Nabble - LEAF - Linux Embedded Appliance Firewall

Re: Bering-uClibc 2.2.1 IP Alias Configuration Question

2009-11-05T23:20:08Z

Hi

Robert Harrison wrote:

> I've run my firewall with this software for several years. Recently
> changed ISP and in the confusion something went wrong that I can't
> figure out. The firewall is supposed to send web browser requests and
> ssh requests to a computer on the local net. The Apache server is
> configured using virtualhost to provide results based on one of
> several domain name all of which resolve to the same ip address
> 173.x.x.180. However, the virtualhost configuration is only read if a
> wild card is given for the ip address or the computer's local ip
> address (192.168.1.120)! Other sites which should be served based on
> their IP address alone are not seen at all. It seems to me that the
> HTTP request is being rewritten to contain the local destination
> (192.168.1.120) rather than the originating address (173.x.x.180).
> Configuration information is given below. I'd appreciate any advice
> on how to proceed.

Maybe proxy-arp will help, this would mimic the desired behaviour, but
then you will have to assign the public addresses to the server on the
internal network. See http://www.shorewall.net/ProxyARP.htm

cheers

Erich

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Bering-uClibc 2.2.1 IP Alias Configuration Question

2009-11-05T14:01:54Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert Harrison wrote:

> Thanks for the quick reply but I'm not sure I understand. Here is the
> Shorewall "rules" file:
> #
> # Shorewall version 2.0 - Rules File
> # /etc/shorewall/rules
> # Accept all http and ssh connections to anneMC
> DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.178
> DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.179
> DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.180
> DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.181
> DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.182

<snip>

> I thought the purpose of the "Original Destination" in the DNAT rule
> was to pass the IP address used to access the website. Could you tell
> me what is wrong with this (rules) setup?

You are routing traffic from all of your original destinations to the
same final destination. Since they all point to the same internal IP
address, apache on your internal system has no way to tell which IP they
were originally sent to on the firewall. You need to change the
internal IP address on each rule, and add more IPs to your internal
apache box, something like:

DNAT net loc:192.168.1.120 tcp http,https,ssh - 173.x.x.178
DNAT net loc:192.168.1.121 tcp http,https,ssh - 173.x.x.179
DNAT net loc:192.168.1.122 tcp http,https,ssh - 173.x.x.180
DNAT net loc:192.168.1.123 tcp http,https,ssh - 173.x.x.181
DNAT net loc:192.168.1.124 tcp http,https,ssh - 173.x.x.182

...then you can use the unique internal IP addresses in your apache
configuration to do IP based virtual hosting.

- --
Charles Steinkuehler
charles@...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFK80tSLywbqEHdNFwRAoGbAJ44lSk21d5KcCO/2U2eLMXBvVz5PwCfT+6o
L9juZ80HsqwQoQ9gN+3mUog=
=nEGp
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Bering-uClibc 2.2.1 IP Alias Configuration Question

2009-11-05T12:03:52Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Robert Harrison wrote:

Based on your rules, it looks like you have assigned all of the IP
addresses to your firewall, and are port-forwarding the desired traffic
to the internal system(s). This should work, but you did not include
any real details on your port-forwarding setup (/etc/shorewall/rules) or
how your apache is configured.

Note that when the traffic is port-forwarded from the various IP
addresses on the firewall, the destination address *WILL* get
re-written. If you want to use IP based virtual hosting, you will need
to assign multiple IP addresses on the internal system, and port-forward
each public IP on the firewall to an appropriate IP address on the
internal system. Otherwise, apache will have no idea which IP address
the original request was sent to.

If you don't want to use IP addresses, you could do a similar thing with
ports on the internal apache system, forwarding each external public IP
to a unique port number on the internal system.

- --
Charles Steinkuehler
charles@...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFK8y+oLywbqEHdNFwRAkPbAJ9kUA56uRlrJ8KfwVxTJi219I1iAwCeN04y
KH+zxJbCyvxlkRDB/TQUpmk=
=hxLP
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Bering-uClibc 2.2.1 IP Alias Configuration Question

2009-11-05T09:54:11Z

I've run my firewall with this software for several years. Recently
changed ISP and in the confusion something went wrong that I can't
figure out. The firewall is supposed to send web browser requests and
ssh requests to a computer on the local net. The Apache server is
configured using virtualhost to provide results based on one of
several domain name all of which resolve to the same ip address
173.x.x.180. However, the virtualhost configuration is only read if a
wild card is given for the ip address or the computer's local ip
address (192.168.1.120)! Other sites which should be served based on
their IP address alone are not seen at all. It seems to me that the
HTTP request is being rewritten to contain the local destination
(192.168.1.120) rather than the originating address (173.x.x.180).
Configuration information is given below. I'd appreciate any advice
on how to proceed.

Results from "ip addr"
1: lo: <LOOPBACK,UP> mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
2: dummy0: <BROADCAST,NOARP> mtu 1500 qdisc noop
link/ether 00:00:00:00:00:00 brd ff:ff:ff:ff:ff:ff
3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:50:bf:1c:57:f2 brd ff:ff:ff:ff:ff:ff
inet 173.x.x.180/29 brd 173.x.x.255 scope global eth0
inet 173.x.x.178/29 brd 173.x.x.255 scope global secondary eth0:0
inet 173.x.x.179/29 brd 173.x.x.255 scope global secondary eth0:1
inet 173.x.x.181/29 brd 173.x.x.255 scope global secondary eth0:2
inet 173.x.x.182/29 brd 173.x.x.255 scope global secondary eth0:3
4: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:14:6c:76:1c:56 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.254/24 scope global eth1

Results from "ip route"
173.x.x.176/29 dev eth0 proto kernel scope link src 173.x.x.180
192.168.1.0/24 dev eth1 proto kernel scope link src 192.168.1.254
default via 173.x.x.177 dev eth0

Selected Results from "shorewall show"
Shorewall-2.09 Chain at issacA - Thu Nov 5 18:43:53 UTC 2009

Chain eth0_fwd (1 references)
pkts bytes target prot opt in out source destination
879 501K dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
19 1068 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
19 1068 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
878 501K tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
879 501K net2loc all -- * eth1 0.0.0.0/0 0.0.0.0/0

Chain eth0_in (1 references)
pkts bytes target prot opt in out source destination
369 68491 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
5 240 smurfs all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
5 240 norfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 state NEW
5 240 tcpflags tcp -- * * 0.0.0.0/0 0.0.0.0/0
369 68491 net2fw all -- * * 0.0.0.0/0 0.0.0.0/0

Chain eth1_fwd (1 references)
pkts bytes target prot opt in out source destination
945 173K dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
945 173K loc2net all -- * eth0 0.0.0.0/0 0.0.0.0/0

Chain eth1_in (1 references)
pkts bytes target prot opt in out source destination
385 25807 dynamic all -- * * 0.0.0.0/0 0.0.0.0/0
385 25807 loc2fw all -- * * 0.0.0.0/0 0.0.0.0/0

Chain net2all (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
5 240 Drop all -- * * 0.0.0.0/0 0.0.0.0/0
0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1
prefix `Shorewall:net2all:DROP:' queue_threshold 1
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain net2fw (1 references)
pkts bytes target prot opt in out source destination
364 68251 ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmp type 8
5 240 net2all all -- * * 0.0.0.0/0 0.0.0.0/0

Chain net2loc (1 references)
pkts bytes target prot opt in out source destination
860 500K ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
1 48 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 multiport dports
80,443,22 ctorigdst 173.x.x.178
1 48 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 multiport dports
80,443,22 ctorigdst 173.x.x.179
9 544 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 multiport dports
80,443,22 ctorigdst 173.x.x.180
3 176 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 multiport dports
80,443,22 ctorigdst 173.x.x.181
1 48 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 multiport dports
80,443,22 ctorigdst 173.x.x.182
4 204 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 tcp dpt:25
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.1.120 tcp dpt:25
0 0 net2all all -- * * 0.0.0.0/0 0.0.0.0/0

Chain norfc1918 (2 references)
pkts bytes target prot opt in out source destination
0 0 rfc1918 all -- * * 172.16.0.0/12 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 172.16.0.0/12
0 0 rfc1918 all -- * * 192.168.0.0/16 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 192.168.0.0/16
0 0 rfc1918 all -- * * 10.0.0.0/8 0.0.0.0/0
0 0 rfc1918 all -- * * 0.0.0.0/0 0.0.0.0/0 ctorigdst 10.0.0.0/8

Chain reject (11 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = broadcast
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 PKTTYPE = multicast
0 0 DROP all -- * * 173.x.x.255 0.0.0.0/0
0 0 DROP all -- * * 192.168.1.255 0.0.0.0/0
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with tcp-reset
0 0 REJECT udp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
0 0 REJECT icmp -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-unreachable
0 0 REJECT all -- * * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-prohibited

Chain rfc1918 (6 references)
pkts bytes target prot opt in out source destination
0 0 ULOG all -- * * 0.0.0.0/0 0.0.0.0/0 ULOG copy_range 0 nlgroup 1
prefix `Shorewall:rfc1918:DROP:' queue_threshold 1
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0

Chain smurfs (2 references)
pkts bytes target prot opt in out source destination
0 0 ULOG all -- * * 173.x.x.255 0.0.0.0/0 ULOG copy_range 0 nlgroup 1
prefix `Shorewall:smurfs:DROP:' queue_threshold 1
0 0 DROP all -- * * 173.x.x.255 0.0.0.0/0
0 0 ULOG all -- * * 192.168.1.255 0.0.0.0/0 ULOG copy_range 0 nlgroup
1 prefix `Shorewall:smurfs:DROP:' queue_threshold 1
0 0 DROP all -- * * 192.168.1.255 0.0.0.0/0
0 0 ULOG all -- * * 255.255.255.255 0.0.0.0/0 ULOG copy_range 0
nlgroup 1 prefix `Shorewall:smurfs:DROP:' queue_threshold 1
0 0 DROP all -- * * 255.255.255.255 0.0.0.0/0
0 0 ULOG all -- * * 224.0.0.0/4 0.0.0.0/0 ULOG copy_range 0 nlgroup 1
prefix `Shorewall:smurfs:DROP:' queue_threshold 1
0 0 DROP all -- * * 224.0.0.0/4 0.0.0.0/0

Chain tcpflags (2 references)
pkts bytes target prot opt in out source destination
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x29
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x3F/0x00
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x06
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x03/0x03
0 0 logflags tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp spt:0 flags:0x16/0x02

Thanks,
Bob

"In theory there is no difference between theory and practice. In
practice there is."
Yogi Berra

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Debugging Tools for Bering-uClibc v3

2009-10-25T05:17:29Z

Hi,

I'm just wondering what debugging tools most LEAF developers use and
whether anyone has had success with gdb or gdbserver?

Some of the applications I have tried to port to Bering-uClibc v3
compile OK but then crash when running on the Bering-uClibc machine.

On other platforms I would use something like gdb to work out what the
problem is, so maybe that's an option here too? If space is an issue
there's the very small "gdbserver" which runs on the embedded device
with the rest of gdb running elsewhere, communicating via an RS-232 or
TCP/IP connection.

davidMbrooke

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

Re: Has anyone tried compiling the Wi-Spy Spectrum-Tools for Bering-uClibc 3?

2009-10-25T05:06:48Z

On Fri, 2009-10-09 at 19:03 +0100, davidMbrooke wrote:

> Hi,
>
> I've just bought a Wi-Spy 2.4i spectrum analyzer from MetaGeek:
> http://www.metageek.net/products/wi-spy-24i
>
> The mainstream GUI packages support Windows and Mac OS X but there is
> also some software for Linux, from the same people who wrote Kismet.
> This Linux software is called "Spectrum-Tools", spectools for short:
> http://www.kismetwireless.net/spectools/
>
> I know there's a Kismet package for Bering-uClibc so I'm hopeful that it
> will be possible to get Spectrum-Tools working too. One key dependency
> is libusb, but there's already a package for that.
>
> Has anyone tried this already? If not I'll see if I can get it to work
> myself. Clearly the GTK GUI will not work, but there's a curses UI, and
> a network server daemon which a remote GUI can connect to.
>
> davidMbrooke
>

So I guess that's a "no" - i.e. nobody else has tried this already.

I successfully got the code to compile with no problems at all.

Running it is a different matter; the code identifies the device but
then fails to establish USB communications. There's a call to
pthread_create() and the USB connection attempt is immediately after
that, which may be a coincidence or it may point to a problem with
pthread_create() in uClibc (there are some reports of issues in other
mailing lists).

I will investigate further when I have more time.

davidMbrooke

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

Re: Read/Write to USB stick when using the 3.1 CD image

2009-10-24T07:58:08Z

Thanks, Fred, for the instructions. Some questions:

1. I presume I have to rebuild the CD image to use the usb initrd since
I have an Intel board?
2. I don't see an isolinux.cfg on the 3.1 CD. There is a syslinux.cfg so
I guess that's the equivalent to isolinux.cfg?
3. Did you have to rebuild the bootdisk.ima?

Thanks,
Stephen
On Sat, 2009-10-24 at 08:46 -0500, Frederick Stevens wrote:

> Hello,
>
> First, make sure that you have loaded the proper usb kernel modules
> for your system in your initrd. I have a router that has OHCI usb
> root hubs on the motherboard and the stock initrd with the Bering CD
> image would not work since most intel systems have UHCI root hubs.
> Once you have the modules loading at boot, then do something like this
> to your leaf.cfg on the usb device that you created with the bering
> packages on it:
>
> # The first entry is the backup device.
> # If equal packages exist on multiple devices, the ones on the left most device
> PKGPATH="/dev/sda1:msdos"
>
> Also, on the bootable CD have your isolinux.cfg configured like this:
>
> display syslinux.dpy
> timeout 0
> append reboot=bios
> default linux initrd=initrd.lrp init=/linuxrc rw root=/dev/ram0
> LEAFCFG=/dev/sda1:msdos
>
> The last line above is all one line by the way. It's been a while
> since I set this up but I think that this is mostly what is needed to
> make it work. I have two systems like this that I maintain and they
> both work well. One has OHCI usb and the other has UHCI usb.
>
> Take Care & Good Luck,
>
> Fred Stevens
>
> On 10/23/09, Stephen Lee <splee@...> wrote:
> > Hi,
> >
> > I'm trying to save the config info onto a usb stick and be able to ready
> > it during boot up from a CD. How do I do this when booting from
> > Bering-uClibc_3.1_iso_bering-uclibc-iso.bin? Normally I would make a
> > bootable usb usb stick using the 3.1 usb image but I've got some PIII
> > boxes that can't boot from usb. Is there a document explaining this type
> > of setup?
> >
> > Thanks,
> > Stephen
> > ------------------------------------------------------------------------------
> > Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> > is the only developer event you need to attend this year. Jumpstart your
> > developing skills, take BlackBerry mobile applications to market and stay
> > ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> > http://p.sf.net/sfu/devconference
> > ------------------------------------------------------------------------
> > leaf-user mailing list: leaf-user@...
> > https://lists.sourceforge.net/lists/listinfo/leaf-user
> > Support Request -- http://leaf-project.org/
> >
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Read/Write to USB stick when using the 3.1 CD image

2009-10-24T06:46:17Z

Hello,

First, make sure that you have loaded the proper usb kernel modules
for your system in your initrd. I have a router that has OHCI usb
root hubs on the motherboard and the stock initrd with the Bering CD
image would not work since most intel systems have UHCI root hubs.
Once you have the modules loading at boot, then do something like this
to your leaf.cfg on the usb device that you created with the bering
packages on it:

# The first entry is the backup device.
# If equal packages exist on multiple devices, the ones on the left most device
PKGPATH="/dev/sda1:msdos"

Also, on the bootable CD have your isolinux.cfg configured like this:

display syslinux.dpy
timeout 0
append reboot=bios
default linux initrd=initrd.lrp init=/linuxrc rw root=/dev/ram0
LEAFCFG=/dev/sda1:msdos

The last line above is all one line by the way. It's been a while
since I set this up but I think that this is mostly what is needed to
make it work. I have two systems like this that I maintain and they
both work well. One has OHCI usb and the other has UHCI usb.

Take Care & Good Luck,

Fred Stevens

On 10/23/09, Stephen Lee <splee@...> wrote:

> Hi,
>
> I'm trying to save the config info onto a usb stick and be able to ready
> it during boot up from a CD. How do I do this when booting from
> Bering-uClibc_3.1_iso_bering-uclibc-iso.bin? Normally I would make a
> bootable usb usb stick using the 3.1 usb image but I've got some PIII
> boxes that can't boot from usb. Is there a document explaining this type
> of setup?
>
> Thanks,
> Stephen
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry(R) Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9 - 12, 2009. Register now!
> http://p.sf.net/sfu/devconference
> ------------------------------------------------------------------------
> leaf-user mailing list: leaf-user@...
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
>

From forum: leaf-user

Read/Write to USB stick when using the 3.1 CD image

2009-10-23T19:41:22Z

Hi,

I'm trying to save the config info onto a usb stick and be able to ready
it during boot up from a CD. How do I do this when booting from
Bering-uClibc_3.1_iso_bering-uclibc-iso.bin? Normally I would make a
bootable usb usb stick using the 3.1 usb image but I've got some PIII
boxes that can't boot from usb. Is there a document explaining this type
of setup?

Thanks,
Stephen
------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Docs for the 2 NIC config

2009-10-13T13:27:04Z

Paul Rogers wrote:

>> I _believe_ the script should not take more than a few hundred
>> bytes as you need those utilities anyway. I think modutils is the
>> place to do it
>
> We had a Senator who famously said, "A billion here, a billion there,
> pretty soon you're talking real money." All I think we need is that
> the assignments be reliable, and the way it works be documented
> rather than arcane knowledge some people might not know. It could be
> "fixed" with a few sentences in the installation manual. (By someone
> that knows it, which obviously isn't me!)

Wrong, you are now

cheers

Erich

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Docs for the 2 NIC config

2009-10-13T09:51:38Z

> I _believe_ the script should not take more than a few hundred
> bytes as you need those utilities anyway. I think modutils is the
> place to do it

We had a Senator who famously said, "A billion here, a billion there,
pretty soon you're talking real money." All I think we need is that
the assignments be reliable, and the way it works be documented
rather than arcane knowledge some people might not know. It could be
"fixed" with a few sentences in the installation manual. (By someone
that knows it, which obviously isn't me!)
--
Paul Rogers
paulgrogers@...
http://www.xprt.net/~pgrogers/
Rogers' Second Law: "Everything you do communicates."
(I do not personally endorse any additions after this line. TANSTAAFL :-)

--
http://www.fastmail.fm - Or how I learned to stop worrying and
love email again

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Docs for the 2 NIC config

2009-10-13T07:18:12Z

Charles

Charles Steinkuehler wrote:
...
>
> The problem is most of the time if you have multiple NICs, they use the
> same chipset. That means the ethX order is determined by the device
> driver, not by the module load order, and the device drivers have no
> standardized way of indicating which physical interface is "first".

Implemented as specified...

>
> So...either something has to talk to the kernel the way modprobe, udev,
> etc. manage to do, or a different approach is needed (perhaps using MAC
> addresses or logical names to identify the interfaces instead of ethX).
>

How would a logical name survive a reboot? I guess the only fixed
identification would be the mac address.

cheers

Erich

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: [leaf-devel] Docs for the 2 NIC config

2009-10-13T05:07:53Z

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Erich Titl wrote:

> Actually it might not be that difficult to mimic the alias in Bering
> uClibc. We have the ip link command which allows us to assign whaever
> name we want to a specific NIC
>
> [root@tristan]# ip link set dev eth0 name inside
> [root@tristan]# ip link show dev inside
> 2: inside: <BROADCAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
> link/ether 00:80:c8:f8:4a:51 brd ff:ff:ff:ff:ff:ff
>
> All that is left now is to determine which NIC will get which name,
> which is not that obvious when you take the above snippet into
> consideration.
>
> What you can do is read the /etc/modules file for alias ethx lines, sort
> them and then load the drivers in that order, preferrably after all
> dependencies have been resolved :-)

The problem is most of the time if you have multiple NICs, they use the
same chipset. That means the ethX order is determined by the device
driver, not by the module load order, and the device drivers have no
standardized way of indicating which physical interface is "first".

So...either something has to talk to the kernel the way modprobe, udev,
etc. manage to do, or a different approach is needed (perhaps using MAC
addresses or logical names to identify the interfaces instead of ethX).

- --
Charles Steinkuehler
charles@...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFK1G2ZLywbqEHdNFwRAn+BAKDZa+bl8pxQ/ZkWgl7oe9UGSWyYIgCfZaS0
1FVfdiWZZRq2cnBS2+5h7VM=
=rVbg
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: [leaf-devel] Docs for the 2 NIC config

2009-10-12T23:52:20Z

Paul Rogers wrote:
> On Mon, 12 Oct 2009 22:15:15 +0200, "Erich Titl"
...
>
> And STILL get it all on one floppy? ;-) I'm one of the ones that has
> always been in favor of maintaining floppy compatability for a basic
> setup. As long as the behavior is documented where an installer is sure
> to see it, then I'm in favor of using the far simpler default behavior.

I _believe_ the script should not take more than a few hundred bytes as
you need those utilities anyway. I think modutils is the place to do it

# Loop over every line in /etc/modules.
echo 'Loading modules: '
(cat /etc/modules; echo) | # make sure there is a LF at the end
while read module args
do
case "$module" in
\#*|"") continue ;;
esac
echo -n "$module - "
MODTOLOAD=`find / -name $module.o |sort |sed -n 1p`
if [ "$MODTOLOAD" = "" ] ;then
module="` echo $module | cut -c-8`"
MODTOLOAD=`find / -name $module.o |sort |sed -n 1p `
fi
if [ ! "$MODTOLOAD" = "" ] ;then
insmod $MODTOLOAD $args
fi
# insmod /lib/modules/"$module".o $args
done

cheers

Erich

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: [leaf-devel] Docs for the 2 NIC config

2009-10-12T23:36:11Z

Paul

I move this to leaf users as I believe it is of general interest.

Paul Rogers wrote:

> On Mon, 12 Oct 2009 10:10:24 +0200, "Erich Titl"
> <erich.titl@...> said:
>
> Quite so. That's esentially what I found out from a message reply by
> Charles re Dachstein in searching the message base. Thing is, I've been
> running Linux for over 5 years. In the versions of modutils I use,
> derived from LFS, such things can be assigned by "alias eth1 3c59x" for
> example. I never ran across the "default case" before and didn't know
> it. If one HASN'T run across this before, then one needs to know it,
> since Bering doesn't seem to use aliases in its /etc/modules file. (MY
> firewall uses a modem, and Bering-1.2, because dialup is all I can
> afford.) I'm just suggesting that a few sentences like you wrote in the
> documentation would have been a big help, because I was stuck!

Oh I see, well I suppose you could look into the way the network gets
initialized. Basically the loading of the network drivers automagically
creates devices. MOdprobe does the aliasing for you, but it is not
implemented in LEAF.

I found this interesting snippet

>>>>>>>>>>>>>
The first thing you need in your modules.conf file is something to tell
modprobe what driver to use for the eth0 (and eth1 and...) network
interface. You use the alias command for this. For example, if you have
an ISA SMC EtherEZ card which uses the smc-ultra.o driver module, you
need to alias this driver to eth0 by adding the line:

alias eth0 smc-ultra

Important Note: The alias above is only used by the module utilities to
translate a generic device name (e.g.eth0) into a hardware specific
driver module name. When the driver loads, it never even sees this
alias; instead it will simply choose the first free ethN (N=0,1,2,...)
device name available. Thus, if more than one ethernet module is being
loaded, the ethN assigned to the driver by the kernel may or may not be
the same as the one given on the alias line,
>>>>>>>>>>>>>>>

So you may never have seen this, because you never had multiple
instances of the same card in your other *x systems.

Actually it might not be that difficult to mimic the alias in Bering
uClibc. We have the ip link command which allows us to assign whaever
name we want to a specific NIC

[root@tristan]# ip link set dev eth0 name inside
[root@tristan]# ip link show dev inside
2: inside: <BROADCAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:80:c8:f8:4a:51 brd ff:ff:ff:ff:ff:ff

All that is left now is to determine which NIC will get which name,
which is not that obvious when you take the above snippet into
consideration.

What you can do is read the /etc/modules file for alias ethx lines, sort
them and then load the drivers in that order, preferrably after all
dependencies have been resolved :-)

cheers

Erich

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Docs for the 2 NIC config

2009-10-12T08:29:59Z

On Mon, 12 Oct 2009 10:10:24 +0200, "Erich Titl"
<erich.titl@...> said:
> What exactly are you referring to? The 2 NIC setup is probably the
> standard and the only thing I can think of is the assignment of ethXX
> to a specific NIC. This is not a Bering issue but just the way Linux
> addresses its hardware (it can be overridden later afaik). With NICs
> this is typically determined by the sequence of driver loading, e.g.
> if you have the e1000 driver before the e100 driver in you
> /etc/modules file and you have both nic types in your platform, then
> the e1000 will have a lower ethnn number. AFAIK within the same driver
> the sequence is determined by the mac address of the NIC.

Quite so. That's esentially what I found out from a message reply by
Charles re Dachstein in searching the message base. Thing is, I've been
running Linux for over 5 years. In the versions of modutils I use,
derived from LFS, such things can be assigned by "alias eth1 3c59x" for
example. I never ran across the "default case" before and didn't know
it. If one HASN'T run across this before, then one needs to know it,
since Bering doesn't seem to use aliases in its /etc/modules file. (MY
firewall uses a modem, and Bering-1.2, because dialup is all I can
afford.) I'm just suggesting that a few sentences like you wrote in the
documentation would have been a big help, because I was stuck!
--
Paul Rogers
paulgrogers@...
http://www.xprt.net/~pgrogers/
Rogers' Second Law: "Everything you do communicates."
(I do not personally endorse any additions after this line. TANSTAAFL :-)

--
http://www.fastmail.fm - Or how I learned to stop worrying and
love email again

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

IPV6

2009-10-11T20:14:55Z

Hi folks,

I'm running out of hair to pull trying to get IPV6 working on my beta 3.1.1
Leaf box. I've set everything up as it would seem should be setup and yet, no
go. I've used freenet6.lrp to acquire a /56 prefix which works flawlessly. I
can ping6 any IPV6 host out there from the Leaf box ONLY! I have a subnet
assigned to eth0, my lan, with proper routes and addresses including a correct
default route. I've also setup radvd to annouce on eth0 and all the local
hosts do indeed get automagically configured and can ping6 each other and the
Leaf box, but nothing beyond. I've obviously setup forwarding, shorewall and
6wall rules but alas, it doesn't fly. It must be something incredibly obvious
that I can't see it. HELP :)

Regards,

pgm

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Docs for the 2 NIC config

2009-10-09T15:10:06Z

Just setting up a Bering-3.1 for a friend, with 2 NICs (3C900, &
eepro100). Had to figure out assignment to eth[01]. Looked in doc
pack. Thought it strange that's the default config, but there's
nothing in the docs about that. Aggressive searching turned up a
MESSAGE from Charles in reference to Dachstein that explained most
of it. Can I suggest the issue be covered in the canonical docs?
TIA
--
Paul Rogers
paulgrogers@...
http://www.xprt.net/~pgrogers/
Rogers' Second Law: "Everything you do communicates."
(I do not personally endorse any additions after this line. TANSTAAFL :-)

--
http://www.fastmail.fm - The professional email service

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

Has anyone tried compiling the Wi-Spy Spectrum-Tools for Bering-uClibc 3?

2009-10-09T11:03:59Z

Hi,

I've just bought a Wi-Spy 2.4i spectrum analyzer from MetaGeek:
http://www.metageek.net/products/wi-spy-24i

The mainstream GUI packages support Windows and Mac OS X but there is
also some software for Linux, from the same people who wrote Kismet.
This Linux software is called "Spectrum-Tools", spectools for short:
http://www.kismetwireless.net/spectools/

I know there's a Kismet package for Bering-uClibc so I'm hopeful that it
will be possible to get Spectrum-Tools working too. One key dependency
is libusb, but there's already a package for that.

Has anyone tried this already? If not I'll see if I can get it to work
myself. Clearly the GTK GUI will not work, but there's a curses UI, and
a network server daemon which a remote GUI can connect to.

davidMbrooke

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

SF: Terms of use, DocMan, TaskMan 2009-10-06

2009-10-09T06:21:53Z

Upcoming changes to site: Terms of use, DocMan, TaskMan 2009-10-06
http://sourceforge.net/apps/wordpress/sourceforge/2009/10/06/upcoming-changes-to-site-terms-of-use-docman-taskman-2009-10-06/

--
Mike Noyes <mhnoyes at users.sourceforge.net>
http://sourceforge.net/users/mhnoyes/
SF.net Projects: leaf, sourceforge/sitedocs

------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

Net-snmpd leaks memory

2009-09-22T23:17:51Z

Hi Folks

More a nuisance than anything else. I was observing a loss of free
memory on our systems over time, the culprit appears to be the snmpd
process. Googling around revealed I was not alone. It appears that there
are a number of fixes in more recent net-snmpd versions which address
memory leaks.

Right now I just restart the snmpd process daily, but in the long run I
will have to address this.

cheers

Erich

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Adding madwifi driver to wisp-dist (some ahead)2

2009-09-21T06:58:38Z

The best suggestion would be to compile a 2.6 kernel for WISP.

On Sun, 2009-09-20 at 05:38 +0300, Mst Asg wrote:

> I have resolved that problem, and I get some other errors, because
> version of my gcc is new. I don't know if the only way is to get older
> gcc, and don't know if so, things work well. I am really sorry that
> the work is suspended.
> I installed (flash) the wisp in cf that is a pcengines wrap and has
> CM9 wireless card, that is atheros based. As I said. Though, that was
> some Taiwani, and Chinese. When I installed, I was able to set the IP
> address, though the atheros was marked (not found).
> So, after some try, I found madwifi driver and patched the source, but
> unfortunately, those problem exist. I try to resolve them, though
> don't know if there is a better way.
> As I said, those people also used wisp. I didn't know this, but
> understood (and someone said so) after I installed. That was
> configurable by use of SNMP, and some people tried to configure the
> set using a third party program that was shiped (in a CD) with the set
> (think you know, karlnet), but the system was down and didn't boot
> anymore. The same thing happened for some other set, (that was a
> link). Unfortunately, that set was unstable, and now, because sometime
> passed, even many things (like co) are changed. Probably that set was
> working well with (atheros) driver, and I was doing the same thing.
> I was seeing time line of linux kernel development:
> http://en.wikipedia.org/wiki/Template:Timeline_Linux_Kernel
> It seems that some versions are parllel and one new doesn't replace
> the older, and oddly, the 2.4 is still on progress. I am thinking
> about what to do, though don't know if it needs a lot of time, or
> maybe some faster way.
> Do you have any suggestion?
>
> Thank you very much for your response.
>
> --- On Sat, 9/19/09, Vladimir Ivashchenko <hazard@...>
> wrote:
>
> From: Vladimir Ivashchenko <hazard@...>
> Subject: Re: [leaf-wisp] Adding madwifi driver to wisp-dist
> (some ahead)2
> To: "Mst Asg" <ntu_bth@...>
> Cc: "leaf-wisp-dist@..."
> <leaf-wisp-dist@...>
> Date: Saturday, September 19, 2009, 7:19 PM
>
> Hi,
>
> Unfortunately WISP-Dist development is frozen and it is still
> based on
> 2.4 kernel.
>
> On Sat, 2009-09-19 at 06:20 +0300, Mst Asg wrote:
> > Hi,
> >
> > I have a system running Ubuntu 9.04 (kernel
> > 2.6.28-11-generic). I cross compiled madwifi
> > (madwifi-branch-0.9.4) driver for (i386) to use in my
> pcengines wrap. I had problem in adding it to the wisp-dist ,
> anyway, what I did, I patched the source code of wisp kernel,
> and it made a madwifi directory in /drivers/net/wireless/ and
> added source codes to it, (and also some makefiles and config
> & etc.) and the paching was done. Now, I have a problem in
> compiling wisp-dist (as I said I have to answer a lot of
> questions to configure the kernel and drivers&modules),
> example:
> > (like Prompt for development and/or incomplete code/drivers
> > (CONFIG_EXPERIMENTAL) [N/y/?] )
> > Isn't there any ready config or any other thing?
> >
> >
> > Thanks!
> >
> >
> >
> >
> >
> ------------------------------------------------------------------------------
> > Come build with us! The BlackBerry® Developer Conference
> in SF, CA
> > is the only developer event you need to attend this year.
> Jumpstart your
> > developing skills, take BlackBerry mobile applications to
> market and stay
> > ahead of the curve. Join us from November 9-12, 2009.
> Register now!
> > http://p.sf.net/sfu/devconf
> > _______________________________________________
> > leaf-wisp-dist mailing list
> > leaf-wisp-dist@...
> > https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist
> --
> Best Regards,
> Vladimir Ivashchenko
> Chief Technology Officer
> PrimeTel PLC, Cyprus - www.prime-tel.com
> Tel: +357 25 100100 Fax: +357 2210 2211
>
>
>
>

--
Best Regards,
Vladimir Ivashchenko
Chief Technology Officer
PrimeTel PLC, Cyprus - www.prime-tel.com
Tel: +357 25 100100 Fax: +357 2210 2211

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
leaf-wisp-dist mailing list
leaf-wisp-dist@...
https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist

From forum: leaf-wisp-dist

wget and --postdata

2009-09-20T18:20:11Z

Hello,

[First: thanks to all the developers, I have just moved to 3.1.1beta3 and
everything (except for my own fat fingers/brain) has worked just fine.]

My problem is:

1. I have a cable plan that will, if I break the 'cap' start charging me
punitively. I want to avoid that.
2. I like to run a fairly open wireless environment for my friends,
family and guests.

My proposed solution is to make my LEAF box:

1. Look up the usage statistics for my account
2. Apply traffic shaping (or selective turning-off) to stay smoothly
within the 'cap'

I looked at the usage meter, and it turns out that it is protected by a
https login page and sessionID cookies. Tricky.
So, I installed wget-ssl (thanks for that too!) and tried this beginning
script:

breaker# wget --post-data='password=\[mypasswd]&Action=login' \
--save-cookies=mycookies.txt \
--keep-session-cookies \
https://[usagepageURL]/?username=[myusername]

unfortunately, it gives me:
wget: unrecognized option `--post-data=password=volley12&Action=login'
Usage: wget [OPTION]... [URL]...

I suppose because --postdata is not compiled into this wget (Version:
1.8.2-11 Rev 1 uClibc 0.9.28) or because it wasn't available back then?

Questions:
Am I going about this in a sensible way? and
Is there a wget-ssl that does --postdata?

Many thanks again,

Sam
------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Adding madwifi driver to wisp-dist (some ahead)2

2009-09-19T12:19:45Z

Hi,

Unfortunately WISP-Dist development is frozen and it is still based on
2.4 kernel.

On Sat, 2009-09-19 at 06:20 +0300, Mst Asg wrote:

> Hi,
>
> I have a system running Ubuntu 9.04 (kernel
> 2.6.28-11-generic). I cross compiled madwifi
> (madwifi-branch-0.9.4) driver for (i386) to use in my pcengines wrap. I had problem in adding it to the wisp-dist , anyway, what I did, I patched the source code of wisp kernel, and it made a madwifi directory in /drivers/net/wireless/ and added source codes to it, (and also some makefiles and config & etc.) and the paching was done. Now, I have a problem in compiling wisp-dist (as I said I have to answer a lot of questions to configure the kernel and drivers&modules), example:
> (like Prompt for development and/or incomplete code/drivers
> (CONFIG_EXPERIMENTAL) [N/y/?] )
> Isn't there any ready config or any other thing?
>
>
> Thanks!
>
>
>
>
> ------------------------------------------------------------------------------
> Come build with us! The BlackBerry® Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart your
> developing skills, take BlackBerry mobile applications to market and stay
> ahead of the curve. Join us from November 9-12, 2009. Register now!
> http://p.sf.net/sfu/devconf
> _______________________________________________
> leaf-wisp-dist mailing list
> leaf-wisp-dist@...
> https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist

From forum: leaf-wisp-dist

Adding madwifi driver to wisp-dist (some ahead)2

2009-09-18T20:20:19Z

Hi,

I have a system running Ubuntu 9.04 (kernel
2.6.28-11-generic). I cross compiled madwifi
(madwifi-branch-0.9.4) driver for (i386) to use in my pcengines wrap. I had problem in adding it to the wisp-dist , anyway, what I did, I patched the source code of wisp kernel, and it made a madwifi directory in /drivers/net/wireless/ and added source codes to it, (and also some makefiles and config & etc.) and the paching was done. Now, I have a problem in compiling wisp-dist (as I said I have to answer a lot of questions to configure the kernel and drivers&modules), example:
(like Prompt for development and/or incomplete code/drivers
(CONFIG_EXPERIMENTAL) [N/y/?] )
Isn't there any ready config or any other thing?

Thanks!

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
leaf-wisp-dist mailing list
leaf-wisp-dist@...
https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist

From forum: leaf-wisp-dist

Adding madwifi driver to wisp-dist

2009-09-18T18:44:18Z

Hi,

I have a system running Ubuntu 9.04 (kernel
2.6.28-11-generic). I was trying to cross compile madwifi
(madwifi-branch-0.9.4) driver for (i386) my pcengines wrap that would
run wisp dist (kernel-2.4.20 / (I don't know if a problem it is not
2.4.25)). Anyway, when I was compiling and the KERNELPATH=kernel-2.4.20
or kernel-2.4.20/linuxwdist or something similar, there was a error
compaling about not finding the .config file. Anyway, I compile it
against the kernel files existed in my system (2.6 as I said), and
there are some .o (like ath_hal.o) compiled.. I want the wisp dist to
recognize CM9 driver that is based on Atheros chip. If everything is
okay with the driver I compiled, how can I add the driver to wisp dist?
Should I recompile wisp dist? I tried to compile (sudo make KERNELPATH="/usr/src/linux-headers-2.6.28-11-generic/" ARCH="i386" CROSS_COMPILE="/usr/bin/" ATH_RATE="ath_rate/minstrel" TARGET="i386-elf"), but one lengthy list
was shown and I was asked to configure the kernel, a lot of questions
(like Prompt for development and/or incomplete code/drivers
(CONFIG_EXPERIMENTAL) [N/y/?] )
Anyway,
I thought that maybe it is possible to do that without any compilation.
Also, something else, does anyone have the wisp-dist with that atheros
driver?

Thanks!

------------------------------------------------------------------------------
Come build with us! The BlackBerry® Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay
ahead of the curve. Join us from November 9-12, 2009. Register now!
http://p.sf.net/sfu/devconf
_______________________________________________
leaf-wisp-dist mailing list
leaf-wisp-dist@...
https://lists.sourceforge.net/lists/listinfo/leaf-wisp-dist

From forum: leaf-wisp-dist

How to update snort rules for the snort package

2009-09-04T02:28:12Z

Hi All
Are there anyone using the snort.lrp package. If so you do you keep the
rules up to date?
Thank you.
Huy

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

SourceForge.net Update: 2009-08-31

2009-09-01T10:30:15Z

-------- Forwarded Message --------
From: SourceForge.net Team <noreply@...>
To: mhnoyes@...
Subject: SourceForge.net Update: 2009-08-31 Edition
Date: Tue, 1 Sep 2009 06:00:43 +0000
-snip-
Hi, everyone! Welcome to our September SourceForge.net update. Thanks for
reading.

Since we last emailed you, we've made a few important changes to our site
and services. First off, you can now submit reviews for projects without
logging in to SourceForge. As you might expect, we've already seen a lot
more reviews - keep 'em coming!

Last month, we updated our user profile pages so that you can control their
layout and content. Since then, we've extended this to each of our
project's Develop pages. If you want more control over how your Develop
page looks, customize it and let us know what you think.

We've also made some improvements to the interface for our new file release
system. It's now easier to navigate through your files and folders, make
edits, and upload files.

For every page view on SourceForge.net, there are a lot of moving parts,
and everyone's experience can be different. We've created a plugin for
Firefox called Beacon that you can use to send us data about your page
performance. If your page load times are longer than you'd like, download
the plugin and help us figure out where the problem is.

URL: http://p.sf.net/sf-community/beacon

Until next time!

Ross Turk, Director of Community
ross at sourceforge.net

Follow us on Twitter: http://twitter.com/sourceforge
Follow us on Facebook: http://p.sf.net/sf-community/facebook
-snip-

--
Mike Noyes <mhnoyes at users.sourceforge.net>
http://sourceforge.net/users/mhnoyes/
SF.net Projects: leaf, sourceforge/sitedocs

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

phpWebSite

2009-08-30T08:09:10Z

New Hosted Application: phpWebSite
http://sourceforge.net/apps/wordpress/sourceforge/2009/08/24/new-hosted-application-phpwebsite/

--
Mike Noyes <mhnoyes at users.sourceforge.net>
http://sourceforge.net/users/mhnoyes/
SF.net Projects: leaf, sourceforge/sitedocs

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july

_______________________________________________
leaf-devel mailing list
leaf-devel@...
https://lists.sourceforge.net/lists/listinfo/leaf-devel

From forum: leaf-devel

Re: Webconf Access Control

2009-08-20T14:06:48Z

Am Donnerstag, 20. August 2009 17:48:29 schrieb n22e113:

As I wrote - "the information on the page is wrong". Will be corrected for a
future release.

> The above is correct because Linux and open source
> are all about choices. Users in our case are only allowed to access webconf
> from inside our private LAN. Admins/Users shall all have the ability to
> decide what level of security of Webconf access for a particular
> installation. The information on the page also correctly states: "While it
> provides some protection, please note that the passwords are sent over the
> network in clear text."
>

IMHO the target audience for webconf is the home user who does not take care
about security and more than a default setup. Therefor forcing them to choose
a login password is following the line "better safe than sorry".
Admins usually use the shell based configuration, which is a lot mor flexible
and secure.

kp

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Webconf Access Control

2009-08-20T13:59:19Z

> If you don't like this behaviour, as you said it is open source, you can
> look into
>
> /var/webconf/lib/preamble.sh for
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <html>
> <head>
> $( /var/webconf/lib/passcheck.sh )
> <title>Bering LEAF Firewall</title>
> <link rel="stylesheet" type="text/css" href="/webconf.css">
> </head>
>
> either remove the call to passcheck or extend it to look for a
> configuration option (and if so feed back). If you want my honest
> opinion... just use credentials...
> :-)
>

Thanks! All I need is to remove the line:
$( /var/webconf/lib/passcheck.sh )
which is not part of the v3.1 distro!
Cheers, ;-0

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Webconf Access Control

2009-08-20T09:35:06Z

n22e113 wrote:

>>> While testing leaf v3.1.1-beta3, I am stuck at the page using firefox:
>>> http://192.168.1.210/wc-passwd.cgi
>>> Except for the "General Health" and "Active Connections" pages. Leaving
>>> both Username and Password blank and hitting the |Apply| button will only
>>> get me back to the same page? If Username=admin and Password=blank and
>>> hitting the |Apply| button, the web page will transfer data forever?
>>> Thanks!
>> It's not obvious and the information on the page is wrong: Please add a
>> password!
>> It's pretty unsecure to use webconf without password andf therefor not
>> allowed.
>>
> But from the page "Webconf authentication":
> "To completely disable authentication, leave the fields for username as well as password blank."
> The above is correct because Linux and open source are all about choices. Users in our case are only allowed to access webconf from inside our private LAN. Admins/Users shall all have the ability to decide what level of security of Webconf access for a particular installation. The information on the page also correctly states:
> "While it provides some protection, please note that the passwords are sent over the network in clear text."

That depends, I never allow http access :-) only https

If you don't like this behaviour, as you said it is open source, you can
look into

/var/webconf/lib/preamble.sh for

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html>
<head>
$( /var/webconf/lib/passcheck.sh )
<title>Bering LEAF Firewall</title>
<link rel="stylesheet" type="text/css" href="/webconf.css">
</head>

either remove the call to passcheck or extend it to look for a
configuration option (and if so feed back). If you want my honest
opinion... just use credentials...

:-)

Erich

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Webconf Access Control

2009-08-20T08:48:29Z

>> While testing leaf v3.1.1-beta3, I am stuck at the page using firefox:
>> http://192.168.1.210/wc-passwd.cgi
>> Except for the "General Health" and "Active Connections" pages. Leaving
>> both Username and Password blank and hitting the |Apply| button will only
>> get me back to the same page? If Username=admin and Password=blank and
>> hitting the |Apply| button, the web page will transfer data forever?
>> Thanks!
>
> It's not obvious and the information on the page is wrong: Please add a
> password!
> It's pretty unsecure to use webconf without password andf therefor not
> allowed.
>

But from the page "Webconf authentication":
"To completely disable authentication, leave the fields for username as well as password blank."
The above is correct because Linux and open source are all about choices. Users in our case are only allowed to access webconf from inside our private LAN. Admins/Users shall all have the ability to decide what level of security of Webconf access for a particular installation. The information on the page also correctly states:
"While it provides some protection, please note that the passwords are sent over the network in clear text."

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Re: Webconf Access Control

2009-08-20T03:13:39Z

Am Donnerstag, 20. August 2009 11:52:02 schrieb n22e113:
> While testing leaf v3.1.1-beta3, I am stuck at the page using firefox:
> http://192.168.1.210/wc-passwd.cgi
> Except for the "General Health" and "Active Connections" pages. Leaving
> both Username and Password blank and hitting the |Apply| button will only
> get me back to the same page? If Username=admin and Password=blank and
> hitting the |Apply| button, the web page will transfer data forever?
> Thanks!

It's not obvious and the information on the page is wrong: Please add a
password!
It's pretty unsecure to use webconf without password andf therefor not
allowed.

kp

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user

Webconf Access Control

2009-08-20T02:52:02Z

While testing leaf v3.1.1-beta3, I am stuck at the page using firefox:
http://192.168.1.210/wc-passwd.cgi
Except for the "General Health" and "Active Connections" pages. Leaving both Username and Password blank and hitting the |Apply| button will only get me back to the same page? If Username=admin and Password=blank and hitting the |Apply| button, the web page will transfer data forever? Thanks!

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design, integration and deployment - and focus on
what you do best, core application coding. Discover what's new with
Crystal Reports now. http://p.sf.net/sfu/bobj-july
------------------------------------------------------------------------
leaf-user mailing list: leaf-user@...
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

From forum: leaf-user