devil-linux-discuss Mailing List for Devil-Linux (Page 404)

The VPN part of the following article might be of interest if you want
to deploy VPN with Devil-Linux.

http://noframes.linuxjournal.com/article.php?sid=4772

-- 
MfG / Regards
Friedrich Lobenstock

Friedrich Lobenstock wrote:

>But we can be as good as they, we can even get a bigger crowed as
>they are ;-)
>
I hope so. ;-)

>>I have to say, SuSE is a competitor in this case, but it was never in my
>>intention.
>>SuSE announced the "Firewall on CD" 2 month after we began to create the
>>first DL versions. This product was not available when I needed it and
>>it is a bit to expensive for my needs.
>>
>
>
>It's always good to have competitors, so you can compare. We are
>better in the matter of our firewalling because they use kernel 2.2
>and we 2.4. I never trusted a simple packet-filtering-firewall. So
>with the the connection tracking/stateful technology I said that's it
>and that's how I found my way to Devil-Linux.
>
They still use the 2.2? *lol*
I thought they are a bit more up-to-date. ;-)

-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

On Mon, 10 Dec 2001 20:30, Heiko Zuerker wrote:

> I already documented, that we have to save /root and /home onto the
> floppy disc.

Ok, I'll have to check out the docs then :)


> >* FAS = Firewall Administration System(client-server), configuration
> >   software that runs on an admin host, might be on the firewall in
> >   the future because of the client-server nature
> >
> Thats a thing we can't compete.
> SuSE is a bit bigger than our crowd and earns a bit more money.;-)

But we can be as good as they, we can even get a bigger crowed as
they are ;-)


> I have to say, SuSE is a competitor in this case, but it was never in my
> intention.
> SuSE announced the "Firewall on CD" 2 month after we began to create the
> first DL versions. This product was not available when I needed it and
> it is a bit to expensive for my needs.


It's always good to have competitors, so you can compare. We are
better in the matter of our firewalling because they use kernel 2.2
and we 2.4. I never trusted a simple packet-filtering-firewall. So
with the the connection tracking/stateful technology I said that's it
and that's how I found my way to Devil-Linux.


-- 
MfG / Regards
Friedrich Lobenstock

Friedrich Lobenstock wrote:

>* /root and  /sbin are kept on the floppy and are copied into
>   the ramdisk
>
I already documented, that we have to save /root and /home onto the 
floppy disc.

>* FAS = Firewall Administration System(client-server), configuration
>   software that runs on an admin host, might be on the firewall in
>   the future because of the client-server nature
>
Thats a thing we can't compete.
SuSE is a bit bigger than our crowd and earns a bit more money.;-)

I have to say, SuSE is a competitor in this case, but it was never in my 
intention.
SuSE announced the "Firewall on CD" 2 month after we began to create the 
first DL versions. This product was not available when I needed it and 
it is a bit to expensive for my needs.

-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

Friedrich Lobenstock wrote:

>As I know from Heiko, we had too much troubles with the limited
>commands busybox provides, so I think Heiko will eventually remove it
>completely. For the boot process where we really need a small
>memory/ramdisk foot-print I think we'll leave it.
>
Yes correct.
Busybox will remain in the boot process (initrd).
For the main system we will replace all the command by the "big" version.

-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

From reading the article I conclude the following.

The similarities:
 * boots from CD
 * config is stored on CD
 * minimum 64 MB ram
 * configuartion is created externaly of the firewall
 * /etc is kept on the floppy and is copied into
   the ramdisk


The differences:
 * most of the executables are kept on the CD and are just
   symlinked into the ramdisk (optional for future DL)
 * /root and  /sbin are kept on the floppy and are copied into
   the ramdisk
 * /var is optionally kept on a harddisk
 * FAS = Firewall Administration System(client-server), configuration
   software that runs on an admin host, might be on the firewall in
   the future because of the client-server nature


For future details I reference the article.

-- 
MfG / Regards
Friedrich Lobenstock

Hi!

I found a test of the "SuSE Linux Firewall on CD" in the current
Linux-Magazin 01/2002. Very interesting, they describe the boot
concept and the management interface.

Sorry for you guys, who don't speak German, but I don't know if
Linux-Magazin is released in English or any other languages.

You also have to get your own copy because they don't have the current
index nor the current articles online.

-- 
MfG / Regards
Friedrich Lobenstock

On Sat, 8 Dec 2001 18:14, mar...@re... wrote:

> Question : Should BusyBox be completely removed from DL distribution ?

As I know from Heiko, we had too much troubles with the limited
commands busybox provides, so I think Heiko will eventually remove it
completely. For the boot process where we really need a small
memory/ramdisk foot-print I think we'll leave it.

-- 
MfG / Regards
Friedrich Lobenstock

As DL box is a FW, I imagine that only network administrators can login =
in, so it's not a big security problem.
Again Heiko said that he will replace the corresponding BusyBox commands =
with the original ones.
Question : Should BusyBox be completely removed from DL distribution ?

regards


Mario

a a wrote:

>In Devil Linux, I have noticed that passwords are
>stored in an /etc/passwd file.  Please change this to
>a shadow password system so passwords are more secure.
>
When I remember it correctly, uses Busybox shadow passwords, it's just 
stored in the passwd file.
We already planned to replace most of the Busybox commands for the 
"original" versions, this will fix this problem then.

cu
  Heiko

Would YOU like £10,000/month for life? 



For a limited period we're offering the 

opportunity of a lifetime. 





Make "tens of £1000's" without selling, 

experience, administration, stock, investment 

or having to answer the phone EVER again. 



Take advantage, get involved with the $35 

billion dollar a year adult XXX industry by 

taking one of our FREE FREE FREE adult web site 

businesses and we'll make sure you earn a lot 

of money. 



<<<<Its what over 70% of 250,000,000 surfers 

are looking for!>>>> 



"No experience required" 



Our Guarantee: 

'We'll give you a adult web site, show you how to 

promote it and 'IF' YOU don't start earning over 

£10,000 EACH month within six (with our help), 

we'll give YOU the business for FREE'. 

When you start to earn over £10,000 a month, 

you pay £1950.00 once off for the business. 



"We already know that you'll reach the £10,000's 

target income quickly" 



That's why we don't ask you to part with your money 

until you've tasted success. 



You don't have to spend a penny to advertise. We'll 

show and teach you how to promote it in each of the 

4,500 FREE places on the Internet to give you 70,000 

to 100,000 customers each month. 



You don't need any experience. We'll give you the site, 

show you the way and pay you an excellent income. If 

you haven't got a PC or experience we will help you 

promote your business. With our help, you can't fail. 



You can operate anonymously, even your wife/husband 

doesn't have to know where the extra money's coming 

from. We pay YOU monthly. 



We have turned this 'usually expensive to buy 

business' into a FREE to start and EASY to operate 

package with the entire promotional backup needed 

to succeed. We'll teach you everything there is to 

know, plus guarantee that you earn over £10,000 a 

month before we ask you for payment. Its a NO RISK 

proven business supported by a 'long term sustainable 

business plan' that will take you on a roller-coaster 

ride to SUCCESS. 





DON'T MISS THIS - APPLY NOW 



For full details e-mail me: 

<<< bri...@ya... >>> 



Limited Offer 

Domain name required to use with the FREE site. 

---------------------------------------------- 

For further details reply with 'MORE DETAILS' 

in the subject line. "If you want to be 

removed from my email database please reply 

with 'REMOVE' in the subject line. 

---------------------------------------------- 
 
 
 
 
 
 
 
 

In Devil Linux, I have noticed that passwords are
stored in an /etc/passwd file.  Please change this to
a shadow password system so passwords are more secure.

Sincerely,
Dave Roper


__________________________________________________
Do You Yahoo!?
Send your FREE holiday greetings online!
http://greetings.yahoo.com

On Wed, 5 Dec 2001 15:10, RD - UOL wrote:

> Hi,
>
>     How may I correct the routing table ?
>     Is it a simple route [to the provider for example] ?
>     This is quite new for me.

First you have to tell us more about your setup.
List the interfaces of your firewall and the routing table.
The same goes for the machine you are trying to do this from.

  ifconfig
  netstat -rn


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi,

    How may I correct the routing table ?
    Is it a simple route [to the provider for example] ?
    This is quite new for me.

    Thanks again,

Renato Denardo.

----- Original Message -----
From: "Friedrich Lobenstock" <fl...@fl...>
To: "Devil Linux MailList" <dev...@li...>
Sent: Wednesday, December 05, 2001 2:39 PM
Subject: Re: [Devil-Linux-discuss] FTP Error


> On Wed, 5 Dec 2001 14:06, RD - UOL wrote:
>
> >     550 - Cannot connect to 192.168.0.1 - no route to host
> >
> >     Did someone know the command in rc.firewall script to correct this ?
>
> "no route to host" does mean you have to correct your routing
> table not your rc.firewall script!
>
> --
> MfG / Regards
> Friedrich Lobenstock
> ____________________________________________________________________
> Friedrich Lobenstock         FL226-RIPE             Internetservices
> URL: http://www.fl.priv.at/                     Email: fl...@fl...
> ____________________________________________________________________
>
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>

On Wed, 5 Dec 2001 14:06, RD - UOL wrote:

>     550 - Cannot connect to 192.168.0.1 - no route to host
>
>     Did someone know the command in rc.firewall script to correct this ?

"no route to host" does mean you have to correct your routing
table not your rc.firewall script!

-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi there,

    I'm receiving this error when try to connect to a FTP site from a local
lan machine:

    500 - Illegal port command

    or

    550 - Cannot connect to 192.168.0.1 - no route to host

    Did someone know the command in rc.firewall script to correct this ?

Thanks.

Renato Denardo.

Have a good time in yours vacation

Best wishes.

Renato Denardo
 ICQ/uin 4631042    M.=B7.B.=B7.
 eMail: ren...@uo...
 SMS: 119...@to...

Hi,

I have vacation starting from today until 12/10/01.

I try to read my email and check the webpage, but I can't promise anything.

I would appreciate it, when you guys could help others and answer 
questions for me.

Thanks.

-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

And we're on rank #10 this week on SF, due to this downloads.
It could be a real number, on the Website, we had in the last 2 days 
25.000 hits. ;-)

$1 for each download........would be really great.

cu
  Heiko

Hi,

I was on the Sourceforge Page and it says, that there were  2057 
Downloads of Beta 4 in only 3 days.

I'm not sure if I can believe this, but the counter was always ok on SF.

cu
  Heiko

On Wed, 28 Nov 2001 09:18, Heiko Zuerker wrote:

> This is for Devil-Linux 0.5b4.
>
> copy the file to /etc/init.d/
> go to /etc/init.d/rc3.d and execute the command
> ln -s ../rc.local S999rc.local
>
> With this way, rc.local is the last script executed, before the login
> program is started. You can change the number of course, so it's
> starting earlier.
>
> Don't forgett to save the config. ;-)
>
> It's a good idea to add this as standard. I document it.

Sorry, but I have to step in, because I think rc.local is not SysV
Init. Either stay with SysV-Init or die.

Create a SysV Init script, copy it to /etc/init.d/, create the needed
symlinks for it and you are done.

-- 
MfG / Regards
Friedrich Lobenstock

a a wrote:

 > I want to execute a script after my DL box is finally
 > up and I figure a file like rc.local can do this.  How
 > do I set this up?  I haven't had much success so far.
 >


This is for Devil-Linux 0.5b4.

copy the file to /etc/init.d/
go to /etc/init.d/rc3.d and execute the command
ln -s ../rc.local S999rc.local

With this way, rc.local is the last script executed, before the login 
program is started. You can change the number of course, so it's 
starting earlier.

Don't forgett to save the config. ;-)

It's a good idea to add this as standard. I document it.

-- 

cu
   Heiko

http://www.devil-linux.org

I want to execute a script after my DL box is finally
up and I figure a file like rc.local can do this.  How
do I set this up?  I haven't had much success so far.

Sincerely,
Dave Roper


__________________________________________________
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1

Heiko Zuerker a =E9crit :

> Mario.Dragone + iufm.siege.cri.dir wrote:
>
> > Heiko Zuerker a =E9crit :
> >
> >>What happens if you use log level 7 ?
> >>This works just fine for me.
> >
> > It works with level 7. However, I don't understand why lower log leve=
l
> > cause problem.
> > I've tried with syslog instead of syslog-ng on DL, I encounter the sa=
me
> > problem.
> >
> > Could it be an iptables bug ???
>
> No this is not a bug.
> I can't explain it, because I don't remember it exactly.
> Did you read the man pages of klogd and syslogd/systlog-ng ?
>
> This log level stuff is explained somewhere.
>

Right, klogd sends everything on the console except :

   * log level 7 (debug)
   * klogd is launched  with -c <level> and messages are lower than <leve=
l>

Since klogd seems no more used (?) by DL, I will use 'debug' log level

Mario

>
> --
>
> cu
>    Heiko
>
> http://www.devil-linux.org
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss

--
Mario Dragone              Centre de Ressources Informatiques, IUFM Reims=

                           T=E9l: 03.26.50.77.93

Mario.Dragone + iufm.siege.cri.dir wrote:

> Heiko Zuerker a =E9crit :
>=20
>>What happens if you use log level 7 ?
>>This works just fine for me.
>=20
> It works with level 7. However, I don't understand why lower log level
> cause problem.
> I've tried with syslog instead of syslog-ng on DL, I encounter the same
> problem.
>=20
> Could it be an iptables bug ???


No this is not a bug.
I can't explain it, because I don't remember it exactly.
Did you read the man pages of klogd and syslogd/systlog-ng ?

This log level stuff is explained somewhere.



--=20

cu
   Heiko

http://www.devil-linux.org