ipcop-devel Mailing List for IPCop Firewall

John Van Ostrand wrote:
> Is there any interest or work done yet on supporting software RAID in
> the IPCop installation?

Just out of curiosity: why do you need RAID ?  Redundancy as protection 
against diskfailure ?


cheers Olaf

-- 

A weizen a day helps keep the doctor away.

----- Original Message ----- 
From: "John Van Ostrand" <jo...@ne...>
To: "IPCOP devel" <ipc...@li...>
Sent: Tuesday, January 30, 2007 9:54 PM
Subject: Re: [IPCop-devel] Software RAID

> > Then an interface need to be added in the installer.
>
> I think I can do this but I need to find more free space in boot.img for
> mdadm and the raid1.o kernel module.
>
> I notice the kernel has NAT, advanced firewall, etc turned on for the
> installer kernel. Is there any reason not to turn these off to save
> space?
>
>Are there any other options that can go?
>
For the installer kernel, only vmlinuz.installer is compiled, not the
modules
Installer reuse the same modules as for the running UP version but not all
modules are include on boot img floppy.

lfs/initrd define the modules include in boot img
lfs/drivers define the modules include on drivers img for green network
interface on netinstall
lfs/scsi define the modules used for scsi and raid. This is needed to detect
scsi cdrom source and scsi and raid harddisk. I think that's where you could
add supplemental drivers for software raid.

There is still some possible gains on boot img.
For example kernel/drivers/pnp/* may be include in drivers img (for isa
netcards) and scsi.img (for isa scsi cards). That could save us 20k for boot

When using cdrom or pxe boot, there is no space problem, everything from
boot,drivers and scsi is available.

Gilles

On Tue, 2007-01-30 at 08:18 +0100, Gilles Espinasse wrote:

> There is some constraint on remaining free space related to floppy boot
> With a few changes I am testing before commiting (I am shifting pcmcia
> controllers modules to boot.img), it should remain
> - from boot.img 40 x1K-blocks free
> - from scsi img (scsi and raid drivers are include there)  1474560 - 1378=
369
> =3D 96191 bytes free
>=20
> Then an interface need to be added in the installer.

I think I can do this but I need to find more free space in boot.img for
mdadm and the raid1.o kernel module.

I notice the kernel has NAT, advanced firewall, etc turned on for the
installer kernel. Is there any reason not to turn these off to save
space?

Are there any other options that can go?
--=20
John Van Ostrand                       Net Direct Inc.
CTO, co-CEO                   564 Weber St. N. Unit 12
                                  Waterloo, ON N2L 5C6
jo...@ne...                     ph: 518-883-1172 x5102
Linux Solutions / IBM Hardware        fx: 519-883-8533

Bugs item #1647798, was opened at 2007-01-30 11:09
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1647798&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Security (Patches etc)
Group: 1.4.13
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Richard Reeve (richardreeve)
Assigned to: Nobody/Anonymous (nobody)
Summary: Snort download out of space

Initial Comment:
When a new ruleset is downloaded for intrusion detection using snort, oinkmaster.pl gunzips the archive and then does "tar xf" (when external binaries are being used). This results in a fail as /tmp fills for my installation (which is fairly standard). As a result new rulesets cannot be downloaded.

A simple fix which does not untar the documentation but only the rules directory is included (as already happens when external binaries are not used).

Cheers,

Richard Reeve.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1647798&group_id=40604

----- Original Message ----- 
From: "John Van Ostrand" <jo...@ne...>
To: <ipc...@li...>
Sent: Tuesday, January 30, 2007 3:00 AM
Subject: [IPCop-devel] Software RAID


> Is there any interest or work done yet on supporting software RAID in
> the IPCop installation?
>
There is some constraint on remaining free space related to floppy boot
With a few changes I am testing before commiting (I am shifting pcmcia
controllers modules to boot.img), it should remain
- from boot.img 40 x1K-blocks free
- from scsi img (scsi and raid drivers are include there)  1474560 - 1378369
= 96191 bytes free

Then an interface need to be added in the installer.

Gilles

Is there any interest or work done yet on supporting software RAID in
the IPCop installation?

-- 
John Van Ostrand                     Net Direct Inc.
CTO, co-CEO                 564 Weber St. N. Unit 12
                                Waterloo, ON N2L 5C6
jo...@ne...                   ph: 518-883-1172 x5102
Linux Solutions / IBM Hardware      fx: 519-883-8533

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Borland wrote on 01/29/2007 12:30 PM:

| I already know of at least one organisation that has a "just drop"
| policy for that very reason.

Generally a just drop policy is also good to avoid proving the legitimacy of
the recipient email address.

Also - the rejection email contributes to general net.clog.traffic :)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iQEVAwUBRb4ypdN2DJl/zagkAQJh2Qf8Dn/9Jb8RvG3Tssejnr1YPdn9Nafy9l9a
S0of1uqBQV41kplKAlKTKJxknL/4Se3JfIp0uXRmw9n0OBfCSu19nDRAE+Hq12GX
esLp6a/v+Csryka/dj1SDkM2yaawVxWvUW/rkaY5Koalc/uFQVvS5YQiErU+NVdJ
C33j/ZX5BxOZ50R26US24PwyvN2j/aYSWvbCEuRYRKntTzdduIcPrX5uNYVhmjx0
mqazjwljhP73L+6q8gydQYlioegc4ZV/IQowi/gXJyUkutQGpdf0NQvLYU6+uj1j
T9bg8z7FGk2ujFlarToU9P7G6/5ZiZZzensuRUStD9Ak4gILFrB2Fw==
=njcw
-----END PGP SIGNATURE-----

Phil Barnett wrote:
> Mostly, though, those return messages are spam backscatter
>

This might be a very good reason for just "dropping" messages from 
non-subscribers, rather than sending notification of rejection.

If Sourceforge is seen as the "source" of too much spam it may find 
itself getting blacklisted.

I already know of at least one organisation that has a "just drop" 
policy for that very reason.

PS: Congratulations to the moderators for the very high standards of 
cleanliness they have been able to maintain so far.

Regards,  Andrew Borland (UK)

On Monday 29 January 2007 04:58, st...@wo... wrote:

> Do it, I usually approve them, but I always think, why don't they
> subscribe!
> Sometimes I bin them, if they are HTML email.

I have all of our LUG mailing lists set to notify if not a member and discard 
it.

If it's a real message, they learn how to subscribe right then.

Mostly, though, those return messages are spam backscatter.

-- 
Men occasionally stumble over the truth, but most of them pick themselves up 
and hurry off as if nothing had happened.
Winston Churchill

On 29/01/07 10:49:03, Gilles Espinasse wrote:
> Selon st...@wo...:
> 
> >
> > No, not the only one. There are 4 now.
> 
> I thank you with all the other admin.
> 
> > I just reject them, there are not that many.
> Yes but that's boring that spammer gives us work.
> 
> > I have had a look for member only setting and it does not jump out
> at
> > me!
> >
> We could discard automaticly post from non members.
> But they will reappear as notification messages to admin unless we  
> set
> "Should messages from non-members, which are automatically discarded,
> be
> forwarded to the list moderator?" to no.
>

Do it, I usually approve them, but I always think, why don't they  
subscribe!
Sometimes I bin them, if they are HTML email.

-- 
'ooroo

stinga...(:)-)
One of the IPCop list admins
---------------------------------------------------
Email: st...@wo...      o
You need only two tools.        o /////
A hammer and duct tape. If it    /@   `\  /) ~
doesn't move and it should,     >  (O)  X<  ~  Fish!!
use the hammer. If it moves and  `\___/'  \) ~
shouldn't, use the tape.           \\\
---------------------------------------------------

Selon st...@wo...:

>
> No, not the only one. There are 4 now.

I thank you with all the other admin.

> I just reject them, there are not that many.
Yes but that's boring that spammer gives us work.

> I have had a look for member only setting and it does not jump out at
> me!
>
We could discard automaticly post from non members.
But they will reappear as notification messages to admin unless we set
"Should messages from non-members, which are automatically discarded, be
forwarded to the list moderator?" to no.


Gilles

On 29/01/07 06:46:56, Gilles Espinasse wrote:
> As a one of the admin of since a few week of the mailing lists
> (hopefully, I
> am not alone), I find tedious to discard all the spam. Should/could  
> we
> not
> configure the mailing list to automaticly discard all posts by
> non-members?
> 
> This would require that we could indicate that mailing list are
> reserved to
> members.
> It may have the bad effect that spammer could register to  
> sourceforge.
> Then
> it will be more difficult to administer, we would have to ban at each
> attempt. But spam rarely reach the lists actually and spammer do not
> register actually.
> 
> Legitimate messages are very few, probably less than 5 a week (from
> people
> that use a wrong address not registred) when spam is a rate of more
> than 10
> a day.
> 
> Gilles

No, not the only one. There are 4 now.
I just reject them, there are not that many.

I have had a look for member only setting and it does not jump out at  
me!

-- 
'ooroo

stinga...(:)-)
One of the IPCop list admins
---------------------------------------------------
Email: st...@wo...      o
You need only two tools.        o /////
A hammer and duct tape. If it    /@   `\  /) ~
doesn't move and it should,     >  (O)  X<  ~  Fish!!
use the hammer. If it moves and  `\___/'  \) ~
shouldn't, use the tape.           \\\
---------------------------------------------------

Gilles Espinasse wrote:
> As a one of the admin of since a few week of the mailing lists (hopefully, I
> am not alone), I find tedious to discard all the spam. Should/could we not
> configure the mailing list to automaticly discard all posts by non-members?

If we can do that, we should.


> This would require that we could indicate that mailing list are reserved to
> members.
> It may have the bad effect that spammer could register to sourceforge. Then
> it will be more difficult to administer, we would have to ban at each
> attempt. But spam rarely reach the lists actually and spammer do not
> register actually.

Agreed. And should spammers actually register, we can always think of 
additionial measures (for example manual authentication).


> Legitimate messages are very few, probably less than 5 a week (from people
> that use a wrong address not registred) when spam is a rate of more than 10
> a day.

No problem to resend using the correct email address once you realise 
that your post is rejected.


cheers Olaf


PS: you could very well be the only 'admin'. If that is the case that 
situation must be changed.

-- 

A weizen a day helps keep the doctor away.

On Monday 29 January 2007, Gilles Espinasse wrote:
> As a one of the admin of since a few week of the mailing lists (hopefully,
> I am not alone), I find tedious to discard all the spam. Should/could we
> not configure the mailing list to automaticly discard all posts by
> non-members?
>
> This would require that we could indicate that mailing list are reserved to
> members.
> It may have the bad effect that spammer could register to sourceforge. Then
> it will be more difficult to administer, we would have to ban at each
> attempt. But spam rarely reach the lists actually and spammer do not
> register actually.
>
> Legitimate messages are very few, probably less than 5 a week (from people
> that use a wrong address not registred) when spam is a rate of more than 10
> a day.
>
> Gilles

Gilles,

I'm with you on this -- let only subscribed users post (I thought that's how 
it was, but obviously not).

I had not seen a spam on -devel or -cvs until two or three weeks ago when we 
had a few spams get through, and not since you changed -cvs to subscriber 
only.

IvanK.

As a one of the admin of since a few week of the mailing lists (hopefully, I
am not alone), I find tedious to discard all the spam. Should/could we not
configure the mailing list to automaticly discard all posts by non-members?

This would require that we could indicate that mailing list are reserved to
members.
It may have the bad effect that spammer could register to sourceforge. Then
it will be more difficult to administer, we would have to ban at each
attempt. But spam rarely reach the lists actually and spammer do not
register actually.

Legitimate messages are very few, probably less than 5 a week (from people
that use a wrong address not registred) when spam is a rate of more than 10
a day.

Gilles

----- Original Message ----- 
From: "Franck Bourdonnec" <fbo...@ch...>
To: <ipc...@li...>
Sent: Tuesday, January 16, 2007 11:37 PM
Subject: [IPCop-devel] snort 2.3 to 2.6


> Hello *,
>
> I have problemwith updating snort, particulary the ruleset.
>
> Mo more rules are included in the tarball.
> Need to download separatly the community
> rules.
>
Sourcefire state that
"Unregistered users receive a static ruleset at the time of each major Snort
Release"

On v2.4 a separate package is available for this purpose.
You could look at what I have done on v1.5 tree some times ago.

On v2.6, this separate rules set look not to be available.
I already ask them long time ago to create a 2.6 tree as using
snapshot_CURRENT look a dangerous feature to me. This could broke running
installation if current ruleset become incompatible with the installed
version.

> Pb1) don't know how often it changes, but every change
> implies MD5 update in lfs script.
>
We should not do that way
I think community rules are very different.
Due to our interface lack to updates rules names, this will be difficult to
support.

> Pb2) the name of each rule file is different in the
> snort.conf (VRT naming&list)
>
>
> What is the solution???????
>
> 1) download a vrt package in cvs
> 2) extend ids.cgi to deal with the two sets of rules
> and build the correct snort.conf ?
> 3) build a fake vrt package from the community rules ?
> 4)don't update snort (vulnerability (dos) discored some days ago)
>
It look that gentoo use v2.4 rules set even for v2.6
http://sources.gentoo.org/viewcvs.py/gentoo-x86/net-analyzer/snort/snort-2.6.1.2.ebuild?rev=1.3&view=markup

I was in the mood to ask on snort.org for the rules compatibility questions
between 2.4 and 2.6 when I was hit by the access problem on snort.org forum
related to squid.
I have now asked my two questions:
- Unregistered users receive a static ruleset at the time of each major
Snort Release but no package  have been released for 2.6 . Should the 2.4
package for unregistred user be used for 2.6?

- snapshot_CURRENT is a wrong thing for rules as it, for sure will broke an
running snort a day after a rules update when a new release will appear with
incompatible rules..
I hope to have more consideration to this point that my first attempt in
March.

It look snort-2.6 could be faster than previous versions but at the cost of
memory consumption.
We could need to allow a basic selection of snort settings depending on
possible memory consumption (low/medium/hight) and create a different snort
configuration accordingly.

Gilles

At 11:42 AM +0100 1/27/07, Gilles Espinasse wrote:
>----- Original Message -----
>From: "Harry Goldschmitt" <ha...@hg...>
>To: <ipc...@li...>; <ipc...@li...>
>Sent: Saturday, January 27, 2007 9:50 AM
>Subject: [IPCop-devel] Bug and Work Around Backing Up/Restoring VPNs
>
>
>>  I just switched to a new IPCop box with a bigger drive using 1.4.13.
>>  After manually copying over /var/ipcop/backup/backup.key, so I could
>>  import my latest backup.  (This should be fixed so it can be imported
>>  via the web interface.)  I can see from the Backup web page, the
>>  import worked, but...
>>
>I did not want to allow to import the key from the web interface for
>security reason.
>It may be doable using the backup password.
>What for sure need to be improved is in the install stage to allow the
>selection of a crypted key file.
>I welcome contribution concerning this point.
>
>>  1) Minor problem - the ssh keys were not restored.  I've been
>>  bouncing back and forth between my old and new boxes, having to edit
>>  .ssh/known_hosts each time.
>Is not IPCop only ssh server?
>known_hosts is for the client only.
>
>>  2) Most important - my VPN configuration apparently hasn't been
>>  backed up or restored!  I think I've solved the problem by:
>>
>>  ssh -p 222 root@ipcop (old box)
>>  cd /tmp
>>  tar cvzf vpns.tar.gz /var/ipcop/ca /var/ipcop/cert /var/ipcop/crl
>>  /var/ipcop/private /var/ipcop/vpn
>>
>I don't understand how this could happen unless you exclude those files in
>user.exclude
>By default, /var/ipcop is include in backup and
>/var/ipcop/{ca,crl,private,vpn} are not exclude in system.exclude.
>
>You could check by creating a new backup by adding the --verbose option on
>command line.
>First name and content of include and exclude files is displayed.
>Then resulting include file names list is displayed at the end.
>
>Backup will be written on the selected device or by default on harddisk.
>ipcopbkcfg --write 'mycomment' --verbose
>
>Gilles

OK, now I'm really confused.  I did as you suggested on my old system 
and the backup did backup everything.  Something else is going on, 
though since when I originally restored on my new system none of the 
VPN files made it.  For that matter I see the SSH keys are getting 
backed up, too.  They didn't make it either.

I originally thought I'd somehow messed up, but my hosts file made it 
on the initial restore.  If there's a way to see the restore, I'll 
rerun everything again.

Harry

----- Original Message ----- 
From: "Franck Bourdonnec" <fbo...@ch...>
To: <ipc...@li...>
Sent: Saturday, January 27, 2007 12:03 PM
Subject: Re: [IPCop-devel] Bug and Work Around Backing Up/Restoring VPNs


...
> > > 1) Minor problem - the ssh keys were not restored.  I've been
> > > bouncing back and forth between my old and new boxes, having to edit
> > > .ssh/known_hosts each time.
> >
> > Is not IPCop only ssh server?
> > known_hosts is for the client only.
> >
> Hello,
> I think what is needed (by me and HG) is the file pointed by the
> AuthorizedKeysFile.
> When PubKeyAuthentication is yes, it avoids many many
> password input, all kind of automation script (scp), etc.
ok

> Maybe move this file in /var/ipcop/remote ?
access should on any cases stay restricted to root
It could be easier and clearer to add /root/.ssh directory in include.system

> And also rename 'remote' to 'sshs' ??
That's typically something I am not inclined to do on v1.4 because:
- it is the cause from extra work
- it required to be made on upgrade script to allow the name change be
applied on each restore and install
Then you would ask to rename proxy directory to squid.


Gilles

Le samedi 27 janvier 2007 11:42, Gilles Espinasse a =E9crit=A0:
> ----- Original Message -----
> From: "Harry Goldschmitt" <ha...@hg...>
> To: <ipc...@li...>; <ipc...@li...=
rge.net>
> Sent: Saturday, January 27, 2007 9:50 AM
> Subject: [IPCop-devel] Bug and Work Around Backing Up/Restoring VPN=
s

> > 1) Minor problem - the ssh keys were not restored.  I've been
> > bouncing back and forth between my old and new boxes, having to e=
dit
> > .ssh/known_hosts each time.
>
> Is not IPCop only ssh server?
> known_hosts is for the client only.
>
Hello,
I think what is needed (by me and HG) is the file pointed by the
AuthorizedKeysFile.
When PubKeyAuthentication is yes, it avoids many many
password input, all kind of automation script (scp), etc.

Maybe move this file in /var/ipcop/remote ?
And also rename 'remote' to 'sshs' ??

Franck

----- Original Message ----- 
From: "Harry Goldschmitt" <ha...@hg...>
To: <ipc...@li...>; <ipc...@li...>
Sent: Saturday, January 27, 2007 9:50 AM
Subject: [IPCop-devel] Bug and Work Around Backing Up/Restoring VPNs


> I just switched to a new IPCop box with a bigger drive using 1.4.13.
> After manually copying over /var/ipcop/backup/backup.key, so I could
> import my latest backup.  (This should be fixed so it can be imported
> via the web interface.)  I can see from the Backup web page, the
> import worked, but...
>
I did not want to allow to import the key from the web interface for
security reason.
It may be doable using the backup password.
What for sure need to be improved is in the install stage to allow the
selection of a crypted key file.
I welcome contribution concerning this point.

> 1) Minor problem - the ssh keys were not restored.  I've been
> bouncing back and forth between my old and new boxes, having to edit
> .ssh/known_hosts each time.
Is not IPCop only ssh server?
known_hosts is for the client only.

> 2) Most important - my VPN configuration apparently hasn't been
> backed up or restored!  I think I've solved the problem by:
>
> ssh -p 222 root@ipcop (old box)
> cd /tmp
> tar cvzf vpns.tar.gz /var/ipcop/ca /var/ipcop/cert /var/ipcop/crl
> /var/ipcop/private /var/ipcop/vpn
>
I don't understand how this could happen unless you exclude those files in
user.exclude
By default, /var/ipcop is include in backup and
/var/ipcop/{ca,crl,private,vpn} are not exclude in system.exclude.

You could check by creating a new backup by adding the --verbose option on
command line.
First name and content of include and exclude files is displayed.
Then resulting include file names list is displayed at the end.

Backup will be written on the selected device or by default on harddisk.
ipcopbkcfg --write 'mycomment' --verbose

Gilles

I just switched to a new IPCop box with a bigger drive using 1.4.13. 
After manually copying over /var/ipcop/backup/backup.key, so I could 
import my latest backup.  (This should be fixed so it can be imported 
via the web interface.)  I can see from the Backup web page, the 
import worked, but...

1) Minor problem - the ssh keys were not restored.  I've been 
bouncing back and forth between my old and new boxes, having to edit 
.ssh/known_hosts each time.
2) Most important - my VPN configuration apparently hasn't been 
backed up or restored!  I think I've solved the problem by:

ssh -p 222 root@ipcop (old box)
cd /tmp
tar cvzf vpns.tar.gz /var/ipcop/ca /var/ipcop/cert /var/ipcop/crl 
/var/ipcop/private /var/ipcop/vpn

Then going to a local Linux machine to get the tarball and issuing:

scp -P 222 root@ipcop:/tmp/vpns.tar.gz .

Then editing my .ssh/known_hosts file to delete the old boxes key 
(see 1 above) and issuing:

scp -P 222 vpns.tar.gz root@ipcop:/tmp (new box)
ssh -p 222 root@ipcop
cd /tmp
tar -C / vpns.tar.gz

The appropriate VPN directories should be backed up during a backup 
and restored!

Harry

Hi all,
  I have tried to build IPcop with 1.4.13 source + e100 v3.4.14 today , and
seems like the problem of "device busy" is no longer there.

  The built-in NIC in Dell 5150 is now can be detected properly with my
customized built.

I hope the developers can consider to add in this driver as an update in the
near future .

p/s : My older built 1.4.11 + e100 v3.4.14 could not make use of the
"Update" feature because the update will replace my customized kernel (which
I built in e100 v3.4.14)

CG

On 1/9/07, CG <lea...@gm...> wrote:
>
> I have done a few testing and I think it seems like not the problem of
> e100 driver.
>
> The test that I do are based on two different version of IPcop source
> a) CVS IPCOP_v1_4_0
> b) IPCops 1.4.11 source code from the ipcop website
> = =
> Tests
> 1) CVS IPCOP_v1_4_0  + e100 v3.15.17
>    Result : need to do modprobe 2 times , then kernel seems unstable and
> panic if try to restart
>                Auto detect will go to keyboard layout selection
> 2) CVS IPCOP_v1_4_0  + e100 v3.4.14 (which is the earlier version that
> support Dell Dimension 5150)
>    Result : need to do modprobe 2 times , then kernel seems unstable and
> panic if try to restart
>                Auto detect will go to keyboard layout selection
> 3) IPCop 1.4.11  + e100 v3.4.14 (which is the earlier version that support
> Dell Dimension 5150)
>     Result : Installer work fine , manage to auto detect NIC in Dell
> Dimension 5150
>
> = =
> With all the testing,   I have managed to get what I want.  I think it is
> good to share my testing result.
>
> It seems like even I use e100 v3.4.14 , and built using CVS IPCOP_v1_4_0,
> the installter is still unstable. Maybe there are bugs with other new NIC
> driver ?
>
>
> p/s : Thanks for the guide on building customized IPCops installer :)
>
>
>
>
>
>
>
> On 1/6/07, Gilles Espinasse < g....@fr...> wrote:
> >
> >
> > ----- Original Message -----
> > From: CG
> > To: IPCOP devel
> > Sent: Thursday, January 04, 2007 5:45 PM
> > Subject: Re: [IPCop-devel] Build IPcops with an updated driver
> >
> >
> > > ok, thanks for the information. I'll rebuild an try again
> > >
> > It fail for me too.
> > I have disabled e100 module from kernel and recompiled all
> > But even then new e100 behavior is not consistent
> >
> > On TTY3 inside the installer
> > #modprobe e100
> > Using /lib/modules/2.4.34/kernel/drover/net/e100/e100.o
> > insmod: init_module: e100: Device or resource busy
> > #modprobe e100
> > Using /lib/modules/2.4.34/kernel/drover/net/e100/e100.o
> > #
> > First attempt to load fail, second attempt work
> > This could be repeated, by unloading the module (modprobe -r e100) and
> > attempting again
> > cat /proc/modules have to be used on the installer to look at loaded
> > modules
> > I have open a bug report on sourceforge e1000 project.
> >
> > This change will disable e100 on from kernel but I will not commit that
> > until e100-3.5.17 really work.
> >
> >
> > Index: config/kernel/kernel.config.i386
> > ===================================================================
> > RCS file: /cvsroot/ipcop/ipcop/config/kernel/Attic/kernel.config.i386,v
> > retrieving revision 1.12.2.25
> > diff -u -r1.12.2.25 kernel.config.i386
> > --- config/kernel/kernel.config.i386 20 Dec 2006 18:14:34 -0000
> > 1.12.2.25
> > +++ config/kernel/kernel.config.i386 4 Jan 2007 21:26:39 -0000
> > @@ -767,7 +767,7 @@
> > CONFIG_DM9102=m
> > # CONFIG_EEPRO100 is not set
> > # CONFIG_EEPRO100_PIO is not set
> > -CONFIG_E100=m
> > +# CONFIG_E100 is not set
> > CONFIG_LNE390=m
> > CONFIG_FEALNX=m
> > CONFIG_NATSEMI=m
> > Index: config/kernel/kernel.config.i386.installer
> > ===================================================================
> > RCS file:
> > /cvsroot/ipcop/ipcop/config/kernel/Attic/kernel.config.i386.installer,v
> > retrieving revision 1.1.2.15
> > diff -u -r1.1.2.15 kernel.config.i386.installer
> > --- config/kernel/kernel.config.i386.installer 20 Dec 2006 18:14:34
> > -0000
> > 1.1.2.15
> > +++ config/kernel/kernel.config.i386.installer 4 Jan 2007 21:26:39 -0000
> >
> > @@ -749,7 +749,7 @@
> > CONFIG_DM9102=m
> > # CONFIG_EEPRO100 is not set
> > # CONFIG_EEPRO100_PIO is not set
> > -CONFIG_E100=m
> > +# CONFIG_E100 is not set
> > CONFIG_LNE390=m
> > CONFIG_FEALNX=m
> > CONFIG_NATSEMI=m
> > Index: config/kernel/kernel.config.i386.smp
> > ===================================================================
> > RCS file:
> > /cvsroot/ipcop/ipcop/config/kernel/Attic/kernel.config.i386.smp,v
> > retrieving revision 1.1.2.18
> > diff -u -r1.1.2.18 kernel.config.i386.smp
> > --- config/kernel/kernel.config.i386.smp 20 Dec 2006 18:14:34 -0000
> > 1.1.2.18
> > +++ config/kernel/kernel.config.i386.smp 4 Jan 2007 21:26:39 -0000
> > @@ -771,7 +771,7 @@
> > CONFIG_DM9102=m
> > # CONFIG_EEPRO100 is not set
> > # CONFIG_EEPRO100_PIO is not set
> > -CONFIG_E100=m
> > +# CONFIG_E100 is not set
> > CONFIG_LNE390=m
> > CONFIG_FEALNX=m
> > CONFIG_NATSEMI=m
> >
> > Gilles
> >
> >
>

Feature Requests item #1645517, was opened at 2007-01-26 13:29
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1645517&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Private: No
Submitted By: Matthew Eaton (divinehawk)
Assigned to: Nobody/Anonymous (nobody)
Summary: Provide entry for default pxe options

Initial Comment:
It would be nice to be able to specify a next-server & filename for an interface - such that you can plug a machine on the network and network boot without having add the machines MAC address.

Attached is a patch for 1.4.11 (sorry haven't upgraded to 1.4.13, yet).



----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1645517&group_id=40604

Bugs item #1644578, was opened at 2007-01-25 17:24
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1644578&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Security (Patches etc)
Group: 1.4.13
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Marco (schaerf)
Assigned to: Nobody/Anonymous (nobody)
Summary: No IDS for red alias

Initial Comment:
Hello,
I think that snort is blind for attacks against red alias IP(s). I miss the red address in /etc/snort/vars.

Regards

Marco

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428516&aid=1644578&group_id=40604

Feature Requests item #1643918, was opened at 2007-01-24 23:13
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1643918&group_id=40604

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: Next release
Status: Open
Priority: 5
Private: No
Submitted By: mcs-mik (mcs-mik)
Assigned to: Nobody/Anonymous (nobody)
Summary: Failure on FritzCard DSL SL for DSL6000

Initial Comment:
Hello,

please noticed that the AVM FritzCardDSL SL or other versions on FritzCard DSL only lower than 2500MBit/s are synchronised.
A new file is on the AVM Page with new Firmware for DSL 6000 but it is for the Kernel 2.6.
On WinXP it works fine with the new file with the new firmware for XP.
I hope GESP will find a new Idea to work it for DSL6000. To extrakt the fdlubase.frm from the new driver dosn't work.
It seems the firmware file is in work with another files.

In hope The AVM DSL Card will in future works fine with DSL6000 (on Kernel 2.4 or 2.6 on IPCOP1.5???)

Best regards
MCS-MIK 

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=428519&aid=1643918&group_id=40604