Menu
▾
▴
ipcop-devel — Development mailinglist for the IPCop project.
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
(259) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(361) |
Feb
(71) |
Mar
(270) |
Apr
(164) |
May
(55) |
Jun
(218) |
Jul
(203) |
Aug
(146) |
Sep
(105) |
Oct
(70) |
Nov
(156) |
Dec
(223) |
| 2003 |
Jan
(229) |
Feb
(126) |
Mar
(461) |
Apr
(288) |
May
(203) |
Jun
(64) |
Jul
(97) |
Aug
(228) |
Sep
(384) |
Oct
(208) |
Nov
(88) |
Dec
(291) |
| 2004 |
Jan
(425) |
Feb
(382) |
Mar
(457) |
Apr
(300) |
May
(323) |
Jun
(326) |
Jul
(487) |
Aug
(458) |
Sep
(636) |
Oct
(429) |
Nov
(174) |
Dec
(288) |
| 2005 |
Jan
(242) |
Feb
(148) |
Mar
(146) |
Apr
(148) |
May
(200) |
Jun
(134) |
Jul
(120) |
Aug
(183) |
Sep
(163) |
Oct
(253) |
Nov
(248) |
Dec
(63) |
| 2006 |
Jan
(96) |
Feb
(65) |
Mar
(88) |
Apr
(172) |
May
(122) |
Jun
(111) |
Jul
(83) |
Aug
(210) |
Sep
(102) |
Oct
(37) |
Nov
(28) |
Dec
(41) |
| 2007 |
Jan
(82) |
Feb
(84) |
Mar
(218) |
Apr
(61) |
May
(66) |
Jun
(35) |
Jul
(55) |
Aug
(64) |
Sep
(20) |
Oct
(92) |
Nov
(420) |
Dec
(399) |
| 2008 |
Jan
(149) |
Feb
(72) |
Mar
(209) |
Apr
(155) |
May
(77) |
Jun
(150) |
Jul
(142) |
Aug
(99) |
Sep
(78) |
Oct
(98) |
Nov
(82) |
Dec
(25) |
| 2009 |
Jan
(38) |
Feb
(86) |
Mar
(129) |
Apr
(64) |
May
(106) |
Jun
(121) |
Jul
(149) |
Aug
(110) |
Sep
(74) |
Oct
(98) |
Nov
(83) |
Dec
(46) |
| 2010 |
Jan
(53) |
Feb
(43) |
Mar
(86) |
Apr
(185) |
May
(44) |
Jun
(58) |
Jul
(41) |
Aug
(47) |
Sep
(52) |
Oct
(49) |
Nov
(47) |
Dec
(66) |
| 2011 |
Jan
(58) |
Feb
(33) |
Mar
(37) |
Apr
(31) |
May
(8) |
Jun
(8) |
Jul
(2) |
Aug
(28) |
Sep
(75) |
Oct
(46) |
Nov
(40) |
Dec
(7) |
| 2012 |
Jan
(61) |
Feb
(32) |
Mar
(20) |
Apr
(6) |
May
(11) |
Jun
(8) |
Jul
(1) |
Aug
(16) |
Sep
(21) |
Oct
(12) |
Nov
(12) |
Dec
(1) |
| 2013 |
Jan
(15) |
Feb
(8) |
Mar
(21) |
Apr
(25) |
May
(18) |
Jun
(20) |
Jul
(21) |
Aug
|
Sep
(1) |
Oct
(9) |
Nov
(10) |
Dec
(13) |
| 2014 |
Jan
(33) |
Feb
(41) |
Mar
(10) |
Apr
(44) |
May
(3) |
Jun
|
Jul
(6) |
Aug
(2) |
Sep
(1) |
Oct
(7) |
Nov
(10) |
Dec
(12) |
| 2015 |
Jan
(1) |
Feb
(17) |
Mar
(8) |
Apr
|
May
|
Jun
|
Jul
|
Aug
(2) |
Sep
|
Oct
|
Nov
|
Dec
(1) |
| 2016 |
Jan
(5) |
Feb
|
Mar
|
Apr
|
May
|
Jun
(2) |
Jul
|
Aug
|
Sep
|
Oct
(2) |
Nov
|
Dec
|
| 2017 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
|
May
|
Jun
(2) |
Jul
(5) |
Aug
|
Sep
(1) |
Oct
(2) |
Nov
|
Dec
|
| 2018 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(1) |
Oct
|
Nov
|
Dec
|
| S | M | T | W | T | F | S |
|---|---|---|---|---|---|---|
|
|
|
|
|
|
|
1
|
|
2
|
3
|
4
|
5
|
6
|
7
|
8
|
|
9
(1) |
10
(1) |
11
|
12
|
13
|
14
|
15
|
|
16
|
17
|
18
|
19
|
20
|
21
|
22
|
|
23
(4) |
24
(4) |
25
|
26
|
27
|
28
|
29
|
|
30
|
|
|
|
|
|
|
|
From: Michael R. <mi...@mi...> - 2014-11-24 17:56:51
|
Hi Achim, On Mon, 24 Nov 2014 18:35:44 +0100 Achim Weber <dot...@gm...> wrote: > > No, Source is Source (remote). > > You have to set: > "IPCop_External_Destination":<Port> to "Internal_Destination":<port> > > Packets are coming from <Remote>:<Random port> ---> > "IPCop_External_Destination":<Port> ---> "Internal_Destination":<port> > > "Source Port" in IPCop Firewall ui is the source (remote) port. As this is port > is random your rules do not match. > ahh, I see. I think when making the rule set I was confused by the 1.x way of doing things. Thank you so much:-) -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- /usr/games/fortune -es says: In Pocataligo, Georgia, it is a violation for a woman over 200 pounds and attired in shorts to pilot or ride in an airplane. |
|
From: Achim W. <dot...@gm...> - 2014-11-24 17:35:55
|
Hi Michael, > > remove all those Source Port settings from your firewall rules. As normally > > the source port is dynamic your firewall rules does not match anymore... > > > What do you mean by removing source ports? > If I want to port forward foo.bar:25 to secret.foo.bar:25 should there not be > defined a source port if it is only port 25 I want to forward? If no source > port is specified it will be any port to foo.bar which is forwarded to > secret.foo.bar. No, Source is Source (remote). You have to set: "IPCop_External_Destination":<Port> to "Internal_Destination":<port> Packets are coming from <Remote>:<Random port> ---> "IPCop_External_Destination":<Port> ---> "Internal_Destination":<port> "Source Port" in IPCop Firewall ui is the source (remote) port. As this is port is random your rules do not match. best regards Achim |
|
From: Michael R. <mi...@mi...> - 2014-11-24 16:25:40
|
On Mon, 24 Nov 2014 10:10:04 +0100 Achim Weber <dot...@gm...> wrote: > Hi Michael, > > remove all those Source Port settings from your firewall rules. As normally the > source port is dynamic your firewall rules does not match anymore... > What do you mean by removing source ports? If I want to port forward foo.bar:25 to secret.foo.bar:25 should there not be defined a source port if it is only port 25 I want to forward? If no source port is specified it will be any port to foo.bar which is forwarded to secret.foo.bar. -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- /usr/games/fortune -es says: 10.0 times 0.1 is hardly ever 1.0. - The Elements of Programming Style (Kernighan & Plaugher) |
|
From: Achim W. <dot...@gm...> - 2014-11-24 09:10:16
|
Hi Michael,
remove all those Source Port settings from your firewall rules. As normally the
source port is dynamic your firewall rules does not match anymore...
best regards
Achim
Am 23.11.2014 um 18:42 schrieb Michael Rasmussen:
> On Sun, 23 Nov 2014 17:30:26 +0100
> Achim Weber <dot...@gm...> wrote:
>
>>
>> what does this say on your box? Errors?
> To complete the info:
> cat /etc/udev/rules.d/70-persistent-net.rules
> # This file was generated by IPCop setup.
> # Do not make any modifications, rerun setup instead.
>
>
> # device 0x8086:0x107c (e1000)
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:35:d7:5d",
> ATTR{type}=="1", NAME="lan-1"
>
> # device 0x8086:0x107c (e1000)
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:35:d6:49",
> ATTR{type}=="1", NAME="dmz-1"
>
> # device 0x10ec:0x8168 (r8169)
> SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1c:c0:9b:fd:35",
> ATTR{type}=="1", NAME="wan-1"
>
>
>
>
> ------------------------------------------------------------------------------
> Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server
> from Actuate! Instantly Supercharge Your Business Reports and Dashboards
> with Interactivity, Sharing, Native Excel Exports, App Integration & more
> Get technology previously reserved for billion-dollar corporations, FREE
> http://pubads.g.doubleclick.net/gampad/clk?id=157005751&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> IPCop-devel mailing list
> IPC...@li...
> https://lists.sourceforge.net/lists/listinfo/ipcop-devel
>
|
|
From: Michael R. <mi...@mi...> - 2014-11-23 17:42:39
|
On Sun, 23 Nov 2014 17:30:26 +0100
Achim Weber <dot...@gm...> wrote:
>
> what does this say on your box? Errors?
To complete the info:
cat /etc/udev/rules.d/70-persistent-net.rules
# This file was generated by IPCop setup.
# Do not make any modifications, rerun setup instead.
# device 0x8086:0x107c (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:35:d7:5d",
ATTR{type}=="1", NAME="lan-1"
# device 0x8086:0x107c (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="90:e2:ba:35:d6:49",
ATTR{type}=="1", NAME="dmz-1"
# device 0x10ec:0x8168 (r8169)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:1c:c0:9b:fd:35",
ATTR{type}=="1", NAME="wan-1"
--
Hilsen/Regards
Michael Rasmussen
Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
/usr/games/fortune -es says:
There are no winners in life, only survivors.
|
|
From: Michael R. <mi...@mi...> - 2014-11-23 17:10:30
|
On Sun, 23 Nov 2014 10:18:58 -0500 Jack Beglinger <jac...@gm...> wrote: > On Sun, 2014-11-23 at 06:10 +0100, Michael Rasmussen wrote: > > Hi all, > > > > When I activate advanced mode under firewall settings the firewall breaks. All forwarded > > ports disappears and all connections from outside will be dropped. Anybody experiencing the > > same? > > > > PS. I have configured custom networks and custom addresses > > Which version? 2.1.7 > What options did you choose after selecting the Advance Option? > Nothing. Simply activate advanced mode triggers a broken firewall > My understanding is Advance Option is point where you tell IPCop what > rules you want to use. So what did you "say"? > I have made a set of custom services (http://www.ipcop.org/2.0.0/en/admin/html/firewall-services.html) and custom addresses (http://www.ipcop.org/2.0.0/en/admin/html/firewall-addresses.html) according to the manual When advanced mode is disabled everything works as expected but as soon as I enable advanced mode everything breaks. -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- /usr/games/fortune -es says: The 80's -- when you can't tell hairstyles from chemotherapy. |
|
From: Achim W. <dot...@gm...> - 2014-11-23 16:30:36
|
Hi Michael, what does this say on your box? Errors? root@ipcop:~ # setfwrules -vva And: root@ipcop:~ # iptables -nvL && iptables -t nat -nvL best regards Achim > Hi all, > > When I activate advanced mode under firewall settings the firewall breaks. > All forwarded ports disappears and all connections from outside will be > dropped. Anybody experiencing the same? > > PS. I have configured custom networks and custom addresses > > -- > Hilsen/Regards > Michael Rasmussen > > Get my public GnuPG keys: > michael <at> rasmussen <dot> cc > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E > mir <at> datanom <dot> net > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C > mir <at> miras <dot> org > http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 > -------------------------------------------------------------- > /usr/games/fortune -es says: > Do not stamp. |
|
From: Michael R. <mi...@mi...> - 2014-11-23 05:27:16
|
Hi all, When I activate advanced mode under firewall settings the firewall breaks. All forwarded ports disappears and all connections from outside will be dropped. Anybody experiencing the same? PS. I have configured custom networks and custom addresses -- Hilsen/Regards Michael Rasmussen Get my public GnuPG keys: michael <at> rasmussen <dot> cc http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E mir <at> datanom <dot> net http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C mir <at> miras <dot> org http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917 -------------------------------------------------------------- /usr/games/fortune -es says: Do not stamp. |
|
From: Ray E. <Ra...@El...> - 2014-11-10 09:57:19
|
Hi There devel list members. firstly, thanks to whoever fixed the source path for ca-certificates. My build looks to be going to work tonight. Can someone point me in the right direction please. my organisation have a swag of old Dell PE1950 servers and want to repurpose trhem for IPcop firewall's. They are all fitted wil Dell Perc 6i SAS controllers. Ipcop 2.x obviously wont boot on this controller as it needs the Megaraid_SAS driver loaded. Ive found http://hwraid.le-vert.net/wiki/LSIMegaRAIDSAS confirming that the driver source is available upstream in most distributions. Indeed it is already included in another fork of IPcop. How should I proceed to include it in my own build of IPcop 2.1? Thoughts anyone? Thanks in advance Regards Ray |
|
From: Ray E. <Ra...@El...> - 2014-11-09 06:35:40
|
Hi There Devel list members. I'm compiling IPcop 2.1.x from source for the first time and have run into a beginners problem. prefetch fails on a few packages, mostly in the toolchain for which I run ./make.sh gettoolchain to work around. When I run ./make.sh build however it fails early unable to download ca-certificates. The package has changed at the source now and should be http://http.us.debian.org/debian/pool/main/c/ca-certificates/ca-certificates_20141019.tar.xz Can someone advise where I correct the URL in trunk? Thanks in advance Regards Ray |