September 2003 - zorp-hu - lists.balabit.hu

url list
by Zoltan Kovacs 11 Apr '04

11 Apr '04

Sziasztok, Van mondjuk egy blacklist.txt file-om, amiben szokasos módon a tiltott ULR-k vannak. Szeretnek URL szurest csinalni a HTTP proxy-n keresztül menő forgalomra, a blacklist.txt alapján. Szerintetek mi a megvalositas legjobb modja? Köszi, Kozo

3 2

zorp.deb error(ok)
by Gabor Halasz 28 Oct '03

28 Oct '03

1. Nem csinál /var/run/zorp dirt, ezért nem indul el 2. Nem dependel a python2.1-extclass-ra, anélkül meg nem találja az ExtensionCLass-t, a 2.2-extclass nem jó neki (arra viszont dependel), viszont fura parsing error-okat dobál az ellenség megtévesztésére ilyen formában: Jul 7 11:33:30 gemini intra[22825]: zorp version 2.0.4 starting up Jul 7 11:33:30 gemini intra[22825]: (noname/nosession): Error parsing policy file; filename='/etc/zorp/instances.py' Jul 7 11:33:30 gemini intra[22825]: (noname/nosession): Error booting & parsing policy; Jul 7 11:33:30 gemini intra[22825]: (noname/nosession): Error loading initial policy, exiting; Jul 7 11:33:30 gemini intra[22825]: zorp version 2.0.4 going down. Jul 7 11:33:30 gemini intra[22827]: (Log thread): ImportError: No module named ExtensionClass Jul 7 11:33:30 gemini intra[22827]: (Log thread): thread exiting; Jul 7 11:33:30 gemini intra[22830]: (conntrack/thread): thread exiting; -- Gabor HALASZ <halasz.g(a)freemail.hu>

5 11

tproxy for 2.4.22
by Daniel VASARHELYI 30 Sep '03

30 Sep '03

Sziasztok! Szeretnenk atterni itt az uj kernelre, ezzel kapcsolatban lenne egy kerdesem: kb mikorra szamithatunk a 2.4.22-es kernelhez tproxy patch-re? asd -- Daniel VASARHELYI

4 6

fura egy mukodes
by Daniel VASARHELYI 26 Sep '03

26 Sep '03

Eh, ma sokat irok. Egy ontopic kerdes: Miert probal meg az ssl-be agyazott http proxy visszakapcsolodni a 443-as portra, ha egyszer router=DirectedRouter()-van a service-ben? Ez most bug? asd Konfig: class VirtualHttp(HttpProxy): pass class VirtualHttpS(PsslProxy): def config(self): PsslProxy.config(self) self.server_need_ssl = FALSE self.client_need_ssl = TRUE self.server_verify_type = SSL_VERIFY_REQUIRED_UNTRUSTED self.client_verify_type = SSL_VERIFY_REQUIRED_UNTRUSTED self.stack_proxy = VirtualHttp self.server_ca_directory = '...' self.server_crl_directory = '...' def zorp_http(): Service("virtual_http", VirtualHttp, router=DirectedRouter(SockAddrInet("127.0.0.1", 80))) Listener(SockAddrInet("10.0.1.166", 80), "virtual_http") def zorp_https(): Service("virtual_https", VirtualHttpS, chainer=SideStackChainer(VirtualHttp)) Listener(SockAddrInet("10.0.1.166", 443), "virtual_https") Log: 10.0.0.1: kliens gep 192.168.1.1: szerver zorp_https[3371]: (zorp_https@zorp@zorp_host/nosession): Incoming connection; protocol='1', remote='AF_INET(10.0.0.1:51744)', local='AF_INET(192.168.1.1:443)', dest='AF_INET(192.168.1.1:443)' zorp_https[3371]: (zorp@zorp_host/virtual_https): Starting service; name='virtual_https' zorp_https[3371]: (zorp@zorp_host/virtual_https): Connection accepted; client_address='AF_INET(10.0.0.1:51744)' zorp_https[3371]: (zorp@zorp_host/virtual_https:14): Starting proxy instance; client_fd='15', client_address='AF_INET(10.0.0.1:51744)', client_zone='Zone(internet, 0.0.0.0/0)', client_local='AF_INET(192.168.1.1:443)' zorp_https[3371]: (zorp@zorp_host/virtual_https:14/pssl): Proxy starting; class='VirtualHttpS', module='pssl' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): thread starting; zorp_https[3371]: (zorp_https@zorp@zorp_host/nosession): accept count; accepts='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): calling __config__() event; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): calling config() event; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='server_need_ssl', newvalue='0' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='client_need_ssl', newvalue='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='server_verify_type', newvalue='2' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='client_verify_type', newvalue='2' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='client_cert_file', newvalue=''cert.pem'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='client_key_file', newvalue='''key.pem'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='server_ca_directory', newvalue=''/etc/zorp/CA/certs'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Attribute changed; attribute='server_crl_directory', newvalue=''/etc/zorp/CA/crl'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_need_ssl', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_ca_directory', value='''' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_verify_depth', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_need_ssl', value='0' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_crl_directory', value=''/etc/zorp/CA/crl'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='copy_to_client', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_key_file', value=''key.pem'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_key_file', value='''' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='timeout', value='-1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_cert_file', value='''' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='packet_stats_interval_time', value='0' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_verify_type', value='2' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_verify_type', value='2' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='packet_stats_interval_packet', value='0' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='buffer_size', value='1500' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_cert_file', value=''cert.pem'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='client_crl_directory', value='''' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='copy_to_server', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='shutdown_soft', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_ca_directory', value=''/etc/zorp/CA/certs'' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Config dump, attribute value; name='server_verify_depth', value='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): calling __startup__() event; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): calling startUp() event; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Side-stacking proxy instance; server_fd='18', client_fd='19', proxy_class='VirtualHttp' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/http): Proxy starting; class='VirtualHttp', module='http' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Client needs ssl. zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): thread starting; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling __config__() event; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling config() event; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Certificate file successfully loaded; keyfile='key.pem', certfile='cert.pem' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40704070>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40704070>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40704070>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute changed; attribute='max_hostname_length', newvalue='1024' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40704070>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request_header', value='<Zorp hash object at 0x407040a0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request_headers', value='<Zorp hash object at 0x407040a0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response_header', value='<Zorp hash object at 0x40704100>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response_headers', value='<Zorp hash object at 0x40704100>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x407040d0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x407040d0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x407040d0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_url_length', value='4096' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_header_lines', value='50' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='response', value='<Zorp Multidimensional hash object at 0x407040d0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_chunk_length', value='262144' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_body_length', value='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth_inband_supported', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='target_port_range', value=''80,443'' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='request_header', value='<Zorp hash object at 0x407040a0>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='parent_proxy_port', value='3128' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='timeout_request', value='10000' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_unicode_url', value='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='rewrite_host_header', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='strict_header_checking', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='require_host_header', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth', value='<NULL>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_files_directory', value=''/usr/share/zorp/http'' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='default_port', value='80' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_server_requests', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='transparent_mode', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_hostname_length', value='1024' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='response_header', value='<Zorp hash object at 0x40704100>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='timeout', value='300000' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='request', value='<Zorp hash object at 0x40704070>' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_keepalive_requests', value='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_status', value='500' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_silent', value='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_proxy_requests', value='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_null_response', value='1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='parent_proxy', value='''' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_line_length', value='4096' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth_realm', value=''Zorp HTTP auth'' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling __startup__() event; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling startUp() event; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): fetching request and headers; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='11' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='131' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Writing channel; fd='15', count='1582' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='7' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='262' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='40' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Writing channel; fd='15', count='51' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Client side SSL handshake successful; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Stacking subproxy; client='20:21', server='22:23' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Stacking child proxy; client_fd='21', server_fd='23', class='VirtualHttp' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/http): Proxy starting; class='VirtualHttp', module='http' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): thread starting; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): Polling fd structure growing; old_num='4' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling __config__() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling config() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x80e32a0>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x80e32a0>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x80e32a0>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute changed; attribute='max_hostname_length', newvalue='1024' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x80e32a0>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request_header', value='<Zorp hash object at 0x80e2898>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='request_headers', value='<Zorp hash object at 0x80e2898>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response_header', value='<Zorp hash object at 0x80bdf60>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response_headers', value='<Zorp hash object at 0x80bdf60>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x80d37f8>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x80d37f8>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x80d37f8>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_url_length', value='4096' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_header_lines', value='50' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='response', value='<Zorp Multidimensional hash object at 0x80d37f8>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_chunk_length', value='262144' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_body_length', value='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth_inband_supported', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='target_port_range', value=''80,443'' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='request_header', value='<Zorp hash object at 0x80e2898>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='parent_proxy_port', value='3128' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='timeout_request', value='10000' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_unicode_url', value='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='rewrite_host_header', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='strict_header_checking', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='require_host_header', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth', value='<NULL>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_files_directory', value=''/usr/share/zorp/http'' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='default_port', value='80' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_server_requests', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='transparent_mode', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_hostname_length', value='1024' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='response_header', value='<Zorp hash object at 0x80bdf60>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='timeout', value='300000' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='request', value='<Zorp hash object at 0x80e32a0>' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_keepalive_requests', value='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_status', value='500' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='error_silent', value='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_proxy_requests', value='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='permit_null_response', value='1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='parent_proxy', value='''' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='max_line_length', value='4096' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Config dump, attribute value; name='auth_realm', value=''Zorp HTTP auth'' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling __startup__() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling startUp() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): fetching request and headers; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='24' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='64' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client_downstream): Writing channel; fd='20', count='41' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http/client_upstream): Reading channel; fd='21', count='41' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): Request details; command='GET', url='/', version='HTTP/1.1' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): request prefilter header; hdr='Host', value='www.host.hu' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): processing request and headers; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): filtering request and headers; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): sending request and headers, copying request data; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): request postfilter header; hdr='Host', value='www.host.hu' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): request postfilter header; hdr='X-Forward-For', value='10.0.0.1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='5' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http/server_upstream): Writing channel; fd='23', count='69' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): fetching response and headers; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Reading channel; fd='15', count='24' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client): Writing channel; fd='15', count='29' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/client_downstream): Shutdown channel; fd='20', mode='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): eofmask updated; old_mask='0000', eof_mask='0001' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/server_downstream): Reading channel; fd='22', count='69' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/leftside): Writing channel; fd='18', count='69' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/pssl/rightside): Reading channel; fd='19', count='69' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Request details; command='GET', url='/', version='HTTP/1.1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): request prefilter header; hdr='Host', value='www.host.hu' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): request prefilter header; hdr='X-Forward-For', value='10.0.0.1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): processing request and headers; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): filtering request and headers; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): sending request and headers, copying request data; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): request postfilter header; hdr='Host', value='www.host.hu' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): request postfilter header; hdr='X-Forward-For', value='10.0.0.1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): request postfilter header; hdr='X-Forward-For', value='10.0.0.1' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Connecting to remote host; protocol='1', local='NULL', remote='AF_INET(192.168.1.1:443)' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Initiating connection; from='NULL', to='AF_INET(192.168.1.1:443)' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Established connection; protocol='1', remote='AF_INET(192.168.1.1:443)', local='AF_INET(192.168.1.1:33835)', dest='AF_INET(192.168.1.1:443)' zorp_https[3371]: (zorp_https@zorp@zorp_host/nosession): Incoming connection; protocol='1', remote='AF_INET(192.168.1.1:33835)', local='AF_INET(192.168.1.1:443)', dest='AF_INET(192.168.1.1:443)' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Server connection established; server_fd='24', server_address='AF_INET(192.168.1.1:443)', server_zone='Zone(internet, 0.0.0.0/0)', server_local='AF_INET(192.168.1.1:33835)' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): Writing channel; fd='24', count='95' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): fetching response and headers; zorp_https[3371]: (zorp@zorp_host/virtual_https): Starting service; name='virtual_https' zorp_https[3371]: (zorp@zorp_host/virtual_https): Connection accepted; client_address='AF_INET(192.168.1.1:33835)' zorp_https[3371]: (zorp@zorp_host/virtual_https:15): Starting proxy instance; client_fd='25', client_address='AF_INET(192.168.1.1:33835)', client_zone='Zone(internet, 0.0.0.0/0)', client_local='AF_INET(192.168.1.1:443)' zorp_https[3371]: (zorp@zorp_host/virtual_https:15/pssl): Proxy starting; class='VirtualHttpS', module='pssl' zorp_https[3371]: (zorp_https@zorp@zorp_host/nosession): accept count; accepts='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): thread starting; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): calling __config__() event; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): calling config() event; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='server_need_ssl', newvalue='0' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='client_need_ssl', newvalue='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='server_verify_type', newvalue='2' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='client_verify_type', newvalue='2' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='client_cert_file', newvalue=''cert.pem'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='client_key_file', newvalue=''key.pem'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='server_ca_directory', newvalue=''/etc/zorp/CA/certs'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Attribute changed; attribute='server_crl_directory', newvalue=''/etc/zorp/CA/crl'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_need_ssl', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_ca_directory', value='''' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_verify_depth', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_need_ssl', value='0' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_crl_directory', value=''/etc/zorp/CA/crl'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='copy_to_client', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_key_file', value=''key.pem'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_key_file', value='''' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='timeout', value='-1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_cert_file', value='''' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='packet_stats_interval_time', value='0' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_verify_type', value='2' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_verify_type', value='2' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='packet_stats_interval_packet', value='0' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='buffer_size', value='1500' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_cert_file', value=''cert.pem'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='client_crl_directory', value='''' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='copy_to_server', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='shutdown_soft', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_ca_directory', value=''/etc/zorp/CA/certs'' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Config dump, attribute value; name='server_verify_depth', value='1' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): calling __startup__() event; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): calling startUp() event; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Side-stacking proxy instance; server_fd='28', client_fd='29', proxy_class='VirtualHttp' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/http): Proxy starting; class='VirtualHttp', module='http' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Client needs ssl. zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): thread starting; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling __config__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling config() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40705b18>' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Certificate file successfully loaded; keyfile='key.pem', certfile='cert.pem' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40705b18>' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl/client): Reading channel; fd='25', count='11' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): SSL handshake failed on the client side; error='error:1407609C:SSL routines:lib(20):SSL23_GET_CLIENT_HELLO:func(118):http request:reason(156)' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): calling __destroy__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40705b18>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute changed; attribute='max_hostname_length', newvalue='1024' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request', value='<Zorp hash object at 0x40705b18>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request_header', value='<Zorp hash object at 0x40705b48>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='request_headers', value='<Zorp hash object at 0x40705b48>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='response_header', value='<Zorp hash object at 0x40705ba8>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='response_headers', value='<Zorp hash object at 0x40705ba8>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x40705b78>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x40705b78>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Attribute fetched; attribute='response', value='<Zorp Multidimensional hash object at 0x40705b78>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_url_length', value='4096' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_header_lines', value='50' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='response', value='<Zorp Multidimensional hash object at 0x40705b78>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_chunk_length', value='262144' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_body_length', value='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='auth_inband_supported', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='target_port_range', value=''80,443'' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='request_header', value='<Zorp hash object at 0x40705b48>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='parent_proxy_port', value='3128' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='timeout_request', value='10000' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='permit_unicode_url', value='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='rewrite_host_header', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='strict_header_checking', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='require_host_header', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='auth', value='<NULL>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='error_files_directory', value=''/usr/share/zorp/http'' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='default_port', value='80' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='permit_server_requests', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='transparent_mode', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_hostname_length', value='1024' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='response_header', value='<Zorp hash object at 0x40705ba8>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='timeout', value='300000' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='request', value='<Zorp hash object at 0x40705b18>' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_keepalive_requests', value='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='error_status', value='500' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='error_silent', value='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='permit_proxy_requests', value='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='permit_null_response', value='1' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='parent_proxy', value='''' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='max_line_length', value='4096' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Config dump, attribute value; name='auth_realm', value=''Zorp HTTP auth'' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling __startup__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling startUp() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): fetching request and headers; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Proxy destroy; class='VirtualHttpS', module='pssl' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl/client): Closing channel; fd='25' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): Channel read failed; error='Connection reset by peer' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/leftside): Shutdown channel; fd='28', mode='2' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/leftside): Closing channel; fd='28' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): exiting keep-alive loop; zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): Proxy ending; class='VirtualHttpS', module='pssl' zorp_https[3448]: (zorp@zorp_host/virtual_https:15/pssl): thread exiting; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/pssl/rightside): Reading channel; fd='29', count='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling __shutdown__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): exiting keep-alive loop; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling shutDown() event; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): calling __destroy__() event; zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Proxy destroy; class='VirtualHttp', module='http' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/pssl/rightside): Shutdown channel; fd='19', mode='2' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/pssl/rightside): Closing channel; fd='19' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): Shutdown channel; fd='24', mode='2' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): Shutdown failed; attempt='1', error='Transport endpoint is not connected' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): Closing channel; fd='24' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): Proxy ending; class='VirtualHttp', module='http' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http/server): accounting info; type='stream', duration='0', sent='95', received='0' zorp_https[3446]: (zorp@zorp_host/virtual_https:14/http): thread exiting; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling __shutdown__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling shutDown() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): calling __destroy__() event; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Proxy destroy; class='VirtualHttp', module='http' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/pssl/rightside): Shutdown channel; fd='29', mode='2' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/pssl/rightside): Closing channel; fd='29' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/leftside): Reading channel; fd='18', count='0' zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): Proxy ending; class='VirtualHttp', module='http' zorp_https[3449]: (zorp@zorp_host/virtual_https:15): Ending proxy instance; zorp_https[3449]: (zorp@zorp_host/virtual_https:15/http): thread exiting; zorp_https[3445]: (zorp@zorp_host/virtual_https:14/leftside): Shutdown channel; fd='18', mode='0' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl/server_downstream): Shutdown channel; fd='22', mode='1' zorp_https[3445]: (zorp@zorp_host/virtual_https:14/pssl): eofmask updated; old_mask='0001', eof_mask='0003' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http/server_upstream): Reading channel; fd='23', count='0' zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): exiting keep-alive loop; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling __shutdown__() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling shutDown() event; zorp_https[3447]: (zorp@zorp_host/virtual_https:14/http): calling __destroy__() event; ...destroy... -- Daniel VASARHELYI

2 3

syslog-ng fifo-ba logol
by Daniel VASARHELYI 25 Sep '03

25 Sep '03

Csa. Statot gondoltam kesziteni a levelezesrol (delivered, bounced stb levelek) rrdtool-lal. Az elkepzeles az, hogy mkfifo-val letrehozok egy file-t, abba beiratom a syslog-ng-vel a mail.info-t, es egy 5 (1?) percenkent futo cron jobbal kiszedem es parsolom. Kerdes, hogy viselne a syslog-ng a fifo-ba logolast? Koszi, asd -- Daniel VASARHELYI

4 5

gpl zorp apt hiba :)
by Daniel VASARHELYI 23 Sep '03

23 Sep '03

a 2.0test agban levo gpl zorp az apt.balabit.hu-n olyan glib-re (>=2.2.3) dependal, amit nem lehet elerni. asd -- Daniel VASARHELYI

2 1

2.0.5.10 forditas
by dragon 15 Sep '03

15 Sep '03

Hello Probalom leforditani a 2.0.5.10 es zorpot, zorplibll-2.2.0.0+20030808 libbel, de ezzel elszall: make[3]: Entering directory `/usr/src/zorp/zorp-2.0.5.10/lib' /bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/src/zorp/zorp-2.0.5.10/lib -I/usr/src/zorp/zorp-2.0.5.10 -I/usr/include/python2.2 -pthread -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -D_GNU_SOURCE -pthread -I/usr/local/include -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/src/zorp/zorp-2.0.5.10/lib -I/usr/src/zorp/zorp-2.0.5.10 -I/usr/include/python2.2 -pthread -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -D_GNU_SOURCE -pthread -I/usr/local/include -I/usr/include/glib-2.0 -I/usr/lib/glib-2.0/include -O2 -Wall -W -g -D_GNU_SOURCE -c proxy.c -fPIC -DPIC -o proxy.lo proxy.c: In function `z_proxy_stack_proxy': proxy.c:511: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:511: too few arguments to function `z_stream_new' proxy.c:515: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:515: too few arguments to function `z_stream_new' proxy.c: In function `z_stacked_proxy_new': proxy.c:630: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:630: too few arguments to function `z_stream_new' proxy.c:633: warning: passing arg 1 of `z_stream_new' makes pointer from integer without a cast proxy.c:633: too few arguments to function `z_stream_new' make[3]: *** [proxy.lo] Error 1 make[3]: Leaving directory `/usr/src/zorp/zorp-2.0.5.10/lib' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/src/zorp/zorp-2.0.5.10/lib' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/src/zorp/zorp-2.0.5.10' make: *** [all-recursive-am] Error 2 Mi lehet a gond? dragon

3 4

/private csak ssl-lel, http/1.1
by Daniel VASARHELYI 15 Sep '03

15 Sep '03

Hello mindenki, valtozatos feladatokat szereztem, es kis segitsege kellene... azt kene megcsinalni, hogy minden domain /private konyvtarat csak ssl-lel lehessen elerni. Fel is huztam egy zorpot, megcsinaltam az ssl-t, az ide vonatkozo konfig reszek: class VirtualHttp(HttpProxy): def config(self): HttpProxy.config(self) self.request["GET"] = (HTTP_REQ_POLICY, self.filterURL) self.request["POST"] = (HTTP_REQ_POLICY, self.filterURL) def filterURL(self, method, url, version): log("http.info", 3, "GET: \"%s\" \"%s\"" % (self.session.session_id, url)) if re.search("http://[^/]+/private.*", url): self.error_info = "This page (/private/) is not accessible in non-secure mode." log("http.info", 3, "GET: private") return HTTP_REQ_REJECT; return HTTP_REQ_ACCEPT; class VirtualHttpS(PsslProxy): def config(self): PsslProxy.config(self) self.stack_proxy = VirtualHttp Az a bajom, hogy ennek felig-meddig ganyolas szaga van, trukkos esetben elofordulhat, hogy http keresnel is https van a "url" valtozoban. Van erre ennel jobb megoldas? Pl valami valtozo beallitasa lehetne, de a VirtualHttpS.stack_proxy-ja egy memoriaban valo hivatkozas (ugysejtem), hogyan lehetne abban az objektumban egy valtozot (client_using_ssl, pl) beallitani, ha a VirtualHttp felett a VirtualHttpS van es nem a Listener... asd -- Daniel VASARHELYI

2 3

ftp proxy gond
by Gabor Halasz 11 Sep '03

11 Sep '03

6.770262 194.88.54.xxx -> 194.88.54.yyy FTP Request: USER anonymous 6.777091 194.88.54.yyy -> 194.88.54.xxx FTP Response: 230 Anonymous user logged in 6.777537 194.88.54.xxx -> 194.88.54.yyy FTP Request: PASS apt_get_ftp_2.1(a)debian.linux.user 6.779392 194.88.54.yyy -> 194.88.54.xxx FTP Response: 503 Login with USER first. Asszem egyértelmű, az ftp serverem anon user esetén nem vár a passwordre, ha mégis kap egyet, akkor nem figyel rá, viszont a zorp kidobja, amiben nem vagyok teljesen biztos, hogy jogosan teszi, hiszen 230-at küldött már a kliensnek, akkor tudnia kellene, hogy már authentikálta. Ez azt is jelenti, hogy ha egy aktív sessionban küldök egy extra pass parancsot, akkor kidob? A konfig idevágó része: class Ftp_C(FtpProxyAnonRO): def config(self): FtpProxyAnonRO.config(self) self.transparent_mode = 1 firewall:~# dpkg -l | grep zorp ii debconf 1.0.32-1zorpos Debian configuration management system ii iptables 1.2.8-zorpos3 IP packet filter administration tools for 2. ii libssl0.9.6 0.9.6j-1zorpos SSL shared libraries ii pptpd 1.1.2-1.4zorpo PoPToP Point to Point Tunneling Server ii zorp 1.4.3-1 An advanced stateful proxy firewall ii zorp-doc 2.0.3.4-1 Zorp documentation. ii zorp-lib 1.4.3-1 Low level library for zorp ii zorp-modules 1.4.3-1 Proxy modules shipped with Zorp -- Gabor HALASZ <halasz.g(a)freemail.hu>

2 1

syslog proxy
by narancs 11 Sep '03

11 Sep '03

Sziasztok! a dilemma a következő: tűzfal mögötti eszközök szeretnének loggolni egy loggyűjtő gépre. Lehetőségek: - syslog-ng van a tűzfalon és abban állítok be egy szabályt Előny: úgymond alkalmazás proxy, és a syslog-ng jól konfigolhatósága Hátrány: ha valamelyik gép DoS-eli a syslog démont a lokális loggolás is elpusztulhat. - zorp udp-plug Előny: nem kockáztatom a tűzfal logrendszerét Hátrány : nincs adatelemzés. Kérdés: 1. lehet-e syslog-ng-ből másik instance-t futtatni másik konfiggal? és nobody userként? 2. vagy tervezitek-e natív syslog proxy megírását a zorpba? köszönet

3 5