Nabble - Endian Firewall

Re: Bridged VPN half working

2009-11-10T08:15:56Z

----- "compdoc" <compdoc@...> ha scritto:
> Try using not using a bridged connection and see if the
> problem goes away...

btw, how do I switch from bridget to routed? I couldn't find the option on the EFW 2.3 gui...

thanks
maxxer
--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Sarg in Endian 2.3

2009-11-09T09:07:02Z

Hi,
Actually, Mike Tremaine offers it, but it is for 2.0.
I've tried to run it in 2.2 and did not work.
I wonder if there is one for 2.3 or if the actual Mike offers this facility.
[]'s
Marco Aurelio

Roger Devaux escreveu:
> Hi,
> Did you figure out how to install and configure Sarg in Endian 2.3?
> I found a package for 2.0, but it doesn't seem to work:
> http://www.stellarcore.net/downloads/efw2-updates/sarg-2.2.5-1.endian1.i386.rpm
>
>

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

R: Bridged VPN half working

2009-11-09T07:25:07Z

----- Lorenzo Milesi <lorenzo.milesi@...> ha scritto:
> Hi.
> I've installed my first EFW today, and I love it already.
> But I'm having problems with OpenVPN.

for the record, it was a MSSFIX problem, covered in openvpn faq:
http://openvpn.net/index.php/open-source/faq.html
I can ping through the tunnel, but any real work causes it to lock up. Is this an MTU problem?

Probably. It's best to change the mssfix parameter rather than directly changing the MTU of the TUN/TAP adapter. For example:

mssfix 1200

--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Endian 2.3 - 500 Internal error when going to QoS management

2009-11-09T05:56:45Z

I just got this when I diod restore from efw 2.2
I did a backup because I can't remember all the firewall rules http proxy etc :(
should I just go back to 2.2 and use that efw-update?

Matt Hayes wrote:

500 Internal error

The server encountered an unexpected condition which prevented it from
fulfilling the request.

Anyone else getting this?

I've also noticed snortd eating up nearly 100% of the cpu

-Matt

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
Efw-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: OpenVPN clients using only certs

2009-11-06T14:11:11Z

Hello there!

Here is the how-to I used to do it:
http://www.efw-forum.de/www/forum/viewtopic.php?f=9&t=66

Since its in german I will do a translation, its based on using Endian
and having Windows clients. You can actually use any client you want as
long as you have the right certificates. I used a windows PC to create
them. Doing it on a linux box should be very similar

1. Install OpenVPN:
====================
Download and Install OpenVPN.

2. Using Easy-RSA:
=========================
easy-rsa helps in creating certificates

After installing OpenVPN you should have a folder called easy-rsa. Enter
it since a few configurations are needed there:

openssl.cnf.sample:
You need to add the folowing, otherwise there will be no nsCert
Certificate. Since Endian requires one, its a mandatory step.

Write the following code into openssl.cnf.sample, since this file is
always copied to openssl.cnf every time you execute the command
init-config.bat

--Code Start--
[ client ]
basicConstraints=CA:FALSE
nsCertType = client
nsComment = "OpenSSL Generated Client
Certificate"
--Code End--

3. Create the script to generate the Server and Client certificates:
================================================================
These two scripts are made in order to make it faster and easier to
create certificates. You can simply copy these scripts in the easy-rsa
directory. build-key-server-pkcs12.bat is used to create the server
certificate and build-key-client-pkcs12.bat is used to create the
certificates you will give to each of your clients

Creating build-key-server-pkcs12.bat

--Code Start--
@echo off
cd %HOME%
rem build a request for a cert that will be valid for ten years
openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out
%KEY_DIR%\%1.csr -config %KEY_CONFIG%
rem sign the cert request with our ca, creating a cert/key pair
openssl ca -days 3650 -out %KEY_DIR%\%1.crt -in %KEY_DIR%\%1.csr
-extensions server -config %KEY_CONFIG%
rem delete any .old files created in this process, to avoid future
file creation errors
del /q %KEY_DIR%\*.old
openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt
-certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12
rem delete any .old files created in this process, to avoid future
file creation errors
del /q %KEY_DIR%\*.old
--Code End--

Creating build-key-client-pkcs12.bat

--Code Start--
@echo off
cd %HOME%
rem build a request for a cert that will be valid for ten years
openssl req -days 3650 -nodes -new -keyout %KEY_DIR%\%1.key -out
%KEY_DIR%\%1.csr -config %KEY_CONFIG%
rem sign the cert request with our ca, creating a cert/key pair
openssl ca -extensions client -days 3650 -out %KEY_DIR%\%1.crt -in
%KEY_DIR%\%1.csr -config %KEY_CONFIG%
rem convert the key/cert and embed the ca cert into a pkcs12 file.
openssl pkcs12 -export -inkey %KEY_DIR%\%1.key -in %KEY_DIR%\%1.crt
-certfile %KEY_DIR%\ca.crt -out %KEY_DIR%\%1.p12
rem delete any .old files created in this process, to avoid future
file creation errors
del /q %KEY_DIR%\*.old
--Code End--

4. Generating the Keys:
====================
IMPORTANT: Every PC must have his own, individual client certificate,
otherwise you will have conflicts. At the same time, you will be able to
see inside Endian wich certificate is logged in and for how long.
You could use a naming policy like: endian.$subdomain.$domain.$tld for
the server and $domain-client01, $domain-client02... for the clients.
In this example the server will be called "endian" and the client will
be "client01".

FIRST TIME USE:
- open a cmd window and go to the easy-rsy folder
- execute init-config.bat
- Open vars.bat in an texteditor and enter your desired default
information for KEY_COUNTRY, KEY_PROVINCE, KEY_CITY, KEY_ORG und KEY_EMAIL
- execute vars.bat
- execute clean-all.bat
- execute build-ca.bat # accept all prompts with Enter
- execute build-dh.bat # accept all prompts with Enter
- execute build-key-server-plcs12.bat endian # accept all prompts with
Enter/y but under "Common Name" you must enter the server name, in our
example you type endian
- execute build-key-client-pkcs12.bat client01 # accept all prompts with
Enter/y but under "Common Name" you must enter the client name, the same
you entered while executing the command. In our example that is client01

5. Importing the servercertificate into Endian Firewall:
===============================================
- Weblogin on to Endian-Firewall
- VPN => OpenVPN Server => Advanced
- Change "Authentication settings" to "X.509 Zertifikat"
- Upload the created endian.p12 Zertifikat on to Endian (Import server
certificate from external Certification Authority (CA))

6. Create the client-config:
======================
You go to your client and enter the following .conf or .ovpn file in
your config Folder:

--Code Start--
client
dev tap
proto udp
remote (IP or hostname of the endian box)
resolv-retry infinite
nobind
persist-key
persist-tun
pkcs12 client01.p12
verb 3
comp-lzo
ns-cert-type server
--Code End--

Thats it! This is roughly the How-to made by devaux, I just translated
the most part here :-)

Here is my bit:

After you did all this you will have a /keys folder in the PC you
created the certificates. This folder contains ALL certificates made,
there you will find the endian.p12 and the client01.p12 files. Another
very very important file you will find there is the ca.crt. This file is
your certificate and whoever has this file can create more certificates
for your server. So make sure you keep this file save. From what I know,
you cannot recreate this file. If you loose it, you need to create new
pairs of server/client certificates.

Creating more client certificates at a later time:
--------------------------------------
Do NOT use all steps above when you want to create more client
certificates at some later time. All you need to do is have the original
ca.crt file in the /keys directory and then:
- execute vars.bat
- execute build-key-client-pkcs12.bat NAMEOFCLIENT

thats it!

Now I have a few questions too though. Does the use of the certificates
guarantee the identity of each client only or does it also encrypt the
data send?

Hope it helps you!

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Problems with OpenVPN from 2.2 to 2.3

2009-11-06T13:17:50Z

I've just encountered a new problem while switching from 2.2 to
2.3. The same config which worked perfect under 2.2 cause a
problem under 2.3. Now only the router is pingable, and the web
front end is available. But none IP from the network (same subnet
on green interface) is available. So what to do different in efw
2.3 to get openvpn access running?

Regards

Elmar

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

VMWare Tools for EFW 2.3?

2009-11-06T06:21:56Z

I'm using EFW 2.3 in a ESXi Enviroement. Performance is just
great but I still miss the VMWare Tools to have the heartbeat and
shutdown feature. Has somebody compiled the vmware tools and is
able to provide them?

Would be great!

Elmar

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Dial User in EFW 2.3

2009-11-06T06:20:20Z

First of all, thanks to Endian for the 2.3 Release. I had the
same problem as others, using a 2.2 Backup ends in messing up
EFW, so I configured completly new and everythings fine now.

But what's bad to me is that till release of 2.2 the user "dial"
could log into web front end, and was just able to
start/stop/reconnect the internet connection. In 2.3 it looks
like the dial user could not login via web frontend.

Is this a bug or a feature?! Due to dynamic ip, it was a good
tool for us here, so is there a way to make it, like it was in 2.2?

Regards

Elmar

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Antwort: Re: Antwort: Re: Antwort: Devel tools for driver compilation

2009-11-05T17:44:05Z

I have both windows and linux guests, and I have 2 efw firewalls running virtual for myself, and one as a vm for a customer.

I cant get the linux drivers installed on any of them for the same reason you cant, but I find the performance perfectly acceptable. My customer has about 40 users, and two permanent (more or less) remote users by openvpn. Runs great, alongside a win2003 Server vm that's used to share a volume for backups.

I dont think I said I experienced any bad performance. I just havent noticed any perfomnace gains using virtio drivers versus using the e1000 emulation.

And yes, centos 5.4 is kernel 2.6.18-164.6.1.el5. But the performance is better on it than my tests with xen or kvm on ubuntu, for example. And even though Fedora 11 has the newest kernel and kvm versions, VMs running on centos are more stable and the tools like the virtual machine manager work better.

Anyway, good luck to you. I'd like to hear if you find a way to get the drivers installed.

From forum: efw-user

Install SARG in Endian 2.3?

2009-11-05T11:18:39Z

Hi,

Is there any way to install SARG in Endian 2.3?

I need it, because the access reports are very functional.

[] 's
MA

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

OpenVPN clients using only certs

2009-11-05T10:51:47Z

Hi,

I'd like to have remote PCs (unattended computers) connect automatically to my Endian box using OpenVPN. I know there are builds of OpenVPN for Windows that let you save the password in a local text file but my preference would be to use client certificates. It seems that Endian supports X.509 certs but only from real CAs, not self-signed certs. Is there a way to create certs for each client and configure Endian with accounts for each remote PC? I'd like to be able to change or revoke certificates in case I want to refuse a connection from a particular system.

Any suggestions?

JS

From forum: efw-user

Antwort: Re: Antwort: Re: Antwort: Devel tools for driver compilation

2009-11-05T06:30:20Z

Do you talk of windows guest, as in your first mail?

For windows I do see (currently) no performance improvements. But for linux based guests, this is totally different. Furthermore the host kernel version needs to be a newer one to get any performance improvements. Is Centos 5.4 a 2.6.18 based kernel + red hat extensions? Pherhaps, this is the cause of your bad performance experience.

But to remember: I do want to compile/install the virtio drivers into my EFW box, not windows!

"compdoc" <compdoc@...>

05.11.2009 15:10

Bitte antworten an
efw-user@...

An	<efw-user@...>
Kopie
Thema	Re: [Efw-user] Antwort: Re: Antwort: Devel tools for driver compilation

I've set up a server with 8 gigs of ram, a 4TB volume raid 5, and a quad core cpu running Centos 5.4 and kvm, and have found the virtio drivers (storage and network) are not any faster than the emulated hardware.

For storage, I use lvm to carve up the 4TB volume and present the smaller partitions as a block devices, and get amazing speed with the ide emulation – I think even faster than using the virtio drivers.

One nice thing about cirtix's xenserver drivers is that they have the ability to tell the VMs to shutdown cleanly when the system is rebooting. KVM doesn’t yet have that ability, and the VMs are just powered off like pulling the power cord when I need to reboot the server.

Personally, I don’t think there is any advantage for virtio drivers yet, but I hear redhat is working on it...

------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july_______________________________________________ Efw-user mailing list Efw-user@... https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Antwort: Re: Antwort: Devel tools for driver compilation

2009-11-05T06:10:08Z

Personally, I don’t think there is any advantage for virtio drivers yet, but I hear redhat is working on it...

From forum: efw-user

Re: Bug in dhcp server reading Custom configuration lines with double quotes

2009-11-05T06:08:39Z

Forget it. This bug is already detected and solved:

http://bugs.endian.com/view.php?id=2190

Sorry

Alberto Iglesias escribió:

> Hi everybody
>
> I've found a bug with custom configuration lines in dhcpserver, if the
> option has double quotes. I was trying to add this option:
>
> option tftp-server-name "192.168.1.23";
>
> ... but when a click save all, dhcp server start fails. Entering in
> configuration files, I've found the problem. When efw save "Custom
> configuration lines" textarea data, in configuration file
> (/var/efw/dhcp/custom.tpl) is saves:
>
> option tftp-server-name "192.168.1.23";
>
> ... instead of...
>
> option tftp-server-name "192.168.1.23";
>
> ... so dhcpserver don't understand the line and can't start.
>
> I've been analyzing /home/httpd/cgi-bin/dhcp.cgi and I've been unable to
> find where the hell it makes the conversion from " to " (maybe in
> the POST data). Anyway, I have to admit that have no idea of perl, so
> maybe is just a stupid thing, but I can't find it.
>
> What I've done to solve it is to make a string substitution before data
> is written to the file, changing this (in /home/httpd/cgi-bin/dhcp.cgi)...
>
> $dhcpsettings{'CUSTOM_GLOBAL'} =~ s/\r//; # LINE 472
> write_file($custom_global_file, $dhcpsettings{'CUSTOM_GLOBAL'});
> $custom_global=$dhcpsettings{'CUSTOM_GLOBAL'};
> $dhcpsettings{'CUSTOM_GLOBAL'} = unset;
> &writehash("${swroot}/dhcp/settings", \%dhcpsettings);
> &buildconf;
>
> ...for this...
>
> $dhcpsettings{'CUSTOM_GLOBAL'} =~ s/\r//; # LINE 472
> $dhcpsettings{'CUSTOM_GLOBAL'} =~
> s/\"\;/\"/g; # This is the line that
> substitute " for ", so configuration file gets the right data.
> write_file($custom_global_file, $dhcpsettings{'CUSTOM_GLOBAL'});
> $custom_global=$dhcpsettings{'CUSTOM_GLOBAL'};
> $dhcpsettings{'CUSTOM_GLOBAL'} = unset;
> &writehash("${swroot}/dhcp/settings", \%dhcpsettings);
> &buildconf;
>
> It works, but I'm not sure if this is the best solution. I think it
> should be better if there's a way to avoid that original data of "Custom
> configuration lines" textarea was changed for html entities. In 2.2.
> version this didn't happen, and I've been compairing dhcp.cgi files of
> both version, but I can't find the issue.
>
> Well, here you have a solution and It would be good if anybody can't
> find the better way to correct this.
>
>
>

--

Alberto Iglesias
Gerente
aiglesias@...

-----------------------------------------------------------
ARCANOS INTERCOM S.L.
Centro de Empresas Camargo (local 211)
Polígono Industrial de Trascueto s/n
39600 Revilla de Camargo (Cantabria)

Tel: +34 942 072 801
Tel IP: 700 754 960
Fax: +34 942 072 802
@mail: arcanos@...
Web: http://www.arcanos.es

------------------------------------------------------------------------------------------------------------
Este e-mail y cualquiera de sus ficheros anexos son confidenciales y pueden
incluir información privilegiada. Si usted no es el destinatario adecuado
(o responsable de remitirlo a la persona indicada), agradeceríamos lo
notificase o reenviase inmediatamente al emisor. No revele estos contenidos a
ninguna otra persona, no los utilice para otra finalidad, ni almacene y, o,
copie esta información en medio alguno. Opiniones, conclusiones y otro tipo
de información relacionada con este mensaje que no sean relativas a la
actividad propia de ARCANOS INTERCOM S.L., deberán ser entendidas como
exclusivas del emisor.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Bridged VPN half working

2009-11-05T05:59:55Z

But what range is the remote user using for their home
network? If it's the same as 192.168.0.x, then they will
also have a gateway of 192.168.0.1 that would conflict with
yours.

Try using not using a bridged connection and see if the
problem goes away...

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Bridged VPN half working

2009-11-05T05:37:00Z

----- "compdoc" <compdoc@...> ha scritto:
> The problem with bridges is that when you use a network
> range that's as popular as 192.168.0.x, which is used by
> most home networks in the world, you're going to have ip
> address conflicts.
>
> When using VPNs, its best to use a range at work like
> 192.168.111.x or something you know will not likely have
> conflicts with your remote workers...

What should be the problem? I have a different network, locally!

thanks
maxxer
--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Antwort: Re: Antwort: Devel tools for driver compilation

2009-11-05T05:34:36Z

Hi Compdoc,

you're able to self sign the windows drivers(or install it with some super-admin install mode of Windows; don't exactly know the name). Search the linux-kvm.org page for the HowTo.

I do personally use the virtio drivers on my debian based guests an I do get noticeable better IO performance. The last non-virtio bastion is to be my EFW. And I expect it to be my performance bottleneck within my installation. So my intention is to get my EFW use the virtio drivers. But this need the EFW-Devel packages.

Any comments from the Endian team?

Thanks.

NicoP.

"compdoc" <compdoc@...>

05.11.2009 14:12

Bitte antworten an
efw-user@...

An	<efw-user@...>
Kopie
Thema	Re: [Efw-user] Antwort: Devel tools for driver compilation

I've found the virtio drivers are not mature, and cannot be installed on my Windows 7 x64 vm installation because they are not signed drivers.

I have found the kvm e1000 network card emulation works great however, so I use that.

From: Nico Prenzel [mailto:Nico.Prenzel@...]
Sent: Thursday, November 05, 2009 2:34 AM
To: efw-user@...
Subject: [Efw-user] Antwort: Devel tools for driver compilation

Hi,

I've the same problem. I've tried to compile the virtio drivers to get an acceptable performance if you install the EFW onto a KVM host.

So, I want to second the request to publish the devel packages.

Thanks.

NicoP.

------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july_______________________________________________ Efw-user mailing list Efw-user@... https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Bridged VPN half working

2009-11-05T05:18:08Z

The problem with bridges is that when you use a network
range that's as popular as 192.168.0.x, which is used by
most home networks in the world, you're going to have ip
address conflicts.

When using VPNs, its best to use a range at work like
192.168.111.x or something you know will not likely have
conflicts with your remote workers...

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: Antwort: Devel tools for driver compilation

2009-11-05T05:12:29Z

I've found the virtio drivers are not mature, and cannot be installed on my Windows 7 x64 vm installation because they are not signed drivers.

I have found the kvm e1000 network card emulation works great however, so I use that.

From: Nico Prenzel [mailto:Nico.Prenzel@...]
Sent: Thursday, November 05, 2009 2:34 AM
To: efw-user@...
Subject: [Efw-user] Antwort: Devel tools for driver compilation

From forum: efw-user

Re: HTTP antivirus (havp) not running

2009-11-05T03:53:52Z

Hi everybody,

please can you always specify if your problem comes after restoring a backup (and from which version)?
It would be really helpful.

I think this issue is related to one of these bugs:
http://bugs.endian.it/view.php?id=1804
http://bugs.endian.it/view.php?id=2299
http://bugs.endian.it/view.php?id=2300

Could you please update the bug status with yours information?
The havp.conf output would be useful.

Cheers,
Luca

> Date: Wed, 04 Nov 2009 15:28:22 -0200
> From: Marco Aurelio <maurelio@...>
> Subject: [Efw-user] HTTP antivirus (havp) not running
> To: efw-user@...
> Message-ID: <4AF1B9B6.1030400@...>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Hi,
>
> I installed version 2.3 but I have a problem.
>
> HTTP antivirus (havp) is not running and I can not start it.
>
> What can be?

--
:: e n d i a n
:: open source - open minds

:: luca giovenzana
:: phone +39 0471 631763 :: gpg key id 3B741128
:: http://www.endian.com :: luca (AT) endian.com

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

signature.asc (204 bytes) Download Attachment

From forum: efw-user

Re: Antwort: Devel tools for driver compilation

2009-11-05T03:49:45Z

Hi Nico:

I've noticed that analog issue it's on 2.2 version:

http://sourceforge.net/projects/efw/files/

http://sourceforge.net/projects/efw/files/Development/Endian%20Firewall%202.2/EFW-COMMUNITY-2.2-devel-srpms.tar.gz/download

I can download source RPMs but there no guide to build them.

So I've tried this - unsuccesfull for me - workaround. The kernel
version it's the same in 2.2 RC3 version and in the 2.2 stable version.

In the 2.2 RC3 you can get devel RPMs:

http://sourceforge.net/projects/efw/files/Development/Endian%20Firewall%202.2%20RC3/EFW-COMMUNITY-2.2-rc3-devel-rpms.tar.gz/download

You can install them in a 2.2 stable machine with "rpm -Uvh ". Now build
tools are available.

I've tried to compile the driver module but I've got errors. :-(

Maybe this procedure be suitable for you.

Inspired by this link:

http://howtoforge.org/install-vmware-tools-on-endian-firewall-community-2.2-rc3-on-esxi-3.5

Does anybody know any place in official documentation where build
process be descripted?

Is there any reason for this?

Bye.

Ángel

P.D: I found this

http://efwsupport.com/index.php?topic=1038.0

--
Ángel Lafuente Echeazarra
SOLID ROCK IT
Tu departamento de informática
http://www.solid-rock-it.com
e-mail: angellafuente@...
Teléfono: +34 945 10 18 04
Móvil: +34 670 32 02 55
Skype: Solid Rock IT: Angel Lafuente Echeazarra

Nico Prenzel escribió:

>
> Hi,
>
> I've the same problem. I've tried to compile the virtio drivers to
> get an acceptable performance if you install the EFW onto a KVM host.
>
> So, I want to second the request to publish the devel packages.
>
> Thanks.
>
> NicoP.
>
>
>
> *Ángel Lafuente Echeazarra <angellafuente@...>*
>
> 04.11.2009 17:41
> Bitte antworten an
> efw-user@...
>
>
>
> An
> efw-user@...
> Kopie
>
> Thema
> [Efw-user] Devel tools for driver compilation
>
>
>
>
>
>
>
>
>
> Hello everybody:
>
> I tried to install EFW 2.3 in a Dell Optiplex machine for test purposes.
>
> The machine has an Intel WG82567LM NIC that it's not supported in
> current kernel. The module is e1000e (not e1000).
>
> My problem is that there is no devel packages (make, gcc,
> kernel-headers, etc ) available for 2.3.
>
> Where can I get the, please?
>
> Thanks in advance.
>
> --
> Ángel Lafuente Echeazarra
> SOLID ROCK IT
> Tu departamento de informática
> http://www.solid-rock-it.com
> e-mail: angellafuente@...
> Teléfono: +34 945 10 18 04
> Móvil: +34 670 32 02 55
> Skype: Solid Rock IT: Angel Lafuente Echeazarra
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008
> 30-Day
> trial. Simplify your report design, integration and deployment - and
> focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> ------------------------------------------------------------------------
>
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

From forum: efw-user

Bridged VPN half working

2009-11-05T03:25:11Z

Hi.
I've installed my first EFW today, and I love it already.
But I'm having problems with OpenVPN.
I've configured a bridged VPN. The client connects fine, I can ping EFW and other machines on the remote lan, I can do ssh and other things, but as soon as traffic is above a certain rate the connection (web, ssh) drops.
I.e. I cannot open EFW admin interface: it asks me user/p, but as soon as I press enter I see a little activity and then stop.
If I do SSH, either on EFW or another machine, it works as long as the output is few lines. But if I do something like an ls -l of /var the connection get stuck after the first or the second line. In past I had similar problems due to mtu misconfiguration, but I double checked and everything seems ok.
Server config:

; daemon configuration
daemon
mode server
tls-server
proto udp
port 41194
multihome
user openvpn
group openvpn

cd /var/openvpn
client-config-dir clients

script-security 2 system

; tunnel configuration
dev tap0
server-bridge 192.168.0.1 255.255.255.0 192.168.0.101 192.168.0.110
push "route-gateway 192.168.0.1"

ptos
comp-lzo
management 127.0.0.1 5555
keepalive 8 30

tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

persist-key
persist-tun
persist-local-ip
persist-remote-ip

; logging and status
writepid /var/run/openvpn/openvpn.pid
ifconfig-pool-persist openvpn.leases
status /var/log/openvpn/openvpn-status.log
verb 1

client-connect "/usr/local/bin/dir.d-exec /etc/openvpn/client-connect.d/"
client-disconnect "/usr/local/bin/dir.d-exec /etc/openvpn/client-disconnect.d/"

; certificates and authentication
dh /var/efw/openvpn/dh1024.pem
pkcs12 /var/efw/openvpn/pkcs12.p12

client-cert-not-required
auth-user-p-verify "/usr/bin/openvpn-auth" via-file
username-as-common-name

client conf:

client
dev tap
proto udp
remote myremote 41194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/my.pem
auth-user-p /etc/openvpn/my_p.txt
comp-lzo
verb 3
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450

any help appreciated.
thanks

--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

R: Re: HTTP antivirus (havp) not running

2009-11-05T03:21:39Z

----- Marco Aurelio <maurelio@...> ha scritto:
> I looked at the path indicated by the log and saw that there is no
> default blacklist.
>
> I just created the empty file, I have the same permissions as other HAVP
> and started working.
>
> It would be interesting to know if it's a bug of version 2.3 or fond
> problem during installation.

it could be worth to make a search among open and closed issues for 2.3, and eventually file a new one, in case someone else run into the same problem!

you're welcome!
ciao
--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Bug in dhcp server reading Custom configuration lines with double quotes

2009-11-05T02:25:39Z

Hi everybody

I've found a bug with custom configuration lines in dhcpserver, if the
option has double quotes. I was trying to add this option:

option tftp-server-name "192.168.1.23";

... but when a click save all, dhcp server start fails. Entering in
configuration files, I've found the problem. When efw save "Custom
configuration lines" textarea data, in configuration file
(/var/efw/dhcp/custom.tpl) is saves:

option tftp-server-name "192.168.1.23";

... instead of...

option tftp-server-name "192.168.1.23";

... so dhcpserver don't understand the line and can't start.

I've been analyzing /home/httpd/cgi-bin/dhcp.cgi and I've been unable to
find where the hell it makes the conversion from " to " (maybe in
the POST data). Anyway, I have to admit that have no idea of perl, so
maybe is just a stupid thing, but I can't find it.

What I've done to solve it is to make a string substitution before data
is written to the file, changing this (in /home/httpd/cgi-bin/dhcp.cgi)...

$dhcpsettings{'CUSTOM_GLOBAL'} =~ s/\r//; # LINE 472
write_file($custom_global_file, $dhcpsettings{'CUSTOM_GLOBAL'});
$custom_global=$dhcpsettings{'CUSTOM_GLOBAL'};
$dhcpsettings{'CUSTOM_GLOBAL'} = unset;
&writehash("${swroot}/dhcp/settings", \%dhcpsettings);
&buildconf;

...for this...

$dhcpsettings{'CUSTOM_GLOBAL'} =~ s/\r//; # LINE 472
$dhcpsettings{'CUSTOM_GLOBAL'} =~
s/\"\;/\"/g; # This is the line that
substitute " for ", so configuration file gets the right data.
write_file($custom_global_file, $dhcpsettings{'CUSTOM_GLOBAL'});
$custom_global=$dhcpsettings{'CUSTOM_GLOBAL'};
$dhcpsettings{'CUSTOM_GLOBAL'} = unset;
&writehash("${swroot}/dhcp/settings", \%dhcpsettings);
&buildconf;

It works, but I'm not sure if this is the best solution. I think it
should be better if there's a way to avoid that original data of "Custom
configuration lines" textarea was changed for html entities. In 2.2.
version this didn't happen, and I've been compairing dhcp.cgi files of
both version, but I can't find the issue.

Well, here you have a solution and It would be good if anybody can't
find the better way to correct this.

--

Alberto Iglesias
Gerente
aiglesias@...

-----------------------------------------------------------
ARCANOS INTERCOM S.L.
Centro de Empresas Camargo (local 211)
Polígono Industrial de Trascueto s/n
39600 Revilla de Camargo (Cantabria)

Tel: +34 942 072 801 <http://www.snapanumber.com/>
Tel IP: 700 754 960
Fax: +34 942 072 802 <http://www.snapanumber.com/>
@mail: arcanos@...
Web: http://www.arcanos.es

------------------------------------------------------------------------------------------------------------
Este e-mail y cualquiera de sus ficheros anexos son confidenciales y pueden
incluir información privilegiada. Si usted no es el destinatario adecuado
(o responsable de remitirlo a la persona indicada), agradeceríamos lo
notificase o reenviase inmediatamente al emisor. No revele estos contenidos a
ninguna otra persona, no los utilice para otra finalidad, ni almacene y, o,
copie esta información en medio alguno. Opiniones, conclusiones y otro tipo
de información relacionada con este mensaje que no sean relativas a la
actividad propia de ARCANOS INTERCOM S.L., deberán ser entendidas como
exclusivas del emisor.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Antwort: Devel tools for driver compilation

2009-11-05T01:33:34Z

Ángel Lafuente Echeazarra <angellafuente@...>

04.11.2009 17:41

Bitte antworten an
efw-user@...

An	efw-user@...
Kopie
Thema	[Efw-user] Devel tools for driver compilation

Hello everybody: I tried to install EFW 2.3 in a Dell Optiplex machine for test purposes. The machine has an Intel WG82567LM NIC that it's not supported in current kernel. The module is e1000e (not e1000). My problem is that there is no devel packages (make, gcc, kernel-headers, etc ) available for 2.3. Where can I get the, please? Thanks in advance. -- Ángel Lafuente Echeazarra SOLID ROCK IT Tu departamento de informática http://www.solid-rock-it.com e-mail: angellafuente@... Teléfono: +34 945 10 18 04 Móvil: +34 670 32 02 55 Skype: Solid Rock IT: Angel Lafuente Echeazarra ------------------------------------------------------------------------------ Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day trial. Simplify your report design, integration and deployment - and focus on what you do best, core application coding. Discover what's new with Crystal Reports now. http://p.sf.net/sfu/bobj-july _______________________________________________ Efw-user mailing list Efw-user@... https://lists.sourceforge.net/lists/listinfo/efw-user

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: HTTP antivirus (havp) not running

2009-11-04T13:41:11Z

my endian stops havp when I change the default ports (8080).

2009/11/4 Marco Aurelio <maurelio@...>

Marco Aurelio escreveu:

> Lorenzo Milesi escreveu:
>
>> ----- "Marco Aurelio" <maurelio@...> ha scritto:
>>
>>
>>
>>> Hi,
>>>
>>> I installed version 2.3 but I have a problem.
>>>
>>> HTTP antivirus (havp) is not running and I can not start it.
>>>
>>> What can be?
>>>
>>>
>> you can give a check at log files...
>>
>> ciao
>> maxxer
>>
>>
>
> Hi Lorenzo,
>
> See what's in the log:
>
> The HAVP are unable to access the / etc / havp / blacklist.
>
> Nov 4 15:41:18 efw3 havp [14,183]: === Starting HAVP Version: 0.90
> Nov 4 15:41:18 efw3 havp [14,183]: Running as user: clamav, group: clamav
> Nov 4 15:41:18 efw3 havp [14,183]: Can not open URLlist: / etc / havp /
> blacklist
>
> You know what can be?
>
> Thanks
>
> Marco Aurelio
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Lorenzo,

I looked at the path indicated by the log and saw that there is no
default blacklist.

I just created the empty file, I have the same permissions as other HAVP
and started working.

It would be interesting to know if it's a bug of version 2.3 or fond
problem during installation.

Thanks for the advice to check the log.

Regards.

Marco Aurelio

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

--
Rafael Rodrigues de Oliveira
Jesus Christ's Blood Purifies Us of All Sin
Linux #357492 / FreeBSD #BSD051202
CISCO CCNA Loading .ılı..ılı.
http://lmgtfy.com/

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: HTTP antivirus (havp) not running

2009-11-04T11:52:21Z

Marco Aurelio escreveu:

> Lorenzo Milesi escreveu:
>
>> ----- "Marco Aurelio" <maurelio@...> ha scritto:
>>
>>
>>
>>> Hi,
>>>
>>> I installed version 2.3 but I have a problem.
>>>
>>> HTTP antivirus (havp) is not running and I can not start it.
>>>
>>> What can be?
>>>
>>>
>> you can give a check at log files...
>>
>> ciao
>> maxxer
>>
>>
>
> Hi Lorenzo,
>
> See what's in the log:
>
> The HAVP are unable to access the / etc / havp / blacklist.
>
> Nov 4 15:41:18 efw3 havp [14,183]: === Starting HAVP Version: 0.90
> Nov 4 15:41:18 efw3 havp [14,183]: Running as user: clamav, group: clamav
> Nov 4 15:41:18 efw3 havp [14,183]: Can not open URLlist: / etc / havp /
> blacklist
>
> You know what can be?
>
> Thanks
>
> Marco Aurelio
>
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now. http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

Lorenzo,

I looked at the path indicated by the log and saw that there is no
default blacklist.

I just created the empty file, I have the same permissions as other HAVP
and started working.

It would be interesting to know if it's a bug of version 2.3 or fond
problem during installation.

Thanks for the advice to check the log.

Regards.

Marco Aurelio

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: HTTP antivirus (havp) not running

2009-11-04T11:38:10Z

Lorenzo Milesi escreveu:

> ----- "Marco Aurelio" <maurelio@...> ha scritto:
>
>
>> Hi,
>>
>> I installed version 2.3 but I have a problem.
>>
>> HTTP antivirus (havp) is not running and I can not start it.
>>
>> What can be?
>>
>
> you can give a check at log files...
>
> ciao
> maxxer
>

Hi Lorenzo,

See what's in the log:

The HAVP are unable to access the / etc / havp / blacklist.

Nov 4 15:41:18 efw3 havp [14,183]: === Starting HAVP Version: 0.90
Nov 4 15:41:18 efw3 havp [14,183]: Running as user: clamav, group: clamav
Nov 4 15:41:18 efw3 havp [14,183]: Can not open URLlist: / etc / havp /
blacklist

You know what can be?

Thanks

Marco Aurelio

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Re: HTTP antivirus (havp) not running

2009-11-04T10:15:13Z

----- "Marco Aurelio" <maurelio@...> ha scritto:

> Hi,
>
> I installed version 2.3 but I have a problem.
>
> HTTP antivirus (havp) is not running and I can not start it.
>
> What can be?

you can give a check at log files...

ciao
maxxer
--
Lorenzo Milesi - lorenzo.milesi@...

YetOpen S.r.l. - http://www.yetopen.it/
Via Previati 72 - 23900 Lecco - ITALY -
Tel 0341 220 205 - Fax 178 607 8199

GPG/PGP Key-Id: 0xE704E230 - http://keyserver.linux.it

-------- D.Lgs. 196/2003 --------

Si avverte che tutte le informazioni contenute in questo messaggio sono
riservate ed a uso esclusivo del destinatario. Nel caso in cui questo
messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo
senza copiarlo, a non inoltrarlo a terzi e ad avvertirci non appena
possibile.
Grazie.

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

HTTP antivirus (havp) not running

2009-11-04T09:28:22Z

Hi,

I installed version 2.3 but I have a problem.

HTTP antivirus (havp) is not running and I can not start it.

What can be?

Regards,

Marco Aurelio

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Devel tools for driver compilation

2009-11-04T08:41:59Z

From forum: efw-user

Update services to latest version

2009-10-31T02:34:54Z

Hello Community,

How to update openssh or any service to latest version on endian firewall?

I want to update services for intrusion prevention hacker's.

Could any one help me on this!

From forum: efw-user

Time of day routing

2009-10-30T12:46:47Z

Hi all,

We have setup endian firewall with two wan connections. There is a
requirement to route traffic from certain ips over a fast link between
certain hours and there after root all traffic over slower, cheaper,
links. I have added the following to the
/var/efw/inithooks/rc.local.firewall script.

----------------
case "$1" in
start)
iptables -t mangle -I PREROUTING 1 -m time --timestart 07:30
--timestop 20:30 --days Mon,Tue,Wed,Thu,Fri -s 192.168.1.0/24 -j
MARK --set-mark 4
iptables -t mangle -I PREROUTING 1 -m time --timestart 07:30
--timestop 14:30 --days Mon,Tue,Wed,Thu,Fri -s 192.168.12.0/24 -j
MARK --set-mark 4
;;
stop)
echo "Removing custom, time based, iptables rules for routing
traffic over wimax"
iptables -t mangle -D PREROUTING 1
iptables -t mangle -D PREROUTING 2

;;
reload)
## add your 'reload' rules here
;;
*)
echo "Usage: $0 {start|reload|stop}"
esac

---------------------

We then added the following to /var/efw/start.local

#!/bin/sh
ip route add table 4 default via xx.xx.xx.xx
#(xx.xx.xx.xx is the ip of a uplinks default gateway)
ip rule add fwmark 4 table 4
exit 0

However although we see the stat counter on the iptables ruls increasing
and can log the hits on the rules the routing does not appear to have any
effect.

What is wrong? Any ideas?

thanks

Mark

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Jumping bean your java and linux experts
Cyber Connect - ADSL,3g,HSDPA,iBurst
VOIP, IP-PBX specialists
On Site IT Support

From forum: efw-user

Re: Endian 2.3 - 500 Internal error when going to QoS management

2009-10-30T10:17:16Z

> I assume this is after restore of 2.2 to new install of 2.3. if so, had
> the
> same problem last night - what I thought to be an hours work kept me busy
> till
> after midnight. Needed to manually re-enter all settings.
>
> This probably doesn't help much.
>
> WR
>
>
>
>
> On Thursday 29 October 2009 2:44:44 pm Matt Hayes wrote:
>> 500 Internal error
>>
>> The server encountered an unexpected condition which prevented it from
>> fulfilling the request.
>>
>>

WR,

No, I did a fresh install and did all settings from scratch.

-Matt

>>
>> Anyone else getting this?
>>
>> I've also noticed snortd eating up nearly 100% of the cpu
>>
>> -Matt
>>
>> ---------------------------------------------------------------------------
>>--- Come build with us! The BlackBerry(R) Developer Conference in SF, CA
>> is
>> the only developer event you need to attend this year. Jumpstart your
>> developing skills, take BlackBerry mobile applications to market and
>> stay
>> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
>> http://p.sf.net/sfu/devconference
>> _______________________________________________
>> Efw-user mailing list
>> Efw-user@...
>> https://lists.sourceforge.net/lists/listinfo/efw-user
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference_______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

From forum: efw-user

Bacula backup client

2009-10-30T08:43:06Z

I wish to install Bacula on this system, so that I can back it up along with all my other Linux based systems. Is this a possibility?

---

Kind Regards,

Mr Gabriel

From forum: efw-user