devil-linux-discuss Mailing List for Devil-Linux (Page 405)

Heiko Zuerker a =E9crit :

> What happens if you use log level 7 ?
> This works just fine for me.
>

It works with level 7. However, I don't understand why lower log level
cause problem.
I've tried with syslog instead of syslog-ng on DL, I encounter the same
problem.

Could it be an iptables bug ???


--
Mario Dragone              Centre de Ressources Informatiques, IUFM Reims=

                           T=E9l: 03.26.50.77.93

What happens if you use log level 7 ?
This works just fine for me.

-- 

cu
   Heiko

http://www.devil-linux.org

Hello,

I wish not having any syslog-ng messages on the console.
Syslog-ng.conf is as follow :

#####################################################################
# define options for syslog
#####################################################################
options { long_hostnames(on); sync(0); };

#####################################################################
# define the source pipe for all local messages
#####################################################################
source src { unix-dgram("/dev/log"); internal(); file("/proc/kmsg"); };

#####################################################################
# print all messages on tty10
#####################################################################
destination console { file("/dev/tty10"); };
#log { source(src); destination(console); };

#####################################################################
# send all messages to the loghost
#####################################################################
destination loghost { udp("10.0.3.3" port(514)); };
log { source(src); destination(loghost); };

#####################################################################
# END
#####################################################################

Messages from iptables are sent to 10.0.3.3, but also on the console.
However, other messages (from sshd ...) are only sent to 10.0.3.3

iptables rules looks like this :

$IPTABLES -A INPUT -j LOG --log-prefix "IN:  " --log-level 5

(I've already tried with notice instead of 5, without --log-level, ...)

So, what's wrong ???

Thanks for any help (I'm using DL 0.5b4 but this pb exists since a long
time ...)

Mario

--
Mario Dragone              Centre de Ressources Informatiques, IUFM Reims=

                           T=E9l: 03.26.50.77.93

Hello World!

I just released Devil-Linux 0.5 Beta 4.

Visit our Website to download this release: http://www.devil-linux.org
You find the Changelog at the end of this mail.

Please report any bugs/problems to bu...@de... or on our Website.

We need mirror servers!
When you can provide us with a mirror, please contact me: 
he...@de...

cu
  Heiko

0.5 Beta 4
- in interface config files, the parameters MODULE and BROADCAST can be 
empty now
- renamed /etc/init.d/ethnet to network
- updated Syslinux to v1.64
- added reiserfsprogs v3.x.0j to base and initrd system
- added full e2fsprogs v1.25 to base and initrd system
- added Portslave 2001.11.17 as package
- updated to Kernel v2.4.16pre1
  changed/new options:
    - SYM53C8XX Version 2 SCSI support as module
    - Eurotech CPU-1220/1410 Watchdog Timer as module
    - Stats in /proc/fs/reiserfs
    - Ext3 journalling file system support as module
    - LVM support as module
    - Software Raid as module
    - Parallel Printer Support
    - SMB File System Support as Module
      - Default NLS cp437
- added sysv init system
- added sysvinit v2.83 to base system
- bash is now really used inside initrd
- updated BusyBox to v0.60.2
- updated NTP to v4.1.71
- updated WGET to v1.71
- added missing setsid
- fixed a problem in RP-PPPoE scripts (PPPD=NOTFOUND)
- fixed a problem with IPSEC_DIR in FreeS/WAN package

The configurations files are now always included within the main package.
When you un-tar it, you see the files.

I hope one of the files I sended you is the right one, otherwise 
download the correct version from the website.


-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

EMERGENCY:
Can someone please send me their or the origanol etc.tar.gz or was it
etc.tar.bz2 configuration file for me?  Being as dumb as I am, running one
Linux box and a few Windoze Boxez, I never made backups of my configuration
files of the Devil-linux etc.tar.bz2 file.  Well, it came to haunt me today
and my floppy disk went on crack and stopped working on me.  I have another
spare disk, but umm, i am unable to extract any of the files found on
devil-linux.com to get the configuration file on my windoze machine.  Can
someone please attach it an email to dar...@si...?  Thx, Greatly
appreciated.
                                               Sincerely,
                                               Mark F.

-- SimGoRacing --
http://www.simgoracing.com

On Fri, 23 Nov 2001 03:26:15 +0100
"Friedrich Lobenstock" <fl...@fl...> wrote:

> I wanted to make list so we'd see the importance of all the 
> "would be nice to have" features and to give a bigger view of
> what DL could be in the future.

Ok, I see.
Then please add also the stuff, we have documented in the Feature Requests on Sourceforge.

> > > * squid
> > Somebody volunteered to create this package, but I wait for a 
> > message from him, if he is really doing it.
> 
> Ok, tell us when you here from him again.

ok

> > > * intrusion detection (snort, .....)
> > with the database modules
> 
> Be more specific, I don't know what you mean with this.

Snort can log to popular databases, like MySQL.
We should provide this options.

> > > * log reports that tell the user what DL did for him
> > What do you mean with this?
> 
> User can select to get a mail every week or so which summarizes
> that eg. 100 users wanted to brake in but did not succeed,
> and so on, whatever makes sense. Also real time alerting
> via mail.

Ok, but this will be a lot of work. ;-)
Hopefully we get more help soon.

cu
  Heiko

Hi!

Heiko Zuerker wrote:
> 
> some of your ideas are already documented on SF. 
> When you start implementing it, just assign it to you.

I wanted to make list so we'd see the importance of all the 
"would be nice to have" features and to give a bigger view of
what DL could be in the future.

> 
> > * squid
> Somebody volunteered to create this package, but I wait for a 
> message from him, if he is really doing it.

Ok, tell us when you here from him again.

> 
> > * use harddisk with LVM for squid and mailspool
> LVM should just be an option
> 
> > * intrusion detection (snort, .....)
> with the database modules

Be more specific, I don't know what you mean with this.

> 
> > * log reports that tell the user what DL did for him
> What do you mean with this?

User can select to get a mail every week or so which summarizes
that eg. 100 users wanted to brake in but did not succeed,
and so on, whatever makes sense. Also real time alerting
via mail.


> 
> > * support 3Ware IDE Raid controllers during boot
> already included as module.
> Just the script which is loading the SCSI drivers at boot time is missing.

-- 
MfG / Regards
Friedrich Lobenstock

Hi,

some of your ideas are already documented on SF. When you start implementing it, just assign it to you.

On Fri, 23 Nov 2001 01:30:03 +0100
"Friedrich Lobenstock" <fl...@fl...> wrote:
> * squid
Somebody volunteered to create this package, but I wait for a message from him, if he is really doing it.

> * use harddisk with LVM for squid and mailspool
LVM should just be an option

> * intrusion detection (snort, .....)
with the database modules

> * log reports that tell the user what DL did for him
What do you mean with this?

> * support 3Ware IDE Raid controllers during boot 
already included as module.
Just the script which is loading the SCSI drivers at boot time is missing.


cu
  Heiko

Hi!

OK, here's a/my todo list for Devil-Linux, please add your thoughts:
(the more to the top the more important!)

* squid

* sendmail/postfix/qmail

* use harddisk with LVM for squid and mailspool

* intrusion detection (snort, .....)

* logging to harddisk

* log reports that tell the user what DL did for him

* optinal debugging kit (sniffit, ....)

* autodetection of networkcard modules (try to load, ok failed
  then try the next one - only with PCI cards)

* samba

* support 3Ware IDE Raid controllers during boot 


As said before PLEASE add your itims to the list where you'd think
they'd fit into the list above, or provide your version of the
todo list.

-- 
MfG / Regards
Friedrich Lobenstock

a a wrote:

>With Shorewall, it had problems with sed for some
>reason.  I found the Monmotha iptables script shortly
>afterwards.  I can add it to the floppy by replacing
>the original rc.firewall script with the new one.  It
>has proven successful with general web surfing as well
>as a VPN.  See you later!
>
>Sincerely,
>Dave Roper
>

The sed problem could be caused by the limited Busybox applet.
We replaced sed by the "real" program, so if you want, you can try 
shorewall again.

The question is also, is it blocking very well? Did you check it with 
several nmap scans?

-- 

cu
  Heiko

I am root, resistance is futile!

http://www.devil-linux.org

On 22.11.2001 18:53:36 Friedrich Lobenstock wrote:
>That's something for the homepage, isn't it?
>Would fit into "Introduction".
Yeah, thats right, i'll do it at the weekend when i've time again to wo=
rk on the
devil homepage ;-)
>
>Heiko Zuerker wrote:
>>
>> On Thu, 22 Nov 2001 12:08:52 -0200
>> "C=E9sar Eduardo" <ce...@da...> wrote:
>>
>> > why this project is called  Devil-Linux !?
>> > there is any relation with a 'devil' !? if not, why is called like=

>this...
>>
>> Hi,
>>
>> no there is absolut no relation to "The Devil" or to BSD.
>>
>> Some history:
>> When I decided to create my own Linux distribution I was discussing
>for a couple if weeks with my friends and the people in my company how=

>I should name it.
>> We didn't find a good name, so the first inofficial releases had the=

>name "Noname-Linux".
>> One day we (Michael Wahlbrink and me) discussed again about the name=

>and he said: why not "Devil-Linux" ?
>> I said: hmmmm, I like this name! But where the hell did you find thi=
s
>name?
>> He said: Look on your T-Shirt!
>>
>> I had a T-Shirt from a German Linux Magazine and there was a Logo,
>like the BSD Devil, on it.
>>
>> So we decided to go with this name, that's all. ;-)
Cool, I coold'nt remember this story ;-)

cu
wali

=

> That's something for the homepage, isn't it?
> Would fit into "Introduction".

I agree

cu
   Heiko

Why not?
This is really easy to implement and if somebody wants it.
I add it to the Feature Requests.

cu
  Heiko

----- Original Message -----
From: "a a" <cyb...@ya...>
To: <dev...@li...>
Sent: Wednesday, November 21, 2001 7:53 PM
Subject: [Devil-Linux-discuss] Monmotha iptables firewall


> http://t245.dyndns.org/~monmotha/firewall/index.php
>
> I have been using this firewall script for a few
> months with success.  I used to use Seawall on my
> prior firewall, tried Shorewall, but couldn't get it
> to work at all.  This executes fast since there are no
subroutines/functions.
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
> http://geocities.yahoo.com/ps/info1
>
> _______________________________________________
> Devil-linux-discuss mailing list
> Dev...@li...
> https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss
>
>

That's something for the homepage, isn't it?
Would fit into "Introduction".

Heiko Zuerker wrote:
>=20
> On Thu, 22 Nov 2001 12:08:52 -0200
> "C=E9sar Eduardo" <ce...@da...> wrote:
>=20
> > why this project is called  Devil-Linux !?
> > there is any relation with a 'devil' !? if not, why is called like th=
is...
>=20
> Hi,
>=20
> no there is absolut no relation to "The Devil" or to BSD.
>=20
> Some history:
> When I decided to create my own Linux distribution I was discussing for=
 a couple if weeks with my friends and the people in my company how I sho=
uld name it.
> We didn't find a good name, so the first inofficial releases had the na=
me "Noname-Linux".
> One day we (Michael Wahlbrink and me) discussed again about the name an=
d he said: why not "Devil-Linux" ?
> I said: hmmmm, I like this name! But where the hell did you find this n=
ame?
> He said: Look on your T-Shirt!
>=20
> I had a T-Shirt from a German Linux Magazine and there was a Logo, like=
 the BSD Devil, on it.
>=20
> So we decided to go with this name, that's all. ;-)

--=20
MfG / Regards
Friedrich Lobenstock

On Thu, 22 Nov 2001 12:08:52 -0200
"César Eduardo" <ce...@da...> wrote:

> why this project is called  Devil-Linux !?
> there is any relation with a 'devil' !? if not, why is called like this...

Hi,

no there is absolut no relation to "The Devil" or to BSD.

Some history:
When I decided to create my own Linux distribution I was discussing for a couple if weeks with my friends and the people in my company how I should name it.
We didn't find a good name, so the first inofficial releases had the name "Noname-Linux".
One day we (Michael Wahlbrink and me) discussed again about the name and he said: why not "Devil-Linux" ?
I said: hmmmm, I like this name! But where the hell did you find this name?
He said: Look on your T-Shirt!

I had a T-Shirt from a German Linux Magazine and there was a Logo, like the BSD Devil, on it.

So we decided to go with this name, that's all. ;-)

cu
  Heiko

http://t245.dyndns.org/~monmotha/firewall/index.php

I have been using this firewall script for a few
months with success.  I used to use Seawall on my
prior firewall, tried Shorewall, but couldn't get it
to work at all.  This executes fast since there are no subroutines/functions.

__________________________________________________
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1

Mario.Dragone + iufm.siege.cri.dir wrote:

> Nothing happen. In fact, when I launch syslog-ng with debbuging options, no
> messages seems to be received from iptables, as if iptables didn't use
> syslog.
> 
> Same iptables and syslog-ng config files works with DD 0.5b2.

And here is the problem. ;-)

Use the new syslog-ng.conf from 0.5b3, because I changed something 
there, so that no klogd is needed anymore.

-- 

cu
   Heiko

http://www.devil-linux.org

Heiko Zuerker a =E9crit :

> Mario.Dragone + iufm.siege.cri.dir wrote:
>
>   > An another problem : logging doesnt works with iptables-1.2.4 but w=
orks
>
>  > with other events (sshd connexions, ...)
>
> Should work.
>
> Try to use numbers instead of names for log targets:
> $IPTABLES -A LOG_AND_REJECT -j LOG --log-level 7 --log-prefix "REJECT "=

> -m limit --limit $LOG_LIMIT
>
>

Nothing happen. In fact, when I launch syslog-ng with debbuging options, =
no
messages seems to be received from iptables, as if iptables didn't use
syslog.

Same iptables and syslog-ng config files works with DD 0.5b2.

Regards

--
Mario Dragone              Centre de Ressources Informatiques, IUFM Reims=

                           T=E9l: 03.26.50.77.93

Mario.Dragone + iufm.siege.cri.dir wrote:

 > Magnus Sandberg a =E9crit :
 >>Yes 0.5b3 works better, iptables v1.2.4 this time ;-)
 >>Just one thing in /etc/services 'ftp-data' is named
 >>'ftpdata' shorewall expects 'ftp-data'. Appart from


I think I should add the old /etc/services file, there could be much more.


 >>that small fix it runs smooth. How about including
 >>shorewall in the distribution?

I write it to the feature requests. Don't know when it will be included=20
then.


 > An another problem : logging doesnt works with iptables-1.2.4 but works
 > with other events (sshd connexions, ...)

Should work.

Try to use numbers instead of names for log targets:
$IPTABLES -A LOG=5FAND=5FREJECT -j LOG --log-level 7 --log-prefix "REJECT "=
=20
-m limit --limit $LOG=5FLIMIT




--=20

cu
   Heiko

http://www.devil-linux.org

Magnus Sandberg a =E9crit :

> Yes 0.5b3 works better, iptables v1.2.4 this time ;-)
> Just one thing in /etc/services 'ftp-data' is named
> 'ftpdata' shorewall expects 'ftp-data'. Appart from
> that small fix it runs smooth. How about including
> shorewall in the distribution?
>
>

same observations about www-http (www), pop-3 (pop3).

An another problem : logging doesnt works with iptables-1.2.4 but works
with other events (sshd connexions, ...)


Regards



--
Mario Dragone              Centre de Ressources Informatiques, IUFM Reims=

                           T=E9l: 03.26.50.77.93

Yes 0.5b3 works better, iptables v1.2.4 this time ;-)
Just one thing in /etc/services 'ftp-data' is named
'ftpdata' shorewall expects 'ftp-data'. Appart from
that small fix it runs smooth. How about including
shorewall in the distribution?

/Magnus

Friedrich Lobenstock wrote:
 > On Mon, 19 Nov 2001 11:20, al...@nd... wrote:
 >
 >
 >>Is it possible to limit bandwith?
 >>
 >
 > Should be possible, because the iproute2 utils are there (has to be
 > enabled in the config file).

There is somewhere a script on the web, check for "cbq.init".
With this script, you have to write some configuration files and the 
script is doing the rest.

-- 

cu
   Heiko

http://www.devil-linux.org

On Mon, 19 Nov 2001 11:20, al...@nd... wrote:

> Is it possible to limit bandwith?

Should be possible, because the iproute2 utils are there (has to be
enabled in the config file).


> Is it possible to make the box start from HD?

No, that's not planned. What is on our todo list is to use a harddisk
for storing logs, spooling mails, etc.


-- 
MfG / Regards
Friedrich Lobenstock
____________________________________________________________________
Friedrich Lobenstock         FL226-RIPE             Internetservices
URL: http://www.fl.priv.at/                     Email: fl...@fl...
____________________________________________________________________

Hi,

I have to choose a linux box to make a router. Devil linux seems perfect 
but i still have 2 questions:

Is it possible to limit bandwith?
Is it possible to make the box start from HD?

I check the documentation but coudn't find any thing about it.
Thank for help
Alexis Pellicier
Lyc=E9e Notre Dame de Sion
Ale...@nd...