zorp-hu

Download

zorp-hu@lists.balabit.hu

May 2009

3 participants
2 discussions

zorp GPL nem indul
by Szilárd Szabó 29 May '09

29 May '09

Üdv zorpal szenvedek telepítettem debian 5_32bit a zorpot, csomagból. probléma: bármilyen minta szkriptet, policyt akarok indítani, nem indul a köv hibaüzenetekke. simple[9688]: (noname/nosession): Starting up; verbose_level='3', version='3.0.8' simple[9688]: (noname/nosession): Error parsing policy file; filename='/etc/zorp/policy/zorp.policy' simple[9688]: (noname/nosession): Error booting & parsing policy; simple[9688]: (noname/nosession): Error loading initial policy, exiting; simple[9688]: (Log thread): File "/etc/zorp/policy/zorp.policy", line 10#012 simple[9688]: (Log thread): InetZone("internet", "81.182.192.68/24",#012 simple[9688]: (Log thread): ^#012 simple[9688]: (Log thread): SyntaxError: invalid syntax#012 simple[9688]: Shutting down; version='3.0.8' zorpctl[9687]: Zorp exited immediately with non-zero exit status after starting up, exiting... minta policy: from Zorp.Core import * from Zorp.Http import * Zorp.firewall_name = 'zorp(a)example.net' InetZone("site-net", "192.168.10.0/24", outbound_services=["intra_http"], inbound_services=[]) InetZone("internet", "81.182.192.68/24", inbound_services=["*"], outbound_services=[]) def simple(): Service("intra_http", HttpProxy) Listener(SockAddrInet("192.168.1.1", 50080), "intra_http") instance.conf simple --policy /etc/zorp/policy/zorp.policy # # This file is sourced by zorpctl and contains default settings # for various parameters. # # $Id: zorpctl.conf,v 1.5 2004/05/07 17:59:20 bazsi Exp $ # # specifies whether --auto-restart is default AUTO_RESTART=1 # if zorp returns within this amount of time (specified as number of # seconds) it is taken as a bad restart AUTO_RESTART_TIME_THRESHOLD=60 # when the number of bad restarts reaches this number, zorp will not # automatically be restarted again, and a log message is printed to the # system log AUTO_RESTART_MAX_COUNT=3 # the number of seconds to wait before a restart is attempted AUTO_RESTART_DELAY=3 # The interval (in seconds) to check a stopping Zorp instance at. STOP_CHECK_DELAY=1 # The number of seconds to wait for a stopping Zorp instance STOP_CHECK_TIMEOUT=3 # the number of seconds to wait for Zorp startup in auto-restart mode, it is # assumed that if Zorp does not exit within this interval it is assumed to # have started up correctly. START_CHECK_TIMEOUT=3 # in no-auto-restart mode it is possible to derive whether Zorp successfully # started up or not, but do not wait for a single instance more than this interval. START_WAIT_TIMEOUT=60 # The minimal process limit PROCESS_LIMIT_MIN=256 # The extra processes to allocate limit for. PROCESS_LIMIT_RESERVE=64 # the value to be multiplied by the maximum number of threads to get the # fd limit value FD_LIMIT_THRESHOLD=64 # the minimal fd limit FD_LIMIT_MIN=1024 # automatically append this string to each Zorp command line, this was # renamed in Zorp 3.0.3, but the original APPEND_ARGS option still works. ZORP_APPEND_ARGS="" # arguments appended to the zorpctl instance specific options, such as # --enable-core ZORPCTL_APPEND_ARGS="" # whether to check /etc/zorp permissions CHECK_PERMS="1" CONFIG_DIR=/etc/zorp CONFIG_DIR_OWNER=root CONFIG_DIR_GROUP=zorp CONFIG_DIR_MODE=0750 # directory where Zorp stores its pidfiles PIDFILE_DIR=/var/run/zorp # set pidfile directory ownership according to the settings below (umask is # applied) PIDFILE_DIR_OWNER=root PIDFILE_DIR_GROUP=root PIDFILE_DIR_MODE=700 ameddig eljutottam: https://lists.balabit.hu/pipermail/zorp-hu/2007-February/002233.html import ExtensionClass -re nekem hibát dob: Python 2.5.2 (r252:60911, Jan 4 2009, 17:40:26) [GCC 4.3.2] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> import ExtensionClass Traceback (most recent call last): File "", line 1, in ImportError: No module named ExtensionClass >>> apt-get install python-extlass telepítve. valami ötlet? amúgy teljesen mindegy milyen minta scriptel próbálkozom, hibaüzenet ugyan az, csak a változók változnak. fájl elérési hely, annak tartalma. talán valamilyen osztály nem hívódik meg? zorp 3.0.8 verzió, python 2.5.2 találkozott már valaki ilyennel? _______________________________

3 3

3.0.8-0.3 DeprecationWarning + nem mukodes
by Kosa Attila 27 May '09

27 May '09

Hello! Etch, es a benne levo zorp. Indulaskor a kovetkezot nyomja a logba: Feb 5 00:50:18 fw zorp_https[32493]: (Log thread): /usr/lib/python2.4/whrandom.py:38: DeprecationWarning: the whrandom module is deprecated; please use the random module Feb 5 00:50:18 fw zorp_https[32493]: (Log thread): DeprecationWarning) A 2.6.22.9 verzioju kernelre sikerult felrakni a letoltheto patch-eket. Az iptables_tproxy modul tproxy_any=1 opcioval toltodik be. IP_TPROXY: Transparent proxy table initialized, version 4.0.6 IP_TPROXY: Copyright (c) 2002-2008 BalaBit IT Ltd. IP_TPROXY: tproxy_any = '1' Ket iptables szabaly peldanak: -A PRintra -p tcp -s PROXYSERVER --sport 1024: --dport 80 -j TPROXY --on-port 50080 -A PRintra -p tcp -s PROXYSERVER --sport 1024: --dport 443 -j TPROXY --on-port 60443 Az elso szabaly hatasara elindul a http proxy, a masodik hatasara semmi sem tortenik, meg plug proxy eseten sem. Ha sima redirect szabalyt csinalok (plusz masikat az input lancon), akkor elindul a plug proxy (es a https is), de mukodni akkor sem mukodik, mindenfele (lenyegtelen es nagyjabol ertelmetlen) hibauzeneteket dobal. A kerdes az, hogy vajon miert nem tortenik semmi, hogy lehetne debuggolni, hogy miert nem tortenik semmi, es a legfontosabb, hogy hogyan lehetne megjavitani. -- Udvozlettel Zsiga

3 13