[gentoo-user] Shorewall failure following upgrade

[gentoo-user] Shorewall failure following upgrade

[Jeff Cranmer]

I have recently updated shorewall on my 2.4 gentoo OS
I now get the following error:

/usr/share/shorewall/firewall: line 254: exists_:_frwd=Yes: command not
found
Warning: wierd character in interface `$' (No aliases, :, ! or *).
iptables v1.2.11: Couldn't load match
`policy':/lib/iptables/libipt_policy.so: cannot open shared object file:
No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
   ERROR: Command "/sbin/iptables -A ppp0_fwd -s 0.0.0.0/0 -o $ -d
_hosts -m policy --pol ipsec --dir out $:_ipsec_options
$:_ipsec_out_options -j :_policychain" Failed
Processing /etc/shorewall/stop ...
IP Forwarding Enabled
Processing /etc/shorewall/stopped ...
Terminated

It works correctly on my 2.6 Gentoo OS.  Any suggestions on how to
repair gratefully received.

Thanks

Jeff


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Shorewall failure following upgrade

[Rumen Yotov]

[-- Attachment #1: Type: text/plain, Size: 1317 bytes --]

Jeff Cranmer wrote:

>I have recently updated shorewall on my 2.4 gentoo OS
>I now get the following error:
>
>/usr/share/shorewall/firewall: line 254: exists_:_frwd=Yes: command not
>found
>Warning: wierd character in interface `$' (No aliases, :, ! or *).
>iptables v1.2.11: Couldn't load match
>`policy':/lib/iptables/libipt_policy.so: cannot open shared object file:
>No such file or directory
>
>Try `iptables -h' or 'iptables --help' for more information.
>   ERROR: Command "/sbin/iptables -A ppp0_fwd -s 0.0.0.0/0 -o $ -d
>_hosts -m policy --pol ipsec --dir out $:_ipsec_options
>$:_ipsec_out_options -j :_policychain" Failed
>Processing /etc/shorewall/stop ...
>IP Forwarding Enabled
>Processing /etc/shorewall/stopped ...
>Terminated
>
>It works correctly on my 2.6 Gentoo OS.  Any suggestions on how to
>repair gratefully received.
>
>Thanks
>
>Jeff
>
>
>  
>
Hi,
Works OK on a 2.6 system, too. It depends only on: iptables, iproute2
and virtual/libc (glibc).
Some suggestions:
1.try "revdep-rebuild -pv" later w/o "p" to check if something needs to
be rebuild (suspect 'iptables' here);
2.Check for "required options" (see shorewall docs) in the kernel config
(maybe something was changed);
3.Check the five 'basic' ;) config files:
/etc/shorewall/shorewall.conf&policy&interfaces&zones&rules.
HTH. Rumen

[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3397 bytes --]

Re: [gentoo-user] Shorewall failure following upgrade

[Jeff Cranmer]

On Sat, 2005-07-30 at 16:17 +0300, Rumen Yotov wrote:
> Hi,
> Works OK on a 2.6 system, too. It depends only on: iptables, iproute2
> and virtual/libc (glibc).
> Some suggestions:
> 1.try "revdep-rebuild -pv" later w/o "p" to check if something needs to
> be rebuild (suspect 'iptables' here);
> 2.Check for "required options" (see shorewall docs) in the kernel config
> (maybe something was changed);
> 3.Check the five 'basic' ;) config files:
> /etc/shorewall/shorewall.conf&policy&interfaces&zones&rules.
> HTH. Rumen

It seems there was something wrong with the revised configuration files.
revdep-rebuild didn't come up with anything related to the packages you
identified, so I cheated and copied over the entire /etc/shorewall
directory from my 2.6 system to the 2.4 partition (renaming the original
directory to a dummy name first, just in case the result was bad<g>).  

I was then able to successfully restart shorewall and pass a stealth
test on www.grc.com (shields-up).

Thanks  :-)

Jeff


-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] Shorewall failure following upgrade

[Dave Nebinger]

> I have recently updated shorewall on my 2.4 gentoo OS
> I now get the following error:

I was getting similar errors due to invalid entries in the shorewall
configuration files.  I would guess that you've got a dollar sign in there
somewhere that shouldn't be there.


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Quanta setup for cervisia?

[Jeff Cranmer]

I have been using Quanta to develop a small website.  Apart from a
tendency to die with 'sigsegv' crashes at regular intervals, the program
seems to work quite well (the recovery function always manages to
recover almost all my work after a crash).

I would like to import the project into cervisia, so that I can maintain
it via cvs and perform some kind of version control on the website, but
I don't know how to set this up.

Opening the project from Quanta and clicking on the cvs icon simply
returns the error

"This is not a CVS folder"

I get a similar error when I try to open any folder from within
konqueror.   From konqueror, I can then go through a cycle of creating a
project via cervisia, but next time I try to open that project from
within konqueror, I get the same "This is not a CVS folder" error - back
to square one :-/

It seems that the first hurdle I need to get over is "How do you create
a CVS folder?"

Can anybody help me with this?

Thanks

Jeff


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] Re: Quanta setup for cervisia?

[Jeff Cranmer]

I have been using Quanta to develop a small website.  Apart from a
tendency to die with 'sigsegv' crashes at regular intervals, the program
seems to work quite well (the recovery function always manages to
recover almost all my work after a crash).

I would like to import the project into cervisia, so that I can maintain
it via cvs and perform some kind of version control on the website, but
I don't know how to set this up.

Opening the project from Quanta and clicking on the cvs icon simply
returns the error

"This is not a CVS folder"

I get a similar error when I try to open any folder from within
konqueror.   From konqueror, I can then go through a cycle of creating a
project via cervisia, but next time I try to open that project from
within konqueror, I get the same "This is not a CVS folder" error - back
to square one :-/

It seems that the first hurdle I need to get over is "How do you create
a CVS folder?"

Can anybody help me with this?

Thanks

Jeff

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Re: Quanta setup for cervisia?

[Steve Evans]

[-- Attachment #1: Type: text/plain, Size: 2235 bytes --]

On Tuesday 30 August 2005 23:39, Jeff Cranmer wrote:
> I have been using Quanta to develop a small website.  Apart from a
> tendency to die with 'sigsegv' crashes at regular intervals, the program
> seems to work quite well (the recovery function always manages to
> recover almost all my work after a crash).
>
> I would like to import the project into cervisia, so that I can maintain
> it via cvs and perform some kind of version control on the website, but
> I don't know how to set this up.
>
> Opening the project from Quanta and clicking on the cvs icon simply
> returns the error
>
> "This is not a CVS folder"
>
> I get a similar error when I try to open any folder from within
> konqueror.   From konqueror, I can then go through a cycle of creating a
> project via cervisia, but next time I try to open that project from
> within konqueror, I get the same "This is not a CVS folder" error - back
> to square one :-/
>
> It seems that the first hurdle I need to get over is "How do you create
> a CVS folder?"
>
> Can anybody help me with this?
>

First you need to create a CVS repository containing the existing Quanta 
project, using cvs import. Then checkout that repository somewhere with cvs 
checkout. Finally use the newly checked out copy as the Quanta project.

However it sounds to me as though you first need to learn something about CVS. 
There are many tutorials on the web, e.g. 
<http://www.osnews.com/story.php?news_id=6096> which is targetted at people 
using Cervisia, or 
<http://www.csc.calpoly.edu/~dbutler/tutorials/winter96/cvs/> which is a more 
general purpose tutorial.

Steve
-- 
____________________________________________________________________
Steve Evans            E-mail: mailto:stevee@gorbag.com
                       WEB:    http://www.gorbag.com
Registered Linux user #217906: http://counter.li.org
Public Encryption Key:         http://www.gorbag.com/public-key.html
____________________________________________________________________

2.6.12-gentoo-r9 Intel(R) Pentium(R) 4 CPU 3.00GHz GNU/Linux

 00:05:13 up 13 days, 15:52,  8 users,  load average: 0.15, 0.14, 0.09

Saint:  A dead sinner revised and edited.
-- Ambrose Bierce

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

[gentoo-user] Trying to install a cable modem connection

[Jeff Cranmer]

[-- Attachment #1: Type: text/plain, Size: 3074 bytes --]

I have recently been attempting to connect to Roadrunner cable using my
Linux box.
According to their login instructions, it should be possible to connect
it to the service without requiring a password (Roadrunner systems
apparently used to have a custom login script which made Linux installs
even more of a pain.

I have successfully emerged dhcpd.  I have not attempted to put dhcpd in
my startup scripts.

First, after plugging in the cable box and typing adsl-stop to
disconnect my adsl connection, running ifconfig yields the following:

eth1      Link encap:Ethernet  HWaddr 00:04:5A:5E:42:FE
          inet6 addr: fe80::204:5aff:fe5e:42fe/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1777 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1912 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1249796 (1.1 Mb)  TX bytes:232302 (226.8 Kb)
          Interrupt:11 Base address:0xe800

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:14 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:700 (700.0 b)  TX bytes:700 (700.0 b)

I have a broken eth0 connection on the motherboard which is disabled, so
this info is correct.

I then edit /etc/conf.d/net as follows:
#iface_eth1="up"     ---   added # to comment out the config required by
rp-pppoe
config_eth1=( "dhcp" )     --- added the dhcp configuration required by
the cable modem,

running the command /etc/init.d/net.eth1 start yields the following:

 * Starting eth1
 *   Bringing up eth1
 *     dhcp
 *       Running dhcpcd ...
[ ok ]
 *       eth1 received address 24.88.247.205

ifconfig now reports

eth1      Link encap:Ethernet  HWaddr 00:04:5A:5E:42:FE
          inet addr:24.88.247.205  Bcast:255.255.255.255
Mask:255.255.255.0
          inet6 addr: fe80::204:5aff:fe5e:42fe/64 Scope:Link
          UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:6340 errors:0 dropped:0 overruns:0 frame:0
          TX packets:1914 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1530454 (1.4 Mb)  TX bytes:232952 (227.4 Kb)
          Interrupt:11 Base address:0xe800

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:20 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1266 (1.2 Kb)  TX bytes:1266 (1.2 Kb)

Here's where I get a little stuck.  My internet programs are not
recognising this eth1 connection.  What step do I need to perform in
order to get the internet connection working?

Thanks in advance

Jeff Cranmer

[-- Attachment #2: Type: text/html, Size: 5525 bytes --]

Re: [gentoo-user] Trying to install a cable modem connection

[Michael Kjorling]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2005-10-29 20:26 +0000, jcranmer01@earthlink.net wrote:
> Here's where I get a little stuck.  My internet programs are not
> recognising this eth1 connection.  What step do I need to perform in
> order to get the internet connection working?

A good starting point may be taking a look at the kernel IP routing
table -- that's what "route" is for. You probably want to use its "-n"
switch to disable host name lookups.

You want a route with destination 0.0.0.0, genmask 0.0.0.0 (means CIDR
network 0/0, or "default" upstream) and gateway somewhere in the range
24.88.247.x (24.88.247/24), going through (iface) eth1. Without it,
your system will not be able to talk to anything outside of your
little corner of Road Runner's network.

If you have such a route, then running traceroute (also with "-n")
towards a known valid IP address should give you some clue as to where
the problem is. You may also want to look at any iptables rule sets
you may have; that's "iptables -L -n" (list, numerical).

If you can connect to an IP address but not using a DNS name, that
leaves just name resolution (/etc/resolv.conf and /etc/nsswitch.conf
under "hosts:", as I recall).

- -- 
Michael Kjörling, michael@kjorling.com - http://michael.kjorling.com/
* ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
* ..... No bird soars too high if he soars with his own wings ..... *
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDY8f3dY+HSb3praYRAq3TAJ9TjvcQGSMpEFt+1+asqgE3SvlXeQCeNy77
J0r+Y/uyplQw2gfTNhSofDo=
=1nZX
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list