devil-linux-develop Mailing List for Devil-Linux (Page 297)

Feature Requests item #508487, was opened at 2002-01-25 07:28
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=508487&group_id=34096

Category: Configuration / Scripts
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: add sampe virtual nic cfg file

Initial Comment:
"/etc/sysconfig/nic": 
-------------------------------------------------------
--------------- 
# Touch this file only if you know what you are doing! 
# 
# Customize and uncomment the following lines to have 
virtual IP's on an existing interface: 

#DEVICE=eth1:0 
#ONBOOT=yes 
#IP=192.168.210.101 
#NETMASK=255.255.255.0 

# Note: this file is useful for people who DNAT one or 
more servers, with more than one original IP. 
# In order to receive the packets for the DNATed server
(s), devil-linux must present itself to the world as 
the 
# owner of all those IP's. 


----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=508487&group_id=34096

Bugs item #507763, was opened at 2002-01-23 17:17
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410643&aid=507763&group_id=34096

Category: Base System
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: update dhcpcd

Initial Comment:
new version available

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410643&aid=507763&group_id=34096

Hi,

from the SF mail

DATA EXPORT
---------------------------
We have added a new tool for project administrators to backup their
Project data.  It is now possible to export data from the Trackers (bug
tracker, support tracker, etc), mailing lists,  and forum data in to a
single XML text file.  This can be done at any time.

This is actually not a new feature.   The ability to export data was
available through March of 2001 until we did a major upgrade of the
site, which broke the export scripts.  We have now re-worked the code,
and it's available again.   Enjoy.   http://sourceforge.net/export


cu
  Heiko

Feature Requests item #507104, was opened at 2002-01-22 10:38
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=507104&group_id=34096

Category: Build System
Group: None
Status: Open
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Heiko Zuerker (smiley73)
Summary: New LFS System

Initial Comment:
with glibc 2.2.5 and probably with gcc 3.0.3
Let's see what they write about their tests on the LFS 
mailinglist, before we go with gcc 3.x

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=507104&group_id=34096

This email is to inform you of release '2.4.5' of 'iptables' through
freshmeat.net. All URLs and other useful information can be found at
http://freshmeat.net/projects/iptables/

The changes in this release are as follows:
This release has IPv6 support for the QUEUE target and libipq. There are
bugfixes in iptables-save/restore. The modules IPV4OPTSSTRIP, ipv6header,
quota match, and recent match have been added.

If you would like to cancel subscription to releases of this project, login
to freshmeat.net and choose 'home' from the personal menubar at the top of
the page. You'll be presented with a list of projects you're subscribed to
in the right column, which you may cancel by highlighting the project in
question and clicking the 'delete' button.

Sincerely,
freshmeat.net

This email is to inform you of release '1.3.22-pl1' of 'dhcpcd' through
freshmeat.net. All URLs and other useful information can be found at
http://freshmeat.net/projects/dhcpcd/

The changes in this release are as follows:
Support for virtual interfaces, support for multiple IP addresses per
interface, and enhanced support for external scripting.  

If you would like to cancel subscription to releases of this project, login
to freshmeat.net and choose 'home' from the personal menubar at the top of
the page. You'll be presented with a list of projects you're subscribed to
in the right column, which you may cancel by highlighting the project in
question and clicking the 'delete' button.

Sincerely,
freshmeat.net

Friedrich Lobenstock wrote:

>On Sun, 20 Jan 2002 14:34, Heiko Zuerker wrote:
>
>>Vacation? Did I approve it? I don't think so ! ;-)
>>
>
>Hey boss, that's not true. Last time at the bar you promised me that I
>can go on vacation ;-)
>
True, but normally I don't let it count, when you fill me up and then 
ask for vacation.
Ok, this is the last time I let you do this.

GO ON YOUR DAMNED VACATION !

;-)

cu
 Heiko

This email is to inform you of release '1.9.3' of 'grsecurity' through
freshmeat.net. All URLs and other useful information can be found at
http://freshmeat.net/projects/grsecurity/

The changes in this release are as follows:
This release has additional kernel auditing features, read-only kernel
memory, mmap restrictions, audit groups, and several bugfixes.

If you would like to cancel subscription to releases of this project, login
to freshmeat.net and choose 'home' from the personal menubar at the top of
the page. You'll be presented with a list of projects you're subscribed to
in the right column, which you may cancel by highlighting the project in
question and clicking the 'delete' button.

Sincerely,
freshmeat.net

On Sun, 20 Jan 2002 14:34, Heiko Zuerker wrote:

> Vacation? Did I approve it? I don't think so ! ;-)

Hey boss, that's not true. Last time at the bar you promised me that I
can go on vacation ;-)

-- 
MfG / Regards
Friedrich Lobenstock

On Sun, 20 Jan 2002 20:15:16 +0100 (CET)
"Friedrich Lobenstock" <fl...@fl...> wrote:

> On Sun, 20 Jan 2002 14:06, Heiko Zuerker wrote:
> 
> > Did I understood it right, I have to add LVM and then you do the
> > other stuff? What would be the timeframe for your work?
> 
> In two weeks I've got two exams but I think that I can fit it in.
> Then I'm one week on skiing vacation.

Vacation? Did I approve it? I don't think so ! ;-)

> In what timeframe do you need it to be?

I think about end of February should be the earliest.

cu
  Heiko

Feature Requests item #500684, was opened at 2002-01-07 18:00
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=500684&group_id=34096

Category: Base System
Group: None
>Status: Closed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
>Assigned to: Heiko Zuerker (smiley73)
Summary: enable IPv6 in all Apps which support it

Initial Comment:
better implement it now then later. ;-)

----------------------------------------------------------------------

>Comment By: Heiko Zuerker (smiley73)
Date: 2002-01-20 11:40

Message:
Logged In: YES 
user_id=112133

Should now be enabled in all packages, which have a config
setting for it.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=500684&group_id=34096

Feature Requests item #500683, was opened at 2002-01-07 17:59
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=500683&group_id=34096

Category: Base System
Group: None
>Status: Closed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
>Assigned to: Heiko Zuerker (smiley73)
Summary: enable IPv6 in Kernel

Initial Comment:
don't forgett iptables ;-)

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=500683&group_id=34096

Feature Requests item #496052, was opened at 2001-12-21 21:42
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=496052&group_id=34096

Category: Base System
Group: None
>Status: Closed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
>Assigned to: Heiko Zuerker (smiley73)
Summary: remove nls-support

Initial Comment:
remove nls-support from all packages, because we delete
it anyway. should reduce compile time
-> ./configure ..... --disable-nls

----------------------------------------------------------------------

>Comment By: Heiko Zuerker (smiley73)
Date: 2002-01-20 11:38

Message:
Logged In: YES 
user_id=112133

All the "old" packages should now compile without nls
support, at least when they had a option to disable it.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410646&aid=496052&group_id=34096

Bugs item #501581, was opened at 2002-01-09 17:07
You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410643&aid=501581&group_id=34096

Category: Configuration / Scripts
Group: None
>Status: Closed
>Resolution: Fixed
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Heiko Zuerker (smiley73)
Summary: missing parameter in /etc/dhcpd.conf

Initial Comment:
add "ddns-update-style add-hoc;" 
to the file "/etc/dhcpd.conf". 

----------------------------------------------------------------------

Comment By: Heiko Zuerker (smiley73)
Date: 2002-01-17 17:47

Message:
Logged In: YES 
user_id=112133

opened again
add this sample dhcpd.conf

##---CUT---##
# a minimal /etc/dhcpd.conf example

ddns-update-style none;

# this subnet is served by us
authoritative;

# declare the lease times (the time after which a client 
will renew its lease)
default-lease-time              600;    # 10 minutes
max-lease-time                  7200;   # 2 hours

# let's give the local domain a name
# (which should correlate to your name server configuration)
option domain-name              "beer";

# this assumes that your dhcp server is also the router for 
the subnet
option routers                  192.168.0.1;

# clients shall use this host as nameserver, too
option domain-name-servers      192.168.0.1;

# this can explicitely be specified
option broadcast-address        192.168.0.255;

# these 10 addresses will be given out dynamically
subnet 192.168.0.0 netmask 255.255.255.0 {
  range 192.168.0.11 192.168.0.20;
  # options may also be put here if they are not global
}

# this host is known by its hardware address and
# we want a fixed address for it
host murauer {
   hardware ethernet 00:30:65:6F:A5:D4;
   fixed-address 192.168.0.5;
}

##---CUT---##


----------------------------------------------------------------------

Comment By: Heiko Zuerker (smiley73)
Date: 2002-01-15 18:11

Message:
Logged In: YES 
user_id=112133

Parameter is missing in the standard config file, which is
distributed with the sources.
I don't want to provide our own config file, so the user has
do change it on his own.
He has to config the file anyway.

----------------------------------------------------------------------

You can respond by visiting: 
http://sourceforge.net/tracker/?func=detail&atid=410643&aid=501581&group_id=34096

On Sun, 20 Jan 2002 14:06, Heiko Zuerker wrote:

> Did I understood it right, I have to add LVM and then you do the
> other stuff? What would be the timeframe for your work?

In two weeks I've got two exams but I think that I can fit it in.
Then I'm one week on skiing vacation.

In what timeframe do you need it to be?

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

On Sun, 20 Jan 2002 19:50:10 +0100 (CET)
"Friedrich Lobenstock" <fl...@fl...> wrote:
> > The support is compiled into the Kernel and ext2 and reiserfs
> > tools are available already included. I also added the scripts
> > from LFS, but they just released new versions. And of course,
> > nothing is tested yet.
> 
> OK, then I have to do the LVM and harddisk detection stuff I talked
> about on my own. So I'd need the lvm tools to be on DL:)

Did I understood it right, I have to add LVM and then you do the other stuff?
What would be the timeframe for your work?

cu
  Heiko

On Sun, 20 Jan 2002 13:34, Heiko Zuerker wrote:

> On Sun, 20 Jan 2002 19:12:15 +0100 (CET)
> "Friedrich Lobenstock" <fl...@fl...> wrote:
>
> > On Sun, 20 Jan 2002 12:27, Heiko Zuerker wrote:
> >
> > > 1   * Support for Harddisks   (nearly finished)
> >
> > -> Can you give me an update on this? I wanted to do it but
> >    it seems time's limited.
>
> The support is compiled into the Kernel and ext2 and reiserfs
> tools are available already included. I also added the scripts
> from LFS, but they just released new versions. And of course,
> nothing is tested yet.

OK, then I have to do the LVM and harddisk detection stuff I talked
about on my own. So I'd need the lvm tools to be on DL:)


> > For me the logical next steps would be:
> > 1.3  * logging to disk (no secure!, but intersting for the admin)
>
> I would do this as 1.1, because when we have the harddisk support
> running, this is one line in the syslog-ng config file.

Right.


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

On Sun, 20 Jan 2002 19:12:15 +0100 (CET)
"Friedrich Lobenstock" <fl...@fl...> wrote:

> On Sun, 20 Jan 2002 12:27, Heiko Zuerker wrote:
> 
> > 1   * Support for Harddisks   (nearly finished)
> 
> -> Can you give me an update on this? I wanted to do it but
>    it seems time's limited.

The support is compiled into the Kernel and ext2 and reiserfs tools are available already included.
I also added the scripts from LFS, but they just released new versions.
And of course, nothing is tested yet.

> For me the logical next steps would be:
> 1.3  * logging to disk (no secure!, but intersting for the admin)

I would do this as 1.1, because when we have the harddisk support running, this is one line in the syslog-ng config file.

> Do you really need samba? I would say we'd better swap 3 <-> 2,
> because that's a firewall and an IDS is more important

I need it for me, within the next 3 month. I'm setting up a new network infrastructure in my company and need a File Server.
I don't wanna do it with a normal Distro, because this is just too much work.

> > 6   * Stealth Firewall
> 
> You mean with Etherdivert or the like?

There is a Bridge-Netfilter patch available, but it's v0.0.6. :-(
With this, the Linux Box is only acting as a Bridge, but is able to filter the traffic. Really nice, but I think not ready yet.

> > 7   * HTTP and FTP Server
> 
> Administration?!

No, mainly to let DL act as an HTTP or FTP Server, which is secure.
But this has a very low priority for me.

cu
  Heiko

On Sun, 20 Jan 2002 12:27, Heiko Zuerker wrote:

> 1   * Support for Harddisks   (nearly finished)

-> Can you give me an update on this? I wanted to do it but
   it seems time's limited.

For me the logical next steps would be:
1.1  * mail support
1.2  * squid - web proxy
1.3  * logging to disk (no secure!, but intersting for the admin)

> 2   * Samba
> 3   * Intrusion Detection System with Database Support
> 3   * MySQL Client
> 3   * PostgreSQL Client

Do you really need samba? I would say we'd better swap 3 <-> 2,
because that's a firewall and an IDS is more important


> 4   * Mail Support including TLS and Virus scanning.

4    * mail virusscanning and TLS

> 5   * (Stealth) Proxies (FTP, HTTP and everything else we find)

> 6   * Stealth Firewall

You mean with Etherdivert or the like?

> 7   * HTTP and FTP Server

Administration?!

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi,

here is the list. 

I wrote my priorities in front of each task.

1   * Support for Harddisks   (nearly finished)
2   * Samba
3   * Intrusion Detection System with Database Support
3   * MySQL Client
3   * PostgreSQL Client
4   * Mail Support including TLS and Virus scanning.
5   * (Stealth) Proxies (FTP, HTTP and everything else we find)
6   * Stealth Firewall
7   * HTTP and FTP Server

cu
  Heiko

On Sun, 20 Jan 2002 17:42:14 +0100 (CET)
"Friedrich Lobenstock" <fl...@fl...> wrote:

> On Sun, 20 Jan 2002 10:36, Heiko Zuerker wrote:
> I would say that to make up a roadmap, one that does not state
> definite dates, but milestones, we need to make a feature freeze now
> and then.

Yeah that is right.
The only problem is, that we're not many Developers at the moment.

> > We have a list of what we want to implement at the end of the
> > introduction page, that's at least something.
> 
> Ok, that's something. We could do better, if we could define that
> those things are done in a specific order. So people somehow know
> where we are standing and where we are going.

Right.
I create a new email with the list from the webpage.
Let's discuss it there.

cu
  Heiko

On Sun, 20 Jan 2002 10:36, Heiko Zuerker wrote:

> A Roadmap would be good, but you can only create one, if you're able do
> implement the stuff in the announced time.

I would say that to make up a roadmap, one that does not state
definite dates, but milestones, we need to make a feature freeze now
and then.

> We have a list of what we want to implement at the end of the
> introduction page, that's at least something.

Ok, that's something. We could do better, if we could define that
those things are done in a specific order. So people somehow know
where we are standing and where we are going.


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi,

you're both right.
A Roadmap would be good, but you can only create one, if you're able do 
implement the stuff in the announced time.
We have a list of what we want to implement at the end of the 
introduction page, that's at least something.

About the set-permission-script.
I already added this stuff in CVS, but it's still far from perfect. It 
needs a lot more additions and testing.

cu
  Heiko

Hi,

I think that would be interesting, what they have to say about them.
I just order a Abo of the IX. ;-)

cu
  Heiko

Friedrich Lobenstock wrote:

>Hi!
>
>For all of you that can get (and read) the german iX-Magazin, take a
>look at iX 2/2002 where they compare
> * Astaro Security Linux
> * Linux Wall V2
> * Mandrake Single Network Firewal 7.2
> * SuSE Firewall on CD
>
>

Hi!

For all of you that can get (and read) the german iX-Magazin, take a
look at iX 2/2002 where they compare
 * Astaro Security Linux
 * Linux Wall V2
 * Mandrake Single Network Firewal 7.2
 * SuSE Firewall on CD


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________