar to this:
>     loc             fw              ACCEPT
>     In that line, change ACCEPT to REJECT
>     Then, in /etc/shorewall/rules, add these rules for the IPs you want to
>     allow from your lan to connect to your firewall, one line for each IP:
>     ACCEPT    loc:192.168.0.5/24    fw   all
>     The /24 assumes that your subnet mask for your firewall is
>     255.255.255.0.  If it is different, you will need to modify that, and
>     of course make the IP address match your config.
>     After you make that edit, run:
>
>     shorewall restart
>
>     Verify it was successful, and you should be good to go.
>
>     - Robert
>
>     On 11/22/2025 10:44:33 AM, S?awek Adamski via leaf-user wrote:
>
>       Hello Robert,
>       Thanks a lot for your response. Hmm... the documentation of leaf
>       Bering uClibc is unavailable again:
>       "
>        Sorry! This site is experiencing technical difficulties.
>       Try waiting a few minutes and reloading.
>       (Cannot access the database)
>       " A month ago I copied near all of that as html files. My answer for 
> you question: I haven't even tried. I don't know how. Marco described 
> another solution for me, but I'm not a Linux man. I didn't understand 
> that. So I did what I described. It works, but not exactly how I 
> wanted. W dniu 22.11.2025 o 13:14, 
> [1]lea...@li... pisze: Message: 1 Date: 
> Fri, 21 Nov 2025 12:39:03 -0500 From: "Robert K Coffman Jr. -Info From Data Corp."
>           [2]<bco...@in...>
>       [3]To:lea...@li...
>       Subject: Re: [leaf-user] Problem with configuration.
>       Message-ID:[4]<66b...@in... >
>       Content-Type: text/plain; charset="UTF-8"
>           S?awek,
>           Did you overcome the problems you had with this?
>           - Robert
>           On 10/28/2025 4:50:11 PM, S?awek Adamski via leaf-user wrote:
>             Hi,
>             Please forgive my poor English.
>             I have small success. My leaf bering boots from USB and works.
>       Near
>             properly. Near.
>             I have two PC. One with Windows 11 and second for leaf. Both
>       have
>             keyboards and monitors.
>             Steps I took:
>             1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi
>       Imager I
>             recorded the first USB with version 7.0.0. In Rasberry Pi
>       Imager I
>             set the login and password for that leaf.
>             2. The partition on the USB had only 64 MB so using DiskGenius
>       I
>             expanded it to 128 MB.
>             3.  I logged into the booted from USB and upgraded doing:
>       upgrade
>             --release 7.5.1.
>             4. I configured that a little.
>             And it works. My PC with Windows has access to net via
>       firewall. My
>             firewall ignores pings to him. And longing to him from net is
>             impossible. And I changed the IP4 number to one I made up.
>             But I need two things in configuration. First I want ignore
>       local
>             connections from IP doesn't accepted by me. I wrote the
>       accepted
>             list to hosts.allow. Something like that, of course with my
>       IP:
>             # Allow anything from the local net
>             #ALL: 192.168.1.0/255.255.255.0
>             192.168.1.x
>             192.168.1.y
>             192.168.1.z
>             where 192.168.1.x, 192.168.1.y and 192.168.1.z are the allowed
>       IP by
>             me.
>             But it doesn't work. I don' understood the guide. I'm not
>       linux man.
>             Probably it must be done in other way.
>             The second which I want is to have working webconf. Now it is
>       still
>             asking for login and password in not ending loop. From
>       Firefox,
>             Chrome and Edge. Seems something is wrong.
>             Best Regards
>             S?awek
>
>       --------------------------------------------------------------------
>             ----
>             leaf-user mailing list: [[5]1]lea...@li...
>             [2][6]https://lists.sourceforge.net/lists/listinfo/leaf-user
>             Support Request -- [3][7]http://leaf-project.org/
>       --
>       Robert K Coffman Jr.
>       Info From Data Corp.
>       3307249000
>       [[8]4]su...@in...
>       References
>           [9]1.mailto:lea...@li...
>           2.https://lists.sourceforge.net/lists/listinfo/leaf-user
>           3.http://leaf-project.org/
>           [10]4.mailto:su...@in...
>       ------------------------------
>       ------------------------------
>       Subject: Digest Footer
>       _______________________________________________
>       leaf-user mailing list
>       [11]lea...@li...
>       [12]https://lists.sourceforge.net/lists/listinfo/leaf-user
>       ------------------------------
>       End of leaf-user Digest, Vol 204, Issue 1
>       *****************************************
>
>       --------------------------------------------------------------------
>       ----
>       leaf-user mailing list: [13]lea...@li...
>       [14]https://lists.sourceforge.net/lists/listinfo/leaf-user
>       Support Request -- [15]http://leaf-project.org/
>
> --
> Robert K Coffman Jr.
> Info From Data Corp.
> 3307249000
> [16]su...@in...
>
> References
>
>     1.mailto:lea...@li...
>     2.mailto:bco...@in...
>     3.mailto:To:lea...@li...
>     4.mailto:66b...@in...
>     5.mailto:1]lea...@li...
>     6.https://lists.sourceforge.net/lists/listinfo/leaf-user
>     7.http://leaf-project.org/
>     8.mailto:4]su...@in...
>     9.mailto:1.mailto:lea...@li...
>    10.mailto:4.mailto:su...@in...
>    11.mailto:lea...@li...
>    12.https://lists.sourceforge.net/lists/listinfo/leaf-user
>    13.mailto:lea...@li...
>    14.https://lists.sourceforge.net/lists/listinfo/leaf-user
>    15.http://leaf-project.org/
>    16.mailto:su...@in...
>
>
> ------------------------------
>
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> leaf-user mailing list
> lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
> ------------------------------
>
> End of leaf-user Digest, Vol 204, Issue 3
> *****************************************

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 1

[Robert K C. J. -I. F. D. Corp. <bco...@in...>]

   If I am understanding you correctly, this is how I would accomplish
   that.  I'm assuming Shorewall (the default firewall on Leaf, unless
   that has changed) is running.  You can confirm by:
   shorewall status
   You should see a message including "Shorewall is running."
   If you do, edit /etc/shorewall/policy and look for the line that is
   similar to this:
   loc             fw              ACCEPT
   In that line, change ACCEPT to REJECT
   Then, in /etc/shorewall/rules, add these rules for the IPs you want to
   allow from your lan to connect to your firewall, one line for each IP:
   ACCEPT    loc:192.168.0.5/24    fw   all
   The /24 assumes that your subnet mask for your firewall is
   255.255.255.0.  If it is different, you will need to modify that, and
   of course make the IP address match your config.
   After you make that edit, run:

   shorewall restart

   Verify it was successful, and you should be good to go.

   - Robert

   On 11/22/2025 10:44:33 AM, Sławek Adamski via leaf-user wrote:

     Hello Robert,
     Thanks a lot for your response. Hmm... the documentation of leaf
     Bering uClibc is unavailable again:
     "
      Sorry! This site is experiencing technical difficulties.
     Try waiting a few minutes and reloading.
     (Cannot access the database)
     "
     A month ago I copied near all of that as html files.
     My answer for you question:
     I haven't even tried. I don't know how.
     Marco described another solution for me, but I'm not a Linux man. I
     didn't understand that. So I did what I described. It works, but not
     exactly how I wanted.
     W dniu 22.11.2025 o 13:14,
     [1]lea...@li... pisze:

     Message: 1
     Date: Fri, 21 Nov 2025 12:39:03 -0500
     From: "Robert K Coffman Jr. -Info From Data Corp."
         [2]<bco...@in...>
     [3]To:lea...@li...
     Subject: Re: [leaf-user] Problem with configuration.
     Message-ID:[4]<66b...@in...
     >
     Content-Type: text/plain; charset="UTF-8"
         S?awek,
         Did you overcome the problems you had with this?
         - Robert
         On 10/28/2025 4:50:11 PM, S?awek Adamski via leaf-user wrote:
           Hi,
           Please forgive my poor English.
           I have small success. My leaf bering boots from USB and works.
     Near
           properly. Near.
           I have two PC. One with Windows 11 and second for leaf. Both
     have
           keyboards and monitors.
           Steps I took:
           1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi
     Imager I
           recorded the first USB with version 7.0.0. In Rasberry Pi
     Imager I
           set the login and password for that leaf.
           2. The partition on the USB had only 64 MB so using DiskGenius
     I
           expanded it to 128 MB.
           3.  I logged into the booted from USB and upgraded doing:
     upgrade
           --release 7.5.1.
           4. I configured that a little.
           And it works. My PC with Windows has access to net via
     firewall. My
           firewall ignores pings to him. And longing to him from net is
           impossible. And I changed the IP4 number to one I made up.
           But I need two things in configuration. First I want ignore
     local
           connections from IP doesn't accepted by me. I wrote the
     accepted
           list to hosts.allow. Something like that, of course with my
     IP:
           # Allow anything from the local net
           #ALL: 192.168.1.0/255.255.255.0
           192.168.1.x
           192.168.1.y
           192.168.1.z
           where 192.168.1.x, 192.168.1.y and 192.168.1.z are the allowed
     IP by
           me.
           But it doesn't work. I don' understood the guide. I'm not
     linux man.
           Probably it must be done in other way.
           The second which I want is to have working webconf. Now it is
     still
           asking for login and password in not ending loop. From
     Firefox,
           Chrome and Edge. Seems something is wrong.
           Best Regards
           S?awek

     --------------------------------------------------------------------
           ----
           leaf-user mailing list: [[5]1]lea...@li...
           [2][6]https://lists.sourceforge.net/lists/listinfo/leaf-user
           Support Request -- [3][7]http://leaf-project.org/
     --
     Robert K Coffman Jr.
     Info From Data Corp.
     3307249000
     [[8]4]su...@in...
     References
         [9]1.mailto:lea...@li...
         2.https://lists.sourceforge.net/lists/listinfo/leaf-user
         3.http://leaf-project.org/
         [10]4.mailto:su...@in...
     ------------------------------
     ------------------------------
     Subject: Digest Footer
     _______________________________________________
     leaf-user mailing list
     [11]lea...@li...
     [12]https://lists.sourceforge.net/lists/listinfo/leaf-user
     ------------------------------
     End of leaf-user Digest, Vol 204, Issue 1
     *****************************************

     --------------------------------------------------------------------
     ----
     leaf-user mailing list: [13]lea...@li...
     [14]https://lists.sourceforge.net/lists/listinfo/leaf-user
     Support Request -- [15]http://leaf-project.org/

--
Robert K Coffman Jr.
Info From Data Corp.
3307249000
[16]su...@in...

References

   1. mailto:lea...@li...
   2. mailto:bco...@in...
   3. mailto:To:lea...@li...
   4. mailto:66b...@in...
   5. mailto:1]lea...@li...
   6. https://lists.sourceforge.net/lists/listinfo/leaf-user
   7. http://leaf-project.org/
   8. mailto:4]su...@in...
   9. mailto:1.mailto:lea...@li...
  10. mailto:4.mailto:su...@in...
  11. mailto:lea...@li...
  12. https://lists.sourceforge.net/lists/listinfo/leaf-user
  13. mailto:lea...@li...
  14. https://lists.sourceforge.net/lists/listinfo/leaf-user
  15. http://leaf-project.org/
  16. mailto:su...@in...

Re: [leaf-user] leaf-user Digest, Vol 204, Issue 1

[Sławek A. <sa...@wa...>]

Hello Robert,
Thanks a lot for your response. Hmm... the documentation of leaf Bering 
uClibc is unavailable again:

"


  Sorry! This site is experiencing technical difficulties.

Try waiting a few minutes and reloading.

(Cannot access the database)


"
A month ago I copied near all of that as html files.

My answer for you question:
I haven't even tried. I don't know how.
Marco described another solution for me, but I'm not a Linux man. I 
didn't understand that. So I did what I described. It works, but not 
exactly how I wanted.

W dniu 22.11.2025 o 13:14, lea...@li... pisze:
> Message: 1
> Date: Fri, 21 Nov 2025 12:39:03 -0500
> From: "Robert K Coffman Jr. -Info From Data Corp."
> 	<bco...@in...>
> To:lea...@li...
> Subject: Re: [leaf-user] Problem with configuration.
> Message-ID:<66b...@in...>
> Content-Type: text/plain; charset="UTF-8"
>
>     S?awek,
>
>     Did you overcome the problems you had with this?
>
>     - Robert
>
>     On 10/28/2025 4:50:11 PM, S?awek Adamski via leaf-user wrote:
>
>       Hi,
>       Please forgive my poor English.
>       I have small success. My leaf bering boots from USB and works. Near
>       properly. Near.
>       I have two PC. One with Windows 11 and second for leaf. Both have
>       keyboards and monitors.
>       Steps I took:
>       1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi Imager I
>       recorded the first USB with version 7.0.0. In Rasberry Pi Imager I
>       set the login and password for that leaf.
>       2. The partition on the USB had only 64 MB so using DiskGenius I
>       expanded it to 128 MB.
>       3.  I logged into the booted from USB and upgraded doing: upgrade
>       --release 7.5.1.
>       4. I configured that a little.
>       And it works. My PC with Windows has access to net via firewall. My
>       firewall ignores pings to him. And longing to him from net is
>       impossible. And I changed the IP4 number to one I made up.
>       But I need two things in configuration. First I want ignore local
>       connections from IP doesn't accepted by me. I wrote the accepted
>       list to hosts.allow. Something like that, of course with my IP:
>       # Allow anything from the local net
>       #ALL: 192.168.1.0/255.255.255.0
>       192.168.1.x
>       192.168.1.y
>       192.168.1.z
>       where 192.168.1.x, 192.168.1.y and 192.168.1.z are the allowed IP by
>       me.
>       But it doesn't work. I don' understood the guide. I'm not linux man.
>       Probably it must be done in other way.
>       The second which I want is to have working webconf. Now it is still
>       asking for login and password in not ending loop. From Firefox,
>       Chrome and Edge. Seems something is wrong.
>       Best Regards
>       S?awek
>       --------------------------------------------------------------------
>       ----
>       leaf-user mailing list: [1]lea...@li...
>       [2]https://lists.sourceforge.net/lists/listinfo/leaf-user
>       Support Request -- [3]http://leaf-project.org/
>
> --
> Robert K Coffman Jr.
> Info From Data Corp.
> 3307249000
> [4]su...@in...
>
> References
>
>     1.mailto:lea...@li...
>     2.https://lists.sourceforge.net/lists/listinfo/leaf-user
>     3.http://leaf-project.org/
>     4.mailto:su...@in...
>
>
> ------------------------------
>
>
>
> ------------------------------
>
> Subject: Digest Footer
>
> _______________________________________________
> leaf-user mailing list
> lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
>
>
> ------------------------------
>
> End of leaf-user Digest, Vol 204, Issue 1
> *****************************************

Re: [leaf-user] Problem with configuration.

[Robert K C. J. -I. F. D. Corp. <bco...@in...>]

   Sławek,

   Did you overcome the problems you had with this?

   - Robert

   On 10/28/2025 4:50:11 PM, Sławek Adamski via leaf-user wrote:

     Hi,
     Please forgive my poor English.
     I have small success. My leaf bering boots from USB and works. Near
     properly. Near.
     I have two PC. One with Windows 11 and second for leaf. Both have
     keyboards and monitors.
     Steps I took:
     1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi Imager I
     recorded the first USB with version 7.0.0. In Rasberry Pi Imager I
     set the login and password for that leaf.
     2. The partition on the USB had only 64 MB so using DiskGenius I
     expanded it to 128 MB.
     3.  I logged into the booted from USB and upgraded doing: upgrade
     --release 7.5.1.
     4. I configured that a little.
     And it works. My PC with Windows has access to net via firewall. My
     firewall ignores pings to him. And longing to him from net is
     impossible. And I changed the IP4 number to one I made up.
     But I need two things in configuration. First I want ignore local
     connections from IP doesn't accepted by me. I wrote the accepted
     list to hosts.allow. Something like that, of course with my IP:
     # Allow anything from the local net
     #ALL: 192.168.1.0/255.255.255.0
     192.168.1.x
     192.168.1.y
     192.168.1.z
     where 192.168.1.x, 192.168.1.y and 192.168.1.z are the allowed IP by
     me.
     But it doesn't work. I don' understood the guide. I'm not linux man.
     Probably it must be done in other way.
     The second which I want is to have working webconf. Now it is still
     asking for login and password in not ending loop. From Firefox,
     Chrome and Edge. Seems something is wrong.
     Best Regards
     Sławek
     --------------------------------------------------------------------
     ----
     leaf-user mailing list: [1]lea...@li...
     [2]https://lists.sourceforge.net/lists/listinfo/leaf-user
     Support Request -- [3]http://leaf-project.org/

--
Robert K Coffman Jr.
Info From Data Corp.
3307249000
[4]su...@in...

References

   1. mailto:lea...@li...
   2. https://lists.sourceforge.net/lists/listinfo/leaf-user
   3. http://leaf-project.org/
   4. mailto:su...@in...

[leaf-user] Problem with configuration.

[Sławek A. <sa...@wa...>]

Hi,

Please forgive my poor English.
I have small success. My leaf bering boots from USB and works. Near 
properly. Near.
I have two PC. One with Windows 11 and second for leaf. Both have 
keyboards and monitors.
Steps I took:
1. Using image Bering-uClibc_x86_vga.img and  Rasberry Pi Imager I 
recorded the first USB with version 7.0.0. In Rasberry Pi Imager I set 
the login and password for that leaf.
2. The partition on the USB had only 64 MB so using DiskGenius I 
expanded it to 128 MB.
3.  I logged into the booted from USB and upgraded doing: upgrade 
--release 7.5.1.
4. I configured that a little.
And it works. My PC with Windows has access to net via firewall. My 
firewall ignores pings to him. And longing to him from net is 
impossible. And I changed the IP4 number to one I made up.

But I need two things in configuration. First I want ignore local 
connections from IP doesn't accepted by me. I wrote the accepted list to 
hosts.allow. Something like that, of course with my IP:

# Allow anything from the local net
#ALL: 192.168.1.0/255.255.255.0
192.168.1.x
192.168.1.y
192.168.1.z

where 192.168.1.x, 192.168.1.y and 192.168.1.z are the allowed IP by me.

But it doesn't work. I don' understood the guide. I'm not linux man. 
Probably it must be done in other way.

The second which I want is to have working webconf. Now it is still 
asking for login and password in not ending loop. From Firefox, Chrome 
and Edge. Seems something is wrong.

Best Regards
Sławek

[leaf-user] 7.5.1-rc1 and m720q tiny pc

[Jim M. <jv...@ho...>]

Hi all,

Just a report back about this release and the lenovo m720q tiny.

This release works quite well with this pc.  I have a 4 port nic 
installed in the m720q.  I requires a riser card and a bracket to hold 
the nic in place.  I used a lenovo i350 t4 nic and have also tried a hp 
nc365t.

Both seem quite fine.  My main driver to switching to a smaller pc was 
the power consumption on my ups.  I was getting about 48 min with a dual 
core E2220@2.4Ghz pc.  With the M720q and a 24 port switch, I get 2 hrs 
and 18 min on a 950VA ups

I'm also using a hdmi to vga adapter cable and a usb keyboard.

syslinux.cfg required a few tweaks to make it all work. They are:

-------------------------------------------------------------------------------------

# Wait for 5 seconds before booting up the default entry.
TIMEOUT 50

DEFAULT Bering-uClibc

UI vesamenu.c32
MENU RESOLUTION 640 480
MENU BACKGROUND leaf.jpg

MENU HIDDEN

MENU COLOR sel 7;37;40    #ff000000 #20ff8000 all
MENU COLOR border 30;44 #00000000 #00000000 none

MENU COLOR tabmsg 31;40 #ff0000ff #00000000 none
MENU COLOR cmdmark 31;40 #ff0f0f0f #00000000 none
MENU COLOR cmdline 31;40 #ff0f0f0f #00000000 none
MENU COLOR timeout_msg 31;40 #ff0f0f0f #00000000 none
MENU COLOR timeout 31;40 #ff0000ff #00000000 none

#MENU AUTOBOOT Bering-uClibc {VERSION} Automatic boot in # second{,s}...

MENU TABMSGROW 21
MENU CMDLINEROW 21
MENU TIMEOUTROW 28
MENU HIDDENROW -1

MENU BEGIN
LABEL Bering-uClibc
   MENU LABEL Boot Bering-uClibc
   MENU CLEAR
   KERNEL /linux
   APPEND initrd=/initrd.lrp LEAFCFG=/dev/sda1:vfat reboot=bios 
usb_wait=6 intel_idle.max_cstate=0 processor.max_cstate=1 quiet 
spectre_v2=auto modprobe.blacklist=acpi_cpufreq intel_pstate.shared_mem=1

LABEL Hardware Test
   MENU LABEL Hardware Test
   MENU CLEAR
   KERNEL hdt.c32

LABEL memtest
  linux memtest.bin
MENU END
-------------------------------------------------------------------------------------------------------

usb_wait=6 and  spectre_v2=auto modprobe.blacklist=acpi_cpufreq 
intel_pstate.shared_mem=1

were required to get it to boot properly.

Hope this helps if someone else in using this type of setup.

Jim

Re: [leaf-user] leaf-user Digest, Vol 202, Issue 3

[Sławek A. <sa...@wa...>]

W dniu 19.09.2025 o 14:14, lea...@li... pisze:
> Am 16.09.25 um 20:52 schrieb S?awek Adamski via leaf-user:
>> Hi,
>> I can't access the Bering-uClibc documentation (guide) at https://
>> bering-uclibc.zetam.org/wiki/Main_Page. Why? Maybe somebody knows
>> working link?
>>
>> Best Regards
>> S?awek
>>
> Hej Slawek,
>
> try again, use a different browser or delete cache etc.. The URL is OK!
>
> Boris
Hej Boris,

Yes, the URL is OK. Now. Yesterday was OK too. But two days ago wasn't. 
Four days ago wasn't too. On my computer of course. I checked it using 
Firefox, Chrome and Edge.

Best Regards
Sławek

Re: [leaf-user] Problem with documentation

[Boris <bo...@ca...>]

Am 16.09.25 um 20:52 schrieb Sławek Adamski via leaf-user:
> Hi,
> I can't access the Bering-uClibc documentation (guide) at https:// 
> bering-uclibc.zetam.org/wiki/Main_Page. Why? Maybe somebody knows 
> working link?
> 
> Best Regards
> Sławek
> 

Hej Slawek,

try again, use a different browser or delete cache etc.. The URL is OK!

Boris

[leaf-user] Problem with documentation

[Sławek A. <sa...@wa...>]

Hi,
I can't access the Bering-uClibc documentation (guide) at 
https://bering-uclibc.zetam.org/wiki/Main_Page. Why? Maybe somebody 
knows working link?

Best Regards
Sławek

Re: [leaf-user] lrcfg Install to Disk partition sizes

[Erich T. <eri...@th...>]

Hi Marko

Am 27.08.2025 um 06:06 schrieb marko via leaf-user:
> Hi all,
> 
> does anyone know where the default sizes of the partitons are set for the
> install to disk option?
> 
> Current sizes are a fraction too small to for my liking.
> Ideally I'd like partiton 2 to be 295MB and Part 3 to be 300MB.   Having the
> slightly different sizes makes them much easier to identify on disk.

Mhhh.... being the culprit and having it written quite a few years ago I 
had to reread my code and try to understand what it does.

look into /sbin/hdsupp_functions there is quite some code that 
calculates possible disk partition sizes, I have no hardware with me 
that I could use it on so cannot verify. The stuff you want is

################################################################################
# By default we build a disk layout with one bootloader partition
# and one LEAF partition

LAYOUT_TYPE=2 ;                 # default to a 2 partition layout
BOOT_PART_OFFSET=2048 ;         # standard offset for partition 1 in 512 
byte blocks
BOOT_PART_SIZE=2048 ;           # size of the boot partition in 512 byte 
blocks

PART_MAX=400000 ;               # maximum partition size in 512 byte blocks

NEED_FORMAT=YES ;
CONSOLE=serial ;

 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
AND
 >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

build_disk_part_table() {
         local layout=$(mktemp)
         local hd_raw_size=$(get_device_blocks $HD_RAW_SELECTED)
         build_part_prefix ;

         local partition_space=$(( ($hd_raw_size - $BOOT_PART_OFFSET - 
$BOOT_PART_SIZE) / 2 ))
         [ $partition_space -gt $PART_MAX ] && partition_space=$PART_MAX

         PART2_OFFSET=$(( $BOOT_PART_OFFSET + $BOOT_PART_SIZE )) ;
         PART3_OFFSET=$(( $PART2_OFFSET + partition_space )) ;

         # install a single partition for ARM based architecture
         #
         check_for_arm_architecture && \
                 cp /usr/share/single_part.tmpl $layout || \
                 cp /usr/share/disk.tmpl $layout;

         [ $LAYOUT_TYPE -eq 2 ] && sed -i '$d' $layout;
         sed -i  "s!_DEVICE_!$HD_RAW_SELECTED!; \
                 s/_PART_/$PART_PREFIX/; \
                 s/_SIZE_P1_/$BOOT_PART_SIZE/; \
                 s/_OFFSET_P2_/$PART2_OFFSET/; \
                 s/_SIZE_P2_/$partition_space/; \
                 s/_OFFSET_P3_/$PART3_OFFSET/; \
                 s/_SIZE_P3_/$partition_space/" \
                 $layout;

         /sbin/fdisk /dev/$HD_RAW_SELECTED 1>/dev/null 2>&1 << EOF
         I
         $layout
         w
EOF
         rm -f $layout ;
         collect_partition_data ;
         NEED_FORMAT=YES ;
}


> 
> I currently make a new stick with the install script, manually move and resize
> and then re-install with the install script.

I am not sure if you cannot change partition sizes by rejecting the 
suggested values. Integrating it into leafinstall if needed does not 
seem too complicated. You will have to pass some parameters to the 
supporting functions.

I believe if you have a reasonable partitioned disk you can use this layout.

After all this fundction was meant for the NOOB user which would not 
care about any layout :-(

cheera

ET

-- 
„Wer von seinem Tag nicht zwei Drittel für sich hat, ist ein Sklave.“
―Friedrich Nietzsche

[leaf-user] lrcfg Install to Disk partition sizes

[marko <le...@me...>]

Hi all,

does anyone know where the default sizes of the partitons are set for the 
install to disk option?  

Current sizes are a fraction too small to for my liking.   
Ideally I'd like partiton 2 to be 295MB and Part 3 to be 300MB.   Having the 
slightly different sizes makes them much easier to identify on disk.  

I currently make a new stick with the install script, manually move and resize 
and then re-install with the install script.

thanks & kind regards
marko
 

[leaf-user] ncurses packaging

[Jim M. <jv...@ho...>]

Thanks for fixing!

Jim

Re: [leaf-user] usb keyboard

[KP.Kirchdoerfer <ka...@be...>]

Hi Jim;

Am Mittwoch, 20. August 2025, 20:48:47 Mitteleuropäische Sommerzeit schrieb 
Jim Munro:
> Sorry KP,   I didn't see your post. Thanks for fixing the keyboard
> issue.  I built the toolchain and got most of the modules built save 7
> of them.  Going to wait for next release.  The image seemed to work but
> got a message with netsnmpd and nano that libtinfo.so.6 was not found. 
> Didn't see it as a module that was built.  (6.1-1ubuntu1.18.04.1 was
> installed on build host)  Maybe its in the fine tuning when you do a
> release.
> Thanks again.

Glad it worked. 
Thanks for bug report, it was a packaging in ncurses.

kp

[leaf-user] Remove

[Phil <ph...@fa...>]

     
 

 
 My father passed - he was 94!    Can you please remove him from this list? This is his email.    
 
 
 
 
 

 
 

 
Thanks so much.  
 

 
Dan Faris
     

[leaf-user] usb keyboard

[Jim M. <jv...@ho...>]

Sorry KP,   I didn't see your post. Thanks for fixing the keyboard 
issue.  I built the toolchain and got most of the modules built save 7 
of them.  Going to wait for next release.  The image seemed to work but 
got a message with netsnmpd and nano that libtinfo.so.6 was not found.  
Didn't see it as a module that was built.  (6.1-1ubuntu1.18.04.1 was 
installed on build host)  Maybe its in the fine tuning when you do a 
release.
Thanks again.

Jim

On 8/9/2025 1:59 PM, Jim Munro wrote:
> Hi all,
> Had to tweak the backup.sh script in /sbin.  Added *-4* option to the 
> line that starts with <in.tftpd *-4* -l -s $STORAGE_MEDIA>
> Needed to add /sbin/backup.sh to local(files).
> Seems to work for my purposes. YMMV
> This leaves only usb keyboard issue.
> Jim
>
> #!/bin/sh
>
> . /etc/backup.conf
>
> if [ -z "$STORAGE_MEDIA" ]; then
>     exit 1;
> fi
>
> files=`ls $STORAGE_MEDIA`
> fl=""
> for i in $files; do
>     fl=$fl+$i
> done;
> in.tftpd *-4* -l -s $STORAGE_MEDIA
> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
>     echo `date`": Backup failed" >>/var/log/backup.log
> else
>     echo `date`": Backup successful" >>/var/log/backup.log
> fi
> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
> rm /tmp/bk.res
>
> On 8/6/2025 4:24 PM, Jim Munro wrote:
>> Hi everyone,
>>
>> Decided to update my leaf box to newer hardware.  Was running 
>> 7.0.0-rc1 which is now a bit dated.  Everything was running quite well.
>>
>> New hardware is a M720Q tiny pc.  Trying to get my power footprint 
>> lower for UPS battery backup.
>>
>> Anyway I went with the 7.5.0-RC1 and encountered a few problems.
>>
>> The usb keyboard no longer works on the system console.  Tried few 
>> thing but couldn't get it to work.  Happens on other hardware as well.
>>
>> The backup module seems to require new dependencies which I tried 
>> adding.  Finally it starts a backup to another machine but is 
>> exceeding slow
>>
>> and the Save feature of the lrp menu quits working after a backup is 
>> started.  This is reproduce-able.
>>
>> from leaf.cfg
>>
>> # List of packages to load
>> LRP="root license local bbnameif tc ppp pppoe ezipupd ipset iptables\
>>     shorwall libelf bbntpd perl etherw knockd libpcap *libintl libpsl*\
>>     openvpn easyrsa libssl openssl liblzo libcrpto ethtool dnsmasq\
>>     modules dropbear mhttpd lighttpd webconf pppscrpt libsens sensors\
>>     libgmp libuuid libpcre wget libz libnettle snmpmibs *libunistring*\
>>     libm libsnmp libnl3 netsnmpd tftpd backup nano patch"
>>
>> The modules I added to leaf.cfg are bolded
>>
>> firewall# ps w|grep backup
>>  9139 root      1400 S    {backup} /bin/sh /etc/cron.weekly/backup
>>  9140 root      1404 S    {with_storage} /bin/sh 
>> /usr/sbin/with_storage /var/lib/lrpkg/mnt /sbin/backup.sh
>>  9144 root      1432 S    {backup.sh} /bin/sh /sbin/backup.sh
>> 10709 root      1412 S    grep backup
>>
>> firewall# cat /etc/backup.conf
>> MIRROR="http://a.b.c.d/cgi-bin"
>> LOGGING=1
>> LRPKG="/var/lib/lrpkg"
>> MNT="$LRPKG/mnt"
>>
>> firewall# cat backup.sh
>> #!/bin/sh
>>
>> . /etc/backup.conf
>>
>> if [ -z "$STORAGE_MEDIA" ]; then
>>     exit 1;
>> fi
>>
>> files=`ls $STORAGE_MEDIA`
>> fl=""
>> for i in $files; do
>>     fl=$fl+$i
>> done;
>> in.tftpd -l -s $STORAGE_MEDIA
>> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
>> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
>>     echo `date`": Backup failed" >>/var/log/backup.log
>> else
>>     echo `date`": Backup successful" >>/var/log/backup.log
>> fi
>> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
>> rm /tmp/bk.res
>>
>>
>> Any help or I can help troubleshooting, please advice.
>>
>> Jim
>>
>> ------------------------------------------------------------------------
>> leaf-user mailing list: lea...@li...
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
>
>
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

Re: [leaf-user] 7.5.0-RC1 backup and no usb keyboard

[KP.Kirchdoerfer <ka...@be...>]

Hi;

Am Samstag, 9. August 2025, 21:42:53 Mitteleuropäische Sommerzeit schrieb Jim 
Munro:
> Hi all,
> Looks the the kernel modules (drivers ->hid)  are missing after release
> 7.3.1.1.  Looking forward to anyone that has a tool chain that can
> compile a 6.12.13 kernel with the hid modules.
> Not totally sure on these modules but its my best guess.

Hopefully; 
the USB-HID support has been missing on most kernel configs; fixed configs has 
been committed to git for next release.

kp

> Thanks
> Jim
> 
> On 8/9/2025 1:59 PM, Jim Munro wrote:
> > Hi all,
> > Had to tweak the backup.sh script in /sbin.  Added *-4* option to the
> > line that starts with <in.tftpd *-4* -l -s $STORAGE_MEDIA>
> > Needed to add /sbin/backup.sh to local(files).
> > Seems to work for my purposes. YMMV
> > This leaves only usb keyboard issue.
> > Jim
> > 
> > #!/bin/sh
> > 
> > . /etc/backup.conf
> > 
> > if [ -z "$STORAGE_MEDIA" ]; then
> >     exit 1;
> > fi
> > 
> > files=`ls $STORAGE_MEDIA`
> > fl=""
> > for i in $files; do
> >     fl=$fl+$i
> > done;
> > in.tftpd *-4* -l -s $STORAGE_MEDIA
> > wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
> > if [ "`cat /tmp/bk.res`" -ne 0 ]; then
> >     echo `date`": Backup failed" >>/var/log/backup.log
> > else
> >     echo `date`": Backup successful" >>/var/log/backup.log
> > fi
> > kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
> > rm /tmp/bk.res
> > 
> > On 8/6/2025 4:24 PM, Jim Munro wrote:
> >> Hi everyone,
> >> 
> >> Decided to update my leaf box to newer hardware.  Was running
> >> 7.0.0-rc1 which is now a bit dated.  Everything was running quite well.
> >> 
> >> New hardware is a M720Q tiny pc.  Trying to get my power footprint
> >> lower for UPS battery backup.
> >> 
> >> Anyway I went with the 7.5.0-RC1 and encountered a few problems.
> >> 
> >> The usb keyboard no longer works on the system console.  Tried few
> >> thing but couldn't get it to work.  Happens on other hardware as well.
> >> 
> >> The backup module seems to require new dependencies which I tried
> >> adding.  Finally it starts a backup to another machine but is
> >> exceeding slow
> >> 
> >> and the Save feature of the lrp menu quits working after a backup is
> >> started.  This is reproduce-able.
> >> 
> >> from leaf.cfg
> >> 
> >> # List of packages to load
> >> LRP="root license local bbnameif tc ppp pppoe ezipupd ipset iptables\
> >>     shorwall libelf bbntpd perl etherw knockd libpcap *libintl libpsl*\
> >>     openvpn easyrsa libssl openssl liblzo libcrpto ethtool dnsmasq\
> >>     modules dropbear mhttpd lighttpd webconf pppscrpt libsens sensors\
> >>     libgmp libuuid libpcre wget libz libnettle snmpmibs *libunistring*\
> >>     libm libsnmp libnl3 netsnmpd tftpd backup nano patch"
> >> 
> >> The modules I added to leaf.cfg are bolded
> >> 
> >> firewall# ps w|grep backup
> >>  9139 root      1400 S    {backup} /bin/sh /etc/cron.weekly/backup
> >>  9140 root      1404 S    {with_storage} /bin/sh
> >> /usr/sbin/with_storage /var/lib/lrpkg/mnt /sbin/backup.sh
> >>  9144 root      1432 S    {backup.sh} /bin/sh /sbin/backup.sh
> >> 10709 root      1412 S    grep backup
> >> 
> >> firewall# cat /etc/backup.conf
> >> MIRROR="http://a.b.c.d/cgi-bin"
> >> LOGGING=1
> >> LRPKG="/var/lib/lrpkg"
> >> MNT="$LRPKG/mnt"
> >> 
> >> firewall# cat backup.sh
> >> #!/bin/sh
> >> 
> >> . /etc/backup.conf
> >> 
> >> if [ -z "$STORAGE_MEDIA" ]; then
> >>     exit 1;
> >> fi
> >> 
> >> files=`ls $STORAGE_MEDIA`
> >> fl=""
> >> for i in $files; do
> >>     fl=$fl+$i
> >> done;
> >> in.tftpd -l -s $STORAGE_MEDIA
> >> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
> >> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
> >>     echo `date`": Backup failed" >>/var/log/backup.log
> >> else
> >>     echo `date`": Backup successful" >>/var/log/backup.log
> >> fi
> >> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
> >> rm /tmp/bk.res
> >> 
> >> 
> >> Any help or I can help troubleshooting, please advice.
> >> 
> >> Jim
> >> 
> >> ------------------------------------------------------------------------
> >> leaf-user mailing list: lea...@li...
> >> https://lists.sourceforge.net/lists/listinfo/leaf-user
> >> Support Request -- http://leaf-project.org/
> > 
> > ------------------------------------------------------------------------
> > leaf-user mailing list: lea...@li...
> > https://lists.sourceforge.net/lists/listinfo/leaf-user
> > Support Request -- http://leaf-project.org/
> 
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

Re: [leaf-user] 7.5.0-RC1 backup and no usb keyboard

[Jim M. <jv...@ho...>]

Hi all,
Looks the the kernel modules (drivers ->hid)  are missing after release 
7.3.1.1.  Looking forward to anyone that has a tool chain that can 
compile a 6.12.13 kernel with the hid modules.
Not totally sure on these modules but its my best guess.
Thanks
Jim

On 8/9/2025 1:59 PM, Jim Munro wrote:
> Hi all,
> Had to tweak the backup.sh script in /sbin.  Added *-4* option to the 
> line that starts with <in.tftpd *-4* -l -s $STORAGE_MEDIA>
> Needed to add /sbin/backup.sh to local(files).
> Seems to work for my purposes. YMMV
> This leaves only usb keyboard issue.
> Jim
>
> #!/bin/sh
>
> . /etc/backup.conf
>
> if [ -z "$STORAGE_MEDIA" ]; then
>     exit 1;
> fi
>
> files=`ls $STORAGE_MEDIA`
> fl=""
> for i in $files; do
>     fl=$fl+$i
> done;
> in.tftpd *-4* -l -s $STORAGE_MEDIA
> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
>     echo `date`": Backup failed" >>/var/log/backup.log
> else
>     echo `date`": Backup successful" >>/var/log/backup.log
> fi
> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
> rm /tmp/bk.res
>
> On 8/6/2025 4:24 PM, Jim Munro wrote:
>> Hi everyone,
>>
>> Decided to update my leaf box to newer hardware.  Was running 
>> 7.0.0-rc1 which is now a bit dated.  Everything was running quite well.
>>
>> New hardware is a M720Q tiny pc.  Trying to get my power footprint 
>> lower for UPS battery backup.
>>
>> Anyway I went with the 7.5.0-RC1 and encountered a few problems.
>>
>> The usb keyboard no longer works on the system console.  Tried few 
>> thing but couldn't get it to work.  Happens on other hardware as well.
>>
>> The backup module seems to require new dependencies which I tried 
>> adding.  Finally it starts a backup to another machine but is 
>> exceeding slow
>>
>> and the Save feature of the lrp menu quits working after a backup is 
>> started.  This is reproduce-able.
>>
>> from leaf.cfg
>>
>> # List of packages to load
>> LRP="root license local bbnameif tc ppp pppoe ezipupd ipset iptables\
>>     shorwall libelf bbntpd perl etherw knockd libpcap *libintl libpsl*\
>>     openvpn easyrsa libssl openssl liblzo libcrpto ethtool dnsmasq\
>>     modules dropbear mhttpd lighttpd webconf pppscrpt libsens sensors\
>>     libgmp libuuid libpcre wget libz libnettle snmpmibs *libunistring*\
>>     libm libsnmp libnl3 netsnmpd tftpd backup nano patch"
>>
>> The modules I added to leaf.cfg are bolded
>>
>> firewall# ps w|grep backup
>>  9139 root      1400 S    {backup} /bin/sh /etc/cron.weekly/backup
>>  9140 root      1404 S    {with_storage} /bin/sh 
>> /usr/sbin/with_storage /var/lib/lrpkg/mnt /sbin/backup.sh
>>  9144 root      1432 S    {backup.sh} /bin/sh /sbin/backup.sh
>> 10709 root      1412 S    grep backup
>>
>> firewall# cat /etc/backup.conf
>> MIRROR="http://a.b.c.d/cgi-bin"
>> LOGGING=1
>> LRPKG="/var/lib/lrpkg"
>> MNT="$LRPKG/mnt"
>>
>> firewall# cat backup.sh
>> #!/bin/sh
>>
>> . /etc/backup.conf
>>
>> if [ -z "$STORAGE_MEDIA" ]; then
>>     exit 1;
>> fi
>>
>> files=`ls $STORAGE_MEDIA`
>> fl=""
>> for i in $files; do
>>     fl=$fl+$i
>> done;
>> in.tftpd -l -s $STORAGE_MEDIA
>> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
>> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
>>     echo `date`": Backup failed" >>/var/log/backup.log
>> else
>>     echo `date`": Backup successful" >>/var/log/backup.log
>> fi
>> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
>> rm /tmp/bk.res
>>
>>
>> Any help or I can help troubleshooting, please advice.
>>
>> Jim
>>
>> ------------------------------------------------------------------------
>> leaf-user mailing list: lea...@li...
>> https://lists.sourceforge.net/lists/listinfo/leaf-user
>> Support Request -- http://leaf-project.org/
>
>
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

Re: [leaf-user] 7.5.0-RC1 backup and no usb keyboard

[Jim M. <jv...@ho...>]

Hi all,
Had to tweak the backup.sh script in /sbin.  Added *-4* option to the 
line that starts with <in.tftpd *-4* -l -s $STORAGE_MEDIA>
Needed to add /sbin/backup.sh to local(files).
Seems to work for my purposes. YMMV
This leaves only usb keyboard issue.
Jim

#!/bin/sh

. /etc/backup.conf

if [ -z "$STORAGE_MEDIA" ]; then
     exit 1;
fi

files=`ls $STORAGE_MEDIA`
fl=""
for i in $files; do
     fl=$fl+$i
done;
in.tftpd *-4* -l -s $STORAGE_MEDIA
wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
if [ "`cat /tmp/bk.res`" -ne 0 ]; then
     echo `date`": Backup failed" >>/var/log/backup.log
else
     echo `date`": Backup successful" >>/var/log/backup.log
fi
kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
rm /tmp/bk.res

On 8/6/2025 4:24 PM, Jim Munro wrote:
> Hi everyone,
>
> Decided to update my leaf box to newer hardware.  Was running 
> 7.0.0-rc1 which is now a bit dated.  Everything was running quite well.
>
> New hardware is a M720Q tiny pc.  Trying to get my power footprint 
> lower for UPS battery backup.
>
> Anyway I went with the 7.5.0-RC1 and encountered a few problems.
>
> The usb keyboard no longer works on the system console.  Tried few 
> thing but couldn't get it to work.  Happens on other hardware as well.
>
> The backup module seems to require new dependencies which I tried 
> adding.  Finally it starts a backup to another machine but is 
> exceeding slow
>
> and the Save feature of the lrp menu quits working after a backup is 
> started.  This is reproduce-able.
>
> from leaf.cfg
>
> # List of packages to load
> LRP="root license local bbnameif tc ppp pppoe ezipupd ipset iptables\
>     shorwall libelf bbntpd perl etherw knockd libpcap *libintl libpsl*\
>     openvpn easyrsa libssl openssl liblzo libcrpto ethtool dnsmasq\
>     modules dropbear mhttpd lighttpd webconf pppscrpt libsens sensors\
>     libgmp libuuid libpcre wget libz libnettle snmpmibs *libunistring*\
>     libm libsnmp libnl3 netsnmpd tftpd backup nano patch"
>
> The modules I added to leaf.cfg are bolded
>
> firewall# ps w|grep backup
>  9139 root      1400 S    {backup} /bin/sh /etc/cron.weekly/backup
>  9140 root      1404 S    {with_storage} /bin/sh 
> /usr/sbin/with_storage /var/lib/lrpkg/mnt /sbin/backup.sh
>  9144 root      1432 S    {backup.sh} /bin/sh /sbin/backup.sh
> 10709 root      1412 S    grep backup
>
> firewall# cat /etc/backup.conf
> MIRROR="http://a.b.c.d/cgi-bin"
> LOGGING=1
> LRPKG="/var/lib/lrpkg"
> MNT="$LRPKG/mnt"
>
> firewall# cat backup.sh
> #!/bin/sh
>
> . /etc/backup.conf
>
> if [ -z "$STORAGE_MEDIA" ]; then
>     exit 1;
> fi
>
> files=`ls $STORAGE_MEDIA`
> fl=""
> for i in $files; do
>     fl=$fl+$i
> done;
> in.tftpd -l -s $STORAGE_MEDIA
> wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
> if [ "`cat /tmp/bk.res`" -ne 0 ]; then
>     echo `date`": Backup failed" >>/var/log/backup.log
> else
>     echo `date`": Backup successful" >>/var/log/backup.log
> fi
> kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
> rm /tmp/bk.res
>
>
> Any help or I can help troubleshooting, please advice.
>
> Jim
>
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/

[leaf-user] 7.5.0-RC1

[Jim M. <jv...@ho...>]

Hi everyone,

Decided to update my leaf box to newer hardware.  Was running 7.0.0-rc1 
which is now a bit dated.  Everything was running quite well.

New hardware is a M720Q tiny pc.  Trying to get my power footprint lower 
for UPS battery backup.

Anyway I went with the 7.5.0-RC1 and encountered a few problems.

The usb keyboard no longer works on the system console.  Tried few thing 
but couldn't get it to work.  Happens on other hardware as well.

The backup module seems to require new dependencies which I tried 
adding.  Finally it starts a backup to another machine but is exceeding slow

and the Save feature of the lrp menu quits working after a backup is 
started.  This is reproduce-able.

from leaf.cfg

# List of packages to load
LRP="root license local bbnameif tc ppp pppoe ezipupd ipset iptables\
     shorwall libelf bbntpd perl etherw knockd libpcap *libintl libpsl*\
     openvpn easyrsa libssl openssl liblzo libcrpto ethtool dnsmasq\
     modules dropbear mhttpd lighttpd webconf pppscrpt libsens sensors\
     libgmp libuuid libpcre wget libz libnettle snmpmibs *libunistring*\
     libm libsnmp libnl3 netsnmpd tftpd backup nano patch"

The modules I added to leaf.cfg are bolded

firewall# ps w|grep backup
  9139 root      1400 S    {backup} /bin/sh /etc/cron.weekly/backup
  9140 root      1404 S    {with_storage} /bin/sh /usr/sbin/with_storage 
/var/lib/lrpkg/mnt /sbin/backup.sh
  9144 root      1432 S    {backup.sh} /bin/sh /sbin/backup.sh
10709 root      1412 S    grep backup

firewall# cat /etc/backup.conf
MIRROR="http://a.b.c.d/cgi-bin"
LOGGING=1
LRPKG="/var/lib/lrpkg"
MNT="$LRPKG/mnt"

firewall# cat backup.sh
#!/bin/sh

. /etc/backup.conf

if [ -z "$STORAGE_MEDIA" ]; then
     exit 1;
fi

files=`ls $STORAGE_MEDIA`
fl=""
for i in $files; do
     fl=$fl+$i
done;
in.tftpd -l -s $STORAGE_MEDIA
wget --post-data="$fl" $MIRROR/backup.cgi -O /tmp/bk.res
if [ "`cat /tmp/bk.res`" -ne 0 ]; then
     echo `date`": Backup failed" >>/var/log/backup.log
else
     echo `date`": Backup successful" >>/var/log/backup.log
fi
kill `ps |grep "$STORAGE_MEDIA"|awk '{print $1}'`
rm /tmp/bk.res


Any help or I can help troubleshooting, please advice.

Jim

Re: [leaf-user] USB image file

[Erich T. <eri...@th...>]

Hi jeanrocco

Am 05.08.2025 um 21:44 schrieb jeanrocco jr:
> Hello again,
> 
> Ok I just tried "Upgrade software" in the webconf page. It offered me to
> upgrade to 7.4.0. It had some errors, I *did a lrcfg s), and rebooted.
> Results: 7.4.0 is there but *the modules are not loading, so no eth(n)
> etc...

OK it's been a long time I have not looked into that stuff.

If you had errors with upgrade that probably means that some 
configuration files have changed enough so that diff/patch cannot handle 
it anymore. Check your /tmp directory for such files, they will have 
.old .new and .current suffixes.

Before rebooting fix those problems and save the configuration.

Check the existence of the libraries using the mount_modules script, it 
will tell you if there is a problem with the module library.

cheers

ET

-- 
„Wer von seinem Tag nicht zwei Drittel für sich hat, ist ein Sklave.“
―Friedrich Nietzsche

Re: [leaf-user] USB image file

[jeanrocco jr <bla...@gm...>]

Hello again,

Ok I just tried "Upgrade software" in the webconf page. It offered me to
upgrade to 7.4.0. It had some errors, I *did a lrcfg s), and rebooted.
Results: 7.4.0 is there but *the modules are not loading, so no eth(n)
etc...

So it's back to the standard method to generate an updated system USB. But
the image file can still be used as a perfectly working firewall, it'll
teach and familiarize you with LEAF.

Bye
jeanrocco

On Mon, Aug 4, 2025 at 6:24 PM marko via leaf-user <
lea...@li...> wrote:

> For usb on a standard x86 system with syslinux as the bootloader use:
>
> Bering-uClibc_7.5.0_x86_64_syslinux_vga.tar.gz[1]
>
> you need a FAT32 formatted bootable usb with syslinux installed.
>
> The section in the user guide "preparing the flash media"
> shows you how to format, install syslinux and the mbr
>
>
> good luck!
>
> Marko
>
>
> On Tuesday, 5 August 2025 6:58:39 AM AEST Sławek Adamski wrote:
> > Sorry, I don't know how to continue this thread 😇.
> >
> > Dear Marko big thanks for your participation. But...
> >
> > I'm reading Bering-uClibc 7.x - User Guide
> > <https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide>.
> > There, in Installing the Disk Image
> > <
> https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide_-_Insta
> > lling_the_Disk_Image> is:
>
> > The bootable images for USB:
> >
> >   * *Bering-uClibc_x86_ser.img*
> >
> > <
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/7.0.1/Bering-uCl
> > ibc_x86_ser.img/download>
>  * *Bering-uClibc_x86_vga.img*
> >
> > <
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/7.0.1/Bering-uCl
> > ibc_x86_vga.img/download>
>
> > and those files are absent, for example Bering-uClibc_x86_vga.img :
> >
> >
> > Yes, I found files with these names in 7.0.0, but I don't think they
> > should be used. They're over 4 years old.
> >
> > W dniu 03.08.2025 o 14:18, lea...@li...
> pisze:
> >
> > > Message: 1
> > > Date: Sun, 3 Aug 2025 01:24:59 +0200
> > > From: S?awek Adamski<sa...@wa...>
> > > To:lea...@li...
> > > Subject: [leaf-user] USB image file
> > > Message-ID:<287...@wa...>
> > > Content-Type: text/plain; charset=UTF-8; format=flowed
> > >
> > >
> > >
> > > Nine years ago, I made myself a Leaf CD. It still works. It's high time
> > > I upgraded to a newer version. I'd like to create a bootable USB drive.
> > > But I can't find the img files, namely Bering-uClibc_x86_ser.img and
> > > Bering-uClibc_x86_vga.img. It's strange, because the manual says you
> > > should start with that image.
> > >
> > >
> > >
> > >
> > >
> > > ------------------------------
> > >
> > >
> > >
> > > Message: 2
> > > Date: Sun, 03 Aug 2025 13:27:56 +1000
> > > From: marko<le...@me...>
> > > To:lea...@li...
> > > Subject: Re: [leaf-user] USB image file
> > > Message-ID: <12716093.O9o76ZdvQC@chambourcin>
> > > Content-Type: text/plain; charset="UTF-8"
> > >
> > >
> > >
> > > main site:https://leaf.zetam.org/bering-uclibc/[1]
> > >
> > >
> > >
> > > downloads:
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/[2]
> > >
> > >
> > >
> > >
> > > On Sunday, 3 August 2025 9:24:59 AM AEST S?awek Adamski via leaf-user
> > > wrote:
> >
> > >> Nine years ago, I made myself a Leaf CD. It still works. It's high
> time
> > >> I upgraded to a newer version. I'd like to create a bootable USB
> drive.
> > >> But I can't find the img files, namely Bering-uClibc_x86_ser.img and
> > >> Bering-uClibc_x86_vga.img. It's strange, because the manual says you
> > >> should start with that image.
> > >>
> > >>
> > >>
> > >>
> > >>
> ------------------------------------------------------------------------
> > >> leaf-user mailing list:lea...@li...
> > >> https://lists.sourceforge.net/lists/listinfo/leaf-user
> > >> Support Request --http://leaf-project.org/
> > >
> > >
> > >
> > >
> > > --------
> > > [1]https://leaf.zetam.org/bering-uclibc/
> > > [2]https://sourceforge.net/projects/leaf/files/Bering-uClibc/
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

Re: [leaf-user] USB image file

[jeanrocco jr <bla...@gm...>]

Hello Slawek, Marko and All,

First to Slawek my apologies for having slashed your name in my previous
post ...
I checked that the Bering-uClibc_x86_64_vga.img system can be safely used
as a firewall.

If you ever make another USB stick with the "i) install to disk..." this
new system will have the "/etc/shorewall/policies" line "fw   net
ACCEPT"  uncommented, to allow local access. *When connected to the Net as
a firewall, comment out that line.* You should also comment out the lines:
" 'HTTP(ACCEPT)  net   fw'  and 'HTTPS(ACCEPT)  net   fw'' in
/etc/shorewall/rules. Finally re-enable eth1 if you commented it out in
/etc/network/interfaces (four lines).

I will check if the upgrade command works fine, I'll let you know

Marko, I didn't try burning the iso to a USB stick yet, when I get the time
...

au revoir
Jeanrocco




On Mon, Aug 4, 2025 at 6:24 PM marko via leaf-user <
lea...@li...> wrote:

> For usb on a standard x86 system with syslinux as the bootloader use:
>
> Bering-uClibc_7.5.0_x86_64_syslinux_vga.tar.gz[1]
>
> you need a FAT32 formatted bootable usb with syslinux installed.
>
> The section in the user guide "preparing the flash media"
> shows you how to format, install syslinux and the mbr
>
>
> good luck!
>
> Marko
>
>
> On Tuesday, 5 August 2025 6:58:39 AM AEST Sławek Adamski wrote:
> > Sorry, I don't know how to continue this thread 😇.
> >
> > Dear Marko big thanks for your participation. But...
> >
> > I'm reading Bering-uClibc 7.x - User Guide
> > <https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide>.
> > There, in Installing the Disk Image
> > <
> https://bering-uclibc.zetam.org/wiki/Bering-uClibc_7.x_-_User_Guide_-_Insta
> > lling_the_Disk_Image> is:
>
> > The bootable images for USB:
> >
> >   * *Bering-uClibc_x86_ser.img*
> >
> > <
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/7.0.1/Bering-uCl
> > ibc_x86_ser.img/download>
>  * *Bering-uClibc_x86_vga.img*
> >
> > <
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/7.0.1/Bering-uCl
> > ibc_x86_vga.img/download>
>
> > and those files are absent, for example Bering-uClibc_x86_vga.img :
> >
> >
> > Yes, I found files with these names in 7.0.0, but I don't think they
> > should be used. They're over 4 years old.
> >
> > W dniu 03.08.2025 o 14:18, lea...@li...
> pisze:
> >
> > > Message: 1
> > > Date: Sun, 3 Aug 2025 01:24:59 +0200
> > > From: S?awek Adamski<sa...@wa...>
> > > To:lea...@li...
> > > Subject: [leaf-user] USB image file
> > > Message-ID:<287...@wa...>
> > > Content-Type: text/plain; charset=UTF-8; format=flowed
> > >
> > >
> > >
> > > Nine years ago, I made myself a Leaf CD. It still works. It's high time
> > > I upgraded to a newer version. I'd like to create a bootable USB drive.
> > > But I can't find the img files, namely Bering-uClibc_x86_ser.img and
> > > Bering-uClibc_x86_vga.img. It's strange, because the manual says you
> > > should start with that image.
> > >
> > >
> > >
> > >
> > >
> > > ------------------------------
> > >
> > >
> > >
> > > Message: 2
> > > Date: Sun, 03 Aug 2025 13:27:56 +1000
> > > From: marko<le...@me...>
> > > To:lea...@li...
> > > Subject: Re: [leaf-user] USB image file
> > > Message-ID: <12716093.O9o76ZdvQC@chambourcin>
> > > Content-Type: text/plain; charset="UTF-8"
> > >
> > >
> > >
> > > main site:https://leaf.zetam.org/bering-uclibc/[1]
> > >
> > >
> > >
> > > downloads:
> https://sourceforge.net/projects/leaf/files/Bering-uClibc/[2]
> > >
> > >
> > >
> > >
> > > On Sunday, 3 August 2025 9:24:59 AM AEST S?awek Adamski via leaf-user
> > > wrote:
> >
> > >> Nine years ago, I made myself a Leaf CD. It still works. It's high
> time
> > >> I upgraded to a newer version. I'd like to create a bootable USB
> drive.
> > >> But I can't find the img files, namely Bering-uClibc_x86_ser.img and
> > >> Bering-uClibc_x86_vga.img. It's strange, because the manual says you
> > >> should start with that image.
> > >>
> > >>
> > >>
> > >>
> > >>
> ------------------------------------------------------------------------
> > >> leaf-user mailing list:lea...@li...
> > >> https://lists.sourceforge.net/lists/listinfo/leaf-user
> > >> Support Request --http://leaf-project.org/
> > >
> > >
> > >
> > >
> > > --------
> > > [1]https://leaf.zetam.org/bering-uclibc/
> > > [2]https://sourceforge.net/projects/leaf/files/Bering-uClibc/
> ------------------------------------------------------------------------
> leaf-user mailing list: lea...@li...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>